From 46792335dfc260efa05f2185aa353093b12d9937 Mon Sep 17 00:00:00 2001
From: wuyj <wuyj@yinhai.com>
Date: Mon, 12 Oct 2026 22:15:26 +0800
Subject: [PATCH 1/7] =?UTF-8?q?=E5=B0=86=E7=A7=BB=E5=8A=A8=E7=AB=AF=20UI?=
 =?UTF-8?q?=20=E6=9C=AC=E5=9C=B0=E5=8C=96=E4=B8=BA=E4=B8=AD=E6=96=87?=
 =?UTF-8?q?=E5=B9=B6=E6=B7=BB=E5=8A=A0=20OpenBot=20=E9=9B=86=E6=88=90?=
 =?UTF-8?q?=E6=96=87=E6=A1=A3?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- 新增 apps/mobile/src/strings.ts，通过 t() 集中处理 UI 文案；将整个移动端应用（包括 zh-CN 日期格式、相对日期和更新后的测试）路由到该处
- 添加 OpenBot 集成规划：CONTEXT.md 领域词汇表、AGENTS.md 工作流、ADR 0001-0010 以及 v4 票据目录/契约/验收/发布文档
- 添加 .copilotkit/project.json 并忽略 .env.* 凭证文件
---
 .copilotkit/project.json                      |   7 +
 .gitignore                                    |   4 +
 AGENTS.md                                     | 118 +++
 CONTEXT.md                                    |  25 +
 apps/mobile/App.tsx                           |  72 +-
 apps/mobile/app.json                          |   2 +-
 apps/mobile/src/BrowserConsole.web.tsx        |   4 +-
 apps/mobile/src/DateFields.native.tsx         |   9 +-
 apps/mobile/src/DateFields.web.tsx            |  13 +-
 apps/mobile/src/DateTimeEditor.tsx            |   3 +-
 apps/mobile/src/PdfReader.web.tsx             |  13 +-
 apps/mobile/src/agent-ui.tsx                  | 418 ++++----
 apps/mobile/src/background-updates.tsx        |   9 +-
 apps/mobile/src/browser-tool-card.tsx         |  33 +-
 apps/mobile/src/chat.tsx                      |  98 +-
 apps/mobile/src/computer-workspace.tsx        | 132 +--
 apps/mobile/src/computer.tsx                  |  77 +-
 apps/mobile/src/desktop-stream.tsx            |   5 +-
 apps/mobile/src/desktop-tool-card.tsx         |  19 +-
 apps/mobile/src/details.tsx                   | 265 +++--
 apps/mobile/src/jev-actions.ts                |   7 +-
 apps/mobile/src/jev-tool-card.tsx             |  27 +-
 apps/mobile/src/mail-tool-card.tsx            |  28 +-
 apps/mobile/src/relative-date.ts              |  12 +-
 apps/mobile/src/screens.tsx                   | 306 +++---
 apps/mobile/src/search-tool-card.tsx          |  21 +-
 apps/mobile/src/strings.ts                    | 812 +++++++++++++++
 apps/mobile/src/thread-artifacts.tsx          |   9 +-
 apps/mobile/src/threads.tsx                   |  71 +-
 apps/mobile/src/ui.tsx                        |  11 +-
 apps/mobile/test/jev-actions.test.ts          |  10 +-
 apps/mobile/test/relative-date.test.ts        |  10 +-
 apps/mobile/test/strings.test.ts              |  19 +
 docs/adr/0001-openbot-as-client-entry.md      |  11 +
 ...serve-openmuse-bot-and-review-ownership.md |  11 +
 ...elegated-user-identity-and-tool-control.md |  11 +
 .../adr/0004-private-openmuse-bot-per-user.md |   9 +
 ...005-openbot-owns-durable-task-lifecycle.md |  11 +
 .../0006-dedicated-openmuse-task-module.md    |   9 +
 ...personal-context-and-task-notifications.md |   9 +
 .../adr/0008-account-deletion-grace-period.md |   9 +
 docs/adr/0009-openbot-as-sole-backend.md      |  11 +
 ...penmuse-repository-as-openbot-submodule.md |   9 +
 docs/agents/domain.md                         |  25 +
 docs/agents/issue-tracker.md                  |  34 +
 ...26-10-12-openmuse-openbot-acceptance-v4.md |  80 ++
 ...026-10-12-openmuse-openbot-contracts-v4.md |  97 ++
 ...26-10-12-openmuse-openbot-delivery-plan.md | 275 ++++++
 ...10-12-openmuse-openbot-publication-v4.json | 753 ++++++++++++++
 ...026-10-12-openmuse-openbot-published-v4.md | 100 ++
 ...2-openmuse-openbot-review-resolution-v4.md |  37 +
 ...nmuse-openbot-single-context-tickets-v3.md | 923 ++++++++++++++++++
 ...openmuse-openbot-single-context-tickets.md | 752 ++++++++++++++
 ...0-12-openmuse-openbot-ticket-catalog-v4.md | 762 +++++++++++++++
 54 files changed, 5713 insertions(+), 894 deletions(-)
 create mode 100644 .copilotkit/project.json
 create mode 100644 AGENTS.md
 create mode 100644 CONTEXT.md
 create mode 100644 apps/mobile/src/strings.ts
 create mode 100644 apps/mobile/test/strings.test.ts
 create mode 100644 docs/adr/0001-openbot-as-client-entry.md
 create mode 100644 docs/adr/0002-preserve-openmuse-bot-and-review-ownership.md
 create mode 100644 docs/adr/0003-delegated-user-identity-and-tool-control.md
 create mode 100644 docs/adr/0004-private-openmuse-bot-per-user.md
 create mode 100644 docs/adr/0005-openbot-owns-durable-task-lifecycle.md
 create mode 100644 docs/adr/0006-dedicated-openmuse-task-module.md
 create mode 100644 docs/adr/0007-openbot-owns-personal-context-and-task-notifications.md
 create mode 100644 docs/adr/0008-account-deletion-grace-period.md
 create mode 100644 docs/adr/0009-openbot-as-sole-backend.md
 create mode 100644 docs/adr/0010-openmuse-repository-as-openbot-submodule.md
 create mode 100644 docs/agents/domain.md
 create mode 100644 docs/agents/issue-tracker.md
 create mode 100644 docs/superpowers/plans/2026-10-12-openmuse-openbot-acceptance-v4.md
 create mode 100644 docs/superpowers/plans/2026-10-12-openmuse-openbot-contracts-v4.md
 create mode 100644 docs/superpowers/plans/2026-10-12-openmuse-openbot-delivery-plan.md
 create mode 100644 docs/superpowers/plans/2026-10-12-openmuse-openbot-publication-v4.json
 create mode 100644 docs/superpowers/plans/2026-10-12-openmuse-openbot-published-v4.md
 create mode 100644 docs/superpowers/plans/2026-10-12-openmuse-openbot-review-resolution-v4.md
 create mode 100644 docs/superpowers/plans/2026-10-12-openmuse-openbot-single-context-tickets-v3.md
 create mode 100644 docs/superpowers/plans/2026-10-12-openmuse-openbot-single-context-tickets.md
 create mode 100644 docs/superpowers/plans/2026-10-12-openmuse-openbot-ticket-catalog-v4.md

diff --git a/.copilotkit/project.json b/.copilotkit/project.json
new file mode 100644
index 000000000..1c6e51f2a
--- /dev/null
+++ b/.copilotkit/project.json
@@ -0,0 +1,7 @@
+{
+  "projectId": "10465",
+  "projectSlug": "mymuse",
+  "clerkOrgId": "org_3KRATrQWIfkNyvONhAg1S86YUte",
+  "telemetryBindingId": "9c007abc-ea0b-4252-9d0d-7b8cf89d24a3",
+  "apiKeyDirectory": "."
+}
diff --git a/.gitignore b/.gitignore
index 732d027dd..0724a4031 100644
--- a/.gitignore
+++ b/.gitignore
@@ -11,3 +11,7 @@ apps/mobile/android/
 .DS_Store
 *.tsbuildinfo
 artifacts/
+
+# Added by CopilotKit CLI: credential files, which must never be committed.
+.env.*
+!.env.example
diff --git a/AGENTS.md b/AGENTS.md
new file mode 100644
index 000000000..4642d4279
--- /dev/null
+++ b/AGENTS.md
@@ -0,0 +1,118 @@
+# OpenMuse agent guidance
+
+## Agent skills
+
+### Issue tracker
+
+Issues and specs for this repository are tracked in GitHub Issues at `1123786563/openmuse`. See `docs/agents/issue-tracker.md`.
+
+### Domain docs
+
+This repository uses a single domain context at the root. See `docs/agents/domain.md`.
+
+# Agent 开发工作流
+
+本仓库使用 **Matt Pocock Skills 负责设计**，使用 **Superpowers 负责实现**。
+任何阶段只能有一个工作流编排器。
+
+## 事实源
+
+- `docs/specs/`：已批准需求、行为、范围、非目标和验收标准。
+- `docs/adr/`：架构决策与约束。
+- `CONTEXT.md`：统一的领域术语和领域模型。
+- `docs/plans/`：Superpowers 实施计划。
+- Git + Superpowers Ledger：执行历史和已完成任务的证据。
+
+如果实施 Plan 与已批准 Spec 冲突，以 Spec 为准。
+如果实现与 ADR 或批准需求冲突，应升级处理，而不是在实现阶段静默重新设计。
+
+## Phase A — Matt Skills：WHAT / WHY
+
+使用 Matt Skills 处理：
+
+- `grill-with-docs`
+- `grilling`
+- `domain-modeling`
+- `codebase-design`
+- `improve-codebase-architecture`
+- `prototype`
+- `research`
+- `wayfinder`
+- `to-spec`
+- `to-tickets`
+- `handoff`
+
+该阶段除明确标记为一次性原型的代码外，不实现生产代码。
+
+满足以下条件后视为设计完成：重要决策已经解决、领域语言已经记录、相关 ADR 已存在、已有批准的 Spec，并且大型工作已经拆成纵向业务 Ticket。
+
+## Phase B — Superpowers：HOW / EXECUTE
+
+使用 Superpowers 处理：
+
+- `writing-plans`
+- `using-git-worktrees`
+- `dispatching-parallel-agents`
+- `subagent-driven-development`
+- `executing-plans`
+- `test-driven-development`
+- `systematic-debugging`
+- `requesting-code-review`
+- `receiving-code-review`
+- `verification-before-completion`
+- `finishing-a-development-branch`
+
+开始实现前先读取 `CONTEXT.md`、已批准 Spec、相关 ADR 和当前 Ticket，然后再创建 Implementation Plan。
+
+### 冲突规则
+
+Superpowers 实现阶段**不要**再调用 Matt 的 `implement`、`implement-spec` 或 `tdd` 作为竞争实现流程。
+已经存在批准 Spec 时不要重新启动产品 Brainstorming；Superpowers 只允许澄清尚未解决的实现歧义或真正的冲突。
+
+### 任务粒度
+
+Matt Ticket 应是“业务完整的纵向切片”；Superpowers Task 是 Ticket 内更小的实现单元。
+除非属于真正的大范围机械重构，否则不要把纵向 Ticket 替换成“数据库 / 后端 / 前端”这样的水平 Ticket。
+
+### 并行 Agent
+
+只有在任务相互独立、接口已确定、可写文件和共享状态不重叠时才并行。
+每个实现流优先使用独立 Git Worktree；主 Agent 负责最终集成。
+不要使用共享 `git stash` 作为并行协调机制。
+
+### 子 Agent 上下文
+
+给子 Agent 提供最小必要上下文，并尽量使用这些文件指针：`CONTEXT.md`、相关 ADR、批准 Spec、当前 Ticket、Task Brief、前置任务接口。
+不要把整个父会话复制给每个 Child Agent。长上下文是储备容量，不是信息倾倒场。
+
+### TDD
+
+Superpowers 负责实现阶段的 TDD 编排。
+在适用场景遵循 **RED -> GREEN -> REFACTOR**，优先测试公共 Seam 和可观察行为。
+可以吸收 Matt 的测试设计原则，但 Matt `tdd` 不接管实现阶段。
+
+### 调试
+
+实现缺陷使用 Superpowers `systematic-debugging`。
+如果根因是架构或领域模型问题，则返回 Matt `domain-modeling` / `codebase-design`，更新 ADR / Spec 后再恢复实现。
+
+### Review
+
+每个任务和实现阶段最终 Review 由 Superpowers 负责。
+之后可选运行 Matt `code-review`，再做一轮 Standards + Spec Compliance 独立审查。
+Review Agent 默认应保持只读。
+
+## 长上下文 / Context Management 策略
+
+本项目假设存在 1M 级原生上下文，但可持久化项目文件仍然是事实源。
+
+- 不要因为模型能记更多，就推迟记录重要决策。
+- 决策一旦稳定，应更新 `CONTEXT.md`、ADR 或 Spec。
+- 工具输出保持针对性；大体积证据保存到文件，只读取相关范围。
+- 到达阶段边界时，如果前一阶段的大量聊天细节已经无用，优先使用新任务 / 新 Session / 干净子 Agent Context。
+- 自动压缩或上下文滚动后，从文件 + Git + Superpowers Ledger 重建状态，不依赖模型自己的回忆。
+
+## 完成标准
+
+在必要测试、类型检查 / Lint / 静态分析（适用时）、验收标准、Review Findings 和最终 Diff 范围都经过验证前，不要声称任务完成。
+**Evidence over claims（证据优先于声明）。**
diff --git a/CONTEXT.md b/CONTEXT.md
new file mode 100644
index 000000000..38a8e3429
--- /dev/null
+++ b/CONTEXT.md
@@ -0,0 +1,25 @@
+# OpenMuse with OpenBot
+
+Vocabulary for people, conversations, and reviewed work in OpenMuse's OpenBot integration.
+
+## Language
+
+**Bot**:
+A persistent OpenBot coworker that a person can access and converse with. Its permitted capabilities are separate from its description.
+_Avoid_: Agent, assistant (when referring to an OpenBot Bot)
+
+**Channel**:
+An OpenBot conversation involving a person and a Bot. A channel has its own identity, distinct from the Bot and its conversation thread.
+_Avoid_: Thread, chat session
+
+**Thread**:
+The durable conversation history associated with a channel.
+_Avoid_: Channel
+
+**Reviewed action**:
+A proposal for a specific external change whose shown details require a person's recorded approval before execution.
+_Avoid_: General tool permission
+
+**Policy approval**:
+An OpenBot request for a person's decision about an action governed by the Bot's permissions.
+_Avoid_: Reviewed action
diff --git a/apps/mobile/App.tsx b/apps/mobile/App.tsx
index 41152e116..76294c8fb 100644
--- a/apps/mobile/App.tsx
+++ b/apps/mobile/App.tsx
@@ -38,33 +38,34 @@ import { ComputerEntry } from "./src/computer";
 import { ComputerDraftProvider } from "./src/computer-drafts";
 import { Details } from "./src/details";
 import { BrowserScreen, CalendarScreen, FilesScreen, MailScreen } from "./src/screens";
+import { t } from "./src/strings";
 import { ThreadsProvider, ThreadsSheet, useMuseThread } from "./src/threads";
 import { Button, Card, colors, ErrorNotice, Field, IconButton, Mascot, s } from "./src/ui";
 import { type Detail, useWorkspace, WorkspaceContext } from "./src/workspace";
 
 const nav: { id: Section; label: string; icon: LucideIcon }[] = [
-  { id: "chat", label: "Chat", icon: MessageCircle },
-  { id: "activity", label: "Activity", icon: PanelsTopLeft },
-  { id: "ideas", label: "Ideas", icon: Lightbulb },
-  { id: "goals", label: "Goals", icon: SquareCheck },
-  { id: "apps", label: "Apps", icon: Shapes },
+  { id: "chat", label: t("navChat"), icon: MessageCircle },
+  { id: "activity", label: t("navActivity"), icon: PanelsTopLeft },
+  { id: "ideas", label: t("navIdeas"), icon: Lightbulb },
+  { id: "goals", label: t("navGoals"), icon: SquareCheck },
+  { id: "apps", label: t("navApps"), icon: Shapes },
 ];
 const titles: Partial<Record<Section, { title: string; subtitle: string }>> = {
-  activity: { title: "Activity", subtitle: "Plans, progress, decisions and results." },
-  ideas: { title: "Ideas", subtitle: "Useful next steps, grounded in your world." },
+  activity: { title: t("navActivity"), subtitle: t("subtitleActivity") },
+  ideas: { title: t("navIdeas"), subtitle: t("subtitleIdeas") },
   goals: {
-    title: "Goals",
-    subtitle: "Longer-term goals and things to keep an eye on.",
+    title: t("navGoals"),
+    subtitle: t("subtitleGoals"),
   },
   apps: {
-    title: "Apps",
-    subtitle: "Connections, capabilities and what your agent remembers.",
+    title: t("navApps"),
+    subtitle: t("subtitleApps"),
   },
-  connections: { title: "Apps", subtitle: "Connections and capabilities." },
-  mail: { title: "Mail", subtitle: "The conversations behind your work." },
-  calendar: { title: "Calendar", subtitle: "Time for what matters." },
-  browser: { title: "Browser", subtitle: "Your connected browsing sessions." },
-  files: { title: "Files", subtitle: "Documents, forms and filled copies." },
+  connections: { title: t("navApps"), subtitle: t("subtitleConnections") },
+  mail: { title: t("shortcutMail"), subtitle: t("subtitleMail") },
+  calendar: { title: t("shortcutCalendar"), subtitle: t("subtitleCalendar") },
+  browser: { title: t("navBrowser"), subtitle: t("subtitleBrowser") },
+  files: { title: t("shortcutFiles"), subtitle: t("subtitleFiles") },
 };
 export default function App() {
   const [token, setToken] = useState("");
@@ -111,27 +112,26 @@ export default function App() {
             <Text
               style={{ fontSize: 32, color: colors.text, letterSpacing: -1, fontWeight: "500" }}
             >
-              Welcome to OpenMuse.
+              {t("welcomeTitle")}
             </Text>
-            <Text style={[s.muted, { textAlign: "center" }]}>A little room for your day.</Text>
+            <Text style={[s.muted, { textAlign: "center" }]}>{t("welcomeSubtitle")}</Text>
             {busy ? (
               <ActivityIndicator color={colors.blueDark} />
             ) : (
               <Card style={{ width: "100%" }}>
                 <ErrorNotice error={error} />
                 <Field
-                  label="Workspace access key"
+                  label={t("accessKeyLabel")}
                   value={accessKey}
                   onChangeText={setAccessKey}
                   secureTextEntry
-                  placeholder="Required for a live workspace"
+                  placeholder={t("phAccessKey")}
                 />
                 <Button primary onPress={() => void connect(accessKey || undefined)}>
-                  Open workspace
+                  {t("openWorkspace")}
                 </Button>
                 <Text style={[s.small, { marginTop: 15 }]}>
-                  Local workspaces open without a key. Make sure your OpenMuse server is running at{" "}
-                  {API_URL}.
+                  {t("localWorkspaceNote", { url: API_URL })}
                 </Text>
               </Card>
             )}
@@ -196,13 +196,13 @@ function WorkspaceApp({ token }: { token: string }) {
           <>
             <ErrorNotice error={error} />
             <Button onPress={() => void refresh().catch((e) => setError(String(e)))}>
-              Try again
+              {t("calTryAgain")}
             </Button>
           </>
         ) : (
           <>
             <ActivityIndicator color={colors.blueDark} />
-            <Text style={s.muted}>Opening your workspace…</Text>
+            <Text style={s.muted}>{t("openingWorkspace")}</Text>
           </>
         )}
       </SafeAreaView>
@@ -264,13 +264,13 @@ function WorkspaceShell({
   const agentName = data?.identity.name || "OpenMuse";
   const status = activeTask
     ? activeTask.status === "waiting_approval"
-      ? `Ready to review · ${activeTask.title}`
+      ? t("statusReadyReview", { title: activeTask.title })
       : activeTask.status === "waiting_input"
-        ? `Needs your input · ${activeTask.title}`
+        ? t("statusNeedsInput", { title: activeTask.title })
         : activeTask.plan.find((step) => step.status === "running")?.title || activeTask.title
     : data?.tasks.some((task) => task.status === "queued")
-      ? "Picking up your next task…"
-      : "Here when you need me";
+      ? t("statusPickingUp")
+      : t("statusHere");
   const title = titles[section] || titles.apps;
   const Screen =
     section === "mail"
@@ -304,14 +304,14 @@ function WorkspaceShell({
             <View style={{ position: "absolute", left: 0, top: 16 }}>
               <IconButton
                 icon={Menu}
-                label="Open conversations and menu"
+                label={t("openThreadsMenu")}
                 onPress={() => setThreadsOpen(true)}
               />
             </View>
             <View pointerEvents="box-none" style={{ alignItems: "center", gap: 1 }}>
               <Pressable
                 accessibilityRole="button"
-                accessibilityLabel={`Open ${agentName} activity and approvals`}
+                accessibilityLabel={t("openAgentActivity", { name: agentName })}
                 onPress={() => navigate("activity")}
                 style={({ pressed }) => ({
                   alignItems: "center",
@@ -342,7 +342,7 @@ function WorkspaceShell({
             <View style={{ position: "absolute", right: 0, top: 16 }}>
               <IconButton
                 icon={Bell}
-                label={`Notifications, ${pending} unread or pending`}
+                label={t("notificationsBadge", { n: pending })}
                 onPress={() => open({ type: "notifications" })}
               />
               {pending > 0 && (
@@ -375,7 +375,7 @@ function WorkspaceShell({
                     style={{ alignSelf: "flex-start", marginBottom: 18 }}
                     onPress={() => navigate("apps")}
                   >
-                    Back to Apps
+                    {t("backToApps")}
                   </Button>
                 )}
                 <Text style={[s.title, { fontSize: 25, marginBottom: 22 }]}>{title?.title}</Text>
@@ -395,13 +395,13 @@ function WorkspaceShell({
                 <>
                   <ErrorNotice error={threadsError} />
                   {threadsError ? (
-                    <Button onPress={retryThreads}>Retry main chat</Button>
+                    <Button onPress={retryThreads}>{t("retryMainChat")}</Button>
                   ) : threadsLoading ? (
                     <ActivityIndicator color={colors.blueDark} />
                   ) : null}
                   {!threadsLoading && selection.id !== mainId && (
                     <Text style={[s.small, { textAlign: "center", marginBottom: 8 }]}>
-                      Side chat
+                      {t("sideChat")}
                     </Text>
                   )}
                   {visited.map((thread) => (
@@ -493,7 +493,7 @@ function WorkspaceShell({
               <Text style={{ color: "#FFF", fontSize: 13, flexShrink: 1 }}>{toast}</Text>
               <Pressable
                 accessibilityRole="button"
-                accessibilityLabel="Dismiss notification"
+                accessibilityLabel={t("dismissToast")}
                 onPress={clearToast}
               >
                 <X size={16} color="#FFF" />
diff --git a/apps/mobile/app.json b/apps/mobile/app.json
index 5c7827339..e6098864d 100644
--- a/apps/mobile/app.json
+++ b/apps/mobile/app.json
@@ -9,7 +9,7 @@
     "newArchEnabled": true,
     "ios": { "supportsTablet": true, "bundleIdentifier": "app.openmuse.mobile" },
     "android": { "package": "app.openmuse.mobile" },
-    "web": { "bundler": "metro", "name": "OpenMuse — a little room for everything" },
+    "web": { "bundler": "metro", "name": "OpenMuse — 一方小天地，装下所有事" },
     "plugins": [
       "expo-document-picker",
       "@config-plugins/react-native-blob-util",
diff --git a/apps/mobile/src/BrowserConsole.web.tsx b/apps/mobile/src/BrowserConsole.web.tsx
index eb15e3369..f1c75a966 100644
--- a/apps/mobile/src/BrowserConsole.web.tsx
+++ b/apps/mobile/src/BrowserConsole.web.tsx
@@ -1,6 +1,8 @@
+import { t } from "./strings";
+
 export default function BrowserConsole({
   url,
-  title = "Remote browser session console",
+  title = t("browserConsoleTitle"),
   sandboxed = false,
 }: {
   url: string;
diff --git a/apps/mobile/src/DateFields.native.tsx b/apps/mobile/src/DateFields.native.tsx
index 32fb7ffc3..7782e1c16 100644
--- a/apps/mobile/src/DateFields.native.tsx
+++ b/apps/mobile/src/DateFields.native.tsx
@@ -1,4 +1,5 @@
 import { View } from "react-native";
+import { t } from "./strings";
 import { Field } from "./ui";
 export interface DateFieldsProps {
   label: string;
@@ -12,20 +13,20 @@ export default function DateFields({ label, date, time, allDay, onChange }: Date
     <View style={{ flexDirection: "row", gap: 12 }}>
       <View style={{ flex: 1.2 }}>
         <Field
-          label={`${label} date`}
+          label={t("labelDate", { label })}
           value={date}
           onChangeText={(value) => onChange(value, time)}
-          placeholder="YYYY-MM-DD"
+          placeholder={t("phDate")}
           keyboardType="numbers-and-punctuation"
         />
       </View>
       {!allDay && (
         <View style={{ flex: 1 }}>
           <Field
-            label={`${label} time`}
+            label={t("labelTime", { label })}
             value={time}
             onChangeText={(value) => onChange(date, value)}
-            placeholder="HH:MM (24-hour)"
+            placeholder={t("phTime")}
             keyboardType="numbers-and-punctuation"
           />
         </View>
diff --git a/apps/mobile/src/DateFields.web.tsx b/apps/mobile/src/DateFields.web.tsx
index db9e88afd..c6fa08aad 100644
--- a/apps/mobile/src/DateFields.web.tsx
+++ b/apps/mobile/src/DateFields.web.tsx
@@ -1,4 +1,5 @@
 import { Text, View } from "react-native";
+import { t } from "./strings";
 import { colors, s } from "./ui";
 
 interface DateFieldsProps {
@@ -24,9 +25,11 @@ export default function DateFields({ label, date, time, allDay, onChange }: Date
   return (
     <View style={{ flexDirection: "row", gap: 12, marginBottom: 16 }}>
       <View style={{ flex: 1.2, gap: 7 }}>
-        <Text style={[s.small, { fontWeight: "600", color: colors.text }]}>{label} date</Text>
+        <Text style={[s.small, { fontWeight: "600", color: colors.text }]}>
+          {t("labelDate", { label })}
+        </Text>
         <input
-          aria-label={`${label} date`}
+          aria-label={t("labelDate", { label })}
           type="date"
           value={date}
           onChange={(e) => onChange(e.target.value, time)}
@@ -35,9 +38,11 @@ export default function DateFields({ label, date, time, allDay, onChange }: Date
       </View>
       {!allDay && (
         <View style={{ flex: 1, gap: 7 }}>
-          <Text style={[s.small, { fontWeight: "600", color: colors.text }]}>{label} time</Text>
+          <Text style={[s.small, { fontWeight: "600", color: colors.text }]}>
+            {t("labelTime", { label })}
+          </Text>
           <input
-            aria-label={`${label} time`}
+            aria-label={t("labelTime", { label })}
             type="time"
             value={time}
             onChange={(e) => onChange(date, e.target.value)}
diff --git a/apps/mobile/src/DateTimeEditor.tsx b/apps/mobile/src/DateTimeEditor.tsx
index 92e78ee7a..fc1eaff94 100644
--- a/apps/mobile/src/DateTimeEditor.tsx
+++ b/apps/mobile/src/DateTimeEditor.tsx
@@ -2,6 +2,7 @@ import { useEffect, useState } from "react";
 import { Text, View } from "react-native";
 import DateFields from "./DateFields";
 import { isCompleteInstant, localDateTime, zonedInstant } from "./date-time";
+import { t } from "./strings";
 import { colors, s } from "./ui";
 export default function DateTimeEditor({
   label,
@@ -29,7 +30,7 @@ export default function DateTimeEditor({
         setTime(local.time);
       }
     } catch {
-      setError("Choose a valid time zone.");
+      setError(t("invalidTimeZone"));
     }
   }, [value, timeZone, allDay]);
   function change(nextDate: string, nextTime: string) {
diff --git a/apps/mobile/src/PdfReader.web.tsx b/apps/mobile/src/PdfReader.web.tsx
index 017fdf562..b9b1f16e2 100644
--- a/apps/mobile/src/PdfReader.web.tsx
+++ b/apps/mobile/src/PdfReader.web.tsx
@@ -1,6 +1,7 @@
 import { ChevronLeft, ChevronRight, Minus, Plus } from "lucide-react-native";
 import { useState } from "react";
 import { Text, View } from "react-native";
+import { t } from "./strings";
 import { Button, s } from "./ui";
 
 interface PdfReaderProps {
@@ -16,7 +17,7 @@ export default function PdfReader({ url, pageCount }: PdfReaderProps) {
       <View style={[s.between, { gap: 8, flexWrap: "wrap" }]}>
         <View style={[s.row, { gap: 8 }]}>
           <Button small icon={ChevronLeft} disabled={page <= 1} onPress={() => setPage(page - 1)}>
-            Previous
+            {t("previous")}
           </Button>
           <Text style={s.small}>
             {page} / {pageCount}
@@ -27,26 +28,26 @@ export default function PdfReader({ url, pageCount }: PdfReaderProps) {
             disabled={page >= pageCount}
             onPress={() => setPage(page + 1)}
           >
-            Next
+            {t("next")}
           </Button>
         </View>
         <View style={[s.row, { gap: 8 }]}>
           <Button small icon={Minus} disabled={zoom <= 50} onPress={() => setZoom(zoom - 25)}>
-            Zoom out
+            {t("zoomOut")}
           </Button>
           <Text style={s.small}>{zoom}%</Text>
           <Button small icon={Plus} disabled={zoom >= 200} onPress={() => setZoom(zoom + 25)}>
-            Zoom in
+            {t("zoomIn")}
           </Button>
         </View>
       </View>
       <iframe
         key={`${page}:${zoom}`}
-        title="PDF document reader"
+        title={t("pdfReaderTitle")}
         src={`${url}#page=${page}&zoom=${zoom}`}
         style={{ height: 570, width: "100%", border: 0, borderRadius: 12, background: "#e7e9e3" }}
       />
-      <Text style={s.small}>Use the reader toolbar to download or print a copy.</Text>
+      <Text style={s.small}>{t("readerToolbarNote")}</Text>
     </View>
   );
 }
diff --git a/apps/mobile/src/agent-ui.tsx b/apps/mobile/src/agent-ui.tsx
index ead833976..dd53f16b9 100644
--- a/apps/mobile/src/agent-ui.tsx
+++ b/apps/mobile/src/agent-ui.tsx
@@ -35,6 +35,7 @@ import type {
 } from "../../../packages/domain/src/agent";
 import { useAgentWorkspace } from "./agent-workspace";
 import { ActivityScreen, ConnectionsScreen } from "./screens";
+import { statusLabel, t } from "./strings";
 import {
   Button,
   Card,
@@ -53,9 +54,6 @@ import {
 } from "./ui";
 import { useWorkspace } from "./workspace";
 
