feat: finish Today plans with inline estimates (Closes #635 )

Merge pull request 'Build my Today from ranked ready work' (#634 ) from timmy/633-build-my-today into main
feat: build a ready capacity-fit Today plan (Closes #633 )
2026-08-12 08:55:52 +00:00 · 2026-08-12 08:38:49 +00:00 · 2026-08-12 08:28:03 +00:00 · 2026-08-12 07:57:53 +00:00 · 2026-08-12 07:54:12 +00:00 · 2026-08-12 07:20:10 +00:00
53 changed files with 4133 additions and 429 deletions
@@ -24,13 +24,16 @@ For online delivery, the screenshot uploads before the comment is posted—to th
 failures keep both the typed comment and removable preview available for retry. Offline screenshot comments
 admit their text and image bytes to IndexedDB before confirmation, keep only bounded metadata in
 localStorage, and use checkpointed upload/comment identities so reconnect retries cannot duplicate
-either stage. The mobile **New issue**
-sheet accepts the same image formats and stores the screenshot with its account-bound
-outbox capture. Durable admission writes the complete screenshot capture as a binary Blob to IndexedDB
-before confirmation; localStorage keeps only bounded attachment metadata, avoiding base64
-quota pressure and synchronous multi-megabyte writes. Online and background delivery send the
-original bytes as multipart form data, avoiding the roughly 33% base64 wire expansion. Existing
-queued base64 screenshot payloads remain readable and are converted only at delivery time.
+either stage. The mobile **New issue** capture-first stage accepts the same image formats before a
+repository is chosen. **Save to Drafts** durably writes the optimized Blob to IndexedDB before
+confirmation, keeps only account-bound attachment metadata in localStorage, and restores the exact
+preview when the operator later chooses a repository. The source Draft remains available until its
+screenshot has safely transferred to the issue outbox; discard and bounded pruning remove the Blob.
+Repository-aware durable admission likewise stores the screenshot with its account-bound outbox
+capture, avoiding base64 quota pressure and synchronous multi-megabyte writes. Online and background
+delivery send the original bytes as multipart form data, avoiding the roughly 33% base64 wire
+expansion. Existing queued base64 screenshot payloads remain readable and are converted only at
+delivery time.
 Delivery creates the issue exactly once, then uploads and comments with
 the image; after a partial failure, retry resumes with the confirmed issue instead of
 creating a duplicate.
@@ -67,7 +70,7 @@ and an active Today session shows the current estimate plus estimated remaining
 first previews its Gitea dependencies: unresolved blockers are listed with links and require the
 explicit **Add blocked item anyway** override, while an unavailable dependency lookup is reported
 as unknown rather than unblocked. Starting a Today work session also
-stores an account-bound checkpoint on the current device and starts an account-bound actual-time timer for the exact item. The sticky mobile session controls show elapsed time beside the estimate and let the operator pause or resume it. Switching items preserves each item's elapsed value, while wall-clock checkpoints keep a running timer accurate through app backgrounding, reloads, and installed-app restarts without double counting. **End session** stops accumulation but retains measured time with the private device data. The recap identifies each item by title and repository, reports per-item estimate variance, and **Save recap & adjust plan** continues into the current ordered Today plan. Actual time appears there as an explicit estimate recommendation; it changes only the planning draft until the operator chooses **Save plan** or **Save & start**. The recap and any corrected actual minutes are also saved as an account-bound device draft: an offline save failure can survive a reload and retry with the same idempotent session ID, while another account cannot view it. The draft and timer are cleared only after the account confirms the recap.
+stores an account-bound checkpoint on the current device and starts an account-bound actual-time timer for the exact item. The sticky mobile session controls show elapsed time beside the estimate and let the operator pause or resume it. Switching items preserves each item's elapsed value, while wall-clock checkpoints keep a running timer accurate through app backgrounding, reloads, and installed-app restarts without double counting. **End session** stops accumulation but retains measured time with the private device data. The recap identifies each item by title and repository, reports per-item estimate variance, and **Save recap & adjust plan** continues into the current ordered Today plan without changing Gitea time entries. Eligible non-zero rows also offer an unchecked **Log Xm to Gitea** control. **Log selected time to Gitea** saves the recap and sends only those corrected durations to each canonical issue or pull request; confirmed account-scoped receipts prevent a completed row from being posted again, while definite failures retain the draft for an explicit retry. If the upstream response is lost after sending, Stackchain marks the row for verification in Gitea instead of risking an automatic duplicate. Actual time appears in planning as an explicit estimate recommendation; it changes only the planning draft until the operator chooses **Save plan** or **Save & start**. After the recap is confirmed, this recommendation handoff remains account-bound on the device through reloads, app restarts, planner cancellation, and failed plan admission. Opening **Plan Today** resumes it without reposting the recap; a successful plan save clears it, while **Discard recap feedback** removes only the handoff and leaves recap history unchanged. The recap and any corrected actual minutes are also saved as an account-bound device draft: an offline save failure can survive a reload and retry with the same idempotent session ID, while another account cannot view it. The draft and timer are cleared only after the account confirms the recap.
 After a reload or installed-app
 restart, **Resume Today** reopens the saved item (or the next surviving item if work changed);
 **Comment & next** on that current issue or pull request posts the handoff online or admits it
@@ -163,11 +166,12 @@ export GITEA_TOKEN='<read-notification-and-issue-write-token>'
 export STACKCHAIN_DASHBOARD_AUTH_MODE='operator'
 export STACKCHAIN_DASHBOARD_ACCESS_TOKEN='<operator-sign-in-secret>'
 export STACKCHAIN_DASHBOARD_SESSION_SECRET='<independent-cookie-signing-secret>'
+export STACKCHAIN_DASHBOARD_PUBLIC_ORIGIN='https://forge.example.com'
 # Optional; defaults to STACKCHAIN_STATE_DIR/sessions.sqlite3.
 export STACKCHAIN_SESSION_DB='/var/lib/stackchain-dashboard/sessions.sqlite3'
 # Optional; defaults to STACKCHAIN_STATE_DIR/security-events.sqlite3.
 export STACKCHAIN_SECURITY_EVENT_DB='/var/lib/stackchain-dashboard/security-events.sqlite3'
-# Recommended behind a proxy; WebAuthn assertions must match these public values.
+# Optional compatibility overrides; defaults derive from the required public origin.
 export STACKCHAIN_PASSKEY_RP_ID='forge.example.com'
 export STACKCHAIN_PASSKEY_ORIGIN='https://forge.example.com'
 # Optional; defaults to eight hours.
@@ -6,4 +6,5 @@ def explicit_local_dashboard_auth_mode(monkeypatch):
    """Keep tests intentional now that deployed authentication fails closed."""
    monkeypatch.setenv("STACKCHAIN_DASHBOARD_AUTH_MODE", "insecure-local")
    monkeypatch.delenv("STACKCHAIN_DASHBOARD_ACCESS_TOKEN", raising=False)
-    monkeypatch.delenv("STACKCHAIN_DASHBOARD_SESSION_SECRET", raising=False)
+    monkeypatch.delenv("STACKCHAIN_DASHBOARD_SESSION_SECRET", raising=False)
+    monkeypatch.setenv("STACKCHAIN_DASHBOARD_PUBLIC_ORIGIN", "https://test")
@@ -55,6 +55,20 @@ function createIndexedDbTransaction(indexedDB, dbName = 'stackchain-background-o
  return transact;
 }

+function createUnfiledAttachmentStore(indexedDB = globalThis.indexedDB) {
+  const transact = createIndexedDbTransaction(indexedDB, 'stackchain-unfiled-captures-v1');
+  return {
+    put: (id, value) => transact(records => records.put({id, ...value})),
+    get: id => transact(async records => {
+      const value = await records.get(id);
+      if (!value) return null;
+      const {id: _id, ...attachment} = value;
+      return attachment;
+    }),
+    delete: id => transact(records => records.delete(id)),
+  };
+}
+
 function createIssueSyncStore({
  transaction, indexedDB = globalThis.indexedDB, now = () => Date.now(), claimMs = 30000,
  createToken = () => globalThis.crypto?.randomUUID?.() ||
@@ -798,4 +812,5 @@ if (typeof module !== 'undefined' && module.exports) module.exports = createBack
 if (typeof globalThis !== 'undefined') {
  globalThis.createBackgroundIssueSync = createBackgroundIssueSync;
  globalThis.createIssueSyncStore = createIssueSyncStore;
+  globalThis.createUnfiledAttachmentStore = createUnfiledAttachmentStore;
 }
@@ -10,6 +10,14 @@ header { position: sticky; top: 0; z-index: 20; padding: 12px 16px; display:flex
 .app-menu > summary { display:none; }
 .app-menu-panel { display:flex; gap:10px; align-items:center; flex-wrap:wrap; }
 button { background: linear-gradient(180deg,#1f3a5f,#15324d); border:1px solid #2a496e; color:#e5e7eb; padding:8px 12px; border-radius:10px; cursor:pointer; }
+.draft-capacity-sheet { position:fixed; inset:0; z-index:96; display:flex; align-items:flex-end; justify-content:center; background:rgba(5,12,21,.82); backdrop-filter:blur(4px); }
+.draft-capacity-sheet[hidden] { display:none; }
+.draft-capacity-panel { box-sizing:border-box; width:min(620px,100%); max-height:100dvh; overflow:auto; overflow-x:hidden; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); border:1px solid #b45309; border-radius:18px 18px 0 0; background:#0b1526; }
+.draft-capacity-panel h3 { margin:.25rem 0; overflow-wrap:anywhere; }
+.draft-capacity-oldest { margin:14px 0; padding:12px; border:1px solid #31577f; border-radius:12px; overflow-wrap:anywhere; }
+.draft-capacity-actions { display:grid; grid-template-columns:1fr 1fr; gap:8px; }
+.draft-capacity-actions button { min-height:44px; width:100%; }
+#replace-oldest-draft { grid-column:1 / -1; border-color:#b45309; }
 #sign-out-all { min-height:44px; }
 .active-devices-sheet { position:fixed; inset:0; z-index:80; display:flex; justify-content:flex-end; background:rgba(5,12,21,.72); backdrop-filter:blur(4px); }
 .active-devices-sheet[hidden] { display:none; }
@@ -120,13 +128,24 @@ textarea { resize: vertical; min-height: 120px; }
 .plan-today-panel { box-sizing:border-box; width:min(620px,100%); height:100%; overflow:auto; overflow-x:hidden; padding:18px; background:#0b1526; border-left:1px solid #2a496e; }
 .plan-today-header { display:flex; align-items:flex-start; justify-content:space-between; gap:12px; }
 .plan-today-header h2, .plan-today-header p { margin-top:0; }
-.plan-today-header button, .plan-today-list button, .plan-today-candidates button { min-height:44px; }
+.plan-today-header button { min-width:44px; min-height:44px; }
+.plan-today-list button, .plan-today-candidates button { min-height:44px; }
 .plan-today-capacity { position:sticky; top:0; z-index:2; margin:8px 0; padding:10px 12px; border:1px solid #31577f; border-radius:10px; background:#10233a; font-weight:700; }
 .plan-today-available { display:flex; align-items:center; justify-content:space-between; gap:12px; margin:10px 0; font-weight:700; }
 .plan-today-available span { display:flex; align-items:center; gap:6px; }
 .plan-today-available input, .plan-today-estimate { box-sizing:border-box; min-height:44px; width:108px; }
+.plan-today-build { min-height:44px; width:100%; font-weight:700; }
+.plan-today-build-status { min-height:1.4em; margin-top:6px; color:#bfdbfe; }
+.plan-today-estimates { margin:12px 0; padding:12px; border:1px solid #31577f; border-radius:12px; background:#10233a; }
+.plan-today-estimates h3, .plan-today-estimates p { margin-top:0; }
+.plan-today-estimates input { min-height:44px; width:108px; box-sizing:border-box; }
+.plan-today-estimate-row { display:grid; grid-template-columns:minmax(0,1fr) auto; align-items:center; gap:10px; padding:8px 0; border-top:1px solid #29496d; }
+.plan-today-estimate-row label { display:flex; align-items:center; gap:6px; }
+.plan-today-skipped { display:grid; gap:6px; margin:8px 0; }
+.plan-today-skipped-item { padding:8px 10px; border-left:3px solid #b45309; background:#261a13; overflow-wrap:anywhere; }
 .plan-today-estimate-wrap { display:flex; align-items:center; gap:6px; margin-top:8px; }
 .plan-today-error { min-height:1.4em; color:#fca5a5; }
+.discard-recap-replan { min-height:44px; margin-bottom:8px; }
 .plan-today-list, .plan-today-candidates { display:grid; gap:8px; }
 .plan-today-item { display:grid; grid-template-columns:minmax(0,1fr) auto; gap:8px; align-items:center; padding:10px; border:1px solid #1f3a5f; border-radius:12px; background:#0f1d33; }
 .plan-today-item-copy { min-width:0; overflow-wrap:anywhere; }
@@ -137,6 +156,12 @@ textarea { resize: vertical; min-height: 120px; }
 .plan-preview-actions button { min-height:44px; }
 .plan-today-actions { position:sticky; bottom:0; display:grid; grid-template-columns:1fr 1fr; gap:8px; margin:16px -6px -6px; padding:12px 6px; padding-bottom:calc(12px + env(safe-area-inset-bottom)); background:rgba(11,21,38,.98); border-top:1px solid #2a496e; }
 .plan-today-actions button { min-height:44px; width:100%; }
+.today-interruption-sheet { position:fixed; inset:0; z-index:92; display:flex; align-items:flex-end; justify-content:center; background:rgba(5,12,21,.82); backdrop-filter:blur(4px); }
+.today-interruption-sheet[hidden] { display:none; }
+.today-interruption-panel { box-sizing:border-box; width:min(620px,100%); max-height:100dvh; overflow:auto; overflow-x:hidden; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); border:1px solid #b45309; border-radius:18px 18px 0 0; background:#0b1526; }
+.today-interruption-panel h2 { margin:.25rem 0; overflow-wrap:anywhere; }
+.today-interruption-actions { display:grid; grid-template-columns:1fr 1fr; gap:8px; margin-top:16px; }
+.today-interruption-actions button { min-height:44px; width:100%; }
 .today-recap-sheet { position:fixed; inset:0; z-index:88; display:flex; align-items:flex-end; justify-content:center; background:rgba(5,12,21,.82); backdrop-filter:blur(4px); }
 .today-recap-sheet[hidden] { display:none; }
 .today-recap-panel { box-sizing:border-box; width:min(620px,100%); max-height:100%; overflow:auto; overflow-x:hidden; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); border:1px solid #2a496e; border-radius:18px 18px 0 0; background:#0b1526; }
@@ -149,10 +174,15 @@ textarea { resize: vertical; min-height: 120px; }
 .today-recap-row input { width:6rem; min-height:44px; }
 .today-recap-context { display:block; overflow-wrap:anywhere; }
 .today-recap-variance { grid-column:1 / -1; color:#bfdbfe; font-weight:700; }
+.today-recap-log { grid-column:1 / -1; display:flex; align-items:center; gap:8px; min-height:44px; }
+.today-recap-log input { width:24px; min-height:24px; }
+.today-recap-log-success { color:#86efac; font-weight:700; }
+.today-recap-log-verify { color:#fde68a; font-weight:700; }
 .today-recap-totals { margin:12px 0; padding:12px; border-radius:10px; background:#10233d; font-weight:700; }
 .today-recap-actions { position:sticky; bottom:0; display:grid; grid-template-columns:1fr 1fr; gap:8px; margin:16px -6px -6px; padding:12px 6px; padding-bottom:calc(12px + env(safe-area-inset-bottom)); background:rgba(11,21,38,.98); border-top:1px solid #2a496e; }
 .today-recap-actions button { min-height:44px; width:100%; }
@media (max-width:420px) {
+  .today-interruption-actions { grid-template-columns:1fr; }
  .today-recap-actions { grid-template-columns:1fr; }
  .today-recap-row { grid-template-columns:1fr; }
  .today-recap-row input { width:min(100%,8rem); }
@@ -176,7 +206,8 @@ textarea { resize: vertical; min-height: 120px; }
 .milestone-lane { display:flex; align-items:center; gap:8px; min-width:min(100%,260px); }
 .work-milestone-filter { min-width:180px; flex:1; padding:8px; border-radius:8px; border:1px solid #1f3a5f; background:#0b1526; color:var(--text); }
 .my-work-list { display:grid; grid-template-columns:repeat(auto-fit,minmax(260px,1fr)); gap:10px; }
-.draft-card { display:flex; flex-direction:column; gap:8px; min-width:0; }
+.draft-card { display:flex; flex-direction:column; gap:8px; min-width:0; scroll-margin-bottom:calc(76px + env(safe-area-inset-bottom)); }
+.draft-card:focus-visible { outline:3px solid #60a5fa; outline-offset:3px; border-color:#93c5fd; }
 .draft-preview { color:var(--muted); overflow-wrap:anywhere; }
 .draft-actions { display:grid; grid-template-columns:repeat(auto-fit,minmax(120px,1fr)); gap:8px; }
 .draft-actions button { min-height:44px; width:100%; }
@@ -189,6 +220,10 @@ textarea { resize: vertical; min-height: 120px; }
 .create-issue-actions { display:grid; grid-template-columns:repeat(auto-fit,minmax(140px,1fr)); gap:8px; padding-bottom:env(safe-area-inset-bottom); }
 .create-issue-actions button { min-height:44px; max-width:100%; width:100%; }
 .create-issue-actions #create-issue-status { grid-column:1/-1; }
+.draft-filing-session { position:sticky; top:0; z-index:2; display:grid; gap:6px; margin-bottom:12px; padding:10px; padding-bottom:calc(10px + env(safe-area-inset-bottom)); border:1px solid #31577f; border-radius:12px; background:rgba(11,21,38,.98); }
+.draft-filing-session[hidden] { display:none; }
+.draft-filing-session-actions { display:grid; grid-template-columns:1fr 1fr; gap:8px; }
+.draft-filing-session-actions button { min-height:44px; width:100%; }
 .my-work-card { min-height: 44px; display:grid; gap:8px; padding:12px; border:1px solid #1f3a5f; border-radius:12px; background:#0f1d33; color:var(--text); }
 .my-work-card-main { display:block; width:100%; color:var(--text); text-align:left; font:inherit; background:transparent; border:0; padding:0; }
 .my-work-card-main.review-trigger { width:100%; text-align:left; font:inherit; }
@@ -436,8 +471,12 @@ textarea { resize: vertical; min-height: 120px; }
 .create-issue-sheet.open { display:flex; }
 .create-issue-panel { width:min(560px,100%); height:100dvh; overflow:auto; overflow-x:hidden; display:grid; align-content:start; gap:12px; padding:18px; padding-bottom:calc(18px + env(safe-area-inset-bottom)); background:#0b1526; border-left:1px solid #2a496e; }
 .create-issue-header { display:flex; align-items:center; justify-content:space-between; gap:10px; }
-.create-issue-header button, .create-issue-actions button { min-height:44px; }
+.create-issue-header button, .create-issue-actions button, .create-issue-capture-actions button { min-height:44px; }
 .create-issue-form { display:grid; gap:12px; }
+.create-issue-capture-actions { position:sticky; bottom:0; display:grid; grid-template-columns:1fr 1fr; gap:8px; padding:10px 0; padding-bottom:calc(10px + env(safe-area-inset-bottom)); background:#0b1526; }
+.create-issue-capture-actions[hidden] { display:none; }
+.create-issue-filing { display:grid; gap:12px; min-width:0; }
+.create-issue-filing[hidden] { display:none; }
 .create-issue-attachment { display:grid; gap:8px; min-width:0; }
 .create-issue-repository-more { min-height:44px; width:100%; }
 .create-issue-repository-picker { min-width:0; display:grid; gap:8px; }
@@ -491,11 +530,17 @@ textarea { resize: vertical; min-height: 120px; }
 .pull-retry { min-height:44px; width:100%; margin-top:10px; }
 .mobile-task-dock { display:none; }
 .mobile-task-dock[hidden] { display:none; }
+.mobile-today-hud { display:none; }
+.mobile-today-hud[hidden], .mobile-today-hud[data-overlay-hidden="true"] { display:none; }
 .mobile-task-action { min-width:0; min-height:44px; padding:6px 2px; border:0; border-radius:8px; background:transparent; display:grid; place-items:center; gap:2px; font-size:12px; }
+.mobile-task-action[hidden] { display:none; }
 .mobile-task-action[aria-current="page"] { color:#bfdbfe; background:#17365a; outline:1px solid #31577f; }
 .mobile-task-count { min-width:18px; min-height:18px; padding:1px 5px; border-radius:999px; background:#31577f; font-size:11px; line-height:16px; }
+.attention-interruption:not([hidden]) { max-width:100%; display:flex; align-items:center; justify-content:space-between; gap:10px; margin:0 0 12px; padding:10px 12px; border:1px solid #31577f; border-radius:10px; background:#102641; }
+.attention-interruption button { min-height:44px; flex:0 0 auto; }
@media (max-width: 600px) {
  body { padding-bottom:calc(66px + env(safe-area-inset-bottom)); }
+  body.mobile-today-active { padding-bottom:calc(166px + env(safe-area-inset-bottom)); }
  header { min-height:56px; max-height:64px; padding:6px 10px; align-items:center; gap:8px; background:rgba(11,21,38,.98); }
  .app-brand .muted, #clock { display:none; }
  .app-live-status { margin-left:auto; }
@@ -510,6 +555,7 @@ textarea { resize: vertical; min-height: 120px; }
  .device-setup-action { width:100%; }
  .device-readiness-card:not([hidden]) { display:grid; gap:12px; margin-left:max(0px,env(safe-area-inset-left)); margin-right:max(0px,env(safe-area-inset-right)); }
  .my-work { margin:0; }
+  .attention-interruption:not([hidden]) { position:sticky; top:64px; z-index:6; margin-inline:max(0px,env(safe-area-inset-left)) max(0px,env(safe-area-inset-right)); }
  .my-work-header { align-items:flex-start; }
  .my-work-actions { width:100%; flex-wrap:nowrap; }
  .my-work-actions button { min-height:44px; flex:1 1 0; padding-inline:6px; }
@@ -554,6 +600,23 @@ textarea { resize: vertical; min-height: 120px; }
  .composer-keyboard-active .pull-comment-composer,
  .composer-keyboard-active .update-reply { scroll-margin-block:12px; padding-bottom:env(safe-area-inset-bottom); }
  .mobile-task-dock { position:fixed; inset:auto 0 0; z-index:45; display:grid; grid-template-columns:repeat(5,minmax(0,1fr)); gap:2px; padding:6px 8px; padding-bottom:env(safe-area-inset-bottom); border-top:1px solid #2a496e; background:rgba(11,21,38,.98); backdrop-filter:blur(12px); }
+  .mobile-queue-sheet { width:100%; max-width:none; margin:auto 0 0; padding:0; border:0; border-radius:18px 18px 0 0; color:var(--text); background:#102641; }
+  .mobile-queue-sheet::backdrop { background:rgba(3,9,18,.7); }
+  .mobile-queue-panel { padding:16px; padding-bottom:calc(16px + env(safe-area-inset-bottom)); }
+  .mobile-queue-panel header { display:flex; align-items:center; justify-content:space-between; gap:12px; }
+  .mobile-queue-panel h2 { margin:0; }
+  .mobile-queue-list { display:grid; gap:8px; margin-top:12px; }
+  .mobile-queue-list button { display:flex; align-items:center; justify-content:space-between; gap:12px; min-height:56px; width:100%; padding:10px 14px; text-align:left; }
+  .mobile-queue-list button > span:first-child { display:grid; gap:2px; }
+  .mobile-queue-list small { color:var(--muted); }
+  .mobile-queue-list [data-mobile-queue-count] { min-width:28px; padding:3px 8px; border-radius:999px; text-align:center; background:#1d426d; }
+  .mobile-today-hud { position:fixed; left:8px; right:8px; bottom:calc(56px + env(safe-area-inset-bottom)); z-index:44; display:grid; grid-template-columns:minmax(0,1fr) minmax(112px,auto); grid-template-areas:"summary complete" "progress toggle"; gap:4px 8px; max-width:100%; padding:8px; border:1px solid #31577f; border-radius:12px 12px 0 0; background:rgba(16,38,65,.98); box-shadow:0 -8px 24px rgba(0,0,0,.28); }
+  .mobile-today-summary { grid-area:summary; min-width:0; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; text-align:left; font-weight:700; }
+  .mobile-today-hud [data-work-session-progress] { grid-area:progress; min-width:0; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
+  .mobile-today-hud [data-mobile-today-complete] { grid-area:complete; }
+  .mobile-today-hud [data-mobile-today-toggle] { grid-area:toggle; }
+  .mobile-today-hud button { min-height:44px; max-width:100%; }
+  .mobile-today-hud [data-work-session-adjust-plan] { grid-column:1 / -1; }
 }
 .obi { width:14px; height:14px; background: url('data:image/svg+xml;utf8,<svg xmlns=%22http://www.w3.org/2000/svg%22 viewBox=%220 0 24 24%22><rect width=%2224%22 height=%2224%22 rx=%226%22 fill=%22%230b1526%22/><circle cx=%2212%22 cy=%2212%22 r=%226%22 fill=%22%2360a5fa%22/></svg>') center/contain no-repeat; display:inline-block; }
 .footer { padding: 12px; text-align: center; color:#4e6b8a; font-size:12px; }
@@ -44,10 +44,22 @@
    Array.from(document.querySelectorAll('[data-mobile-task]')).map(button => [button.dataset.mobileTask, button])
  );
  const mobileTaskOverlays = Array.from(document.querySelectorAll('[role="dialog"], #whiteboard-modal, #markdown-modal'));
+  const attentionInterruption = qs('#attention-interruption');
+  function renderAttentionInterruption() {
+    const pending = timer.attentionInterruption();
+    attentionInterruption.hidden = !pending;
+    return pending;
+  }
  function openMobileWorkFallback() {
-    const counts = countMyWork(activeMyWork);
-    const filter = counts.attention ? 'attention' : 'all';
-    qs('[data-work-filter="' + filter + '"]').click();
+    qs('[data-work-filter="all"]').click();
+    qs('#my-work').scrollIntoView({block:'start'});
+    qs('#my-work').focus();
+  }
+  function openMobileQueue(name) {
+    if (name === 'attention' && workSession.checkpointed()) timer.beginAttention();
+    renderAttentionInterruption();
+    timerView.render();
+    qs('[data-work-filter="' + name + '"]').click();
    qs('#my-work').scrollIntoView({block:'start'});
    qs('#my-work').focus();
  }
@@ -55,23 +67,35 @@
    isTodayActive: () => workSession.checkpointed(),
    isTodayResumable: () => workSession.resumable(),
    getTodayCount: () => todayMyWork.length,
+    getEligibleCount: () => activeMyWork.length,
    continueToday: continueTodaySession,
    resumeToday: resumeTodaySession,
    startToday: startTodaySession,
+    planToday: () => openPlanToday(mobileTaskButtons.work),
    openFallback: openMobileWorkFallback,
  });
  const mobileTaskDock = createMobileTaskDock({
    nav: qs('#mobile-task-dock'),
+    sessionHud: qs('[data-mobile-today-hud]'),
    buttons: mobileTaskButtons,
    workLabel: qs('#mobile-work-label'),
-    attentionBadge: qs('#mobile-attention-count'),
+    queueSheet: qs('#mobile-queue-sheet'),
+    queueClose: qs('#close-mobile-queues'),
+    queueRows: Object.fromEntries(
+      Array.from(document.querySelectorAll('[data-mobile-queue]')).map(button => [button.dataset.mobileQueue, button])
+    ),
+    queueCounts: Object.fromEntries(
+      Array.from(document.querySelectorAll('[data-mobile-queue-count]')).map(element => [element.dataset.mobileQueueCount, element])
+    ),
+    queueBadge: qs('#mobile-queue-count'),
+    onSelectQueue: openMobileQueue,
    overlays: mobileTaskOverlays,
    actions: {
      work: () => mobileWorkEntry.open(),
      find: () => qs('#find-work').click(),
      new: () => qs('#new-issue').click(),
      search: () => qs('#open-palette').click(),
-      drafts: () => qs('[data-work-filter="draft"]').click(),
+      queues: () => {},
    },
    observe(callback, overlays) {
      const observer = new MutationObserver(callback);
@@ -80,14 +104,6 @@
    },
  });
  mobileTaskDock.start();
-  const sourceDraftCount = qs('[data-work-count="draft"]');
-  const draftCount = qs('#mobile-draft-count');
-  function syncMobileDraftCount() {
-    draftCount.textContent = sourceDraftCount.textContent;
-    draftCount.setAttribute('aria-label', sourceDraftCount.textContent + ' drafts');
-  }
-  new MutationObserver(syncMobileDraftCount).observe(sourceDraftCount, {childList:true, characterData:true, subtree:true});
-  syncMobileDraftCount();
  let liveMode = true;
  let offlineWorkMode = false;
  const WORK_FILTER_KEY = 'stackchain.my-work-filter.v1';
@@ -151,7 +167,9 @@
  let activeMyWork = [];
  let laterMyWork = [];
  let todayMyWork = [];
+  let rolloverReviewPlan = null;
  const outboxCoordinator = createOutboxCoordinator({ storage: localStorage });
+  const todayRollover = createTodayRollover();
  const todayWork = createTodayWork({
    storage: localStorage,
    getLogin: () => planningOwnerLogin,
@@ -172,6 +190,20 @@
        capacity_minutes: plan.capacity_minutes ?? null,
        estimates: plan.estimates || {},
      });
+      const reviewState = todayRollover.reviewState(plan);
+      if (!['stale', 'legacy'].includes(reviewState)) {
+        rolloverReviewPlan = null;
+        qs('#plan-today').textContent = 'Plan Today';
+        return;
+      }
+      rolloverReviewPlan = plan;
+      qs('#plan-today').textContent = 'Review new day';
+      qs('#my-work-action-status').textContent = 'Review yesterday’s unfinished work before starting today.';
+      const marker = `stackchain.today-rollover-reviewed.v1.${encodeURIComponent(planningOwnerLogin)}.${todayRollover.localDate()}`;
+      if (!localStorage.getItem(marker)) {
+        localStorage.setItem(marker, '1');
+        setTimeout(() => openPlanToday(qs('#plan-today')), 0);
+      }
    },
    onStatus: (state, detail = {}) => {
      const status = qs('#today-sync-status');
@@ -219,6 +251,8 @@
  });
  laterSync.startLifecycle({ window, document });
  document.addEventListener('visibilitychange', () => {
+    if (document.hidden) interruptionPrompt.background();
+    else interruptionPrompt.foreground();
    if (!document.hidden) refreshMyWorkView();
  });

@@ -366,11 +400,20 @@
    loadMilestones: item => issueController.loadMilestones(item),
  });
  let issueCapture = null;
+  const unfiledAttachmentStore = 'indexedDB' in window ? createUnfiledAttachmentStore() : null;
  const unfiledCaptures = createUnfiledCaptures({
    storage: localStorage,
+    attachmentStore: unfiledAttachmentStore,
    getCaptureLogin: () => String(lastContextSnapshot?.user?.login || '').trim(),
    getCurrentLogin: () => activeFlushLogin,
  });
+  const dFS = createDraftFilingSession({list:()=>unfiledCaptures.list().filter(item=>!item.quarantined)});
+  dFS.attach(qs, {
+    captures:unfiledCaptures, issueCapture, attachment:createIssueAttachmentController,
+    getLogin:()=>activeFlushLogin, setResumedId:id=>{ rUC = id; },
+    openSheet:openCreateIssueSheet, setFilingMode:setIssueFilingMode,
+  });
+  let rUC = '';
  let backgroundIssueSync = null;
  if ('indexedDB' in window) {
    const backgroundIssueStore = createIssueSyncStore();
@@ -934,6 +977,43 @@
    isActive: () => workSession.checkpointed(),
    queryAll: s => document.querySelectorAll(s),
    formatEstimate: formatPlanMinutes,
+    getItem: identity => [...todayMyWork, ...activeMyWork].find(item => todayWork.identity(item) === identity),
+    onReopen: identity => {
+      selectTodayWork();
+      workSession.reopen(todayMyWork.find(item => todayWork.identity(item) === identity));
+    },
+    onComplete: identity => {
+      const item = todayMyWork.find(entry => todayWork.identity(entry) === identity);
+      return completeTodayItem(item);
+    },
+  });
+  renderAttentionInterruption();
+  qs('#return-to-today').addEventListener('click', () => {
+    const returned = timer.returnFromAttention();
+    renderAttentionInterruption();
+    if (!returned) return;
+    selectTodayWork();
+    const item = todayMyWork.find(entry => todayWork.identity(entry) === returned.identity);
+    if (item) workSession.reopen(item);
+    else continueTodaySession();
+    timerView.render();
+  });
+  const interruptionPrompt = createTodayInterruptionPrompt({
+    timer,
+    sheet: qs('#today-interruption-sheet'),
+    description: qs('#today-interruption-description'),
+    getItemLabel: identity => {
+      const item = [...todayMyWork, ...activeMyWork].find(entry => todayWork.identity(entry) === identity);
+      return item?.title || '';
+    },
+    onResolved: () => timerView.render(),
+  });
+  window.addEventListener('pagehide', () => interruptionPrompt.background());
+  interruptionPrompt.restore();
+  document.querySelectorAll('[data-today-interruption]').forEach(button => {
+    button.addEventListener('click', () =>
+      interruptionPrompt.resolve(button.dataset.todayInterruption)
+    );
  });
  const todayRecapView = setupTodayRecap(
    timer, timerView, todayWork, api, qs, escapeHtml, closeOpenWorkSheets, updateWorkSessionActions,
@@ -958,7 +1038,8 @@
    qs('#resume-today-session').hidden = active || !todayMyWork.length || !workSession.resumable();
    qs('#end-today-session').hidden = !active;
    updateDetailDeferLabels(active);
-    mobileTaskDock.updateWork(mobileWorkEntry.mode(), countMyWork(activeMyWork).attention);
+    mobileTaskDock.updateWork(mobileWorkEntry.mode());
+    mobileTaskDock.updateAttention(countMyWork(activeMyWork).attention);
  }

  const workSession = createWorkSession({
@@ -1313,6 +1394,24 @@
      formatPlanMinutes(state.planned_minutes) + ' · ' + capacityText +
      (state.unestimated_count ? ' · ' + state.unestimated_count + ' unestimated' : '');
    qs('#plan-today-available').value = state.capacity_minutes || '';
+    const build = state.build;
+    qs('#plan-today-build-status').textContent = build ?
+      ('Built ' + build.selected.length + ' ready ' + (build.selected.length === 1 ? 'item' : 'items') +
+        (build.skipped.length ? ' · Skipped ' + build.skipped.length + ' blocked or unverified' : '') +
+        (build.needs_estimate.length ? ' · ' + build.needs_estimate.length + ' need estimates' : '')) : '';
+    const estimateSection = qs('#plan-today-estimates');
+    estimateSection.hidden = !build?.needs_estimate.length;
+    qs('#plan-today-estimate-list').innerHTML = (build?.needs_estimate || []).map(id => {
+      const item = planToday.item(id);
+      const key = escapeHtml(item?.key || ((item?.repository || '') + '#' + (item?.number || '')));
+      return '<div class="plan-today-estimate-row"><div><span class="small">' + key + '</span><strong class="my-work-card-title">' +
+        escapeHtml(item?.title || 'Untitled work') + '</strong></div><label class="small"><input type="number" inputmode="numeric" min="5" max="1440" step="5" data-plan-missing-estimate="' +
+        escAttr(id) + '" aria-label="Estimate for ' + escAttr(item?.title || key) + ' in minutes" /> min</label></div>';
+    }).join('');
+    qs('#plan-today-skipped').innerHTML = (build?.skipped || []).map(entry =>
+      '<div class="small plan-today-skipped-item"><strong>' + escapeHtml(planToday.item(entry.id)?.title || entry.id) +
+      '</strong> · ' + escapeHtml(entry.reason) + '</div>'
+    ).join('');
    qs('#plan-today-list').innerHTML = state.ids.length ? state.ids.map((id, index) =>
      planTodayItemMarkup(planToday.item(id), true, index)
    ).join('') : '<p class="muted">No work selected yet.</p>';
@@ -1348,6 +1447,17 @@
      planToday.setEstimate(input.dataset.planEstimate, Number(input.value));
      renderPlanToday();
    }));
+    document.querySelectorAll('[data-plan-missing-estimate]').forEach(input => input.addEventListener('change', () => {
+      const id = input.dataset.planMissingEstimate;
+      if (!input.checkValidity() || !planToday.setEstimate(id, Number(input.value))) {
+        qs('#plan-today-error').textContent = 'Enter an estimate from 5 minutes to 24 hours.';
+        input.focus();
+        return;
+      }
+      qs('#plan-today-error').textContent = '';
+      renderPlanToday();
+      document.querySelector('[data-plan-missing-estimate]')?.focus();
+    }));
    document.querySelectorAll('[data-plan-recommendation]').forEach(button => button.addEventListener('click', () => {
      planToday.applyRecommendation(button.dataset.planRecommendation);
      renderPlanToday();
@@ -1370,11 +1480,23 @@
    const capacityAware = !Array.isArray(plan);
    const ids = capacityAware ? plan.ids : plan;
    const previous = todayWork.read();
-    const operations = previous.map(id => ['remove', id]).concat(ids.map(id => ['add', id]));
-    if (!operations.every(([action, id]) => todaySync.enqueue(action, id))) return false;
-    if (capacityAware && !todaySync.enqueueConfiguration(plan.capacity_minutes, plan.estimates)) return false;
+    if (rolloverReviewPlan) {
+      const operation = todayRollover.operation({
+        operation_id: 'pending', base_revision: rolloverReviewPlan.revision,
+        selected_ids: ids, capacity_minutes: plan.capacity_minutes, estimates: plan.estimates,
+      });
+      if (!todaySync.enqueueRollover(operation)) return false;
+      rolloverReviewPlan = null;
+      qs('#plan-today').textContent = 'Plan Today';
+      qs('#plan-today-title').textContent = 'Plan Today';
+    } else {
+      const operations = previous.map(id => ['remove', id]).concat(ids.map(id => ['add', id]));
+      if (!operations.every(([action, id]) => todaySync.enqueue(action, id))) return false;
+      if (capacityAware && !todaySync.enqueueConfiguration(plan.capacity_minutes, plan.estimates)) return false;
+    }
    if (!todayWork.replace(ids)) return false;
    if (capacityAware && !todayWork.replacePlanning(plan)) return false;
+    todayRecapView.completeReplan();
    refreshMyWorkView();
    todaySync.flush();
    warmTodayOffline();
@@ -1392,6 +1514,32 @@
    },
  });

+  async function buildTodayPlan() {
+    const button = qs('#build-today-plan');
+    const state = planToday.snapshot();
+    const candidates = state.ids.map(id => planToday.item(id)).concat(planToday.candidates());
+    button.disabled = true;
+    qs('#plan-today-build-status').textContent = 'Checking readiness and fitting your highest-ranked work…';
+    const checks = await Promise.all(candidates.map(async item => {
+      const id = todayWork.identity(item);
+      if (item.kind !== 'issue') return [id, { status:'ready' }];
+      try {
+        const detail = await inspectTodayDependencies(item);
+        if (!detail.available) return [id, { status:'unverified' }];
+        if (detail.dependencies.length) return [id, {
+          status:'blocked', reason:detail.dependencies.length + ' open ' +
+            (detail.dependencies.length === 1 ? 'dependency' : 'dependencies'),
+        }];
+        return [id, { status:'ready' }];
+      } catch (_error) {
+        return [id, { status:'unverified' }];
+      }
+    }));
+    planToday.buildRecommendation(Object.fromEntries(checks));
+    button.disabled = false;
+    renderPlanToday();
+  }
+
  function canPreviewPlanItem(item) {
    if (!item || !offlineWorkMode) return Boolean(item);
    const login = planningOwnerLogin || confirmedOwnerLogin ||
@@ -1635,14 +1783,16 @@
      return;
    }
    if (trigger) planTodayTrigger = trigger;
+    qs('#plan-today-title').textContent = rolloverReviewPlan ? 'New day review' : 'Plan Today';
    if (actualMinutes) pendingPlanActualMinutes = actualMinutes;
    if (navigate) {
      taskOverlayHistory.open('plan-today');
      return;
    }
-    const recommendations = actualMinutes || pendingPlanActualMinutes;
+    const recommendations = actualMinutes || pendingPlanActualMinutes || todayRecapView.pendingReplan()?.actual_minutes;
    pendingPlanActualMinutes = null;
    planToday.open(todayMyWork, activeMyWork, todayWork.planning(), recommendations);
+    qs('#discard-recap-replan').hidden = !todayRecapView.pendingReplan();
    qs('#plan-today-error').textContent = '';
    qs('#plan-today-sheet').hidden = false;
    document.body.classList.add('task-overlay-open');
@@ -1650,6 +1800,14 @@
    qs('#cancel-plan-today').focus();
  }

