chore(mobile): record latest main rebase

docs/reference/plans/2026-07-22-mobile-hybrid-webview-implementation-checklist.md

@@ -2778,3 +2778,5 @@ The rebuilt package is
 | 2026-07-29 | Complete | The full mobile suite passes 572 files / 3,425 tests with 2 expected skips.                                                                                                                                                                                                                                                                                                                                                               |
 | 2026-07-29 | Finding  | A full root run passes 3,825 files / 40,143 tests with 9 file and 70 test skips, but one unrelated `ProjectViewWrapper` dynamic-import boundary test reaches its 30-second timeout under full-suite load. Its isolated rerun passes 2/2 in 4.4 seconds.                                                                                                                                                                                   |
 | 2026-07-29 | Next     | Complete valid-shaped bridge response and live cross-host/workspace mutation races, then audit Desktop mutation reauthorization and paired cryptographic identity use before independent review and the remaining external release gates.                                                                                                                                                                                                 |
+| 2026-07-28 | Complete | Rebased all 44 migration commits onto `origin/main` at `3f5328755`; the branch is zero behind. The only conflicts retained upstream endpoint redaction and `happy-dom` together with the migration transport limits and `hachure-fill` dependency.                                                                                                                                                                                        |
+| 2026-07-28 | Complete | Post-rebase mobile tests pass 573 files / 3,427 tests with 2 expected skips. Mobile/root/RNW typechecks, mobile lint, max-lines, diff hygiene, and RNW packaging pass. Build `1eccbb3a1b3722c6c5cae4544af8f157bd7e5a210ca74cff97f5c4b356943e6f` verifies with 50 assets, 9,295,416 raw bytes, and 2,690,230 gzip bytes.                                                                                                                   |

docs/reference/plans/2026-07-22-mobile-hybrid-webview-parity-inventory.md

@@ -556,7 +556,7 @@ The standalone renderer-based workspace, session, files, terminal,
 source-control, and review presentation is also removed with its Vite-only
 package path. A production-source boundary requires `src/mobile-web/` to remain
 renderer-independent, while the authoritative RNW package still verifies as
-build `2441ad60…`.
+build `1eccbb3a…`.
 Raw bridge envelopes now pass an exact unique-key, paired-surrogate, bounded
 JSON grammar before schema parsing. The generated broker corpus rejects 1,458
 malformed or oversized requests across every production grant before host or
@@ -634,7 +634,7 @@ forking the shared presentation. Source Control measures 0.736% changed pixels
 nested syntax text follows the native effective font.
 
 The interrupted-transcript versus hook-status mismatch and a real structured
-prompt response pass Host 37 Simulator replay. Current package `2441ad60…`
+prompt response pass Host 37 Simulator replay. Current package `1eccbb3a…`
 also carries the network-denied local Mermaid engine and its WebKit-compatible
 token-bound parent/frame handoff. Classic SSH
 transcript authority and reconnect now pass a real Docker provider journey

docs/reference/plans/2026-07-22-mobile-hybrid-webview-single-pr-migration.md

@@ -150,8 +150,8 @@ prototype:
   inventory entry, and fixtures are removed. The production `/hybrid` route,
   production bridge clients, native fallback, and Experimental Settings entry
   remain intentionally until the external cutover gates pass.
-- The branch is rebased onto `origin/main` at `76b6c137c` and remains zero
-  behind. Upstream
+- The 44-commit branch is rebased onto `origin/main` at `3f5328755` and remains
+  zero behind. Upstream
   native-chat launch-draft, transcript identity, loading, reconnect, and
   orchestration behavior is retained in both native and hosted adapters.
 
@@ -2162,9 +2162,9 @@ The authoritative route now has a separately reviewed ceiling of 10 MiB total,
 from 8 MiB / 2 MiB / 7.5 MiB only after the legacy Mermaid CDN executable was
 replaced by the locally bundled, network-denied engine needed by both native
 and RNW without forking the existing UI. Boundary tests reject every
-measurement above its ceiling. The current 50-asset package is 9,295,070 bytes
-/ 2,690,115 bytes gzip and build
-`2441ad60ec4b02a9a26bb33c672748ddd542497b303e58e028eefbd703e613c9`.
+measurement above its ceiling. The current 50-asset package is 9,295,416 bytes
+/ 2,690,230 bytes gzip and build
+`1eccbb3a1b3722c6c5cae4544af8f157bd7e5a210ca74cff97f5c4b356943e6f`.
 `build:mobile-web` and release resource mapping therefore select the RNW
 package; the original 2 MiB Vite-fixture ceiling is retired with that fixture.
 Workspace snapshots now page through

docs/reference/plans/2026-07-27-mobile-hybrid-webview-remaining-work.md

@@ -102,30 +102,31 @@ pixels and 0.910 mean channel difference; Review passes at 2.134% and 1.947,
 within the 3% / 4 budgets. The packaged document opts into native safe-area
 insets, and nested syntax text retains the native effective font behavior.
 