-export function statusLabel(value: string) {
-  return value.replace(/_/g, " ").replace(/^./, (c) => c.toUpperCase());
-}
 function stamp(value?: string) {
   return value
     ? new Date(value).toLocaleString(undefined, {
@@ -64,7 +62,7 @@ function stamp(value?: string) {
         hour: "numeric",
         minute: "2-digit",
       })
-    : "Not checked yet";
+    : t("notCheckedYet");
 }
 function errorText(e: unknown) {
   return e instanceof Error ? e.message : String(e);
@@ -77,16 +75,14 @@ export function AgentStatus() {
   if (data?.worker.running && !error) return null;
   return (
     <View style={{ gap: 8 }}>
-      <ErrorNotice error={error ? `Agent updates unavailable. ${error}` : ""} />
+      <ErrorNotice error={error ? t("agentUpdatesUnavailable", { error }) : ""} />
       {!!error && (
         <Button small onPress={() => void refresh().catch(() => {})}>
-          Reconnect agent
+          {t("reconnectAgent")}
         </Button>
       )}
       {!data && !error && <ActivityIndicator color={colors.blueDark} />}
-      {data && !data.worker.running && (
-        <Text style={s.small}>Worker is offline. Saved work will continue when it reconnects.</Text>
-      )}
+      {data && !data.worker.running && <Text style={s.small}>{t("workerOffline")}</Text>}
     </View>
   );
 }
@@ -106,7 +102,7 @@ export function TaskCard({
   return (
     <Pressable
       accessibilityRole="button"
-      accessibilityLabel={`Open task: ${task.title}`}
+      accessibilityLabel={t("openTask", { title: task.title })}
       onPress={() => {
         onOpen?.();
         open({ type: "task", taskId: task.id });
@@ -133,7 +129,7 @@ export function TaskCard({
             <Text style={s.heading}>{task.title}</Text>
             <Text style={s.small}>
               {statusLabel(task.status)}
-              {task.plan.length ? ` · ${done}/${task.plan.length} steps` : ""}
+              {task.plan.length ? t("taskSteps", { done, total: task.plan.length }) : ""}
             </Text>
           </View>
           <ChevronRight size={17} color={colors.muted} />
@@ -157,7 +153,7 @@ export function TaskCard({
         )}
         {waiting && (
           <Text style={[s.small, { color: colors.blueDark, fontWeight: "600" }]}>
-            {task.status === "waiting_approval" ? "Review requested" : "Your input is needed"}
+            {task.status === "waiting_approval" ? t("reviewRequested") : t("inputNeeded")}
           </Text>
         )}
       </Card>
@@ -192,9 +188,15 @@ export function AgentActivityScreen() {
     <View style={{ gap: 20 }}>
       <AgentStatus />
       <View style={[s.row, { gap: 8 }]}>
-        {["All", "In progress", "Finished"].map((item) => (
-          <Button key={item} small primary={filter === item} onPress={() => setFilter(item)}>
-            {item}
+        {(
+          [
+            ["All", t("filterAll")],
+            ["In progress", t("filterInProgress")],
+            ["Finished", t("filterFinished")],
+          ] as const
+        ).map(([value, label]) => (
+          <Button key={value} small primary={filter === value} onPress={() => setFilter(value)}>
+            {label}
           </Button>
         ))}
       </View>
@@ -204,11 +206,11 @@ export function AgentActivityScreen() {
       {!tasks.length && (
         <Empty
           icon={ListChecks}
-          title="A place for the work"
-          detail="Delegate a task in Chat. Its plan, progress and results stay here."
+          title={t("agentActivityEmptyTitle")}
+          detail={t("agentActivityEmptyDetail")}
         />
       )}
-      <SectionHeading title="Reviews & receipts" />
+      <SectionHeading title={t("reviewsReceipts")} />
       <ActivityScreen />
     </View>
   );
@@ -234,7 +236,7 @@ export function EvidenceList({ items }: { items: Evidence[] }) {
                 void Linking.openURL(item.url || "").catch((e) => setError(errorText(e)))
               }
             >
-              Open source
+              {t("openSource")}
             </Button>
           )}
           {item.kind === "mail" && workspace.mail.some((mail) => mail.id === item.id) && (
@@ -245,7 +247,7 @@ export function EvidenceList({ items }: { items: Evidence[] }) {
                 if (mail) open({ type: "mail", mail });
               }}
             >
-              View email
+              {t("viewEmail")}
             </Button>
           )}
           {item.kind === "file" && workspace.files.some((file) => file.id === item.id) && (
@@ -256,7 +258,7 @@ export function EvidenceList({ items }: { items: Evidence[] }) {
                 if (file) open({ type: "file", file });
               }}
             >
-              View file
+              {t("viewFile")}
             </Button>
           )}
         </View>
@@ -340,7 +342,7 @@ export function TaskDetail({ taskId }: { taskId: string }) {
         parsed = raw as Record<string, string | boolean>;
       }
       await act("input", {
-        answer: answer.trim() || "Provided the requested fields.",
+        answer: answer.trim() || t("providedFields"),
         fields: parsed,
       });
     } catch (e) {
@@ -354,7 +356,7 @@ export function TaskDetail({ taskId }: { taskId: string }) {
       await refreshWorkspace();
       const snapshot = await api.request<typeof workspace>("/api/workspace");
       const action = snapshot.actions.find((item) => item.id === task?.actionId);
-      if (!action) throw new Error("This review is not available yet. Refresh and try again.");
+      if (!action) throw new Error(t("reviewNotReady"));
       open({ type: "review", action });
     } catch (e) {
       setError(errorText(e));
@@ -374,9 +376,9 @@ export function TaskDetail({ taskId }: { taskId: string }) {
     .filter(Boolean);
   return (
     <Sheet
-      title={task?.title || "Task"}
+      title={task?.title || t("taskFallback")}
       subtitle={
-        task ? `${statusLabel(task.status)} · ${stamp(task.updatedAt)}` : "Loading saved progress…"
+        task ? `${statusLabel(task.status)} · ${stamp(task.updatedAt)}` : t("loadingProgress")
       }
       onClose={close}
     >
@@ -391,8 +393,8 @@ export function TaskDetail({ taskId }: { taskId: string }) {
           {task.milestoneId && data && (
             <Text style={s.muted}>
               {milestone?.title
-                ? `Milestone: ${milestone.title}. Completion is tracked manually in Goals.`
-                : "The linked milestone is no longer available. This task and its results are still accessible."}
+                ? t("milestoneTracked", { title: milestone.title })
+                : t("milestoneGone")}
             </Text>
           )}
           <View style={[s.row, { gap: 8, flexWrap: "wrap" }]}>
@@ -405,7 +407,7 @@ export function TaskDetail({ taskId }: { taskId: string }) {
                 busy={busy}
                 onPress={() => void act("control", { action: "pause" })}
               >
-                Pause
+                {t("pause")}
               </Button>
             )}
             {task.status === "paused" && (
@@ -415,7 +417,7 @@ export function TaskDetail({ taskId }: { taskId: string }) {
                 busy={busy}
                 onPress={() => void act("control", { action: "resume" })}
               >
-                Resume
+                {t("resume")}
               </Button>
             )}
             {task.status === "failed" && (
@@ -425,7 +427,7 @@ export function TaskDetail({ taskId }: { taskId: string }) {
                 busy={busy}
                 onPress={() => void act("control", { action: "retry" })}
               >
-                Retry task
+                {t("retryTask")}
               </Button>
             )}
             {activeTask(task) && (
@@ -436,22 +438,22 @@ export function TaskDetail({ taskId }: { taskId: string }) {
                 busy={busy}
                 onPress={() => void act("control", { action: "cancel" })}
               >
-                Cancel task
+                {t("cancelTask")}
               </Button>
             )}
           </View>
           {task.status === "waiting_approval" && (
             <Card style={{ backgroundColor: colors.lavender, gap: 12 }}>
-              <Text style={s.heading}>Ready for your review</Text>
-              <Text style={s.muted}>Review the exact action and account before it proceeds.</Text>
+              <Text style={s.heading}>{t("readyForReview")}</Text>
+              <Text style={s.muted}>{t("reviewBeforeProceed")}</Text>
               <Button primary busy={busy} onPress={() => void review()}>
-                Review action
+                {t("reviewAction")}
               </Button>
             </Card>
           )}
           {task.status === "waiting_input" && (
             <Card style={{ backgroundColor: colors.sky, gap: 10 }}>
-              <Text style={s.heading}>{task.question || "A detail from you will help"}</Text>
+              <Text style={s.heading}>{task.question || t("detailWillHelp")}</Text>
               {fieldNames.map((name) =>
                 missing.some(
                   (f) => typeof f === "object" && f && f.name === name && f.type === "checkbox",
@@ -475,26 +477,26 @@ export function TaskDetail({ taskId }: { taskId: string }) {
               )}
               {!fieldNames.length && (
                 <Field
-                  label="Your answer"
+                  label={t("yourAnswer")}
                   value={answer}
                   onChangeText={setAnswer}
                   multiline
-                  placeholder="Add the missing details…"
+                  placeholder={t("addMissingDetails")}
                 />
               )}
               {task.kind === "document" && !fieldNames.length && (
                 <>
                   <Button small onPress={() => setShowFieldJson(!showFieldJson)}>
-                    Form field values
+                    {t("formFieldValues")}
                   </Button>
                   {showFieldJson && (
                     <Field
-                      label="Fields (JSON: field name to value)"
+                      label={t("fieldsJson")}
                       value={fieldJson}
                       onChangeText={setFieldJson}
                       multiline
                       autoCapitalize="none"
-                      placeholder={'{"full_name":"Your name","consent":true}'}
+                      placeholder={'{"full_name":"你的名字","consent":true}'}
                     />
                   )}
                 </>
@@ -505,13 +507,13 @@ export function TaskDetail({ taskId }: { taskId: string }) {
                 disabled={!answer.trim() && !Object.keys(fields).length && !fieldJson.trim()}
                 onPress={() => void submitInput()}
               >
-                Continue task
+                {t("continueTask")}
               </Button>
             </Card>
           )}
           {!!task.plan.length && (
             <Card style={{ gap: 15 }}>
-              <Text style={s.heading}>Plan</Text>
+              <Text style={s.heading}>{t("planHeading")}</Text>
               {task.plan.map((step, index) => (
                 <View key={step.id} style={[s.row, { gap: 10, alignItems: "flex-start" }]}>
                   <Text
@@ -543,11 +545,11 @@ export function TaskDetail({ taskId }: { taskId: string }) {
           <ErrorNotice error={task.error ?? undefined} />
           {detail?.browsers?.map((browser) => (
             <Card key={browser.id} style={{ gap: 10 }}>
-              <Text style={s.heading}>{browser.title || "Agent browser"}</Text>
+              <Text style={s.heading}>{browser.title || t("agentBrowser")}</Text>
               <Text style={s.small}>{browser.url}</Text>
               {browser.status === "active" && browser.previewUrl && (
                 <Image
-                  accessibilityLabel="Agent browser preview"
+                  accessibilityLabel={t("agentBrowserPreview")}
                   source={{ uri: api.url(browser.previewUrl) }}
                   style={{ width: "100%", aspectRatio: 1.6, borderRadius: 12 }}
                 />
@@ -571,8 +573,8 @@ export function TaskDetail({ taskId }: { taskId: string }) {
                 }}
               >
                 {["running", "scheduled", "queued"].includes(task.status)
-                  ? "Pause and open browser"
-                  : "Open browser"}
+                  ? t("pauseOpenBrowser")
+                  : t("openBrowser")}
               </Button>
             </Card>
           ))}
@@ -580,7 +582,7 @@ export function TaskDetail({ taskId }: { taskId: string }) {
             <LinkRow
               key={file.id}
               title={file.name}
-              detail={`${file.pageCount} pages · PDF`}
+              detail={t("filePagesPdf", { n: file.pageCount })}
               icon={FileText}
               onPress={() => open({ type: "file", file })}
             />
@@ -594,11 +596,11 @@ export function TaskDetail({ taskId }: { taskId: string }) {
           ))}
           {!!task.evidence.length && (
             <View style={{ gap: 14 }}>
-              <Text style={s.heading}>Sources</Text>
+              <Text style={s.heading}>{t("sources")}</Text>
               <EvidenceList items={task.evidence} />
             </View>
           )}
-          <Text style={s.heading}>Timeline</Text>
+          <Text style={s.heading}>{t("timeline")}</Text>
           {detail?.events.map((event) => (
             <View
               key={event.id}
@@ -613,9 +615,7 @@ export function TaskDetail({ taskId }: { taskId: string }) {
               </Text>
             </View>
           ))}
-          {!detail?.events.length && (
-            <Text style={s.muted}>The worker will record each step here.</Text>
-          )}
+          {!detail?.events.length && <Text style={s.muted}>{t("workerRecordsSteps")}</Text>}
         </View>
       )}
     </Sheet>
@@ -690,7 +690,7 @@ export function ArtifactCard({ artifact }: { artifact: AgentArtifact }) {
         </View>
       ))}
       <Button small onPress={() => setExpanded(!expanded)}>
-        {expanded ? "Show summary" : "Explore full result"}
+        {expanded ? t("showSummary") : t("exploreFullResult")}
       </Button>
     </Card>
   );
@@ -710,8 +710,8 @@ function FinanceArtifact({ artifact }: { artifact: AgentArtifact }) {
       await mutate("/goals", {
         title: goalTitle.trim(),
         category: "Finances",
-        description: `Inspired by ${artifact.title}: ${artifact.summary}`,
-        milestones: ["Choose a savings target", "Review spending each week"],
+        description: t("goalInspiredBy", { title: artifact.title, summary: artifact.summary }),
+        milestones: [t("milestoneSavingsTarget"), t("milestoneWeeklyReview")],
       });
       setGoalSaved(true);
     } catch (error) {
@@ -735,7 +735,7 @@ function FinanceArtifact({ artifact }: { artifact: AgentArtifact }) {
     >
       <Pressable
         accessibilityRole="button"
-        accessibilityLabel={`Open finance tracker: ${artifact.title}`}
+        accessibilityLabel={t("openFinanceTracker", { title: artifact.title })}
         accessibilityState={{ expanded: details }}
         onPress={() => setDetails(!details)}
       >
@@ -761,17 +761,18 @@ function FinanceArtifact({ artifact }: { artifact: AgentArtifact }) {
             </Svg>
           </View>
           <Text style={{ color: "#D4DCFC", fontSize: 11, lineHeight: 18, marginBottom: 20 }}>
-            Read from your imported transactions.{"\n"}
+            {t("financeReadFrom")}
+            {"\n"}
             {String(period?.from ?? "")} — {String(period?.to ?? "")}
             {"\n"}
-            {transactions.length} transactions, categorized and summarized.
+            {t("financeSummarized", { n: transactions.length })}
           </Text>
           <View style={[s.row, { gap: 7 }]}>
             {(
               [
-                ["Income", "income"],
-                ["Spending", "spending"],
-                ["Remaining", "saved"],
+                [t("income"), "income"],
+                [t("spending"), "spending"],
+                [t("remaining"), "saved"],
               ] as const
             ).map(([label, key]) => (
               <View
@@ -793,7 +794,9 @@ function FinanceArtifact({ artifact }: { artifact: AgentArtifact }) {
                 >
                   {amount(artifact.data[key])}
                 </Text>
-                <Text style={{ color: "#7E8289", fontSize: 8, marginTop: 4 }}>source currency</Text>
+                <Text style={{ color: "#7E8289", fontSize: 8, marginTop: 4 }}>
+                  {t("sourceCurrency")}
+                </Text>
               </View>
             ))}
           </View>
@@ -801,15 +804,15 @@ function FinanceArtifact({ artifact }: { artifact: AgentArtifact }) {
         <View style={[s.row, { gap: 11, paddingHorizontal: 8, paddingTop: 13, paddingBottom: 4 }]}>
           <Text style={{ fontSize: 25 }}>💸</Text>
           <View style={{ flex: 1, gap: 2 }}>
-            <Text style={[s.text, { fontWeight: "600" }]}>Finance tracker</Text>
-            <Text style={s.small}>Spending, savings, and a plan for what’s next.</Text>
+            <Text style={[s.text, { fontWeight: "600" }]}>{t("financeTracker")}</Text>
+            <Text style={s.small}>{t("financeSubtitle")}</Text>
           </View>
           <ChevronRight size={17} color={colors.muted} />
         </View>
       </Pressable>
       {details && (
         <View style={{ gap: 16, padding: 10 }}>
-          <Text style={s.label}>Where your money went</Text>
+          <Text style={s.label}>{t("whereMoneyWent")}</Text>
           {categories.map((category) => {
             const row = record(category);
             if (!row) return null;
@@ -832,18 +835,16 @@ function FinanceArtifact({ artifact }: { artifact: AgentArtifact }) {
               </View>
             );
           })}
-          <Text style={s.small}>
-            Amounts use your source currency. This summary covers the imported dates.
-          </Text>
+          <Text style={s.small}>{t("financeCurrencyNote")}</Text>
           {goalSaved ? (
-            <Text style={s.text}>Your savings goal is saved in Goals.</Text>
+            <Text style={s.text}>{t("savingsGoalSaved")}</Text>
           ) : (
             <View style={{ gap: 10 }}>
               <Field
-                label="Turn this into a savings goal"
+                label={t("turnIntoGoal")}
                 value={goalTitle}
                 onChangeText={setGoalTitle}
-                placeholder="What would you like to save for?"
+                placeholder={t("whatToSaveFor")}
               />
               <ErrorNotice error={goalError} />
               <Button
@@ -852,12 +853,12 @@ function FinanceArtifact({ artifact }: { artifact: AgentArtifact }) {
                 disabled={!goalTitle.trim()}
                 onPress={() => void saveGoal()}
               >
-                Create savings goal
+                {t("createSavingsGoal")}
               </Button>
             </View>
           )}
           <Button small onPress={() => setExpanded(!expanded)}>
-            {expanded ? "Hide transactions" : "View transactions"}
+            {expanded ? t("hideTransactions") : t("viewTransactions")}
           </Button>
           {expanded &&
             transactions.slice(0, 100).map((transaction) => {
@@ -875,9 +876,7 @@ function FinanceArtifact({ artifact }: { artifact: AgentArtifact }) {
               ) : null;
             })}
           {expanded && transactions.length > 100 && (
-            <Text style={s.small}>
-              Showing the first 100 transactions. The totals include every row.
-            </Text>
+            <Text style={s.small}>{t("first100Transactions")}</Text>
           )}
         </View>
       )}
@@ -932,41 +931,33 @@ export function DelegateSheet({ goalId, milestoneId }: { goalId?: string; milest
     }
   }
   return (
-    <Sheet
-      title="Hand over an outcome"
-      subtitle="OpenMuse saves a plan and keeps working on the server."
-      onClose={close}
-    >
+    <Sheet title={t("handOverOutcome")} subtitle={t("delegateSubtitle")} onClose={close}>
       {milestoneId && (
         <Text style={[s.muted, { marginBottom: 16 }]}>
           {milestone
-            ? `${goal?.title} · ${milestone.title}. Mark this milestone complete when you are satisfied with the result.`
-            : "This milestone is no longer available."}
+            ? t("delegateMilestone", { goal: goal?.title ?? "", milestone: milestone.title })
+            : t("milestoneUnavailable")}
         </Text>
       )}
       <View style={[s.row, { flexWrap: "wrap", gap: 8, marginBottom: 20 }]}>
         {(["plan", "document", "finance", "agent"] as const).map((item) => (
           <Button small primary={kind === item} key={item} onPress={() => setKind(item)}>
-            {item === "agent" ? "General task" : statusLabel(item)}
+            {item === "agent" ? t("generalTask") : statusLabel(item)}
           </Button>
         ))}
       </View>
       <Field
-        label="What would you like done?"
+        label={t("whatDone")}
         value={prompt}
         onChangeText={setPrompt}
         multiline
         placeholder={
-          kind === "document"
-            ? "Fill the attached form and prepare a reply for my review"
-            : kind === "finance"
-              ? "Summarize my spending and suggest a savings plan"
-              : "Make a practical plan for my week"
+          kind === "document" ? t("phDocument") : kind === "finance" ? t("phFinance") : t("phPlan")
         }
       />
       {kind === "document" && (
         <View style={{ gap: 8, marginBottom: 18 }}>
-          <Text style={s.heading}>Choose the email with the PDF</Text>
+          <Text style={s.heading}>{t("chooseEmailPdf")}</Text>
           {workspace.mail
             .filter((mail) => mail.attachments.length)
             .map((mail) => (
@@ -978,16 +969,14 @@ export function DelegateSheet({ goalId, milestoneId }: { goalId?: string; milest
               />
             ))}
           {!workspace.mail.some((mail) => mail.attachments.length) && (
-            <Text style={s.muted}>
-              Connect mail in Apps and select a message with a PDF attachment.
-            </Text>
+            <Text style={s.muted}>{t("connectMailPdf")}</Text>
           )}
         </View>
       )}
       {kind === "finance" && (
         <>
           <Field
-            label="Transaction CSV"
+            label={t("transactionCsv")}
             value={csv}
             onChangeText={setCsv}
             multiline
@@ -1002,20 +991,14 @@ export function DelegateSheet({ goalId, milestoneId }: { goalId?: string; milest
                 )
               }
             >
-              Try example transactions
+              {t("tryExampleTransactions")}
             </Button>
           )}
-          <Text style={[s.small, { marginVertical: 12 }]}>
-            Positive amounts are expenses; negative amounts are income. Imported data only. No bank
-            connection is implied.
-          </Text>
+          <Text style={[s.small, { marginVertical: 12 }]}>{t("csvSignNote")}</Text>
         </>
       )}
       {kind === "agent" && !workspace.runtime.configured && (
-        <Text style={[s.muted, { marginBottom: 16 }]}>
-          General tasks and plans require a configured model. Document jobs, page watches and
-          spending summaries have guided workflows.
-        </Text>
+        <Text style={[s.muted, { marginBottom: 16 }]}>{t("generalNeedsModel")}</Text>
       )}
       <ErrorNotice error={error} />
       <Button
@@ -1029,7 +1012,7 @@ export function DelegateSheet({ goalId, milestoneId }: { goalId?: string; milest
         }
         onPress={() => void submit()}
       >
-        Delegate task
+        {t("delegateTask")}
       </Button>
     </Sheet>
   );
@@ -1054,9 +1037,9 @@ export function IdeasScreen() {
     <View style={{ gap: 20 }}>
       <AgentStatus />
       <View style={s.between}>
-        <Text style={s.small}>Inspired by your connected apps</Text>
+        <Text style={s.small}>{t("ideasInspiredBy")}</Text>
         <Button small icon={RefreshCw} busy={busy} onPress={() => void refreshIdeas()}>
-          Find ideas
+          {t("findIdeas")}
         </Button>
       </View>
       <ErrorNotice error={error} />
@@ -1064,18 +1047,14 @@ export function IdeasScreen() {
         <IdeaCard key={idea.id} idea={idea} />
       ))}
       {!ideas.length && (
-        <Empty
-          icon={Lightbulb}
-          title="Room for a good idea"
-          detail="Find ideas from the sources you have granted access to. Each suggestion includes its evidence."
-        />
+        <Empty icon={Lightbulb} title={t("ideasEmptyTitle")} detail={t("ideasEmptyDetail")} />
       )}
       {(data?.ideas || [])
         .filter((idea) => idea.status === "accepted")
         .map((idea) => (
           <Card key={idea.id} style={{ gap: 7 }}>
             <Text style={s.heading}>{idea.title}</Text>
-            <Chip tint={colors.green}>Started</Chip>
+            <Chip tint={colors.green}>{t("started")}</Chip>
             {!!idea.taskId && <TaskLink taskId={idea.taskId} />}
           </Card>
         ))}
@@ -1093,7 +1072,7 @@ function TaskLink({ taskId, onOpen }: { taskId: string; onOpen?: () => void }) {
         open({ type: "task", taskId });
       }}
     >
-      View task
+      {t("viewTask")}
     </Button>
   );
 }
@@ -1121,7 +1100,7 @@ function IdeaCard({ idea }: { idea: Idea }) {
     <View style={{ paddingVertical: 18, borderBottomWidth: 1, borderBottomColor: colors.line }}>
       <Pressable
         accessibilityRole="button"
-        accessibilityLabel={`View idea: ${idea.title}`}
+        accessibilityLabel={t("viewIdea", { title: idea.title })}
         accessibilityState={{ expanded }}
         onPress={() => setExpanded(!expanded)}
         style={{ flexDirection: "row", gap: 14 }}
@@ -1147,7 +1126,7 @@ function IdeaCard({ idea }: { idea: Idea }) {
           <EvidenceList items={idea.evidence} />
           {editing && (
             <Field
-              label="What should OpenMuse do?"
+              label={t("whatShouldMuseDo")}
               value={prompt}
               onChangeText={setPrompt}
               multiline
@@ -1161,13 +1140,13 @@ function IdeaCard({ idea }: { idea: Idea }) {
               disabled={!prompt.trim()}
               onPress={() => void act("accept")}
             >
-              Start this
+              {t("startThis")}
             </Button>
             <Button disabled={busy} onPress={() => setEditing(!editing)}>
-              {editing ? "Keep edits" : "Edit"}
+              {editing ? t("keepEdits") : t("edit")}
             </Button>
             <Button disabled={busy} onPress={() => void act("dismiss")}>
-              Dismiss
+              {t("dismiss")}
             </Button>
           </View>
         </View>
@@ -1200,17 +1179,17 @@ export function GoalsScreen() {
                 backgroundColor: "#24A46B",
               }}
             />
-            <Text style={[s.heading, { color: "#189A58" }]}>Tracking</Text>
+            <Text style={[s.heading, { color: "#189A58" }]}>{t("tracking")}</Text>
           </View>
           <Button small icon={Plus} onPress={() => setAdding("Tracking")}>
-            Track
+            {t("track")}
           </Button>
         </View>
         {(showAll ? monitors : monitors.slice(0, 3)).map((item) => (
           <Pressable
             key={item.id}
             accessibilityRole="button"
-            accessibilityLabel={`Open tracking: ${item.title}`}
+            accessibilityLabel={t("openTracking", { title: item.title })}
             onPress={() => setSelectedMonitor(item.id)}
             style={[s.row, { gap: 12, paddingVertical: 13 }]}
           >
@@ -1219,7 +1198,7 @@ export function GoalsScreen() {
               <Text style={s.text}>{item.title}</Text>
               <Text numberOfLines={1} style={s.muted}>
                 {item.status === "active"
-                  ? `Checking every ${item.intervalMinutes} minutes`
+                  ? t("checkingEvery", { n: item.intervalMinutes })
                   : statusLabel(item.status)}
               </Text>
             </View>
@@ -1227,13 +1206,11 @@ export function GoalsScreen() {
           </Pressable>
         ))}
         {!monitors.length && (
-          <Text style={[s.muted, { paddingVertical: 10 }]}>
-            Ticket prices, a reservation, a page you’re watching.
-          </Text>
+          <Text style={[s.muted, { paddingVertical: 10 }]}>{t("monitorHint")}</Text>
         )}
         {monitors.length > 3 && (
           <Button small onPress={() => setShowAll(!showAll)}>
-            {showAll ? "Show less" : `Show ${monitors.length - 3} more`}
+            {showAll ? t("showLess") : t("showMore", { n: monitors.length - 3 })}
           </Button>
         )}
       </View>
@@ -1250,13 +1227,13 @@ export function GoalsScreen() {
               backgroundColor: "#3D9BDE",
             }}
           />
-          <Text style={[s.heading, { color: colors.blueDark }]}>Goals</Text>
+          <Text style={[s.heading, { color: colors.blueDark }]}>{t("goals")}</Text>
         </View>
         {data?.goals.map((item) => (
           <Pressable
             key={item.id}
             accessibilityRole="button"
-            accessibilityLabel={`Open goal: ${item.title}`}
+            accessibilityLabel={t("openGoal", { title: item.title })}
             onPress={() => setSelectedGoal(item.id)}
             style={[s.row, { gap: 12, paddingVertical: 13 }]}
           >
@@ -1275,23 +1252,21 @@ export function GoalsScreen() {
           </Pressable>
         ))}
         {!data?.goals.length && (
-          <Text style={[s.muted, { paddingVertical: 10 }]}>
-            Big plans start with one small step.
-          </Text>
+          <Text style={[s.muted, { paddingVertical: 10 }]}>{t("goalsHint")}</Text>
         )}
       </View>
       <View style={{ height: 1, backgroundColor: colors.line }} />
-      <Text style={s.heading}>Create a goal</Text>
+      <Text style={s.heading}>{t("createGoal")}</Text>
       {[
-        { name: "Health", icon: Heart },
-        { name: "Relationships", icon: Users },
-        { name: "Finances", icon: CircleDollarSign },
-        { name: "Something else", icon: Target },
+        { name: t("catHealth"), icon: Heart },
+        { name: t("catRelationships"), icon: Users },
+        { name: t("catFinances"), icon: CircleDollarSign },
+        { name: t("catSomethingElse"), icon: Target },
       ].map((item) => (
         <Pressable
           key={item.name}
           accessibilityRole="button"
-          accessibilityLabel={`Create ${item.name.toLowerCase()} goal`}
+          accessibilityLabel={t("createCategoryGoal", { name: item.name })}
           onPress={() => setAdding(item.name)}
           style={[s.row, { gap: 12, minHeight: 38 }]}
         >
@@ -1302,7 +1277,7 @@ export function GoalsScreen() {
       ))}
       {adding && (
         <Sheet
-          title={adding === "Tracking" ? "Track something" : "Create a goal"}
+          title={adding === "Tracking" ? t("trackSomething") : t("createGoal")}
           onClose={() => setAdding(undefined)}
         >
           {adding === "Tracking" ? (
@@ -1355,26 +1330,21 @@ function GoalForm({ onDone, category }: { onDone: () => void; category?: string
   return (
     <Card>
       <Field
-        label="Your goal"
+        label={t("yourGoal")}
         value={title}
         onChangeText={setTitle}
-        placeholder="Build a three-month emergency fund"
+        placeholder={t("phGoal")}
       />
+      <Field label={t("whatSuccess")} value={description} onChangeText={setDescription} multiline />
       <Field
-        label="What does success look like?"
-        value={description}
-        onChangeText={setDescription}
-        multiline
-      />
-      <Field
-        label="Milestones (one per line)"
+        label={t("milestonesOnePerLine")}
         value={milestones}
         onChangeText={setMilestones}
         multiline
       />
       <ErrorNotice error={error} />
       <Button primary disabled={!title.trim()} busy={busy} onPress={() => void save()}>
-        Create goal
+        {t("createGoalBtn")}
       </Button>
     </Card>
   );
@@ -1401,8 +1371,8 @@ function GoalCard({ goal, onOpenTask }: { goal: Goal; onOpenTask?: () => void })
     setError("");
     try {
       const task = await delegate({
-        title: `Plan: ${goal.title}`,
-        prompt: `Create a practical plan for this goal: ${goal.title}. ${goal.description}`,
+        title: t("planForGoal", { title: goal.title }),
+        prompt: t("planPrompt", { title: goal.title, description: goal.description }),
         kind: "plan",
         goalId: goal.id,
         input: {},
@@ -1424,9 +1394,7 @@ function GoalCard({ goal, onOpenTask }: { goal: Goal; onOpenTask?: () => void })
         </Chip>
       </View>
       <Text style={s.muted}>{goal.description}</Text>
-      <Text style={s.small}>
-        {done} of {goal.milestones.length} milestones
-      </Text>
+      <Text style={s.small}>{t("milestonesDone", { done, total: goal.milestones.length })}</Text>
       {goal.milestones.map((milestone) => (
         <View key={milestone.id} style={{ gap: 8 }}>
           <CheckRow
@@ -1445,7 +1413,7 @@ function GoalCard({ goal, onOpenTask }: { goal: Goal; onOpenTask?: () => void })
                 open({ type: "delegate", goalId: goal.id, milestoneId: milestone.id });
               }}
             >
-              Delegate
+              {t("delegate")}
             </Button>
           )}
           {data?.tasks
@@ -1462,15 +1430,15 @@ function GoalCard({ goal, onOpenTask }: { goal: Goal; onOpenTask?: () => void })
           busy={busy}
           onPress={() => void update({ status: goal.status === "active" ? "paused" : "active" })}
         >
-          {goal.status === "active" ? "Pause" : "Resume"}
+          {goal.status === "active" ? t("pause") : t("resume")}
         </Button>
         {goal.status !== "completed" && (
           <Button small busy={busy} onPress={() => void update({ status: "completed" })}>
-            Complete goal
+            {t("completeGoal")}
           </Button>
         )}
         <Button small primary busy={busy} onPress={() => void plan()}>
-          Plan next steps
+          {t("planNextSteps")}
         </Button>
       </View>
       {data?.tasks
@@ -1502,9 +1470,8 @@ function MonitorForm({ onDone }: { onDone: () => void }) {
     try {
       const minutes = Number(interval);
       if (!Number.isInteger(minutes) || minutes < 1 || minutes > 10080)
-        throw new Error("Use a check interval from 1 to 10080 minutes.");
-      if (!sample && !/^https?:\/\//i.test(url.trim()))
-        throw new Error("Enter an http or https address for a public page.");
+        throw new Error(t("invalidInterval"));
+      if (!sample && !/^https?:\/\//i.test(url.trim())) throw new Error(t("invalidUrl"));
       await mutate("/monitors", {
         title: title.trim(),
         url: sample ? "sample://availability" : url.trim(),
@@ -1522,56 +1489,50 @@ function MonitorForm({ onDone }: { onDone: () => void }) {
   return (
     <Card>
       <Field
-        label="What are you watching?"
+        label={t("whatWatching")}
         value={title}
         onChangeText={setTitle}
-        placeholder="A table at my favorite restaurant"
+        placeholder={t("phWatching")}
       />
       {workspace.mode === "sample" && (
-        <CheckRow
-          checked={sample}
-          label="Try the built-in availability page"
-          onPress={() => setSample(!sample)}
-        />
+        <CheckRow checked={sample} label={t("tryBuiltInPage")} onPress={() => setSample(!sample)} />
       )}
       {!sample && (
         <Field
-          label="Public page URL"
+          label={t("publicPageUrl")}
           value={url}
           onChangeText={setUrl}
           autoCapitalize="none"
           placeholder="https://example.com/product"
         />
       )}
-      <Text style={[s.small, { marginBottom: 10 }]}>Notify me when</Text>
+      <Text style={[s.small, { marginBottom: 10 }]}>{t("notifyWhen")}</Text>
       <View style={[s.row, { gap: 7, flexWrap: "wrap", marginBottom: 16 }]}>
         {(["change", "contains", "price_below"] as const).map((item) => (
           <Button small primary={condition === item} key={item} onPress={() => setCondition(item)}>
             {item === "change"
-              ? "Page changes"
+              ? t("condPageChanges")
               : item === "contains"
-                ? "Text appears"
-                : "Price drops below"}
+                ? t("condTextAppears")
+                : t("condPriceBelow")}
           </Button>
         ))}
       </View>
       {condition !== "change" && (
         <Field
-          label={condition === "contains" ? "Text to look for" : "Target price"}
+          label={condition === "contains" ? t("textToLookFor") : t("targetPrice")}
           value={value}
           onChangeText={setValue}
         />
       )}
       <Field
-        label="Check every (minutes)"
+        label={t("checkEveryMinutes")}
         value={interval}
         onChangeText={setInterval}
         keyboardType="number-pad"
       />
       <Text style={[s.small, { marginBottom: 14 }]}>
-        {sample
-          ? "Changes to this built-in page stay in your workspace."
-          : "OpenMuse checks this public page on the server and saves meaningful changes in Notifications."}
+        {sample ? t("builtinPageNote") : t("serverCheckNote")}
       </Text>
       <ErrorNotice error={error} />
       <Button
@@ -1582,7 +1543,7 @@ function MonitorForm({ onDone }: { onDone: () => void }) {
         }
         onPress={() => void save()}
       >
-        Start tracking
+        {t("startTracking")}
       </Button>
     </Card>
   );
@@ -1607,7 +1568,7 @@ function MonitorCard({ monitor, onOpenTask }: { monitor: Monitor; onOpenTask?: (
     setError("");
     try {
       await mutate("/sample-page", {
-        text: `Availability: a table is available. Updated ${new Date().toISOString()}`,
+        text: t("sampleAvailability", { time: new Date().toISOString() }),
       });
       await mutate(`/monitors/${monitor.id}/control`, { action: "check" });
     } catch (e) {
@@ -1623,21 +1584,21 @@ function MonitorCard({ monitor, onOpenTask }: { monitor: Monitor; onOpenTask?: (
         <Chip tint={colors.sky}>{statusLabel(monitor.status)}</Chip>
       </View>
       <Text selectable style={s.small}>
-        {monitor.url.startsWith("sample:") ? "Built-in availability page" : monitor.url}
+        {monitor.url.startsWith("sample:") ? t("builtinAvailabilityPage") : monitor.url}
       </Text>
       <Text style={s.text}>
         {monitor.condition === "change"
-          ? "Watch for a page change"
+          ? t("watchPageChange")
           : monitor.condition === "contains"
-            ? `Watch for “${monitor.value}”`
-            : `Price below ${monitor.value}`}
+            ? t("watchText", { value: monitor.value })
+            : t("priceBelow", { value: monitor.value })}
       </Text>
       <Text style={s.small}>
-        Every {monitor.intervalMinutes} min · {monitor.checks} checks
+        {t("everyMinChecks", { n: monitor.intervalMinutes, checks: monitor.checks })}
       </Text>
       <Text style={s.small}>
-        Last check: {stamp(monitor.lastCheckedAt)}
-        {monitor.status === "active" ? `\nNext check: ${stamp(monitor.nextCheckAt)}` : ""}
+        {t("lastCheck", { time: stamp(monitor.lastCheckedAt) })}
+        {monitor.status === "active" ? t("nextCheck", { time: stamp(monitor.nextCheckAt) }) : ""}
       </Text>
       {!!monitor.lastValue && (
         <Text selectable numberOfLines={5} style={s.muted}>
@@ -1652,19 +1613,19 @@ function MonitorCard({ monitor, onOpenTask }: { monitor: Monitor; onOpenTask?: (
             busy={busy}
             onPress={() => void act(monitor.status === "active" ? "pause" : "resume")}
           >
-            {monitor.status === "active" ? "Pause" : "Resume"}
+            {monitor.status === "active" ? t("pause") : t("resume")}
           </Button>
           <Button small busy={busy} onPress={() => void act("check")}>
-            Check now
+            {t("checkNow")}
           </Button>
           <Button small danger busy={busy} onPress={() => void act("stop")}>
-            Stop tracking
+            {t("stopTracking")}
           </Button>
         </View>
       )}
       {monitor.url.startsWith("sample:") && monitor.status !== "stopped" && (
         <Button small busy={busy} onPress={() => void changeSample()}>
-          Change availability
+          {t("changeAvailability")}
         </Button>
       )}
       <TaskLink taskId={monitor.taskId} onOpen={onOpenTask} />
@@ -1684,11 +1645,7 @@ export function NotificationsSheet() {
     }
   }
   return (
-    <Sheet
-      title="Notifications"
-      subtitle="Results and decisions that need your attention."
-      onClose={close}
-    >
+    <Sheet title={t("notifications")} subtitle={t("notificationsSubtitle")} onClose={close}>
       <View style={{ gap: 14 }}>
         <ErrorNotice error={error} />
         {data?.notifications.map((item) => (
@@ -1698,21 +1655,17 @@ export function NotificationsSheet() {
           >
             <View style={s.between}>
               <Text style={s.heading}>{item.title}</Text>
-              {!item.read && <Chip>New</Chip>}
+              {!item.read && <Chip>{t("new")}</Chip>}
             </View>
             <Text style={s.muted}>{item.body}</Text>
             <Text style={s.small}>{stamp(item.createdAt)}</Text>
             <Button small onPress={() => void read(item.id, item.taskId)}>
-              {item.taskId ? "View task" : item.read ? "Read" : "Mark read"}
+              {item.taskId ? t("viewTask") : item.read ? t("read") : t("markRead")}
             </Button>
           </Card>
         ))}
         {!data?.notifications.length && (
-          <Empty
-            icon={Bell}
-            title="You're all caught up"
-            detail="Results, meaningful changes and requests for your input will appear here."
-          />
+          <Empty icon={Bell} title={t("caughtUp")} detail={t("caughtUpDetail")} />
         )}
       </View>
     </Sheet>
@@ -1758,26 +1711,26 @@ export function AppsScreen() {
   const shortcuts = [
     {
       section: "mail" as const,
-      title: "Mail",
-      detail: "Read messages and prepare replies",
+      title: t("shortcutMail"),
+      detail: t("shortcutMailDetail"),
       icon: Mail,
     },
     {
       section: "calendar" as const,
-      title: "Calendar",
-      detail: "Events and reviewed invitations",
+      title: t("shortcutCalendar"),
+      detail: t("shortcutCalendarDetail"),
       icon: CalendarDays,
     },
     {
       section: "browser" as const,
-      title: "Agent computer",
-      detail: "Persistent browser sessions",
+      title: t("agentComputer"),
+      detail: t("shortcutComputerDetail"),
       icon: Globe2,
     },
     {
       section: "files" as const,
-      title: "Files",
-      detail: "PDFs, forms and filled copies",
+      title: t("shortcutFiles"),
+      detail: t("shortcutFilesDetail"),
       icon: FileText,
     },
   ];
@@ -1785,13 +1738,13 @@ export function AppsScreen() {
     <View style={{ gap: 22 }}>
       <AgentStatus />
       <Field
-        label="Search apps"
+        label={t("searchApps")}
         value={query}
         onChangeText={setQuery}
-        placeholder="Search connectors"
+        placeholder={t("searchConnectors")}
       />
       <ConnectionsScreen query={query} />
-      <Text style={s.heading}>On your computer</Text>
+      <Text style={s.heading}>{t("onYourComputer")}</Text>
       <Card style={{ paddingVertical: 3, backgroundColor: "#F4F5F6" }}>
         {shortcuts
           .filter((item) =>
@@ -1810,18 +1763,18 @@ export function AppsScreen() {
           ))}
       </Card>
       <Button onPress={() => setSettings(!settings)}>
-        {settings ? "Close agent settings" : "Personality & memory"}
+        {settings ? t("closeAgentSettings") : t("personalityMemory")}
       </Button>
       {settings && (
         <>
           <Card style={{ gap: 10 }}>
-            <SectionHeading title="Your agent" />
+            <SectionHeading title={t("yourAgent")} />
             <View style={[s.row, { gap: 16, justifyContent: "center", marginBottom: 12 }]}>
               {(["sky", "sand", "lilac"] as const).map((item) => (
                 <Pressable
                   key={item}
                   accessibilityRole="radio"
-                  accessibilityLabel={`${statusLabel(item)} avatar`}
+                  accessibilityLabel={t("avatarLabel", { name: statusLabel(item) })}
                   accessibilityState={{ checked: avatar === item }}
                   onPress={() => setAvatar(item)}
                   style={{
@@ -1834,7 +1787,7 @@ export function AppsScreen() {
                 </Pressable>
               ))}
             </View>
-            <Field label="Name" value={name} onChangeText={setName} />
+            <Field label={t("nameLabel")} value={name} onChangeText={setName} />
             <View style={[s.row, { gap: 8 }]}>
               {(["warm", "concise", "thoughtful"] as const).map((item) => (
                 <Button key={item} small primary={tone === item} onPress={() => setTone(item)}>
@@ -1843,14 +1796,11 @@ export function AppsScreen() {
               ))}
             </View>
             <CheckRow
-              label="Show background updates in chat"
+              label={t("showBackgroundUpdates")}
               checked={showChatUpdates}
               onPress={() => setShowChatUpdates(!showChatUpdates)}
             />
-            <Text style={s.small}>
-              Activity and notifications always keep the full record, including requests for
-              approval.
-            </Text>
+            <Text style={s.small}>{t("activityAlwaysFull")}</Text>
             <Button
               busy={busy}
               disabled={!name.trim()}
@@ -1858,29 +1808,29 @@ export function AppsScreen() {
                 void save("/identity", { name: name.trim(), tone, avatar, showChatUpdates })
               }
             >
-              Save preferences
+              {t("savePreferences")}
             </Button>
           </Card>
           <Card style={{ gap: 12 }}>
-            <SectionHeading title="Memory" />
-            <Text style={s.muted}>Context you can inspect, correct or forget.</Text>
+            <SectionHeading title={t("memory")} />
+            <Text style={s.muted}>{t("memoryIntro")}</Text>
             {data?.memories.map((item) => (
               <MemoryRow key={item.id} memory={item} />
             ))}
             <Field
-              label="Remember something about me"
+              label={t("rememberAboutMe")}
               value={memory}
               onChangeText={setMemory}
-              placeholder="I prefer morning meetings"
+              placeholder={t("phMemory")}
             />
             <Button
               busy={busy}
               disabled={!memory.trim()}
               onPress={() =>
-                void save("/memories", { text: memory.trim(), source: "User added in Apps" })
+                void save("/memories", { text: memory.trim(), source: t("sourceUserAdded") })
               }
             >
-              Remember
+              {t("remember")}
             </Button>
           </Card>
         </>
@@ -1912,7 +1862,7 @@ function MemoryRow({ memory }: { memory: AgentMemory }) {
       style={{ gap: 8, paddingBottom: 16, borderBottomWidth: 1, borderBottomColor: colors.line }}
     >
       {editing ? (
-        <Field label="Memory" value={text} onChangeText={setText} />
+        <Field label={t("memoryField")} value={text} onChangeText={setText} />
       ) : (
         <Text style={s.text}>{memory.text}</Text>
       )}
@@ -1922,15 +1872,15 @@ function MemoryRow({ memory }: { memory: AgentMemory }) {
       <View style={[s.row, { gap: 8 }]}>
         {editing ? (
           <Button small busy={busy} disabled={!text.trim()} onPress={() => void act(false)}>
-            Save correction
+            {t("saveCorrection")}
           </Button>
         ) : (
           <Button small onPress={() => setEditing(true)}>
-            Edit
+            {t("edit")}
           </Button>
         )}
         <Button small danger busy={busy} onPress={() => void act(true)}>
-          Forget
+          {t("forget")}
         </Button>
       </View>
       <ErrorNotice error={error} />
diff --git a/apps/mobile/src/background-updates.tsx b/apps/mobile/src/background-updates.tsx
index 76fb20cd8..3e80d4a74 100644
--- a/apps/mobile/src/background-updates.tsx
+++ b/apps/mobile/src/background-updates.tsx
@@ -2,6 +2,7 @@ import { ArrowRight, Bell, X } from "lucide-react-native";
 import { useState } from "react";
 import { Pressable, Text, View } from "react-native";
 import { useAgentWorkspace } from "./agent-workspace";
+import { t } from "./strings";
 import { Button, Card, colors, ErrorNotice, resultSummary, s } from "./ui";
 import { useWorkspace } from "./workspace";
 