+  qs('#discard-recap-replan').addEventListener('click', () => {
+    todayRecapView.discardReplan();
+    planToday.open(todayMyWork, activeMyWork, todayWork.planning());
+    qs('#discard-recap-replan').hidden = true;
+    qs('#plan-today-error').textContent = 'Recap feedback discarded. Your saved recap is unchanged.';
+    renderPlanToday();
+  });
+
  const detailDefer = createDetailDefer({
    laterWork,
    session: workSession,
@@ -1846,7 +2004,8 @@
  function listDrafts() {
    const unfiled = unfiledCaptures.list().map(item => ({
      id:'unfiled:' + item.id, capture_id:item.id, kind:'unfiled-issue', label:'Needs filing',
-      title:item.title, preview:item.body, copy_text:[item.title, item.body].filter(Boolean).join('\n\n'),
+      title:item.title, preview:item.body + (item.hasAttachment ? ' · Screenshot attached' : ''),
+      hasAttachment:item.hasAttachment, copy_text:[item.title, item.body].filter(Boolean).join('\n\n'),
      updated_at:item.savedAt, quarantined:item.quarantined,
      ownership:item.quarantined ? 'Saved by ' + item.ownerLogin +
        (activeFlushLogin ? ' — current account is ' + activeFlushLogin : ' — reconnect to confirm this account') : '',
@@ -1891,7 +2050,9 @@
      const element = qs('[data-work-count="' + filter + '"]');
      if (element) element.textContent = count;
    });
-    mobileTaskDock.updateWork(mobileWorkEntry.mode(), countMyWork(activeMyWork).attention);
+    mobileTaskDock.updateQueues(counts);
+    mobileTaskDock.updateWork(mobileWorkEntry.mode());
+    mobileTaskDock.updateAttention(countMyWork(activeMyWork).attention);
    const activeQueue = qs('[data-work-filter="' + selectedWorkFilter + '"]');
    qs('#active-work-queue').textContent = activeQueue.firstChild.textContent.trim() +
      ' (' + (counts[selectedWorkFilter] || 0) + ')';
@@ -1979,7 +2140,8 @@
        (item.ownership ? '<div class="small">' + escapeHtml(item.ownership) + '</div>' : '') : '';
      const attempt = item.last_attempt_error ? '<span class="delivery-attempt small">Last attempt ' +
        escapeHtml(fmt(item.last_attempt_at)) + ' · ' + escapeHtml(item.last_attempt_error) + '</span>' : '';
-      return '<article class="my-work-card draft-card">' +
+      const captureTarget = isUnfiled ? ' tabindex="-1" data-capture-id="' + escapeHtml(item.capture_id) + '"' : '';
+      return '<article class="my-work-card draft-card"' + captureTarget + '>' +
        '<span class="small">' + escapeHtml(item.label) + (item.repository ? ' · ' + escapeHtml(item.repository) : '') + '</span>' +
        '<span class="my-work-card-title">' + escapeHtml(item.title) + '</span>' +
        '<span class="draft-preview">' + escapeHtml(item.preview || 'Unfinished draft') + '</span>' + state + attempt +
@@ -2012,16 +2174,13 @@
      qs('#my-work-action-status').textContent = 'Waiting deliveries retried. Items needing attention were skipped.';
    });
    list.querySelectorAll('.draft-resume').forEach(button => {
-      button.addEventListener('click', () => {
+      button.addEventListener('click', async () => {
        const item = lastDrafts[Number(button.dataset.draftIndex)];
        if (!item) return;
        if (item.kind === 'unfiled-issue') {
          try {
-            const resumed = unfiledCaptures.resume(item.capture_id, activeFlushLogin);
-            issueCapture.saveDraft(resumed);
-            refreshMyWorkView();
-            openCreateIssueSheet();
-            qs('#create-issue-status').textContent = 'Capture restored. Choose a repository to file it.';
+            dFS.start(item.capture_id);
+            await dFS.nextCapture();
          } catch (error) { qs('#my-work-action-status').textContent = error.message; }
        } else if (item.kind === 'new-issue') openCreateIssueSheet();
        else if (item.route) workRoute.open(item.route);
@@ -2096,10 +2255,10 @@
      });
    });
    list.querySelectorAll('.draft-discard').forEach(button => {
-      button.addEventListener('click', () => {
+      button.addEventListener('click', async () => {
        if (!window.confirm('Discard this unfinished draft?')) return;
        const item = lastDrafts[Number(button.dataset.draftIndex)];
-        if (item?.kind === 'unfiled-issue') unfiledCaptures.discard(item.capture_id);
+        if (item?.kind === 'unfiled-issue') await unfiledCaptures.discard(item.capture_id);
        else if (item?.kind === 'issue-outbox') issueOutbox.discard(item.outbox_id);
        else if (item?.kind === 'authored-outbox') authoredOutbox.discard(item.outbox_id);
        else if (item) draftInbox.discard(item.id);
@@ -3122,6 +3281,8 @@
    qs('#create-issue-repository-results').hidden = true;
    qs('#create-issue-title').value = captureDraft.title;
    qs('#create-issue-body').value = captureDraft.body;
+    setIssueFilingMode(Boolean(captureDraft.repository));
+    qs('#create-issue-capture-status').textContent = '';
    qs('#create-issue-due-date').value = captureDraft.dueDate || '';
    loadIssueLabels(qs('#create-issue-repository').value, captureDraft.labelIds);
    loadIssueMilestones(qs('#create-issue-repository').value, captureDraft.milestoneId);
@@ -3130,7 +3291,13 @@
    updateIssueCreateActions();
    qs('#create-issue-sheet').classList.add('open');
    creatingIssue = true;
-    (captureDraft.repository ? qs('#create-issue-title') : qs('#create-issue-repository-search')).focus();
+    qs('#create-issue-title').focus();
+  }
+
+  function setIssueFilingMode(enabled) {
+    qs('#create-issue-filing').hidden = !enabled;
+    qs('.create-issue-capture-actions').hidden = enabled;
+    qs('#create-issue-heading').textContent = enabled ? 'File issue' : 'Capture work';
  }

  let suppressCreateDraftOnHistoryClose = false;
@@ -3471,6 +3638,7 @@
      if (activeFlushLogin) {
        confirmedOwnerLogin = activeFlushLogin;
        updateDeliveryReceiptControls();
+        interruptionPrompt.restore();
      }
      snapshot.context.notifications = lastNotifications;
      renderContextSnapshot(snapshot.context);
@@ -3942,24 +4110,51 @@
    }
  });
  qs('#new-issue').addEventListener('click', openCreateIssueSheet);
-  qs('#save-unfiled-issue').addEventListener('click', () => {
-    const captureDraft = {
-      title: qs('#create-issue-title').value.trim(),
-      body: qs('#create-issue-body').value.trim(),
-    };
+  dFS.bind();
+  qs('#file-new-issue').addEventListener('click', () => {
+    if (!qs('#create-issue-title').value.trim()) {
+      qs('#create-issue-capture-status').textContent = 'Add a title before filing.';
+      qs('#create-issue-title').focus();
+      return;
+    }
+    saveIssueCaptureDraft();
+    setIssueFilingMode(true);
+    qs('#create-issue-capture-status').textContent = '';
+    qs('#create-issue-repository-search').focus();
+  });
+  qs('#save-unfiled-issue').addEventListener('click', async () => {
    try {
-      unfiledCaptures.save(captureDraft);
+      const captureDraft = {
+        title: qs('#create-issue-title').value.trim(),
+        body: qs('#create-issue-body').value.trim(),
+        attachment: await createIssueAttachmentController.serialize(),
+      };
+      if (showDraftCapacityDialog(unfiledCaptures)) return;
+      const savedCapture = await unfiledCaptures.save(captureDraft);
+      if (rUC) {
+        await unfiledCaptures.completeResume(rUC);
+        rUC = '';
+      }
      issueCapture.clearDraft();
      qs('#create-issue-title').value = '';
      qs('#create-issue-body').value = '';
+      createIssueAttachmentController.clear();
      closeCreateIssueSheet(true, false);
+      qs('[data-work-filter="draft"]').click();
+      mobileTaskDock.select('queues');
      refreshMyWorkView();
-      qs('#my-work-action-status').textContent = 'Saved in Drafts · choose a repository after reconnecting.';
+      const savedCard = qs('[data-capture-id="' + CSS.escape(savedCapture.id) + '"]');
+      requestAnimationFrame(() => {
+        savedCard?.scrollIntoView({block:'nearest'});
+        savedCard?.focus({preventScroll:true});
+      });
+      qs('#my-work-action-status').textContent = 'Saved to Drafts. Choose a repository when you’re ready to file it.';
    } catch (error) {
-      qs('#create-issue-status').textContent = error.message;
+      qs('#create-issue-capture-status').textContent = error.message;
      qs('#create-issue-title').focus();
    }
  });
+  bindDraftCapacityDialog();
  qs('#use-shared-content').addEventListener('click', () => {
    issueCapture.acceptSharedContent();
    qs('#shared-content-conflict').hidden = true;
@@ -4080,11 +4275,21 @@
      const durableDraft = {
        ...captureDraft,
        attachment: await createIssueAttachmentController.serialize(),
+        ...(rUC ? { sourceCaptureId: rUC } : {}),
        ...(createAndStartRequested ? { completionIntent: 'create-and-start' } : {}),
      };
      const admission = editingOutboxId ? await issueOutbox.updateDurably(editingOutboxId, durableDraft) :
        await issueOutbox.enqueueDurably(durableDraft);
      const queued = admission.item;
+      const fS = dFS.current();
+      if (rUC && (!durableDraft.attachment || admission.background)) {
+        await unfiledCaptures.completeResume(rUC);
+        rUC = '';
+      }
+      if (fS && !rUC && await dFS.advance(fS.id)) {
+        refreshMyWorkView();
+        return;
+      }
      if (!admission.background) {
        editingOutboxId = queued.id;
        refreshMyWorkView();
@@ -5087,6 +5292,7 @@
    const outage = mode === 'outage';
    confirmedOwnerLogin = String(saved.user?.login || '').trim();
    planningOwnerLogin = confirmedOwnerLogin;
+    interruptionPrompt.restore();
    updatePlanningAvailability();
    saved.notifications = notificationReadOutbox.suppress(saved.notifications || []);
    lastNotifications = saved.notifications;
@@ -5206,6 +5412,7 @@
    qs('#plan-today-error').textContent = '';
    renderPlanToday();
  });
+  qs('#build-today-plan').addEventListener('click', () => buildTodayPlan());
  function commitPlanToday(start, button) {
    const result = planToday.commit({ start, confirmOverCapacity: button.dataset.confirmOverCapacity === 'true' });
    if (result === 'saved') {
@@ -0,0 +1,65 @@
+function showDraftCapacityDialog(captures) {
+  const state = captures.capacity();
+  if (!state.full) return false;
+  const oldest = state.oldest;
+  qs('#draft-capacity-oldest').innerHTML = '<strong>' + escapeHtml(oldest.title) + '</strong><div class="small">' +
+    escapeHtml(oldest.body || 'No note') + (oldest.hasAttachment ? ' · Screenshot attached' : '') + '</div>';
+  qs('#draft-capacity-sheet').dataset.oldestId = oldest.id;
+  qs('#draft-capacity-status').textContent = '';
+  qs('#draft-capacity-sheet').hidden = false;
+  qs('#keep-editing-draft').focus();
+  return true;
+}
+
+function bindDraftCapacityDialog() {
+  qs('#keep-editing-draft').addEventListener('click', () => {
+    qs('#draft-capacity-sheet').hidden = true;
+    qs('#save-unfiled-issue').focus();
+  });
+  qs('#review-full-drafts').addEventListener('click', () => {
+    const oldestId = qs('#draft-capacity-sheet').dataset.oldestId;
+    saveIssueCaptureDraft();
+    qs('#draft-capacity-sheet').hidden = true;
+    closeCreateIssueSheet(true, false);
+    qs('[data-work-filter="draft"]').click();
+    mobileTaskDock.select('queues');
+    refreshMyWorkView();
+    requestAnimationFrame(() => {
+      const card = qs('[data-capture-id="' + CSS.escape(oldestId) + '"]');
+      card?.scrollIntoView({block:'nearest'});
+      card?.focus({preventScroll:true});
+    });
+  });
+  qs('#replace-oldest-draft').addEventListener('click', async () => {
+    const oldest = unfiledCaptures.capacity().oldest;
+    if (!oldest || oldest.id !== qs('#draft-capacity-sheet').dataset.oldestId) {
+      qs('#draft-capacity-status').textContent = 'Drafts changed. Review them before replacing anything.';
+      return;
+    }
+    if (!window.confirm('Replace “' + oldest.title + '” and permanently delete its saved contents?')) return;
+    const button = qs('#replace-oldest-draft');
+    button.disabled = true;
+    try {
+      const draft = {
+        title:qs('#create-issue-title').value.trim(), body:qs('#create-issue-body').value.trim(),
+        attachment:await createIssueAttachmentController.serialize(),
+      };
+      const saved = await unfiledCaptures.replaceOldest(draft, oldest.id);
+      qs('#draft-capacity-sheet').hidden = true;
+      issueCapture.clearDraft();
+      qs('#create-issue-title').value = '';
+      qs('#create-issue-body').value = '';
+      createIssueAttachmentController.clear();
+      closeCreateIssueSheet(true, false);
+      qs('[data-work-filter="draft"]').click();
+      mobileTaskDock.select('queues');
+      refreshMyWorkView();
+      requestAnimationFrame(() => qs('[data-capture-id="' + CSS.escape(saved.id) + '"]')?.focus());
+      qs('#my-work-action-status').textContent = 'Oldest Draft replaced. New work saved to Drafts.';
+    } catch (error) {
+      qs('#draft-capacity-status').textContent = error.message + ' Nothing was replaced.';
+    } finally { button.disabled = false; }
+  });
+}
+
+if (typeof module !== 'undefined' && module.exports) module.exports = {showDraftCapacityDialog, bindDraftCapacityDialog};
@@ -0,0 +1,92 @@
+function createDraftFilingSession({list}) {
+  let orderedIds = [];
+  let currentId = '';
+
+  function visibleIds() {
+    const available = new Set(list().map(item => item.id));
+    orderedIds = orderedIds.filter(id => available.has(id));
+    for (const item of list()) {
+      if (!orderedIds.includes(item.id)) orderedIds.push(item.id);
+    }
+    return orderedIds;
+  }
+
+  function state() {
+    const ids = visibleIds();
+    if (!ids.length) {
+      currentId = '';
+      return null;
+    }
+    if (!ids.includes(currentId)) currentId = ids[0];
+    const index = ids.indexOf(currentId);
+    return {id:currentId, position:index + 1, total:ids.length, remaining:ids.length - index - 1};
+  }
+
+  function start(id) {
+    orderedIds = list().map(item => item.id);
+    if (!orderedIds.includes(id)) throw new Error('This capture is no longer available.');
+    currentId = id;
+    return state();
+  }
+
+  function move(offset) {
+    const ids = visibleIds();
+    if (!ids.length) return state();
+    const index = Math.max(0, ids.indexOf(currentId));
+    currentId = ids[(index + offset + ids.length) % ids.length];
+    return state();
+  }
+
+  function removeCurrentAndNext(removedId) {
+    const previousIds = orderedIds.slice();
+    const removedIndex = Math.max(0, previousIds.indexOf(removedId));
+    orderedIds = previousIds.filter(id => id !== removedId);
+    const ids = visibleIds();
+    if (!ids.length) return state();
+    currentId = ids[Math.min(removedIndex, ids.length - 1)];
+    return state();
+  }
+
+  const session = {start, current:state, next:()=>move(1), previous:()=>move(-1), removeCurrentAndNext};
+  session.attach = (qs, dependencies) => {
+    const openCapture = async captureId => {
+      const resumed = await dependencies.captures.resume(captureId, dependencies.getLogin());
+      dependencies.issueCapture.saveDraft(resumed);
+      dependencies.setResumedId(captureId);
+      await dependencies.openSheet();
+      dependencies.attachment[resumed.attachment ? 'restore' : 'clear'](resumed.attachment);
+      dependencies.setFilingMode(true);
+      session.render();
+    };
+    return Object.assign(session, {
+    nextCapture() { const state = session.current(); return state ? openCapture(state.id) : null; },
+    render() {
+      const state = session.current();
+      qs('#draft-filing-session').hidden = !state;
+      if (!state) return;
+      qs('#draft-filing-progress').textContent = `Draft ${state.position} of ${state.total}`;
+      qs('#draft-filing-remaining').textContent = state.remaining ? `${state.remaining} remaining` : 'Last Draft';
+      qs('#previous-draft').disabled = qs('#skip-draft').disabled = state.total < 2;
+      qs('#submit-new-issue').textContent = state.remaining ? 'File & next' : 'File final Draft';
+    },
+    bind() {
+      [['#previous-draft','previous'],['#skip-draft','next']].forEach(([selector, method]) =>
+        qs(selector).addEventListener('click', async () => {
+          const state = session[method]();
+          if (state) await openCapture(state.id);
+        })
+      );
+    },
+    async advance(completedId) {
+      const state = session.removeCurrentAndNext(completedId);
+      if (state) { await openCapture(state.id); return true; }
+      qs('#draft-filing-session').hidden = true;
+      qs('#submit-new-issue').textContent = 'Create & assign to me';
+      return false;
+    },
+  });
+  };
+  return session;
+}
+
+if (typeof module !== 'undefined' && module.exports) module.exports = createDraftFilingSession;
@@ -47,7 +47,8 @@ function createFeatureLoader({ document, urls, timeoutMs = 10000 }) {
    } catch (_error) {
      if (status) {
        const label = name === 'issue-capture' ? 'Issue capture' :
-          name === 'pull-workflow' ? 'Pull workspace' : name.replace(/-/g, ' ');
+          name === 'pull-workflow' ? 'Pull workspace' :
+          name === 'security-center' ? 'Security center' : name.replace(/-/g, ' ');
        status.textContent = label + ' could not load. ' + retryLabel;
      }
      return false;
@@ -147,6 +147,10 @@
        </div>
      </details>
    </div>
+    <aside class="attention-interruption" id="attention-interruption" role="status" aria-live="polite" hidden>
+      <span><strong>Today paused</strong> while handling Attention</span>
+      <button id="return-to-today" type="button">Return to Today</button>
+    </aside>
    <section class="device-readiness-card" id="device-readiness-card" aria-labelledby="device-readiness-heading" hidden>
      <div>
        <strong id="device-readiness-heading">Make this phone work-ready</strong>
@@ -250,7 +254,16 @@
    <label class="plan-today-available" for="plan-today-available">Available today
      <span><input id="plan-today-available" type="number" inputmode="numeric" min="15" max="1440" step="15" placeholder="Minutes" /> min</span>
    </label>
+    <button class="plan-today-build" id="build-today-plan" type="button">Build my Today</button>
+    <div class="small plan-today-build-status" id="plan-today-build-status" role="status" aria-live="polite"></div>
+    <section class="plan-today-estimates" id="plan-today-estimates" aria-labelledby="plan-today-estimates-heading" hidden>
+      <h3 id="plan-today-estimates-heading">Estimate to finish your plan</h3>
+      <p class="small muted">Add minutes for ready work and your plan will re-fit immediately.</p>
+      <div id="plan-today-estimate-list"></div>
+    </section>
+    <div class="plan-today-skipped" id="plan-today-skipped"></div>
    <div class="small plan-today-error" id="plan-today-error" role="alert"></div>
+    <button class="discard-recap-replan" id="discard-recap-replan" type="button" hidden>Discard recap feedback</button>
    <section aria-labelledby="today-plan-heading">
      <h3 id="today-plan-heading">Today, in order</h3>
      <div class="plan-today-list" id="plan-today-list"></div>
@@ -266,13 +279,26 @@
  </section>
 </div>

+<div class="today-interruption-sheet" id="today-interruption-sheet" role="dialog" aria-modal="true" aria-labelledby="today-interruption-title" hidden>
+  <section class="today-interruption-panel">
+    <div class="small">Today timer</div>
+    <h2 id="today-interruption-title">Were you working while away?</h2>
+    <p id="today-interruption-description" class="small"></p>
+    <p class="small muted">Choose once before the timer continues. You can include the full interval or remove it from your recap.</p>
+    <div class="today-interruption-actions">
+      <button type="button" data-today-interruption="count">Count this time</button>
+      <button type="button" data-today-interruption="exclude">Exclude this time</button>
+    </div>
+  </section>
+</div>
+
 <div class="today-recap-sheet" id="today-recap-sheet" role="dialog" aria-modal="true" aria-labelledby="today-recap-title" hidden>
  <section class="today-recap-panel">
    <div class="today-recap-header">
      <div><div class="small">Estimate feedback</div><h2 id="today-recap-title">Today recap</h2></div>
      <button id="close-today-recap" type="button">Close</button>
    </div>
-    <p class="small muted">Review actual time before saving. Recaps sync to your account without changing Gitea time entries.</p>
+    <p class="small muted">Review actual time before saving. Gitea time logging is explicit and unchecked by default.</p>
    <div id="today-recap-status" class="small" role="status" aria-live="polite"></div>
    <div id="today-recap-items" class="today-recap-items"></div>
    <div id="today-recap-totals" class="today-recap-totals"></div>
@@ -282,6 +308,7 @@
    </section>
    <div class="today-recap-actions">
      <button id="save-today-recap" type="button">Save recap &amp; adjust plan</button>
+      <button id="save-log-today-recap" type="button">Log selected time to Gitea</button>
      <button id="discard-today-recap" type="button">Keep timer &amp; close</button>
    </div>
  </section>
@@ -495,7 +522,7 @@
 <div class="create-issue-sheet" id="create-issue-sheet" role="dialog" aria-modal="true" aria-labelledby="create-issue-heading">
  <section class="create-issue-panel">
    <div class="create-issue-header">
-      <h3 id="create-issue-heading">New issue</h3>
+      <h3 id="create-issue-heading">Capture work</h3>
      <button id="cancel-new-issue" type="button">Cancel</button>
    </div>
    <aside class="shared-content-conflict" id="shared-content-conflict" aria-live="assertive" hidden>
@@ -507,23 +534,16 @@
      </div>
    </aside>
    <form class="create-issue-form" id="create-issue-form">
-      <div class="create-issue-repository-picker">
-        <label for="create-issue-repository-search">Repository search
-          <input id="create-issue-repository-search" type="search" maxlength="80" placeholder="Search accessible repositories" autocomplete="off" />
-        </label>
-        <div id="create-issue-repository-results" role="listbox" aria-label="Repository search results" hidden></div>
-        <label for="create-issue-repository">Selected repository
-          <select id="create-issue-repository" required><option value="">Choose repository</option></select>
-        </label>
-      </div>
-      <button class="create-issue-repository-more" id="load-more-issue-repositories" type="button" hidden>Load more repositories</button>
-      <div id="create-issue-repository-status" class="small" aria-live="polite"></div>
      <label for="create-issue-title">Title
        <input id="create-issue-title" type="text" maxlength="255" required autocomplete="off" />
      </label>
-      <label for="create-issue-body">Description <span class="small">Optional</span>
+      <label for="create-issue-body">Note <span class="small">Optional</span>
        <textarea id="create-issue-body" maxlength="10000"></textarea>
      </label>
+      <div class="create-issue-capture-actions">
+        <button id="save-unfiled-issue" type="button">Save to Drafts</button>
+        <button id="file-new-issue" type="button">File now</button>
+      </div>
      <section class="create-issue-attachment" aria-labelledby="create-issue-attachment-label">
        <strong id="create-issue-attachment-label">Screenshot <span class="small">Optional · PNG, JPEG, or WebP · 2 MB max</span></strong>
        <div class="issue-attachment-controls">
@@ -537,6 +557,26 @@
        </div>
        <div class="small" id="create-issue-attachment-status" aria-live="polite"></div>
      </section>
+      <section class="create-issue-filing" id="create-issue-filing" hidden>
+      <aside class="draft-filing-session" id="draft-filing-session" aria-live="polite" hidden>
+        <strong id="draft-filing-progress"></strong>
+        <span class="small" id="draft-filing-remaining"></span>
+        <div class="draft-filing-session-actions">
+          <button id="previous-draft" type="button">Previous</button>
+          <button id="skip-draft" type="button">Skip</button>
+        </div>
+      </aside>
+      <div class="create-issue-repository-picker">
+        <label for="create-issue-repository-search">Repository search
+          <input id="create-issue-repository-search" type="search" maxlength="80" placeholder="Search accessible repositories" autocomplete="off" />
+        </label>
+        <div id="create-issue-repository-results" role="listbox" aria-label="Repository search results" hidden></div>
+        <label for="create-issue-repository">Selected repository
+          <select id="create-issue-repository" required><option value="">Choose repository</option></select>
+        </label>
+      </div>
+      <button class="create-issue-repository-more" id="load-more-issue-repositories" type="button" hidden>Load more repositories</button>
+      <div id="create-issue-repository-status" class="small" aria-live="polite"></div>
      <label for="create-issue-milestone">Milestone <span class="small">Optional</span>
        <select id="create-issue-milestone" aria-describedby="create-issue-milestone-status">
          <option value="">No milestone</option>
@@ -559,15 +599,30 @@
      </section>
      <div class="small">The issue will be assigned to you.</div>
      <div class="create-issue-actions">
-        <button id="save-unfiled-issue" type="button">Save for filing</button>
        <button id="submit-new-issue" type="submit">Create &amp; assign to me</button>
        <button id="create-and-start-issue" type="submit">Create &amp; start</button>
        <div id="create-issue-status" class="small" aria-live="assertive"></div>
      </div>
+      </section>
+      <div id="create-issue-capture-status" class="small" aria-live="assertive"></div>
    </form>
  </section>
 </div>

+<div class="draft-capacity-sheet" id="draft-capacity-sheet" role="dialog" aria-modal="true" aria-labelledby="draft-capacity-heading" hidden>
+  <section class="draft-capacity-panel">
+    <h3 id="draft-capacity-heading">Drafts full — nothing was deleted.</h3>
+    <p class="small">Review saved work, keep editing, or explicitly replace the oldest Draft.</p>
+    <div class="draft-capacity-oldest" id="draft-capacity-oldest"></div>
+    <div class="draft-capacity-actions">
+      <button id="review-full-drafts" type="button">Review Drafts</button>
+      <button id="keep-editing-draft" type="button">Keep editing</button>
+      <button id="replace-oldest-draft" type="button">Replace oldest &amp; save</button>
+    </div>
+    <div id="draft-capacity-status" class="small" aria-live="assertive"></div>
+  </section>
+</div>
+
 <div class="update-sheet" id="update-sheet" role="dialog" aria-modal="true" aria-labelledby="update-sheet-title">
  <section class="update-sheet-panel">
    <div class="update-sheet-header">
@@ -792,24 +847,47 @@
  </form>
 </dialog>

+<section class="mobile-today-hud" data-mobile-today-hud aria-label="Active Today session" hidden>
+  <button class="mobile-today-summary" data-mobile-today-open type="button" aria-label="Open current Today item"></button>
+  <button data-mobile-today-complete type="button" hidden>Done &amp; next</button>
+  <div class="small" data-work-session-progress aria-live="polite"></div>
+  <button data-mobile-today-toggle data-work-session-timer-toggle type="button">Pause timer</button>
+  <button data-work-session-adjust-plan type="button" hidden>Adjust remaining plan</button>
+</section>
+<dialog class="mobile-queue-sheet" id="mobile-queue-sheet" aria-labelledby="mobile-queue-heading">
+  <section class="mobile-queue-panel">
+    <header><h2 id="mobile-queue-heading">Work queues</h2><button id="close-mobile-queues" type="button">Close</button></header>
+    <p class="small muted">Choose what to work through next.</p>
+    <div class="mobile-queue-list">
+      <button data-mobile-queue="today" type="button"><span><strong>Today</strong><small>Planned work</small></span><span data-mobile-queue-count="today">0</span></button>
+      <button data-mobile-queue="attention" type="button"><span><strong>Attention</strong><small>Needs a response</small></span><span data-mobile-queue-count="attention">0</span></button>
+      <button data-mobile-queue="later" type="button"><span><strong>Later</strong><small>Deferred work</small></span><span data-mobile-queue-count="later">0</span></button>
+      <button data-mobile-queue="draft" type="button"><span><strong>Drafts</strong><small>Unfiled captures</small></span><span data-mobile-queue-count="draft">0</span></button>
+    </div>
+  </section>
+</dialog>
+
 <nav class="mobile-task-dock" id="mobile-task-dock" aria-label="Primary tasks">
-  <button class="mobile-task-action" data-mobile-task="work" type="button" aria-current="page"><span id="mobile-work-label">Work</span> <span class="mobile-task-count" id="mobile-attention-count" hidden>0</span></button>
+  <button class="mobile-task-action" data-mobile-task="work" type="button" aria-current="page"><span id="mobile-work-label">Work</span></button>
  <button class="mobile-task-action" data-mobile-task="find" type="button">Find</button>
  <button class="mobile-task-action" data-mobile-task="new" type="button">New</button>
  <button class="mobile-task-action" data-mobile-task="search" type="button">Search</button>
-  <button class="mobile-task-action" data-mobile-task="drafts" type="button">Drafts <span class="mobile-task-count" id="mobile-draft-count" aria-label="0 drafts">0</span></button>
+  <button class="mobile-task-action" data-mobile-task="queues" type="button" aria-label="Queues, 0 items">Queues <span class="mobile-task-count" id="mobile-queue-count" hidden>0</span></button>
 </nav>

 <div class="footer">Creative AI-imbued UI • stackchain-dashboard</div>

 <script src="static/session.js"></script>
 <script src="static/feature-loader.js"></script>
+<script src="static/security-center.js"></script>
 <script src="static/markdown.js"></script>
 <script src="static/commands.js"></script>
 <script src="static/search-preview.js"></script>
 <script src="static/widgets.js"></script>
 <script src="static/drafts.js"></script>
 <script src="static/unfiled-captures.js"></script>
+<script src="static/draft-filing-session.js"></script>
+<script src="static/draft-capacity-dialog.js"></script>
 <script src="static/outbox-coordinator.js"></script>
 <script src="static/background-issue-sync.js"></script>
 <script src="static/issue-outbox.js"></script>
@@ -831,6 +909,7 @@
 <script src="static/plan-today.js"></script>
 <script src="static/plan-today-preview.js"></script>
 <script src="static/today-sync.js"></script>
+<script src="static/today-rollover.js"></script>
 <script src="static/update-ownership.js"></script>
 <script src="static/later-work.js"></script>
 <script src="static/later-sync.js"></script>
@@ -51,6 +51,8 @@ function createIssueOutbox({ storage, fetchJson, coordinator, backgroundSync, ge
      status: 'queued',
      queuedAt: Number(now()),
    };
+    const sourceCaptureId = String(draft?.sourceCaptureId || '').trim().slice(0, 128);
+    if (sourceCaptureId) item.sourceCaptureId = sourceCaptureId;
    if (draft?.completionIntent === 'create-and-start') item.completionIntent = 'create-and-start';
    const attachment = captureAttachment(draft?.attachment);
    if (attachment) item.attachment = attachment;
@@ -76,6 +78,9 @@ function createIssueOutbox({ storage, fetchJson, coordinator, backgroundSync, ge

  function enqueue(draft, mirror = true) {
    const items = read();
+    const sourceCaptureId = String(draft?.sourceCaptureId || '').trim().slice(0, 128);
+    const existing = sourceCaptureId && items.find(item => item.sourceCaptureId === sourceCaptureId);
+    if (existing) return { ...existing };
    const item = prepareItem(draft);
    items.push(item);
    write(items, mirror);
@@ -83,6 +88,16 @@ function createIssueOutbox({ storage, fetchJson, coordinator, backgroundSync, ge
  }

  async function enqueueDurably(draft) {
+    const sourceCaptureId = String(draft?.sourceCaptureId || '').trim().slice(0, 128);
+    const existing = sourceCaptureId && read().find(item => item.sourceCaptureId === sourceCaptureId);
+    if (existing) {
+      if (!backgroundSync?.reconcile || !backgroundSync?.requestSync) {
+        return { item: { ...existing }, background: false, durability: 'foreground-only', reused: true };
+      }
+      await backgroundSync.reconcile(read());
+      await backgroundSync.requestSync();
+      return { item: { ...existing }, background: true, durability: 'background', reused: true };
+    }
    if (!backgroundSync?.reconcile || !backgroundSync?.requestSync) {
      const item = enqueue(draft, false);
      return { item, background: false, durability: 'foreground-only' };
@@ -7,60 +7,106 @@
  const overlays = options.overlays || [];
  let launcher = null;
  let wasHidden = false;
-  let workMode = 'work';

  function select(name) {
+    if (!buttons[name]) return false;
    Object.entries(buttons).forEach(([key, button]) => {
      if (key === name) button.setAttribute('aria-current', 'page');
      else button.removeAttribute('aria-current');
    });
+    return true;
  }

  function refreshVisibility() {
-    const hidden = overlays.some(overlay => overlay.classList.contains('open'));
+    const hidden = overlays.some(overlay => overlay.open || overlay.classList.contains('open'));
    nav.hidden = hidden;
+    if (options.sessionHud) {
+      if (hidden) options.sessionHud.setAttribute('data-overlay-hidden', 'true');
+      else options.sessionHud.removeAttribute('data-overlay-hidden');
+    }
    if (wasHidden && !hidden && launcher) launcher.focus();
    wasHidden = hidden;
  }

+  function openQueues() {
+    if (!options.queueSheet || options.queueSheet.open) return;
+    options.queueSheet.showModal();
+  }
+
+  function closeQueues() {
+    if (options.queueSheet?.open) options.queueSheet.close();
+  }
+
  function start() {
    Object.entries(buttons).forEach(([name, button]) => {
      button.addEventListener('click', event => {
        launcher = event.currentTarget;
        select(name);
-        options.actions[name]();
+        if (name === 'queues' && options.queueSheet) openQueues();
+        else options.actions[name]();
      });
    });
+    if (options.queueSheet) {
+      options.queueClose?.addEventListener('click', closeQueues);
+      options.queueSheet.addEventListener('cancel', event => {
+        event.preventDefault();
+        closeQueues();
+      });
+      options.queueSheet.addEventListener('close', () => buttons.queues?.focus());
+      Object.entries(options.queueRows || {}).forEach(([name, row]) => {
+        row.addEventListener('click', () => {
+          closeQueues();
+          options.onSelectQueue?.(name);
+        });
+      });
+    }
    options.observe(refreshVisibility, overlays);
    refreshVisibility();
  }

-  function updateWork(mode, count) {
+  function updateWork(mode) {
    const labels = {
      continue: ['Continue', 'Continue Today'],
      resume: ['Resume', 'Resume Today'],
      start: ['Start', 'Start Today'],
+      plan: ['Plan', 'Plan Today'],
      work: ['Work', 'Work'],
    };
-    workMode = labels[mode] ? mode : 'work';
-    const total = Math.max(0, Number(count) || 0);
-    const badge = options.attentionBadge;
+    const workMode = labels[mode] ? mode : 'work';
    if (options.workLabel) options.workLabel.textContent = labels[workMode][0];
-    if (badge) {
-      badge.textContent = String(total);
-      badge.hidden = total === 0;
-    }
    if (buttons.work) {
-      buttons.work.setAttribute(
-        'aria-label',
-        labels[workMode][1] + (total ? ', ' + total + ' items need attention' : '')
-      );
+      buttons.work.setAttribute('aria-label', labels[workMode][1]);
    }
  }

  function updateAttention(count) {
-    updateWork(workMode, count);
+    const total = Math.max(0, Number(count) || 0);
+    const visible = total > 0;
+    if (options.attentionBadge) {
+      options.attentionBadge.textContent = String(total);
+      options.attentionBadge.hidden = !visible;
+    }
+    if (buttons.attention) {
+      buttons.attention.hidden = !visible;
+      buttons.attention.setAttribute('aria-label', 'Attention, ' + total + ' items');
+    }
+    if (visible) nav.setAttribute('data-attention', 'true');
+    else nav.removeAttribute('data-attention');
  }

-  return {start, refreshVisibility, updateAttention, updateWork};
+  function updateQueues(counts) {
+    const names = ['today', 'attention', 'later', 'draft'];
+    const normalized = Object.fromEntries(names.map(name => [name, Math.max(0, Number(counts?.[name]) || 0)]));
+    const total = names.reduce((sum, name) => sum + normalized[name], 0);
+    Object.entries(options.queueCounts || {}).forEach(([name, element]) => {
+      element.textContent = String(normalized[name] || 0);
+    });
+    if (options.queueBadge) {
+      options.queueBadge.textContent = String(total);
+      options.queueBadge.hidden = total === 0;
+    }
+    if (buttons.queues) buttons.queues.setAttribute('aria-label', 'Queues, ' + total + ' items');
+  }
+
+  return {start, select, refreshVisibility, updateAttention, updateQueues, updateWork};
 });
@@ -6,6 +6,7 @@
    if (options.isTodayActive()) return 'continue';
    if (options.getTodayCount() > 0 && options.isTodayResumable()) return 'resume';
    if (options.getTodayCount() > 0) return 'start';
+    if (options.getEligibleCount() > 0) return 'plan';
    return 'work';
  }

@@ -14,6 +15,7 @@
    if (current === 'continue') options.continueToday();
    else if (current === 'resume') options.resumeToday();
    else if (current === 'start') options.startToday();
+    else if (current === 'plan') options.planToday();
    else options.openFallback();
    return current;
  }
@@ -7,6 +7,8 @@ function createPlanToday({ identity, save, start, limit = 5 }) {
  let recommendations = {};
  let recommendationAware = false;
  let capacityAware = false;
+  let buildState = null;
+  let buildReadiness = null;

  function cleanItems(items) {
    const unique = new Map();
@@ -33,6 +35,8 @@ function createPlanToday({ identity, save, start, limit = 5 }) {
    }
    recommendations = {};
    recommendationAware = actualMinutes !== null;
+    buildState = null;
+    buildReadiness = null;
    for (const [id, minutes] of Object.entries(actualMinutes || {})) {
      if (draftIds.includes(id) && Number.isInteger(minutes) && minutes >= 5 && minutes <= 1440 &&
          estimates[id] !== minutes) recommendations[id] = minutes;
@@ -74,6 +78,8 @@ function createPlanToday({ identity, save, start, limit = 5 }) {
    recommendations = {};
    recommendationAware = false;
    capacityAware = false;
+    buildState = null;
+    buildReadiness = null;
  }

  function cancel() {
@@ -88,10 +94,12 @@ function createPlanToday({ identity, save, start, limit = 5 }) {
  }

  function setEstimate(id, minutes) {
-    if (!openState || !draftIds.includes(id)) return false;
+    const resolvingBuildEstimate = buildState?.needs_estimate?.includes(id);
+    if (!openState || (!draftIds.includes(id) && !resolvingBuildEstimate)) return false;
    capacityAware = true;
-    if (Number.isInteger(minutes) && minutes > 0) estimates[id] = minutes;
-    else delete estimates[id];
+    if (!Number.isInteger(minutes) || minutes < 5 || minutes > 1440) return false;
+    estimates[id] = minutes;
+    if (resolvingBuildEstimate && buildReadiness) buildRecommendation(buildReadiness);
    return true;
  }

@@ -104,6 +112,41 @@ function createPlanToday({ identity, save, start, limit = 5 }) {
    return true;
  }

+  function buildRecommendation(readiness = {}) {
+    if (!openState) return null;
+    buildReadiness = { ...readiness };
+    const selected = [];
+    const reasons = {};
+    const skipped = [];
+    const needsEstimate = [];
+    let used = 0;
+    for (const [id, item] of itemsById) {
+      if (selected.length >= limit) break;
+      const check = readiness[id] || { status:'unverified' };
+      if (check.status !== 'ready') {
+        skipped.push({
+          id,
+          status:check.status === 'blocked' ? 'blocked' : 'unverified',
+          reason:check.reason || (check.status === 'blocked' ? 'Blocked' : 'Could not verify readiness'),
+        });
+        continue;
+      }
+      const minutes = estimates[id];
+      if (!Number.isInteger(minutes)) {
+        needsEstimate.push(id);
+        continue;
+      }
+      if (capacityMinutes !== null && used + minutes > capacityMinutes) continue;
+      selected.push(id);
+      reasons[id] = item.reason || item.attention_reason || 'Ranked My Work';
+      used += minutes;
+    }
+    draftIds = selected;
+    capacityAware = true;
+    buildState = { selected:[...selected], reasons, skipped, needs_estimate:needsEstimate };
+    return buildState;
+  }
+
  function commit({ start: startAfterSave = false, confirmOverCapacity = false } = {}) {
    if (!openState) return 'closed';
    const ids = [...draftIds];
@@ -138,6 +181,7 @@ function createPlanToday({ identity, save, start, limit = 5 }) {
      remaining_minutes: remainingMinutes,
      unestimated_count: draftIds.length - Object.keys(selectedEstimates).length,
      over_capacity: remainingMinutes !== null && remainingMinutes < 0,
+      ...(buildState ? { build:buildState } : {}),
    };
  }

@@ -149,7 +193,7 @@ function createPlanToday({ identity, save, start, limit = 5 }) {
    return [...itemsById.entries()].filter(([id]) => !draftIds.includes(id)).map(([, value]) => value);
  }