-The migration is based on `origin/main` at `c8dba6d72`; the final rebase is
-complete and the branch is 39 commits ahead and zero behind. Post-rebase
-validation passes 570 mobile files / 3,418 tests with 2 expected skips and
-3,818 root files / 39,968 tests with 62 expected skips. The earlier
-load-sensitive root timeouts do not recur in the latest complete run. All
-project typechecks,
+The migration is based on `origin/main` at `3f5328755`; the final rebase is
+complete and the branch is 44 commits ahead and zero behind. Post-rebase
+validation passes 573 mobile files / 3,427 tests with 2 expected skips. The
+latest complete root run remains 3,818 files / 39,968 tests with 62 expected
+skips; the earlier load-sensitive root timeouts did not recur. All project
+typechecks,
 root/mobile/mobile-web lint and code-quality audits, 55 reliability gates,
 changed-file and full-mobile formatting, localization, the max-lines ratchet,
 and diff hygiene pass. React Doctor reports zero blocking errors across the
 migration without suppressions. The independently verified React Native Web
 package is
-`7c7c673deb74e158cdfb99b1ca536fd88cd3ab5dac4eb8db78c43ca12f6ce31d`:
-50 assets, 9,290,968 raw bytes, and 2,688,499 gzip bytes.
+`1eccbb3a1b3722c6c5cae4544af8f157bd7e5a210ca74cff97f5c4b356943e6f`:
+50 assets, 9,295,416 raw bytes, and 2,690,230 gzip bytes.
 
-That exact package now passes the unpacked macOS arm64 → Docker SSH → actual
-iOS WKWebView journey from a clean app reinstall in 1.9 minutes. Authenticated
-RPC returned the packaged build with no checkout-output fallback; the unchanged
-mobile UI mutated the remote terminal, rendered a remote native-chat transcript,
-retained it during provider loss, and rendered the appended assistant message
-after reconnect. The harness seeds the pasteboard before Session snapshots
-clipboard availability, uses the existing opaque clipboard-paste capability
-and Enter accessory, retries one missed native activation, and stops after the
-first captured request. Two focused retry tests pass. It does not depend on or
-change the simulator's keyboard layout.
+The immediately preceding `7c7c673d…` package passed the unpacked macOS arm64 →
+Docker SSH → actual iOS WKWebView journey from a clean app reinstall in 1.9
+minutes. Authenticated RPC returned the packaged build with no checkout-output
+fallback; the unchanged mobile UI mutated the remote terminal, rendered a
+remote native-chat transcript, retained it during provider loss, and rendered
+the appended assistant message after reconnect. The harness seeds the
+pasteboard before Session snapshots clipboard availability, uses the existing
+opaque clipboard-paste capability and Enter accessory, retries one missed
+native activation, and stops after the first captured request. Two focused
+retry tests pass. It does not depend on or change the simulator's keyboard
+layout.
 
 The latest native-authority audit keeps the unchanged UI but removes hosted
 fallback access to Expo clipboard, image/document pickers, haptics, and direct
@@ -289,9 +290,9 @@ subscription setup. It closed account subscription parsing plus
 speech/native/navigation validation-order gaps. Pending terminal/native-chat
 subscriptions recheck request liveness after asynchronous resolution; focused
 races cover early unsubscribe, authenticated client replacement, disposal, and
-replay. The production package now verifies as `2441ad60…`: 50 assets,
-9,295,070 raw bytes, and 2,690,115 gzip bytes. The full mobile suite passes 572
-files / 3,425 tests with 2 expected skips. The full root run has one unrelated
+replay. The production package now verifies as `1eccbb3a…`: 50 assets,
+9,295,416 raw bytes, and 2,690,230 gzip bytes. The full mobile suite passes 573
+files / 3,427 tests with 2 expected skips. The full root run has one unrelated
 30-second dynamic-import timeout under load; its isolated 2-test rerun passes
 in 4.4 seconds.
 The remaining security work below is exact release-app corpus testing,