@@ -30,11 +31,11 @@ export function BackgroundUpdates() {
       <View style={[s.between, { gap: 12 }]}>
         <View style={[s.row, { gap: 7 }]}>
           <Bell size={14} color={colors.blueDark} />
-          <Text style={s.small}>An update for you</Text>
+          <Text style={s.small}>{t("updateForYou")}</Text>
         </View>
         <Pressable
           accessibilityRole="button"
-          accessibilityLabel="Dismiss background update"
+          accessibilityLabel={t("dismissUpdate")}
           disabled={busy}
           onPress={() => void dismiss()}
           hitSlop={10}
@@ -51,11 +52,11 @@ export function BackgroundUpdates() {
           icon={ArrowRight}
           onPress={() => update.taskId && open({ type: "task", taskId: update.taskId })}
         >
-          View task
+          {t("viewTask")}
         </Button>
         {updates.length > 1 && (
           <Button small onPress={() => open({ type: "notifications" })}>
-            {updates.length - 1} more updates
+            {t("moreUpdates", { n: updates.length - 1 })}
           </Button>
         )}
       </View>
diff --git a/apps/mobile/src/browser-tool-card.tsx b/apps/mobile/src/browser-tool-card.tsx
index c5e0f689f..15ff1bb68 100644
--- a/apps/mobile/src/browser-tool-card.tsx
+++ b/apps/mobile/src/browser-tool-card.tsx
@@ -3,6 +3,7 @@ import { createContext, useContext, useEffect, useState } from "react";
 import { ActivityIndicator, AppState, Image, Text, View } from "react-native";
 import { z } from "zod";
 import type { BrowserSession } from "../../../packages/domain/src";
+import { t } from "./strings";
 import { Button, Card, colors, ErrorNotice, s } from "./ui";
 import { useWorkspace } from "./workspace";
 
@@ -24,11 +25,11 @@ function resultValue(result: unknown) {
 }
 
 function siteLabel(url: unknown) {
-  if (typeof url !== "string") return "Opening a page";
+  if (typeof url !== "string") return t("openingPage");
   try {
     return new URL(url).hostname.replace(/^www\./, "");
   } catch {
-    return "Opening a page";
+    return t("openingPage");
   }
 }
 
@@ -89,7 +90,7 @@ export function BrowserToolCard({
   const failure = toolError.success
     ? toolError.data.error
     : !loading && !visited
-      ? "The browser did not return a page. Try your request again."
+      ? t("browserNoPage")
       : "";
   return (
     <Card
@@ -100,26 +101,26 @@ export function BrowserToolCard({
           <Globe2 size={21} color={colors.blueDark} />
         </View>
         <View style={{ flex: 1, gap: 1 }}>
-          <Text style={[s.text, { fontWeight: "600" }]}>Browser</Text>
+          <Text style={[s.text, { fontWeight: "600" }]}>{t("browserCardTitle")}</Text>
           <Text numberOfLines={1} style={[s.small, { fontSize: 12 }]}>
             {working
-              ? "Reading the page…"
+              ? t("readingPage")
               : loading
-                ? "Browsing paused"
+                ? t("browsingPaused")
                 : failure
-                  ? "Couldn’t read the page"
+                  ? t("couldntReadPage")
                   : siteLabel(visited?.url)}
           </Text>
         </View>
         {working ? (
           <ActivityIndicator size="small" color={colors.blueDark} />
         ) : visited ? (
-          <Check size={17} color="#47896C" accessibilityLabel="Page read" />
+          <Check size={17} color="#47896C" accessibilityLabel={t("pageRead")} />
         ) : null}
       </View>
       {preview ? (
         <Image
-          accessibilityLabel={`Browser preview: ${visited?.title}`}
+          accessibilityLabel={t("browserPreview", { title: visited?.title ?? "" })}
           source={{ uri: api.url(preview) }}
           style={{ width: "100%", aspectRatio: 1.7, borderRadius: 12, backgroundColor: "#FFF" }}
           resizeMode="contain"
@@ -142,14 +143,14 @@ export function BrowserToolCard({
           ) : visited ? (
             <Text style={s.small}>
               {browser && browser.url !== visited.url
-                ? "Page visited. The browser has moved on."
+                ? t("pageVisitedMovedOn")
                 : browser?.status === "closed"
-                  ? "Session saved. Take control to reopen it."
+                  ? t("sessionSavedTakeControl")
                   : browser?.status === "error"
-                    ? "Session needs attention. Take control to reconnect."
+                    ? t("sessionNeedsReconnect")
                     : previewFailed
-                      ? "Preview unavailable. You can still take control."
-                      : "Connecting to the saved session…"}
+                      ? t("previewStillControl")
+                      : t("connectingSavedSession")}
             </Text>
           ) : null}
         </View>
@@ -162,12 +163,12 @@ export function BrowserToolCard({
           onPress={() => browser && open({ type: "browser", browser })}
           style={{ backgroundColor: "#F9F9FA", minHeight: 38, paddingVertical: 8 }}
         >
-          Take control
+          {t("takeControl")}
         </Button>
       )}
       {!!error && (
         <Button small icon={RotateCw} onPress={() => setRetry((attempt) => attempt + 1)}>
-          Reconnect preview
+          {t("reconnectPreview")}
         </Button>
       )}
     </Card>
diff --git a/apps/mobile/src/chat.tsx b/apps/mobile/src/chat.tsx
index 746ce12d2..59c4ab375 100644
--- a/apps/mobile/src/chat.tsx
+++ b/apps/mobile/src/chat.tsx
@@ -40,6 +40,7 @@ import { confirmedJevSelection, displayJevUserMessage, latestJevPanelId } from "
 import { JevInteractionContext, JevToolCard } from "./jev-tool-card";
 import { MailToolCard } from "./mail-tool-card";
 import { SearchToolCard } from "./search-tool-card";
+import { t } from "./strings";
 import { FileThreadCard, TaskThreadCard } from "./thread-artifacts";
 import { type Selection, useMuseThread } from "./threads";
 import { Button, Card, CheckRow, colors, ErrorNotice, s } from "./ui";
@@ -176,15 +177,23 @@ function ServerToolCard({
     ? data?.tasks.find((item) => item.id === parsed.data.id || item.id === parsed.data.taskId)
     : undefined;
   if (task) return <TaskThreadCard task={task} />;
+  const labels: Record<string, string> = {
+    Task: t("cardTask"),
+    "Agent progress": t("cardAgentProgress"),
+    Goal: t("cardGoal"),
+    Tracking: t("cardTracking"),
+    Memory: t("cardMemory"),
+  };
+  const label = labels[name] ?? name;
   return (
     <Card style={{ padding: 16, gap: 10 }}>
-      <Text style={s.heading}>{loading ? `Saving ${name.toLowerCase()}…` : name}</Text>
+      <Text style={s.heading}>
+        {loading ? t("savingCard", { name: label.toLowerCase() }) : label}
+      </Text>
       {parsed.success && parsed.data.error ? (
         <ErrorNotice error={parsed.data.error} />
       ) : (
-        <Text style={s.muted}>
-          {loading ? "Waiting for the server." : "Open the workspace to see the saved result."}
-        </Text>
+        <Text style={s.muted}>{loading ? t("waitingServer") : t("openWorkspaceResult")}</Text>
       )}
       <Button
         small
@@ -198,7 +207,7 @@ function ServerToolCard({
           )
         }
       >
-        View {name.toLowerCase()}
+        {t("viewCard", { name: label })}
       </Button>
     </Card>
   );
@@ -305,7 +314,9 @@ export function ChatScreen({
         if (active) {
           setLoaded(false);
           setHistoryError(
-            `Could not load conversation. Your saved messages have not been changed. ${e instanceof Error ? e.message : String(e)}`,
+            t("loadFailed", {
+              error: e instanceof Error ? e.message : String(e),
+            }),
           );
         }
       }
@@ -325,7 +336,7 @@ export function ChatScreen({
   const run = useCallback(
     async (message?: QueuedMessage): Promise<"held" | undefined> => {
       if (runLock.current || agent.isRunning || !isReady || !loaded || syncing)
-        throw new Error("The conversation is not ready yet.");
+        throw new Error(t("conversationNotReady"));
       runLock.current = true;
       queuedTurn.current = Boolean(message);
       setBusy(true);
@@ -354,9 +365,7 @@ export function ChatScreen({
           await saveHistory();
         } catch (e) {
           queue.pause();
-          setSaveError(
-            `Conversation could not be saved: ${e instanceof Error ? e.message : String(e)}`,
-          );
+          setSaveError(t("saveFailed", { error: e instanceof Error ? e.message : String(e) }));
         } finally {
           runLock.current = false;
           setBusy(false);
@@ -409,10 +418,10 @@ export function ChatScreen({
     (text: string, retry = false): Promise<void> => {
       const snapshot = queue.getSnapshot();
       if (!loaded || !isReady || saveError || (!retry && snapshot.paused))
-        return Promise.reject(new Error("The conversation is not ready for a choice yet."));
+        return Promise.reject(new Error(t("choiceNotReady")));
       if (retry) {
         if (runLock.current || agent.isRunning || snapshot.running || snapshot.pending.length)
-          return Promise.reject(new Error("Wait for the current response before retrying."));
+          return Promise.reject(new Error(t("waitBeforeRetry")));
         if (snapshot.paused) queue.resume();
       }
       const id = `choice-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
@@ -451,7 +460,7 @@ export function ChatScreen({
     try {
       await copilotkit.stopAgent({ agent });
     } catch (e) {
-      setError(`Could not stop response: ${e instanceof Error ? e.message : String(e)}`);
+      setError(t("stopFailed", { error: e instanceof Error ? e.message : String(e) }));
     }
   }
   function send() {
@@ -465,7 +474,9 @@ export function ChatScreen({
     enqueue(
       text +
         (files.length
-          ? `\n\nAttached documents: ${files.map((f) => `${f.name} (artifact ID: ${f.id})`).join(", ")}`
+          ? t("attachedDocs", {
+              files: files.map((f) => `${f.name}（工件 ID：${f.id}）`).join(", "),
+            })
           : ""),
     );
     setDraft("");
@@ -511,7 +522,7 @@ export function ChatScreen({
           <>
             <ErrorNotice error={historyError} />
             <Button onPress={() => setHistoryAttempt((attempt) => attempt + 1)}>
-              Retry loading conversation
+              {t("retryLoadConversation")}
             </Button>
           </>
         )}
@@ -535,23 +546,22 @@ export function ChatScreen({
                 maxWidth: 350,
               }}
             >
-              A little help. A lot more room for life.
+              {t("chatEmptyTitle")}
             </Text>
             <Text style={[s.muted, { maxWidth: 320, textAlign: "center", lineHeight: 23 }]}>
-              Tell me what’s on your mind. I can make a plan, work with your apps, and use my
-              computer to help.
+              {t("chatEmptyDetail")}
             </Text>
             <View style={{ width: "100%", maxWidth: 360, marginTop: 14, gap: 8 }}>
               {[
                 {
-                  text: "Find cool things on Hacker News",
-                  action: () => enqueue("Check out Hacker News for cool stuff"),
+                  text: t("suggestionHackerNews"),
+                  action: () => enqueue(t("promptHackerNews")),
                 },
                 {
-                  text: "Summarize copilotkit.ai",
-                  action: () => enqueue("Summarize copilotkit.ai"),
+                  text: t("suggestionSummarize"),
+                  action: () => enqueue(t("promptSummarize")),
                 },
-                { text: "Keep an eye on a website", action: () => navigate("goals") },
+                { text: t("suggestionWatch"), action: () => navigate("goals") },
               ].map((item) => (
                 <Button key={item.text} onPress={item.action}>
                   {item.text}
@@ -672,7 +682,7 @@ export function ChatScreen({
                 style={{ alignSelf: "flex-start", marginTop: 6 }}
                 onPress={() => setShowResults(!showResults)}
               >
-                {showResults ? "Hide recent results" : "Recent results"}
+                {showResults ? t("hideRecentResults") : t("recentResults")}
               </Button>
             )}
             {showResults && (
@@ -709,7 +719,7 @@ export function ChatScreen({
         {(!richThreads || selection.id === mainId) && <BackgroundUpdates />}
         {(busy || agent.isRunning) && (
           <View
-            accessibilityLabel="Agent is working"
+            accessibilityLabel={t("agentWorking")}
             style={[
               s.row,
               {
@@ -750,7 +760,7 @@ export function ChatScreen({
                 .catch((e) => setError(e instanceof Error ? e.message : String(e)));
             }}
           >
-            Retry response
+            {t("retryResponse")}
           </Button>
         )}
       </ScrollView>
@@ -765,7 +775,7 @@ export function ChatScreen({
             list.current?.scrollToEnd({ animated: true });
           }}
         >
-          Latest messages
+          {t("latestMessages")}
         </Button>
       )}
       <KeyboardAvoidingView
@@ -781,13 +791,13 @@ export function ChatScreen({
               void saveHistory().catch((e) => setSaveError(String(e)));
             }}
           >
-            Retry saving conversation
+            {t("retrySaveConversation")}
           </Button>
         )}
         {!!outbox.pending.length && (
           <View style={{ padding: 12, gap: 6 }}>
             <Text style={s.small}>
-              {outbox.paused ? "Messages on hold" : "Up next"} · Keep the app open until sent
+              {outbox.paused ? t("messagesOnHold") : t("upNext")} · {t("keepAppOpen")}
             </Text>
             {outbox.pending.map((message) => (
               <View key={message.id} style={[s.row, { gap: 8 }]}>
@@ -796,13 +806,15 @@ export function ChatScreen({
                 </Text>
                 <Pressable
                   accessibilityRole="button"
-                  accessibilityLabel={`Remove queued message: ${displayJevUserMessage(message.text, messages)}`}
+                  accessibilityLabel={t("removeQueued", {
+                    text: displayJevUserMessage(message.text, messages),
+                  })}
                   hitSlop={10}
                   onPress={() => {
                     queue.remove(message.id);
                     choiceCompletions.current
                       .get(message.id)
-                      ?.reject(new Error("Choice removed from queue."));
+                      ?.reject(new Error(t("choiceRemoved")));
                     choiceCompletions.current.delete(message.id);
                   }}
                   style={{ padding: 8 }}
@@ -820,14 +832,14 @@ export function ChatScreen({
                   flush();
                 }}
               >
-                Send queued messages
+                {t("sendQueued")}
               </Button>
             )}
           </View>
         )}
         {picking && (
           <Card style={{ marginBottom: 12, padding: 15 }}>
-            <Text style={s.heading}>Add a document</Text>
+            <Text style={s.heading}>{t("addDocument")}</Text>
             <ScrollView style={{ maxHeight: 230 }} keyboardShouldPersistTaps="handled">
               {w.files.length ? (
                 w.files.map((f) => (
@@ -845,7 +857,7 @@ export function ChatScreen({
                   />
                 ))
               ) : (
-                <Text style={s.muted}>Import a PDF in Files to use it in a conversation.</Text>
+                <Text style={s.muted}>{t("importPdfToChat")}</Text>
               )}
             </ScrollView>
             <Button
@@ -853,7 +865,7 @@ export function ChatScreen({
               onPress={() => setPicking(false)}
               style={{ alignSelf: "flex-end", marginTop: 8 }}
             >
-              Done
+              {t("done")}
             </Button>
           </Card>
         )}
@@ -879,7 +891,7 @@ export function ChatScreen({
                   <Pressable
                     key={f.id}
                     accessibilityRole="button"
-                    accessibilityLabel={`Remove attachment: ${f.name}`}
+                    accessibilityLabel={t("removeAttachment", { name: f.name })}
                     onPress={() => setAttachments((ids) => ids.filter((id) => id !== f.id))}
                     style={[
                       s.row,
@@ -908,7 +920,7 @@ export function ChatScreen({
           <View style={[s.row, { gap: 7, alignItems: "flex-end" }]}>
             <Pressable
               accessibilityRole="button"
-              accessibilityLabel="Attach a document"
+              accessibilityLabel={t("attachDocument")}
               accessibilityState={{ expanded: picking }}
               onPress={() => setPicking(!picking)}
               style={({ pressed }) => ({
@@ -925,7 +937,7 @@ export function ChatScreen({
               </Text>
             </Pressable>
             <TextInput
-              accessibilityLabel="Message OpenMuse"
+              accessibilityLabel={t("messageOpenMuse")}
               value={draft}
               onChangeText={setDraft}
               onContentSizeChange={(event) =>
@@ -933,12 +945,12 @@ export function ChatScreen({
               }
               placeholder={
                 !isReady
-                  ? "Connecting…"
+                  ? t("phConnecting")
                   : !loaded
                     ? historyError
-                      ? "Conversation unavailable"
-                      : "Loading conversation…"
-                    : "Message…"
+                      ? t("phConversationUnavailable")
+                      : t("phLoadingConversation")
+                    : t("phMessage")
               }
               placeholderTextColor="#949B9F"
               selectionColor={colors.blueDark}
@@ -975,7 +987,7 @@ export function ChatScreen({
             />
             <Pressable
               accessibilityRole="button"
-              accessibilityLabel={replying ? "Stop reply" : "Send message"}
+              accessibilityLabel={replying ? t("stopReply") : t("sendMessage")}
               disabled={!replying && (!draft.trim() || !loaded || !isReady)}
               onPress={replying ? () => void stop() : send}
               style={({ pressed }) => ({
diff --git a/apps/mobile/src/computer-workspace.tsx b/apps/mobile/src/computer-workspace.tsx
index 19a9191cb..835f019f0 100644
--- a/apps/mobile/src/computer-workspace.tsx
+++ b/apps/mobile/src/computer-workspace.tsx
@@ -22,6 +22,7 @@ import type {
 } from "../../../packages/domain/src/computer";
 import { useComputerDraft } from "./computer-drafts";
 import { DesktopStream } from "./desktop-stream";
+import { statusLabel, t } from "./strings";
 import { Button, Card, colors, Empty, ErrorNotice, Field, LinkRow, s, timeLabel } from "./ui";
 import { useWorkspace } from "./workspace";
 