-  return { open, toggle, move, cancel, setCapacity, setEstimate, applyRecommendation, commit, snapshot, item, candidates };
+  return { open, toggle, move, cancel, setCapacity, setEstimate, applyRecommendation, buildRecommendation, commit, snapshot, item, candidates };
 }

 if (typeof module !== 'undefined' && module.exports) module.exports = createPlanToday;
@@ -54,6 +54,7 @@
    await stopWorkerOutbox();
    await deletePrivateDatabase('stackchain-background-outbox-v1');
    await deletePrivateDatabase('stackchain-offline-work-v2');
+    await deletePrivateDatabase('stackchain-unfiled-captures-v1');
    const keys = await caches?.keys?.() || [];
    await Promise.all(
      keys.filter(key => key.startsWith('stackchain-dashboard-')).map(key => caches.delete(key))
@@ -0,0 +1,185 @@
+(function (root, factory) {
+  if (typeof module !== 'undefined' && module.exports) module.exports = factory;
+  else root.attachSecurityCenter = boundary => factory({ root, boundary });
+})(typeof window !== 'undefined' ? window : this, function attachSecurityCenter({ root, boundary }) {
+  const devicesButton = root.document.getElementById('active-devices');
+  const devicesSheet = root.document.getElementById('active-devices-sheet');
+  const devicesList = root.document.getElementById('active-devices-list');
+  const devicesStatus = root.document.getElementById('active-devices-status');
+  const passkeysList = root.document.getElementById('enrolled-passkeys-list');
+  const passkeysStatus = root.document.getElementById('enrolled-passkeys-status');
+  const enrollPasskey = root.document.getElementById('enroll-passkey');
+  const activityList = root.document.getElementById('security-activity-list');
+  const activityStatus = root.document.getElementById('security-activity-status');
+  const loadMoreActivity = root.document.getElementById('load-more-security-activity');
+  let activityCursor = null;
+
+  const renderDevices = async () => {
+    devicesStatus.textContent = 'Loading active devices…';
+    devicesList.replaceChildren();
+    try {
+      const devices = await boundary.listActiveDevices();
+      devices.forEach(device => {
+        const row = root.document.createElement('article');
+        row.className = 'active-device';
+        const details = root.document.createElement('div');
+        const label = root.document.createElement('strong');
+        label.textContent = device.device_label;
+        const timing = root.document.createElement('span');
+        timing.className = 'small muted';
+        timing.textContent = `Signed in ${new Date(device.created_at * 1000).toLocaleString()} · expires ${new Date(device.expires_at * 1000).toLocaleString()}`;
+        details.append(label, timing);
+        if (device.current) {
+          const current = root.document.createElement('span');
+          current.className = 'active-device-current';
+          current.textContent = 'This device';
+          details.append(current);
+        }
+        const revoke = root.document.createElement('button');
+        revoke.type = 'button';
+        revoke.textContent = device.current ? 'Sign out' : 'Revoke';
+        revoke.addEventListener('click', async () => {
+          if (device.current) await boundary.signOut();
+          else if (await boundary.revokeActiveDevice(device)) await renderDevices();
+        });
+        row.append(details, revoke);
+        devicesList.append(row);
+      });
+      devicesStatus.textContent = devices.length ? `${devices.length} active device${devices.length === 1 ? '' : 's'}` : 'No active devices.';
+    } catch (_error) {
+      devicesStatus.textContent = 'Active devices could not be loaded. Try again.';
+    }
+  };
+
+  const renderPasskeys = async () => {
+    if (!passkeysList || !passkeysStatus) return;
+    passkeysStatus.textContent = 'Loading enrolled passkeys…';
+    passkeysList.replaceChildren();
+    try {
+      const enrolled = await boundary.listPasskeys();
+      enrolled.forEach(passkey => {
+        const row = root.document.createElement('article');
+        row.className = 'enrolled-passkey';
+        const details = root.document.createElement('div');
+        const label = root.document.createElement('strong');
+        label.textContent = passkey.device_label;
+        const timing = root.document.createElement('span');
+        timing.className = 'small muted';
+        const state = passkey.current ? 'This active device' : (passkey.active ? 'Active device' : 'No active session');
+        timing.textContent = `Enrolled ${new Date(passkey.created_at * 1000).toLocaleString()} · ${state}`;
+        details.append(label, timing);
+        const remove = root.document.createElement('button');
+        remove.type = 'button';
+        remove.textContent = 'Remove passkey';
+        remove.addEventListener('click', async () => {
+          remove.disabled = true;
+          passkeysStatus.textContent = `Removing passkey for ${passkey.device_label}…`;
+          try {
+            const outcome = await boundary.revokePasskey(passkey);
+            if (outcome) {
+              passkeysStatus.textContent = outcome.current_session
+                ? 'Passkey removed. This session remains active; keep your recovery token available.'
+                : 'Passkey removed.';
+              await renderPasskeys();
+              if (outcome.session_revoked) await renderDevices();
+            } else {
+              remove.disabled = false;
+              passkeysStatus.textContent = `${enrolled.length} enrolled passkey${enrolled.length === 1 ? '' : 's'}`;
+            }
+          } catch (_error) {
+            passkeysStatus.textContent = 'Passkey could not be removed. Refresh to verify before retrying.';
+            remove.disabled = false;
+          }
+        });
+        row.append(details, remove);
+        passkeysList.append(row);
+      });
+      passkeysStatus.textContent = enrolled.length
+        ? `${enrolled.length} enrolled passkey${enrolled.length === 1 ? '' : 's'}`
+        : 'No passkeys enrolled.';
+    } catch (_error) {
+      passkeysStatus.textContent = 'Enrolled passkeys could not be loaded. Try again.';
+    }
+  };
+
+  const renderSecurityActivity = async (append = false) => {
+    if (!activityList || !activityStatus || !loadMoreActivity) return;
+    activityStatus.textContent = append ? 'Loading older activity…' : 'Loading security activity…';
+    loadMoreActivity.hidden = true;
+    if (!append) {
+      activityCursor = null;
+      activityList.replaceChildren();
+    }
+    try {
+      const page = await boundary.listSecurityEvents(append ? activityCursor : null);
+      if (!append) {
+        page.authentication_alerts.forEach(alert => {
+          const row = root.document.createElement('article');
+          row.className = 'security-event authentication-alert';
+          const formatted = boundary.formatAuthenticationAlert(alert);
+          const title = root.document.createElement('strong');
+          title.textContent = formatted.title;
+          const details = root.document.createElement('span');
+          details.className = 'small muted';
+          details.textContent = formatted.detail;
+          row.append(title, details);
+          activityList.append(row);
+        });
+      }
+      const labels = {
+        sign_in: 'Signed in', sign_out: 'Signed out', passkey_enrolled: 'Passkey enrolled',
+        device_revoked: 'Device access revoked', all_sessions_revoked: 'All device access revoked',
+        issue_closed: 'Issue closed', pull_merged: 'Pull request merged',
+        pull_review_approved: 'Pull request approved',
+        pull_review_changes_requested: 'Changes requested', gitea_time_logged: 'Gitea time logged',
+      };
+      page.events.forEach(event => {
+        const row = root.document.createElement('article');
+        row.className = 'security-event';
+        const title = root.document.createElement('strong');
+        title.textContent = labels[event.kind] || 'Security event';
+        const details = root.document.createElement('span');
+        details.className = 'small muted';
+        const context = [event.device_label, event.method, event.target,
+          event.status === 'pending' ? 'Outcome confirmation pending' : null]
+          .filter(value => typeof value === 'string' && value).join(' · ');
+        details.textContent = `${new Date(event.created_at * 1000).toLocaleString()}${context ? ' · ' + context : ''}`;
+        row.append(title, details);
+        activityList.append(row);
+      });
+      activityCursor = page.next_cursor;
+      activityStatus.textContent = activityList.children.length
+        ? `${activityList.children.length} recent security event${activityList.children.length === 1 ? '' : 's'}`
+        : 'No security activity yet.';
+      loadMoreActivity.textContent = 'Load older activity';
+      loadMoreActivity.hidden = !activityCursor;
+    } catch (_error) {
+      activityStatus.textContent = 'Security activity could not be loaded.';
+      loadMoreActivity.textContent = 'Retry activity';
+      loadMoreActivity.hidden = false;
+    }
+  };
+
+  const open = () => {
+    if (!devicesSheet) return;
+    devicesSheet.hidden = false;
+    root.document.getElementById('close-active-devices')?.focus();
+    return Promise.all([renderDevices(), renderPasskeys(), renderSecurityActivity()]);
+  };
+  devicesButton?.addEventListener('click', open);
+  loadMoreActivity?.addEventListener('click', () => renderSecurityActivity(Boolean(activityCursor)));
+  enrollPasskey?.addEventListener('click', async () => {
+    enrollPasskey.disabled = true;
+    devicesStatus.textContent = 'Waiting for your device passkey…';
+    try {
+      await boundary.enrollPasskey();
+      devicesStatus.textContent = 'Passkey enrolled. You can use it at sign-in and authorization prompts.';
+      await renderPasskeys();
+    } catch (_error) {
+      devicesStatus.textContent = 'Passkey enrollment was not completed. Try again.';
+    } finally {
+      enrollPasskey.disabled = false;
+    }
+  });
+  return { open, renderDevices, renderPasskeys, renderSecurityActivity };
+});
@@ -1,6 +1,6 @@
 const BASE = new URL('./', self.location.href).pathname;
 importScripts(BASE + 'static/background-issue-sync.js');
-const CACHE = 'stackchain-dashboard-shell-v88';
+const CACHE = 'stackchain-dashboard-shell-v94';
 const OFFLINE_LEASE_URL = new URL(BASE + '__offline-session-lease', self.location.origin).href;
 const OUTAGE_STATUSES = new Set([500, 502, 503, 504]);
 const NAVIGATION_TIMEOUT_MS = self.__STACKCHAIN_NAVIGATION_TIMEOUT_MS || 4000;
@@ -14,12 +14,15 @@ const SHELL = [
  BASE + 'static/icons/stackchain-512.png',
  BASE + 'static/session.js',
  BASE + 'static/feature-loader.js',
+  BASE + 'static/security-center.js',
  BASE + 'static/markdown.js',
  BASE + 'static/commands.js',
  BASE + 'static/search-preview.js',
  BASE + 'static/widgets.js',
  BASE + 'static/drafts.js',
  BASE + 'static/unfiled-captures.js',
+  BASE + 'static/draft-filing-session.js',
+  BASE + 'static/draft-capacity-dialog.js',
  BASE + 'static/outbox-coordinator.js',
  BASE + 'static/issue-outbox.js',
  BASE + 'static/authored-outbox.js',
@@ -40,6 +43,7 @@ const SHELL = [
  BASE + 'static/plan-today.js',
  BASE + 'static/plan-today-preview.js',
  BASE + 'static/today-sync.js',
+  BASE + 'static/today-rollover.js',
  BASE + 'static/update-ownership.js',
  BASE + 'static/later-work.js',
  BASE + 'static/later-sync.js',
@@ -71,6 +75,8 @@ const SHELL = [
  BASE + 'static/push-notifications.js',
  BASE + 'static/background-issue-sync.js',
 ];
+const OPTIONAL_FEATURES = [
+];

 async function fetchNavigation(request) {
  const controller = new AbortController();
@@ -115,8 +121,21 @@ async function withSessionCsrf(work) {
  }
 }

+async function deletePrivateDatabase(name) {
+  if (!indexedDB) return;
+  await new Promise((resolve, reject) => {
+    let request;
+    try { request = indexedDB.deleteDatabase(name); }
+    catch (error) { reject(error); return; }
+    request.onsuccess = () => resolve();
+    request.onerror = () => reject(request.error || new Error('IndexedDB deletion failed.'));
+    request.onblocked = () => reject(new Error('IndexedDB deletion was blocked.'));
+  });
+}
+
 async function purgeRevokedSessionData() {
  await issueSync.purge();
+  await deletePrivateDatabase('stackchain-unfiled-captures-v1');
  const keys = await caches.keys();
  await Promise.all(
    keys.filter(key => key.startsWith('stackchain-dashboard-')).map(key => caches.delete(key))
@@ -153,6 +172,7 @@ async function offlineLeaseState(cache) {

 async function expiredOfflineResponse() {
  await issueSync.purge();
+  await deletePrivateDatabase('stackchain-unfiled-captures-v1');
  const keys = await caches.keys();
  await Promise.all(
    keys.filter(key => key.startsWith('stackchain-dashboard-')).map(key => caches.delete(key))
@@ -246,10 +266,16 @@ self.addEventListener('install', event => {
 });

 self.addEventListener('activate', event => {
-  event.waitUntil(caches.keys().then(keys => Promise.all(
-    keys.filter(key => key.startsWith('stackchain-dashboard-') && key !== CACHE)
-      .map(key => caches.delete(key))
-  )).then(() => self.clients.claim()));
+  event.waitUntil((async () => {
+    const keys = await caches.keys();
+    await Promise.all(
+      keys.filter(key => key.startsWith('stackchain-dashboard-') && key !== CACHE)
+        .map(key => caches.delete(key))
+    );
+    const cache = await caches.open(CACHE);
+    await Promise.allSettled(OPTIONAL_FEATURES.map(asset => cache.add(asset)));
+    await self.clients.claim();
+  })());
 });

 self.addEventListener('sync', event => {
@@ -267,6 +293,7 @@ self.addEventListener('message', event => {
  if (event.data?.type === 'stackchain-purge-outbox') event.waitUntil((async () => {
    try {
      await issueSync.purge();
+      await deletePrivateDatabase('stackchain-unfiled-captures-v1');
      event.ports?.[0]?.postMessage({ ok: true });
    } catch (error) {
      event.ports?.[0]?.postMessage({ ok: false, error: String(error?.message || 'Outbox purge failed.') });
@@ -416,5 +443,9 @@ self.addEventListener('fetch', event => {
  }
  if (url.origin === self.location.origin && SHELL.includes(url.pathname)) {
    event.respondWith(caches.match(request).then(cached => cached || fetch(request)));
+    return;
+  }
+  if (url.origin === self.location.origin && OPTIONAL_FEATURES.includes(url.pathname)) {
+    event.respondWith(caches.match(request).then(cached => cached || fetch(request)));
  }
 });
@@ -36,191 +36,42 @@
      if (allDevicesButton) allDevicesButton.addEventListener('click', () => boundary.signOutAllDevices());
      const devicesButton = root.document.getElementById('active-devices');
      const devicesSheet = root.document.getElementById('active-devices-sheet');
-      const devicesList = root.document.getElementById('active-devices-list');
      const devicesStatus = root.document.getElementById('active-devices-status');
-      const passkeysList = root.document.getElementById('enrolled-passkeys-list');
-      const passkeysStatus = root.document.getElementById('enrolled-passkeys-status');
      const closeDevices = root.document.getElementById('close-active-devices');
-      const enrollPasskey = root.document.getElementById('enroll-passkey');
-      const activityList = root.document.getElementById('security-activity-list');
-      const activityStatus = root.document.getElementById('security-activity-status');
-      const loadMoreActivity = root.document.getElementById('load-more-security-activity');
-      let activityCursor = null;
-      const renderDevices = async () => {
-        devicesStatus.textContent = 'Loading active devices…';
-        devicesList.replaceChildren();
-        try {
-          const devices = await boundary.listActiveDevices();
-          devices.forEach(device => {
-            const row = root.document.createElement('article');
-            row.className = 'active-device';
-            const details = root.document.createElement('div');
-            const label = root.document.createElement('strong');
-            label.textContent = device.device_label;
-            const timing = root.document.createElement('span');
-            timing.className = 'small muted';
-            timing.textContent = `Signed in ${new Date(device.created_at * 1000).toLocaleString()} · expires ${new Date(device.expires_at * 1000).toLocaleString()}`;
-            details.append(label, timing);
-            if (device.current) {
-              const current = root.document.createElement('span');
-              current.className = 'active-device-current';
-              current.textContent = 'This device';
-              details.append(current);
-            }
-            const revoke = root.document.createElement('button');
-            revoke.type = 'button';
-            revoke.textContent = device.current ? 'Sign out' : 'Revoke';
-            revoke.addEventListener('click', async () => {
-              if (device.current) await boundary.signOut();
-              else if (await boundary.revokeActiveDevice(device)) await renderDevices();
-            });
-            row.append(details, revoke);
-            devicesList.append(row);
-          });
-          devicesStatus.textContent = devices.length ? `${devices.length} active device${devices.length === 1 ? '' : 's'}` : 'No active devices.';
-        } catch (_error) {
-          devicesStatus.textContent = 'Active devices could not be loaded. Try again.';
-        }
-      };
-      const renderPasskeys = async () => {
-        if (!passkeysList || !passkeysStatus) return;
-        passkeysStatus.textContent = 'Loading enrolled passkeys…';
-        passkeysList.replaceChildren();
-        try {
-          const enrolled = await boundary.listPasskeys();
-          enrolled.forEach(passkey => {
-            const row = root.document.createElement('article');
-            row.className = 'enrolled-passkey';
-            const details = root.document.createElement('div');
-            const label = root.document.createElement('strong');
-            label.textContent = passkey.device_label;
-            const timing = root.document.createElement('span');
-            timing.className = 'small muted';
-            const state = passkey.current ? 'This active device' : (passkey.active ? 'Active device' : 'No active session');
-            timing.textContent = `Enrolled ${new Date(passkey.created_at * 1000).toLocaleString()} · ${state}`;
-            details.append(label, timing);
-            const remove = root.document.createElement('button');
-            remove.type = 'button';
-            remove.textContent = 'Remove passkey';
-            remove.addEventListener('click', async () => {
-              remove.disabled = true;
-              passkeysStatus.textContent = `Removing passkey for ${passkey.device_label}…`;
-              try {
-                const outcome = await boundary.revokePasskey(passkey);
-                if (outcome) {
-                  passkeysStatus.textContent = outcome.current_session
-                    ? 'Passkey removed. This session remains active; keep your recovery token available.'
-                    : 'Passkey removed.';
-                  await renderPasskeys();
-                  if (outcome.session_revoked) await renderDevices();
-                } else {
-                  remove.disabled = false;
-                  passkeysStatus.textContent = `${enrolled.length} enrolled passkey${enrolled.length === 1 ? '' : 's'}`;
-                }
-              } catch (_error) {
-                passkeysStatus.textContent = 'Passkey could not be removed. Refresh to verify before retrying.';
-                remove.disabled = false;
-              }
-            });
-            row.append(details, remove);
-            passkeysList.append(row);
-          });
-          passkeysStatus.textContent = enrolled.length
-            ? `${enrolled.length} enrolled passkey${enrolled.length === 1 ? '' : 's'}`
-            : 'No passkeys enrolled.';
-        } catch (_error) {
-          passkeysStatus.textContent = 'Enrolled passkeys could not be loaded. Try again.';
-        }
-      };
-      const renderSecurityActivity = async (append = false) => {
-        if (!activityList || !activityStatus || !loadMoreActivity) return;
-        activityStatus.textContent = append ? 'Loading older activity…' : 'Loading security activity…';
-        loadMoreActivity.hidden = true;
-        if (!append) {
-          activityCursor = null;
-          activityList.replaceChildren();
-        }
-        try {
-          const page = await boundary.listSecurityEvents(append ? activityCursor : null);
-          if (!append) {
-            page.authentication_alerts.forEach(alert => {
-              const row = root.document.createElement('article');
-              row.className = 'security-event authentication-alert';
-              const formatted = boundary.formatAuthenticationAlert(alert);
-              const title = root.document.createElement('strong');
-              title.textContent = formatted.title;
-              const details = root.document.createElement('span');
-              details.className = 'small muted';
-              details.textContent = formatted.detail;
-              row.append(title, details);
-              activityList.append(row);
-            });
-          }
-          const labels = {
-            sign_in: 'Signed in',
-            sign_out: 'Signed out',
-            passkey_enrolled: 'Passkey enrolled',
-            device_revoked: 'Device access revoked',
-            all_sessions_revoked: 'All device access revoked',
-            issue_closed: 'Issue closed',
-            pull_merged: 'Pull request merged',
-            pull_review_approved: 'Pull request approved',
-            pull_review_changes_requested: 'Changes requested',
-          };
-          page.events.forEach(event => {
-            const row = root.document.createElement('article');
-            row.className = 'security-event';
-            const title = root.document.createElement('strong');
-            title.textContent = labels[event.kind] || 'Security event';
-            const details = root.document.createElement('span');
-            details.className = 'small muted';
-            const context = [
-              event.device_label,
-              event.method,
-              event.target,
-              event.status === 'pending' ? 'Outcome confirmation pending' : null,
-            ].filter(value => typeof value === 'string' && value).join(' · ');
-            details.textContent = `${new Date(event.created_at * 1000).toLocaleString()}${context ? ' · ' + context : ''}`;
-            row.append(title, details);
-            activityList.append(row);
-          });
-          activityCursor = page.next_cursor;
-          activityStatus.textContent = activityList.children.length
-            ? `${activityList.children.length} recent security event${activityList.children.length === 1 ? '' : 's'}`
-            : 'No security activity yet.';
-          loadMoreActivity.textContent = 'Load older activity';
-          loadMoreActivity.hidden = !activityCursor;
-        } catch (_error) {
-          activityStatus.textContent = 'Security activity could not be loaded.';
-          loadMoreActivity.textContent = 'Retry activity';
-          loadMoreActivity.hidden = false;
-        }
-      };
-      loadMoreActivity?.addEventListener('click', () => renderSecurityActivity(Boolean(activityCursor)));
-      if (devicesButton && devicesSheet) devicesButton.addEventListener('click', () => {
+      const securityFeatures = root.createFeatureLoader({
+        document: root.document,
+        urls: {
+          'security-center': root.document.querySelector(
+            'meta[name="stackchain-feature-security-center"]'
+          )?.content || '',
+        },
+      });
+      let loadingSecurityCenter = false;
+      const openSecurityCenter = async () => {
+        if (loadingSecurityCenter) return;
+        loadingSecurityCenter = true;
        devicesSheet.hidden = false;
        closeDevices?.focus();
-        renderDevices();
-        renderPasskeys();
-        renderSecurityActivity();
-      });
+        try {
+          await securityFeatures.run('security-center', {
+            trigger: devicesButton,
+            status: devicesStatus,
+            retryLabel: 'Tap Active devices to retry.',
+          }, () => {
+            devicesButton.removeEventListener('click', openSecurityCenter);
+            root.attachSecurityCenter(boundary).open();
+          });
+        } finally {
+          loadingSecurityCenter = false;
+        }
+      };
+      if (devicesButton && devicesSheet) {
+        devicesButton.addEventListener('click', openSecurityCenter);
+      }
      if (closeDevices && devicesSheet) closeDevices.addEventListener('click', () => {
        devicesSheet.hidden = true;
        devicesButton?.focus();
      });
-      enrollPasskey?.addEventListener('click', async () => {
-        enrollPasskey.disabled = true;
-        devicesStatus.textContent = 'Waiting for your device passkey…';
-        try {
-          await boundary.enrollPasskey();
-          devicesStatus.textContent = 'Passkey enrolled. You can use it at sign-in and authorization prompts.';
-          await renderPasskeys();
-        } catch (_error) {
-          devicesStatus.textContent = 'Passkey enrollment was not completed. Try again.';
-        } finally {
-          enrollPasskey.disabled = false;
-        }
-      });
      boundary.refreshOfflineLease().then(valid => {
        if (valid) boundary.resumeQueuedWork();
      });
@@ -605,6 +456,7 @@
      await stopWorkerOutbox();
      await deletePrivateDatabase('stackchain-background-outbox-v1');
      await deletePrivateDatabase('stackchain-offline-work-v2');
+      await deletePrivateDatabase('stackchain-unfiled-captures-v1');
    } catch (_error) {
      const error = new Error('Could not clear private queued work from this device.');
      onClearError(error);
@@ -13,7 +13,7 @@ function todayRecapFeedbackRows(draft, describe = () => null) {
  });
 }

-function createTodayRecap({ save, clear, makeId = () => crypto.randomUUID(), storage = null, getLogin = () => '' }) {
+function createTodayRecap({ save, saveAndLog = null, clear, makeId = () => crypto.randomUUID(), storage = null, getLogin = () => '' }) {
  const totals = items => {
    const estimated = items.reduce((sum, item) => sum + (item.estimate_minutes ?? 0), 0);
    const actual = items.reduce((sum, item) => sum + item.actual_minutes, 0);
@@ -23,13 +23,25 @@ function createTodayRecap({ save, clear, makeId = () => crypto.randomUUID(), sto
    const login = String(getLogin() || '').trim().toLowerCase();
    return login ? 'stackchain.today-recap-draft.v1.' + login : '';
  };
+  const handoffKey = () => {
+    const login = String(getLogin() || '').trim().toLowerCase();
+    return login ? 'stackchain.today-recap-handoff.v1.' + login : '';
+  };
  const validStoredDraft = saved => {
    if (!saved || typeof saved.session_id !== 'string' || !saved.session_id.length || saved.session_id.length > 100 ||
        !Array.isArray(saved.items) || !saved.items.length || saved.items.length > 20) return false;
-    return saved.items.every(item => item && typeof item.identity === 'string' && item.identity.length > 0 &&
+    const itemsValid = saved.items.every(item => item && typeof item.identity === 'string' && item.identity.length > 0 &&
      item.identity.length <= 500 && (item.estimate_minutes === null ||
        (Number.isInteger(item.estimate_minutes) && item.estimate_minutes >= 5 && item.estimate_minutes <= 1440)) &&
      Number.isInteger(item.actual_minutes) && item.actual_minutes >= 0 && item.actual_minutes <= 1440);
+    if (!itemsValid) return false;
+    const identities = new Set(saved.items.map(item => item.identity));
+    if (saved.log_identities !== undefined && (!Array.isArray(saved.log_identities) ||
+        saved.log_identities.length > 20 || saved.log_identities.some(identity => !identities.has(identity)))) return false;
+    if (saved.time_logs !== undefined && (!saved.time_logs || typeof saved.time_logs !== 'object' ||
+        Array.isArray(saved.time_logs) || Object.entries(saved.time_logs).some(([identity, status]) =>
+          !identities.has(identity) || !['logged', 'retry', 'verify'].includes(status)))) return false;
+    return true;
  };
  const load = () => {
    const key = storageKey();
@@ -47,12 +59,42 @@ function createTodayRecap({ save, clear, makeId = () => crypto.randomUUID(), sto
      return null;
    }
  };
+  const validHandoff = saved => {
+    if (!saved || typeof saved.session_id !== 'string' || !saved.session_id.length || saved.session_id.length > 100 ||
+        !saved.actual_minutes || typeof saved.actual_minutes !== 'object' || Array.isArray(saved.actual_minutes)) return false;
+    const entries = Object.entries(saved.actual_minutes);
+    return entries.length > 0 && entries.length <= 20 && entries.every(([identity, minutes]) =>
+      identity.length > 0 && identity.length <= 500 && Number.isInteger(minutes) && minutes >= 0 && minutes <= 1440
+    );
+  };
+  const pendingReplan = () => {
+    const key = handoffKey();
+    if (!storage || !key) return null;
+    try {
+      const saved = JSON.parse(storage.getItem(key) || 'null');
+      if (!validHandoff(saved)) {
+        if (saved !== null) storage.removeItem(key);
+        return null;
+      }
+      return { session_id:saved.session_id, actual_minutes:{...saved.actual_minutes} };
+    } catch (_error) {
+      try { storage.removeItem(key); } catch (_ignored) {}
+      return null;
+    }
+  };
+  const completeReplan = () => {
+    const key = handoffKey();
+    if (storage && key) storage.removeItem(key);
+  };
  let draftKey = storageKey();
  let draft = load();
  const persist = () => {
    const key = storageKey();
    if (!storage || !key || !draft) return;
-    storage.setItem(key, JSON.stringify({ session_id:draft.session_id, items:draft.items }));
+    const saved = { session_id:draft.session_id, items:draft.items };
+    if (draft.log_identities) saved.log_identities = draft.log_identities;
+    if (draft.time_logs) saved.time_logs = draft.time_logs;
+    storage.setItem(key, JSON.stringify(saved));
  };
  const restore = () => {
    const key = storageKey();
@@ -65,7 +107,11 @@ function createTodayRecap({ save, clear, makeId = () => crypto.randomUUID(), sto
  };
  const snapshot = () => {
    restore();
-    return draft ? { ...draft, items:draft.items.map(item => ({...item})) } : null;
+    return draft ? {
+      ...draft, items:draft.items.map(item => ({...item})),
+      ...(draft.log_identities ? {log_identities:[...draft.log_identities]} : {}),
+      ...(draft.time_logs ? {time_logs:{...draft.time_logs}} : {}),
+    } : null;
  };
  const saveConfirmed = async includeActuals => {
    restore();
@@ -75,11 +121,48 @@ function createTodayRecap({ save, clear, makeId = () => crypto.randomUUID(), sto
      payload.items.map(item => [item.identity, item.actual_minutes])
    ) : null;
    const result = await save(payload);
+    if (includeActuals && storage && handoffKey()) storage.setItem(handoffKey(), JSON.stringify({
+      session_id:payload.session_id, actual_minutes:actualMinutes,
+    }));
    clear();
    if (storage && draftKey) storage.removeItem(draftKey);
    draft = null;
    return includeActuals ? { result, actual_minutes:actualMinutes } : result;
  };
+  const saveWithTime = async identities => {
+    restore();
+    if (!draft?.items.length) throw new Error('No timed work to save.');
+    if (typeof saveAndLog !== 'function') throw new Error('Gitea time logging is unavailable.');
+    const requested = new Set(Array.isArray(identities) ? identities : []);
+    const eligible = new Set(draft.items.filter(item => item.actual_minutes > 0).map(item => item.identity));
+    const intended = [...new Set([...(draft.log_identities || []), ...requested])]
+      .filter(identity => eligible.has(identity));
+    if (!intended.length) throw new Error('Select at least one non-zero time entry.');
+    draft.log_identities = intended;
+    draft.time_logs = draft.time_logs || {};
+    persist();
+    const logIdentities = intended.filter(identity => !['logged', 'verify'].includes(draft.time_logs[identity]));
+    const payload = {
+      session_id:draft.session_id,
+      items:draft.items.map(item => ({...item})),
+      log_identities:logIdentities,
+    };
+    const result = await saveAndLog(payload);
+    Object.assign(draft.time_logs, Object.fromEntries((result.time_logs || []).map(item => [item.identity, item.status])));
+    persist();
+    const logged = intended.filter(identity => draft.time_logs[identity] === 'logged').length;
+    const verify = intended.filter(identity => draft.time_logs[identity] === 'verify').length;
+    const retry = intended.length - logged - verify;
+    if (retry || verify) {
+      if (verify) throw new Error(verify + ' time ' + (verify === 1 ? 'entry needs' : 'entries need') +
+        ' verification in Gitea; it will not be posted again automatically.');
+      throw new Error(logged + ' time ' + (logged === 1 ? 'entry' : 'entries') + ' logged; ' + retry + ' needs retry.');
+    }
+    clear();
+    if (storage && draftKey) storage.removeItem(draftKey);
+    draft = null;
+    return result;
+  };
  return {
    restore,
    begin(entries, estimates = {}) {
@@ -106,6 +189,10 @@ function createTodayRecap({ save, clear, makeId = () => crypto.randomUUID(), sto
    snapshot,
    save:() => saveConfirmed(false),
    saveForReplan:() => saveConfirmed(true),
+    saveAndLog:saveWithTime,
+    pendingReplan,
+    completeReplan,
+    discardReplan:completeReplan,
  };
 }

@@ -119,6 +206,16 @@ async function saveTodayRecap(payload) {
  return result;
 }

+async function saveTodayRecapTime(payload) {
+  const response = await fetch('api/v1/today/recaps/log-time', {
+    method:'POST', headers:{ Accept:'application/json', 'Content-Type':'application/json' },
+    body:JSON.stringify(payload),
+  });
+  const result = await response.json().catch(() => ({}));
+  if (!response.ok) throw new Error(result.detail || 'Recap time could not be logged.');
+  return result;
+}
+
 function createTodayRecapView({ recap, timer, todayWork, api, fetchJson, qs, escapeHtml,
  describeWork = () => null, adjustPlan = () => {} }) {
  const minutes = value => String(Math.max(0, Number(value) || 0)) + 'm';
@@ -130,11 +227,21 @@ function createTodayRecapView({ recap, timer, todayWork, api, fetchJson, qs, esc
      const variance = item.variance_minutes === null ? 'No estimate comparison' :
        (item.variance_minutes === 0 ? 'On estimate' : minutes(Math.abs(item.variance_minutes)) +
          (item.variance_minutes > 0 ? ' over estimate' : ' under estimate'));
-      return '<label class="today-recap-row"><span><strong>' + escapeHtml(item.label) + '</strong><span class="small today-recap-context">' +
+      const canonical = /^(issue|pull):[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+:[1-9][0-9]*:$/.test(item.identity);
+      const logStatus = draft?.time_logs?.[item.identity];
+      const logControl = logStatus === 'logged' ?
+        '<span class="today-recap-log today-recap-log-success">Logged to Gitea</span>' :
+        logStatus === 'verify' ? '<span class="today-recap-log today-recap-log-verify">Verify this entry in Gitea</span>' :
+        item.actual_minutes > 0 && canonical ?
+        '<label class="today-recap-log"><input type="checkbox" data-recap-log-identity="' +
+        escapeHtml(item.identity) + '"> ' + (logStatus === 'retry' ? 'Retry ' : 'Log ') +
+        minutes(item.actual_minutes) + ' to Gitea</label>' :
+        '<span class="small muted today-recap-log">No non-zero Gitea time to log</span>';
+      return '<div class="today-recap-row"><span><strong>' + escapeHtml(item.label) + '</strong><span class="small today-recap-context">' +
      escapeHtml(item.context) + ' · ' + (item.estimate_minutes === null ? 'Not estimated' : minutes(item.estimate_minutes) + ' estimated') +
      '</span></span><span><input type="number" inputmode="numeric" min="0" max="1440" step="1" value="' +
      item.actual_minutes + '" data-recap-identity="' + escapeHtml(item.identity) + '" aria-label="Actual minutes for ' +
-      escapeHtml(item.label) + '"> min</span><span class="today-recap-variance">' + variance + '</span></label>';
+      escapeHtml(item.label) + '"> min</span><span class="today-recap-variance">' + variance + '</span>' + logControl + '</div>';
    }).join('') || '';
    qs('#today-recap-totals').textContent = draft ? minutes(draft.estimated_minutes) + ' estimated · ' +
      minutes(draft.actual_minutes) + ' actual · ' + minutes(Math.abs(draft.variance_minutes)) +
@@ -164,6 +271,7 @@ function createTodayRecapView({ recap, timer, todayWork, api, fetchJson, qs, esc
    else recap.restore();
    render();
    qs('#save-today-recap').hidden = !recap.snapshot()?.items.length;
+    qs('#save-log-today-recap').hidden = !recap.snapshot()?.items.length;
    qs('#today-recap-sheet').hidden = false;
    document.body.classList.add('task-overlay-open');
    loadHistory();
@@ -187,13 +295,40 @@ function createTodayRecapView({ recap, timer, todayWork, api, fetchJson, qs, esc
      qs('#today-recap-status').textContent = error.message || 'Recap could not be saved. Your timer is unchanged.';
    } finally { button.disabled = false; }
  };
+  const saveTimeDraft = async button => {
+    const selected = Array.from(qs('#today-recap-items').querySelectorAll('[data-recap-log-identity]:checked'))
+      .map(input => input.dataset.recapLogIdentity);
+    if (!selected.length) {
+      qs('#today-recap-status').textContent = 'Select at least one non-zero time entry.';
+      return;
+    }
+    const actualMinutes = Object.fromEntries(recap.snapshot().items.map(item => [item.identity, item.actual_minutes]));
+    button.disabled = true;
+    qs('#today-recap-status').textContent = 'Logging selected time…';
+    try {
+      await recap.saveAndLog(selected);
+      qs('#today-recap-status').textContent = 'Selected time logged to Gitea.';
+      await loadHistory(); render(); button.hidden = true;
+      close();
+      adjustPlan(actualMinutes);
+    } catch (error) {
+      qs('#today-recap-status').textContent = error.message || 'Time could not be logged. Your recap is ready to retry.';
+      render();
+    } finally { button.disabled = false; }
+  };
  const bind = () => {
    qs('#open-today-recaps').addEventListener('click', () => open());
    qs('#close-today-recap').addEventListener('click', close);
    qs('#discard-today-recap').addEventListener('click', close);
    qs('#save-today-recap').addEventListener('click', event => saveDraft(event.currentTarget));
+    qs('#save-log-today-recap').addEventListener('click', event => saveTimeDraft(event.currentTarget));
+  };
+  return {
+    open, close, saveDraft, saveTimeDraft, loadHistory, render, bind,
+    pendingReplan:recap.pendingReplan,
+    completeReplan:recap.completeReplan,
+    discardReplan:recap.discardReplan,
  };
-  return { open, close, saveDraft, loadHistory, render, bind };
 }

 function endTodaySession(workSession, qs) {
@@ -213,7 +348,8 @@ function setupTodayRecap(timer, timerView, todayWork, api, qs, escapeHtml, close
  describeWork, adjustPlan) {
  const options = { timer, timerView, todayWork, api, qs, escapeHtml, describeWork, adjustPlan };
  const recap = createTodayRecap({
-    save:saveTodayRecap, clear:() => timer.clearRecap(), storage:localStorage, getLogin,
+    save:saveTodayRecap, saveAndLog:saveTodayRecapTime,
+    clear:() => timer.clearRecap(), storage:localStorage, getLogin,
  });
  const view = createTodayRecapView({ ...options, recap });
  view.bind();
@@ -0,0 +1,38 @@
+function createTodayRollover(options = {}) {
+  const now = options.now || (() => new Date());
+  const resolvedTimeZone = options.resolvedTimeZone || (() =>
+    Intl.DateTimeFormat().resolvedOptions().timeZone || 'UTC');
+
+  function timeZone() {
+    return options.timeZone?.() || resolvedTimeZone();
+  }
+
+  function localDate() {
+    if (options.localDate) return options.localDate();
+    const parts = new Intl.DateTimeFormat('en-CA', {
+      timeZone: timeZone(), year: 'numeric', month: '2-digit', day: '2-digit',
+    }).formatToParts(now());
+    const value = Object.fromEntries(parts.map(part => [part.type, part.value]));
+    return `${value.year}-${value.month}-${value.day}`;
+  }
+
+  function reviewState(plan) {
+    if (!Array.isArray(plan?.ids) || !plan.ids.length) return 'empty';
+    if (!plan.plan_date) return 'legacy';
+    return plan.plan_date === localDate() ? 'current' : 'stale';
+  }
+
+  function operation({ operation_id, base_revision, selected_ids, capacity_minutes, estimates = {} }) {
+    const ids = [...new Set((selected_ids || []).filter(id => typeof id === 'string' && id))];
+    const selected = new Set(ids);
+    return {
+      operation_id, action: 'rollover', item_id: 'plan', base_revision,
+      plan_date: localDate(), timezone: timeZone(), ids, capacity_minutes,
+      estimates: Object.fromEntries(Object.entries(estimates).filter(([id]) => selected.has(id))),
+    };
+  }
+
+  return { localDate, timeZone, reviewState, operation };
+}
+
+if (typeof module !== 'undefined' && module.exports) module.exports = createTodayRollover;
@@ -55,20 +55,22 @@ function createTodaySync({ storage, getLogin, fetchJson, onRemoteIds, onRemotePl
  function adopt(plan, broadcast = true) {
    if (!Number.isInteger(plan?.revision) || !Array.isArray(plan?.ids)) return false;
    if (plan.revision < savedRevision()) return false;
+    const snapshot = {
+      revision: plan.revision, ids: plan.ids,
+      capacity_minutes: plan.capacity_minutes ?? null, estimates: plan.estimates || {},
+    };
+    if (plan.plan_date) {
+      snapshot.plan_date = plan.plan_date;
+      snapshot.timezone = plan.timezone || null;
+    }
    try {
-      storage?.setItem(snapshotKey(), JSON.stringify({
-        revision: plan.revision, ids: plan.ids,
-        capacity_minutes: plan.capacity_minutes ?? null, estimates: plan.estimates || {},
-      }));
+      storage?.setItem(snapshotKey(), JSON.stringify(snapshot));
    } catch (_error) {
      // A storage quota failure must not prevent the current tab from using server truth.
    }
    onRemoteIds?.(plan.ids);
    onRemotePlan?.(plan);
-    if (broadcast) channel?.postMessage({
-      revision: plan.revision, ids: plan.ids,
-      capacity_minutes: plan.capacity_minutes ?? null, estimates: plan.estimates || {},
-    });
+    if (broadcast) channel?.postMessage(snapshot);
    return true;
  }

@@ -129,7 +131,7 @@ function createTodaySync({ storage, getLogin, fetchJson, onRemoteIds, onRemotePl
            ? record.operation.base_revision : Math.max(0, savedRevision()),
        }))
        .filter(operation => operation && typeof operation.operation_id === 'string' &&
-          ['add', 'remove', 'move', 'configure'].includes(operation.action) && typeof operation.item_id === 'string');
+          ['add', 'remove', 'move', 'configure', 'rollover'].includes(operation.action) && typeof operation.item_id === 'string');
    } catch (_error) {
      return [];
    }
@@ -201,6 +203,26 @@ function createTodaySync({ storage, getLogin, fetchJson, onRemoteIds, onRemotePl
    }
  }

+  function enqueueRollover(proposed) {
+    if (!proposed || proposed.action !== 'rollover') return false;
+    const operation = {
+      ...proposed, operation_id: operationId(), base_revision: Math.max(0, savedRevision()),
+    };
+    const storageKey = key();
+    if (!storageKey || !storage) return false;
+    const recordKey = storageKey + '.operation.' + encodeURIComponent(operation.operation_id);
+    try {
+      storage.setItem(recordKey, JSON.stringify({ operation, queued_at: now() }));
+      knownOperationKeys.add(recordKey);
+      coordinator?.notify('today');
+      onStatus?.('pending');
+      return true;
+    } catch (_error) {
+      onStatus?.('error');
+      return false;
+    }
+  }
+
  function migrate(ids) {
    const storageKey = key();
    if (!storageKey || !storage) return false;
@@ -281,7 +303,7 @@ function createTodaySync({ storage, getLogin, fetchJson, onRemoteIds, onRemotePl
    if (change.queue === 'today' && pending().length) flush();
  });

-  return { enqueue, enqueueConfiguration, migrate, flush, pending, startLifecycle };
+  return { enqueue, enqueueConfiguration, enqueueRollover, migrate, flush, pending, startLifecycle };
 }

 if (typeof module !== 'undefined' && module.exports) module.exports = createTodaySync;
@@ -3,7 +3,10 @@ function createTodayTimer({ storage, getLogin, now = () => Date.now() }) {
    const login = String(getLogin?.() || '').trim().toLowerCase();
    return login ? 'stackchain.today-timer.v1.' + encodeURIComponent(login) : '';
  };
-  const empty = () => ({ version:1, active_identity:'', entries:{} });
+  const empty = () => ({
+    version:1, active_identity:'', entries:{}, away_at:null,
+    pending_interruption:null, attention_interruption:null,
+  });
  const read = () => {
    const ownerKey = key();
    if (!ownerKey || !storage) return empty();
@@ -26,6 +29,18 @@ function createTodayTimer({ storage, getLogin, now = () => Date.now() }) {
      return false;
    }
  };
+  const validPending = state => {
+    const pending = state.pending_interruption;
+    return pending && typeof pending.identity === 'string' && pending.identity &&
+      Number.isFinite(pending.away_ms) && pending.away_ms >= 0 ?
+      { identity:pending.identity, away_ms:pending.away_ms } : null;
+  };
+  const validAttention = state => {
+    const pending = state.attention_interruption;
+    return pending && typeof pending.identity === 'string' && pending.identity &&
+      typeof pending.resume === 'boolean' ?
+      { identity:pending.identity, resume:pending.resume } : null;
+  };
  const settle = (state, at = now()) => {
    const entry = state.entries[state.active_identity];
    if (!entry?.running) return state;
@@ -55,11 +70,15 @@ function createTodayTimer({ storage, getLogin, now = () => Date.now() }) {
      entry.started_at = now();
      entry.running = true;
      state.entries[identity] = entry;
+      state.away_at = null;
+      state.pending_interruption = null;
+      state.attention_interruption = null;
      return write(state);
    },
    pause() {
      const state = read();
      settle(state);
+      state.away_at = null;
      return write(state);
    },
    resume() {
@@ -75,6 +94,86 @@ function createTodayTimer({ storage, getLogin, now = () => Date.now() }) {
    stop() {
      const state = read();
      settle(state);
+      state.away_at = null;
+      state.pending_interruption = null;
+      state.attention_interruption = null;
+      return write(state);
+    },
+    beginAttention() {
+      const state = read();
+      const existing = validAttention(state);
+      if (existing) return existing;
+      const identity = state.active_identity;
+      const entry = state.entries[identity];
+      if (!identity || !entry) return null;
+      const resume = Boolean(entry.running);
+      if (resume) settle(state);
+      state.away_at = null;
+      state.attention_interruption = { identity, resume };
+      return write(state) ? { ...state.attention_interruption } : null;
+    },
+    attentionInterruption() {
+      return validAttention(read());
+    },
+    returnFromAttention() {
+      const state = read();
+      const pending = validAttention(state);
+      const entry = pending && state.entries[pending.identity];
+      if (!pending || !entry) return null;
+      state.active_identity = pending.identity;
+      if (pending.resume && !entry.running) {
+        entry.started_at = now();
+        entry.running = true;
+      }
+      state.attention_interruption = null;
+      state.away_at = null;
+      return write(state) ? { identity:pending.identity, resumed:pending.resume } : null;
+    },
+    markAway() {
+      const state = read();
+      const entry = state.entries[state.active_identity];
+      if (!entry?.running || validPending(state)) return false;
+      if (Number.isFinite(state.away_at) && state.away_at >= 0) return true;
+      state.away_at = now();
+      return write(state);
+    },
+    reconcileInterruption(thresholdMs = 5 * 60 * 1000) {
+      const state = read();
+      const existing = validPending(state);
+      if (existing) return existing;
+      state.pending_interruption = null;
+      const entry = state.entries[state.active_identity];
+      const awayAt = Number(state.away_at);
+      const detectedAt = now();
+      state.away_at = null;
+      if (!entry?.running || !Number.isFinite(awayAt) || awayAt < 0 || detectedAt < awayAt ||
+          detectedAt - awayAt < thresholdMs) {
+        write(state);
+        return null;
+      }
+      const awayMs = detectedAt - awayAt;
+      settle(state, detectedAt);
+      state.pending_interruption = { identity:state.active_identity, away_ms:awayMs };
+      write(state);
+      return { ...state.pending_interruption };
+    },
+    pendingInterruption() {
+      return validPending(read());
+    },
+    resolveInterruption(decision) {
+      if (decision !== 'count' && decision !== 'exclude') return false;
+      const state = read();
+      const pending = state.pending_interruption;
+      const entry = pending && state.entries[pending.identity];
+      if (!entry || !Number.isFinite(pending.away_ms) || pending.away_ms < 0) return false;
+      if (decision === 'exclude') {
+        entry.elapsed_ms = Math.max(0, Number(entry.elapsed_ms) - pending.away_ms);
+      }
+      state.active_identity = pending.identity;
+      entry.started_at = now();
+      entry.running = true;
+      state.pending_interruption = null;
+      state.away_at = null;
      return write(state);
    },
    recapEntries() {
@@ -89,13 +188,57 @@ function createTodayTimer({ storage, getLogin, now = () => Date.now() }) {
    clearRecap() {
      return write(empty());
    },
+    totalElapsed() {
+      const state = read();
+      return Object.entries(state.entries).reduce((total, [identity, entry]) => {
+        const live = identity === state.active_identity && entry.running ?
+          Math.max(0, now() - Number(entry.started_at ?? now())) : 0;
+        return total + Math.max(0, Number(entry.elapsed_ms) || 0) + live;
+      }, 0);
+    },
    snapshot,
  };
 }

-function createTodayTimerView({ timer, isActive, queryAll, formatEstimate }) {
+function createTodayTimerView({ timer, isActive, queryAll, formatEstimate, getRunway, getItem, onReopen, onComplete }) {
  let progress = null;
  let runway = null;
+  queryAll('[data-mobile-today-open]').forEach(button =>
+    button.addEventListener('click', () => {
+      const identity = timer.snapshot().identity;
+      if (identity) onReopen?.(identity);
+    })
+  );
+  queryAll('[data-mobile-today-toggle]').forEach(button =>
+    button.addEventListener('click', () => view.toggle())
+  );
+  queryAll('[data-mobile-today-complete]').forEach(button =>
+    button.addEventListener('click', () => {
+      const identity = timer.snapshot().identity;
+      if (identity) onComplete?.(identity);
+    })
+  );
+  if (typeof document !== 'undefined') queryAll('.work-session-nav').forEach(nav => {
+    const button = document.createElement('button');
+    button.type = 'button';
+    button.hidden = true;
+    button.dataset.workSessionAdjustPlan = '';
+    button.textContent = 'Adjust remaining plan';
+    nav.insertBefore(button, nav.querySelector('[data-work-session-complete]'));
+  });
+  if (typeof MutationObserver !== 'undefined') {
+    const plan = queryAll('#plan-today')[0];
+    const sheet = queryAll('#plan-today-sheet')[0];
+    if (plan && sheet) {
+      const replan = createTodayBudgetReplan({ timer, openPlan:() => plan.click() });
+      queryAll('[data-work-session-adjust-plan]').forEach(button =>
+        button.addEventListener('click', () => replan.open())
+      );
+      new MutationObserver(() => {
+        if (sheet.hidden && replan.restore()) render();
+      }).observe(sheet, { attributes:true, attributeFilter:['hidden'] });
+    }
+  }
  const elapsed = milliseconds => {
    const seconds = Math.max(0, Math.floor(Number(milliseconds || 0) / 1000));
    const hours = Math.floor(seconds / 3600);
@@ -104,13 +247,54 @@ function createTodayTimerView({ timer, isActive, queryAll, formatEstimate }) {
    return hours ? hours + ':' + String(minutes).padStart(2, '0') + ':' + remainder : minutes + ':' + remainder;
  };
  const render = () => {
-    if (!progress) return;
    const snapshot = timer.snapshot();
+    const active = Boolean(progress && isActive() && snapshot.identity);
+    queryAll('[data-mobile-today-hud]').forEach(element => { element.hidden = !active; });
+    queryAll('[data-mobile-today-open]').forEach(element => {
+      element.textContent = active ? String(getItem?.(snapshot.identity)?.title || 'Current Today item') : '';
+    });
+    queryAll('[data-mobile-today-complete]').forEach(button => {
+      const itemTitle = String(getItem?.(snapshot.identity)?.title || 'current Today item');
+      const finalItem = Boolean(progress && progress.index >= progress.total);
+      button.hidden = !active;
+      button.textContent = finalItem ? 'Done & recap' : 'Done & next';
+      button.setAttribute('aria-label', finalItem ?
+        'Complete ' + itemTitle + ' and open Today recap' :
+        'Complete ' + itemTitle + ' and open next Today item');
+    });
+    if (typeof document !== 'undefined') document.body.classList.toggle('mobile-today-active', active);
+    if (!progress) return;
+    const sourceRunway = getRunway?.(snapshot) || runway;
+    const liveRunway = sourceRunway?.future_minutes !== undefined ? (() => {
+      const currentElapsed = Math.max(0, Math.ceil(snapshot.elapsed_ms / 60000));
+      const currentRemaining = sourceRunway.current_minutes === null ? null :
+        Math.max(0, sourceRunway.current_minutes - currentElapsed);
+      const remaining = currentRemaining === null || sourceRunway.future_minutes === null ? null :
+        currentRemaining + sourceRunway.future_minutes;
+      const projected = remaining === null ? null : Math.ceil(timer.totalElapsed() / 60000) + remaining;
+      const capacityRemaining = sourceRunway.capacity_minutes === null || projected === null ? null :
+        sourceRunway.capacity_minutes - projected;
+      return {
+        ...sourceRunway,
+        remaining_minutes:remaining,
+        over_estimate_minutes:sourceRunway.current_minutes === null ? 0 :
+          Math.max(0, currentElapsed - sourceRunway.current_minutes),
+        over_capacity_minutes:capacityRemaining === null ? 0 : Math.max(0, -capacityRemaining),
+      };
+    })() : sourceRunway;
    const timing = isActive() && snapshot.identity ? ' · ' + elapsed(snapshot.elapsed_ms) +
-      (runway?.current_minutes ? ' / ' + formatEstimate(runway.current_minutes) : '') : '';
+      (liveRunway?.current_minutes ? ' / ' + formatEstimate(liveRunway.current_minutes) : '') : '';
+    const estimateRisk = liveRunway?.over_estimate_minutes ?
+      ' · ' + formatEstimate(liveRunway.over_estimate_minutes) + ' over estimate' : '';
+    const capacityRisk = liveRunway?.over_capacity_minutes ?
+      ' · Today projected ' + formatEstimate(liveRunway.over_capacity_minutes) + ' over capacity' : '';
    queryAll('[data-work-session-progress]').forEach(element => {
-      element.textContent = 'Item ' + progress.index + ' of ' + progress.total + timing +
-        (runway?.remaining_minutes ? ' · ' + formatEstimate(runway.remaining_minutes) + ' remaining' : '');
+      element.textContent = 'Item ' + progress.index + ' of ' + progress.total + timing + estimateRisk + capacityRisk +
+        (!estimateRisk && !capacityRisk && liveRunway?.remaining_minutes ?
+          ' · ' + formatEstimate(liveRunway.remaining_minutes) + ' remaining' : '');
+    });
+    queryAll('[data-work-session-adjust-plan]').forEach(button => {
+      button.hidden = !(liveRunway?.over_estimate_minutes || liveRunway?.over_capacity_minutes);
    });
    queryAll('[data-work-session-timer-toggle]').forEach(button => {
      button.hidden = !isActive();
@@ -119,16 +303,72 @@ function createTodayTimerView({ timer, isActive, queryAll, formatEstimate }) {
    });
  };
  return {
-    open(identity, active) { active ? timer.activate(identity) : timer.stop(); render(); },
-    finish() { timer.stop(); progress = null; runway = null; },
+    open(identity, active) {
+      const current = timer.snapshot();
+      if (active && current.identity !== identity) timer.activate(identity);
+      else if (!active) timer.stop();
+      render();
+    },
+    finish() { timer.stop(); progress = null; runway = null; render(); },
    update(nextProgress, nextRunway) { progress = nextProgress; runway = nextRunway; render(); },
-    reset() { progress = null; runway = null; },
+    reset() { progress = null; runway = null; render(); },
    toggle() { const state = timer.snapshot(); state.running ? timer.pause() : timer.resume(); render(); },
    render,
  };
 }

+function createTodayBudgetReplan({ timer, openPlan }) {
+  let active = false;
+  let resume = false;
+  return {
+    open() {
+      if (active) return false;
+      const state = timer.snapshot();
+      if (!state.identity) return false;
+      resume = Boolean(state.running);
+      if (resume && timer.pause() === false) return false;
+      active = true;
+      openPlan?.(state);
+      return true;
+    },
+    restore() {
+      if (!active) return false;
+      active = false;
+      const shouldResume = resume;
+      resume = false;
+      return !shouldResume || timer.resume() !== false;
+    },
+  };
+}
+
+function createTodayInterruptionPrompt({ timer, sheet, description, getItemLabel, onResolved }) {
+  const render = pending => {
+    if (!pending) {
+      sheet.hidden = true;
+      return false;
+    }
+    const label = String(getItemLabel?.(pending.identity) || 'Current Today item');
+    const minutes = Math.max(1, Math.round(pending.away_ms / 60000));
+    description.textContent = label + ' · away for ' + minutes + ' minute' + (minutes === 1 ? '' : 's');
+    sheet.hidden = false;
+    return true;
+  };
+  return {
+    background() { return timer.markAway(); },
+    foreground() { return render(timer.reconcileInterruption()); },
+    restore() { return render(timer.pendingInterruption()); },
+    resolve(decision) {
+      if (!timer.resolveInterruption(decision)) return false;
+      sheet.hidden = true;
+      onResolved?.();
+      return true;
+    },
+  };
+}
+
 if (typeof module !== 'undefined' && module.exports) {
  createTodayTimer.createView = createTodayTimerView;
+  createTodayTimer.createInterruptionPrompt = createTodayInterruptionPrompt;
+  createTodayTimer.createBudgetReplan = createTodayBudgetReplan;
  module.exports = createTodayTimer;
 }
@@ -150,12 +150,15 @@ function createTodayWork({ storage, getLogin, limit = 5 }) {
  }

  function runway(items, currentIndex = 0) {
-    const estimates = planning().estimates;
-    const remaining = (items || []).slice(Math.max(0, currentIndex));
-    const minutes = remaining.map(item => estimates[identity(item)] || null);
+    const plan = planning();
+    const minutes = (items || []).slice(Math.max(0, currentIndex)).map(item => plan.estimates[identity(item)] || null);
+    const total = values => values.some(value => value === null) ? null :
+      values.reduce((sum, value) => sum + value, 0);
    return {
      current_minutes: minutes[0] || null,
-      remaining_minutes: minutes.some(value => value === null) ? null : minutes.reduce((total, value) => total + value, 0),
+      remaining_minutes: total(minutes),
+      future_minutes: total(minutes.slice(1)),
+      capacity_minutes: plan.capacity_minutes,
    };
  }

@@ -1,5 +1,6 @@
 function createUnfiledCaptures({
  storage,
+  attachmentStore = null,
  getCaptureLogin = () => '',
  getCurrentLogin = () => '',
  createId = () => globalThis.crypto?.randomUUID?.() || String(Date.now()) + '-' + Math.random().toString(16).slice(2),
@@ -29,24 +30,101 @@ function createUnfiledCaptures({
      .map(item => ({...item, quarantined: !currentLogin || currentLogin !== item.ownerLogin}));
  }

-  function save(note) {
+  function capacity() {
+    const items = read().slice().sort((left, right) => Number(right.savedAt) - Number(left.savedAt));
+    return {full:items.length >= maxItems, count:items.length, maxItems, oldest:items.at(-1) || null};
+  }
+
+  function prepare(note) {
    const title = String(note?.title || '').trim().slice(0, 255);
    const body = String(note?.body || '').trim().slice(0, 10000);
    if (!title) throw new Error('Add a title before saving.');
    const ownerLogin = String(getCaptureLogin() || '').trim();
    if (!ownerLogin) throw new Error('Offline identity is unavailable. Reconnect once before saving private work.');
-    const item = {id:String(createId()), ownerLogin, title, body, savedAt:Number(now())};
-    const items = [item, ...read().filter(existing => existing.id !== item.id)].slice(0, maxItems);
-    write(items);
-    return item;
+    const attachment = note?.attachment;
+    const hasAttachment = Boolean(attachment?.blob && attachment?.filename &&
+      ['image/png', 'image/jpeg', 'image/webp'].includes(String(attachment?.contentType || '')));
+    if (attachment && !hasAttachment) throw new Error('The screenshot is unavailable. Choose it again before saving.');
+    if (hasAttachment && !attachmentStore) {
+      throw new Error('Screenshot storage is unavailable. Your capture is still open; retry after reloading.');
+    }
+    return {title, body, ownerLogin, attachment, hasAttachment};
+  }
+
+  function persist(prepared, existing, removed = null) {
+    const item = {
+      id:String(createId()), ownerLogin:prepared.ownerLogin, title:prepared.title, body:prepared.body,
+      savedAt:Number(now()), ...(prepared.hasAttachment ? {hasAttachment:true} : {}),
+    };
+    const items = [item, ...existing.filter(candidate => candidate.id !== item.id)];
+    const writeItems = () => {
+      try { write(items); }
+      catch (error) {
+        if (prepared.hasAttachment) Promise.resolve(attachmentStore.delete(item.id)).catch(() => {});
+        throw error;
+      }
+      return item;
+    };
+    const stage = prepared.hasAttachment
+      ? Promise.resolve(attachmentStore.put(item.id, {
+        filename:String(prepared.attachment.filename).slice(0, 255),
+        contentType:String(prepared.attachment.contentType), blob:prepared.attachment.blob,
+      }))
+      : null;
+    if (!stage && !removed?.hasAttachment) return writeItems();
+    return Promise.resolve(stage).then(async () => {
+      if (!removed?.hasAttachment) return writeItems();
+      const removedAttachment = await attachmentStore.get(removed.id);
+      try {
+        await attachmentStore.delete(removed.id);
+      } catch (error) {
+        if (prepared.hasAttachment) await Promise.resolve(attachmentStore.delete(item.id)).catch(() => {});
+        throw error;
+      }
+      try { return writeItems(); }
+      catch (error) {
+        if (removedAttachment) await Promise.resolve(attachmentStore.put(removed.id, removedAttachment)).catch(() => {});
+        throw error;
+      }
+    });
+  }
+
+  function save(note) {
+    const prepared = prepare(note);
+    const existing = read();
+    if (existing.length >= maxItems) throw new Error('Drafts full — nothing was deleted.');
+    return persist(prepared, existing);
+  }
+
+  function replaceOldest(note, expectedOldestId) {
+    const prepared = prepare(note);
+    const existing = read().slice().sort((left, right) => Number(right.savedAt) - Number(left.savedAt));
+    const oldest = existing.at(-1);
+    if (existing.length < maxItems || !oldest || oldest.id !== expectedOldestId) {
+      throw new Error('Drafts changed. Review them before replacing anything.');
+    }
+    return persist(prepared, existing.filter(item => item.id !== oldest.id), oldest);
  }

  function discard(id) {
    const items = read();
    const remaining = items.filter(item => item.id !== id);
    if (remaining.length === items.length) return false;
-    write(remaining);
-    return true;
+    const removed = items.find(item => item.id === id);
+    if (!removed?.hasAttachment) {
+      write(remaining);
+      return true;
+    }
+    return Promise.resolve(attachmentStore?.get(id)).then(removedAttachment =>
+      Promise.resolve(attachmentStore?.delete(id)).then(async () => {
+        try { write(remaining); }
+        catch (error) {
+          if (removedAttachment) await Promise.resolve(attachmentStore?.put(id, removedAttachment)).catch(() => {});
+          throw error;
+        }
+        return true;
+      })
+    );
  }

  function resume(id, confirmedLogin) {
@@ -55,11 +133,20 @@ function createUnfiledCaptures({
    if (!confirmedLogin || String(confirmedLogin).trim() !== item.ownerLogin) {
      throw new Error('Reconnect with the account that saved this capture.');
    }
-    discard(id);
-    return {repository:'', title:item.title, body:item.body, labelIds:[]};
+    const draft = {repository:'', title:item.title, body:item.body, labelIds:[]};
+    if (!item.hasAttachment) return draft;
+    if (!attachmentStore) throw new Error('The saved screenshot is unavailable. Retry after reloading.');
+    return Promise.resolve(attachmentStore.get(id)).then(attachment => {
+      if (!attachment?.blob || !attachment?.filename || !attachment?.contentType) {
+        throw new Error('The saved screenshot is unavailable. Keep this Draft and retry.');
+      }
+      return {...draft, attachment};
+    });
  }

-  return {list, save, discard, resume};
+  function completeResume(id) { return discard(id); }
+
+  return {list, capacity, save, replaceOldest, discard, resume, completeResume};
 }

 if (typeof module !== 'undefined' && module.exports) module.exports = createUnfiledCaptures;
@@ -10,6 +10,7 @@ import os
 import secrets
 import time
 from dataclasses import dataclass
+from urllib.parse import urlsplit

 from fastapi import Request

@@ -47,6 +48,33 @@ def mode() -> str:
    return os.getenv("STACKCHAIN_DASHBOARD_AUTH_MODE", OPERATOR_MODE).strip().lower()


+def public_origin() -> str | None:
+    """Return the canonical HTTPS browser origin, or None when it is invalid."""
+    configured = os.getenv("STACKCHAIN_DASHBOARD_PUBLIC_ORIGIN", "").strip()
+    if not configured:
+        return None
+    try:
+        parsed = urlsplit(configured)
+        port = parsed.port
+    except ValueError:
+        return None
+    if (
+        parsed.scheme != "https"
+        or not parsed.hostname
+        or parsed.username is not None
+        or parsed.password is not None
+        or parsed.path not in {"", "/"}
+        or parsed.query
+        or parsed.fragment
+    ):
+        return None
+    hostname = parsed.hostname.lower()
+    authority = f"[{hostname}]" if ":" in hostname else hostname
+    if port is not None and port != 443:
+        authority += f":{port}"
+    return f"https://{authority}"
+
+
 def configuration_error() -> str | None:
    configured_mode = mode()
    if configured_mode == INSECURE_LOCAL_MODE:
@@ -59,6 +87,8 @@ def configuration_error() -> str | None:
        return "operator mode requires two sufficiently long secrets"
    if hmac.compare_digest(operator_secret, signing_secret):
        return "operator and session secrets must be independent"
+    if public_origin() is None:
+        return "operator mode requires a canonical HTTPS public origin"
    return None


@@ -274,5 +304,5 @@ def application_path(request: Request) -> str:

 def same_origin(request: Request) -> bool:
    origin = request.headers.get("origin", "")
-    expected = f"{request.url.scheme}://{request.url.netloc}"
-    return bool(origin) and hmac.compare_digest(origin.rstrip("/"), expected)
+    expected = public_origin()
+    return bool(origin and expected) and hmac.compare_digest(origin.rstrip("/"), expected)
@@ -26,7 +26,12 @@ FEATURE_SOURCES = {
    "pull-workflow": ("static/pull-sheet.js", "static/review-sheet.js"),
    "push-notifications": ("static/push-notifications.js",),
    "device-setup": ("static/install-app.js", "static/mobile-device-setup.js"),
-    "today-timer": ("static/today-timer.js", "static/today-recap.js"),
+    "security-center": ("static/security-center.js",),
+    "today-timer": (
+        "static/mobile-task-dock.js", "static/today-timer.js", "static/today-recap.js",
+        "static/today-rollover.js", "static/drafts.js", "static/unfiled-captures.js",
+        "static/draft-filing-session.js", "static/draft-capacity-dialog.js",
+    ),
 }
 CACHE_DECLARATION = re.compile(
    r"const CACHE = 'stackchain-dashboard-shell-(?:v\d+|[0-9a-f]{16})';"
@@ -110,11 +115,20 @@ def build_frontend(frontend_dir: Path) -> FrontendBuild:
    for source in sources:
        if source != WORKER_RUNTIME_SOURCE:
            worker = worker.replace(f"  BASE + '{source}',\n", "")
+    eager_feature = feature_bundles["today-timer"]
+    optional_features = {
+        name: bundle for name, bundle in feature_bundles.items() if name != "today-timer"
+    }
    worker = worker.replace(
        "  BASE + 'static/dashboard.css',\n",
        "  BASE + 'static/dashboard.css',\n"
        + f"  BASE + '{core.runtime_name}',\n"
-        + "".join(f"  BASE + '{bundle.runtime_name}',\n" for bundle in feature_bundles.values()),
+        + f"  BASE + '{eager_feature.runtime_name}',\n",
+    )
+    worker = worker.replace(
+        "const OPTIONAL_FEATURES = [\n",
+        "const OPTIONAL_FEATURES = [\n"
+        + "".join(f"  BASE + '{bundle.runtime_name}',\n" for bundle in optional_features.values()),
    )
    worker = CACHE_DECLARATION.sub(
        "const CACHE = 'stackchain-dashboard-shell-BUILD';", worker, count=1
@@ -214,6 +214,35 @@ async def fetch(path: str) -> Any:
    return r.json()


+def issue_time_target(identity: str) -> tuple[str, str]:
+    """Return the canonical repository and issue number encoded by an identity."""
+    match = re.fullmatch(
+        r"(?:issue|pull):([A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+):([1-9][0-9]*):",
+        identity,
+    )
+    if match is None:
+        raise ValueError("time log target is invalid")
+    return match.groups()
+
+
+async def log_issue_time(identity: str, seconds: int) -> None:
+    """Log time to the canonical issue endpoint encoded by a dashboard identity."""
+    repository, number = issue_time_target(identity)
+    if not isinstance(seconds, int) or isinstance(seconds, bool) or not 1 <= seconds <= 86400:
+        raise ValueError("time log duration is invalid")
+    response = await _get_client().post(
+        f"/api/v1/repos/{repository}/issues/{number}/times",
+        headers={**_auth(), "Content-Type": "application/json"},
+        json={"time": seconds},
+    )
+    response.raise_for_status()
+
+
+def time_log_failure_is_retryable(error: Exception) -> bool:
+    """Return true only when failure proves no successful response was lost."""
+    return isinstance(error, (ValueError, GiteaOverloadedError, httpx.ConnectError, httpx.HTTPStatusError))
+
+
 async def fetch_text(path: str, max_bytes: int) -> tuple[str, bool]:
    chunks: list[bytes] = []
    size = 0
@@ -13,7 +13,7 @@ from contextlib import asynccontextmanager
 from datetime import datetime
 from pathlib import Path
 from typing import Any, Literal
-from urllib.parse import urlencode
+from urllib.parse import urlencode, urlsplit

 from fastapi import FastAPI, Header, HTTPException, Path as PathParam, Query, Request, Response
 from fastapi.exceptions import RequestValidationError
@@ -279,6 +279,7 @@ StepUpAction = Literal[
    "merge_pull",
    "submit_pull_review",
    "close_issue",
+    "log_recap_time",
    "revoke_device",
    "revoke_all_sessions",
    "enroll_passkey",
@@ -339,10 +340,12 @@ def _security_event_store() -> SecurityEventStore:


 def _passkey_relying_party(request: Request) -> tuple[str, str]:
-    rp_id = os.getenv("STACKCHAIN_PASSKEY_RP_ID", request.url.hostname or "")
+    canonical_origin = dashboard_auth.public_origin()
+    canonical_host = urlsplit(canonical_origin).hostname if canonical_origin else None
+    rp_id = os.getenv("STACKCHAIN_PASSKEY_RP_ID", canonical_host or request.url.hostname or "")
    origin = os.getenv(
        "STACKCHAIN_PASSKEY_ORIGIN",
-        f"{request.url.scheme}://{request.url.netloc}",
+        canonical_origin or f"{request.url.scheme}://{request.url.netloc}",
    )
    return rp_id, origin

@@ -394,12 +397,15 @@ class NotificationReadBatch(BaseModel):

 class TodayOperation(BaseModel):
    operation_id: str = Field(min_length=1, max_length=100)
-    action: Literal["add", "remove", "move", "configure"]
+    action: Literal["add", "remove", "move", "configure", "rollover"]
    item_id: str = Field(min_length=1, max_length=500)
    direction: Literal["up", "down"] | None = None
    base_revision: int | None = Field(default=None, ge=0)
    capacity_minutes: int | None = Field(default=None, ge=15, le=1440)
    estimates: dict[str, int] = Field(default_factory=dict, max_length=5)
+    plan_date: str | None = Field(default=None, min_length=10, max_length=10)
+    timezone: str | None = Field(default=None, min_length=1, max_length=100)
+    ids: list[str] = Field(default_factory=list, max_length=5)

    @model_validator(mode="after")
    def validate_action_fields(self):
@@ -407,13 +413,30 @@ class TodayOperation(BaseModel):
            raise ValueError("move requires a direction")
        if self.action != "move" and self.direction is not None:
            raise ValueError("direction is only valid for move")
-        if self.action != "configure" and (self.capacity_minutes is not None or self.estimates):
-            raise ValueError("capacity and estimates are only valid for configure")
+        if self.action not in {"configure", "rollover"} and (
+            self.capacity_minutes is not None or self.estimates
+        ):
+            raise ValueError("capacity and estimates are only valid for configure or rollover")
+        if self.action == "rollover":
+            if self.item_id != "plan" or self.plan_date is None or self.timezone is None:
+                raise ValueError("rollover requires plan date, timezone, and plan item")
+            if len(set(self.ids)) != len(self.ids):
+                raise ValueError("rollover IDs must be unique")
+        elif self.plan_date is not None or self.timezone is not None or self.ids:
+            raise ValueError("date, timezone, and IDs are only valid for rollover")
        if any(not item_id or len(item_id) > 500 or minutes < 5 or minutes > 1440
               for item_id, minutes in self.estimates.items()):
            raise ValueError("estimates must use bounded item IDs and minutes")
        return self

+    def model_dump(self, *args, **kwargs):
+        data = super().model_dump(*args, **kwargs)
+        if self.action != "rollover":
+            data.pop("plan_date", None)
+            data.pop("timezone", None)
+            data.pop("ids", None)
+        return data
+

 class TodayRecapItem(BaseModel):
    identity: str = Field(min_length=1, max_length=500)
@@ -426,6 +449,23 @@ class TodayRecap(BaseModel):
    items: list[TodayRecapItem] = Field(min_length=1, max_length=20)


+class TodayRecapTimeLog(TodayRecap):
+    log_identities: list[str] = Field(min_length=1, max_length=20)
+
+
+def _recap_time_log_target(payload: TodayRecapTimeLog) -> str:
+    selected_minutes = {
+        item.identity: item.actual_minutes
+        for item in payload.items
+        if item.identity in payload.log_identities
+    }
+    material = "\0".join(
+        [payload.session_id]
+        + [f"{identity}\0{selected_minutes.get(identity, '')}" for identity in sorted(payload.log_identities)]
+    )
+    return f"today-recap:{hashlib.sha256(material.encode()).hexdigest()[:32]}"
+
+
 class LaterOperation(BaseModel):
    operation_id: str = Field(min_length=1, max_length=100)
    action: Literal["defer", "restore"]
@@ -848,6 +888,15 @@ def _share_target_login_redirect(request: Request) -> str:
@app.middleware("http")
 async def require_operator_session(request: Request, call_next):
    path = dashboard_auth.application_path(request)
+    canonical_origin = dashboard_auth.public_origin()
+    if dashboard_auth.mode() == dashboard_auth.OPERATOR_MODE and canonical_origin:
+        expected_authority = urlsplit(canonical_origin).netloc
+        if request.url.netloc.lower() != expected_authority:
+            return JSONResponse(
+                {"detail": "Request host does not match the configured public origin"},
+                status_code=421,
+                headers={"Cache-Control": "no-store"},
+            )
    if path == "/healthz":
        return await call_next(request)

@@ -1005,6 +1054,8 @@ async def enforce_browser_security_boundary(request: Request, call_next):
        "camera=(), microphone=(), geolocation=(), payment=(), usb=()"
    )
    response.headers["X-Frame-Options"] = "DENY"
+    if dashboard_auth.mode() == dashboard_auth.OPERATOR_MODE:
+        response.headers["Strict-Transport-Security"] = "max-age=31536000"
    return response


@@ -1916,6 +1967,112 @@ async def save_today_recap(payload: TodayRecap, response: Response):
    return recap


+@app.post("/api/v1/today/recaps/log-time")
+async def save_today_recap_and_log_time(
+    payload: TodayRecapTimeLog,
+    request: Request,
+    response: Response,
+    step_up_grant: str | None = Header(
+        default=None, alias="X-Step-Up-Grant", max_length=128
+    ),
+):
+    login = await _confirmed_login()
+    if len(set(payload.log_identities)) != len(payload.log_identities):
+        raise HTTPException(status_code=422, detail="time log targets must be unique")
+    requested_items = {item.identity: item for item in payload.items}
+    selected = []
+    try:
+        for identity in payload.log_identities:
+            gitea_proxy.issue_time_target(identity)
+            requested = requested_items.get(identity)
+            if requested is None:
+                raise ValueError("time log target must match the recap")
+            if requested.actual_minutes <= 0:
+                raise ValueError("only non-zero recap time can be logged")
+            selected.append(requested)
+        await _require_step_up(
+            request,
+            step_up_grant,
+            action="log_recap_time",
+            target=_recap_time_log_target(payload),
+        )
+        recap = await asyncio.to_thread(
+            _today_store().save_recap,
+            login,
+            payload.session_id,
+            [item.model_dump() for item in payload.items],
+        )
+        saved_items = {item["identity"]: item for item in recap["items"]}
+        for requested in selected:
+            saved = saved_items.get(requested.identity)
+            if saved is None or saved["actual_minutes"] != requested.actual_minutes:
+                raise ValueError("time log target must match the saved recap")
+    except ValueError as error:
+        raise HTTPException(status_code=422, detail=str(error))
+    except (OSError, sqlite3.Error):
+        raise HTTPException(status_code=503, detail="Today recap could not be saved", headers={"Retry-After": "1"})
+
+    semaphore = asyncio.Semaphore(3)
+
+    async def log_selected_time(item):
+        async with semaphore:
+            result = {"identity": item.identity, "status": "retry"}
+            try:
+                state = await asyncio.to_thread(
+                    _today_store().begin_time_log, login, payload.session_id, item.identity, item.actual_minutes
+                )
+                if state == "claimed":
+                    repository, number = gitea_proxy.issue_time_target(item.identity)
+                    journal = _security_event_store()
+                    try:
+                        operation_id = await asyncio.to_thread(
+                            journal.reserve,
+                            "gitea_time_logged",
+                            target=f"{repository}#{number}",
+                        )
+                    except SecurityEventStoreError:
+                        await asyncio.to_thread(
+                            _today_store().finish_time_log,
+                            login, payload.session_id, item.identity, succeeded=False,
+                        )
+                        return result
+                    try:
+                        await gitea_proxy.log_issue_time(item.identity, item.actual_minutes * 60)
+                    except Exception as error:
+                        if gitea_proxy.time_log_failure_is_retryable(error):
+                            await asyncio.to_thread(
+                                _today_store().finish_time_log,
+                                login, payload.session_id, item.identity, succeeded=False,
+                            )
+                            try:
+                                await asyncio.to_thread(journal.discard, operation_id)
+                            except SecurityEventStoreError:
+                                pass
+                            status = "retry"
+                        else:
+                            status = "verify"
+                        return {"identity": item.identity, "status": status}
+                    await asyncio.to_thread(
+                        _today_store().finish_time_log,
+                        login, payload.session_id, item.identity, succeeded=True,
+                    )
+                    try:
+                        await asyncio.to_thread(journal.finalize, operation_id)
+                    except SecurityEventStoreError:
+                        pass
+                    state = "logged"
+                return {
+                    "identity": item.identity,
+                    "status": "logged" if state == "logged" else ("verify" if state == "pending" else "retry"),
+                }
+            except (ValueError, OSError, sqlite3.Error):
+                return result
+
+    results = await asyncio.gather(*(log_selected_time(item) for item in selected))
+    response.headers["Cache-Control"] = "no-store"
+    return {**recap, "time_logs": results}
+
+
@app.get("/api/v1/later")
 async def get_later_plan():
    login = await _confirmed_login()
@@ -3,6 +3,7 @@
 import json
 import sqlite3
 import time
+from datetime import date
 from pathlib import Path


@@ -41,7 +42,9 @@ class TodayStore:
                revision INTEGER NOT NULL,
                ids TEXT NOT NULL,
                capacity_minutes INTEGER,
-                estimates TEXT NOT NULL DEFAULT '{}'
+                estimates TEXT NOT NULL DEFAULT '{}',
+                plan_date TEXT,
+                timezone TEXT
            )
            """
        )
@@ -50,6 +53,10 @@ class TodayStore:
            connection.execute("ALTER TABLE today_plans ADD COLUMN capacity_minutes INTEGER")
        if "estimates" not in plan_columns:
            connection.execute("ALTER TABLE today_plans ADD COLUMN estimates TEXT NOT NULL DEFAULT '{}'")
+        if "plan_date" not in plan_columns:
+            connection.execute("ALTER TABLE today_plans ADD COLUMN plan_date TEXT")
+        if "timezone" not in plan_columns:
+            connection.execute("ALTER TABLE today_plans ADD COLUMN timezone TEXT")
        connection.execute(
            """
            CREATE TABLE IF NOT EXISTS today_operations (
@@ -82,6 +89,18 @@ class TodayStore:
            "CREATE INDEX IF NOT EXISTS today_recaps_recent "
            "ON today_recaps(login, created_at DESC)"
        )
+        connection.execute(
+            """
+            CREATE TABLE IF NOT EXISTS today_time_logs (
+                login TEXT NOT NULL,
+                session_id TEXT NOT NULL,
+                identity TEXT NOT NULL,
+                actual_minutes INTEGER NOT NULL,
+                status TEXT NOT NULL,
+                PRIMARY KEY (login, session_id, identity)
+            )
+            """
+        )
        connection.commit()
        return connection

@@ -115,17 +134,22 @@ class TodayStore:
            return {"revision": 0, "ids": [], "capacity_minutes": None, "estimates": {}}
        ids = json.loads(row[1])
        estimates = json.loads(row[3] or "{}")
-        return {
+        snapshot = {
            "revision": int(row[0]),
            "ids": ids,
            "capacity_minutes": row[2],
            "estimates": {item_id: minutes for item_id, minutes in estimates.items() if item_id in ids},
        }
+        if len(row) > 4 and row[4]:
+            snapshot["plan_date"] = row[4]
+            snapshot["timezone"] = row[5]
+        return snapshot

    def get(self, login: str) -> dict:
        with self._connect() as connection:
            row = connection.execute(
-                "SELECT revision, ids, capacity_minutes, estimates FROM today_plans WHERE login = ?",
+                "SELECT revision, ids, capacity_minutes, estimates, plan_date, timezone "
+                "FROM today_plans WHERE login = ?",
                (self._normalize_login(login),),
            ).fetchone()
        return self._snapshot(row)
@@ -214,6 +238,42 @@ class TodayStore:
            ).fetchall()
        return [self._recap_snapshot(*row) for row in rows]