@@ -156,17 +157,17 @@ export function LinuxWorkspace({
         <View style={[s.row, { gap: 12 }]}>
           <Terminal size={24} color={colors.blueDark} />
           <View style={{ flex: 1, gap: 4 }}>
-            <Text style={s.heading}>Your Linux workspace</Text>
+            <Text style={s.heading}>{t("linuxWorkspace")}</Text>
             <Text style={s.muted}>
               {running
-                ? "Running · files persist when stopped"
+                ? t("cwRunning")
                 : snapshot?.status === "stopped"
-                  ? "Stopped · your files are saved"
+                  ? t("cwStopped")
                   : snapshot?.status === "unconfigured"
-                    ? "Set up the computer to get started"
+                    ? t("cwUnconfigured")
                     : snapshot?.status === "error"
-                      ? "Connection needs attention"
-                      : "Connecting…"}
+                      ? t("cwError")
+                      : t("cwConnecting")}
             </Text>
           </View>
           {!snapshot && !error && <ActivityIndicator color={colors.blueDark} />}
@@ -176,11 +177,11 @@ export function LinuxWorkspace({
           <View style={[s.row, { gap: 8, flexWrap: "wrap" }]}>
             {running ? (
               <Button icon={Power} busy={busy} onPress={() => void control("stop")}>
-                Stop computer
+                {t("stopComputer")}
               </Button>
             ) : (
               <Button primary icon={Play} busy={busy} onPress={() => void control("start")}>
-                Start computer
+                {t("startComputer")}
               </Button>
             )}
             <Button
@@ -192,7 +193,7 @@ export function LinuxWorkspace({
                   .catch((e) => setError(message(e)))
               }
             >
-              Refresh
+              {t("refreshBtn")}
             </Button>
           </View>
         )}
@@ -206,7 +207,7 @@ export function LinuxWorkspace({
               .catch((e) => setError(message(e)))
           }
         >
-          Retry connection
+          {t("retryConnection")}
         </Button>
       )}
       {snapshot?.enabled && (
@@ -215,10 +216,10 @@ export function LinuxWorkspace({
             {editingCommand || command.length > 0 || snapshot.commands.length === 0 ? (
               <View style={{ borderRadius: 22, backgroundColor: "#F1F3F4", padding: 18, gap: 8 }}>
                 <Text style={{ color: colors.muted, fontSize: 12, fontFamily: mono }}>
-                  TERMINAL
+                  {t("terminalLabel")}
                 </Text>
                 <Field
-                  label="Working directory"
+                  label={t("workingDir")}
                   value={cwd}
                   onChangeText={setCwd}
                   autoCapitalize="none"
@@ -226,7 +227,7 @@ export function LinuxWorkspace({
                   style={{ fontFamily: mono }}
                 />
                 <Field
-                  label="Command"
+                  label={t("commandLabel")}
                   value={command}
                   onChangeText={setCommand}
                   placeholder="pwd"
@@ -246,7 +247,7 @@ export function LinuxWorkspace({
                       setCommand((text) => text.replace(/[‘’]/g, "'").replace(/[“”]/g, '"'))
                     }
                   >
-                    Use straight quotes
+                    {t("straightQuotes")}
                   </Button>
                 )}
                 <Button
@@ -256,12 +257,10 @@ export function LinuxWorkspace({
                   disabled={!running || !command.trim() || busy}
                   onPress={() => void run()}
                 >
-                  Run command
+                  {t("runCommand")}
                 </Button>
                 <Text style={{ color: colors.muted, fontSize: 12, lineHeight: 18 }}>
-                  {snapshot.network === "enabled"
-                    ? "Runs on your computer with internet access. Start GUI apps with >/dev/null 2>&1 & to open them on the Desktop tab."
-                    : "Runs on your computer. Network access is off. Use Browser for the web."}
+                  {snapshot.network === "enabled" ? t("netEnabledNote") : t("netDisabledNote")}
                 </Text>
               </View>
             ) : (
@@ -271,19 +270,15 @@ export function LinuxWorkspace({
                 disabled={!running || busy || !!commandRunning}
                 onPress={() => setEditingCommand(true)}
               >
-                New command
+                {t("newCommand")}
               </Button>
             )}
-            {!!commandRunning && (
-              <Text style={s.muted}>
-                Working… The result will appear here. Stop the computer to end running commands.
-              </Text>
-            )}
+            {!!commandRunning && <Text style={s.muted}>{t("workingNote")}</Text>}
             {snapshot.commands.length === 0 ? (
               <Empty
                 icon={Terminal}
-                title="Ready for your first command"
-                detail="Run scripts, work with files, or ask your agent to create something here."
+                title={t("firstCommandTitle")}
+                detail={t("firstCommandDetail")}
               />
             ) : (
               [...snapshot.commands]
@@ -293,7 +288,7 @@ export function LinuxWorkspace({
             )}
             {snapshot.commands.length > 5 && (
               <Button small onPress={() => setShowHistory(!showHistory)}>
-                {showHistory ? "Show recent commands" : "Earlier commands"}
+                {showHistory ? t("showRecentCommands") : t("earlierCommands")}
               </Button>
             )}
           </View>
@@ -312,22 +307,11 @@ export function LinuxWorkspace({
 // Live view of the computer's desktop, shared with the chat's desktop card.
 function ComputerDesktop({ running }: { running: boolean }) {
   if (!running)
-    return (
-      <Empty
-        icon={Monitor}
-        title="Desktop is off"
-        detail="Start the computer to see and control its desktop."
-      />
-    );
+    return <Empty icon={Monitor} title={t("desktopOff")} detail={t("desktopOffDetail")} />;
   return (
     <View style={{ gap: 12 }}>
       <DesktopStream running />
-      <Text style={s.small}>
-        You and your agent share this desktop. Stopping the computer closes its apps; files in
-        /workspace are kept. Opening the desktop keeps the computer awake for 30 minutes; keep this
-        tab open or come back to the app to extend it. The link controls the desktop, so do not
-        share it.
-      </Text>
+      <Text style={s.small}>{t("desktopNote")}</Text>
     </View>
   );
 }
@@ -350,8 +334,8 @@ function CommandReceipt({ run }: { run: ComputerCommand }) {
             },
           ]}
         >
-          {run.status.replace("_", " ")}
-          {run.exitCode !== undefined ? ` · exit ${run.exitCode}` : ""}
+          {statusLabel(run.status)}
+          {run.exitCode !== undefined ? t("exitCode", { code: run.exitCode }) : ""}
         </Text>
         <Text style={s.small}>{timeLabel(run.startedAt)}</Text>
       </View>
@@ -379,18 +363,14 @@ function CommandReceipt({ run }: { run: ComputerCommand }) {
             </Text>
           )}
           {!run.stdout && !run.stderr && run.status !== "running" && (
-            <Text style={s.small}>No output</Text>
-          )}
-          {run.truncated && (
-            <Text style={s.small}>
-              Output reached the display limit. Write large results to a file.
-            </Text>
+            <Text style={s.small}>{t("noOutput")}</Text>
           )}
+          {run.truncated && <Text style={s.small}>{t("outputTruncated")}</Text>}
         </>
       )}
       {!!(run.stdout || run.stderr) && (
         <Button small onPress={() => setExpanded(!expanded)}>
-          {expanded ? "Hide output" : "Show output"}
+          {expanded ? t("hideOutput") : t("showOutput")}
         </Button>
       )}
     </Card>
@@ -469,7 +449,7 @@ function ComputerFiles({ running, active }: { running: boolean; active: boolean
         path: `${path}/${file.name.replace(/[\\/]/g, "_")}`,
       });
       setImporting(false);
-      setNotice("Document copied to your computer.");
+      setNotice(t("docCopied"));
       setRetry((value) => value + 1);
     } catch (e) {
       setError(message(e));
@@ -505,7 +485,7 @@ function ComputerFiles({ running, active }: { running: boolean; active: boolean
             ? { ...current, saved: sent.text, savedPath: sent.path }
             : current,
         );
-      setNotice("File saved to your computer.");
+      setNotice(t("fileSaved"));
       setRetry((value) => value + 1);
     } catch (e) {
       setError(message(e));
@@ -530,7 +510,7 @@ function ComputerFiles({ running, active }: { running: boolean; active: boolean
   return (
     <View style={{ gap: 12 }}>
       <View style={s.between}>
-        <Text style={s.heading}>Workspace files</Text>
+        <Text style={s.heading}>{t("workspaceFiles")}</Text>
         {(busy || loading) && <ActivityIndicator color={colors.blueDark} />}
       </View>
       <Text selectable style={[s.small, { fontFamily: mono }]}>
@@ -538,13 +518,11 @@ function ComputerFiles({ running, active }: { running: boolean; active: boolean
       </Text>
       <ErrorNotice error={error} />
       {!!notice && <Text style={[s.small, { color: "#248258" }]}>{notice}</Text>}
-      {!running && (
-        <Text style={s.muted}>Start the computer to browse or edit its saved files.</Text>
-      )}
+      {!running && <Text style={s.muted}>{t("filesStartNote")}</Text>}
       {editor ? (
         <>
           <Field
-            label="File path"
+            label={t("filePath")}
             value={editor.path}
             onChangeText={(value) => setEditor({ ...editor, path: value })}
             autoCorrect={false}
@@ -552,7 +530,7 @@ function ComputerFiles({ running, active }: { running: boolean; active: boolean
             style={{ fontFamily: mono }}
           />
           <Field
-            label="File contents"
+            label={t("fileContents")}
             value={editor.text}
             onChangeText={(value) => setEditor({ ...editor, text: value })}
             multiline
@@ -571,7 +549,7 @@ function ComputerFiles({ running, active }: { running: boolean; active: boolean
               disabled={!running || !editor.path.trim()}
               onPress={() => void save()}
             >
-              Save file
+              {t("saveFile")}
             </Button>
             <Button
               disabled={busy}
@@ -581,7 +559,7 @@ function ComputerFiles({ running, active }: { running: boolean; active: boolean
                 setNotice("");
               }}
             >
-              {dirty ? "Discard edits" : "Back to files"}
+              {dirty ? t("discardEdits") : t("backToFiles")}
             </Button>
           </View>
         </>
@@ -595,7 +573,7 @@ function ComputerFiles({ running, active }: { running: boolean; active: boolean
                 icon={ArrowLeft}
                 onPress={() => setPath(path.slice(0, path.lastIndexOf("/")) || "/workspace")}
               >
-                Up
+                {t("up")}
               </Button>
             )}
             <Button
@@ -612,7 +590,7 @@ function ComputerFiles({ running, active }: { running: boolean; active: boolean
                 });
               }}
             >
-              New file
+              {t("newFile")}
             </Button>
             <Button
               small
@@ -620,7 +598,7 @@ function ComputerFiles({ running, active }: { running: boolean; active: boolean
               icon={FolderPlus}
               onPress={() => setFolder("")}
             >
-              New folder
+              {t("newFolder")}
             </Button>
             <Button
               small
@@ -628,7 +606,7 @@ function ComputerFiles({ running, active }: { running: boolean; active: boolean
               icon={RefreshCw}
               onPress={() => setRetry(retry + 1)}
             >
-              Refresh files
+              {t("refreshFiles")}
             </Button>
             <Button
               small
@@ -636,15 +614,13 @@ function ComputerFiles({ running, active }: { running: boolean; active: boolean
               icon={Upload}
               onPress={() => setImporting(!importing)}
             >
-              {importing ? "Hide documents" : "Copy a document here"}
+              {importing ? t("hideDocuments") : t("copyDocumentHere")}
             </Button>
           </View>
           {importing && (
             <Card>
-              <Text style={s.heading}>Choose a saved PDF</Text>
-              <Text style={[s.small, { marginTop: 6 }]}>
-                Copies into this folder. A file with the same name will be replaced.
-              </Text>
+              <Text style={s.heading}>{t("chooseSavedPdf")}</Text>
+              <Text style={[s.small, { marginTop: 6 }]}>{t("copyNote")}</Text>
               {workspace.files.map((file) => (
                 <LinkRow
                   key={file.id}
@@ -653,15 +629,13 @@ function ComputerFiles({ running, active }: { running: boolean; active: boolean
                   onPress={() => void importDocument(file)}
                 />
               ))}
-              {!workspace.files.length && (
-                <Text style={s.muted}>Add a document from mail or Files first.</Text>
-              )}
+              {!workspace.files.length && <Text style={s.muted}>{t("addDocumentFirst")}</Text>}
             </Card>
           )}
           {folder !== undefined && (
             <Card style={{ gap: 8 }}>
               <Field
-                label="Folder name"
+                label={t("folderName")}
                 value={folder}
                 onChangeText={setFolder}
                 autoCapitalize="none"
@@ -674,10 +648,10 @@ function ComputerFiles({ running, active }: { running: boolean; active: boolean
                   busy={busy}
                   onPress={() => void mkdir()}
                 >
-                  Create folder
+                  {t("createFolder")}
                 </Button>
                 <Button disabled={busy} onPress={() => setFolder(undefined)}>
-                  Cancel
+                  {t("cancel")}
                 </Button>
               </View>
             </Card>
@@ -691,9 +665,9 @@ function ComputerFiles({ running, active }: { running: boolean; active: boolean
                 title={entry.name}
                 detail={
                   entry.type === "directory"
-                    ? "Folder"
+                    ? t("folderType")
                     : entry.type === "symlink"
-                      ? "Symbolic link"
+                      ? t("symlinkType")
                       : `${Math.max(1, Math.ceil(entry.size / 1024))} KB`
                 }
                 onPress={() => {
@@ -712,11 +686,7 @@ function ComputerFiles({ running, active }: { running: boolean; active: boolean
             !error &&
             directory?.path === path &&
             directory.entries.length === 0 && (
-              <Empty
-                icon={Folder}
-                title="A little space to create"
-                detail="Add a file here, or ask your agent to make one in its workspace."
-              />
+              <Empty icon={Folder} title={t("createSpaceTitle")} detail={t("createSpaceDetail")} />
             )}
         </>
       )}
diff --git a/apps/mobile/src/computer.tsx b/apps/mobile/src/computer.tsx
index 285e0516b..45a8a1b73 100644
--- a/apps/mobile/src/computer.tsx
+++ b/apps/mobile/src/computer.tsx
@@ -15,9 +15,16 @@ import { browserAddress } from "./browser-address";
 import { useComputerDraft } from "./computer-drafts";
 import { computerStatus } from "./computer-status";
 import { LinuxWorkspace } from "./computer-workspace";
+import { t } from "./strings";
 import { Button, Card, colors, ErrorNotice, Field, LinkRow, Sheet, s } from "./ui";
 import { useWorkspace } from "./workspace";
 
+const statusLabels: Record<string, string> = {
+  offline: t("statusOffline"),
+  "take control": t("statusTakeControl"),
+  ready: t("statusReady2"),
+};
+
 export function ComputerEntry() {
   const { workspace, open } = useWorkspace();
   const available = workspace.connections.some(
@@ -28,7 +35,7 @@ export function ComputerEntry() {
   return (
     <Pressable
       accessibilityRole="button"
-      accessibilityLabel={`Agent computer — ${status}`}
+      accessibilityLabel={t("agentComputerStatus", { status: statusLabels[status] ?? status })}
       onPress={() => open({ type: "computer" })}
       style={[
         s.row,
@@ -43,7 +50,9 @@ export function ComputerEntry() {
       ]}
     >
       <Monitor size={13} color={colors.muted} />
-      <Text style={{ fontSize: 12, color: colors.muted }}>Computer · {status}</Text>
+      <Text style={{ fontSize: 12, color: colors.muted }}>
+        {t("computerDotStatus", { status: statusLabels[status] ?? status })}
+      </Text>
       <View
         style={{
           width: 5,
@@ -70,19 +79,19 @@ export function BrowserThreadCard({ browser }: { browser: BrowserSession }) {
           <Globe2 size={21} color={colors.blueDark} />
         </View>
         <View style={{ flex: 1 }}>
-          <Text style={[s.text, { fontWeight: "600" }]}>Browser</Text>
+          <Text style={[s.text, { fontWeight: "600" }]}>{t("browserCardTitle")}</Text>
           <Text numberOfLines={1} style={s.small}>
             {browser.status === "closed"
-              ? "Session saved"
+              ? t("sessionSaved")
               : browser.status === "error"
-                ? "Needs attention"
+                ? t("needsAttention")
                 : browser.title}
           </Text>
         </View>
       </View>
       {browser.previewUrl && browser.status === "active" && !failed ? (
         <Image
-          accessibilityLabel={`Browser preview: ${browser.title}`}
+          accessibilityLabel={t("browserPreview", { title: browser.title })}
           source={{ uri: browser.previewUrl }}
           style={{ width: "100%", aspectRatio: 1.6, borderRadius: 11, backgroundColor: "#FFF" }}
           resizeMode="contain"
@@ -100,21 +109,27 @@ export function BrowserThreadCard({ browser }: { browser: BrowserSession }) {
         >
           <Globe2 size={30} color={colors.muted} />
           <Text numberOfLines={2} style={[s.muted, { textAlign: "center" }]}>
-            {failed ? "Preview unavailable. Open the browser to reconnect." : browser.url}
+            {failed ? t("previewFailed") : browser.url}
           </Text>
         </View>
       )}
       <Button onPress={() => open({ type: "browser", browser })}>
         {browser.status === "closed"
-          ? "Reopen browser"
+          ? t("reopenBrowser")
           : browser.status === "error"
-            ? "Reconnect browser"
-            : "Take control"}
+            ? t("reconnectBrowser")
+            : t("takeControl")}
       </Button>
     </Card>
   );
 }
 const tabIcons = { Browser: Globe2, Desktop: Monitor, Terminal, Files: FolderOpen } as const;
+const tabLabels: Record<string, string> = {
+  Browser: t("tabBrowser"),
+  Desktop: t("tabDesktop"),
+  Terminal: t("tabTerminal"),
+  Files: t("shortcutFiles"),
+};
 export function ComputerSheet() {
   const { workspace, api, refresh, close, open, navigate } = useWorkspace();
   const [url, setUrl] = useState("");
@@ -167,11 +182,7 @@ export function ComputerSheet() {
     }
   }
   return (
-    <Sheet
-      title="Agent computer"
-      subtitle="Your agent works here. Step in whenever you need."
-      onClose={close}
-    >
+    <Sheet title={t("agentComputer")} subtitle={t("computerSubtitle")} onClose={close}>
       <View style={{ gap: 20 }}>
         {shown === "Browser" && (
           <View
@@ -179,11 +190,11 @@ export function ComputerSheet() {
           >
             <Monitor size={28} color={colors.blueDark} />
             <View style={{ flex: 1 }}>
-              <Text style={s.heading}>{available ? "Browser connected" : "Browser offline"}</Text>
+              <Text style={s.heading}>
+                {available ? t("browserConnected") : t("browserOffline")}
+              </Text>
               <Text style={s.muted}>
-                {available
-                  ? "Your agent’s browser and documents, in one place."
-                  : "Start the browser worker to connect this computer."}
+                {available ? t("browserConnectedDetail") : t("browserOfflineDetail")}
               </Text>
             </View>
           </View>
@@ -196,7 +207,7 @@ export function ComputerSheet() {
               icon={tabIcons[item]}
               onPress={() => setTab(item)}
             >
-              {item}
+              {tabLabels[item] ?? item}
             </Button>
           ))}
         </View>
@@ -208,7 +219,7 @@ export function ComputerSheet() {
           <>
             <View>
               <Field
-                label="Website address"
+                label={t("websiteAddress")}
                 value={url}
                 onChangeText={setUrl}
                 placeholder="https://example.com"
@@ -223,7 +234,7 @@ export function ComputerSheet() {
                 disabled={!available || !url.trim()}
                 onPress={() => void create()}
               >
-                Open a browser session
+                {t("openBrowserSession")}
               </Button>
             </View>
             {[...workspace.browsers]
@@ -231,27 +242,19 @@ export function ComputerSheet() {
               .map((browser) => (
                 <BrowserThreadCard key={browser.id} browser={browser} />
               ))}
-            {!workspace.browsers.length && (
-              <Text style={s.muted}>
-                Open a page here or ask your agent to research something. Its browsing sessions will
-                appear here.
-              </Text>
-            )}
-            <Text style={s.small}>
-              Browsing sessions keep their own logins and downloads. Open one to take over, then
-              return to your conversation.
-            </Text>
+            {!workspace.browsers.length && <Text style={s.muted}>{t("computerEmptyHint")}</Text>}
+            <Text style={s.small}>{t("computerSessionsNote")}</Text>
           </>
         ) : tab === "Files" ? (
           <>
-            <Text style={s.heading}>Documents</Text>
-            <Text style={s.small}>PDFs saved from mail, browser downloads, and your uploads.</Text>
+            <Text style={s.heading}>{t("documentsHeading")}</Text>
+            <Text style={s.small}>{t("documentsDetail")}</Text>
             {workspace.files.map((file) => (
               <LinkRow
                 key={file.id}
                 icon={FileText}
                 title={file.name}
-                detail={`${file.pageCount} pages · PDF`}
+                detail={t("filePagesPdf", { n: file.pageCount })}
                 onPress={() => open({ type: "file", file })}
               />
             ))}
@@ -262,7 +265,7 @@ export function ComputerSheet() {
                 navigate("files");
               }}
             >
-              Import a document
+              {t("importDocument")}
             </Button>
           </>
         ) : null}
@@ -275,7 +278,7 @@ export function ComputerSheet() {
               .catch((e) => setError(String(e)))
           }
         >
-          Refresh computer
+          {t("refreshComputer")}
         </Button>
       </View>
     </Sheet>
diff --git a/apps/mobile/src/desktop-stream.tsx b/apps/mobile/src/desktop-stream.tsx
index 4906d2552..955db1448 100644
--- a/apps/mobile/src/desktop-stream.tsx
+++ b/apps/mobile/src/desktop-stream.tsx
@@ -2,6 +2,7 @@ import { ExternalLink } from "lucide-react-native";
 import { memo, useEffect, useState } from "react";
 import { ActivityIndicator, AppState, Linking, Platform, View } from "react-native";
 import BrowserConsole from "./BrowserConsole";
+import { t } from "./strings";
 import { Button, colors, ErrorNotice } from "./ui";
 import { useWorkspace } from "./workspace";
 