+    def begin_time_log(self, login: str, session_id: str, identity: str, actual_minutes: int) -> str:
+        """Claim one recap item for upstream logging, returning its current state."""
+        login = self._normalize_login(login)
+        with self._connect() as connection:
+            connection.execute("BEGIN IMMEDIATE")
+            row = connection.execute(
+                "SELECT actual_minutes, status FROM today_time_logs "
+                "WHERE login = ? AND session_id = ? AND identity = ?",
+                (login, session_id, identity),
+            ).fetchone()
+            if row is None:
+                connection.execute(
+                    "INSERT INTO today_time_logs(login, session_id, identity, actual_minutes, status) "
+                    "VALUES (?, ?, ?, ?, 'pending')",
+                    (login, session_id, identity, actual_minutes),
+                )
+                return "claimed"
+            if row[0] != actual_minutes:
+                raise ValueError("logged recap time cannot be changed")
+            if row[1] == "failed":
+                connection.execute(
+                    "UPDATE today_time_logs SET status = 'pending' "
+                    "WHERE login = ? AND session_id = ? AND identity = ?",
+                    (login, session_id, identity),
+                )
+                return "claimed"
+            return row[1]
+
+    def finish_time_log(self, login: str, session_id: str, identity: str, *, succeeded: bool) -> None:
+        with self._connect() as connection:
+            connection.execute(
+                "UPDATE today_time_logs SET status = ? "
+                "WHERE login = ? AND session_id = ? AND identity = ? AND status = 'pending'",
+                ("logged" if succeeded else "failed", self._normalize_login(login), session_id, identity),
+            )
+
    def apply(
        self,
        login: str,
@@ -234,7 +294,8 @@ class TodayStore:
        with self._connect() as connection:
            connection.execute("BEGIN IMMEDIATE")
            row = connection.execute(
-                "SELECT revision, ids, capacity_minutes, estimates FROM today_plans WHERE login = ?", (login,)
+                "SELECT revision, ids, capacity_minutes, estimates, plan_date, timezone "
+                "FROM today_plans WHERE login = ?", (login,)
            ).fetchone()
            snapshot = self._snapshot(row)
            duplicate = connection.execute(
@@ -273,8 +334,10 @@ class TodayStore:
            serialized_estimates = json.dumps(estimates, separators=(",", ":"))
            if row is None:
                connection.execute(
-                    "INSERT INTO today_plans(login, revision, ids, capacity_minutes, estimates) VALUES (?, ?, ?, ?, ?)",
-                    (login, revision, serialized_ids, snapshot["capacity_minutes"], serialized_estimates),
+                    "INSERT INTO today_plans(login, revision, ids, capacity_minutes, estimates, plan_date, timezone) "
+                    "VALUES (?, ?, ?, ?, ?, ?, ?)",
+                    (login, revision, serialized_ids, snapshot["capacity_minutes"], serialized_estimates,
+                     snapshot.get("plan_date"), snapshot.get("timezone")),
                )
            elif changed:
                connection.execute(
@@ -282,12 +345,16 @@ class TodayStore:
                    (revision, serialized_ids, serialized_estimates, login),
                )
            self._record_operation(connection, login, operation_id)
-            return {
+            result = {
                "revision": revision,
                "ids": ids,
                "capacity_minutes": snapshot["capacity_minutes"],
                "estimates": estimates,
            }
+            if snapshot.get("plan_date"):
+                result["plan_date"] = snapshot["plan_date"]
+                result["timezone"] = snapshot["timezone"]
+            return result

    def apply_batch(self, login: str, operations: list[dict]) -> dict:
        """Apply an ordered batch with one lock and receipt per operation."""
@@ -295,12 +362,15 @@ class TodayStore:
        with self._connect() as connection:
            connection.execute("BEGIN IMMEDIATE")
            row = connection.execute(
-                "SELECT revision, ids, capacity_minutes, estimates FROM today_plans WHERE login = ?", (login,)
+                "SELECT revision, ids, capacity_minutes, estimates, plan_date, timezone "
+                "FROM today_plans WHERE login = ?", (login,)
            ).fetchone()
            snapshot = self._snapshot(row)
            ids = list(snapshot["ids"])
            capacity_minutes = snapshot["capacity_minutes"]
            estimates = dict(snapshot["estimates"])
+            plan_date = snapshot.get("plan_date")
+            timezone = snapshot.get("timezone")
            revision = snapshot["revision"]
            accepted: list[str] = []
            duplicates: list[str] = []
@@ -313,7 +383,7 @@ class TodayStore:
                direction = operation.get("direction")
                if not operation_id or not item_id:
                    raise ValueError("operation_id and item_id are required")
-                if action not in {"add", "remove", "move", "configure"}:
+                if action not in {"add", "remove", "move", "configure", "rollover"}:
                    raise ValueError("unsupported Today action")
                if action == "move" and direction not in {"up", "down"}:
                    raise ValueError("move direction must be up or down")
@@ -357,7 +427,7 @@ class TodayStore:
                    if index >= 0 and 0 <= target < len(ids):
                        ids[index], ids[target] = ids[target], ids[index]
                        changed = True
-                else:
+                elif action == "configure":
                    proposed_capacity = operation.get("capacity_minutes")
                    if proposed_capacity is not None and (
                        not isinstance(proposed_capacity, int) or isinstance(proposed_capacity, bool)
@@ -377,6 +447,48 @@ class TodayStore:
                    changed = capacity_minutes != proposed_capacity or estimates != normalized_estimates
                    capacity_minutes = proposed_capacity
                    estimates = normalized_estimates
+                else:
+                    proposed_date = operation.get("plan_date")
+                    proposed_timezone = operation.get("timezone")
+                    try:
+                        if date.fromisoformat(proposed_date or "").isoformat() != proposed_date:
+                            raise ValueError
+                    except (TypeError, ValueError):
+                        raise ValueError("plan_date must be an ISO calendar date") from None
+                    if not isinstance(proposed_timezone, str) or not proposed_timezone.strip() or len(proposed_timezone) > 100:
+                        raise ValueError("timezone is required and bounded")
+                    proposed_ids = operation.get("ids")
+                    if not isinstance(proposed_ids, list) or len(proposed_ids) > self.limit or any(
+                        not isinstance(candidate, str) or not candidate or len(candidate) > 500
+                        for candidate in proposed_ids
+                    ):
+                        raise ValueError("rollover IDs are invalid or exceed the Today limit")
+                    if len(set(proposed_ids)) != len(proposed_ids):
+                        raise ValueError("rollover IDs must be unique")
+                    proposed_capacity = operation.get("capacity_minutes")
+                    if proposed_capacity is not None and (
+                        not isinstance(proposed_capacity, int) or isinstance(proposed_capacity, bool)
+                        or proposed_capacity < 15 or proposed_capacity > 1440
+                    ):
+                        raise ValueError("capacity_minutes must be between 15 and 1440")
+                    proposed_estimates = operation.get("estimates", {})
+                    if not isinstance(proposed_estimates, dict):
+                        raise ValueError("estimates must be an object")
+                    normalized_estimates = {}
+                    for estimate_id, minutes in proposed_estimates.items():
+                        if estimate_id not in proposed_ids:
+                            continue
+                        if not isinstance(minutes, int) or isinstance(minutes, bool) or minutes < 5 or minutes > 1440:
+                            raise ValueError("estimate minutes must be between 5 and 1440")
+                        normalized_estimates[estimate_id] = minutes
+                    changed = (ids != proposed_ids or capacity_minutes != proposed_capacity or
+                               estimates != normalized_estimates or plan_date != proposed_date or
+                               timezone != proposed_timezone.strip())
+                    ids = list(proposed_ids)
+                    capacity_minutes = proposed_capacity
+                    estimates = normalized_estimates
+                    plan_date = proposed_date
+                    timezone = proposed_timezone.strip()

                revision += 1 if changed else 0
                self._record_operation(connection, login, operation_id)
@@ -386,15 +498,17 @@ class TodayStore:
            serialized_estimates = json.dumps(estimates, separators=(",", ":"))
            if row is None:
                connection.execute(
-                    "INSERT INTO today_plans(login, revision, ids, capacity_minutes, estimates) VALUES (?, ?, ?, ?, ?)",
-                    (login, revision, serialized, capacity_minutes, serialized_estimates),
+                    "INSERT INTO today_plans(login, revision, ids, capacity_minutes, estimates, plan_date, timezone) "
+                    "VALUES (?, ?, ?, ?, ?, ?, ?)",
+                    (login, revision, serialized, capacity_minutes, serialized_estimates, plan_date, timezone),
                )
            elif accepted:
                connection.execute(
-                    "UPDATE today_plans SET revision = ?, ids = ?, capacity_minutes = ?, estimates = ? WHERE login = ?",
-                    (revision, serialized, capacity_minutes, serialized_estimates, login),
+                    "UPDATE today_plans SET revision = ?, ids = ?, capacity_minutes = ?, estimates = ?, "
+                    "plan_date = ?, timezone = ? WHERE login = ?",
+                    (revision, serialized, capacity_minutes, serialized_estimates, plan_date, timezone, login),
                )
-            return {
+            result = {
                "revision": revision,
                "ids": ids,
                "capacity_minutes": capacity_minutes,
@@ -403,3 +517,7 @@ class TodayStore:
                "duplicate_operation_ids": duplicates,
                "rejected_operations": rejected,
            }
+            if plan_date:
+                result["plan_date"] = plan_date
+                result["timezone"] = timezone
+            return result
@@ -303,4 +303,4 @@ async def test_unread_update_offers_reply_mark_read_and_next_independent_of_toda
    assert '.update-reply-actions { display:grid; grid-template-columns:repeat(2,minmax(0,1fr));' in html
    assert '.update-reply-actions button { min-height:44px;' in html
    worker = (Path(__file__).parents[1] / "frontend" / "service-worker.js").read_text()
-    assert "stackchain-dashboard-shell-v88" in worker
+    assert "stackchain-dashboard-shell-v94" in worker
@@ -1,10 +1,12 @@
 import asyncio
 import sqlite3
+import threading
 import time
 from urllib.parse import parse_qs, urlsplit

 import httpx
 import pytest
+from fastapi import Request

 from src import main
 from src.session_store import SessionStoreError
@@ -14,6 +16,7 @@ from src.views import FRONTEND_BUILD
@pytest.fixture
 def access_control(monkeypatch, tmp_path):
    monkeypatch.setenv("STACKCHAIN_DASHBOARD_AUTH_MODE", "operator")
+    monkeypatch.setenv("STACKCHAIN_DASHBOARD_PUBLIC_ORIGIN", "https://test")
    monkeypatch.setenv("STACKCHAIN_DASHBOARD_ACCESS_TOKEN", "correct horse battery staple")
    monkeypatch.setenv("STACKCHAIN_DASHBOARD_SESSION_SECRET", "a-separate-session-signing-secret-with-enough-entropy")
    monkeypatch.setenv("STACKCHAIN_SESSION_DB", str(tmp_path / "sessions.sqlite3"))
@@ -1363,6 +1366,78 @@ async def test_mutation_requires_same_origin_and_session_csrf(access_control, mo
    assert calls == 1


+@pytest.mark.anyio
+async def test_operator_mode_rejects_unconfigured_or_foreign_public_origin_before_auth(
+    monkeypatch,
+):
+    monkeypatch.setenv("STACKCHAIN_DASHBOARD_AUTH_MODE", "operator")
+    monkeypatch.setenv("STACKCHAIN_DASHBOARD_ACCESS_TOKEN", "correct horse battery staple")
+    monkeypatch.setenv(
+        "STACKCHAIN_DASHBOARD_SESSION_SECRET",
+        "a-separate-session-signing-secret-with-enough-entropy",
+    )
+    monkeypatch.delenv("STACKCHAIN_DASHBOARD_PUBLIC_ORIGIN", raising=False)
+    transport = httpx.ASGITransport(app=main.app)
+
+    async with httpx.AsyncClient(transport=transport, base_url="https://test") as client:
+        missing = await client.get("/login")
+        monkeypatch.setenv("STACKCHAIN_DASHBOARD_PUBLIC_ORIGIN", "http://test")
+        insecure = await client.get("/login")
+        monkeypatch.setenv("STACKCHAIN_DASHBOARD_PUBLIC_ORIGIN", "https://dashboard.example")
+        foreign_host = await client.get("/login")
+
+    assert missing.status_code == 503
+    assert insecure.status_code == 503
+    assert foreign_host.status_code == 421
+
+
+@pytest.mark.anyio
+async def test_canonical_origin_drives_csrf_and_passkey_defaults(access_control, monkeypatch):
+    monkeypatch.setenv("STACKCHAIN_DASHBOARD_PUBLIC_ORIGIN", "https://dashboard.example")
+    monkeypatch.delenv("STACKCHAIN_PASSKEY_RP_ID", raising=False)
+    monkeypatch.delenv("STACKCHAIN_PASSKEY_ORIGIN", raising=False)
+    calls = 0
+
+    async def mark_read(notification_id):
+        nonlocal calls
+        calls += 1
+        return {"id": notification_id, "read": True}
+
+    monkeypatch.setattr(main, "mark_notification_read", mark_read)
+    transport = httpx.ASGITransport(app=main.app)
+    async with httpx.AsyncClient(
+        transport=transport, base_url="https://dashboard.example"
+    ) as client:
+        await client.post(
+            "/api/v1/session", json={"access_token": "correct horse battery staple"}
+        )
+        csrf = client.cookies["stackchain_csrf"]
+        valid = await client.patch(
+            "/api/v1/notifications/7/read",
+            headers={
+                "Origin": "https://dashboard.example",
+                "X-CSRF-Token": csrf,
+            },
+        )
+
+    request = Request({
+        "type": "http",
+        "method": "GET",
+        "scheme": "https",
+        "path": "/",
+        "query_string": b"",
+        "headers": [(b"host", b"attacker.invalid")],
+        "server": ("attacker.invalid", 443),
+        "client": ("127.0.0.1", 1),
+    })
+    assert main._passkey_relying_party(request) == (
+        "dashboard.example",
+        "https://dashboard.example",
+    )
+    assert valid.status_code == 200
+    assert calls == 1
+
+
@pytest.mark.anyio
 async def test_logout_clears_session_and_blocks_private_routes(access_control):
    transport = httpx.ASGITransport(app=main.app)
@@ -1617,13 +1692,18 @@ async def test_sign_in_throttle_lookup_does_not_block_the_event_loop(
 async def test_failed_sign_in_recording_does_not_block_the_event_loop(
    access_control, monkeypatch
 ):
+    recording_started = threading.Event()
+    recording_finished = threading.Event()
+
    class SlowAttempts:
        def retry_after(self, source):
            time.sleep(0.02)
            return 0

        def record_failure(self, source):
+            recording_started.set()
            time.sleep(0.15)
+            recording_finished.set()

    monkeypatch.setattr(main, "_login_attempt_store", lambda: SlowAttempts())
    transport = httpx.ASGITransport(app=main.app, client=("203.0.113.11", 1234))
@@ -1631,27 +1711,30 @@ async def test_failed_sign_in_recording_does_not_block_the_event_loop(
        sign_in = asyncio.create_task(
            client.post("/api/v1/session", json={"access_token": "wrong"})
        )
+        assert await asyncio.to_thread(recording_started.wait, 1)
        await asyncio.sleep(0)
-        started = time.perf_counter()
-        await asyncio.sleep(0.04)
-        heartbeat_elapsed = time.perf_counter() - started
+        assert not recording_finished.is_set()
        response = await sign_in

    assert response.status_code == 401
-    assert heartbeat_elapsed < 0.08


@pytest.mark.anyio
 async def test_successful_sign_in_throttle_clear_does_not_block_the_event_loop(
    access_control, monkeypatch
 ):
+    clear_started = threading.Event()
+    clear_finished = threading.Event()
+
    class SlowAttempts:
        def retry_after(self, source):
            time.sleep(0.02)
            return 0

        def clear(self, source):
+            clear_started.set()
            time.sleep(0.15)
+            clear_finished.set()

    monkeypatch.setattr(main, "_login_attempt_store", lambda: SlowAttempts())
    transport = httpx.ASGITransport(app=main.app, client=("203.0.113.12", 1234))
@@ -1662,14 +1745,12 @@ async def test_successful_sign_in_throttle_clear_does_not_block_the_event_loop(
                json={"access_token": "correct horse battery staple"},
            )
        )
+        assert await asyncio.to_thread(clear_started.wait, 1)
        await asyncio.sleep(0)
-        started = time.perf_counter()
-        await asyncio.sleep(0.04)
-        heartbeat_elapsed = time.perf_counter() - started
+        assert not clear_finished.is_set()
        response = await sign_in

    assert response.status_code == 200
-    assert heartbeat_elapsed < 0.08


@pytest.mark.anyio
@@ -9,6 +9,7 @@ from tests.dashboard_bundle import dashboard

 ROOT = Path(__file__).resolve().parents[1]
 SESSION_JS = ROOT / "frontend" / "session.js"
+SECURITY_CENTER_JS = ROOT / "frontend" / "security-center.js"


 def run_session_scenario(scenario: str) -> dict:
@@ -347,7 +348,8 @@ process.stdout.write(JSON.stringify(state));

    assert result["deletedAtIdle"] == []
    assert result["deletedDatabases"] == [
-        "stackchain-background-outbox-v1", "stackchain-offline-work-v2"
+        "stackchain-background-outbox-v1", "stackchain-offline-work-v2",
+        "stackchain-unfiled-captures-v1",
    ]
    assert result["remaining"] == ["gitea.preference"]
    assert result["replaced"] == [
@@ -372,7 +374,8 @@ process.stdout.write(JSON.stringify(state));
    assert result["valid"] is False
    assert result["remaining"] == ["gitea.preference"]
    assert result["deletedDatabases"] == [
-        "stackchain-background-outbox-v1", "stackchain-offline-work-v2"
+        "stackchain-background-outbox-v1", "stackchain-offline-work-v2",
+        "stackchain-unfiled-captures-v1",
    ]
    assert result["deletedCaches"] == ["stackchain-dashboard-shell-v15"]
    assert result["replaced"] == ["/dashboard/login?reason=session-expired"]
@@ -502,7 +505,8 @@ process.stdout.write(JSON.stringify(state));
    ]
    assert result["remaining"] == ["gitea.preference"]
    assert result["deletedDatabases"] == [
-        "stackchain-background-outbox-v1", "stackchain-offline-work-v2"
+        "stackchain-background-outbox-v1", "stackchain-offline-work-v2",
+        "stackchain-unfiled-captures-v1",
    ]
    assert result["deletedCaches"] == ["stackchain-dashboard-shell-v15"]
    assert result["workerMessages"] == [{"type": "stackchain-purge-outbox"}]
@@ -524,7 +528,8 @@ process.stdout.write(JSON.stringify(state));

    assert result["remaining"] == ["gitea.preference"]
    assert result["deletedDatabases"] == [
-        "stackchain-background-outbox-v1", "stackchain-offline-work-v2"
+        "stackchain-background-outbox-v1", "stackchain-offline-work-v2",
+        "stackchain-unfiled-captures-v1",
    ]
    assert result["deletedCaches"] == ["stackchain-dashboard-shell-v15"]
    assert result["workerMessages"] == [{"type": "stackchain-purge-outbox"}]
@@ -619,7 +624,8 @@ process.stdout.write(JSON.stringify(state));
    assert "stackchain.private" in result["removed"]
    assert result["remaining"] == ["gitea.preference"]
    assert result["deletedDatabases"] == [
-        "stackchain-background-outbox-v1", "stackchain-offline-work-v2"
+        "stackchain-background-outbox-v1", "stackchain-offline-work-v2",
+        "stackchain-unfiled-captures-v1",
    ]
    assert result["deletedCaches"] == ["stackchain-dashboard-shell-v15"]
    assert result["assigned"] == "/dashboard/login"
@@ -753,7 +759,7 @@ process.stdout.write(JSON.stringify(state));


 def test_security_activity_renders_authentication_alerts_before_journal_events():
-    source = SESSION_JS.read_text()
+    source = SECURITY_CENTER_JS.read_text()

    alerts = source.index("page.authentication_alerts.forEach")
    events = source.index("page.events.forEach")
@@ -765,14 +771,14 @@ def test_security_activity_renders_authentication_alerts_before_journal_events()


 def test_security_activity_explains_pending_outcome_confirmation():
-    source = SESSION_JS.read_text()
+    source = SECURITY_CENTER_JS.read_text()

    assert "Outcome confirmation pending" in source
    assert "event.status === 'pending'" in source


 def test_security_activity_labels_passkey_enrollment_without_html_rendering():
-    source = SESSION_JS.read_text()
+    source = SECURITY_CENTER_JS.read_text()

    assert "passkey_enrolled: 'Passkey enrolled'" in source
    assert "title.textContent = labels[event.kind]" in source
@@ -780,7 +786,7 @@ def test_security_activity_labels_passkey_enrollment_without_html_rendering():


 def test_security_activity_labels_consequential_pull_review_decisions():
-    source = SESSION_JS.read_text()
+    source = SECURITY_CENTER_JS.read_text()

    assert "pull_review_approved: 'Pull request approved'" in source
    assert "pull_review_changes_requested: 'Changes requested'" in source
@@ -815,3 +821,9 @@ async def test_dashboard_loads_session_boundary_first_and_offers_sign_out():
    assert 'id="security-activity-list"' in html
    assert '>Load older activity</button>' in html
    assert '#sign-out-all { min-height:44px; }' in html
+
+
+def test_security_activity_names_confirmed_gitea_time_logging():
+    source = SECURITY_CENTER_JS.read_text()
+
+    assert "gitea_time_logged: 'Gitea time logged'" in source
@@ -89,3 +89,22 @@ console.log(JSON.stringify({first,second,failedStatus,opened,appends:state.appen
        "opened": 1,
        "appends": 2,
    }
+
+
+def test_security_center_failure_is_accessible_and_retryable_from_active_devices():
+    result = run_loader("""
+const trigger={disabled:false}; const status={textContent:''}; let opened=0;
+const loader=createFeatureLoader({document, urls:{'security-center':'feature-security.js'}, timeoutMs:100});
+const failed=loader.run('security-center',{trigger,status,retryLabel:'Tap Active devices to retry.'},()=>{opened++;});
+state.node.onerror(); const first=await failed; const failedStatus=status.textContent;
+const retry=loader.run('security-center',{trigger,status,retryLabel:'Tap Active devices to retry.'},()=>{opened++;});
+state.node.onload(); const second=await retry;
+console.log(JSON.stringify({first,second,failedStatus,opened,appends:state.appends}));
+""")
+    assert result == {
+        "first": False,
+        "second": True,
+        "failedStatus": "Security center could not load. Tap Active devices to retry.",
+        "opened": 1,
+        "appends": 2,
+    }
@@ -49,7 +49,7 @@ def test_product_workflows_are_stable_lazy_feature_chunks(tmp_path):

    assert set(first.feature_bundles) == {
        "comment-actions", "issue-capture", "pull-workflow", "push-notifications", "device-setup",
-        "today-timer",
+        "today-timer", "security-center",
    }
    assert (
        f'<script src="{first.feature_bundles["today-timer"].runtime_name}"></script>\n'
@@ -63,12 +63,31 @@ def test_product_workflows_are_stable_lazy_feature_chunks(tmp_path):
    assert b"function createReviewController" not in first.runtime_bytes
    assert b"function createPullSheet" in pull_workflow.runtime_bytes
    assert b"function createReviewController" in pull_workflow.runtime_bytes
+    security_center = first.feature_bundles["security-center"]
+    assert b"function attachSecurityCenter" not in first.runtime_bytes
+    assert b"function attachSecurityCenter" in security_center.runtime_bytes
+    assert b"gitea_time_logged" not in first.runtime_bytes
+    assert b"gitea_time_logged" in security_center.runtime_bytes
    # The recap adds only startup wiring; its UI remains in the lazy Today bundle.
-    assert len(first.runtime_gzip_bytes) <= 96 * 1024
+    assert len(first.runtime_gzip_bytes) <= 95 * 1024
    assert f'name="stackchain-feature-issue-capture" content="{capture.runtime_name}"' in first.dashboard_html
    assert f'name="stackchain-feature-pull-workflow" content="{pull_workflow.runtime_name}"' in first.dashboard_html
    assert f"BASE + '{capture.runtime_name}'" in first.service_worker_source
    assert f"BASE + '{pull_workflow.runtime_name}'" in first.service_worker_source
+    assert f'name="stackchain-feature-security-center" content="{security_center.runtime_name}"' in first.dashboard_html
+    assert f"BASE + '{security_center.runtime_name}'" in first.service_worker_source
+
+    shell_block, optional_block = first.service_worker_source.split(
+        "const OPTIONAL_FEATURES = [", 1
+    )
+    optional_block = optional_block.split("];", 1)[0]
+    assert f"BASE + '{first.feature_bundles['today-timer'].runtime_name}'" in shell_block
+    for name, bundle in first.feature_bundles.items():
+        if name == "today-timer":
+            assert f"BASE + '{bundle.runtime_name}'" not in optional_block
+        else:
+            assert f"BASE + '{bundle.runtime_name}'" not in shell_block
+            assert f"BASE + '{bundle.runtime_name}'" in optional_block

    changed_frontend = tmp_path / "frontend"
    shutil.copytree(FRONTEND, changed_frontend)
@@ -85,6 +104,12 @@ def test_product_workflows_are_stable_lazy_feature_chunks(tmp_path):
    assert pull_changed.runtime_name == first.runtime_name
    assert pull_changed.feature_bundles["pull-workflow"].runtime_name != pull_workflow.runtime_name

+    security_source = changed_frontend / "security-center.js"
+    security_source.write_text(security_source.read_text() + "\n// security-center-only change\n")
+    security_changed = build_frontend(changed_frontend)
+    assert security_changed.runtime_name == first.runtime_name
+    assert security_changed.feature_bundles["security-center"].runtime_name != security_center.runtime_name
+

 def test_shipped_browser_bundles_are_valid_javascript(tmp_path):
    build = build_frontend(FRONTEND)
@@ -162,7 +187,7 @@ def test_legacy_cache_marker_is_normalized_out_of_build_identity(tmp_path):
    worker = changed_frontend / "service-worker.js"
    worker.write_text(
        worker.read_text().replace(
-            "const CACHE = 'stackchain-dashboard-shell-v88';",
+            "const CACHE = 'stackchain-dashboard-shell-v94';",
            "const CACHE = 'stackchain-dashboard-shell-v999';",
        )
    )
@@ -7,6 +7,26 @@ from src import gitea_proxy
 from src import main


+@pytest.mark.anyio
+async def test_log_issue_time_uses_canonical_shared_issue_endpoint_and_seconds():
+    requests = []
+
+    async def handler(request):
+        requests.append(request)
+        return httpx.Response(201, json={"id": 1})
+
+    gitea_proxy.start_client(transport=httpx.MockTransport(handler))
+    try:
+        await gitea_proxy.log_issue_time("pull:stackchain/stackchain-dashboard:586:", 2520)
+    finally:
+        await gitea_proxy.stop_client()
+
+    assert len(requests) == 1
+    assert requests[0].method == "POST"
+    assert requests[0].url.path == "/api/v1/repos/stackchain/stackchain-dashboard/issues/586/times"
+    assert requests[0].read() == b'{"time":2520}'
+
+
@pytest.mark.anyio
 async def test_gitea_transport_is_reused_across_requests_and_closed():
    client_ids = []
@@ -744,3 +744,55 @@ async def test_mobile_dashboard_queues_offline_captures_and_exposes_outbox_actio
    assert 'Needs attention' in html
    assert "issueOutbox.discard(item.outbox_id)" in html
    assert '.draft-actions { display:grid; grid-template-columns:repeat(auto-fit,minmax(120px,1fr));' in html
+
+
+
+def test_issue_outbox_reuses_the_original_operation_when_a_source_draft_is_retried():
+    script = f"""
+const createIssueOutbox = require({json.dumps(str(OUTBOX))});
+const values = new Map();
+const storage = {{getItem:k=>values.get(k)||null,setItem:(k,v)=>values.set(k,v)}};
+let sequence = 0;
+const outbox = createIssueOutbox({{
+  storage, getOwnerLogin:()=> 'timmy', createOperationId:()=> 'draft-op-' + (++sequence),
+}});
+const first = outbox.enqueue({{repository:'o/r',title:'Draft work',body:'Context',sourceCaptureId:'capture-7'}});
+const retried = outbox.enqueue({{repository:'o/r',title:'Draft work',body:'Context',sourceCaptureId:'capture-7'}});
+process.stdout.write(JSON.stringify({{first,retried,items:outbox.list(),sequence}}));
+"""
+    output = run_node(script)
+
+    assert output["sequence"] == 1
+    assert len(output["items"]) == 1
+    assert output["first"]["id"] == output["retried"]["id"] == "draft-op-1"
+    assert output["items"][0]["operationId"] == "draft-op-1"
+    assert output["items"][0]["sourceCaptureId"] == "capture-7"
+
+
+def test_durable_source_draft_retry_reconciles_without_allocating_another_operation():
+    script = f"""
+const createIssueOutbox = require({json.dumps(str(OUTBOX))});
+const values = new Map();
+const storage = {{getItem:k=>values.get(k)||null,setItem:(k,v)=>values.set(k,v)}};
+let sequence = 0; const reconciliations = []; let syncRequests = 0;
+const outbox = createIssueOutbox({{
+  storage, getOwnerLogin:()=> 'timmy', createOperationId:()=> 'durable-' + (++sequence),
+  backgroundSync:{{
+    reconcile:async items=>reconciliations.push(items.map(item=>item.operationId)),
+    requestSync:async()=>{{ syncRequests += 1; }},
+  }},
+}});
+(async()=>{{
+  const draft={{repository:'o/r',title:'Draft work',body:'Context',sourceCaptureId:'capture-8'}};
+  const first=await outbox.enqueueDurably(draft);
+  const retried=await outbox.enqueueDurably(draft);
+  process.stdout.write(JSON.stringify({{first,retried,reconciliations,syncRequests,items:outbox.list()}}));
+}})();
+"""
+    output = run_node(script)
+
+    assert "reused" not in output["first"]
+    assert output["retried"]["reused"] is True
+    assert output["reconciliations"] == [["durable-1"], ["durable-1"]]
+    assert output["syncRequests"] == 2
+    assert len(output["items"]) == 1
@@ -347,5 +347,5 @@ async def test_dashboard_syncs_every_later_change_and_exposes_account_status():
 def test_later_sync_ships_atomically_in_the_offline_shell():
    source = (Path(__file__).parents[1] / "frontend" / "service-worker.js").read_text()

-    assert "stackchain-dashboard-shell-v88" in source
+    assert "stackchain-dashboard-shell-v94" in source
    assert "BASE + 'static/later-sync.js'" in source
@@ -137,4 +137,4 @@ def test_markdown_work_bodies_are_mobile_safe_block_containers():
    assert ".markdown-content { min-width:0; max-width:100%; overflow-wrap:anywhere;" in css
    assert ".markdown-content pre { max-width:100%; overflow-x:auto;" in css
    assert ".markdown-content a { min-height:44px;" in css
-    assert "stackchain-dashboard-shell-v88" in worker
+    assert "stackchain-dashboard-shell-v94" in worker
@@ -41,7 +41,7 @@ def test_offline_shell_contains_every_local_dashboard_runtime_asset():
    shell_assets = set(re.findall(r"BASE \+ '([^']+)'", worker.split("async function sessionCsrf", 1)[0]))

    assert local_assets <= shell_assets, f"Offline shell is missing: {sorted(local_assets - shell_assets)}"
-    assert "stackchain-dashboard-shell-v88" in worker
+    assert "stackchain-dashboard-shell-v94" in worker


 def test_all_conversation_composers_offer_accessible_mobile_mentions():
@@ -186,7 +186,7 @@ def test_mobile_dashboard_mounts_phone_safe_device_setup_flow():
    assert "promptStorage:localStorage" in dashboard
    assert "pushControllerReady.then(ensureDeviceSetup)" in dashboard
    assert "BASE + 'static/mobile-device-setup.js'" in worker
-    assert "stackchain-dashboard-shell-v88" in worker
+    assert "stackchain-dashboard-shell-v94" in worker
    assert ".device-setup-panel" in css
    assert ".device-readiness-card" in css
    assert "overflow-x:hidden" in css
@@ -9,20 +9,23 @@ from tests.dashboard_bundle import dashboard

 DOCK = Path(__file__).resolve().parents[1] / "frontend" / "mobile-task-dock.js"
 ENTRY = Path(__file__).resolve().parents[1] / "frontend" / "mobile-work-entry.js"
+TIMER = Path(__file__).resolve().parents[1] / "frontend" / "today-timer.js"


-def test_mobile_work_entry_prioritizes_continue_resume_start_then_fallback():
+def test_mobile_work_entry_prioritizes_continue_resume_start_plan_then_fallback():
    script = f"""
 const createEntry = require({json.dumps(str(ENTRY))});
-const state = {{active:true, resumable:true, today:2}};
+const state = {{active:true, resumable:true, today:2, eligible:3}};
 const calls = [];
 const entry = createEntry({{
  isTodayActive: () => state.active,
  isTodayResumable: () => state.resumable,
  getTodayCount: () => state.today,
+  getEligibleCount: () => state.eligible,
  continueToday: () => calls.push('continue'),
  resumeToday: () => calls.push('resume'),
  startToday: () => calls.push('start'),
+  planToday: () => calls.push('plan'),
  openFallback: () => calls.push('fallback'),
 }});
 const modes = [];
@@ -30,6 +33,7 @@ modes.push(entry.open());
 state.active = false; modes.push(entry.open());
 state.resumable = false; modes.push(entry.open());
 state.today = 0; modes.push(entry.open());
+state.eligible = 0; modes.push(entry.open());
 process.stdout.write(JSON.stringify({{modes, calls}}));
 """
    result = subprocess.run(
@@ -38,8 +42,8 @@ process.stdout.write(JSON.stringify({{modes, calls}}));

    assert result.returncode == 0, result.stderr
    assert json.loads(result.stdout) == {
-        "modes": ["continue", "resume", "start", "work"],
-        "calls": ["continue", "resume", "start", "fallback"],
+        "modes": ["continue", "resume", "start", "plan", "work"],
+        "calls": ["continue", "resume", "start", "plan", "fallback"],
    }


@@ -61,12 +65,14 @@ class FakeElement {{
  focus() {{ this.focuses += 1; }}
 }}
 const nav = new FakeElement();
-const buttons = Object.fromEntries(['work','find','new','search','drafts'].map(name => [name, new FakeElement()]));
+const sessionHud = new FakeElement();
+const buttons = Object.fromEntries(['work','attention','find','new','search','drafts'].map(name => [name, new FakeElement()]));
+buttons.attention.hidden = true;
 const overlay = new FakeElement();
 const calls = [];
 let observerCallback;
 const dock = createDock({{
-  nav, buttons, overlays:[overlay],
+  nav, sessionHud, buttons, overlays:[overlay],
  actions: Object.fromEntries(Object.keys(buttons).map(name => [name, () => calls.push(name)])),
  observe(callback) {{ observerCallback = callback; return {{disconnect() {{}}}}; }},
 }});
@@ -75,10 +81,13 @@ buttons.work.click();
 buttons.find.click();
 overlay.classList.values.add('open'); observerCallback();
 const hiddenWhileOpen = nav.hidden;
+const hudHiddenWhileOpen = sessionHud.attributes['data-overlay-hidden'];
 overlay.classList.values.delete('open'); observerCallback();
 buttons.drafts.click();
 process.stdout.write(JSON.stringify({{
-  calls, hiddenWhileOpen, hiddenAfterClose:nav.hidden,
+  calls, hiddenWhileOpen, hiddenAfterClose:nav.hidden, hudHiddenWhileOpen,
+  hudHiddenAfterClose:sessionHud.attributes['data-overlay-hidden'] || null,
+  attentionHidden:buttons.attention.hidden,
  findFocuses:buttons.find.focuses,
  current:Object.fromEntries(Object.entries(buttons).map(([name, button]) => [name, button.attributes['aria-current'] || null])),
 }}));
@@ -92,9 +101,13 @@ process.stdout.write(JSON.stringify({{
        "calls": ["work", "find", "drafts"],
        "hiddenWhileOpen": True,
        "hiddenAfterClose": False,
+        "hudHiddenWhileOpen": "true",
+        "hudHiddenAfterClose": None,
+        "attentionHidden": True,
        "findFocuses": 1,
        "current": {
            "work": None,
+            "attention": None,
            "find": None,
            "new": None,
            "search": None,
@@ -103,22 +116,57 @@ process.stdout.write(JSON.stringify({{
    }


-def test_mobile_task_dock_shows_contextual_work_label_with_attention_count():
+def test_mobile_task_dock_programmatically_selects_destination_without_running_action():
+    script = f"""
+const createDock = require({json.dumps(str(DOCK))});
+const calls = [];
+const makeButton = () => ({{
+  attributes: {{}},
+  setAttribute(name, value) {{ this.attributes[name] = value; }},
+  removeAttribute(name) {{ delete this.attributes[name]; }},
+}});
+const buttons = {{work:makeButton(), drafts:makeButton()}};
+const dock = createDock({{
+  nav:{{}}, buttons,
+  actions:{{work:()=>calls.push('work'), drafts:()=>calls.push('drafts')}},
+}});
+const selected = dock.select('drafts');
+process.stdout.write(JSON.stringify({{
+  selected, calls,
+  work:buttons.work.attributes['aria-current'] || null,
+  drafts:buttons.drafts.attributes['aria-current'] || null,
+}}));
+"""
+    result = subprocess.run(
+        ["node", "-e", script], capture_output=True, text=True
+    )
+
+    assert result.returncode == 0, result.stderr
+    assert json.loads(result.stdout) == {
+        "selected": True,
+        "calls": [],
+        "work": None,
+        "drafts": "page",
+    }
+
+
+def test_mobile_task_dock_keeps_today_label_separate_from_attention_count():
    script = f"""
 const createDock = require({json.dumps(str(DOCK))});
 const work = {{ attributes: {{}}, setAttribute(name, value) {{ this.attributes[name] = value; }} }};
 const workLabel = {{ textContent:'' }};
-const badge = {{ textContent:'', hidden:true }};
-const dock = createDock({{ nav:{{}}, buttons:{{work}}, workLabel, attentionBadge:badge }});
+const dock = createDock({{ nav:{{}}, buttons:{{work}}, workLabel }});
 dock.updateWork('continue', 3);
-const continuing = {{ text:workLabel.textContent, count:badge.textContent, hidden:badge.hidden, label:work.attributes['aria-label'] }};
+const continuing = {{ text:workLabel.textContent, label:work.attributes['aria-label'] }};
 dock.updateWork('resume', 0);
-const resuming = {{ text:workLabel.textContent, hidden:badge.hidden, label:work.attributes['aria-label'] }};
+const resuming = {{ text:workLabel.textContent, label:work.attributes['aria-label'] }};
 dock.updateWork('start', 0);
 const starting = {{ text:workLabel.textContent, label:work.attributes['aria-label'] }};
+dock.updateWork('plan', 0);
+const planning = {{ text:workLabel.textContent, label:work.attributes['aria-label'] }};
 dock.updateWork('work', 0);
 process.stdout.write(JSON.stringify({{
-  continuing, resuming, starting,
+  continuing, resuming, starting, planning,
  fallback:{{ text:workLabel.textContent, label:work.attributes['aria-label'] }},
 }}));
 """
@@ -130,28 +178,89 @@ process.stdout.write(JSON.stringify({{
    assert json.loads(result.stdout) == {
        "continuing": {
            "text": "Continue",
-            "count": "3",
-            "hidden": False,
-            "label": "Continue Today, 3 items need attention",
+            "label": "Continue Today",
        },
-        "resuming": {"text": "Resume", "hidden": True, "label": "Resume Today"},
+        "resuming": {"text": "Resume", "label": "Resume Today"},
        "starting": {"text": "Start", "label": "Start Today"},
+        "planning": {"text": "Plan", "label": "Plan Today"},
        "fallback": {"text": "Work", "label": "Work"},
    }


-def test_mobile_task_dock_exposes_and_hides_deduplicated_attention_count():
+def test_mobile_today_hud_completes_current_item_and_labels_final_item_for_recap():
+    script = f"""
+const createView = require({json.dumps(str(TIMER))}).createView;
+class FakeElement {{
+  constructor() {{ this.listeners = {{}}; this.hidden = true; this.textContent = ''; this.attributes = {{}}; }}
+  addEventListener(name, callback) {{ this.listeners[name] = callback; }}
+  click() {{ return this.listeners.click?.(); }}
+  setAttribute(name, value) {{ this.attributes[name] = value; }}
+}}
+const hud = new FakeElement();
+const open = new FakeElement();
+const toggle = new FakeElement();
+const complete = new FakeElement();
+const progress = new FakeElement();
+const elements = {{
+  '[data-mobile-today-hud]':[hud],
+  '[data-mobile-today-open]':[open],
+  '[data-mobile-today-toggle]':[toggle],
+  '[data-mobile-today-complete]':[complete],
+  '[data-work-session-progress]':[progress],
+  '[data-work-session-adjust-plan]':[],
+  '[data-work-session-timer-toggle]':[toggle],
+}};
+let active = true;
+const snapshot = {{identity:'issue:r:1:', elapsed_ms:0, running:true}};
+const completed = [];
+const view = createView({{
+  timer:{{snapshot:()=>snapshot,totalElapsed:()=>0,pause:()=>true,resume:()=>true}},
+  isActive:()=>active,
+  queryAll:selector=>elements[selector] || [],
+  formatEstimate:value=>value + 'm',
+  getItem:()=>({{title:'Ship mobile flow'}}),
+  onComplete:identity=>{{ completed.push(identity); return false; }},
+}});
+view.update({{index:1,total:2}}, null);
+const next = {{hidden:complete.hidden,label:complete.textContent,aria:complete.attributes['aria-label']}};
+complete.click();
+const preservedAfterFailure = {{hudHidden:hud.hidden,identity:snapshot.identity}};
+view.update({{index:2,total:2}}, null);
+const recap = {{hidden:complete.hidden,label:complete.textContent}};
+active = false; view.render();
+process.stdout.write(JSON.stringify({{next,recap,completed,preservedAfterFailure,hiddenWhenInactive:complete.hidden}}));
+"""
+    result = subprocess.run(
+        ["node", "-e", script], capture_output=True, text=True
+    )
+
+    assert result.returncode == 0, result.stderr
+    assert json.loads(result.stdout) == {
+        "next": {
+            "hidden": False,
+            "label": "Done & next",
+            "aria": "Complete Ship mobile flow and open next Today item",
+        },
+        "recap": {"hidden": False, "label": "Done & recap"},
+        "completed": ["issue:r:1:"],
+        "preservedAfterFailure": {"hudHidden": False, "identity": "issue:r:1:"},
+        "hiddenWhenInactive": True,
+    }
+
+
+def test_mobile_task_dock_exposes_independent_attention_action_and_six_column_state():
    script = f"""
 const createDock = require({json.dumps(str(DOCK))});
-const work = {{ attributes: {{}}, setAttribute(name, value) {{ this.attributes[name] = value; }} }};
+const nav = {{ attributes: {{}}, setAttribute(name, value) {{ this.attributes[name] = value; }}, removeAttribute(name) {{ delete this.attributes[name]; }} }};
+const attention = {{ attributes: {{}}, hidden:true, setAttribute(name, value) {{ this.attributes[name] = value; }} }};
 const badge = {{ textContent:'', hidden:true }};
-const dock = createDock({{ nav:{{}}, buttons:{{work}}, attentionBadge:badge }});
+const dock = createDock({{ nav, buttons:{{attention}}, attentionBadge:badge }});
 dock.updateAttention(3);
-const pending = {{ count:badge.textContent, hidden:badge.hidden, label:work.attributes['aria-label'] }};
+const pending = {{ count:badge.textContent, badgeHidden:badge.hidden, actionHidden:attention.hidden, label:attention.attributes['aria-label'], layout:nav.attributes['data-attention'] }};
 dock.updateAttention(0);
 process.stdout.write(JSON.stringify({{
  pending,
-  empty:{{ count:badge.textContent, hidden:badge.hidden, label:work.attributes['aria-label'] }},
+  empty:{{ count:badge.textContent, badgeHidden:badge.hidden, actionHidden:attention.hidden, label:attention.attributes['aria-label'], layout:nav.attributes['data-attention'] || null }},
 }}));
 """
    result = subprocess.run(
@@ -160,11 +269,87 @@ process.stdout.write(JSON.stringify({{

    assert result.returncode == 0, result.stderr
    assert json.loads(result.stdout) == {
-        "pending": {"count": "3", "hidden": False, "label": "Work, 3 items need attention"},
-        "empty": {"count": "0", "hidden": True, "label": "Work"},
+        "pending": {"count": "3", "badgeHidden": False, "actionHidden": False, "label": "Attention, 3 items", "layout": "true"},
+        "empty": {"count": "0", "badgeHidden": True, "actionHidden": True, "label": "Attention, 0 items", "layout": None},
    }