@@ -94,7 +95,7 @@ export const DesktopStream = memo(function DesktopStream({
       <ErrorNotice error={error} />
       {embedded && !url && !error && <ActivityIndicator color={colors.blueDark} />}
       {!!url && embed && Platform.OS === "web" && (
-        <BrowserConsole url={url} title="Computer desktop" sandboxed />
+        <BrowserConsole url={url} title={t("computerDesktop")} sandboxed />
       )}
       {running && (!embedded || !!url) && (
         <Button
@@ -103,7 +104,7 @@ export const DesktopStream = memo(function DesktopStream({
           disabled={opening}
           onPress={() => void open()}
         >
-          {opening ? "Opening…" : "Open desktop"}
+          {opening ? t("opening") : t("openDesktop")}
         </Button>
       )}
     </View>
diff --git a/apps/mobile/src/desktop-tool-card.tsx b/apps/mobile/src/desktop-tool-card.tsx
index cce31a1a6..f6a5e01de 100644
--- a/apps/mobile/src/desktop-tool-card.tsx
+++ b/apps/mobile/src/desktop-tool-card.tsx
@@ -5,6 +5,7 @@ import { z } from "zod";
 import type { ComputerSnapshot } from "../../../packages/domain/src/computer";
 import { useComputerDraft } from "./computer-drafts";
 import { DesktopStream } from "./desktop-stream";
+import { t } from "./strings";
 import { Button, Card, colors, ErrorNotice, s } from "./ui";
 import { useWorkspace } from "./workspace";
 
@@ -97,13 +98,13 @@ export function DesktopToolCard({
           <Monitor size={21} color={colors.blueDark} />
         </View>
         <View style={{ flex: 1, gap: 1 }}>
-          <Text style={[s.text, { fontWeight: "600" }]}>Desktop</Text>
+          <Text style={[s.text, { fontWeight: "600" }]}>{t("tabDesktop")}</Text>
           <Text numberOfLines={1} style={[s.small, { fontSize: 12 }]}>
             {loading
-              ? "Using the desktop…"
+              ? t("usingDesktop")
               : value?.error
-                ? "The desktop step failed"
-                : (value?.action ?? "Desktop step")}
+                ? t("desktopStepFailed")
+                : (value?.action ?? t("desktopStep"))}
           </Text>
         </View>
         {loading && <ActivityIndicator size="small" color={colors.blueDark} />}
@@ -111,11 +112,9 @@ export function DesktopToolCard({
       <ErrorNotice error={value?.error || error} />
       {latest && snapshot && !running ? (
         <View style={{ backgroundColor: "#FAFAFB", borderRadius: 12, padding: 16, gap: 10 }}>
-          <Text style={s.small}>
-            The computer is offline. Start it to see the desktop; apps that were open are closed.
-          </Text>
+          <Text style={s.small}>{t("computerOfflineNote")}</Text>
           <Button small icon={Play} disabled={starting} onPress={() => void start()}>
-            {starting ? "Starting…" : "Start computer"}
+            {starting ? t("starting") : t("startComputer")}
           </Button>
         </View>
       ) : latest && running ? (
@@ -125,7 +124,7 @@ export function DesktopToolCard({
           <>
             {!!value?.receiptId && (
               <Image
-                accessibilityLabel="Latest desktop screenshot"
+                accessibilityLabel={t("latestScreenshot")}
                 source={{
                   uri: api.url(`/api/computer/desktop/screenshot?receipt=${value.receiptId}`),
                   headers: { Authorization: `Bearer ${api.token}` },
@@ -146,7 +145,7 @@ export function DesktopToolCard({
           open({ type: "computer" });
         }}
       >
-        Open in Desktop tab
+        {t("openDesktopTab")}
       </Button>
     </Card>
   );
diff --git a/apps/mobile/src/details.tsx b/apps/mobile/src/details.tsx
index 8751ff921..67bcbc636 100644
--- a/apps/mobile/src/details.tsx
+++ b/apps/mobile/src/details.tsx
@@ -39,6 +39,7 @@ import { ComputerSheet } from "./computer";
 import DateTimeEditor from "./DateTimeEditor";
 import { localDateTime, zonedInstant } from "./date-time";
 import PdfReader from "./PdfReader";
+import { statusLabel, t } from "./strings";
 import {
   Button,
   Card,
@@ -78,14 +79,14 @@ export function Details({ detail }: { detail: Detail }) {
   if (detail.type === "review") return <ReviewDetail initial={detail.action} />;
   if (detail.type === "browser") return <BrowserDetail initial={detail.browser} />;
   return (
-    <Sheet title="Your workspace" subtitle="A little room for everything." onClose={close}>
+    <Sheet title={t("yourWorkspace")} subtitle={t("workspaceTagline")} onClose={close}>
       {[
-        { section: "mail" as const, title: "Mail", icon: MailIcon },
-        { section: "calendar" as const, title: "Calendar", icon: CalendarDays },
-        { section: "browser" as const, title: "Browser", icon: Globe2 },
-        { section: "files" as const, title: "Files", icon: FileText },
-        { section: "activity" as const, title: "Activity", icon: Clock3 },
-        { section: "connections" as const, title: "Connections", icon: ShieldCheck },
+        { section: "mail" as const, title: t("shortcutMail"), icon: MailIcon },
+        { section: "calendar" as const, title: t("shortcutCalendar"), icon: CalendarDays },
+        { section: "browser" as const, title: t("navBrowser"), icon: Globe2 },
+        { section: "files" as const, title: t("shortcutFiles"), icon: FileText },
+        { section: "activity" as const, title: t("navActivity"), icon: Clock3 },
+        { section: "connections" as const, title: t("navConnections"), icon: ShieldCheck },
       ].map((item) => (
         <LinkRow
           key={item.section}
@@ -140,15 +141,11 @@ function MailDetail({ mail: m }: { mail: Mail }) {
     };
   }, [api, m.threadId, retry]);
   return (
-    <Sheet
-      title={m.subject}
-      subtitle={`${thread.length} message${thread.length === 1 ? "" : "s"} in this conversation`}
-      onClose={close}
-    >
+    <Sheet title={m.subject} subtitle={t("threadMessages", { n: thread.length })} onClose={close}>
       {loading && (
         <View style={[s.row, { gap: 10, paddingBottom: 20 }]}>
           <ActivityIndicator color={colors.blueDark} />
-          <Text style={s.muted}>Loading the conversation…</Text>
+          <Text style={s.muted}>{t("loadingConversation")}</Text>
         </View>
       )}
       {thread.map((message) => (
@@ -157,7 +154,7 @@ function MailDetail({ mail: m }: { mail: Mail }) {
             <View style={{ gap: 4, flex: 1 }}>
               <Text style={s.heading}>{message.sender}</Text>
               <Text style={s.small}>{message.from}</Text>
-              <Text style={s.small}>To: {message.to.join(", ")}</Text>
+              <Text style={s.small}>{t("toLabel", { to: message.to.join(", ") })}</Text>
             </View>
             <Text style={s.small}>
               {dateLabel(message.date)} · {timeLabel(message.date)}
@@ -173,7 +170,7 @@ function MailDetail({ mail: m }: { mail: Mail }) {
               <LinkRow
                 key={id}
                 title={file.name}
-                detail={`${file.pageCount} pages · PDF attachment`}
+                detail={t("pagesPdfAttachment", { n: file.pageCount })}
                 icon={FileText}
                 onPress={() => open({ type: "file", file })}
               />
@@ -184,14 +181,14 @@ function MailDetail({ mail: m }: { mail: Mail }) {
                 icon={FileText}
                 onPress={() => void importAttachment(id)}
               >
-                {decodeURIComponent(id.split(":").slice(2).join(":")) || "Open attachment"}
+                {decodeURIComponent(id.split(":").slice(2).join(":")) || t("openAttachment")}
               </Button>
             );
           })}
         </Card>
       ))}
       <ErrorNotice error={error} />
-      {!!error && <Button onPress={() => setRetry(retry + 1)}>Reload conversation</Button>}
+      {!!error && <Button onPress={() => setRetry(retry + 1)}>{t("reloadConversation")}</Button>}
       <Button
         primary
         icon={Reply}
@@ -212,7 +209,7 @@ function MailDetail({ mail: m }: { mail: Mail }) {
           })
         }
       >
-        Write a reply
+        {t("writeReply")}
       </Button>
     </Sheet>
   );
@@ -264,7 +261,7 @@ function EmailEditor({ draft }: { draft?: Partial<EmailDraft> & { id?: string }
           ...(draft?.id ? { id: draft.id } : {}),
         });
         await refresh();
-        notify("Draft saved in OpenMuse.");
+        notify(t("draftSaved"));
         close();
       }
     } catch (e) {
@@ -275,12 +272,12 @@ function EmailEditor({ draft }: { draft?: Partial<EmailDraft> & { id?: string }
   }
   return (
     <Sheet
-      title={draft?.threadId ? "Write a reply" : "A new message"}
-      subtitle={`From ${w.profile.email} · saved privately in OpenMuse`}
+      title={draft?.threadId ? t("writeReply") : t("newMessage")}
+      subtitle={t("fromSavedPrivate", { email: w.profile.email })}
       onClose={close}
     >
       <Field
-        label="To"
+        label={t("fieldTo")}
         value={to}
         onChangeText={setTo}
         placeholder="person@example.com"
@@ -290,40 +287,40 @@ function EmailEditor({ draft }: { draft?: Partial<EmailDraft> & { id?: string }
       <View style={{ flexDirection: "row", gap: 16 }}>
         <View style={{ flex: 1 }}>
           <Field
-            label="Cc"
+            label={t("fieldCc")}
             value={cc}
             onChangeText={setCc}
-            placeholder="Optional"
+            placeholder={t("optional")}
             autoCapitalize="none"
           />
         </View>
         <View style={{ flex: 1 }}>
           <Field
-            label="Bcc"
+            label={t("fieldBcc")}
             value={bcc}
             onChangeText={setBcc}
-            placeholder="Optional"
+            placeholder={t("optional")}
             autoCapitalize="none"
           />
         </View>
       </View>
       <Field
-        label="Subject"
+        label={t("fieldSubject")}
         value={subject}
         onChangeText={setSubject}
-        placeholder="What’s on your mind?"
+        placeholder={t("phSubject")}
       />
       <Field
-        label="Message"
+        label={t("fieldMessage")}
         value={body}
         onChangeText={setBody}
         multiline
-        placeholder="Start your message…"
+        placeholder={t("phMessageBody")}
         style={{ minHeight: 210 }}
       />
       {w.files.length > 0 && (
         <Card style={{ padding: 16, marginBottom: 18 }}>
-          <Text style={[s.heading, { fontSize: 13, marginBottom: 5 }]}>Attachments</Text>
+          <Text style={[s.heading, { fontSize: 13, marginBottom: 5 }]}>{t("attachments")}</Text>
           {w.files.map((f) => (
             <CheckRow
               key={f.id}
@@ -349,7 +346,7 @@ function EmailEditor({ draft }: { draft?: Partial<EmailDraft> & { id?: string }
           disabled={!!busy}
           onPress={() => void save(true)}
         >
-          Review email
+          {t("reviewEmail")}
         </Button>
         <Button
           icon={Save}
@@ -357,12 +354,10 @@ function EmailEditor({ draft }: { draft?: Partial<EmailDraft> & { id?: string }
           disabled={!!busy}
           onPress={() => void save(false)}
         >
-          Save draft
+          {t("saveDraft")}
         </Button>
       </View>
-      <Text style={[s.small, { marginTop: 13 }]}>
-        You’ll review the exact recipients, message, and attachments before anything is sent.
-      </Text>
+      <Text style={[s.small, { marginTop: 13 }]}>{t("reviewBeforeSendNote")}</Text>
     </Sheet>
   );
 }
@@ -444,20 +439,18 @@ function EventEditor({
   }
   return (
     <Sheet
-      title={e ? "Make a little time" : "Something to look forward to"}
-      subtitle={
-        e ? "Edit this event, then review your changes." : "Create an event in your calendar."
-      }
+      title={e ? t("editEventTitle") : t("newEventTitle")}
+      subtitle={e ? t("editEventSubtitle") : t("newEventSubtitle")}
       onClose={close}
     >
       <Field
-        label="Event title"
+        label={t("eventTitle")}
         value={title}
         onChangeText={setTitle}
-        placeholder="What are you making time for?"
+        placeholder={t("phEventTitle")}
       />
       <CheckRow
-        label="All-day event"
+        label={t("allDayEvent")}
         checked={allDay}
         onPress={() => {
           try {
@@ -479,46 +472,48 @@ function EventEditor({
         }}
       />
       <DateTimeEditor
-        label="Starts"
+        label={t("starts")}
         value={start}
         onChange={setStart}
         timeZone={zone}
         allDay={allDay}
       />
-      <DateTimeEditor label="Ends" value={end} onChange={setEnd} timeZone={zone} allDay={allDay} />
-      {allDay && (
-        <Text style={[s.small, { marginBottom: 15 }]}>
-          The end date is the day after the last day of your event.
-        </Text>
-      )}
+      <DateTimeEditor
+        label={t("ends")}
+        value={end}
+        onChange={setEnd}
+        timeZone={zone}
+        allDay={allDay}
+      />
+      {allDay && <Text style={[s.small, { marginBottom: 15 }]}>{t("endDateNote")}</Text>}
       <Field
-        label="Time zone"
+        label={t("timeZone")}
         value={zone}
         onChangeText={setZone}
         placeholder="America/Los_Angeles"
       />
       <Field
-        label="Location or meeting link"
+        label={t("locationLabel")}
         value={location}
         onChangeText={setLocation}
-        placeholder="Optional"
+        placeholder={t("optional")}
       />
       <Field
-        label="Attendees"
+        label={t("attendees")}
         value={attendees}
         onChangeText={setAttendees}
-        placeholder="Email addresses, separated by commas"
+        placeholder={t("phAttendees")}
       />
       <Field
-        label="Notes"
+        label={t("notes")}
         value={description}
         onChangeText={setDescription}
         multiline
-        placeholder="Anything else to keep in mind?"
+        placeholder={t("phNotes")}
       />
       {!!conflicts.length && (
         <Card style={{ backgroundColor: colors.orange, padding: 16, marginBottom: 16 }}>
-          <Text style={s.heading}>This time overlaps</Text>
+          <Text style={s.heading}>{t("timeOverlaps")}</Text>
           {conflicts.map((c) => (
             <Text key={c.id} style={s.muted}>
               {c.title} · {timeLabel(c.start, c.timeZone)}–{timeLabel(c.end, c.timeZone)}
@@ -529,11 +524,11 @@ function EventEditor({
       <ErrorNotice error={error} />
       <View style={[s.row, { gap: 10, flexWrap: "wrap" }]}>
         <Button primary icon={ShieldCheck} busy={busy} onPress={() => void propose()}>
-          Review {e ? "changes" : "event"}
+          {e ? t("reviewChanges") : t("reviewEvent")}
         </Button>
         {e && (
           <Button icon={Trash2} disabled={busy} danger onPress={() => void propose(true)}>
-            Review deletion
+            {t("reviewDeletion")}
           </Button>
         )}
       </View>
@@ -576,8 +571,7 @@ function ReviewDetail({ initial }: { initial: ActionProposal }) {
         const draft = eventDraftSchema.parse(action.data);
         if (action.kind === "calendar.update") {
           const eventId = action.data.eventId;
-          if (typeof eventId !== "string" || !eventId)
-            throw new Error("The event reference is missing. Open the event in Calendar again.");
+          if (typeof eventId !== "string" || !eventId) throw new Error(t("eventRefMissing"));
           next = { type: "event", event: { ...draft, id: eventId } };
         } else next = { type: "event", draft };
       }
@@ -596,12 +590,8 @@ function ReviewDetail({ initial }: { initial: ActionProposal }) {
   const email = action.kind === "email.send";
   return (
     <Sheet
-      title={pending ? "One last look" : action.title}
-      subtitle={
-        w.mode === "sample"
-          ? "This action stays in your local workspace."
-          : "Review this exact action before it changes your connected account."
-      }
+      title={pending ? t("oneLastLook") : action.title}
+      subtitle={w.mode === "sample" ? t("reviewLocalNote") : t("reviewLiveNote")}
       onClose={close}
     >
       <View style={[s.row, { gap: 13, marginBottom: 21 }]}>
@@ -612,44 +602,42 @@ function ReviewDetail({ initial }: { initial: ActionProposal }) {
           <Text style={s.heading}>{action.title}</Text>
           <Text style={s.small}>{action.kind.replace(".", " · ")}</Text>
         </View>
-        <Chip tint={pending ? colors.lavender : colors.green}>
-          {action.status.replace(/_/g, " ")}
-        </Chip>
+        <Chip tint={pending ? colors.lavender : colors.green}>{statusLabel(action.status)}</Chip>
       </View>
       <Card style={{ gap: 13 }}>
-        <ReviewLine label="Account" value={action.account || w.profile.email} />
+        <ReviewLine label={t("accountLabel")} value={action.account || w.profile.email} />
         {email ? (
           <>
-            <ReviewLine label="To" value={arrayText(d.to)} />
-            <ReviewLine label="Cc" value={arrayText(d.cc) || "None"} />
-            <ReviewLine label="Bcc" value={arrayText(d.bcc) || "None"} />
-            <ReviewLine label="Subject" value={String(d.subject || "")} />
+            <ReviewLine label={t("fieldTo")} value={arrayText(d.to)} />
+            <ReviewLine label={t("fieldCc")} value={arrayText(d.cc) || t("none")} />
+            <ReviewLine label={t("fieldBcc")} value={arrayText(d.bcc) || t("none")} />
+            <ReviewLine label={t("fieldSubject")} value={String(d.subject || "")} />
             <View style={s.divider} />
             <Text selectable style={[s.text, { lineHeight: 25 }]}>
               {String(d.body || "")}
             </Text>
             <View style={s.divider} />
-            <Text style={s.label}>Attachments</Text>
+            <Text style={s.label}>{t("attachments")}</Text>
             {Array.isArray(d.attachmentIds) && d.attachmentIds.length ? (
               d.attachmentIds.map((id) => {
                 const file = w.files.find((f) => f.id === id);
                 return (
                   <Text key={String(id)} style={s.text}>
-                    {file?.name || String(id)} · version {String(id).slice(-8)}
+                    {file?.name || String(id)} · {t("versionLabel", { v: String(id).slice(-8) })}
                   </Text>
                 );
               })
             ) : (
-              <Text style={s.muted}>No attachments</Text>
+              <Text style={s.muted}>{t("noAttachments")}</Text>
             )}
           </>
         ) : (
           <>
-            <ReviewLine label="Event" value={String(d.title || "")} />
+            <ReviewLine label={t("eventLabel")} value={String(d.title || "")} />
             {action.kind !== "calendar.delete" && (
               <>
                 <ReviewLine
-                  label="Starts"
+                  label={t("starts")}
                   value={
                     d.allDay
                       ? String(d.start || "")
@@ -657,25 +645,23 @@ function ReviewDetail({ initial }: { initial: ActionProposal }) {
                   }
                 />
                 <ReviewLine
-                  label="Ends"
+                  label={t("ends")}
                   value={
                     d.allDay
-                      ? `${String(d.end || "")} (exclusive)`
+                      ? `${String(d.end || "")}${t("exclusive")}`
                       : `${dateLabel(String(d.end || ""), { year: "numeric", month: "short", day: "numeric", timeZone: String(d.timeZone || "UTC") })} · ${timeLabel(String(d.end || ""), String(d.timeZone || "UTC"))}`
                   }
                 />
-                <ReviewLine label="Time zone" value={String(d.timeZone || "")} />
-                <ReviewLine label="All day" value={d.allDay ? "Yes" : "No"} />
-                <ReviewLine label="Location" value={String(d.location || "None")} />
-                <ReviewLine label="Attendees" value={arrayText(d.attendees) || "Just you"} />
-                <ReviewLine label="Notes" value={String(d.description || "None")} />
+                <ReviewLine label={t("timeZone")} value={String(d.timeZone || "")} />
+                <ReviewLine label={t("allDay")} value={d.allDay ? t("yes") : t("no")} />
+                <ReviewLine label={t("locationLabel")} value={String(d.location || t("none"))} />
+                <ReviewLine label={t("attendees")} value={arrayText(d.attendees) || t("justYou")} />
+                <ReviewLine label={t("notes")} value={String(d.description || t("none"))} />
               </>
             )}
-            <ReviewLine label="Calendar" value={String(d.calendarId || "primary")} />
+            <ReviewLine label={t("calendarLabel")} value={String(d.calendarId || "primary")} />
             <Text style={s.small}>
-              {action.kind === "calendar.delete"
-                ? "This removes the event and may notify its attendees."
-                : "Attendees may receive an invitation or update from your connected calendar."}
+              {action.kind === "calendar.delete" ? t("deleteEventNote") : t("inviteNote")}
             </Text>
           </>
         )}
@@ -691,38 +677,38 @@ function ReviewDetail({ initial }: { initial: ActionProposal }) {
       {pending ? (
         <>
           <Text style={[s.small, { marginVertical: 17 }]}>
-            Review expires{" "}
-            {new Date(action.expiresAt).toLocaleString(undefined, {
-              year: "numeric",
-              month: "short",
-              day: "numeric",
-              hour: "numeric",
-              minute: "2-digit",
-              timeZoneName: "short",
+            {t("reviewExpires", {
+              time: new Date(action.expiresAt).toLocaleString(undefined, {
+                year: "numeric",
+                month: "short",
+                day: "numeric",
+                hour: "numeric",
+                minute: "2-digit",
+                timeZoneName: "short",
+              }),
             })}
-            . Your approval applies only to the details shown above.
           </Text>
           <View style={[s.row, { gap: 10, flexWrap: "wrap" }]}>
             <Button primary icon={Check} busy={busy} onPress={() => void decide("approve")}>
               {w.mode === "sample"
-                ? "Approve locally"
+                ? t("approveLocally")
                 : email
-                  ? "Approve & send"
-                  : "Approve change"}
+                  ? t("approveSend")
+                  : t("approveChange")}
             </Button>
             {action.kind !== "calendar.delete" && (
               <Button icon={Edit3} disabled={busy} onPress={() => void edit()}>
-                Edit details
+                {t("editDetails")}
               </Button>
             )}
             <Button icon={X} disabled={busy} onPress={() => void decide("deny")}>
-              Don’t proceed
+              {t("dontProceed")}
             </Button>
           </View>
         </>
       ) : (
         <Button style={{ alignSelf: "flex-start", marginTop: 19 }} onPress={close}>
-          Done
+          {t("done")}
         </Button>
       )}
     </Sheet>
@@ -782,7 +768,7 @@ function FileDetail({ file: f }: { file: Artifact }) {
       });
       if (await Sharing.isAvailableAsync())
         await Sharing.shareAsync(target, { mimeType: "application/pdf", UTI: "com.adobe.pdf" });
-      else throw new Error("Sharing is not available on this device.");
+      else throw new Error(t("sharingUnavailable"));
     } catch (e) {
       setError(e instanceof Error ? e.message : String(e));
     }
@@ -790,32 +776,34 @@ function FileDetail({ file: f }: { file: Artifact }) {
   return (
     <Sheet
       title={f.name}
-      subtitle={`${f.pageCount} pages · ${Math.max(1, Math.round(f.size / 1024))} KB · ${f.source}`}
+      subtitle={t("fileMeta", {
+        n: f.pageCount,
+        kb: Math.max(1, Math.round(f.size / 1024)),
+        source: f.source,
+      })}
       onClose={close}
       wide
     >
       <PdfReader url={url} token={api.token} pageCount={f.pageCount} />
       <View style={[s.row, { gap: 10, marginVertical: 18, flexWrap: "wrap" }]}>
         <Button icon={Download} onPress={() => void share()}>
-          {Platform.OS === "web" ? "Open / download" : "Save or share"}
+          {Platform.OS === "web" ? t("openDownload") : t("saveOrShare")}
         </Button>
         <Button
           icon={Send}
           onPress={() => open({ type: "email", draft: { attachmentIds: [f.id] } })}
         >
-          Attach to email
+          {t("attachToEmail")}
         </Button>
       </View>
       {f.fields && f.fields.length > 0 && (
         <Card>
-          <SectionHeading title="Fill this form" />
-          <Text style={[s.muted, { marginBottom: 18 }]}>
-            Add your details below. Saving creates a new copy and keeps the original intact.
-          </Text>
+          <SectionHeading title={t("fillForm")} />
+          <Text style={[s.muted, { marginBottom: 18 }]}>{t("fillFormNote")}</Text>
           {f.fields.map((field) =>
             field.type === "unsupported" ? (
               <Text key={field.name} style={s.muted}>
-                {field.name} · this field type is not supported
+                {t("unsupportedField", { name: field.name })}
               </Text>
             ) : field.type === "checkbox" ? (
               <CheckRow
@@ -834,14 +822,14 @@ function FileDetail({ file: f }: { file: Artifact }) {
             ),
           )}
           <Button primary icon={Save} busy={busy} onPress={() => void fill()}>
-            Save filled copy
+            {t("saveFilledCopy")}
           </Button>
         </Card>
       )}
       <ErrorNotice error={error} />
       <Text style={[s.small, { marginTop: 15 }]}>
-        Added {dateLabel(f.createdAt)}
-        {f.parentId ? " · filled copy" : ""}
+        {t("addedLabel", { date: dateLabel(f.createdAt) })}
+        {f.parentId ? t("filledCopySuffix") : ""}
       </Text>
     </Sheet>
   );
@@ -893,11 +881,7 @@ function BrowserDetail({ initial }: { initial: BrowserSession }) {
           result.failures.map((failure) => `${failure.name}: ${failure.message}`).join("\n"),
         );
       const files = result.files;
-      notify(
-        files.length
-          ? `${files.length} PDF download${files.length === 1 ? "" : "s"} added to Files.`
-          : "No new PDF downloads in this session.",
-      );
+      notify(files.length ? t("downloadsAdded", { n: files.length }) : t("noDownloads"));
     } catch (e) {
       setError(e instanceof Error ? e.message : String(e));
     } finally {
@@ -926,14 +910,17 @@ function BrowserDetail({ initial }: { initial: BrowserSession }) {
   return (
     <Sheet
       title={browserSite(browser.url)}
-      subtitle={`${browser.status} · updated ${timeLabel(browser.updatedAt)}`}
+      subtitle={t("browserMeta", {
+        status: statusLabel(browser.status),
+        time: timeLabel(browser.updatedAt),
+      })}
       onClose={close}
       wide
     >
       <View style={[s.row, { gap: 10, marginBottom: 16 }]}>
         <View style={{ flex: 1 }}>
           <Field
-            label="Website address"
+            label={t("websiteAddress")}
             value={url}
             onChangeText={setUrl}
             autoCapitalize="none"
@@ -942,18 +929,22 @@ function BrowserDetail({ initial }: { initial: BrowserSession }) {
           />
         </View>
         <Button primary busy={busy} disabled={loading || !url.trim()} onPress={() => void mutate()}>
-          {browser.status === "closed" ? "Reopen" : browser.status === "error" ? "Reconnect" : "Go"}
+          {browser.status === "closed"
+            ? t("reopen")
+            : browser.status === "error"
+              ? t("reconnect")
+              : t("go")}
         </Button>
       </View>
       <ErrorNotice error={error} />
       {loading ? (
         <View style={[s.row, { gap: 10, paddingVertical: 24 }]}>
           {error ? (
-            <Button onPress={() => setRetry(retry + 1)}>Retry connection</Button>
+            <Button onPress={() => setRetry(retry + 1)}>{t("retryConnection")}</Button>
           ) : (
             <>
               <ActivityIndicator color={colors.blueDark} />
-              <Text style={s.muted}>Connecting to your browser…</Text>
+              <Text style={s.muted}>{t("connectingBrowser")}</Text>
             </>
           )}
         </View>
@@ -968,13 +959,9 @@ function BrowserDetail({ initial }: { initial: BrowserSession }) {
       ) : (
         <Empty
           icon={Globe2}
-          title={
-            browser.status === "closed" ? "This session is closed" : "Preview is not available"
-          }
+          title={browser.status === "closed" ? t("sessionClosed") : t("previewUnavailable")}
           detail={
-            browser.status === "closed"
-              ? "Your profile and downloads are saved. Reopen to continue where you left off."
-              : "Reconnect to continue with your saved browser profile."
+            browser.status === "closed" ? t("sessionClosedDetail") : t("previewUnavailableDetail")
           }
         />
       )}
@@ -984,22 +971,22 @@ function BrowserDetail({ initial }: { initial: BrowserSession }) {
             icon={ExternalLink}
             onPress={() => void Linking.openURL(api.url(browser.consoleUrl || ""))}
           >
-            Open browser in a window
+            {t("openBrowserWindow")}
           </Button>
         )}
         {!loading && (
           <Button icon={RotateCw} disabled={busy} onPress={() => setRetry(retry + 1)}>
-            Refresh connection
+            {t("refreshConnection")}
           </Button>
         )}
         {!loading && browser.status !== "closed" && (
           <Button icon={Download} busy={busy} onPress={() => void importDownloads()}>
-            Import PDF downloads
+            {t("importDownloads")}
           </Button>
         )}
         {!loading && browser.status !== "closed" && (
           <Button icon={X} danger busy={busy} onPress={() => void mutate(true)}>
-            Close session
+            {t("closeSession")}
           </Button>
         )}
       </View>
diff --git a/apps/mobile/src/jev-actions.ts b/apps/mobile/src/jev-actions.ts
index 760acea69..bda82899b 100644
--- a/apps/mobile/src/jev-actions.ts
+++ b/apps/mobile/src/jev-actions.ts
@@ -7,6 +7,7 @@ import {
   jevToolResultSchema,
   parseJevAction,
 } from "../../../packages/domain/src/jev";
+import { t } from "./strings";
 
 export function parseJevResult(value: unknown): JevToolResult | null {
   let result = value;
@@ -100,7 +101,7 @@ export function retryChoiceAvailable(
 }
 
 export function selectionText(panel: JevPanel, optionId: string): string {
-  if (!panel.options.some((option) => option.id === optionId)) throw new Error("Unknown choice");
+  if (!panel.options.some((option) => option.id === optionId)) throw new Error(t("unknownChoice"));
   return encodeJevAction({
     panelId: panel.id,
     threadId: panel.threadId,
@@ -148,11 +149,11 @@ function panelForAction(messages: readonly unknown[], action: JevAction): JevPan
 export function displayJevUserMessage(text: string, precedingMessages: readonly unknown[]): string {
   if (!text.startsWith(jevActionPrefix)) return text;
   const action = actionFromText(text);
-  if (!action) return "Choice unavailable";
+  if (!action) return t("choiceUnavailable");
   const option = panelForAction(precedingMessages, action)?.options.find(
     (candidate) => candidate.id === action.optionId,
   );
-  return option ? `Selected: ${option.label}` : "Choice unavailable";
+  return option ? t("selectedLabel", { label: option.label }) : t("choiceUnavailable");
 }
 
 export function confirmedJevSelection(
diff --git a/apps/mobile/src/jev-tool-card.tsx b/apps/mobile/src/jev-tool-card.tsx
index 94563021a..62ea0e84e 100644
--- a/apps/mobile/src/jev-tool-card.tsx
+++ b/apps/mobile/src/jev-tool-card.tsx
@@ -8,6 +8,7 @@ import {
   retryChoiceAvailable,
   selectionText,
 } from "./jev-actions";
+import { t } from "./strings";
 import { Button, Card, colors, ErrorNotice, s } from "./ui";
 
 type JevInteraction = {
@@ -29,10 +30,10 @@ export const JevInteractionContext = createContext<JevInteraction>({
   canRetry: false,
   confirmedSelection: () => null,
   send: async () => {
-    throw new Error("Open an active conversation to choose an option.");
+    throw new Error(t("needActiveChatToChoose"));
   },
   retry: async () => {
-    throw new Error("Open an active conversation to retry a choice.");
+    throw new Error(t("needActiveChatToRetry"));
   },
 });
 