+def test_mobile_task_dock_opens_stable_queue_switcher_and_routes_each_queue():
+    script = f"""
+const createDock = require({json.dumps(str(DOCK))});
+class FakeElement {{
+  constructor() {{ this.listeners = {{}}; this.attributes = {{}}; this.hidden = false; this.textContent = ''; this.focuses = 0; this.classList = {{contains:()=>false}}; }}
+  addEventListener(name, callback) {{ this.listeners[name] = callback; }}
+  click() {{ return this.listeners.click?.({{currentTarget:this}}); }}
+  setAttribute(name, value) {{ this.attributes[name] = value; }}
+  removeAttribute(name) {{ delete this.attributes[name]; }}
+  focus() {{ this.focuses += 1; }}
+}}
+const nav = new FakeElement();
+const queues = new FakeElement();
+const sheet = new FakeElement(); sheet.open = false;
+sheet.showModal = function () {{ this.open = true; }};
+sheet.close = function () {{ this.open = false; this.listeners.close?.(); }};
+const close = new FakeElement();
+const badge = new FakeElement();
+const rows = Object.fromEntries(['today','attention','later','draft'].map(name => [name, new FakeElement()]));
+const counts = Object.fromEntries(Object.keys(rows).map(name => [name, new FakeElement()]));
+const selected = [];
+const dock = createDock({{
+  nav, buttons:{{queues}}, actions:{{queues:()=>{{}}}}, overlays:[sheet],
+  queueSheet:sheet, queueClose:close, queueRows:rows, queueCounts:counts, queueBadge:badge,
+  onSelectQueue:name=>selected.push(name),
+  observe() {{}},
+}});
+dock.start();
+dock.updateQueues({{today:2, attention:1, later:3, draft:4}});
+queues.click();
+const opened = sheet.open;
+rows.later.click();
+const closedAfterSelect = !sheet.open;
+queues.click(); close.click();
+process.stdout.write(JSON.stringify({{
+  opened, closedAfterSelect, selected,
+  badge:badge.textContent, badgeLabel:queues.attributes['aria-label'],
+  counts:Object.fromEntries(Object.entries(counts).map(([name, node]) => [name, node.textContent])),
+  queueFocuses:queues.focuses,
+  columnState:nav.attributes['data-attention'] || null,
+}}));
+"""
+    result = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+
+    assert result.returncode == 0, result.stderr
+    assert json.loads(result.stdout) == {
+        "opened": True,
+        "closedAfterSelect": True,
+        "selected": ["later"],
+        "badge": "10",
+        "badgeLabel": "Queues, 10 items",
+        "counts": {"today": "2", "attention": "1", "later": "3", "draft": "4"},
+        "queueFocuses": 2,
+        "columnState": None,
+    }
+
+
+@pytest.mark.anyio
+async def test_dashboard_renders_and_wires_mobile_queue_switcher():
+    html = await dashboard()
+
+    assert 'data-mobile-task="queues"' in html
+    assert 'id="mobile-queue-sheet"' in html
+    assert 'aria-labelledby="mobile-queue-heading"' in html
+    assert 'data-mobile-queue="today"' in html
+    assert 'data-mobile-queue="attention"' in html
+    assert 'data-mobile-queue="later"' in html
+    assert 'data-mobile-queue="draft"' in html
+    assert 'id="mobile-queue-count"' in html
+    assert 'mobileTaskDock.updateQueues(counts)' in html
+    assert "onSelectQueue: openMobileQueue" in html
+    assert '.mobile-queue-sheet' in html
+    assert 'padding-bottom:calc(16px + env(safe-area-inset-bottom))' in html
+    assert '.mobile-task-dock[data-attention="true"]' not in html
+
+
@pytest.mark.anyio
 async def test_dashboard_wires_mobile_work_dock_into_today_session_lifecycle():
    html = await dashboard()
@@ -175,11 +360,14 @@ async def test_dashboard_wires_mobile_work_dock_into_today_session_lifecycle():
    assert "isTodayActive: () => workSession.checkpointed()" in html
    assert "isTodayResumable: () => workSession.resumable()" in html
    assert "getTodayCount: () => todayMyWork.length" in html
+    assert "getEligibleCount: () => activeMyWork.length" in html
    assert "continueToday: continueTodaySession" in html
    assert "resumeToday: resumeTodaySession" in html
    assert "startToday: startTodaySession" in html
+    assert "planToday: () => openPlanToday(mobileTaskButtons.work)" in html
    assert "work: () => mobileWorkEntry.open()" in html
-    assert "mobileTaskDock.updateWork(mobileWorkEntry.mode(), countMyWork(activeMyWork).attention)" in html
+    assert "mobileTaskDock.updateWork(mobileWorkEntry.mode())" in html
+    assert "mobileTaskDock.updateAttention(countMyWork(activeMyWork).attention)" in html
    assert "workSession.reopen(item)" in html
    assert "runTodayTransition('continue')" in html

@@ -190,11 +378,10 @@ async def test_dashboard_renders_and_wires_phone_safe_task_dock():

    assert '<nav class="mobile-task-dock" id="mobile-task-dock" aria-label="Primary tasks">' in html
    assert html.count('class="mobile-task-action" data-mobile-task=') == 5
-    for task in ("work", "find", "new", "search", "drafts"):
+    for task in ("work", "find", "new", "search", "queues"):
        assert f'data-mobile-task="{task}"' in html
-    assert 'id="mobile-draft-count"' in html
+    assert 'id="mobile-queue-count"' in html
    assert 'data-work-filter="attention"' in html
-    assert 'id="mobile-attention-count"' in html
    assert '.mobile-task-dock { display:none;' in html
    assert 'grid-template-columns:repeat(5,minmax(0,1fr))' in html
    assert 'padding-bottom:env(safe-area-inset-bottom)' in html
@@ -202,11 +389,53 @@ async def test_dashboard_renders_and_wires_phone_safe_task_dock():
    assert '<script src="static/mobile-task-dock.js"></script>' in html
    assert "createMobileTaskDock({" in html
    assert "work: () => mobileWorkEntry.open()" in html
-    assert "const filter = counts.attention ? 'attention' : 'all';" in html
-    assert "qs('[data-work-filter=\"' + filter + '\"]').click()" in html
+    assert "onSelectQueue: openMobileQueue" in html
+    assert "qs('[data-work-filter=\"' + name + '\"]').click()" in html
    assert "find: () => qs('#find-work').click()" in html
    assert "new: () => qs('#new-issue').click()" in html
    assert "search: () => qs('#open-palette').click()" in html
-    assert "drafts: () => qs('[data-work-filter=\"draft\"]').click()" in html
-    assert "draftCount.textContent = sourceDraftCount.textContent" in html
-    assert "mobileTaskDock.updateWork(mobileWorkEntry.mode(), countMyWork(activeMyWork).attention)" in html
+    assert "queues: () => {}" in html
+    assert "mobileTaskDock.updateQueues(counts)" in html
+    assert "mobileTaskDock.updateWork(mobileWorkEntry.mode())" in html
+    assert "mobileTaskDock.updateAttention(countMyWork(activeMyWork).attention)" in html
+
+
+@pytest.mark.anyio
+async def test_dashboard_renders_phone_safe_today_session_hud_above_task_dock():
+    html = await dashboard()
+
+    assert 'class="mobile-today-hud" data-mobile-today-hud' in html
+    assert 'data-mobile-today-open' in html
+    assert 'data-work-session-progress' in html
+    assert 'data-work-session-timer-toggle' in html
+    assert 'data-work-session-adjust-plan' in html
+    assert 'data-mobile-today-complete' in html
+    assert 'Done &amp; next' in html
+    assert "getItem: identity => [...todayMyWork, ...activeMyWork].find" in html
+    assert "onReopen: identity =>" in html
+    assert "onComplete: identity =>" in html
+    assert "completeTodayItem(item)" in html
+    assert "workSession.reopen(item)" in html
+    assert '.mobile-today-hud { display:none;' in html
+    assert 'grid-template-areas:' in html
+    assert '[data-mobile-today-complete] { grid-area:complete;' in html
+    assert 'bottom:calc(56px + env(safe-area-inset-bottom))' in html
+    assert '.mobile-today-hud button { min-height:44px;' in html
+    assert '.mobile-task-action[hidden] { display:none;' in html
+    assert 'max-width:100%;' in html
+    assert 'overflow:hidden;' in html
+
+
+@pytest.mark.anyio
+async def test_mobile_attention_pauses_today_and_offers_phone_safe_return():
+    html = await dashboard()
+
+    assert 'class="attention-interruption" id="attention-interruption"' in html
+    assert 'id="return-to-today" type="button">Return to Today</button>' in html
+    assert "if (name === 'attention' && workSession.checkpointed()) timer.beginAttention();" in html
+    assert 'timer.returnFromAttention()' in html
+    assert "workSession.reopen(item)" in html
+    assert "attentionInterruption.hidden = !pending" in html
+    assert '.attention-interruption:not([hidden]) {' in html
+    assert '.attention-interruption button { min-height:44px;' in html
+    assert 'max-width:100%;' in html
@@ -1976,6 +1976,208 @@ process.stdout.write(JSON.stringify({{
    }


+def test_today_timer_reconciles_long_away_time_once_and_keeps_short_switches_seamless():
+    script = f"""
+const createTodayTimer = require({json.dumps(str(TODAY_TIMER))});
+const values = new Map();
+const storage = {{
+  getItem:key => values.has(key) ? values.get(key) : null,
+  setItem:(key,value) => values.set(key,value),
+  removeItem:key => values.delete(key),
+}};
+let login = 'timmy';
+let now = 0;
+const timer = createTodayTimer({{storage,getLogin:() => login,now:() => now}});
+timer.activate('issue:repo:591:');
+now = 60000;
+timer.markAway();
+now = 4 * 60000;
+const short = timer.reconcileInterruption();
+now = 5 * 60000;
+timer.markAway();
+now = 11 * 60000;
+const pending = timer.reconcileInterruption();
+now = 12 * 60000;
+const frozen = timer.snapshot();
+const restored = createTodayTimer({{storage,getLogin:() => login,now:() => now}}).pendingInterruption();
+const counted = timer.resolveInterruption('count');
+const afterCount = timer.snapshot();
+const duplicate = timer.resolveInterruption('count');
+now = 13 * 60000;
+timer.markAway();
+now = 19 * 60000;
+timer.reconcileInterruption();
+const excluded = timer.resolveInterruption('exclude');
+const afterExclude = timer.snapshot();
+login = 'alexander';
+const isolated = timer.pendingInterruption();
+process.stdout.write(JSON.stringify({{
+  short,pending,frozen,restored,counted,afterCount,duplicate,excluded,afterExclude,isolated,
+}}));
+"""
+    result = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+
+    assert result.returncode == 0, result.stderr
+    assert json.loads(result.stdout) == {
+        "short": None,
+        "pending": {
+            "identity": "issue:repo:591:",
+            "away_ms": 360000,
+        },
+        "frozen": {
+            "identity": "issue:repo:591:",
+            "elapsed_ms": 660000,
+            "running": False,
+        },
+        "restored": {
+            "identity": "issue:repo:591:",
+            "away_ms": 360000,
+        },
+        "counted": True,
+        "afterCount": {
+            "identity": "issue:repo:591:",
+            "elapsed_ms": 660000,
+            "running": True,
+        },
+        "duplicate": False,
+        "excluded": True,
+        "afterExclude": {
+            "identity": "issue:repo:591:",
+            "elapsed_ms": 720000,
+            "running": True,
+        },
+        "isolated": None,
+    }
+
+
+def test_today_timer_pauses_for_attention_and_restores_only_automatic_running_state():
+    script = f"""
+const createTodayTimer = require({json.dumps(str(TODAY_TIMER))});
+const values = new Map();
+const storage = {{getItem:k=>values.get(k)||null,setItem:(k,v)=>values.set(k,v)}};
+let login = 'timmy';
+let now = 0;
+const timer = createTodayTimer({{storage,getLogin:()=>login,now:()=>now}});
+timer.activate('issue:r:595:');
+now = 60000;
+const entered = timer.beginAttention();
+now = 5 * 60000;
+const duplicate = timer.beginAttention();
+const frozen = timer.snapshot();
+const restored = createTodayTimer({{storage,getLogin:()=>login,now:()=>now}}).attentionInterruption();
+now = 11 * 60000;
+const returned = timer.returnFromAttention();
+now = 12 * 60000;
+const resumed = timer.snapshot();
+timer.pause();
+now = 13 * 60000;
+const enteredPaused = timer.beginAttention();
+now = 20 * 60000;
+const returnedPaused = timer.returnFromAttention();
+const stillPaused = timer.snapshot();
+login = 'alexander';
+const isolated = timer.attentionInterruption();
+process.stdout.write(JSON.stringify({{
+  entered,duplicate,frozen,restored,returned,resumed,
+  enteredPaused,returnedPaused,stillPaused,isolated,
+}}));
+"""
+    result = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+
+    assert result.returncode == 0, result.stderr
+    assert json.loads(result.stdout) == {
+        "entered": {"identity": "issue:r:595:", "resume": True},
+        "duplicate": {"identity": "issue:r:595:", "resume": True},
+        "frozen": {"identity": "issue:r:595:", "elapsed_ms": 60000, "running": False},
+        "restored": {"identity": "issue:r:595:", "resume": True},
+        "returned": {"identity": "issue:r:595:", "resumed": True},
+        "resumed": {"identity": "issue:r:595:", "elapsed_ms": 120000, "running": True},
+        "enteredPaused": {"identity": "issue:r:595:", "resume": False},
+        "returnedPaused": {"identity": "issue:r:595:", "resumed": False},
+        "stillPaused": {"identity": "issue:r:595:", "elapsed_ms": 120000, "running": False},
+        "isolated": None,
+    }
+
+
+def test_today_interruption_prompt_restores_and_resolves_the_pending_mobile_decision():
+    script = f"""
+const createTodayTimer = require({json.dumps(str(TODAY_TIMER))});
+const values = new Map();
+const storage = {{getItem:k=>values.get(k)||null,setItem:(k,v)=>values.set(k,v)}};
+let now = 0;
+const timer = createTodayTimer({{storage,getLogin:()=>'timmy',now:()=>now}});
+const sheet = {{hidden:true}};
+const description = {{textContent:''}};
+let resolved = 0;
+const prompt = createTodayTimer.createInterruptionPrompt({{
+  timer, sheet, description,
+  getItemLabel: identity => identity === 'issue:r:7:' ? 'Fix mobile timer' : '',
+  onResolved: () => resolved++,
+}});
+timer.activate('issue:r:7:');
+now = 60000;
+prompt.background();
+now = 7 * 60000;
+const opened = prompt.foreground();
+const shown = {{hidden:sheet.hidden, text:description.textContent}};
+const restored = prompt.restore();
+const excluded = prompt.resolve('exclude');
+const closed = sheet.hidden;
+process.stdout.write(JSON.stringify({{opened,shown,restored,excluded,closed,resolved}}));
+"""
+    result = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+
+    assert result.returncode == 0, result.stderr
+    assert json.loads(result.stdout) == {
+        "opened": True,
+        "shown": {
+            "hidden": False,
+            "text": "Fix mobile timer · away for 6 minutes",
+        },
+        "restored": True,
+        "excluded": True,
+        "closed": True,
+        "resolved": 1,
+    }
+
+
+def test_today_interruption_detection_is_idempotent_and_fails_closed_for_invalid_state():
+    script = f"""
+const createTodayTimer = require({json.dumps(str(TODAY_TIMER))});
+const values = new Map();
+const storage = {{getItem:k=>values.get(k)||null,setItem:(k,v)=>values.set(k,v)}};
+let now = 0;
+const timer = createTodayTimer({{storage,getLogin:()=>'timmy',now:()=>now}});
+timer.activate('issue:r:1:');
+now = 60000;
+timer.markAway();
+now = 120000;
+timer.markAway();
+now = 6 * 60000;
+const originalCheckpoint = timer.reconcileInterruption();
+timer.resolveInterruption('exclude');
+timer.pause();
+now = 20 * 60000;
+const paused = timer.markAway();
+const key = 'stackchain.today-timer.v1.timmy';
+const invalid = JSON.parse(values.get(key));
+invalid.pending_interruption = {{identity:7,away_ms:'bad'}};
+invalid.away_at = now + 1000;
+values.set(key, JSON.stringify(invalid));
+const malformed = timer.reconcileInterruption();
+process.stdout.write(JSON.stringify({{originalCheckpoint,paused,malformed,pending:timer.pendingInterruption()}}));
+"""
+    result = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+
+    assert result.returncode == 0, result.stderr
+    assert json.loads(result.stdout) == {
+        "originalCheckpoint": {"identity": "issue:r:1:", "away_ms": 300000},
+        "paused": False,
+        "malformed": None,
+        "pending": None,
+    }
+
+
 def test_today_timer_switches_items_retains_elapsed_time_and_is_account_bound():
    script = f"""
 const createTodayTimer = require({json.dumps(str(TODAY_TIMER))});
@@ -2012,6 +2214,169 @@ process.stdout.write(JSON.stringify({{first,second,stopped,other}}));
    }


+def test_today_timer_totals_elapsed_work_for_live_capacity_without_cross_account_leakage():
+    script = f"""
+const createTodayTimer = require({json.dumps(str(TODAY_TIMER))});
+const values = new Map();
+const storage = {{getItem:k=>values.get(k)||null,setItem:(k,v)=>values.set(k,v)}};
+let login = 'timmy';
+let now = 0;
+const timer = createTodayTimer({{storage,getLogin:()=>login,now:()=>now}});
+timer.activate('issue:r:1:');
+now = 10 * 60000;
+timer.activate('issue:r:2:');
+now = 25 * 60000;
+const timmy = timer.totalElapsed();
+login = 'alexander';
+const isolated = timer.totalElapsed();
+process.stdout.write(JSON.stringify({{timmy,isolated}}));
+"""
+    result = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+    assert result.returncode == 0, result.stderr
+    assert json.loads(result.stdout) == {"timmy": 25 * 60000, "isolated": 0}
+
+
+def test_today_timer_view_renders_live_budget_risk_and_replan_action():
+    script = f"""
+const createTodayTimer = require({json.dumps(str(TODAY_TIMER))});
+const progress = {{textContent:''}};
+const adjust = {{hidden:true}};
+const toggle = {{hidden:false,textContent:'',setAttribute(){{}}}};
+const snapshot = {{identity:'issue:r:1:',elapsed_ms:45*60000,running:true}};
+const view = createTodayTimer.createView({{
+  timer:{{snapshot:()=>snapshot,totalElapsed:()=>45*60000}}, isActive:()=>true,
+  queryAll:selector => selector.includes('progress') ? [progress] :
+    selector.includes('adjust-plan') ? [adjust] :
+    selector === '[data-work-session-timer-toggle]' ? [toggle] : [],
+  formatEstimate:minutes => minutes + 'm',
+  getRunway:() => ({{current_minutes:30,remaining_minutes:90,future_minutes:60,capacity_minutes:100}}),
+}});
+view.update({{index:1,total:2}});
+process.stdout.write(JSON.stringify({{text:progress.textContent,adjustHidden:adjust.hidden}}));
+"""
+    result = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+    assert result.returncode == 0, result.stderr
+    assert json.loads(result.stdout) == {
+        "text": "Item 1 of 2 · 45:00 / 30m · 15m over estimate · Today projected 5m over capacity",
+        "adjustHidden": False,
+    }
+
+
+def test_today_timer_view_keeps_active_item_and_controls_visible_in_mobile_hud():
+    script = f"""
+const createTodayTimer = require({json.dumps(str(TODAY_TIMER))});
+class Element {{
+  constructor() {{ this.hidden=true; this.textContent=''; this.attributes={{}}; this.listeners={{}}; }}
+  setAttribute(name,value) {{ this.attributes[name]=value; }}
+  addEventListener(name,callback) {{ this.listeners[name]=callback; }}
+  click() {{ this.listeners.click?.(); }}
+}}
+const hud = new Element();
+const title = new Element();
+const progress = new Element();
+const adjust = new Element();
+const toggle = new Element();
+let running = true;
+const calls = [];
+const selectors = {{
+  '[data-mobile-today-hud]':[hud],
+  '[data-mobile-today-open]':[title],
+  '[data-mobile-today-toggle]':[toggle],
+  '[data-work-session-progress]':[progress],
+  '[data-work-session-adjust-plan]':[adjust],
+  '[data-work-session-timer-toggle]':[toggle],
+}};
+const view = createTodayTimer.createView({{
+  timer:{{
+    snapshot:()=>({{identity:'issue:r:1:',elapsed_ms:10*60000,running}}),
+    totalElapsed:()=>10*60000,
+    pause:()=>{{running=false;calls.push('pause');return true;}},
+    resume:()=>{{running=true;calls.push('resume');return true;}},
+    stop:()=>{{running=false;return true;}},
+  }},
+  isActive:()=>true,
+  queryAll:selector => selectors[selector] || [],
+  formatEstimate:minutes => minutes + 'm',
+  getItem:identity => identity === 'issue:r:1:' ? {{title:'Ship the mobile Today HUD'}} : null,
+  onReopen:identity => calls.push('open:' + identity),
+}});
+view.update({{index:1,total:2}},{{current_minutes:30,future_minutes:20,capacity_minutes:60}});
+const active = {{hidden:hud.hidden,title:title.textContent,progress:progress.textContent,toggle:toggle.textContent}};
+title.click();
+toggle.click();
+const paused = {{toggle:toggle.textContent,pressed:toggle.attributes['aria-pressed']}};
+toggle.click();
+view.finish();
+process.stdout.write(JSON.stringify({{active,paused,calls,finishedHidden:hud.hidden}}));
+"""
+    result = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+    assert result.returncode == 0, result.stderr
+    assert json.loads(result.stdout) == {
+        "active": {
+            "hidden": False,
+            "title": "Ship the mobile Today HUD",
+            "progress": "Item 1 of 2 · 10:00 / 30m · 40m remaining",
+            "toggle": "Pause timer",
+        },
+        "paused": {"toggle": "Resume timer", "pressed": "true"},
+        "calls": ["open:issue:r:1:", "pause", "resume"],
+        "finishedHidden": True,
+    }
+
+
+def test_today_timer_view_reopens_current_item_without_resuming_a_paused_timer():
+    script = f"""
+const createTodayTimer = require({json.dumps(str(TODAY_TIMER))});
+const calls = [];
+const timer = {{
+  snapshot:()=>({{identity:'issue:r:1:',elapsed_ms:60000,running:false}}),
+  totalElapsed:()=>60000,
+  activate:identity=>{{calls.push(identity);return true;}},
+  stop:()=>true,
+}};
+const view = createTodayTimer.createView({{
+  timer, isActive:()=>true, queryAll:()=>[], formatEstimate:String,
+}});
+view.open('issue:r:1:', true);
+view.open('issue:r:2:', true);
+process.stdout.write(JSON.stringify(calls));
+"""
+    result = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+    assert result.returncode == 0, result.stderr
+    assert json.loads(result.stdout) == ["issue:r:2:"]
+
+
+def test_today_budget_replan_pauses_once_and_restores_the_prior_timer_state():
+    script = f"""
+const createTodayTimer = require({json.dumps(str(TODAY_TIMER))});
+const calls = [];
+let running = true;
+const timer = {{
+  snapshot:()=>({{identity:'issue:r:1:',elapsed_ms:45*60000,running}}),
+  pause:()=>{{calls.push('pause');running=false;return true;}},
+  resume:()=>{{calls.push('resume');running=true;return true;}},
+}};
+const handoff = createTodayTimer.createBudgetReplan({{timer,openPlan:state=>calls.push('open:' + state.identity + ':' + Math.ceil(state.elapsed_ms/60000))}});
+const opened = handoff.open();
+const duplicate = handoff.open();
+const restored = handoff.restore();
+running = false;
+const pausedOpen = handoff.open();
+const pausedRestore = handoff.restore();
+process.stdout.write(JSON.stringify({{opened,duplicate,restored,pausedOpen,pausedRestore,calls}}));
+"""
+    result = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+    assert result.returncode == 0, result.stderr
+    assert json.loads(result.stdout) == {
+        "opened": True,
+        "duplicate": False,
+        "restored": True,
+        "pausedOpen": True,
+        "pausedRestore": True,
+        "calls": ["pause", "open:issue:r:1::45", "resume", "open:issue:r:1::45"],
+    }
+
+
 def test_today_timer_can_be_initialized_before_operator_identity_is_restored():
    script = f"""
 const createTodayTimer = require({json.dumps(str(TODAY_TIMER))});
@@ -2038,6 +2403,23 @@ process.stdout.write(JSON.stringify({{activated,snapshot:timer.snapshot()}}));
    }


+@pytest.mark.anyio
+async def test_today_live_budget_replan_is_wired_into_every_mobile_session_control():
+    html = await dashboard()
+    dashboard_source = TODAY_TIMER.with_name("dashboard.js").read_text()
+
+    assert html.count('<nav class="work-session-nav" aria-label="Work session" hidden>') == 4
+    timer_source = TODAY_TIMER.read_text()
+    assert "document.createElement('button')" in timer_source
+    assert "button.textContent = 'Adjust remaining plan'" in timer_source
+    assert "todayWork.runway(todayMyWork, state.index - 1)" in dashboard_source
+    assert 'timer.totalElapsed()' in timer_source
+    assert 'createTodayBudgetReplan({' in timer_source
+    assert "button.addEventListener('click', () => replan.open())" in timer_source
+    assert 'if (sheet.hidden && replan.restore()) render();' in timer_source
+    assert '.work-session-nav button { min-height:44px;' in html
+
+
@pytest.mark.anyio
 async def test_today_timer_is_wired_into_every_mobile_session_control():
    html = await dashboard()
@@ -2048,15 +2430,35 @@ async def test_today_timer_is_wired_into_every_mobile_session_control():
    assert 'createTodayTimer({' in html
    assert 'createTodayTimerView({' in html
    assert 'timerView.open(workIdentity(item), workSession.checkpointed(item))' in html
-    assert 'active ? timer.activate(identity) : timer.stop()' in timer_source
+    assert "if (active && current.identity !== identity) timer.activate(identity)" in timer_source
+    assert "else if (!active) timer.stop()" in timer_source
    assert "setInterval(timerView.render, 1000)" in recap_source
    assert 'timer.pause()' in timer_source
    assert 'timer.resume()' in timer_source
    assert "elapsed(snapshot.elapsed_ms)" in timer_source
-    assert "' / ' + formatEstimate(runway.current_minutes)" in timer_source
+    assert "' / ' + formatEstimate(liveRunway.current_minutes)" in timer_source
    assert '.work-session-nav [data-work-session-timer-toggle] { min-height:44px;' in html


+@pytest.mark.anyio
+async def test_dashboard_reconciles_long_today_interruptions_in_a_touch_safe_sheet():
+    html = await dashboard()
+
+    assert 'id="today-interruption-sheet"' in html
+    assert 'id="today-interruption-description"' in html
+    assert 'data-today-interruption="count"' in html
+    assert 'data-today-interruption="exclude"' in html
+    assert "const interruptionPrompt = createTodayInterruptionPrompt({" in html
+    assert "if (document.hidden) interruptionPrompt.background();" in html
+    assert "else interruptionPrompt.foreground();" in html
+    assert "window.addEventListener('pagehide', () => interruptionPrompt.background());" in html
+    assert "interruptionPrompt.restore();" in html
+    assert "interruptionPrompt.resolve(button.dataset.todayInterruption)" in html
+    assert ".today-interruption-panel { box-sizing:border-box; width:min(620px,100%);" in html
+    assert "padding-bottom:calc(18px + env(safe-area-inset-bottom))" in html
+    assert ".today-interruption-actions button { min-height:44px; width:100%; }" in html
+
+
 def test_active_today_session_reopens_current_item_without_restarting_checkpoint():
    script = f"""
 const buildMyWork = require({json.dumps(str(MY_WORK))});
@@ -347,14 +347,14 @@ async def test_bulk_mark_read_cancels_unfinished_work_at_batch_deadline(monkeypa
    monkeypatch.setattr(main, "_read_notification_ids", set())
    monkeypatch.setattr(main, "_live_snapshot_value", None)
    transport = httpx.ASGITransport(app=main.app)
-    started_at = time.monotonic()
    async with httpx.AsyncClient(transport=transport, base_url="http://test") as client:
-        response = await client.patch(
-            "/api/v1/notifications/read", json={"ids": list(range(1, 11))}
+        response = await asyncio.wait_for(
+            client.patch(
+                "/api/v1/notifications/read", json={"ids": list(range(1, 11))}
+            ),
+            timeout=0.5,
        )
-    elapsed = time.monotonic() - started_at

-    assert elapsed < 0.06
    assert response.status_code == 200
    assert response.json() == {"marked": [], "failed": list(range(1, 11))}
    assert response.headers["retry-after"] == "1"
@@ -164,6 +164,77 @@ process.stdout.write(JSON.stringify({{before,ignored,applied,after,result,saved}
    }


+def test_plan_today_builds_ranked_ready_capacity_fit_without_saving():
+    script = f"""
+const createPlanToday = require({json.dumps(str(PLAN_TODAY))});
+const item = (number, reason) => ({{kind:'issue', repository:'stackchain/dashboard', number, title:'Issue ' + number, reason}});
+const saved = [];
+const planner = createPlanToday({{
+  identity: value => 'issue:stackchain/dashboard:' + value.number + ':',
+  save: plan => saved.push(plan),
+}});
+const id = n => 'issue:stackchain/dashboard:' + n + ':';
+planner.open([], [item(1, 'Due today'), item(2, 'Unread update'), item(3, 'Assigned to you'), item(4, 'Needs your review')], {{
+  capacity_minutes:90, estimates:{{[id(1)]:60,[id(2)]:45,[id(3)]:30,[id(4)]:20}}
+}});
+const build = planner.buildRecommendation({{
+  [id(1)]:{{status:'ready'}},
+  [id(2)]:{{status:'blocked', reason:'Waiting on API'}},
+  [id(3)]:{{status:'ready'}},
+  [id(4)]:{{status:'unverified'}},
+}});
+process.stdout.write(JSON.stringify({{build, snapshot:planner.snapshot(), saved}}));
+""".replace("+const", "const")
+    result = run_node(script)
+    assert result["build"] == {
+        "selected": ["issue:stackchain/dashboard:1:", "issue:stackchain/dashboard:3:"],
+        "reasons": {
+            "issue:stackchain/dashboard:1:": "Due today",
+            "issue:stackchain/dashboard:3:": "Assigned to you",
+        },
+        "skipped": [
+            {"id": "issue:stackchain/dashboard:2:", "status": "blocked", "reason": "Waiting on API"},
+            {"id": "issue:stackchain/dashboard:4:", "status": "unverified", "reason": "Could not verify readiness"},
+        ],
+        "needs_estimate": [],
+    }
+    assert result["snapshot"]["ids"] == [
+        "issue:stackchain/dashboard:1:", "issue:stackchain/dashboard:3:"
+    ]
+    assert result["snapshot"]["planned_minutes"] == 90
+    assert result["snapshot"]["remaining_minutes"] == 0
+    assert result["snapshot"]["build"] == result["build"]
+    assert result["saved"] == []
+
+
+def test_plan_today_estimates_ready_omission_and_refits_without_another_readiness_check():
+    script = f"""
+const createPlanToday = require({json.dumps(str(PLAN_TODAY))});
+const item = number => ({{kind:'issue', repository:'stackchain/dashboard', number, title:'Issue ' + number}});
+const planner = createPlanToday({{
+  identity: value => 'issue:stackchain/dashboard:' + value.number + ':',
+  save: () => true,
+}});
+const id = n => 'issue:stackchain/dashboard:' + n + ':';
+planner.open([], [item(1), item(2)], {{capacity_minutes:60, estimates:{{[id(1)]:30}}}});
+planner.buildRecommendation({{[id(1)]:{{status:'ready'}}, [id(2)]:{{status:'ready'}}}});
+const before = planner.snapshot();
+const estimated = planner.setEstimate(id(2), 30);
+const after = planner.snapshot();
+process.stdout.write(JSON.stringify({{before, estimated, after}}));
+"""
+    result = run_node(script)
+    assert result["before"]["ids"] == ["issue:stackchain/dashboard:1:"]
+    assert result["before"]["build"]["needs_estimate"] == ["issue:stackchain/dashboard:2:"]
+    assert result["estimated"] is True
+    assert result["after"]["ids"] == [
+        "issue:stackchain/dashboard:1:", "issue:stackchain/dashboard:2:"
+    ]
+    assert result["after"]["estimates"]["issue:stackchain/dashboard:2:"] == 30
+    assert result["after"]["remaining_minutes"] == 0
+    assert result["after"]["build"]["needs_estimate"] == []
+
+
 def test_plan_today_preview_preserves_draft_scroll_and_adds_item_once_on_return():
    script = f"""
 const createPlanToday = require({json.dumps(str(PLAN_TODAY))});
@@ -278,6 +349,12 @@ async def test_mobile_dashboard_wires_focused_plan_today_sheet():
    assert 'id="plan-today-sheet" role="dialog"' in html
    assert 'id="plan-today-capacity"' in html
    assert 'id="plan-today-available"' in html
+    assert 'id="build-today-plan"' in html
+    assert 'id="plan-today-build-status" role="status" aria-live="polite"' in html
+    assert 'id="plan-today-estimates"' in html
+    assert 'Estimate to finish your plan' in html
+    assert 'data-plan-missing-estimate="' in html
+    assert '.plan-today-estimates input { min-height:44px;' in html
    assert 'inputmode="numeric" min="15" max="1440"' in html
    assert 'data-plan-estimate="' in html
    assert 'aria-label="Estimate for ' in html
@@ -288,7 +365,8 @@ async def test_mobile_dashboard_wires_focused_plan_today_sheet():
    assert "planToday.applyRecommendation" in html
    assert "Use " in html and " as new estimate" in html
    assert "todaySync.enqueueConfiguration" in html
-    assert "todayWork.runway(todayMyWork, state.index - 1)" in html
+    assert "todayWork.runway(todayMyWork, state.index - 1)" in (Path(__file__).parents[1] / "frontend" / "dashboard.js").read_text()
+    assert "timer.totalElapsed()" in (Path(__file__).parents[1] / "frontend" / "today-timer.js").read_text()
    assert "resetPlanTodayConfirmation()" in html
    assert "result === 'confirm-over-capacity'" in html
    assert 'id="save-and-start-today"' in html
@@ -332,6 +410,6 @@ async def test_plan_today_wires_cancel_back_and_success_through_overlay_history(
 def test_plan_today_controller_is_available_in_the_offline_shell():
    source = SERVICE_WORKER.read_text()

-    assert "stackchain-dashboard-shell-v88" in source
+    assert "stackchain-dashboard-shell-v94" in source
    assert "BASE + 'static/plan-today.js'" in source
    assert "BASE + 'static/plan-today-preview.js'" in source
@@ -46,6 +46,7 @@ const clear = createPrivateDeviceDataPurger({{
    assert state["databases"] == [
        "stackchain-background-outbox-v1",
        "stackchain-offline-work-v2",
+        "stackchain-unfiled-captures-v1",
    ]
    assert state["caches"] == ["stackchain-dashboard-shell-v37"]
    assert state["workerMessages"] == [{"type": "stackchain-purge-outbox"}]
@@ -0,0 +1,49 @@
+import json
+import subprocess
+from pathlib import Path
+
+
+SECURITY_CENTER = Path(__file__).parents[1] / "frontend" / "security-center.js"
+
+
+def test_open_security_center_loads_all_sections_concurrently_and_is_awaitable():
+    harness = f"""
+const attachSecurityCenter=require({json.dumps(str(SECURITY_CENTER))});
+const calls=[];
+const element=()=>({{
+  hidden:true, disabled:false, textContent:'', children:[],
+  addEventListener(){{}}, focus(){{this.focused=true;}},
+  replaceChildren(){{this.children=[];}}, append(value){{this.children.push(value);}},
+}});
+const ids={{
+  'active-devices':element(), 'active-devices-sheet':element(),
+  'active-devices-list':element(), 'active-devices-status':element(),
+  'enrolled-passkeys-list':element(), 'enrolled-passkeys-status':element(),
+  'enroll-passkey':element(), 'security-activity-list':element(),
+  'security-activity-status':element(), 'load-more-security-activity':element(),
+  'close-active-devices':element(),
+}};
+const root={{document:{{getElementById:id=>ids[id]||null,createElement:()=>element()}}}};
+const boundary={{
+  listActiveDevices:async()=>{{calls.push('devices');return[];}},
+  listPasskeys:async()=>{{calls.push('passkeys');return[];}},
+  listSecurityEvents:async()=>{{calls.push('activity');return{{events:[],authentication_alerts:[],next_cursor:null}};}},
+}};
+(async()=>{{
+  const controller=attachSecurityCenter({{root,boundary}});
+  const loading=controller.open();
+  const awaitable=Boolean(loading&&typeof loading.then==='function');
+  if (loading) await loading;
+  console.log(JSON.stringify({{calls,awaitable,hidden:ids['active-devices-sheet'].hidden,focused:ids['close-active-devices'].focused||false}}));
+}})().catch(error=>{{console.error(error);process.exit(1);}});
+"""
+    completed = subprocess.run(
+        ["node", "-e", harness], check=True, capture_output=True, text=True
+    )
+
+    assert json.loads(completed.stdout) == {
+        "calls": ["devices", "passkeys", "activity"],
+        "awaitable": True,
+        "hidden": False,
+        "focused": True,
+    }
@@ -30,6 +30,7 @@ async def test_security_boundary_covers_pages_health_static_and_api_errors(monke
    monkeypatch.setenv("STACKCHAIN_DASHBOARD_ACCESS_TOKEN", "access-token-with-at-least-thirty-two-characters")
    monkeypatch.setenv("STACKCHAIN_DASHBOARD_SESSION_SECRET", "session-secret-with-at-least-thirty-two-characters")
    monkeypatch.setenv("STACKCHAIN_DASHBOARD_AUTH_MODE", "operator")
+    monkeypatch.setenv("STACKCHAIN_DASHBOARD_PUBLIC_ORIGIN", "https://test")
    transport = httpx.ASGITransport(app=main.app)

    async with httpx.AsyncClient(transport=transport, base_url="https://test") as client:
@@ -43,6 +44,7 @@ async def test_security_boundary_covers_pages_health_static_and_api_errors(monke
    assert [response.status_code for response in responses] == [200, 200, 200, 401]
    for response in responses:
        assert_browser_security_boundary(response)
+        assert response.headers["strict-transport-security"] == "max-age=31536000"


@pytest.mark.anyio
@@ -57,3 +59,13 @@ async def test_security_boundary_covers_fail_closed_authentication_response(monk

    assert response.status_code == 503
    assert_browser_security_boundary(response)
+
+
+@pytest.mark.anyio
+async def test_insecure_local_mode_does_not_emit_hsts():
+    transport = httpx.ASGITransport(app=main.app, client=("127.0.0.1", 123))
+    async with httpx.AsyncClient(transport=transport, base_url="http://localhost") as client:
+        response = await client.get("/healthz")
+
+    assert response.status_code == 200
+    assert "strict-transport-security" not in response.headers
@@ -13,7 +13,7 @@ def run_worker_scenario(scenario: str) -> dict:
 const fs = require('fs');
 const vm = require('vm');
 const listeners = {{}};
-const state = {{ added: [], deleted: [], claimed: false, skipped: false, fetches: [], puts: [], backgroundFlushes: 0, backgroundResumes: 0, outboxPurges: 0, outboxLifecycle: [], notifications: [], focused: [], opened: [], failFetch: false, stallFetch: false, lateFetch: false, fetchAborted: false, fetchStatus: 200, fetchRedirected: false, cachedBody: null }};
+const state = {{ added: [], individuallyAdded: [], failedAdds: [], deleted: [], deletedDatabases: [], claimed: false, skipped: false, fetches: [], puts: [], backgroundFlushes: 0, backgroundResumes: 0, outboxPurges: 0, outboxLifecycle: [], notifications: [], focused: [], opened: [], failFetch: false, stallFetch: false, lateFetch: false, fetchAborted: false, fetchStatus: 200, fetchRedirected: false, cachedBody: null }};
 const storedResponses = new Map();
 storedResponses.set(
  'https://forge.example/dashboard/__offline-session-lease',
@@ -24,6 +24,10 @@ storedResponses.set(
 );
 const cache = {{
  addAll: async urls => {{ state.added = urls; }},
+  add: async url => {{
+    if (state.failedAdds.includes(url)) throw new Error('optional asset unavailable');
+    state.individuallyAdded.push(url);
+  }},
  match: async request => {{
    const key = String(request.url || request);
    if (storedResponses.has(key)) return storedResponses.get(key).clone();
@@ -58,6 +62,12 @@ const context = {{
    }},
  }},
  importScripts: () => {{}},
+  indexedDB: {{deleteDatabase:name=>{{
+    state.deletedDatabases.push(name);
+    const request={{}};
+    queueMicrotask(()=>request.onsuccess?.());
+    return request;
+  }}}},
  caches: {{
    open: async () => cache,
    keys: async () => ['stackchain-dashboard-old', 'another-app-cache'],
@@ -83,7 +93,7 @@ const context = {{
  }},
 }};
 vm.createContext(context);
-vm.runInContext(fs.readFileSync({json.dumps(str(WORKER))}, 'utf8') + '\\nself.__testFetchJson = fetchJson; self.__testWithSessionCsrf = withSessionCsrf;', context);
+vm.runInContext(fs.readFileSync({json.dumps(str(WORKER))}, 'utf8') + '\\nself.__testFetchJson = fetchJson; self.__testWithSessionCsrf = withSessionCsrf; self.__testOptionalFeatures = OPTIONAL_FEATURES;', context);
 async function dispatch(name, request) {{
  let pending;
  let response;
@@ -135,7 +145,7 @@ async function dispatchPush(payload) {{
 def test_resumable_today_session_ships_in_a_new_offline_shell():
    source = WORKER.read_text()

-    assert "stackchain-dashboard-shell-v88" in source
+    assert "stackchain-dashboard-shell-v94" in source
    assert "BASE + 'static/my-work.js'" in source
    assert "BASE + 'static/dashboard.js'" in source
    assert "BASE + 'static/dashboard.css'" in source
@@ -144,14 +154,14 @@ def test_resumable_today_session_ships_in_a_new_offline_shell():
 def test_ownership_exit_runtime_rolls_the_offline_shell_cache():
    source = WORKER.read_text()

-    assert "stackchain-dashboard-shell-v88" in source
+    assert "stackchain-dashboard-shell-v94" in source
    assert "BASE + 'static/dashboard.js'" in source


 def test_offline_review_next_ships_today_completion_atomically():
    source = WORKER.read_text()

-    assert "stackchain-dashboard-shell-v88" in source
+    assert "stackchain-dashboard-shell-v94" in source
    assert "BASE + 'static/today-completion.js'" in source
    assert "BASE + 'static/dashboard.js'" in source

@@ -159,7 +169,7 @@ def test_offline_review_next_ships_today_completion_atomically():
 def test_duplicate_aware_capture_ships_in_a_new_offline_shell():
    source = WORKER.read_text()

-    assert "stackchain-dashboard-shell-v88" in source
+    assert "stackchain-dashboard-shell-v94" in source
    assert "BASE + 'static/create-issue-sheet.js'" in source
    assert "BASE + 'static/dashboard.js'" in source

@@ -167,14 +177,14 @@ def test_duplicate_aware_capture_ships_in_a_new_offline_shell():
 def test_exact_later_picker_ships_atomically_in_a_new_offline_shell():
    source = WORKER.read_text()