@@ -40,7 +41,7 @@ function SourceLink({ title, url }: { title: string; url: string }) {
   return (
     <Pressable
       accessibilityRole="link"
-      accessibilityLabel={`Source: ${title}`}
+      accessibilityLabel={t("sourceLink", { title })}
       onPress={() => void Linking.openURL(url)}
       style={({ pressed }) => [s.row, { gap: 4, opacity: pressed ? 0.65 : 1 }]}
     >
@@ -70,11 +71,11 @@ function ChoiceButton({
   onChoose: (optionId: string) => void;
 }) {
   if (panel.type === "comparison") {
-    const caption = /exhibit/i.test(panel.title) ? "Choose this exhibit" : "Choose this option";
+    const caption = /exhibit/i.test(panel.title) ? t("chooseExhibit") : t("chooseOption");
     return (
       <Pressable
         accessibilityRole="button"
-        accessibilityLabel={`${caption}: ${option.label} (option ${position})`}
+        accessibilityLabel={t("chooseOptionLabel", { caption, label: option.label, n: position })}
         accessibilityState={{ disabled: disabled || pending, busy: pending, selected }}
         disabled={disabled || pending}
         onPress={() => onChoose(option.id)}
@@ -118,13 +119,13 @@ export function JevToolCard({ result, loading }: { result: unknown; loading: boo
     return (
       <View style={[s.row, { gap: 10, padding: 14 }]}>
         <ActivityIndicator size="small" color={colors.blueDark} />
-        <Text style={s.muted}>Preparing choices…</Text>
+        <Text style={s.muted}>{t("preparingChoices")}</Text>
       </View>
     );
   }
 
   const parsed = parseJevResult(result);
-  if (!parsed) return <ErrorNotice error="The choices could not be displayed. Please retry." />;
+  if (!parsed) return <ErrorNotice error={t("choicesUndisplayable")} />;
   if (parsed.error) return <ErrorNotice error={parsed.error} />;
   const panel = parsed.panel;
   if (!panel) return null;
@@ -191,13 +192,13 @@ export function JevToolCard({ result, loading }: { result: unknown; loading: boo
     <Card style={{ width: "100%", maxWidth: 440, padding: 17, gap: 13 }}>
       <View style={{ gap: 5 }}>
         <Text style={s.heading}>{panel.title}</Text>
-        {panel.mode === "sample" && <Text style={s.small}>Sample · scripted decisions</Text>}
-        {panel.mode === "live" && <Text style={s.small}>Live Jev · model decisions</Text>}
+        {panel.mode === "sample" && <Text style={s.small}>{t("sampleScripted")}</Text>}
+        {panel.mode === "live" && <Text style={s.small}>{t("liveJev")}</Text>}
         {preferredOption && !selectedId && (
-          <Text style={s.small}>Previous preference: {preferredOption.label}</Text>
+          <Text style={s.small}>{t("previousPreference", { label: preferredOption.label })}</Text>
         )}
-        {stale && <Text style={s.small}>Earlier choices</Text>}
-        {selectedId && <Text style={s.small}>Choice submitted</Text>}
+        {stale && <Text style={s.small}>{t("earlierChoices")}</Text>}
+        {selectedId && <Text style={s.small}>{t("choiceSubmitted")}</Text>}
       </View>
       {panel.type === "clarification" ? (
         <View style={{ flexDirection: "row", flexWrap: "wrap", gap: 8 }}>
@@ -262,7 +263,7 @@ export function JevToolCard({ result, loading }: { result: unknown; loading: boo
           }
           onPress={() => void choose(failedOptionId, true)}
         >
-          Retry choice
+          {t("retryChoice")}
         </Button>
       )}
     </Card>
diff --git a/apps/mobile/src/mail-tool-card.tsx b/apps/mobile/src/mail-tool-card.tsx
index 3e0ed193f..f731d33e5 100644
--- a/apps/mobile/src/mail-tool-card.tsx
+++ b/apps/mobile/src/mail-tool-card.tsx
@@ -3,6 +3,7 @@ import { useContext } from "react";
 import { ActivityIndicator, Text, View } from "react-native";
 import { z } from "zod";
 import { BrowserRunContext } from "./browser-tool-card";
+import { t } from "./strings";
 import { Button, Card, colors, ErrorNotice, s } from "./ui";
 import { useWorkspace } from "./workspace";
 
@@ -50,7 +51,7 @@ export function MailToolCard({
           <Mail size={16} color={colors.muted} />
         )}
         <Text style={s.muted}>
-          {!active ? "Mail reading paused" : search ? "Checking your inbox…" : "Reading the email…"}
+          {!active ? t("mailPaused") : search ? t("checkingInbox") : t("readingEmail")}
         </Text>
       </View>
     );
@@ -58,16 +59,15 @@ export function MailToolCard({
     const parsed = z
       .object({ matches: z.array(z.object({ id: z.string() })), truncated: z.boolean() })
       .safeParse(value);
-    if (!parsed.success)
-      return <ErrorNotice error="The mailbox did not return readable results." />;
+    if (!parsed.success) return <ErrorNotice error={t("mailboxUnreadable")} />;
     const count = parsed.data.matches.length;
     return (
       <View style={[s.row, { gap: 9, padding: 12 }]}>
         <Search size={16} color={colors.muted} />
         <Text style={s.muted}>
           {count
-            ? `Found ${parsed.data.truncated ? "at least " : ""}${count} ${count === 1 ? "email" : "emails"}`
-            : "No matching emails"}
+            ? t("foundEmails", { prefix: parsed.data.truncated ? t("atLeast") : "", n: count })
+            : t("noMatchingEmails")}
         </Text>
       </View>
     );
@@ -75,9 +75,9 @@ export function MailToolCard({
   const parsed = z
     .object({ messages: z.array(messageSchema), truncated: z.boolean() })
     .safeParse(value);
-  if (!parsed.success) return <ErrorNotice error="The email could not be displayed." />;
+  if (!parsed.success) return <ErrorNotice error={t("emailUndisplayable")} />;
   const message = parsed.data.messages.at(-1);
-  if (!message) return <Text style={s.muted}>No messages in this thread.</Text>;
+  if (!message) return <Text style={s.muted}>{t("noMessagesInThread")}</Text>;
   return (
     <Card
       style={{ padding: 18, gap: 14, backgroundColor: "#F0EFF2", maxWidth: 440, width: "100%" }}
@@ -89,10 +89,12 @@ export function MailToolCard({
         <View style={{ flex: 1 }}>
           <Text style={[s.text, { fontWeight: "600" }]}>{message.sender}</Text>
           <Text style={s.small}>
-            Email ·{" "}
-            {parsed.data.messages.length === 1
-              ? "1 message"
-              : `${parsed.data.messages.length} messages`}
+            {t("emailMeta", {
+              n:
+                parsed.data.messages.length === 1
+                  ? t("oneMessage")
+                  : t("nMessages", { n: parsed.data.messages.length }),
+            })}
           </Text>
         </View>
       </View>
@@ -100,9 +102,9 @@ export function MailToolCard({
       <Text style={s.muted} numberOfLines={3}>
         {message.body}
       </Text>
-      {parsed.data.truncated && <Text style={s.small}>Showing an excerpt of this thread.</Text>}
+      {parsed.data.truncated && <Text style={s.small}>{t("excerptNote")}</Text>}
       <Button small icon={Mail} onPress={() => open({ type: "mail", mail: message })}>
-        Open email
+        {t("openEmail")}
       </Button>
     </Card>
   );
diff --git a/apps/mobile/src/relative-date.ts b/apps/mobile/src/relative-date.ts
index 642c6d958..b06211f06 100644
--- a/apps/mobile/src/relative-date.ts
+++ b/apps/mobile/src/relative-date.ts
@@ -1,6 +1,8 @@
+import { t } from "./strings";
+
 /**
  * Relative time for activity timestamps. Values slightly in the future are
- * clock skew and still read "Just now"; further future values fall back to a
+ * clock skew and still read as "just now"; further future values fall back to a
  * date instead of claiming they just happened.
  */
 export function relativeDate(value: string, now = Date.now()): string {
@@ -9,12 +11,12 @@ export function relativeDate(value: string, now = Date.now()): string {
   const diff = now - parsed;
   if (diff < -60_000) return dayLabel(parsed);
   const elapsed = Math.max(0, diff);
-  if (elapsed < 60_000) return "Just now";
-  if (elapsed < 3600_000) return `${Math.floor(elapsed / 60_000)}m ago`;
-  if (elapsed < 86400_000) return `${Math.floor(elapsed / 3600_000)}h ago`;
+  if (elapsed < 60_000) return t("justNow");
+  if (elapsed < 3600_000) return t("minutesAgo", { n: Math.floor(elapsed / 60_000) });
+  if (elapsed < 86400_000) return t("hoursAgo", { n: Math.floor(elapsed / 3600_000) });
   return dayLabel(parsed);
 }
 
 function dayLabel(value: number): string {
-  return new Date(value).toLocaleDateString("en-US", { month: "short", day: "numeric" });
+  return new Date(value).toLocaleDateString("zh-CN", { month: "short", day: "numeric" });
 }
diff --git a/apps/mobile/src/screens.tsx b/apps/mobile/src/screens.tsx
index 5f2345a84..5c04afba1 100644
--- a/apps/mobile/src/screens.tsx
+++ b/apps/mobile/src/screens.tsx
@@ -41,6 +41,7 @@ import type {
 import { API_URL } from "./api";
 import { browserAddress } from "./browser-address";
 import { localDateTime, startOfZonedDay, zonedInstant } from "./date-time";
+import { statusLabel, t } from "./strings";
 import {
   Button,
   Card,
@@ -94,7 +95,7 @@ export function TodayScreen() {
         <View style={{ flex: 1, gap: 15, zIndex: 1 }}>
           <View style={[s.row, { gap: 7 }]}>
             <Sparkles size={13} color={colors.blueDark} />
-            <Text style={[s.label, { color: colors.blueDark }]}>A little clarity, every day</Text>
+            <Text style={[s.label, { color: colors.blueDark }]}>{t("homeTagline")}</Text>
           </View>
           <Text
             style={{
@@ -105,20 +106,20 @@ export function TodayScreen() {
               color: colors.text,
             }}
           >
-            Your day, with a little{"\n"}more room to breathe.
+            {t("homeTitle")}
           </Text>
           <Text style={[s.muted, { maxWidth: 420, color: "#617680" }]}>
-            {events.length ? `${events.length} things on your calendar` : "Your calendar has room"}
-            {unread.length ? `, ${unread.length} unread emails` : ""}.{"\n"}Let’s make space for
-            what matters.
+            {events.length ? t("thingsOnCalendar", { n: events.length }) : t("calendarHasRoom")}
+            {unread.length ? t("unreadEmailsSuffix", { n: unread.length }) : ""}
+            {t("makeSpaceClosing")}
           </Text>
           <Button
-            onPress={() => ask("Help me plan my day")}
+            onPress={() => ask(t("planMyDayPrompt"))}
             icon={Sparkles}
             primary
             style={{ alignSelf: "flex-start", marginTop: 5 }}
           >
-            Plan my day
+            {t("planMyDay")}
           </Button>
         </View>
         {wide && (
@@ -159,7 +160,7 @@ export function TodayScreen() {
               ]}
             >
               <Check size={14} color="#739174" />
-              <Text style={s.small}>A lighter day</Text>
+              <Text style={s.small}>{t("homeCardLighterDay")}</Text>
             </View>
             <View
               style={[
@@ -177,7 +178,7 @@ export function TodayScreen() {
               ]}
             >
               <CalendarDays size={17} color={colors.blueDark} />
-              <Text style={s.small}>Everything, together</Text>
+              <Text style={s.small}>{t("homeCardEverythingTogether")}</Text>
             </View>
           </View>
         )}
@@ -185,25 +186,25 @@ export function TodayScreen() {
       <View style={{ flexDirection: "row", gap: 13, flexWrap: "wrap" }}>
         {[
           {
-            label: "UNREAD EMAILS",
+            label: t("statUnread"),
             value: unread.length,
-            note: "A fresh look at your inbox",
+            note: t("statUnreadNote"),
             icon: Mail,
             section: "mail" as const,
             tint: colors.sky,
           },
           {
-            label: "ON THE CALENDAR",
+            label: t("statCalendar"),
             value: events.length,
-            note: "Make room for your priorities",
+            note: t("statCalendarNote"),
             icon: CalendarDays,
             section: "calendar" as const,
             tint: colors.green,
           },
           {
-            label: "WAITING FOR YOU",
+            label: t("statWaiting"),
             value: pending.length,
-            note: "Your review keeps things moving",
+            note: t("statWaitingNote"),
             icon: ShieldCheck,
             section: "activity" as const,
             tint: colors.lavender,
@@ -238,8 +239,8 @@ export function TodayScreen() {
       <View style={{ flexDirection: wide ? "row" : "column", gap: 22 }}>
         <Card style={{ flex: 1 }}>
           <SectionHeading
-            title="On your calendar"
-            action="Full calendar"
+            title={t("homeCalendarTitle")}
+            action={t("homeCalendarAction")}
             onPress={() => navigate("calendar")}
           />
           {events.length ? (
@@ -247,8 +248,8 @@ export function TodayScreen() {
           ) : (
             <Empty
               icon={CalendarDays}
-              title="Some breathing room"
-              detail="No events scheduled today."
+              title={t("homeCalEmptyTitle")}
+              detail={t("homeCalEmptyDetail")}
             />
           )}
           <Pressable
@@ -265,13 +266,13 @@ export function TodayScreen() {
             ]}
           >
             <Plus size={15} color={colors.muted} />
-            <Text style={s.small}>Make time for something</Text>
+            <Text style={s.small}>{t("homeMakeTime")}</Text>
           </Pressable>
         </Card>
         <Card style={{ flex: 1 }}>
           <SectionHeading
-            title="From your inbox"
-            action="Open mail"
+            title={t("homeInboxTitle")}
+            action={t("homeInboxAction")}
             onPress={() => navigate("mail")}
           />
           {w.mail.length ? (
@@ -312,40 +313,36 @@ export function TodayScreen() {
           ) : (
             <Empty
               icon={Inbox}
-              title="Inbox is quiet"
-              detail="Connect Google to bring your messages here."
+              title={t("homeInboxEmptyTitle")}
+              detail={t("homeInboxEmptyDetail")}
             />
           )}
         </Card>
       </View>
       <View style={{ flexDirection: wide ? "row" : "column", gap: 22 }}>
         <Card style={{ flex: 1, backgroundColor: "#F0F0E7" }}>
-          <SectionHeading title="A hand with the little things" />
-          <Text style={[s.muted, { marginBottom: 15 }]}>
-            Start with a thought. We’ll take it from there.
-          </Text>
-          {[
-            "What needs my attention today?",
-            "Help me catch up on my inbox",
-            "Show my recent documents",
-          ].map((prompt) => (
-            <Pressable
-              key={prompt}
-              onPress={() => ask(prompt)}
-              style={[
-                s.between,
-                { borderTopWidth: 1, borderTopColor: "#E1E2D9", paddingVertical: 13 },
-              ]}
-            >
-              <Text style={[s.text, { fontSize: 12 }]}>{prompt}</Text>
-              <ArrowUpRight size={15} color={colors.muted} />
-            </Pressable>
-          ))}
+          <SectionHeading title={t("homeLittleThingsTitle")} />
+          <Text style={[s.muted, { marginBottom: 15 }]}>{t("homeLittleThingsDetail")}</Text>
+          {[t("homePromptAttention"), t("homePromptCatchUp"), t("homePromptDocuments")].map(
+            (prompt) => (
+              <Pressable
+                key={prompt}
+                onPress={() => ask(prompt)}
+                style={[
+                  s.between,
+                  { borderTopWidth: 1, borderTopColor: "#E1E2D9", paddingVertical: 13 },
+                ]}
+              >
+                <Text style={[s.text, { fontSize: 12 }]}>{prompt}</Text>
+                <ArrowUpRight size={15} color={colors.muted} />
+              </Pressable>
+            ),
+          )}
         </Card>
         <Card style={{ flex: 1 }}>
           <SectionHeading
-            title={pending.length ? "Ready for your review" : "Recent activity"}
-            action="View all"
+            title={pending.length ? t("homeReviewReady") : t("homeRecentActivity")}
+            action={t("homeViewAll")}
             onPress={() => navigate("activity")}
           />
           {pending.length
@@ -355,7 +352,7 @@ export function TodayScreen() {
                   <LinkRow
                     key={a.id}
                     title={a.title}
-                    detail="Prepared · waiting for your approval"
+                    detail={t("homePreparedWaiting")}
                     onPress={() => open({ type: "review", action: a })}
                     icon={ShieldCheck}
                     tint={colors.lavender}
@@ -375,9 +372,7 @@ export function TodayScreen() {
                 </View>
               ))}
           {!pending.length && !w.activity.length && (
-            <Text style={s.muted}>
-              Your workspace is ready. Things you do here will appear in your activity.
-            </Text>
+            <Text style={s.muted}>{t("homeWorkspaceReady")}</Text>
           )}
         </Card>
       </View>
@@ -423,7 +418,7 @@ export function AgendaRow({
     >
       <View style={{ width: 65 }}>
         <Text style={[s.text, { fontSize: 11 }]}>
-          {e.allDay ? "All day" : timeLabel(e.start, e.timeZone)}
+          {e.allDay ? t("allDay") : timeLabel(e.start, e.timeZone)}
         </Text>
         {!e.allDay && (
           <Text style={[s.small, { fontSize: 10 }]}>{timeLabel(e.end, e.timeZone)}</Text>
@@ -440,7 +435,8 @@ export function AgendaRow({
       <View style={{ flex: 1, gap: 3 }}>
         <Text style={[s.text, { fontSize: 13, fontWeight: "500" }]}>{e.title}</Text>
         <Text numberOfLines={1} style={[s.small, { fontSize: 11 }]}>
-          {e.location || (e.attendees.length ? `${e.attendees.length} attendees` : "Time for you")}
+          {e.location ||
+            (e.attendees.length ? t("attendeesCount", { n: e.attendees.length }) : t("timeForYou"))}
         </Text>
       </View>
       <ChevronRight size={14} color={colors.muted} />
@@ -496,8 +492,8 @@ export function MailScreen() {
         >
           <Search size={16} color={colors.muted} />
           <TextInput
-            accessibilityLabel="Search mail"
-            placeholder="Search your inbox"
+            accessibilityLabel={t("searchMail")}
+            placeholder={t("searchInboxPlaceholder")}
             placeholderTextColor={colors.muted}
             value={query}
             onChangeText={setQuery}
@@ -505,20 +501,20 @@ export function MailScreen() {
           />
         </View>
         <Button onPress={() => open({ type: "email" })} primary icon={Plus}>
-          Compose
+          {t("compose")}
         </Button>
       </View>
       <ErrorNotice error={error} />
       <Card>
         <View style={[s.row, { gap: 10, marginBottom: 15, flexWrap: "wrap" }]}>
           <Button small primary={tab === "all"} onPress={() => setTab("all")}>
-            All messages
+            {t("tabAllMessages")}
           </Button>
           <Button small primary={tab === "unread"} onPress={() => setTab("unread")}>
-            Unread · {w.mail.filter((m) => m.unread).length}
+            {t("tabUnread", { n: w.mail.filter((m) => m.unread).length })}
           </Button>
           <Button small primary={tab === "drafts"} onPress={() => setTab("drafts")}>
-            Drafts · {drafts.length}
+            {t("tabDrafts", { n: drafts.length })}
           </Button>
         </View>
         {tab === "drafts" ? (
@@ -528,16 +524,12 @@ export function MailScreen() {
                 key={d.id}
                 icon={Mail}
                 title={d.subject}
-                detail={`To: ${d.to.join(", ")} · saved ${dateLabel(d.createdAt)}`}
+                detail={t("draftTo", { to: d.to.join(", "), date: dateLabel(d.createdAt) })}
                 onPress={() => open({ type: "email", draft: d })}
               />
             ))
           ) : (
-            <Empty
-              icon={Mail}
-              title="A fresh page"
-              detail="Messages you save as drafts will be here when you’re ready."
-            />
+            <Empty icon={Mail} title={t("draftsEmptyTitle")} detail={t("draftsEmptyDetail")} />
           )
         ) : items.length ? (
           items.map((m, i) => (
@@ -563,7 +555,7 @@ export function MailScreen() {
                   <View style={[s.row, { gap: 4, marginTop: 2 }]}>
                     <FileText size={12} color={colors.muted} />
                     <Text style={s.small}>
-                      {m.attachments.length} attachment{m.attachments.length > 1 ? "s" : ""}
+                      {t("attachmentsCount", { n: m.attachments.length })}
                     </Text>
                   </View>
                 )}
@@ -578,12 +570,8 @@ export function MailScreen() {
         ) : (
           <Empty
             icon={Inbox}
-            title={query ? "No matching messages" : "Nothing in your inbox"}
-            detail={
-              query
-                ? "Try a different name or subject."
-                : "Connect Google in Connections to read your mail here."
-            }
+            title={query ? t("mailNoMatch") : t("mailEmpty")}
+            detail={query ? t("mailNoMatchDetail") : t("mailEmptyDetail")}
           />
         )}
       </Card>
@@ -689,26 +677,26 @@ export function CalendarScreen() {
       <View style={[s.between, { gap: 12, flexWrap: "wrap" }]}>
         <View style={[s.row, { gap: 8 }]}>
           <Text style={s.title}>
-            {anchor.toLocaleDateString("en-US", { month: "long", year: "numeric" })}
+            {anchor.toLocaleDateString("zh-CN", { month: "long", year: "numeric" })}
           </Text>
           <IconButton
             icon={ChevronLeft}
-            label="Previous week"
+            label={t("calPreviousWeek")}
             onPress={() => setDate(plusDays(date, -7))}
           />
           <IconButton
             icon={ChevronRight}
-            label="Next week"
+            label={t("calNextWeek")}
             onPress={() => setDate(plusDays(date, 7))}
           />
         </View>
         <Button primary icon={Plus} disabled={!writable} onPress={newEvent}>
-          New event
+          {t("calNewEvent")}
         </Button>
       </View>
       {calendars.length > 0 && (
         <View style={{ gap: 9 }}>
-          <Text style={s.label}>Your calendars</Text>
+          <Text style={s.label}>{t("calYourCalendars")}</Text>
           <View style={[s.row, { gap: 8, flexWrap: "wrap" }]}>
             {calendars.map((c) => (
               <Button
@@ -718,7 +706,7 @@ export function CalendarScreen() {
                 onPress={() => setCalendarId(c.id)}
               >
                 {c.name}
-                {["owner", "writer"].includes(c.accessRole) ? "" : " · read only"}
+                {["owner", "writer"].includes(c.accessRole) ? "" : t("calReadOnly")}
               </Button>
             ))}
           </View>
@@ -747,7 +735,7 @@ export function CalendarScreen() {
                   backgroundColor: key === date ? colors.sky : "transparent",
                 }}
               >
-                <Text style={s.small}>{day.toLocaleDateString("en-US", { weekday: "short" })}</Text>
+                <Text style={s.small}>{day.toLocaleDateString("zh-CN", { weekday: "short" })}</Text>
                 <Text
                   style={[
                     s.title,
@@ -777,26 +765,27 @@ export function CalendarScreen() {
         <View style={[s.between, { gap: 10, flexWrap: "wrap" }]}>
           <Text style={s.heading}>
             {all
-              ? "The next 30 days"
+              ? t("calNext30")
               : dateLabel(`${date}T12:00:00`, { weekday: "long", month: "long", day: "numeric" })}
           </Text>
           <Button small onPress={() => setAll(!all)}>
-            {all ? "Selected day" : "Next 30 days"}
+            {all ? t("calSelectedDay") : t("calNext30")}
           </Button>
         </View>
         <Text style={[s.small, { marginTop: 7, marginBottom: 13 }]}>
-          {selected?.name || "Your calendar"} · {zone}. Events show their own time zone.
+          {selected?.name || t("calYourCalendar")} · {zone}
+          {t("calZoneNote")}
         </Text>
         <ErrorNotice error={error} />
         {!!error && (
           <Button small onPress={() => setRetry(retry + 1)}>
-            Try again
+            {t("calTryAgain")}
           </Button>
         )}
         {loading ? (
           <View style={[s.row, { gap: 10, paddingVertical: 35, justifyContent: "center" }]}>
             <ActivityIndicator size="small" color={colors.blueDark} />
-            <Text style={s.muted}>Checking your calendar…</Text>
+            <Text style={s.muted}>{t("calChecking")}</Text>
           </View>
         ) : events.length ? (
           events.map((e, i) => (
@@ -810,16 +799,12 @@ export function CalendarScreen() {
           !error && (
             <Empty
               icon={CalendarDays}
-              title="A little open space"
-              detail={
-                all
-                  ? "There’s nothing scheduled for the next 30 days."
-                  : "There’s nothing on the calendar for this day."
-              }
+              title={t("calEmptyTitle")}
+              detail={all ? t("calEmpty30") : t("calEmptyDay")}
             >
               {writable && (
                 <Button icon={Plus} onPress={newEvent}>
-                  Add an event
+                  {t("calAddEvent")}
                 </Button>
               )}
             </Empty>
@@ -856,13 +841,13 @@ export function BrowserScreen() {
         <View style={[s.row, { gap: 12, marginBottom: 15 }]}>
           <Globe2 size={22} color={colors.blueDark} />
           <View>
-            <Text style={s.heading}>A place for your open tabs</Text>
-            <Text style={s.muted}>Browse in a private, persistent workspace session.</Text>
+            <Text style={s.heading}>{t("browserTabsTitle")}</Text>
+            <Text style={s.muted}>{t("browserTabsDetail")}</Text>
           </View>
         </View>
         <View style={[s.row, { gap: 10 }]}>
           <TextInput
-            accessibilityLabel="Website address"
+            accessibilityLabel={t("websiteAddress")}
             value={url}
             onChangeText={setUrl}
             onSubmitEditing={() => void create()}
@@ -878,13 +863,13 @@ export function BrowserScreen() {
             disabled={!url.trim()}
             onPress={() => void create()}
           >
-            Open session
+            {t("browserOpenSession")}
           </Button>
         </View>
         <ErrorNotice error={error} />
       </Card>
       <Card>
-        <SectionHeading title="Browser sessions" />
+        <SectionHeading title={t("browserSessions")} />
         {w.browsers.length ? (
           w.browsers.map((b) => (
             <Pressable
@@ -902,12 +887,14 @@ export function BrowserScreen() {
                   <Globe2 size={20} color={colors.blueDark} />
                 </View>
                 <View style={{ flex: 1, gap: 4 }}>
-                  <Text style={s.heading}>{b.title || "Browser session"}</Text>
+                  <Text style={s.heading}>{b.title || t("browserSessionFallback")}</Text>
                   <Text style={s.muted} numberOfLines={1}>
                     {b.url}
                   </Text>
                 </View>
-                <Chip tint={b.status === "active" ? colors.green : colors.canvas}>{b.status}</Chip>
+                <Chip tint={b.status === "active" ? colors.green : colors.canvas}>
+                  {statusLabel(b.status)}
+                </Chip>
                 <ArrowUpRight size={17} color={colors.muted} />
               </View>
               {!!b.previewUrl && (
@@ -925,11 +912,7 @@ export function BrowserScreen() {
             </Pressable>
           ))
         ) : (
-          <Empty
-            icon={Globe2}
-            title="Start with a website"
-            detail="Open a session above to keep your browsing together. Live previews appear when the browser worker is configured."
-          />
+          <Empty icon={Globe2} title={t("browserEmptyTitle")} detail={t("browserEmptyDetail")} />
         )}
       </Card>
     </View>
@@ -952,8 +935,7 @@ export function FilesScreen() {
       let artifact: Artifact;
       if (Platform.OS === "web") {
         const form = new FormData();
-        if (!file.file)
-          throw new Error("The selected file could not be read. Please choose it again.");
+        if (!file.file) throw new Error(t("fileUnreadable"));
         form.append("file", file.file, file.name);
         artifact = await api.request<Artifact>("/api/files", form);
       } else {
@@ -966,7 +948,7 @@ export function FilesScreen() {
         });
         const payload = JSON.parse(result.body);
         if (result.status < 200 || result.status >= 300)
-          throw new Error(payload.error || "Could not import this PDF.");
+          throw new Error(payload.error || t("fileImportFailed"));
         artifact = payload;
       }
       await refresh();
@@ -980,11 +962,9 @@ export function FilesScreen() {
   return (
     <View style={{ gap: 20 }}>
       <View style={s.between}>
-        <Text style={[s.muted, { flex: 1, marginRight: 15 }]}>
-          Documents, with a little room to work.
-        </Text>
+        <Text style={[s.muted, { flex: 1, marginRight: 15 }]}>{t("filesIntro")}</Text>
         <Button primary icon={Upload} busy={busy} onPress={() => void upload()}>
-          Import PDF
+          {t("filesImport")}
         </Button>
       </View>
       <ErrorNotice error={error} />
@@ -1018,7 +998,7 @@ export function FilesScreen() {
                 >
                   <View style={[s.row, { gap: 5, marginBottom: 15 }]}>
                     <FileText size={13} color={colors.blueDark} />
-                    <Text style={{ fontSize: 7, color: colors.blueDark }}>DOCUMENT</Text>
+                    <Text style={{ fontSize: 7, color: colors.blueDark }}>{t("fileDocBadge")}</Text>
                   </View>
                   {[100, 75, 90, 95, 60].map((width, i) => (
                     <View
@@ -1042,8 +1022,7 @@ export function FilesScreen() {
                   {f.name}
                 </Text>
                 <Text style={s.small}>
-                  {f.pageCount} {f.pageCount === 1 ? "page" : "pages"} ·{" "}
-                  {Math.max(1, Math.round(f.size / 1024))} KB
+                  {t("filePages", { n: f.pageCount })} · {Math.max(1, Math.round(f.size / 1024))} KB
                 </Text>
                 <View style={[s.between, { marginTop: 9 }]}>
                   <Chip>{f.source}</Chip>
@@ -1056,11 +1035,7 @@ export function FilesScreen() {
       </View>
       {!w.files.length && (
         <Card>
-          <Empty
-            icon={FileText}
-            title="Your documents live here"
-            detail="Import a PDF or open a mail attachment to read, fill supported form fields, and share a copy."
-          />
+          <Empty icon={FileText} title={t("filesEmptyTitle")} detail={t("filesEmptyDetail")} />
         </Card>
       )}
     </View>
@@ -1075,15 +1050,15 @@ export function ActivityScreen() {
     <View style={{ gap: 20 }}>
       <View style={[s.row, { gap: 10 }]}>
         <Button small primary={filter === "all"} onPress={() => setFilter("all")}>
-          All activity
+          {t("activityAll")}
         </Button>
         <Button small primary={filter === "review"} onPress={() => setFilter("review")}>
-          Needs review · {pending.length}
+          {t("activityNeedsReview", { n: pending.length })}
         </Button>
       </View>
       {actions.length > 0 && (
         <Card>
-          <SectionHeading title="Your actions" />
+          <SectionHeading title={t("activityYourActions")} />
           {actions.map((a) => (
             <Pressable
               key={a.id}
@@ -1121,7 +1096,7 @@ export function ActivityScreen() {
                       : colors.canvas
                 }
               >
-                {a.status.replace(/_/g, " ")}
+                {statusLabel(a.status)}
               </Chip>
               <ChevronRight size={16} color={colors.muted} />
             </Pressable>
@@ -1130,7 +1105,7 @@ export function ActivityScreen() {
       )}
       {filter === "all" && (
         <Card>
-          <SectionHeading title="Workspace timeline" />
+          <SectionHeading title={t("activityTimeline")} />
           {w.activity.length ? (
             w.activity.map((a, i) => (
               <View
@@ -1158,14 +1133,14 @@ export function ActivityScreen() {
                     {dateLabel(a.date)} · {timeLabel(a.date)}
                   </Text>
                 </View>
-                <Chip>{a.status}</Chip>
+                <Chip>{statusLabel(a.status)}</Chip>
               </View>
             ))
           ) : (
             <Empty
               icon={Clock3}
-              title="The beginning of something lighter"
-              detail="Your actions and their results will be recorded here."
+              title={t("activityEmptyTitle")}
+              detail={t("activityEmptyDetail")}
             />
           )}
         </Card>
@@ -1174,8 +1149,8 @@ export function ActivityScreen() {
         <Card>
           <Empty
             icon={ShieldCheck}
-            title="You’re all caught up"
-            detail="When an email or calendar change needs your approval, it will appear here."
+            title={t("reviewCaughtUpTitle")}
+            detail={t("reviewCaughtUpDetail")}
           />
         </Card>
       )}
@@ -1197,10 +1172,10 @@ export function ConnectionsScreen({ query = "" }: { query?: string }) {
       );
       if (result.url) {
         await Linking.openURL(result.url);
-        notify("Finish connecting in your browser, then refresh your workspace.");
+        notify(t("notifyFinishConnect"));
       } else {
         await refresh();
-        notify("Local Google data is ready.");
+        notify(t("notifyLocalReady"));
       }
     } catch (e) {
       setError(e instanceof Error ? e.message : String(e));
@@ -1214,7 +1189,7 @@ export function ConnectionsScreen({ query = "" }: { query?: string }) {
     try {
       await api.request("/api/google/disconnect", {});
       await refresh();
-      notify("Google disconnected.");
+      notify(t("notifyDisconnected"));
     } catch (e) {
       setError(e instanceof Error ? e.message : String(e));
     } finally {
@@ -1235,7 +1210,7 @@ export function ConnectionsScreen({ query = "" }: { query?: string }) {
     },
     {
       id: "browser",
-      name: "Agent computer",
+      name: t("agentComputer"),
       icon: Globe2,
       color: "#1987CF",
       connected: w.connections.some((c) => c.id === "browser" && c.status === "connected"),
@@ -1260,16 +1235,16 @@ export function ConnectionsScreen({ query = "" }: { query?: string }) {
             <Text style={[s.small, { marginLeft: 12 }]}>
               {isConnected
                 ? w.mode === "sample"
-                  ? "Your connections"
-                  : "Connected"
-                : "Available integrations"}
+                  ? t("connectionsYours")
+                  : t("connectionsConnected")
+                : t("connectionsAvailable")}
             </Text>
             <View style={{ paddingHorizontal: 16, borderRadius: 23, backgroundColor: "#F3F4F5" }}>
               {group.map((row, index) => (
                 <Pressable
                   key={row.id}
                   accessibilityRole="button"
-                  accessibilityLabel={`Manage ${row.name}`}
+                  accessibilityLabel={t("manageConnector", { name: row.name })}
                   onPress={() =>
                     row.group === "browser" ? open({ type: "computer" }) : setSelected(row.group)
                   }
@@ -1297,7 +1272,7 @@ export function ConnectionsScreen({ query = "" }: { query?: string }) {
                   </View>
                   <Text style={[s.text, { flex: 1 }]}>{row.name}</Text>
                   {row.connected && row.group === "google" && w.mode === "sample" && (
-                    <Text style={s.small}>Local data</Text>
+                    <Text style={s.small}>{t("localData")}</Text>
                   )}
                   {row.connected ? (
                     <ChevronRight size={18} color="#A4A7AA" />
@@ -1308,7 +1283,7 @@ export function ConnectionsScreen({ query = "" }: { query?: string }) {
                         color: row.group === "google" ? colors.blueDark : colors.muted,
                       }}
                     >
-                      {row.group === "google" ? "Connect" : "Setup"}
+                      {row.group === "google" ? t("connectAction") : t("setupAction")}
                     </Text>
                   )}
                 </Pressable>
@@ -1317,19 +1292,16 @@ export function ConnectionsScreen({ query = "" }: { query?: string }) {
           </View>
         );
       })}
-      {!rows.length && <Text style={s.muted}>No matching connectors.</Text>}
+      {!rows.length && <Text style={s.muted}>{t("noMatchingConnectors")}</Text>}
       {selected && (
         <Sheet
-          title={selected === "google" ? "Google connections" : "OpenBot"}
-          subtitle={selected === "google" ? google?.account : "A computer for your agent"}
+          title={selected === "google" ? t("googleConnections") : "OpenBot"}
+          subtitle={selected === "google" ? google?.account : t("computerForAgent")}
           onClose={() => setSelected(undefined)}
         >
           {selected === "google" ? (
             <View style={{ gap: 18 }}>
-              <Text style={s.muted}>
-                Bring Gmail and Google Calendar into your conversations. Choose read access, then
-                enable sending and editing when you need it.
-              </Text>
+              <Text style={s.muted}>{t("googleIntro")}</Text>
               <View style={[s.row, { gap: 7, flexWrap: "wrap" }]}>
                 {google?.capabilities.map((cap) => (
                   <Chip key={cap}>{capabilityLabel(cap)}</Chip>
@@ -1337,52 +1309,46 @@ export function ConnectionsScreen({ query = "" }: { query?: string }) {
               </View>
               <ErrorNotice error={error} />
               <Button busy={busy} primary icon={Link2} onPress={() => void connect("read")}>
-                Connect Google
+                {t("connectGoogle")}
               </Button>
               <Button busy={busy} onPress={() => void connect("write")}>
-                Enable sending & editing
+                {t("enableSendEdit")}
               </Button>
               {connected && (
                 <Button busy={busy} danger onPress={() => void disconnect()}>
-                  Disconnect Google
+                  {t("disconnectGoogle")}
                 </Button>
               )}
               <SettingsLine
-                label="Environment"
-                value={w.mode === "sample" ? "Local · example data" : "Live workspace"}
+                label={t("settingsEnvironment")}
+                value={w.mode === "sample" ? t("envLocalSample") : t("envLiveWorkspace")}
               />
               <SettingsLine
-                label="Assistant"
+                label={t("settingsAssistant")}
                 value={
                   w.runtime.provider === "sample"
-                    ? "Guided workflows"
+                    ? t("assistantGuided")
                     : w.runtime.configured
-                      ? "Model connected"
-                      : "Model not configured"
+                      ? t("assistantModelConnected")
+                      : t("assistantModelMissing")
                 }
               />
               <SettingsLine
                 label="Rich Threads"
-                value={w.runtime.richThreads ? "CopilotKit Intelligence" : "Not connected"}
+                value={w.runtime.richThreads ? t("richThreadsOn") : t("richThreadsOff")}
               />
               <Button
                 small
                 icon={ArrowDownToLine}
                 onPress={() => void refresh().catch((e) => setError(String(e)))}
               >
-                Refresh connections
+                {t("refreshConnections")}
               </Button>
             </View>
           ) : (
             <View style={{ gap: 14 }}>
-              <Text style={s.text}>
-                The OpenBot adapter is available in this open-source project. A live OpenBot backend
-                has not been configured.
-              </Text>
-              <Text style={s.muted}>
-                Your current computer uses OpenMuse’s persistent Chromium worker. OpenBot
-                integration will expand the execution backend while keeping this interface.
-              </Text>
+              <Text style={s.text}>{t("openbotAvailable")}</Text>
+              <Text style={s.muted}>{t("openbotExplainer")}</Text>
             </View>
           )}
         </Sheet>
@@ -1407,12 +1373,12 @@ function SettingsLine({ label, value }: { label: string; value: string }) {
 function capabilityLabel(value: string) {
   const scope = value.split("/").at(-1) || value;
   const names: Record<string, string> = {
-    "gmail.readonly": "Read Gmail",
-    "gmail.send": "Send Gmail",
-    "calendar.events.readonly": "Read calendar events",
-    "calendar.calendarlist.readonly": "Read calendar list",
-    "calendar.events": "Manage calendar events",
-    "calendar.readonly": "Read calendars",
+    "gmail.readonly": t("capReadGmail"),
+    "gmail.send": t("capSendGmail"),
+    "calendar.events.readonly": t("capReadEvents"),
+    "calendar.calendarlist.readonly": t("capReadCalendarList"),
+    "calendar.events": t("capManageEvents"),
+    "calendar.readonly": t("capReadCalendars"),
   };
   return names[scope] || scope;
 }
diff --git a/apps/mobile/src/search-tool-card.tsx b/apps/mobile/src/search-tool-card.tsx
index 97aa69031..56e09b718 100644
--- a/apps/mobile/src/search-tool-card.tsx
+++ b/apps/mobile/src/search-tool-card.tsx
@@ -3,6 +3,7 @@ import { useContext, useState } from "react";
 import { ActivityIndicator, Linking, Text, View } from "react-native";
 import { z } from "zod";
 import { BrowserRunContext } from "./browser-tool-card";
+import { t } from "./strings";
 import { Card, colors, ErrorNotice, s } from "./ui";
 
 const resultSchema = z.object({
@@ -28,7 +29,7 @@ export function SearchToolCard({ result, loading }: { result: unknown; loading:
   const failure = error.success
     ? error.data.error
     : !loading && !parsed.success
-      ? "Search did not return readable results."
+      ? t("searchUnreadable")
       : "";
   const sources = parsed.success
     ? [...new Map(parsed.data.results.map((source) => [source.url, source])).values()]
@@ -46,14 +47,14 @@ export function SearchToolCard({ result, loading }: { result: unknown; loading:
         )}
         <Text style={s.text}>
           {failure
-            ? "Search failed"
+            ? t("searchFailed")
             : working
-              ? "Searching the web…"
+              ? t("searchingWeb")
               : loading
-                ? "Search stopped"
+                ? t("searchStopped")
                 : count
-                  ? `Found ${count} ${count === 1 ? "source" : "sources"}`
-                  : "No sources found"}
+                  ? t("foundSources", { n: count })
+                  : t("noSources")}
         </Text>
       </View>
       {!loading && parsed.success && (
@@ -65,17 +66,13 @@ export function SearchToolCard({ result, loading }: { result: unknown; loading:
               style={[s.text, { color: colors.blueDark }]}
               onPress={() => {
                 setLinkError("");
-                void Linking.openURL(source.url).catch(() =>
-                  setLinkError("Could not open this source."),
-                );
+                void Linking.openURL(source.url).catch(() => setLinkError(t("couldntOpenSource")));
               }}
             >
               {source.title || source.url}
             </Text>
           ))}
-          {parsed.data.truncated && (
-            <Text style={s.small}>Some search results or excerpts were omitted.</Text>
-          )}
+          {parsed.data.truncated && <Text style={s.small}>{t("resultsOmitted")}</Text>}
           {[...new Set(parsed.data.warnings)].map((warning) => (
             <Text key={warning} style={s.small}>
               {warning}
diff --git a/apps/mobile/src/strings.ts b/apps/mobile/src/strings.ts
new file mode 100644
index 000000000..d3289eb58
--- /dev/null
+++ b/apps/mobile/src/strings.ts
@@ -0,0 +1,812 @@
+/**
+ * Central Chinese UI copy for the mobile app. Display strings live here so the
+ * interface reads in Chinese; protocol values, IDs, and API payloads never do.
+ * Use t("key") for plain text and t("key", { n: 1 }) for "{n}" placeholders.
+ */
+const STRINGS: Record<string, string> = {
+  // Shared
+  justNow: "刚刚",
+  minutesAgo: "{n} 分钟前",
+  closeDetails: "关闭详情",
+  openmuseCapybara: "OpenMuse 水豚",
+  replySavedLocalSent: "回复已保存到本地已发送邮件。",
+
+  // Today (home)
+  homeTagline: "每天，多一点清爽",
+  homeTitle: "为你的一天，\n多留一点呼吸的空间。",
+  thingsOnCalendar: "日历上有 {n} 件事",
+  calendarHasRoom: "日历还有空间",
+  unreadEmailsSuffix: "，{n} 封未读邮件",
+  makeSpaceClosing: "。\n让我们为重要的事腾出空间。",
+  planMyDayPrompt: "帮我规划今天",
+  planMyDay: "规划今天",
+  homeCardLighterDay: "更轻松的一天",
+  homeCardEverythingTogether: "万事，尽收一处",
+  statUnread: "未读邮件",
+  statUnreadNote: "换一种方式看收件箱",
+  statCalendar: "日历日程",
+  statCalendarNote: "为优先要事留出空间",
+  statWaiting: "待你处理",
+  statWaitingNote: "你的确认让事情继续推进",
+  homeCalendarTitle: "你的日历",
+  homeCalendarAction: "完整日历",
+  homeCalEmptyTitle: "一点喘息的空间",
+  homeCalEmptyDetail: "今天没有日程安排。",
+  homeMakeTime: "为事情安排点时间",
+  homeInboxTitle: "来自收件箱",
+  homeInboxAction: "打开邮件",
+  homeInboxEmptyTitle: "收件箱很安静",
+  homeInboxEmptyDetail: "连接 Google，把你的邮件带到这里。",
+  homeLittleThingsTitle: "小事，也搭把手",
+  homeLittleThingsDetail: "从一个想法开始，剩下的交给我们。",
+  homePromptAttention: "今天有什么值得我关注的？",
+  homePromptCatchUp: "帮我处理收件箱",
+  homePromptDocuments: "展示我最近的文档",
+  homeReviewReady: "等待你的确认",
+  homeRecentActivity: "最近活动",
+  homeViewAll: "查看全部",
+  homePreparedWaiting: "已就绪 · 等待你的确认",
+  homeWorkspaceReady: "工作区已就绪。你在这里做的事会显示在动态里。",
+
+  // Agenda
+  allDay: "全天",
+  attendeesCount: "{n} 位参与者",
+  timeForYou: "属于你的时间",
+
+  // Mail
+  searchMail: "搜索邮件",
+  searchInboxPlaceholder: "搜索你的收件箱",
+  compose: "写邮件",
+  tabAllMessages: "全部邮件",
+  tabUnread: "未读 · {n}",
+  tabDrafts: "草稿 · {n}",
+  draftTo: "收件人：{to} · 保存于 {date}",
+  draftsEmptyTitle: "崭新的一页",
+  draftsEmptyDetail: "你保存的草稿会在这里等你随时取用。",
+  attachmentsCount: "{n} 个附件",
+  mailNoMatch: "没有匹配的邮件",
+  mailEmpty: "收件箱里还没有邮件",
+  mailNoMatchDetail: "换个姓名或主题试试。",
+  mailEmptyDetail: "在“连接”中接入 Google，即可在这里读邮件。",
+
+  // Calendar
+  calPreviousWeek: "上一周",
+  calNextWeek: "下一周",
+  calNewEvent: "新建日程",
+  calYourCalendars: "你的日历",
+  calReadOnly: " · 只读",
+  calNext30: "未来 30 天",
+  calSelectedDay: "选定日",
+  calYourCalendar: "你的日历",
+  calZoneNote: "。日程按各自时区显示。",
+  calTryAgain: "重试",
+  calChecking: "正在查看你的日历…",
+  calEmptyTitle: "一点空白时光",
+  calEmpty30: "未来 30 天没有日程。",
+  calEmptyDay: "这一天暂无日程。",
+  calAddEvent: "添加日程",
+
+  // Browser
+  browserTabsTitle: "放标签页的地方",
+  browserTabsDetail: "在私有、持久的会话里浏览网页。",
+  websiteAddress: "网站地址",
+  browserOpenSession: "打开会话",
+  browserSessions: "浏览器会话",
+  browserSessionFallback: "浏览器会话",
+  browserEmptyTitle: "从一个网站开始",
+  browserEmptyDetail: "在上方打开会话，让浏览集中一处。配置浏览器 worker 后会显示实时预览。",
+
+  // Files
+  fileUnreadable: "无法读取所选文件，请重新选择。",
+  fileImportFailed: "无法导入这个 PDF。",
+  filesIntro: "文档，留有从容处理的空间。",
+  filesImport: "导入 PDF",
+  fileDocBadge: "文档",
+  filePages: "{n} 页",
+  filesEmptyTitle: "你的文档在这里",
+  filesEmptyDetail: "导入 PDF 或打开邮件附件，即可阅读、填写支持的表单并分享副本。",
+
+  // Activity
+  activityAll: "全部动态",
+  activityNeedsReview: "待确认 · {n}",
+  activityYourActions: "你的操作",
+  activityTimeline: "工作区时间线",
+  activityEmptyTitle: "轻盈的开端",
+  activityEmptyDetail: "你的操作及其结果都会记录在这里。",
+  reviewCaughtUpTitle: "都已处理完毕",
+  reviewCaughtUpDetail: "当邮件或日历变更需要你确认时，会出现在这里。",
+
+  // Connections
+  notifyFinishConnect: "在浏览器中完成连接，然后刷新你的工作区。",
+  notifyLocalReady: "本地 Google 数据已就绪。",
+  notifyDisconnected: "已断开 Google 连接。",
+  agentComputer: "智能体电脑",
+  connectionsYours: "你的连接",
+  connectionsConnected: "已连接",
+  connectionsAvailable: "可用的集成",
+  manageConnector: "管理 {name}",
+  localData: "本地数据",
+  connectAction: "连接",
+  setupAction: "设置",
+  noMatchingConnectors: "没有匹配的连接器。",
+  googleConnections: "Google 连接",
+  computerForAgent: "给你的智能体一台电脑",
+  googleIntro: "把 Gmail 和 Google 日历带进你的对话。先选择读取权限，需要时再开启发送与编辑。",
+  connectGoogle: "连接 Google",
+  enableSendEdit: "开启发送与编辑",
+  disconnectGoogle: "断开 Google",
+  settingsEnvironment: "环境",
+  envLocalSample: "本地 · 示例数据",
+  envLiveWorkspace: "真实工作区",
+  settingsAssistant: "助手",
+  assistantGuided: "引导式流程",
+  assistantModelConnected: "模型已连接",
+  assistantModelMissing: "模型未配置",
+  richThreadsOn: "CopilotKit Intelligence",
+  richThreadsOff: "未连接",
+  refreshConnections: "刷新连接",
+  openbotAvailable: "本开源项目已内置 OpenBot 适配器，但尚未配置真实的 OpenBot 后端。",
+  openbotExplainer:
+    "你当前的电脑使用 OpenMuse 的持久 Chromium worker。OpenBot 集成将扩展执行后端，同时保留这一界面。",
+  capReadGmail: "读取 Gmail",
+  capSendGmail: "发送 Gmail",
+  capReadEvents: "读取日历日程",
+  capReadCalendarList: "读取日历列表",
+  capManageEvents: "管理日历日程",
+  capReadCalendars: "读取日历",
+
+  // Agent tasks
+  notCheckedYet: "尚未检查",
+  agentUpdatesUnavailable: "智能体动态暂不可用。{error}",
+  reconnectAgent: "重新连接智能体",
+  workerOffline: "Worker 离线中。重连后会继续处理已保存的工作。",
+  openTask: "打开任务：{title}",
+  taskSteps: " · {done}/{total} 步",
+  reviewRequested: "请求确认",
+  inputNeeded: "需要你的输入",
+  filterAll: "全部",
+  filterInProgress: "进行中",
+  filterFinished: "已结束",
+  agentActivityEmptyTitle: "承载工作的地方",
+  agentActivityEmptyDetail: "在对话里委派任务，它的计划、进度和结果都会留在这里。",
+  reviewsReceipts: "确认与回执",
+  openSource: "打开来源",
+  viewEmail: "查看邮件",
+  viewFile: "查看文件",
+  taskFallback: "任务",
+  loadingProgress: "正在载入已保存的进度…",
+  milestoneTracked: "里程碑：{title}。完成情况在“目标”中手动勾选。",
+  milestoneGone: "关联的里程碑已不存在。此任务及其结果仍可查看。",
+  pause: "暂停",
+  resume: "继续",
+  retryTask: "重试任务",
+  cancelTask: "取消任务",
+  readyForReview: "等待你的确认",
+  reviewBeforeProceed: "在执行前，请核对具体操作和账号。",
+  reviewAction: "确认操作",
+  detailWillHelp: "提供一点信息会更有帮助",
+  yourAnswer: "你的回答",
+  addMissingDetails: "补充缺少的信息…",
+  formFieldValues: "表单字段值",
+  fieldsJson: "字段（JSON：字段名到值）",
+  continueTask: "继续任务",
+  planHeading: "计划",
+  agentBrowser: "智能体浏览器",
+  agentBrowserPreview: "智能体浏览器预览",
+  pauseOpenBrowser: "暂停并打开浏览器",
+  openBrowser: "打开浏览器",
+  filePagesPdf: "{n} 页 · PDF",
+  sources: "来源",
+  timeline: "时间线",
+  workerRecordsSteps: "Worker 会在这里记录每一步。",
+  showSummary: "显示摘要",
+  exploreFullResult: "查看完整结果",
+
+  // Finance artifact
+  openFinanceTracker: "打开财务追踪：{title}",
+  financeReadFrom: "从你导入的交易中读取。",
+  financeSummarized: "{n} 笔交易，已分类并汇总。",
+  income: "收入",
+  spending: "支出",
+  remaining: "结余",
+  sourceCurrency: "原币种",
+  financeTracker: "财务追踪",
+  financeSubtitle: "支出、储蓄，以及下一步的计划。",
+  whereMoneyWent: "钱花在了哪里",
+  financeCurrencyNote: "金额按原币种计算。汇总覆盖已导入的日期。",
+  savingsGoalSaved: "你的储蓄目标已保存到“目标”。",
+  turnIntoGoal: "把它变成一个储蓄目标",
+  whatToSaveFor: "你想为什么而存钱？",
+  createSavingsGoal: "创建储蓄目标",
+  hideTransactions: "收起交易",
+  viewTransactions: "查看交易",
+  first100Transactions: "显示前 100 笔交易。合计包含所有行。",
+  goalInspiredBy: "受“{title}”启发：{summary}",
+  milestoneSavingsTarget: "选定储蓄目标",
+  milestoneWeeklyReview: "每周回顾支出",
+
+  // Delegate
+  handOverOutcome: "把一件事交给它",
+  delegateSubtitle: "OpenMuse 会保存计划并在服务器上持续推进。",
+  delegateMilestone: "{goal} · {milestone}。对结果满意后，可将其标记为完成。",
+  milestoneUnavailable: "该里程碑已不存在。",
+  generalTask: "通用任务",
+  whatDone: "想让它做什么？",
+  phDocument: "填写附件中的表单，并准备一份供我确认的回复",
+  phFinance: "汇总我的支出，并给出储蓄建议",
+  phPlan: "为我的一周做一个实用的计划",
+  chooseEmailPdf: "选择带 PDF 的邮件",
+  connectMailPdf: "在“应用”中连接邮箱，并选择一封带 PDF 附件的邮件。",
+  transactionCsv: "交易 CSV",
+  tryExampleTransactions: "试试示例交易",
+  csvSignNote: "正数为支出，负数为收入。仅使用已导入的数据，不代表有任何银行连接。",
+  generalNeedsModel: "通用任务和计划需要已配置的模型。文档处理、页面追踪和支出汇总有引导式流程。",
+  delegateTask: "委派任务",
+
+  // Ideas
+  ideasInspiredBy: "灵感来自你连接的应用",
+  findIdeas: "发现点子",
+  ideasEmptyTitle: "留给好点子的位置",
+  ideasEmptyDetail: "从你授权的来源发现点子，每条建议都附带依据。",
+  started: "已开始",
+  viewTask: "查看任务",
+  viewIdea: "查看点子：{title}",
+  whatShouldMuseDo: "想让 OpenMuse 做什么？",
+  startThis: "开始做",
+  keepEdits: "保留修改",
+  edit: "编辑",
+  dismiss: "忽略",
+
+  // Goals & monitors
+  tracking: "追踪",
+  track: "追踪",
+  openTracking: "打开追踪：{title}",
+  checkingEvery: "每 {n} 分钟检查一次",
+  monitorHint: "票价、预约，或你在关注的网页。",
+  showLess: "收起",
+  showMore: "展开 {n} 条",
+  goals: "目标",
+  openGoal: "打开目标：{title}",
+  goalsHint: "大计划，从一小步开始。",
+  catHealth: "健康",
+  catRelationships: "关系",
+  catFinances: "财务",
+  catSomethingElse: "其他",
+  createCategoryGoal: "创建{name}目标",
+  trackSomething: "追踪一件事",
+  createGoal: "创建目标",
+  yourGoal: "你的目标",
+  phGoal: "建立三个月的应急基金",
+  whatSuccess: "成功是什么样子？",
+  milestonesOnePerLine: "里程碑（每行一个）",
+  createGoalBtn: "创建目标",
+  milestonesDone: "{done}/{total} 个里程碑",
+  delegate: "委派",
+  completeGoal: "完成目标",
+  planNextSteps: "规划下一步",
+  planForGoal: "计划：{title}",
+  planPrompt: "为这个目标制定一个实用的计划：{title}。{description}",
+  whatWatching: "你在关注什么？",
+  phWatching: "我最爱餐厅的位子",
+  tryBuiltInPage: "试试内置的空位示例页",
+  publicPageUrl: "公开页面网址",
+  notifyWhen: "在以下情况通知我",
+  condPageChanges: "页面变化",
+  condTextAppears: "出现文字",
+  condPriceBelow: "价格低于",
+  textToLookFor: "要查找的文字",
+  targetPrice: "目标价格",
+  checkEveryMinutes: "检查间隔（分钟）",
+  builtinPageNote: "对这个内置页面的改动只留在你的工作区。",
+  serverCheckNote: "OpenMuse 在服务器上检查这个公开页面，并把有意义的变化保存到通知。",
+  invalidInterval: "检查间隔需在 1 到 10080 分钟之间。",
+  invalidUrl: "请输入公开页面的 http 或 https 地址。",
+  startTracking: "开始追踪",
+  builtinAvailabilityPage: "内置空位示例页",
+  watchPageChange: "关注页面变化",
+  watchText: "关注“{value}”出现",
+  priceBelow: "价格低于 {value}",
+  everyMinChecks: "每 {n} 分钟 · 已检查 {checks} 次",
+  lastCheck: "上次检查：{time}",
+  nextCheck: "\n下次检查：{time}",
+  checkNow: "立即检查",
+  stopTracking: "停止追踪",
+  changeAvailability: "改变空位状态",
+  sampleAvailability: "空位情况：有位子。更新于 {time}",
+
+  // Notifications
+  notifications: "通知",
+  notificationsSubtitle: "需要你关注的结果和决定。",
+  new: "新",
+  read: "已读",
+  markRead: "标为已读",
+  caughtUp: "都已处理完毕",
+  caughtUpDetail: "结果、重要变化和需要你输入的请求都会出现在这里。",
+
+  // Apps
+  shortcutMail: "邮件",
+  shortcutMailDetail: "阅读邮件并准备回复",
+  shortcutCalendar: "日历",
+  shortcutCalendarDetail: "日程与已确认的邀请",
+  shortcutComputerDetail: "持久的浏览器会话",
+  shortcutFiles: "文件",
+  shortcutFilesDetail: "PDF、表单与填写后的副本",
+  searchApps: "搜索应用",
+  searchConnectors: "搜索连接器",
+  onYourComputer: "在你的电脑上",
+  closeAgentSettings: "收起智能体设置",
+  personalityMemory: "个性与记忆",
+  yourAgent: "你的智能体",
+  avatarLabel: "{name}头像",
+  nameLabel: "名字",
+  showBackgroundUpdates: "在对话中显示后台更新",
+  activityAlwaysFull: "动态和通知始终保留完整记录，包括需要确认的请求。",
+  savePreferences: "保存偏好",
+  memory: "记忆",
+  memoryIntro: "可查看、更正或遗忘的上下文。",
+  rememberAboutMe: "记一条关于我的事",
+  phMemory: "我更喜欢早晨开会",
+  remember: "记住",
+  sourceUserAdded: "用户在“应用”中添加",
+  memoryField: "记忆内容",
+  saveCorrection: "保存更正",
+  forget: "遗忘",
+
+  // Chat
+  cardTask: "任务",
+  cardAgentProgress: "智能体进度",
+  cardGoal: "目标",
+  cardTracking: "追踪",
+  cardMemory: "记忆",
+  savingCard: "正在保存{name}…",
+  waitingServer: "正在等待服务器。",
+  openWorkspaceResult: "打开工作区查看已保存的结果。",
+  viewCard: "查看{name}",
+  conversationNotReady: "对话还未就绪。",
+  loadFailed: "无法载入对话，你已保存的消息未受影响。{error}",
+  saveFailed: "对话保存失败：{error}",
+  choiceNotReady: "对话还未就绪，暂时无法发送选择。",
+  waitBeforeRetry: "请等当前回复完成后再重试。",
+  stopFailed: "无法停止回复：{error}",
+  attachedDocs: "\n\n附带的文档：{files}",
+  retryLoadConversation: "重试载入对话",
+  chatEmptyTitle: "一点帮助，多留一点生活。",
+  chatEmptyDetail: "说说你在想什么。我可以做计划、调用你的应用，还能用我的电脑帮忙。",
+  suggestionHackerNews: "看看 Hacker News 上有什么新鲜事",
+  promptHackerNews: "帮我看看 Hacker News 上有什么有意思的内容",
+  suggestionSummarize: "总结 copilotkit.ai",
+  promptSummarize: "总结一下 copilotkit.ai",
+  suggestionWatch: "帮我盯着一个网站",
+  hideRecentResults: "收起最近结果",
+  recentResults: "最近结果",
+  agentWorking: "智能体正在工作",
+  retryResponse: "重试回复",
+  latestMessages: "回到最新消息",
+  retrySaveConversation: "重试保存对话",
+  messagesOnHold: "消息暂缓发送",
+  upNext: "即将发送",
+  keepAppOpen: "保持应用开启直到发送完成",
+  removeQueued: "移除排队消息：{text}",
+  choiceRemoved: "已从队列移除该选择。",
+  sendQueued: "发送排队中的消息",
+  addDocument: "添加文档",
+  importPdfToChat: "在“文件”中导入 PDF，即可在对话中使用。",
+  done: "完成",
+  removeAttachment: "移除附件：{name}",
+  attachDocument: "添加附件",
+  messageOpenMuse: "给 OpenMuse 发消息",
+  phConnecting: "连接中…",
+  phConversationUnavailable: "对话不可用",
+  phLoadingConversation: "正在载入对话…",
+  phMessage: "输入消息…",
+  stopReply: "停止回复",
+  sendMessage: "发送消息",
+  providedFields: "已提供所需字段。",
+  reviewNotReady: "该确认暂不可用，请刷新后重试。",
+
+  // Shell / App
+  navChat: "对话",
+  navIdeas: "点子",
+  navGoals: "目标",
+  navApps: "应用",
+  subtitleActivity: "计划、进度、决定与结果。",
+  subtitleIdeas: "来自你的世界的实用下一步。",
+  subtitleGoals: "长期目标与需要留意的事。",
+  subtitleApps: "连接、能力，以及你的智能体记住的事。",
+  subtitleConnections: "连接与能力。",
+  subtitleMail: "工作背后的对话。",
+  subtitleCalendar: "给重要的事留出时间。",
+  subtitleBrowser: "你连接的浏览会话。",
+  subtitleFiles: "文档、表单与填写后的副本。",
+  welcomeTitle: "欢迎来到 OpenMuse。",
+  welcomeSubtitle: "给你的一天，一方小天地。",
+  accessKeyLabel: "工作区访问密钥",
+  phAccessKey: "真实工作区需要填写",
+  openWorkspace: "打开工作区",
+  localWorkspaceNote: "本地工作区无需密钥。请确保 OpenMuse 服务器正在 {url} 运行。",
+  openingWorkspace: "正在打开你的工作区…",
+  statusReadyReview: "等待确认 · {title}",
+  statusNeedsInput: "需要你的输入 · {title}",
+  statusPickingUp: "正在接手你的下一个任务…",
+  statusHere: "随时待命",
+  openThreadsMenu: "打开会话与菜单",
+  openAgentActivity: "打开{name}的动态与确认",
+  notificationsBadge: "通知，{n} 条未读或待处理",
+  backToApps: "返回应用",
+  retryMainChat: "重试主对话",
+  sideChat: "侧聊",
+  dismissToast: "关闭通知",
+
+  // Threads
+  mainChat: "主对话",
+  mainChatDetail: "你持续的对话",
+  newSideChat: "新的侧聊",
+  sideChats: "侧聊",
+  showActive: "显示进行中",
+  archived: "已归档",
+  retryConversations: "重试载入会话",
+  sideChatN: "侧聊 {n}",
+  openInApp: "在本应用中打开",
+  openConversation: "打开会话：{name}",
+  untitledConversation: "未命名会话",
+  conversationName: "会话名称",
+  saveName: "保存名称",
+  rename: "重命名",
+  restore: "恢复",
+  archive: "归档",
+  noArchived: "没有已归档的会话。",
+  sideChatHint: "在这里保留一个单独的话题。主对话始终可用。",
+  loadMoreConversations: "载入更多会话",
+  sideChatContextNote: "侧聊有独立的对话上下文。智能体的记忆是共享的。",
+  savedInWorkspace: "保存在此工作区",
+  localChatNote: "你的对话保存在此工作区。可在“应用”中管理连接。",
+  delegateDetail: "计划、文档或支出汇总",
+  computerDetail: "浏览器、会话与文档",
+  appsSettings: "应用与设置",
+  refreshWorkspace: "刷新工作区",
+
+  // Computer
+  statusOffline: "离线",
+  statusTakeControl: "可接管",
+  statusReady2: "就绪",
+  agentComputerStatus: "智能体电脑 — {status}",
+  computerDotStatus: "电脑 · {status}",
+  browserCardTitle: "浏览器",
+  sessionSaved: "会话已保存",
+  needsAttention: "需要关注",
+  browserPreview: "浏览器预览：{title}",
+  previewFailed: "预览不可用。打开浏览器重新连接。",
+  reopenBrowser: "重新打开浏览器",
+  reconnectBrowser: "重新连接浏览器",
+  takeControl: "接管",
+  tabBrowser: "浏览器",
+  tabDesktop: "桌面",
+  tabTerminal: "终端",
+  computerSubtitle: "你的智能体在这里工作，随时可以介入。",
+  browserConnected: "浏览器已连接",
+  browserOffline: "浏览器离线",
+  browserConnectedDetail: "智能体的浏览器和文档，都在一处。",
+  browserOfflineDetail: "启动浏览器 worker 以连接这台电脑。",
+  openBrowserSession: "打开浏览器会话",
+  computerEmptyHint: "在这里打开网页，或让智能体研究些什么。它的浏览会话会显示在这里。",
+  computerSessionsNote: "浏览会话保留各自的登录和下载。打开即可接管，然后回到对话。",
+  documentsHeading: "文档",
+  documentsDetail: "从邮件保存的 PDF、浏览器下载和你上传的文件。",
+  importDocument: "导入文档",
+  refreshComputer: "刷新电脑",
+
+  // Linux workspace
+  linuxWorkspace: "你的 Linux 工作区",
+  cwRunning: "运行中 · 停止后文件仍保留",
+  cwStopped: "已停止 · 文件已保存",
+  cwUnconfigured: "先设置电脑即可开始",
+  cwError: "连接需要关注",
+  cwConnecting: "连接中…",
+  stopComputer: "停止电脑",
+  startComputer: "启动电脑",
+  refreshBtn: "刷新",
+  terminalLabel: "终端",
+  workingDir: "工作目录",
+  commandLabel: "命令",
+  straightQuotes: "使用直引号",
+  runCommand: "运行命令",
+  netEnabledNote:
+    "在你的电脑上运行并可访问网络。用 >/dev/null 2>&1 & 启动 GUI 应用，即可在“桌面”标签中打开。",
+  netDisabledNote: "在你的电脑上运行。网络访问已关闭，上网请用“浏览器”。",
+  newCommand: "新建命令",
+  workingNote: "运行中… 结果会显示在这里。停止电脑可结束正在运行的命令。",
+  firstCommandTitle: "等待你的第一条命令",
+  firstCommandDetail: "运行脚本、处理文件，或让智能体在这里创建东西。",
+  showRecentCommands: "只看最近命令",
+  earlierCommands: "更早的命令",
+  desktopOff: "桌面未开启",
+  desktopOffDetail: "启动电脑即可查看和控制它的桌面。",
+  desktopNote:
+    "你和智能体共享这个桌面。停止电脑会关闭它的应用；/workspace 中的文件会保留。打开桌面会让电脑保持唤醒 30 分钟；保持本标签打开或回到应用即可延长。该链接可控制桌面，请勿分享。",
+  exitCode: " · 退出码 {code}",
+  noOutput: "无输出",
+  outputTruncated: "输出达到显示上限。请把大结果写入文件。",
+  hideOutput: "收起输出",
+  showOutput: "展开输出",
+  docCopied: "文档已复制到你的电脑。",
+  fileSaved: "文件已保存到你的电脑。",
+  workspaceFiles: "工作区文件",
+  filesStartNote: "启动电脑即可浏览或编辑其保存的文件。",
+  filePath: "文件路径",
+  fileContents: "文件内容",
+  saveFile: "保存文件",
+  discardEdits: "放弃修改",
+  backToFiles: "返回文件列表",
+  up: "上一级",
+  newFile: "新建文件",
+  newFolder: "新建文件夹",
+  refreshFiles: "刷新文件",
+  hideDocuments: "收起文档",
+  copyDocumentHere: "复制一个文档到这里",
+  chooseSavedPdf: "选择一个已保存的 PDF",
+  copyNote: "会复制到此文件夹。同名文件将被替换。",
+  addDocumentFirst: "先从邮件或“文件”中添加文档。",
+  folderName: "文件夹名称",
+  createFolder: "创建文件夹",
+  cancel: "取消",
+  folderType: "文件夹",
+  symlinkType: "符号链接",
+  createSpaceTitle: "一点创造的空间",
+  createSpaceDetail: "在这里添加文件，或让智能体在它的工作区里创建一个。",
+
+  // Browser tool card
+  openingPage: "正在打开页面",
+  browserNoPage: "浏览器没有返回页面，请重试你的请求。",
+  readingPage: "正在阅读页面…",
+  browsingPaused: "浏览已暂停",
+  couldntReadPage: "无法读取页面",
+  pageRead: "已读取页面",
+  pageVisitedMovedOn: "页面已访问。浏览器已前往别处。",
+  sessionSavedTakeControl: "会话已保存。接管即可重新打开。",
+  sessionNeedsReconnect: "会话需要关注。接管即可重新连接。",
+  previewStillControl: "预览不可用，你仍可接管。",
+  connectingSavedSession: "正在连接已保存的会话…",
+  reconnectPreview: "重新连接预览",
+
+  // Mail tool card
+  mailPaused: "邮件阅读已暂停",
+  checkingInbox: "正在查看收件箱…",
+  readingEmail: "正在阅读邮件…",
+  mailboxUnreadable: "邮箱没有返回可读的结果。",
+  foundEmails: "找到{prefix} {n} 封邮件",
+  atLeast: "至少",
+  noMatchingEmails: "没有匹配的邮件",
+  emailUndisplayable: "无法显示这封邮件。",
+  noMessagesInThread: "这个会话里没有邮件。",
+  emailMeta: "邮件 · {n}",
+  oneMessage: "1 条消息",
+  nMessages: "{n} 条消息",
+  excerptNote: "显示的是这个会话的节选。",
+  openEmail: "打开邮件",
+
+  // Search tool card
+  searchUnreadable: "搜索没有返回可读的结果。",
+  searchFailed: "搜索失败",
+  searchingWeb: "正在搜索网页…",
+  searchStopped: "搜索已停止",
+  foundSources: "找到 {n} 个来源",
+  noSources: "没有找到来源",
+  couldntOpenSource: "无法打开这个来源。",
+  resultsOmitted: "部分搜索结果或摘录已被省略。",
+
+  // Jev choices
+  needActiveChatToChoose: "打开一个进行中的对话才能选择选项。",
+  needActiveChatToRetry: "打开一个进行中的对话才能重试选择。",
+  sourceLink: "来源：{title}",
+  chooseExhibit: "选择这个展品",
+  chooseOption: "选择这个选项",
+  chooseOptionLabel: "{caption}：{label}（选项 {n}）",
+  preparingChoices: "正在准备选项…",
+  choicesUndisplayable: "选项无法显示，请重试。",
+  sampleScripted: "示例 · 脚本化决定",
+  liveJev: "实时 Jev · 模型决定",
+  previousPreference: "此前的偏好：{label}",
+  earlierChoices: "较早的选项",
+  choiceSubmitted: "已提交选择",
+  retryChoice: "重试选择",
+  unknownChoice: "未知的选择",
+  choiceUnavailable: "选择不可用",
+  selectedLabel: "已选择：{label}",
+
+  // Desktop tool card
+  usingDesktop: "正在使用桌面…",
+  desktopStepFailed: "桌面操作失败",
+  desktopStep: "桌面操作",
+  computerOfflineNote: "电脑处于离线状态。启动它即可查看桌面；之前打开的应用已关闭。",
+  starting: "启动中…",
+  latestScreenshot: "最新的桌面截图",
+  openDesktopTab: "在“桌面”标签中打开",
+
+  // Task/file artifacts
+  openPdf: "打开 PDF：{name}",
+  pdfTapToRead: "{n} 页 · 点按阅读文档",
+  reloadTaskResults: "重新载入任务结果",
+
+  // Misc
+  invalidTimeZone: "请选择有效的时区。",
+  computerDesktop: "电脑桌面",
+  opening: "打开中…",
+  openDesktop: "打开桌面",
+  previous: "上一页",
+  next: "下一页",
+  zoomOut: "缩小",
+  zoomIn: "放大",
+  browserConsoleTitle: "远程浏览器会话控制台",
+  hoursAgo: "{n} 小时前",
+  labelDate: "{label}日期",
+  labelTime: "{label}时间",
+  phDate: "YYYY-MM-DD",
+  phTime: "HH:MM（24 小时制）",
+  pdfReaderTitle: "PDF 文档阅读器",
+  readerToolbarNote: "用阅读器工具栏下载或打印这份文档。",
+  updateForYou: "有一条给你的更新",
+  dismissUpdate: "关闭这条更新",
+  moreUpdates: "还有 {n} 条更新",
+
+  // Details
+  yourWorkspace: "你的工作区",
+  workspaceTagline: "一方小天地，装下所有事。",
+  navBrowser: "浏览器",
+  navActivity: "动态",
+  navConnections: "连接",
+  threadMessages: "此对话共 {n} 条消息",
+  loadingConversation: "正在载入对话…",
+  toLabel: "收件人：{to}",
+  pagesPdfAttachment: "{n} 页 · PDF 附件",
+  openAttachment: "打开附件",
+  reloadConversation: "重新载入对话",
+  writeReply: "写一封回复",
+  newMessage: "写一封新邮件",
+  fromSavedPrivate: "来自 {email} · 私密保存在 OpenMuse",
+  fieldTo: "收件人",
+  fieldCc: "抄送",
+  fieldBcc: "密送",
+  optional: "选填",
+  fieldSubject: "主题",
+  phSubject: "想说点什么？",
+  fieldMessage: "正文",
+  phMessageBody: "开始写吧…",
+  attachments: "附件",
+  reviewEmail: "确认邮件",
+  saveDraft: "保存草稿",
+  reviewBeforeSendNote: "发送前，你可以核对具体的收件人、内容和附件。",
+  draftSaved: "草稿已保存在 OpenMuse。",
+  editEventTitle: "腾出一点时间",
+  newEventTitle: "值得期待的事",
+  editEventSubtitle: "编辑这个日程，然后确认你的修改。",
+  newEventSubtitle: "在你的日历中创建一个日程。",
+  eventTitle: "日程标题",
+  phEventTitle: "要为什么事安排时间？",
+  allDayEvent: "全天日程",
+  starts: "开始",
+  ends: "结束",
+  endDateNote: "结束日期是日程最后一天的次日。",
+  timeZone: "时区",
+  locationLabel: "地点或会议链接",
+  attendees: "参与者",
+  phAttendees: "邮箱地址，用逗号分隔",
+  notes: "备注",
+  phNotes: "还有什么要记住的？",
+  timeOverlaps: "时间有冲突",
+  reviewChanges: "确认修改",
+  reviewEvent: "确认日程",
+  reviewDeletion: "确认删除",
+  oneLastLook: "最后确认一次",
+  reviewLocalNote: "此操作只保存在你的本地工作区。",
+  reviewLiveNote: "在此操作改动你连接的账号前，请核对内容。",
+  accountLabel: "账号",
+  none: "无",
+  versionLabel: "版本 {v}",
+  noAttachments: "无附件",
+  eventLabel: "日程",
+  exclusive: "（不含）",
+  yes: "是",
+  no: "否",
+  justYou: "只有你",
+  calendarLabel: "日历",
+  deleteEventNote: "这会移除该日程，并可能通知参与者。",
+  inviteNote: "参与者可能会收到来自你日历的邀请或更新。",
+  reviewExpires: "确认将于 {time} 过期。你的批准仅适用于上方显示的内容。",
+  approveLocally: "在本地批准",
+  approveSend: "批准并发送",
+  approveChange: "批准修改",
+  editDetails: "编辑内容",
+  dontProceed: "不执行",
+  eventRefMissing: "缺少日程引用，请在日历中重新打开该日程。",
+  fileMeta: "{n} 页 · {kb} KB · {source}",
+  openDownload: "打开 / 下载",
+  saveOrShare: "保存或分享",
+  attachToEmail: "附加到邮件",
+  fillForm: "填写这个表单",
+  fillFormNote: "在下方填写你的信息。保存会生成新副本，原文件保持不变。",
+  unsupportedField: "{name} · 暂不支持该字段类型",
+  saveFilledCopy: "保存填写后的副本",
+  addedLabel: "添加于 {date}",
+  filledCopySuffix: " · 填写副本",
+  sharingUnavailable: "此设备不支持分享。",
+  browserMeta: "{status} · 更新于 {time}",
+  reopen: "重新打开",
+  reconnect: "重新连接",
+  go: "前往",
+  retryConnection: "重试连接",
+  connectingBrowser: "正在连接你的浏览器…",
+  sessionClosed: "此会话已关闭",
+  previewUnavailable: "预览不可用",
+  sessionClosedDetail: "你的配置和下载已保存。重新打开即可继续。",
+  previewUnavailableDetail: "重新连接即可用已保存的浏览器配置继续。",
+  openBrowserWindow: "在窗口中打开浏览器",
+  refreshConnection: "刷新连接",
+  importDownloads: "导入 PDF 下载",
+  closeSession: "关闭会话",
+  downloadsAdded: "已将 {n} 个 PDF 下载加入文件。",
+  noDownloads: "此会话没有新的 PDF 下载。",
+};
+
+/** Display labels for protocol status values; unknown values keep their raw text. */
+const STATUS_LABELS: Record<string, string> = {
+  awaiting_review: "待确认",
+  executing: "执行中",
+  succeeded: "已完成",
+  failed: "失败",
+  outcome_unknown: "结果未知",
+  denied: "已拒绝",
+  cancelled: "已取消",
+  expired: "已过期",
+  pending: "等待中",
+  running: "运行中",
+  waiting: "等待中",
+  active: "进行中",
+  paused: "已暂停",
+  completed: "已完成",
+  stopped: "已停止",
+  idle: "空闲",
+  closed: "已关闭",
+  error: "出错",
+  timed_out: "已超时",
+  interrupted: "已中断",
+  unconfigured: "未配置",
+  connected: "已连接",
+  disconnected: "未连接",
+  sample: "示例数据",
+  unavailable: "不可用",
+  new: "新的",
+  dismissed: "已忽略",
+  accepted: "已接受",
+  queued: "排队中",
+  scheduled: "已计划",
+  waiting_input: "等待你的输入",
+  waiting_approval: "等待你的确认",
+  plan: "计划",
+  document: "文档",
+  finance: "财务",
+  step: "步骤",
+  observation: "观察",
+  approval: "确认",
+  result: "结果",
+  status: "状态",
+  warm: "温暖",
+  concise: "简洁",
+  thoughtful: "周到",
+  sky: "天蓝",
+  sand: "沙色",
+  lilac: "淡紫",
+};
+
+export function t(key: string, params?: Record<string, string | number>): string {
+  let text = STRINGS[key] ?? key;
+  if (params) {
+    for (const [name, value] of Object.entries(params)) {
+      text = text.replaceAll(`{${name}}`, String(value));
+    }
+  }
+  return text;
+}
+
+export function statusLabel(value: string): string {
+  return STATUS_LABELS[value] ?? value.replaceAll("_", " ");
+}
diff --git a/apps/mobile/src/thread-artifacts.tsx b/apps/mobile/src/thread-artifacts.tsx
index 9aa98c4bb..21165b637 100644
--- a/apps/mobile/src/thread-artifacts.tsx
+++ b/apps/mobile/src/thread-artifacts.tsx
@@ -5,6 +5,7 @@ import type { Artifact, BrowserSession } from "../../../packages/domain/src";
 import type { AgentArtifact, AgentTask } from "../../../packages/domain/src/agent";
 import { ArtifactCard, TaskCard } from "./agent-ui";
 import { BrowserThreadCard } from "./computer";
+import { t } from "./strings";
 import { Button, Card, colors, ErrorNotice, s } from "./ui";
 import { useWorkspace } from "./workspace";
 