-    assert "stackchain-dashboard-shell-v88" in source
+    assert "stackchain-dashboard-shell-v94" in source
    assert "BASE + 'static/later-picker.js'" in source


 def test_navigation_deadline_ships_in_a_new_shell_cache():
    source = WORKER.read_text()

-    assert "stackchain-dashboard-shell-v88" in source
+    assert "stackchain-dashboard-shell-v94" in source
    assert "BASE + 'static/dashboard.css'" in source
    assert "BASE + 'static/dashboard.js'" in source
    assert "BASE + 'static/install-app.js'" in source
@@ -183,21 +193,21 @@ def test_navigation_deadline_ships_in_a_new_shell_cache():
 def test_today_convergence_ships_in_a_new_shell_cache():
    source = WORKER.read_text()

-    assert "stackchain-dashboard-shell-v88" in source
+    assert "stackchain-dashboard-shell-v94" in source
    assert "BASE + 'static/today-sync.js'" in source


 def test_mobile_search_viewport_ships_in_a_new_offline_shell():
    source = WORKER.read_text()

-    assert "stackchain-dashboard-shell-v88" in source
+    assert "stackchain-dashboard-shell-v94" in source
    assert "BASE + 'static/mobile-search-viewport.js'" in source


 def test_update_ownership_flow_ships_atomically_in_a_new_offline_shell():
    source = WORKER.read_text()

-    assert "stackchain-dashboard-shell-v88" in source
+    assert "stackchain-dashboard-shell-v94" in source
    assert "BASE + 'static/update-ownership.js'" in source


@@ -244,6 +254,9 @@ def test_revoked_background_session_purges_worker_data_and_notifies_dashboard_cl

    assert result["outcome"] == {"status": 401, "code": "session_revoked"}
    assert result["state"]["outboxPurges"] == 1
+    assert result["state"]["deletedDatabases"] == [
+        "stackchain-unfiled-captures-v1"
+    ]
    assert result["state"]["deleted"] == ["stackchain-dashboard-old"]
    assert result["state"]["clientMessages"] == [
        {"type": "stackchain-session-revoked"}
@@ -331,6 +344,9 @@ def test_device_purge_message_stops_worker_outbox_and_acknowledges_completion():
    )

    assert result["state"]["outboxPurges"] == 1
+    assert result["state"]["deletedDatabases"] == [
+        "stackchain-unfiled-captures-v1"
+    ]
    assert result["replies"] == [{"ok": True}]


@@ -638,7 +654,7 @@ def test_one_session_bound_csrf_proof_is_reused_for_a_background_drain():
 def test_queue_today_ships_atomically_in_a_new_offline_shell():
    source = WORKER.read_text()

-    assert "stackchain-dashboard-shell-v88" in source
+    assert "stackchain-dashboard-shell-v94" in source
    assert "BASE + 'static/queue-today.js'" in source


@@ -661,12 +677,15 @@ def test_install_precaches_complete_subpath_scoped_app_shell():
        "/dashboard/static/icons/stackchain-512.png",
        "/dashboard/static/session.js",
        "/dashboard/static/feature-loader.js",
+        "/dashboard/static/security-center.js",
        "/dashboard/static/markdown.js",
        "/dashboard/static/commands.js",
        "/dashboard/static/search-preview.js",
        "/dashboard/static/widgets.js",
        "/dashboard/static/drafts.js",
        "/dashboard/static/unfiled-captures.js",
+        "/dashboard/static/draft-filing-session.js",
+        "/dashboard/static/draft-capacity-dialog.js",
        "/dashboard/static/outbox-coordinator.js",
        "/dashboard/static/issue-outbox.js",
        "/dashboard/static/authored-outbox.js",
@@ -687,6 +706,7 @@ def test_install_precaches_complete_subpath_scoped_app_shell():
        "/dashboard/static/plan-today.js",
        "/dashboard/static/plan-today-preview.js",
        "/dashboard/static/today-sync.js",
+        "/dashboard/static/today-rollover.js",
        "/dashboard/static/update-ownership.js",
        "/dashboard/static/later-work.js",
        "/dashboard/static/later-sync.js",
@@ -732,6 +752,45 @@ def test_activate_deletes_only_stale_stackchain_caches():
    assert result["deleted"] == ["stackchain-dashboard-old"]


+def test_activate_warms_optional_features_without_blocking_siblings_or_claim():
+    result = run_worker_scenario(
+        """
+  state.failedAdds = ['/dashboard/feature-security-center-test.js'];
+  context.self.__testOptionalFeatures.push(
+    '/dashboard/feature-issue-capture-test.js',
+    '/dashboard/feature-security-center-test.js',
+    '/dashboard/feature-pull-workflow-test.js',
+  );
+  await dispatch('activate');
+  process.stdout.write(JSON.stringify(state));
+"""
+    )
+
+    assert result["claimed"] is True
+    assert result["individuallyAdded"] == [
+        "/dashboard/feature-issue-capture-test.js",
+        "/dashboard/feature-pull-workflow-test.js",
+    ]
+
+
+def test_warmed_optional_feature_is_served_from_cache_while_offline():
+    result = run_worker_scenario(
+        """
+  context.self.__testOptionalFeatures.push('/dashboard/feature-issue-capture-test.js');
+  state.cachedBody = 'cached feature';
+  state.failFetch = true;
+  const response = await dispatch('fetch', {
+    method: 'GET', mode: 'cors',
+    url: 'https://forge.example/dashboard/feature-issue-capture-test.js',
+  });
+  process.stdout.write(JSON.stringify({ body: await response.text(), state }));
+"""
+    )
+
+    assert result["body"] == "cached feature"
+    assert result["state"]["fetches"] == []
+
+
 def test_offline_navigation_returns_cached_shell_for_share_target_url():
    result = run_worker_scenario(
        """
@@ -771,6 +830,9 @@ def test_expired_offline_lease_purges_private_worker_data_and_refuses_cached_she
    assert result["status"] == 401
    assert result["body"] == "Your Stackchain session expired. Reconnect and sign in."
    assert result["state"]["outboxPurges"] == 1
+    assert result["state"]["deletedDatabases"] == [
+        "stackchain-unfiled-captures-v1"
+    ]
    assert result["state"]["deleted"] == ["stackchain-dashboard-old"]
    assert "private cached dashboard" not in result["body"]

@@ -221,7 +221,7 @@ async def test_today_blocker_opens_existing_preview_and_preserves_readiness_gate
 def test_readiness_runtime_is_available_in_offline_shell():
    service_worker = SERVICE_WORKER.read_text()

-    assert "const CACHE = 'stackchain-dashboard-shell-v88';" in service_worker
+    assert "const CACHE = 'stackchain-dashboard-shell-v94';" in service_worker
    assert "BASE + 'static/today-readiness.js'" in service_worker


@@ -1,5 +1,7 @@
+import asyncio
 import json
 import subprocess
+import time
 from pathlib import Path

 import httpx
@@ -13,6 +15,38 @@ ROOT = Path(__file__).parents[1]
 TODAY_RECAP = ROOT / "frontend" / "today-recap.js"


+async def recap_time_grant(client, headers, payload):
+    challenge = await client.post(
+        "/api/v1/today/recaps/log-time", json=payload, headers=headers
+    )
+    assert challenge.status_code == 428
+    authorization = await client.post(
+        "/api/v1/fresh-authorization",
+        json={
+            "access_token": "correct horse battery staple",
+            "action": "log_recap_time",
+            "target": challenge.json()["detail"]["target"],
+        },
+        headers=headers,
+    )
+    assert authorization.status_code == 201
+    return authorization.json()["grant"]
+
+
+def test_mobile_recap_time_logging_controls_are_explicit_accessible_and_opt_in():
+    html = (ROOT / "frontend" / "index.html").read_text()
+    source = TODAY_RECAP.read_text()
+    css = (ROOT / "frontend" / "dashboard.css").read_text()
+
+    assert 'id="save-log-today-recap"' in html
+    assert "Log selected time to Gitea" in html
+    assert 'type="checkbox"' in source
+    assert "data-recap-log-identity" in source
+    assert "item.actual_minutes > 0" in source
+    assert "querySelectorAll('[data-recap-log-identity]:checked')" in source
+    assert ".today-recap-log" in css and "min-height:44px" in css
+
+
 def test_recap_store_is_idempotent_account_scoped_bounded_and_newest_first(tmp_path):
    now = [1_000.0]
    store = TodayStore(tmp_path / "today.sqlite3", recap_limit=2, clock=lambda: now[0])
@@ -85,6 +119,350 @@ async def test_authenticated_recap_api_is_no_store_idempotent_and_account_scoped
    assert created.headers["cache-control"] == history.headers["cache-control"] == "no-store"


+@pytest.mark.anyio
+async def test_recap_time_logging_requires_one_exact_single_use_fresh_authorization(
+    monkeypatch, tmp_path
+):
+    monkeypatch.setenv("STACKCHAIN_DASHBOARD_AUTH_MODE", "operator")
+    monkeypatch.setenv("STACKCHAIN_DASHBOARD_ACCESS_TOKEN", "correct horse battery staple")
+    monkeypatch.setenv("STACKCHAIN_DASHBOARD_SESSION_SECRET", "a-separate-session-signing-secret-with-enough-entropy")
+    monkeypatch.setenv("STACKCHAIN_SESSION_DB", str(tmp_path / "sessions.sqlite3"))
+    monkeypatch.setenv("STACKCHAIN_LOGIN_ATTEMPT_DB", str(tmp_path / "login.sqlite3"))
+    monkeypatch.setenv("STACKCHAIN_TODAY_DB", str(tmp_path / "today.sqlite3"))
+    monkeypatch.setenv("STACKCHAIN_SECURITY_EVENT_DB", str(tmp_path / "security.sqlite3"))
+    calls = []
+
+    async def user():
+        return {"id": 1, "login": "Timmy"}
+
+    async def log_time(identity, seconds):
+        calls.append((identity, seconds))
+
+    monkeypatch.setattr(main, "current_user", user)
+    monkeypatch.setattr(main.gitea_proxy, "log_issue_time", log_time)
+    payload = {
+        "session_id": "authorization-session",
+        "items": [{
+            "identity": "issue:stackchain/dashboard:589:",
+            "estimate_minutes": 30,
+            "actual_minutes": 42,
+        }],
+        "log_identities": ["issue:stackchain/dashboard:589:"],
+    }
+    transport = httpx.ASGITransport(app=main.app)
+    async with httpx.AsyncClient(transport=transport, base_url="https://test") as client:
+        await client.post("/api/v1/session", json={"access_token": "correct horse battery staple"})
+        headers = {"Origin": "https://test", "X-CSRF-Token": client.cookies["stackchain_csrf"]}
+        missing = await client.post("/api/v1/today/recaps/log-time", json=payload, headers=headers)
+        history_before = await client.get("/api/v1/today/recaps")
+        target = missing.json()["detail"]["target"]
+        authorization = await client.post(
+            "/api/v1/fresh-authorization",
+            json={
+                "access_token": "correct horse battery staple",
+                "action": "log_recap_time",
+                "target": target,
+            },
+            headers=headers,
+        )
+        grant = authorization.json()["grant"]
+        changed = {**payload, "items": [{**payload["items"][0], "actual_minutes": 43}]}
+        mismatched = await client.post(
+            "/api/v1/today/recaps/log-time",
+            json=changed,
+            headers={**headers, "X-Step-Up-Grant": grant},
+        )
+        accepted = await client.post(
+            "/api/v1/today/recaps/log-time",
+            json=payload,
+            headers={**headers, "X-Step-Up-Grant": grant},
+        )
+        replay = await client.post(
+            "/api/v1/today/recaps/log-time",
+            json=payload,
+            headers={**headers, "X-Step-Up-Grant": grant},
+        )
+
+    assert missing.status_code == mismatched.status_code == replay.status_code == 428
+    assert missing.json()["detail"]["action"] == "log_recap_time"
+    assert target.startswith("today-recap:") and len(target) == 44
+    assert history_before.json()["recaps"] == []
+    assert accepted.status_code == 200
+    assert calls == [("issue:stackchain/dashboard:589:", 42 * 60)]
+
+
+@pytest.mark.anyio
+async def test_recap_time_logging_journals_confirmed_ambiguous_and_retryable_outcomes(
+    monkeypatch, tmp_path
+):
+    monkeypatch.setenv("STACKCHAIN_DASHBOARD_AUTH_MODE", "operator")
+    monkeypatch.setenv("STACKCHAIN_DASHBOARD_ACCESS_TOKEN", "correct horse battery staple")
+    monkeypatch.setenv("STACKCHAIN_DASHBOARD_SESSION_SECRET", "a-separate-session-signing-secret-with-enough-entropy")
+    monkeypatch.setenv("STACKCHAIN_SESSION_DB", str(tmp_path / "sessions.sqlite3"))
+    monkeypatch.setenv("STACKCHAIN_LOGIN_ATTEMPT_DB", str(tmp_path / "login.sqlite3"))
+    monkeypatch.setenv("STACKCHAIN_TODAY_DB", str(tmp_path / "today.sqlite3"))
+    security_db = tmp_path / "security.sqlite3"
+    monkeypatch.setenv("STACKCHAIN_SECURITY_EVENT_DB", str(security_db))
+
+    async def user():
+        return {"id": 1, "login": "Timmy"}
+
+    async def log_time(identity, _seconds):
+        if ":590:" in identity:
+            raise httpx.ReadTimeout("response was lost after sending")
+        if ":591:" in identity:
+            raise httpx.ConnectError("request was not sent")
+
+    monkeypatch.setattr(main, "current_user", user)
+    monkeypatch.setattr(main.gitea_proxy, "log_issue_time", log_time)
+    payload = {
+        "session_id": "private-recap-session",
+        "items": [
+            {"identity": f"issue:stackchain/dashboard:{number}:", "estimate_minutes": 10, "actual_minutes": minutes}
+            for number, minutes in [(589, 11), (590, 12), (591, 13)]
+        ],
+        "log_identities": [
+            f"issue:stackchain/dashboard:{number}:" for number in (589, 590, 591)
+        ],
+    }
+    transport = httpx.ASGITransport(app=main.app)
+    async with httpx.AsyncClient(transport=transport, base_url="https://test") as client:
+        await client.post("/api/v1/session", json={"access_token": "correct horse battery staple"})
+        headers = {"Origin": "https://test", "X-CSRF-Token": client.cookies["stackchain_csrf"]}
+        challenge = await client.post("/api/v1/today/recaps/log-time", json=payload, headers=headers)
+        authorization = await client.post(
+            "/api/v1/fresh-authorization",
+            json={
+                "access_token": "correct horse battery staple",
+                "action": "log_recap_time",
+                "target": challenge.json()["detail"]["target"],
+            },
+            headers=headers,
+        )
+        response = await client.post(
+            "/api/v1/today/recaps/log-time",
+            json=payload,
+            headers={**headers, "X-Step-Up-Grant": authorization.json()["grant"]},
+        )
+        events = (await client.get("/api/v1/security-events")).json()["events"]
+
+    assert response.json()["time_logs"] == [
+        {"identity": "issue:stackchain/dashboard:589:", "status": "logged"},
+        {"identity": "issue:stackchain/dashboard:590:", "status": "verify"},
+        {"identity": "issue:stackchain/dashboard:591:", "status": "retry"},
+    ]
+    time_events = [event for event in events if event["kind"] == "gitea_time_logged"]
+    assert {(event["target"], event["status"]) for event in time_events} == {
+        ("stackchain/dashboard#590", "pending"),
+        ("stackchain/dashboard#589", "completed"),
+    }
+    persisted = security_db.read_bytes()
+    assert b"private-recap-session" not in persisted
+    assert challenge.json()["detail"]["target"].encode() not in persisted
+
+
+@pytest.mark.anyio
+async def test_recap_time_logging_attempts_multiple_entries_with_bounded_concurrency(
+    monkeypatch, tmp_path
+):
+    monkeypatch.setenv("STACKCHAIN_DASHBOARD_AUTH_MODE", "operator")
+    monkeypatch.setenv("STACKCHAIN_DASHBOARD_ACCESS_TOKEN", "correct horse battery staple")
+    monkeypatch.setenv("STACKCHAIN_DASHBOARD_SESSION_SECRET", "a-separate-session-signing-secret-with-enough-entropy")
+    monkeypatch.setenv("STACKCHAIN_SESSION_DB", str(tmp_path / "sessions.sqlite3"))
+    monkeypatch.setenv("STACKCHAIN_LOGIN_ATTEMPT_DB", str(tmp_path / "login.sqlite3"))
+    monkeypatch.setenv("STACKCHAIN_TODAY_DB", str(tmp_path / "today.sqlite3"))
+    monkeypatch.setenv("STACKCHAIN_SECURITY_EVENT_DB", str(tmp_path / "security.sqlite3"))
+    active = 0
+    peak = 0
+    attempted = []
+
+    async def user():
+        return {"id": 1, "login": "Timmy"}
+
+    async def log_time(identity, _seconds):
+        nonlocal active, peak
+        active += 1
+        peak = max(peak, active)
+        attempted.append(identity)
+        try:
+            await asyncio.sleep(0.1)
+        finally:
+            active -= 1
+
+    monkeypatch.setattr(main, "current_user", user)
+    monkeypatch.setattr(main.gitea_proxy, "log_issue_time", log_time)
+    identities = [f"issue:stackchain/dashboard:{number}:" for number in range(607, 612)]
+    payload = {
+        "session_id": "concurrent-recap-session",
+        "items": [
+            {"identity": identity, "estimate_minutes": 10, "actual_minutes": 11}
+            for identity in identities
+        ],
+        "log_identities": identities,
+    }
+    transport = httpx.ASGITransport(app=main.app)
+    async with httpx.AsyncClient(transport=transport, base_url="https://test") as client:
+        await client.post("/api/v1/session", json={"access_token": "correct horse battery staple"})
+        headers = {"Origin": "https://test", "X-CSRF-Token": client.cookies["stackchain_csrf"]}
+        grant = await recap_time_grant(client, headers, payload)
+        started = time.perf_counter()
+        response = await client.post(
+            "/api/v1/today/recaps/log-time",
+            json=payload,
+            headers={**headers, "X-Step-Up-Grant": grant},
+        )
+        elapsed = time.perf_counter() - started
+
+    assert response.status_code == 200
+    assert elapsed < 0.35
+    assert 1 < peak <= 3
+    assert set(attempted) == set(identities)
+    assert response.json()["time_logs"] == [
+        {"identity": identity, "status": "logged"} for identity in identities
+    ]
+
+
+@pytest.mark.anyio
+async def test_explicit_recap_time_logging_posts_corrected_seconds_once(monkeypatch, tmp_path):
+    monkeypatch.setenv("STACKCHAIN_DASHBOARD_AUTH_MODE", "operator")
+    monkeypatch.setenv("STACKCHAIN_DASHBOARD_ACCESS_TOKEN", "correct horse battery staple")
+    monkeypatch.setenv("STACKCHAIN_DASHBOARD_SESSION_SECRET", "a-separate-session-signing-secret-with-enough-entropy")
+    monkeypatch.setenv("STACKCHAIN_SESSION_DB", str(tmp_path / "sessions.sqlite3"))
+    monkeypatch.setenv("STACKCHAIN_LOGIN_ATTEMPT_DB", str(tmp_path / "login.sqlite3"))
+    monkeypatch.setenv("STACKCHAIN_TODAY_DB", str(tmp_path / "today.sqlite3"))
+    calls = []
+
+    async def user():
+        return {"id": 1, "login": "Timmy"}
+
+    async def log_time(identity, seconds):
+        calls.append((identity, seconds))
+
+    monkeypatch.setattr(main, "current_user", user)
+    monkeypatch.setattr(main.gitea_proxy, "log_issue_time", log_time)
+    payload = {
+        "session_id": "mobile-session-1",
+        "items": [
+            {"identity": "issue:stackchain/dashboard:587:", "estimate_minutes": 30, "actual_minutes": 42},
+            {"identity": "pull:stackchain/dashboard:586:", "estimate_minutes": 10, "actual_minutes": 0},
+        ],
+        "log_identities": ["issue:stackchain/dashboard:587:"],
+    }
+    transport = httpx.ASGITransport(app=main.app)
+    async with httpx.AsyncClient(transport=transport, base_url="https://test") as client:
+        await client.post("/api/v1/session", json={"access_token": "correct horse battery staple"})
+        headers = {"Origin": "https://test", "X-CSRF-Token": client.cookies["stackchain_csrf"]}
+        first_grant = await recap_time_grant(client, headers, payload)
+        created = await client.post(
+            "/api/v1/today/recaps/log-time",
+            json=payload,
+            headers={**headers, "X-Step-Up-Grant": first_grant},
+        )
+        replay_grant = await recap_time_grant(client, headers, payload)
+        replay = await client.post(
+            "/api/v1/today/recaps/log-time",
+            json=payload,
+            headers={**headers, "X-Step-Up-Grant": replay_grant},
+        )
+
+    assert created.status_code == replay.status_code == 200
+    assert calls == [("issue:stackchain/dashboard:587:", 42 * 60)]
+    assert created.json()["time_logs"] == [{
+        "identity": "issue:stackchain/dashboard:587:", "status": "logged"
+    }]
+    assert replay.json()["time_logs"] == [{
+        "identity": "issue:stackchain/dashboard:587:", "status": "logged"
+    }]
+    assert created.headers["cache-control"] == "no-store"
+
+
+@pytest.mark.anyio
+async def test_ambiguous_time_log_failure_is_not_reposted_automatically(monkeypatch, tmp_path):
+    monkeypatch.setenv("STACKCHAIN_DASHBOARD_AUTH_MODE", "operator")
+    monkeypatch.setenv("STACKCHAIN_DASHBOARD_ACCESS_TOKEN", "correct horse battery staple")
+    monkeypatch.setenv("STACKCHAIN_DASHBOARD_SESSION_SECRET", "a-separate-session-signing-secret-with-enough-entropy")
+    monkeypatch.setenv("STACKCHAIN_SESSION_DB", str(tmp_path / "sessions.sqlite3"))
+    monkeypatch.setenv("STACKCHAIN_LOGIN_ATTEMPT_DB", str(tmp_path / "login.sqlite3"))
+    monkeypatch.setenv("STACKCHAIN_TODAY_DB", str(tmp_path / "today.sqlite3"))
+    calls = 0
+
+    async def user():
+        return {"id": 1, "login": "Timmy"}
+
+    async def log_time(_identity, _seconds):
+        nonlocal calls
+        calls += 1
+        raise httpx.ReadTimeout("response was lost after sending")
+
+    monkeypatch.setattr(main, "current_user", user)
+    monkeypatch.setattr(main.gitea_proxy, "log_issue_time", log_time)
+    payload = {
+        "session_id": "ambiguous-session",
+        "items": [{"identity": "issue:stackchain/dashboard:587:", "estimate_minutes": 30, "actual_minutes": 42}],
+        "log_identities": ["issue:stackchain/dashboard:587:"],
+    }
+    transport = httpx.ASGITransport(app=main.app)
+    async with httpx.AsyncClient(transport=transport, base_url="https://test") as client:
+        await client.post("/api/v1/session", json={"access_token": "correct horse battery staple"})
+        headers = {"Origin": "https://test", "X-CSRF-Token": client.cookies["stackchain_csrf"]}
+        first_grant = await recap_time_grant(client, headers, payload)
+        first = await client.post(
+            "/api/v1/today/recaps/log-time",
+            json=payload,
+            headers={**headers, "X-Step-Up-Grant": first_grant},
+        )
+        replay_grant = await recap_time_grant(client, headers, payload)
+        replay = await client.post(
+            "/api/v1/today/recaps/log-time",
+            json=payload,
+            headers={**headers, "X-Step-Up-Grant": replay_grant},
+        )
+
+    assert calls == 1
+    assert first.json()["time_logs"] == replay.json()["time_logs"] == [{
+        "identity": "issue:stackchain/dashboard:587:", "status": "verify"
+    }]
+
+
+@pytest.mark.anyio
+async def test_recap_time_logging_rejects_noncanonical_and_zero_targets_before_upstream(monkeypatch, tmp_path):
+    monkeypatch.setenv("STACKCHAIN_DASHBOARD_AUTH_MODE", "operator")
+    monkeypatch.setenv("STACKCHAIN_DASHBOARD_ACCESS_TOKEN", "correct horse battery staple")
+    monkeypatch.setenv("STACKCHAIN_DASHBOARD_SESSION_SECRET", "a-separate-session-signing-secret-with-enough-entropy")
+    monkeypatch.setenv("STACKCHAIN_SESSION_DB", str(tmp_path / "sessions.sqlite3"))
+    monkeypatch.setenv("STACKCHAIN_LOGIN_ATTEMPT_DB", str(tmp_path / "login.sqlite3"))
+    monkeypatch.setenv("STACKCHAIN_TODAY_DB", str(tmp_path / "today.sqlite3"))
+    calls = []
+
+    async def user():
+        return {"id": 1, "login": "Timmy"}
+
+    async def log_time(identity, seconds):
+        calls.append((identity, seconds))
+
+    monkeypatch.setattr(main, "current_user", user)
+    monkeypatch.setattr(main.gitea_proxy, "log_issue_time", log_time)
+    transport = httpx.ASGITransport(app=main.app)
+    async with httpx.AsyncClient(transport=transport, base_url="https://test") as client:
+        await client.post("/api/v1/session", json={"access_token": "correct horse battery staple"})
+        headers = {"Origin": "https://test", "X-CSRF-Token": client.cookies["stackchain_csrf"]}
+        malformed = await client.post("/api/v1/today/recaps/log-time", headers=headers, json={
+            "session_id": "bad-target",
+            "items": [{"identity": "issue:https://evil.test:1:", "estimate_minutes": 5, "actual_minutes": 5}],
+            "log_identities": ["issue:https://evil.test:1:"],
+        })
+        zero = await client.post("/api/v1/today/recaps/log-time", headers=headers, json={
+            "session_id": "zero-target",
+            "items": [{"identity": "issue:stackchain/dashboard:1:", "estimate_minutes": 5, "actual_minutes": 0}],
+            "log_identities": ["issue:stackchain/dashboard:1:"],
+        })
+        history = await client.get("/api/v1/today/recaps")
+
+    assert malformed.status_code == zero.status_code == 422
+    assert calls == []
+    assert history.json()["recaps"] == []
+
+
 def test_recap_controller_calculates_variance_validates_corrections_and_clears_after_save():
    script = f"""
 const createRecap = require({json.dumps(str(TODAY_RECAP))});
@@ -119,6 +497,112 @@ recap.save().then(saved=>process.stdout.write(JSON.stringify({{
    assert output["cleared"] == 1


+def test_recap_controller_logs_only_selected_nonzero_items_and_retains_failed_draft():
+    script = f"""
+const createRecap = require({json.dumps(str(TODAY_RECAP))});
+const calls=[]; let fail=true; let cleared=0;
+const recap=createRecap({{
+  save:payload=>Promise.resolve(payload),
+  saveAndLog:payload=>{{calls.push(payload); return fail ? Promise.reject(new Error('offline')) : Promise.resolve({{
+    time_logs:payload.log_identities.map(identity=>({{identity,status:'logged'}}))
+  }});}},
+  clear:()=>{{cleared += 1;}}, makeId:()=> 'log-session',
+}});
+recap.begin([
+  {{identity:'issue:stackchain/dashboard:587:',elapsed_ms:42*60000}},
+  {{identity:'pull:stackchain/dashboard:586:',elapsed_ms:0}},
+]);
+(async()=>{{
+  let error='';
+  try {{ await recap.saveAndLog(['issue:stackchain/dashboard:587:','pull:stackchain/dashboard:586:']); }}
+  catch (caught) {{ error=caught.message; }}
+  const retained=recap.snapshot(); fail=false;
+  const result=await recap.saveAndLog(['issue:stackchain/dashboard:587:','pull:stackchain/dashboard:586:']);
+  process.stdout.write(JSON.stringify({{error,retained,result,calls,cleared,after:recap.snapshot()}}));
+}})().catch(error=>{{console.error(error);process.exit(1);}});
+"""
+    run = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+    assert run.returncode == 0, run.stderr
+    output = json.loads(run.stdout)
+    assert output["error"] == "offline"
+    assert output["retained"]["session_id"] == "log-session"
+    assert output["calls"][0]["log_identities"] == ["issue:stackchain/dashboard:587:"]
+    assert output["result"]["time_logs"] == [{
+        "identity": "issue:stackchain/dashboard:587:", "status": "logged"
+    }]
+    assert output["cleared"] == 1
+    assert output["after"] is None
+
+
+def test_recap_controller_exposes_per_item_partial_logging_results_for_retry():
+    script = f"""
+const createRecap = require({json.dumps(str(TODAY_RECAP))});
+const recap=createRecap({{
+  save:payload=>Promise.resolve(payload), clear:()=>{{}}, makeId:()=> 'partial-session',
+  saveAndLog:payload=>Promise.resolve({{time_logs:[
+    {{identity:payload.log_identities[0],status:'logged'}},
+    {{identity:payload.log_identities[1],status:'retry'}},
+  ]}}),
+}});
+recap.begin([
+  {{identity:'issue:stackchain/dashboard:587:',elapsed_ms:20*60000}},
+  {{identity:'pull:stackchain/dashboard:586:',elapsed_ms:10*60000}},
+]);
+recap.saveAndLog(['issue:stackchain/dashboard:587:','pull:stackchain/dashboard:586:'])
+  .then(()=>{{throw new Error('expected retry');}})
+  .catch(error=>process.stdout.write(JSON.stringify({{message:error.message,draft:recap.snapshot()}})));
+"""
+    run = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+    assert run.returncode == 0, run.stderr
+    output = json.loads(run.stdout)
+    assert output["message"] == "1 time entry logged; 1 needs retry."
+    assert output["draft"]["time_logs"] == {
+        "issue:stackchain/dashboard:587:": "logged",
+        "pull:stackchain/dashboard:586:": "retry",
+    }
+
+
+def test_recap_partial_time_logging_intent_survives_reload_until_every_item_is_logged():
+    script = f"""
+const createRecap = require({json.dumps(str(TODAY_RECAP))});
+const values=new Map(); const calls=[]; let attempt=0; let cleared=0;
+const storage={{getItem:key=>values.get(key)||null,setItem:(key,value)=>values.set(key,value),removeItem:key=>values.delete(key)}};
+const saveAndLog=payload=>{{
+  calls.push(payload.log_identities); attempt += 1;
+  return Promise.resolve({{time_logs:payload.log_identities.map((identity,index)=>({{
+    identity,status:attempt === 1 && index === 1 ? 'retry' : 'logged'
+  }}))}});
+}};
+const options={{save:payload=>Promise.resolve(payload),saveAndLog,clear:()=>{{cleared += 1;}},storage,getLogin:()=> 'timmy'}};
+const first=createRecap({{...options,makeId:()=> 'durable-log'}});
+first.begin([
+  {{identity:'issue:stackchain/dashboard:587:',elapsed_ms:20*60000}},
+  {{identity:'pull:stackchain/dashboard:586:',elapsed_ms:10*60000}},
+]);
+(async()=>{{
+  try {{ await first.saveAndLog(['issue:stackchain/dashboard:587:','pull:stackchain/dashboard:586:']); }} catch (_error) {{}}
+  const restored=createRecap(options);
+  const pending=restored.snapshot();
+  await restored.saveAndLog(['pull:stackchain/dashboard:586:']);
+  process.stdout.write(JSON.stringify({{pending,calls,cleared,after:restored.snapshot(),stored:[...values.keys()]}}));
+}})().catch(error=>{{console.error(error);process.exit(1);}});
+"""
+    run = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+    assert run.returncode == 0, run.stderr
+    output = json.loads(run.stdout)
+    assert output["pending"]["log_identities"] == [
+        "issue:stackchain/dashboard:587:", "pull:stackchain/dashboard:586:"
+    ]
+    assert output["pending"]["time_logs"]["pull:stackchain/dashboard:586:"] == "retry"
+    assert output["calls"] == [
+        ["issue:stackchain/dashboard:587:", "pull:stackchain/dashboard:586:"],
+        ["pull:stackchain/dashboard:586:"],
+    ]
+    assert output["cleared"] == 1
+    assert output["after"] is None
+    assert output["stored"] == []
+
+
 def test_recap_feedback_uses_work_metadata_and_reports_per_item_variance():
    script = f"""
 const createRecap = require({json.dumps(str(TODAY_RECAP))});
@@ -306,6 +790,61 @@ recap.begin([
    assert output["after"] is None


+def test_recap_controller_restores_account_scoped_pending_replan_until_completed():
+    script = f"""
+const createRecap = require({json.dumps(str(TODAY_RECAP))});
+const values=new Map();
+const storage={{getItem:key=>values.get(key)||null,setItem:(key,value)=>values.set(key,value),removeItem:key=>values.delete(key)}};
+let login='timmy';
+const options={{save:payload=>Promise.resolve({{session_id:payload.session_id}}),clear:()=>{{}},storage,getLogin:()=>login}};
+const first=createRecap({{...options,makeId:()=> 'saved-session'}});
+first.begin([{{identity:'issue:r:1:',elapsed_ms:52*60000}}], {{'issue:r:1:':30}});
+(async()=>{{
+  await first.saveForReplan();
+  const afterSave=first.pendingReplan();
+  const restored=createRecap(options).pendingReplan();
+  login='alexander';
+  const otherAccount=createRecap(options).pendingReplan();
+  login='timmy';
+  const retainedAfterCancel=createRecap(options).pendingReplan();
+  createRecap(options).completeReplan();
+  const afterComplete=createRecap(options).pendingReplan();
+  process.stdout.write(JSON.stringify({{afterSave,restored,otherAccount,retainedAfterCancel,afterComplete,keys:[...values.keys()]}}));
+}})().catch(error=>{{console.error(error);process.exit(1);}});
+"""
+    run = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+    assert run.returncode == 0, run.stderr
+    output = json.loads(run.stdout)
+    pending = {
+        "session_id": "saved-session",
+        "actual_minutes": {"issue:r:1:": 52},
+    }
+    assert output == {
+        "afterSave": pending,
+        "restored": pending,
+        "otherAccount": None,
+        "retainedAfterCancel": pending,
+        "afterComplete": None,
+        "keys": [],
+    }
+
+
+def test_recap_controller_removes_malformed_or_unbounded_pending_replan():
+    script = f"""
+const createRecap = require({json.dumps(str(TODAY_RECAP))});
+const key='stackchain.today-recap-handoff.v1.timmy';
+const values=new Map([[key, JSON.stringify({{session_id:'saved',actual_minutes:Object.fromEntries(
+  Array.from({{length:21}}, (_,index)=>['issue:r:' + index + ':', 10])
+)}})]]);
+const storage={{getItem:key=>values.get(key)||null,setItem:(key,value)=>values.set(key,value),removeItem:key=>values.delete(key)}};
+const recap=createRecap({{save:()=>Promise.resolve(),clear:()=>{{}},storage,getLogin:()=> 'timmy'}});
+process.stdout.write(JSON.stringify({{pending:recap.pendingReplan(),hasKey:values.has(key)}}));
+"""
+    run = subprocess.run(["node", "-e", script], capture_output=True, text=True)
+    assert run.returncode == 0, run.stderr
+    assert json.loads(run.stdout) == {"pending": None, "hasKey": False}
+
+
@pytest.mark.anyio
 async def test_dashboard_renders_mobile_today_recap_flow():
    html = main.FRONTEND_BUILD.dashboard_html
@@ -335,3 +874,19 @@ async def test_dashboard_renders_mobile_today_recap_flow():
    assert "identity => [...todayMyWork, ...activeMyWork].find" in dashboard
    assert "openPlanToday(qs('#plan-today'), true, actualMinutes)" in dashboard
    assert ".today-recap-row { grid-template-columns:1fr; }" in css
+
+
+@pytest.mark.anyio
+async def test_dashboard_resumes_and_explicitly_discards_pending_recap_feedback():
+    html = main.FRONTEND_BUILD.dashboard_html
+    dashboard = (ROOT / "frontend" / "dashboard.js").read_text()
+    recap_source = TODAY_RECAP.read_text()
+
+    assert 'id="discard-recap-replan"' in html
+    assert "todayRecapView.pendingReplan()?.actual_minutes" in dashboard
+    assert "todayRecapView.completeReplan();" in dashboard
+    assert "todayRecapView.discardReplan();" in dashboard
+    assert "if (capacityAware && !todayWork.replacePlanning(plan)) return false;" in dashboard
+    assert dashboard.index("todayWork.replacePlanning(plan)") < dashboard.index("todayRecapView.completeReplan();")
+    assert "pendingReplan:recap.pendingReplan" in recap_source
+    assert "discardReplan:recap.discardReplan" in recap_source
@@ -0,0 +1,170 @@
+import json
+import subprocess
+from pathlib import Path
+
+import pytest
+
+from src import main
+from src.today_store import TodayStore
+
+
+ROLLOVER = Path(__file__).parents[1] / "frontend" / "today-rollover.js"
+SYNC = Path(__file__).parents[1] / "frontend" / "today-sync.js"
+
+
+def run_node(script):
+    return json.loads(subprocess.run(
+        ["node", "-e", script], check=True, capture_output=True, text=True
+    ).stdout)
+
+
+def test_rollover_replaces_a_stale_plan_atomically_and_is_idempotent(tmp_path):
+    store = TodayStore(tmp_path / "today.sqlite3", limit=3)
+    store.apply_batch("timmy", [
+        {"operation_id": "seed-1", "action": "add", "item_id": "issue:r:1:"},
+        {"operation_id": "seed-2", "action": "add", "item_id": "issue:r:2:"},
+        {"operation_id": "seed-plan", "action": "configure", "item_id": "plan",
+         "capacity_minutes": 180,
+         "estimates": {"issue:r:1:": 60, "issue:r:2:": 45}},
+    ])
+    operation = {
+        "operation_id": "roll-2026-08-13", "action": "rollover", "item_id": "plan",
+        "plan_date": "2026-08-13", "timezone": "America/New_York",
+        "ids": ["issue:r:2:"], "capacity_minutes": 120,
+        "estimates": {"issue:r:2:": 40}, "base_revision": 3,
+    }
+
+    rolled = store.apply_batch("timmy", [operation])
+    replay = store.apply_batch("timmy", [operation])
+
+    assert rolled == {
+        "revision": 4, "ids": ["issue:r:2:"], "capacity_minutes": 120,
+        "estimates": {"issue:r:2:": 40}, "plan_date": "2026-08-13",
+        "timezone": "America/New_York", "accepted_operation_ids": ["roll-2026-08-13"],
+        "duplicate_operation_ids": [], "rejected_operations": [],
+    }
+    assert replay["revision"] == 4
+    assert replay["duplicate_operation_ids"] == ["roll-2026-08-13"]
+    assert TodayStore(store.path).get("timmy")["plan_date"] == "2026-08-13"
+    edited = store.apply("timmy", "after-roll", "add", "issue:r:3:")
+    assert edited["plan_date"] == "2026-08-13"
+    assert edited["timezone"] == "America/New_York"
+
+
+def test_stale_rollover_cannot_replace_a_newer_device_plan(tmp_path):
+    store = TodayStore(tmp_path / "today.sqlite3")
+    store.apply("timmy", "seed", "add", "issue:r:1:")
+    store.apply("timmy", "newer", "add", "issue:r:2:")
+
+    result = store.apply_batch("timmy", [{
+        "operation_id": "stale-roll", "action": "rollover", "item_id": "plan",
+        "plan_date": "2026-08-13", "timezone": "UTC", "ids": ["issue:r:1:"],
+        "capacity_minutes": 60, "estimates": {"issue:r:1:": 30}, "base_revision": 1,
+    }])
+
+    assert result["ids"] == ["issue:r:1:", "issue:r:2:"]
+    assert result["rejected_operations"] == [
+        {"operation_id": "stale-roll", "reason": "stale_intent"}
+    ]
+
+
+def test_rollover_rejects_invalid_calendar_metadata_and_duplicate_items(tmp_path):
+    store = TodayStore(tmp_path / "today.sqlite3")
+    base = {"operation_id": "roll", "action": "rollover", "item_id": "plan",
+            "plan_date": "08/13/2026", "timezone": "UTC", "ids": []}
+    with pytest.raises(ValueError, match="plan_date"):
+        store.apply_batch("timmy", [base])
+    with pytest.raises(ValueError, match="unique"):
+        store.apply_batch("timmy", [{**base, "plan_date": "2026-08-13",
+                                      "ids": ["issue:r:1:", "issue:r:1:"]}])
+
+
+def test_today_api_model_accepts_a_bounded_rollover():
+    operation = main.TodayOperation(
+        operation_id="roll", action="rollover", item_id="plan", base_revision=7,
+        plan_date="2026-08-13", timezone="America/New_York",
+        ids=["issue:r:1:"], capacity_minutes=120, estimates={"issue:r:1:": 45},
+    )
+
+    assert operation.model_dump()["plan_date"] == "2026-08-13"
+    assert operation.model_dump()["timezone"] == "America/New_York"
+    assert operation.model_dump()["ids"] == ["issue:r:1:"]
+
+
+def test_same_day_is_current_but_prior_and_legacy_plans_require_review():
+    script = f"""
+const create = require({json.dumps(str(ROLLOVER))});
+const rollover = create({{ localDate:()=> '2026-08-13', timeZone:()=> 'America/New_York' }});
+process.stdout.write(JSON.stringify([
+  rollover.reviewState({{plan_date:'2026-08-13',ids:['one']}}),
+  rollover.reviewState({{plan_date:'2026-08-12',ids:['one']}}),
+  rollover.reviewState({{ids:['one']}}),
+  rollover.reviewState({{ids:[]}}),
+]));
+"""
+    assert run_node(script) == ["current", "stale", "legacy", "empty"]
+
+
+def test_rollover_preserves_selected_order_and_only_selected_estimates():
+    script = f"""
+const create = require({json.dumps(str(ROLLOVER))});
+const rollover = create({{localDate:()=> '2026-08-13',timeZone:()=> 'America/New_York'}});
+process.stdout.write(JSON.stringify(rollover.operation({{
+  operation_id:'roll-1', base_revision:7, selected_ids:['two','one'], capacity_minutes:120,
+  estimates:{{one:30,two:45,removed:60}}
+}})));
+"""
+    assert run_node(script) == {
+        "operation_id": "roll-1", "action": "rollover", "item_id": "plan",
+        "base_revision": 7, "plan_date": "2026-08-13",
+        "timezone": "America/New_York", "ids": ["two", "one"],
+        "capacity_minutes": 120, "estimates": {"one": 30, "two": 45},
+    }
+
+
+def test_calendar_day_comes_from_local_parts_not_elapsed_hours():
+    script = f"""
+const create = require({json.dumps(str(ROLLOVER))});
+const date = new Date('2026-11-01T05:30:00Z');
+const rollover = create({{ now:()=>date, resolvedTimeZone:()=> 'America/New_York' }});
+process.stdout.write(JSON.stringify({{date:rollover.localDate(),zone:rollover.timeZone()}}));
+"""
+    assert run_node(script) == {"date": "2026-11-01", "zone": "America/New_York"}
+
+
+def test_rollover_is_one_durable_sync_operation_with_the_server_revision():
+    script = f"""
+const createSync = require({json.dumps(str(SYNC))});
+const createRollover = require({json.dumps(str(ROLLOVER))});
+const values = new Map(); let delivered;
+const storage = {{get length(){{return values.size}},key:i=>[...values.keys()][i]||null,
+ getItem:k=>values.get(k)||null,setItem:(k,v)=>values.set(k,v),removeItem:k=>values.delete(k)}};
+const sync=createSync({{storage,getLogin:()=> 'timmy',createOperationId:()=> 'roll-1',
+ fetchJson:async(_url,options)=>{{delivered=JSON.parse(options.body).operations;return {{revision:8,ids:['two'],plan_date:'2026-08-13',timezone:'UTC',accepted_operation_ids:['roll-1'],duplicate_operation_ids:[],rejected_operations:[]}}}},
+ onRemoteIds:()=>{{}},onStatus:()=>{{}}}});
+const rollover=createRollover({{localDate:()=> '2026-08-13',timeZone:()=> 'UTC'}});
+const queued=sync.enqueueRollover(rollover.operation({{operation_id:'ignored',base_revision:7,
+ selected_ids:['two'],capacity_minutes:90,estimates:{{two:45}}}}));
+(async()=>{{const before=sync.pending();await sync.flush();process.stdout.write(JSON.stringify({{queued,before,delivered,after:sync.pending()}}));}})();
+"""
+    result = run_node(script)
+    assert result["queued"] is True
+    assert result["before"] == result["delivered"]
+    assert result["before"][0]["operation_id"] == "roll-1"
+    assert result["before"][0]["action"] == "rollover"
+    assert result["after"] == []
+
+
+def test_rollover_review_is_wired_into_the_offline_mobile_shell():
+    root = Path(__file__).parents[1]
+    index = (root / "frontend" / "index.html").read_text()
+    worker = (root / "frontend" / "service-worker.js").read_text()
+    dashboard = (root / "frontend" / "dashboard.js").read_text()
+    css = (root / "frontend" / "dashboard.css").read_text()
+
+    assert '<script src="static/today-rollover.js"></script>' in index
+    assert "BASE + 'static/today-rollover.js'" in worker
+    assert "todayRollover.reviewState(plan)" in dashboard
+    assert "Review yesterday’s unfinished work" in dashboard
+    assert "todaySync.enqueueRollover" in dashboard
+    assert ".plan-today-header button { min-width:44px; min-height:44px;" in css
@@ -127,7 +127,7 @@ sync.enqueueConfiguration(120, {{'issue:r:1:':60}});
 def test_inflight_today_drain_ships_in_a_new_offline_shell():
    source = (Path(__file__).parents[1] / "frontend" / "service-worker.js").read_text()

-    assert "stackchain-dashboard-shell-v88" in source
+    assert "stackchain-dashboard-shell-v94" in source
    assert "BASE + 'static/today-sync.js'" in source


@@ -98,8 +98,52 @@ queue.replacePlanning({{capacity_minutes:180,estimates:{{'issue:r:1:':30,'issue:
 process.stdout.write(JSON.stringify({{first:queue.runway([item(1),item(2),item(3)],0),second:queue.runway([item(1),item(2),item(3)],1)}}));
 """
    assert json.loads(run_node(script)) == {
-        "first": {"current_minutes": 30, "remaining_minutes": 135},
-        "second": {"current_minutes": 60, "remaining_minutes": 105},
+        "first": {
+            "current_minutes": 30, "remaining_minutes": 135,
+            "future_minutes": 105, "capacity_minutes": 180,
+        },
+        "second": {
+            "current_minutes": 60, "remaining_minutes": 105,
+            "future_minutes": 45, "capacity_minutes": 180,
+        },
+    }
+
+
+def test_today_live_runway_uses_elapsed_work_and_reports_capacity_risk():
+    script = f"""
+const createTodayWork = require({json.dumps(str(TODAY_WORK))});
+const values = new Map();
+const storage = {{getItem:k=>values.get(k)||null,setItem:(k,v)=>values.set(k,v),removeItem:k=>values.delete(k)}};
+const queue = createTodayWork({{storage, getLogin:()=> 'timmy'}});
+const item = number => ({{kind:'issue',repository:'r',number}});
+queue.replace(['issue:r:1:','issue:r:2:']);
+queue.replacePlanning({{capacity_minutes:100,estimates:{{'issue:r:1:':30,'issue:r:2:':60}}}});
+const healthy = queue.runway([item(1),item(2)],0,{{current_elapsed_ms:10*60000,total_elapsed_ms:10*60000}});
+const over = queue.runway([item(1),item(2)],0,{{current_elapsed_ms:45*60000,total_elapsed_ms:45*60000}});
+process.stdout.write(JSON.stringify({{healthy,over}}));
+"""
+    assert json.loads(run_node(script)) == {
+        "healthy": {"current_minutes": 30, "remaining_minutes": 90, "future_minutes": 60, "capacity_minutes": 100},
+        "over": {"current_minutes": 30, "remaining_minutes": 90, "future_minutes": 60, "capacity_minutes": 100},
+    }
+
+
+def test_today_live_runway_stays_truthful_when_estimates_or_capacity_are_missing():
+    script = f"""
+const createTodayWork = require({json.dumps(str(TODAY_WORK))});
+const values = new Map();
+const storage = {{getItem:k=>values.get(k)||null,setItem:(k,v)=>values.set(k,v),removeItem:k=>values.delete(k)}};
+const queue = createTodayWork({{storage, getLogin:()=> 'timmy'}});
+const item = number => ({{kind:'issue',repository:'r',number}});
+queue.replace(['issue:r:1:','issue:r:2:']);
+queue.replacePlanning({{capacity_minutes:null,estimates:{{'issue:r:1:':30}}}});
+process.stdout.write(JSON.stringify(queue.runway([item(1),item(2)],0,{{current_elapsed_ms:40*60000,total_elapsed_ms:40*60000}})));
+"""
+    assert json.loads(run_node(script)) == {
+        "current_minutes": 30,
+        "remaining_minutes": None,
+        "future_minutes": None,
+        "capacity_minutes": None,
    }


@@ -8,6 +8,7 @@ from tests.dashboard_bundle import dashboard


 UNFILED = Path(__file__).parents[1] / "frontend" / "unfiled-captures.js"
+DRAFT_SESSION = Path(__file__).parents[1] / "frontend" / "draft-filing-session.js"


 def run_node(script: str):
@@ -15,7 +16,29 @@ def run_node(script: str):
    return json.loads(result.stdout)


-def test_unfiled_captures_keep_twenty_newest_account_bound_notes():
+def test_draft_filing_session_navigates_stable_capture_ids_and_reconciles_removed_items():
+    script = f"""
+const createDraftFilingSession = require({json.dumps(str(DRAFT_SESSION))});
+let captures = [{{id:'newest'}}, {{id:'middle'}}, {{id:'oldest'}}];
+const session = createDraftFilingSession({{list:()=>captures}});
+const opened = session.start('middle');
+const skipped = session.next();
+captures = [{{id:'newest'}}];
+const afterFiled = session.removeCurrentAndNext('oldest');
+const previous = session.previous();
+process.stdout.write(JSON.stringify({{opened,skipped,afterFiled,previous}}));
+"""
+    output = run_node(script)
+
+    assert output == {
+        "opened": {"id": "middle", "position": 2, "total": 3, "remaining": 1},
+        "skipped": {"id": "oldest", "position": 3, "total": 3, "remaining": 0},
+        "afterFiled": {"id": "newest", "position": 1, "total": 1, "remaining": 0},
+        "previous": {"id": "newest", "position": 1, "total": 1, "remaining": 0},
+    }
+
+
+def test_unfiled_captures_block_at_capacity_until_oldest_is_explicitly_replaced():
    script = f"""
 const createUnfiledCaptures = require({json.dumps(str(UNFILED))});
 const values = new Map();
@@ -32,25 +55,203 @@ const captures = createUnfiledCaptures({{
  createId:()=>String(++sequence),
  now:()=>1000 + sequence,
 }});
-for (let index = 1; index <= 22; index += 1) {{
+for (let index = 1; index <= 20; index += 1) {{
  captures.save({{title:'Note ' + index, body:'Context ' + index}});
 }}
+let fullError = '';
+try {{ captures.save({{title:'Note 21', body:'Context 21'}}); }} catch (error) {{
+  fullError = error.message;
+}}
+const beforeReplace = captures.list();
+const oldest = captures.capacity().oldest;
+const replacement = captures.replaceOldest({{title:'Note 21', body:'Context 21'}}, oldest.id);
 const offline = captures.list();
 const restored = createUnfiledCaptures({{
  storage, getCaptureLogin:()=>'timmy', getCurrentLogin:()=>'timmy'
 }}).list();
-process.stdout.write(JSON.stringify({{offline, restored}}));
+process.stdout.write(JSON.stringify({{fullError,beforeReplace,oldest,replacement,offline,restored}}));
 """
    output = run_node(script)

+    assert output["fullError"] == "Drafts full — nothing was deleted."
+    assert len(output["beforeReplace"]) == 20
+    assert output["beforeReplace"][-1]["title"] == "Note 1"
+    assert output["oldest"]["title"] == "Note 1"
    assert len(output["offline"]) == 20
-    assert output["offline"][0]["title"] == "Note 22"
-    assert output["offline"][-1]["title"] == "Note 3"
+    assert output["offline"][0]["title"] == "Note 21"
+    assert output["offline"][-1]["title"] == "Note 2"
    assert all(item["quarantined"] for item in output["offline"])
    assert all(not item["quarantined"] for item in output["restored"])
    assert output["restored"][0]["ownerLogin"] == "timmy"


+def test_replacing_oldest_capture_deletes_only_its_attachment_after_new_capture_is_durable():
+    script = f"""
+const createUnfiledCaptures = require({json.dumps(str(UNFILED))});
+const values = new Map();
+const blobs = new Map();
+const deleted = [];
+const storage = {{getItem:k=>values.get(k)||null,setItem:(k,v)=>values.set(k,v)}};
+const attachmentStore = {{
+  put: async (id, attachment) => blobs.set(id, attachment),
+  get: async id => blobs.get(id) || null,
+  delete: async id => {{ deleted.push(id); blobs.delete(id); }},
+}};
+(async () => {{
+  let id = 0;
+  const captures = createUnfiledCaptures({{
+    storage, attachmentStore, maxItems:2, getCaptureLogin:()=>'timmy', getCurrentLogin:()=>'timmy',
+    createId:()=>String(++id), now:()=>id,
+  }});
+  const image = name => ({{filename:name,contentType:'image/png',blob:new Blob([name],{{type:'image/png'}})}});
+  const first = await captures.save({{title:'First',body:'one',attachment:image('first.png')}});
+  const second = await captures.save({{title:'Second',body:'two',attachment:image('second.png')}});
+  let mismatch = '';
+  try {{ await captures.replaceOldest({{title:'Third',body:'three'}}, second.id); }}
+  catch (error) {{ mismatch = error.message; }}
+  const third = await captures.replaceOldest({{title:'Third',body:'three',attachment:image('third.png')}}, first.id);
+  process.stdout.write(JSON.stringify({{
+    mismatch, titles:captures.list().map(item=>item.title), deleted,
+    blobs:[...blobs.keys()], third:third.title,
+  }}));
+}})().catch(error => {{ console.error(error); process.exit(1); }});
+"""
+    output = run_node(script)
+
+    assert output == {
+        "mismatch": "Drafts changed. Review them before replacing anything.",
+        "titles": ["Third", "Second"],
+        "deleted": ["1"],
+        "blobs": ["2", "3"],
+        "third": "Third",
+    }
+
+
+def test_failed_replacement_attachment_cleanup_restores_original_draft_and_removes_staged_blob():
+    script = f"""
+const createUnfiledCaptures = require({json.dumps(str(UNFILED))});
+const values = new Map();
+const blobs = new Map();
+const storage = {{getItem:k=>values.get(k)||null,setItem:(k,v)=>values.set(k,v)}};
+const attachmentStore = {{
+  put: async (id, attachment) => blobs.set(id, attachment),
+  get: async id => blobs.get(id) || null,
+  delete: async id => {{
+    if (id === '1') throw new Error('IndexedDB delete failed');
+    blobs.delete(id);
+  }},
+}};
+(async () => {{
+  let id = 0;
+  const captures = createUnfiledCaptures({{
+    storage, attachmentStore, maxItems:1, getCaptureLogin:()=>'timmy', getCurrentLogin:()=>'timmy',
+    createId:()=>String(++id), now:()=>id,
+  }});
+  const image = name => ({{filename:name,contentType:'image/png',blob:new Blob([name],{{type:'image/png'}})}});
+  const original = await captures.save({{title:'Original',body:'keep me',attachment:image('original.png')}});
+  let error = '';
+  try {{ await captures.replaceOldest({{title:'Replacement',body:'new',attachment:image('new.png')}}, original.id); }}
+  catch (caught) {{ error = caught.message; }}
+  const resumed = await captures.resume(original.id, 'timmy');
+  process.stdout.write(JSON.stringify({{
+    error, titles:captures.list().map(item=>item.title), blobs:[...blobs.keys()],
+    resumedTitle:resumed.title, resumedFilename:resumed.attachment.filename,
+  }}));
+}})().catch(error => {{ console.error(error); process.exit(1); }});
+"""
+    output = run_node(script)
+
+    assert output == {
+        "error": "IndexedDB delete failed",
+        "titles": ["Original"],
+        "blobs": ["1"],
+        "resumedTitle": "Original",
+        "resumedFilename": "original.png",
+    }
+
+
+def test_failed_discard_attachment_cleanup_leaves_draft_visible_and_resumable():
+    script = f"""
+const createUnfiledCaptures = require({json.dumps(str(UNFILED))});
+const values = new Map();
+const blobs = new Map();
+const storage = {{getItem:k=>values.get(k)||null,setItem:(k,v)=>values.set(k,v)}};
+const attachmentStore = {{
+  put: async (id, attachment) => blobs.set(id, attachment),
+  get: async id => blobs.get(id) || null,
+  delete: async () => {{ throw new Error('IndexedDB delete failed'); }},
+}};
+(async () => {{
+  const captures = createUnfiledCaptures({{
+    storage, attachmentStore, getCaptureLogin:()=>'timmy', getCurrentLogin:()=>'timmy',
+    createId:()=>'capture-1', now:()=>42,
+  }});
+  await captures.save({{title:'Keep this',body:'Important',attachment:{{
+    filename:'proof.png',contentType:'image/png',blob:new Blob(['proof'],{{type:'image/png'}}),
+  }}}});
+  let error = '';
+  try {{ await captures.discard('capture-1'); }} catch (caught) {{ error = caught.message; }}
+  const resumed = await captures.resume('capture-1', 'timmy');
+  process.stdout.write(JSON.stringify({{
+    error, titles:captures.list().map(item=>item.title), resumedTitle:resumed.title,
+    resumedFilename:resumed.attachment.filename,
+  }}));
+}})().catch(error => {{ console.error(error); process.exit(1); }});
+"""
+    output = run_node(script)
+
+    assert output == {
+        "error": "IndexedDB delete failed",
+        "titles": ["Keep this"],
+        "resumedTitle": "Keep this",
+        "resumedFilename": "proof.png",
+    }
+
+
+def test_discard_metadata_write_failure_restores_attachment_and_draft():
+    script = f"""
+const createUnfiledCaptures = require({json.dumps(str(UNFILED))});
+const values = new Map();
+const blobs = new Map();
+let failWrites = false;
+const storage = {{
+  getItem:k=>values.get(k)||null,
+  setItem:(k,v)=>{{ if (failWrites) throw new Error('Storage write failed'); values.set(k,v); }},
+}};
+const attachmentStore = {{
+  put: async (id, attachment) => blobs.set(id, attachment),
+  get: async id => blobs.get(id) || null,
+  delete: async id => blobs.delete(id),
+}};
+(async () => {{
+  const captures = createUnfiledCaptures({{
+    storage, attachmentStore, getCaptureLogin:()=>'timmy', getCurrentLogin:()=>'timmy',
+    createId:()=>'capture-1', now:()=>42,
+  }});
+  await captures.save({{title:'Keep this',body:'Important',attachment:{{
+    filename:'proof.png',contentType:'image/png',blob:new Blob(['proof'],{{type:'image/png'}}),
+  }}}});
+  failWrites = true;
+  let error = '';
+  try {{ await captures.discard('capture-1'); }} catch (caught) {{ error = caught.message; }}
+  failWrites = false;
+  const resumed = await captures.resume('capture-1', 'timmy');
+  process.stdout.write(JSON.stringify({{
+    error, titles:captures.list().map(item=>item.title), blobIds:[...blobs.keys()],
+    resumedFilename:resumed.attachment.filename,
+  }}));
+}})().catch(error => {{ console.error(error); process.exit(1); }});
+"""
+    output = run_node(script)
+
+    assert output == {
+        "error": "Storage write failed",
+        "titles": ["Keep this"],
+        "blobIds": ["capture-1"],
+        "resumedFilename": "proof.png",
+    }
+
+
 def test_unfiled_capture_resume_requires_matching_confirmed_account_and_removes_only_selected_note():
    script = f"""
 const createUnfiledCaptures = require({json.dumps(str(UNFILED))});
@@ -65,6 +266,7 @@ const second = captures.save({{title:'Second',body:'Two'}});
 let mismatch = '';
 try {{ captures.resume(first.id, 'alexander'); }} catch (error) {{ mismatch = error.message; }}
 const resumed = captures.resume(first.id, 'timmy');
+captures.completeResume(first.id);
 process.stdout.write(JSON.stringify({{mismatch,resumed,remaining:captures.list(),second}}));
 """
    output = run_node(script)
@@ -74,6 +276,52 @@ process.stdout.write(JSON.stringify({{mismatch,resumed,remaining:captures.list()
    assert [item["id"] for item in output["remaining"]] == [output["second"]["id"]]


+def test_unfiled_capture_durably_restores_screenshot_before_explicit_handoff_completion():
+    script = f"""
+const createUnfiledCaptures = require({json.dumps(str(UNFILED))});
+const values = new Map();
+const blobs = new Map();
+const storage = {{getItem:k=>values.get(k)||null,setItem:(k,v)=>values.set(k,v)}};
+const attachmentStore = {{
+  put: async (id, attachment) => blobs.set(id, attachment),
+  get: async id => blobs.get(id) || null,
+  delete: async id => blobs.delete(id),
+}};
+(async () => {{
+  const captures = createUnfiledCaptures({{
+    storage, attachmentStore, getCaptureLogin:()=>'timmy', getCurrentLogin:()=>'timmy',
+    createId:()=>'capture-1', now:()=>42,
+  }});
+  const screenshot = {{filename:'phone.png',contentType:'image/png',blob:new Blob(['proof'],{{type:'image/png'}})}};
+  const saved = await captures.save({{title:'Broken mobile layout',body:'At 320px',attachment:screenshot}});
+  const listed = captures.list();
+  const resumed = await captures.resume(saved.id, 'timmy');
+  const beforeComplete = captures.list().length;
+  await captures.completeResume(saved.id);
+  process.stdout.write(JSON.stringify({{
+    listed, beforeComplete, afterComplete:captures.list().length,
+    resumed:{{title:resumed.title,body:resumed.body,filename:resumed.attachment.filename,
+      contentType:resumed.attachment.contentType,size:resumed.attachment.blob.size}},
+    blobRemoved:!blobs.has(saved.id),
+  }}));
+}})().catch(error => {{ console.error(error); process.exit(1); }});
+"""
+    output = run_node(script)
+
+    assert output["listed"][0]["hasAttachment"] is True
+    assert "attachment" not in output["listed"][0]
+    assert output["beforeComplete"] == 1
+    assert output["afterComplete"] == 0
+    assert output["blobRemoved"] is True
+    assert output["resumed"] == {
+        "title": "Broken mobile layout",
+        "body": "At 320px",
+        "filename": "phone.png",
+        "contentType": "image/png",
+        "size": 5,
+    }
+
+
 def test_unfiled_capture_rejects_empty_or_identityless_records_without_writing():
    script = f"""
 const createUnfiledCaptures = require({json.dumps(str(UNFILED))});
@@ -100,12 +348,80 @@ async def test_mobile_composer_exposes_cold_offline_save_and_account_safe_resume

    assert '<script src="static/unfiled-captures.js"></script>' in html
    assert 'id="save-unfiled-issue"' in html
-    assert 'Save for filing' in html
+    assert 'Save to Drafts' in html
    assert "createUnfiledCaptures({" in html
    assert "getCaptureLogin: () => String(lastContextSnapshot?.user?.login || '').trim()" in html
    assert "unfiledCaptures.save(captureDraft)" in html
-    assert "unfiledCaptures.resume(item.capture_id, activeFlushLogin)" in html
-    assert "issueCapture.saveDraft(resumed)" in html
+    assert "const savedCapture = await unfiledCaptures.save(captureDraft)" in html
+    assert "mobileTaskDock.select('queues')" in html
+    assert "data-capture-id=\"' + escapeHtml(item.capture_id) + '\"" in html
+    assert "requestAnimationFrame(() =>" in html
+    assert "savedCard?.scrollIntoView({block:'nearest'})" in html
+    assert "Saved to Drafts. Choose a repository when you’re ready to file it." in html
+    assert "await dependencies.captures.resume(captureId, dependencies.getLogin())" in DRAFT_SESSION.read_text()
+    assert "await createIssueAttachmentController.serialize()" in html
+    assert "createUnfiledAttachmentStore()" in html
+    assert "dependencies.attachment[resumed.attachment ? 'restore' : 'clear'](resumed.attachment)" in DRAFT_SESSION.read_text()
+    assert "await unfiledCaptures.completeResume(rUC)" in html
+    assert "...(rUC ? { sourceCaptureId: rUC } : {})" in html
+    assert "item.hasAttachment ? ' · Screenshot attached' : ''" in html
+    assert "dependencies.issueCapture.saveDraft(resumed)" in DRAFT_SESSION.read_text()
    assert "item.kind === 'unfiled-issue'" in html
    assert '.create-issue-actions button { min-height:44px;' in html
+    assert '.draft-card:focus-visible' in html
+    assert 'scroll-margin-bottom:calc(76px + env(safe-area-inset-bottom))' in html
    assert '@media(max-width:320px)' in html
+
+
+@pytest.mark.anyio
+async def test_mobile_drafts_expose_a_safe_sequential_filing_session():
+    html = await dashboard()
+
+    assert '<script src="static/draft-filing-session.js"></script>' in html
+    assert 'id="draft-filing-session"' in html
+    assert 'id="draft-filing-progress"' in html
+    assert 'id="previous-draft"' in html
+    assert 'id="skip-draft"' in html
+    assert "dFS.start(item.capture_id)" in html
+    assert "await dFS.nextCapture()" in html
+    assert "await dFS.advance(fS.id)" in html
+    feature = DRAFT_SESSION.read_text()
+    assert "Draft ${state.position} of ${state.total}" in feature
+    assert "qs('#submit-new-issue').textContent = state.remaining ? 'File & next' : 'File final Draft'" in feature
+    assert '.draft-filing-session-actions button { min-height:44px;' in html
+    assert 'padding-bottom:calc(10px + env(safe-area-inset-bottom))' in html
+
+
+@pytest.mark.anyio
+async def test_mobile_capture_capacity_requires_an_explicit_preserving_decision():
+    html = await dashboard()
+
+    assert 'id="draft-capacity-sheet"' in html
+    assert 'Drafts full — nothing was deleted.' in html
+    assert 'id="review-full-drafts"' in html
+    assert 'id="replace-oldest-draft"' in html
+    assert 'id="keep-editing-draft"' in html
+    assert "showDraftCapacityDialog(unfiledCaptures)" in html
+    feature = (Path(__file__).parents[1] / "frontend" / "draft-capacity-dialog.js").read_text()
+    assert "unfiledCaptures.replaceOldest(draft, oldest.id)" in feature
+    assert '.draft-capacity-panel { box-sizing:border-box; width:min(620px,100%); max-height:100dvh;' in html
+    assert '.draft-capacity-actions button { min-height:44px;' in html
+
+
+@pytest.mark.anyio
+async def test_mobile_new_opens_capture_first_and_progressively_reveals_filing_fields():
+    html = await dashboard()
+
+    assert 'id="create-issue-heading">Capture work' in html
+    assert 'class="create-issue-filing" id="create-issue-filing" hidden' in html
+    assert 'id="save-unfiled-issue" type="button">Save to Drafts' in html
+    assert 'id="file-new-issue" type="button">File now' in html
+    assert "function setIssueFilingMode(enabled)" in html
+    assert "setIssueFilingMode(Boolean(captureDraft.repository))" in html
+    assert "qs('#create-issue-title').focus();" in html
+    assert "qs('#file-new-issue').addEventListener('click'" in html
+    assert '.create-issue-capture-actions button { min-height:44px;' in html
+    assert '.create-issue-capture-actions[hidden] { display:none;' in html
+    attachment = html.index('class="create-issue-attachment"')
+    filing = html.index('class="create-issue-filing"')
+    assert attachment < filing
Author	SHA1	Message	Date
timmy	a08a51af02	feat: finish Today plans with inline estimates (Closes #635 ) CI / lint (pull_request) Successful in 1m31s Details CI / build-release (pull_request) Successful in 5s Details CI / release-candidate (pull_request) Has been skipped Details	2026-08-12 08:55:52 +00:00
timmy	528d721cd3	Merge pull request 'Build my Today from ranked ready work' (#634 ) from timmy/633-build-my-today into main CI / lint (push) Successful in 1m36s Details CI / build-release (push) Successful in 6s Details CI / release-candidate (push) Successful in 6s Details	2026-08-12 08:38:49 +00:00
timmy	a91788276c	feat: build a ready capacity-fit Today plan (Closes #633 ) CI / lint (pull_request) Successful in 1m30s Details CI / build-release (pull_request) Successful in 7s Details CI / release-candidate (pull_request) Has been skipped Details	2026-08-12 08:28:03 +00:00
timmy	28a2c9faf1	Merge pull request 'Make Draft filing admission atomic and retry-safe' (#632 ) from timmy/631-atomic-draft-admission into main CI / lint (push) Successful in 1m29s Details CI / build-release (push) Successful in 5s Details CI / release-candidate (push) Successful in 6s Details	2026-08-12 07:57:53 +00:00
timmy	b8befc2041	fix: make Draft admission retry-safe (Closes #631 ) CI / lint (pull_request) Successful in 1m29s Details CI / build-release (pull_request) Successful in 5s Details CI / release-candidate (pull_request) Has been skipped Details	2026-08-12 07:54:12 +00:00
timmy	d23c0c894b	Merge pull request 'File mobile Drafts in one sequential session' (#630 ) from timmy/629-sequential-draft-filing into main CI / lint (push) Successful in 1m31s Details CI / build-release (push) Successful in 5s Details CI / release-candidate (push) Successful in 7s Details	2026-08-12 07:20:10 +00:00
timmy	7948d2e353	feat: file mobile Drafts sequentially (Closes #629 ) CI / lint (pull_request) Successful in 1m29s Details CI / build-release (pull_request) Successful in 6s Details CI / release-candidate (pull_request) Has been skipped Details	2026-08-12 07:18:02 +00:00
timmy	1079ec6561	Merge pull request 'Unify mobile work queues in a stable dock switcher' (#628 ) from timmy/627-mobile-queue-switcher into main CI / lint (push) Successful in 1m41s Details CI / build-release (push) Successful in 6s Details CI / release-candidate (push) Successful in 6s Details	2026-08-12 06:29:46 +00:00
timmy	8d142c808b	feat: unify mobile work queues (Closes #627 ) CI / lint (pull_request) Successful in 1m34s Details CI / build-release (pull_request) Successful in 5s Details CI / release-candidate (pull_request) Has been skipped Details	2026-08-12 06:27:00 +00:00
timmy	776ae70019	Merge pull request 'Preserve mobile Drafts when attachment cleanup fails' (#626 ) from timmy/625-draft-mutation-rollback into main CI / lint (push) Successful in 1m22s Details CI / build-release (push) Successful in 6s Details CI / release-candidate (push) Successful in 6s Details	2026-08-12 05:56:46 +00:00
timmy	285fdff869	fix: preserve Drafts when cleanup fails (Closes #625 ) CI / lint (pull_request) Successful in 1m32s Details CI / build-release (pull_request) Successful in 6s Details CI / release-candidate (pull_request) Has been skipped Details	2026-08-12 05:54:19 +00:00
timmy	89d153d6a5	Merge pull request 'Prevent silent mobile Draft loss at capacity' (#624 ) from timmy/623-draft-capacity-guard into main CI / lint (push) Successful in 1m34s Details CI / build-release (push) Successful in 6s Details CI / release-candidate (push) Successful in 6s Details	2026-08-12 05:38:48 +00:00
timmy	fcb0575e38	feat: guard mobile Draft capacity (Closes #623 ) CI / lint (pull_request) Successful in 1m31s Details CI / build-release (pull_request) Successful in 6s Details CI / release-candidate (pull_request) Has been skipped Details	2026-08-12 05:36:32 +00:00
timmy	14ba1bcf14	Merge pull request 'Complete the mobile Save to Drafts handoff' (#622 ) from timmy/621-mobile-draft-handoff into main CI / lint (push) Successful in 1m28s Details CI / build-release (push) Successful in 5s Details CI / release-candidate (push) Successful in 6s Details	2026-08-12 04:57:56 +00:00
timmy	a68639668c	feat: complete mobile Draft handoff (Closes #621 ) CI / lint (pull_request) Successful in 1m27s Details CI / build-release (pull_request) Successful in 5s Details CI / release-candidate (pull_request) Has been skipped Details	2026-08-12 04:54:45 +00:00
timmy	1f0e9fb59d	Merge pull request 'Make PWA updates resilient with progressive feature caching' (#620 ) from timmy/619-progressive-feature-caching into main CI / lint (push) Successful in 1m30s Details CI / build-release (push) Successful in 6s Details CI / release-candidate (push) Successful in 6s Details	2026-08-12 04:26:38 +00:00
timmy	065275b4ef	feat: progressively cache optional PWA features (Closes #619 ) CI / lint (pull_request) Successful in 1m31s Details CI / build-release (pull_request) Successful in 6s Details CI / release-candidate (pull_request) Has been skipped Details	2026-08-12 04:24:18 +00:00
timmy	90f1c48565	Merge pull request 'Purge capture-first screenshot Drafts at every private-data boundary' (#618 ) from timmy/617-purge-capture-drafts into main CI / lint (push) Successful in 1m26s Details CI / build-release (push) Successful in 6s Details CI / release-candidate (push) Successful in 6s Details	2026-08-12 04:02:55 +00:00
timmy	ae07dd185c	fix: purge capture Draft screenshots (Closes #617 ) CI / lint (pull_request) Successful in 1m31s Details CI / build-release (pull_request) Successful in 5s Details CI / release-candidate (pull_request) Has been skipped Details	2026-08-12 03:58:10 +00:00
rockachopa	f43f776479	Merge pull request 'Preserve screenshots in capture-first mobile Drafts' (#616 ) from timmy/615-capture-first-screenshots into main CI / lint (push) Successful in 1m25s Details CI / build-release (push) Successful in 5s Details CI / release-candidate (push) Successful in 5s Details	2026-08-12 03:35:30 +00:00
timmy	48e4344f28	feat: preserve capture-first screenshots in Drafts (Closes #615 ) CI / lint (pull_request) Successful in 1m24s Details CI / build-release (pull_request) Successful in 6s Details CI / release-candidate (pull_request) Has been skipped Details	2026-08-12 03:33:19 +00:00
rockachopa	269916486c	Merge pull request 'Make mobile New a capture-first flow' (#614 ) from timmy/613-mobile-capture-first into main CI / lint (push) Successful in 1m27s Details CI / build-release (push) Successful in 6s Details CI / release-candidate (push) Successful in 6s Details	2026-08-12 02:56:56 +00:00
timmy	07235d3870	feat: make mobile New capture-first (Closes #613 ) CI / lint (pull_request) Successful in 1m23s Details CI / build-release (pull_request) Successful in 5s Details CI / release-candidate (pull_request) Has been skipped Details	2026-08-12 02:54:44 +00:00
rockachopa	8c32a9dd81	Merge pull request 'Start an empty Today plan from the mobile Work dock' (#612 ) from timmy/611-mobile-work-plan-today into main CI / lint (push) Successful in 1m27s Details CI / build-release (push) Successful in 7s Details CI / release-candidate (push) Successful in 7s Details	2026-08-12 02:28:30 +00:00
timmy	9edd3f6441	feat: start empty Today planning from mobile dock (Closes #611 ) CI / lint (pull_request) Successful in 1m26s Details CI / build-release (pull_request) Successful in 6s Details CI / release-candidate (pull_request) Has been skipped Details	2026-08-12 02:24:10 +00:00
rockachopa	4faf0447be	Merge pull request 'Bind operator mode to a canonical public origin' (#610 ) from timmy/609-canonical-public-origin into main CI / lint (push) Successful in 1m27s Details CI / build-release (push) Successful in 5s Details CI / release-candidate (push) Successful in 5s Details	2026-08-12 01:57:06 +00:00
timmy	8ea46974ff	feat: bind operator mode to public origin (Closes #609 ) CI / lint (pull_request) Successful in 1m30s Details CI / build-release (pull_request) Successful in 5s Details CI / release-candidate (pull_request) Has been skipped Details	2026-08-12 01:54:51 +00:00
rockachopa	075a277265	Merge pull request 'Log Today recap time concurrently within the foreground deadline' (#608 ) CI / lint (push) Successful in 1m32s Details CI / build-release (push) Successful in 5s Details CI / release-candidate (push) Successful in 6s Details	2026-08-12 01:24:43 +00:00
timmy	a7ec4437d9	feat: bound concurrent recap time logging (Closes #607 ) CI / lint (pull_request) Successful in 1m30s Details CI / build-release (pull_request) Successful in 6s Details CI / release-candidate (pull_request) Has been skipped Details	2026-08-12 01:22:33 +00:00
timmy	bf2cf37151	Merge pull request 'Lazy-load active devices and security activity' (#606 ) from timmy/605-lazy-security-center into main CI / lint (push) Successful in 1m30s Details CI / build-release (push) Successful in 6s Details CI / release-candidate (push) Successful in 8s Details	2026-08-12 01:03:13 +00:00
timmy	fb58ba30b2	feat: lazy-load security center (Closes #605 ) CI / lint (pull_request) Successful in 1m31s Details CI / build-release (pull_request) Successful in 6s Details CI / release-candidate (pull_request) Has been skipped Details	2026-08-12 01:00:32 +00:00
rockachopa	17823352f2	Merge pull request 'Review unfinished Today work when a new local day begins' (#604 ) from timmy/603-today-day-rollover into main CI / lint (push) Successful in 1m26s Details CI / build-release (push) Successful in 6s Details CI / release-candidate (push) Successful in 6s Details	2026-08-12 00:40:49 +00:00
timmy	14a3e1ee8d	feat: review Today work at day rollover (Closes #603 ) CI / lint (pull_request) Successful in 1m33s Details CI / build-release (pull_request) Successful in 6s Details CI / release-candidate (pull_request) Has been skipped Details	2026-08-12 00:38:13 +00:00
timmy	8dc155e49a	Merge pull request 'Complete Today from the mobile session HUD' (#602 ) from timmy/601-mobile-hud-complete into main CI / lint (push) Successful in 1m31s Details CI / build-release (push) Successful in 8s Details CI / release-candidate (push) Successful in 7s Details	2026-08-11 23:58:47 +00:00
timmy	7aa25f1d8c	feat: complete Today from mobile HUD (Closes #601 ) CI / lint (pull_request) Successful in 1m27s Details CI / build-release (pull_request) Successful in 5s Details CI / release-candidate (pull_request) Has been skipped Details	2026-08-11 23:56:39 +00:00
timmy	f023414929	Merge pull request 'Keep the active Today session visible on mobile' (#600 ) from timmy/599-mobile-today-session-hud into main CI / lint (push) Successful in 1m28s Details CI / build-release (push) Successful in 5s Details CI / release-candidate (push) Successful in 6s Details	2026-08-11 23:36:22 +00:00
timmy	96e7b35419	feat: keep active Today visible on mobile (Closes #599 ) CI / lint (pull_request) Successful in 1m28s Details CI / build-release (pull_request) Successful in 7s Details CI / release-candidate (pull_request) Has been skipped Details	2026-08-11 23:29:50 +00:00
rockachopa	4c13e13275	Merge pull request 'Replan Today from live budget risk' (#598 ) from timmy/597-live-today-budget into main CI / lint (push) Successful in 1m27s Details CI / build-release (push) Successful in 5s Details CI / release-candidate (push) Successful in 6s Details	2026-08-11 23:07:01 +00:00
timmy	ebe19f2281	feat: replan Today from live budget risk (Closes #597 ) CI / lint (pull_request) Successful in 1m24s Details CI / build-release (pull_request) Successful in 5s Details CI / release-candidate (pull_request) Has been skipped Details	2026-08-11 23:04:49 +00:00
timmy	798790ce1a	Merge pull request 'Pause Today while handling Attention' (#596 ) CI / lint (push) Successful in 1m37s Details CI / build-release (push) Successful in 7s Details CI / release-candidate (push) Successful in 7s Details Closes #595	2026-08-11 22:32:20 +00:00
timmy	9629643a63	feat: pause Today while handling Attention (Closes #595 ) CI / lint (pull_request) Successful in 1m31s Details CI / build-release (pull_request) Successful in 10s Details CI / release-candidate (pull_request) Has been skipped Details	2026-08-11 22:27:53 +00:00
timmy	9f3855d779	Keep mobile Attention actionable alongside Today CI / lint (push) Successful in 1m29s Details CI / build-release (push) Successful in 7s Details CI / release-candidate (push) Successful in 6s Details Keep mobile Attention actionable alongside Today (#594)	2026-08-11 21:41:26 +00:00
timmy	c99dd3e3be	test: make async deadline checks contention-safe CI / lint (pull_request) Successful in 1m39s Details CI / build-release (pull_request) Successful in 6s Details CI / release-candidate (pull_request) Has been skipped Details	2026-08-11 21:39:04 +00:00
timmy	7e173640ed	refactor: keep mobile work mode update-local CI / lint (pull_request) Failing after 1m31s Details CI / build-release (pull_request) Has been skipped Details CI / release-candidate (pull_request) Has been skipped Details	2026-08-11 21:34:22 +00:00
timmy	87f63370f6	feat: keep mobile Attention actionable alongside Today (Closes #593 ) CI / lint (pull_request) Failing after 1m26s Details CI / build-release (pull_request) Has been skipped Details CI / release-candidate (pull_request) Has been skipped Details	2026-08-11 21:25:27 +00:00
rockachopa	614ffae188	Merge pull request 'Reconcile long mobile interruptions before resuming Today time' (#592 ) from timmy/591-reconcile-today-interruptions into main CI / lint (push) Successful in 1m29s Details CI / build-release (push) Successful in 6s Details CI / release-candidate (push) Successful in 6s Details Merge pull request 'Reconcile long mobile interruptions before resuming Today time' (#592)	2026-08-11 21:07:41 +00:00
timmy	aaa9aef78b	feat: reconcile long Today interruptions (Closes #591 ) CI / lint (pull_request) Successful in 1m26s Details CI / build-release (pull_request) Successful in 5s Details CI / release-candidate (pull_request) Has been skipped Details	2026-08-11 20:56:40 +00:00
rockachopa	10a8b2738b	Merge pull request 'Require fresh authorization and audit recap time logging' (#590 ) from timmy/589-authorize-audit-recap-time into main CI / lint (push) Successful in 1m38s Details CI / build-release (push) Successful in 6s Details CI / release-candidate (push) Successful in 7s Details	2026-08-11 20:29:36 +00:00
timmy	379f2b8203	feat: authorize and audit recap time logging (Closes #589 ) CI / lint (pull_request) Successful in 1m29s Details CI / build-release (pull_request) Successful in 6s Details CI / release-candidate (pull_request) Has been skipped Details	2026-08-11 20:26:10 +00:00
rockachopa	53bf89bd47	Merge pull request 'Log corrected Today recap time to Gitea' (#588 ) CI / lint (push) Successful in 1m26s Details CI / build-release (push) Successful in 6s Details CI / release-candidate (push) Successful in 6s Details Closes #587	2026-08-11 19:43:01 +00:00
timmy	697f72da09	feat: log corrected Today recap time (Closes #587 ) CI / lint (pull_request) Successful in 1m25s Details CI / build-release (pull_request) Successful in 6s Details CI / release-candidate (pull_request) Has been skipped Details	2026-08-11 19:40:45 +00:00
timmy	c170240057	Merge pull request 'Resume recap-to-plan feedback after interruptions' (#586 ) from timmy/585-resume-recap-replan into main CI / lint (push) Successful in 1m32s Details CI / build-release (push) Successful in 6s Details CI / release-candidate (push) Successful in 6s Details	2026-08-11 18:59:24 +00:00
timmy	3043ccc846	feat: resume recap feedback after interruptions (Closes #585 ) CI / lint (pull_request) Successful in 1m24s Details CI / build-release (pull_request) Successful in 6s Details CI / release-candidate (pull_request) Has been skipped Details	2026-08-11 18:57:11 +00:00