@@ -13,7 +14,7 @@ export function FileThreadCard({ file }: { file: Artifact }) {
   return (
     <Pressable
       accessibilityRole="button"
-      accessibilityLabel={`Open PDF: ${file.name}`}
+      accessibilityLabel={t("openPdf", { name: file.name })}
       onPress={() => open({ type: "file", file })}
       style={{ width: "100%", maxWidth: 440 }}
     >
@@ -38,9 +39,7 @@ export function FileThreadCard({ file }: { file: Artifact }) {
               </View>
             ))
           ) : (
-            <Text style={s.muted}>
-              {file.pageCount} {file.pageCount === 1 ? "page" : "pages"} · Tap to read the document
-            </Text>
+            <Text style={s.muted}>{t("pdfTapToRead", { n: file.pageCount })}</Text>
           )}
         </View>
         <View style={[s.row, { gap: 13 }]}>
@@ -106,7 +105,7 @@ export function TaskThreadCard({ task }: { task: AgentTask }) {
       <ErrorNotice error={error} />
       {!!error && (
         <Button small onPress={() => setAttempt((value) => value + 1)}>
-          Reload task results
+          {t("reloadTaskResults")}
         </Button>
       )}
     </View>
diff --git a/apps/mobile/src/threads.tsx b/apps/mobile/src/threads.tsx
index 4f3fb51b0..d754bd630 100644
--- a/apps/mobile/src/threads.tsx
+++ b/apps/mobile/src/threads.tsx
@@ -11,6 +11,7 @@ import {
 } from "lucide-react-native";
 import { createContext, type ReactNode, useContext, useEffect, useRef, useState } from "react";
 import { ActivityIndicator, Pressable, Text, View } from "react-native";
+import { t } from "./strings";
 import { Button, colors, ErrorNotice, Field, LinkRow, Sheet, s } from "./ui";
 import { useWorkspace } from "./workspace";
 
@@ -133,7 +134,7 @@ export function ThreadsSheet({ onClose }: { onClose: () => void }) {
   return (
     <Sheet
       title="OpenMuse"
-      subtitle={workspace.mode === "sample" ? "Your workspace" : workspace.profile.name}
+      subtitle={workspace.mode === "sample" ? t("yourWorkspace") : workspace.profile.name}
       onClose={onClose}
     >
       <View style={{ gap: 14 }}>
@@ -141,7 +142,7 @@ export function ThreadsSheet({ onClose }: { onClose: () => void }) {
           <>
             <ErrorNotice error={mainError} />
             {mainError ? (
-              <Button onPress={retry}>Retry main chat</Button>
+              <Button onPress={retry}>{t("retryMainChat")}</Button>
             ) : (
               <ActivityIndicator color={colors.blueDark} />
             )}
@@ -150,8 +151,8 @@ export function ThreadsSheet({ onClose }: { onClose: () => void }) {
           <>
             <LinkRow
               icon={MessageCircle}
-              title="Main chat"
-              detail="Your ongoing conversation"
+              title={t("mainChat")}
+              detail={t("mainChatDetail")}
               onPress={() => {
                 select({ id: mainId, existing: true });
                 onClose();
@@ -165,19 +166,19 @@ export function ThreadsSheet({ onClose }: { onClose: () => void }) {
                 onClose();
               }}
             >
-              New side chat
+              {t("newSideChat")}
             </Button>
             <View style={[s.between, { marginTop: 12 }]}>
-              <Text style={s.heading}>Side chats</Text>
+              <Text style={s.heading}>{t("sideChats")}</Text>
               <Button small onPress={() => setArchived(!archived)}>
-                {archived ? "Show active" : "Archived"}
+                {archived ? t("showActive") : t("archived")}
               </Button>
             </View>
             {threads.isLoading && <ActivityIndicator color={colors.blueDark} />}
             <ErrorNotice error={error || threads.error?.message} />
             {threads.error && (
               <Button small onPress={threads.refetchThreads}>
-                Retry conversations
+                {t("retryConversations")}
               </Button>
             )}
             {!archived &&
@@ -190,8 +191,8 @@ export function ThreadsSheet({ onClose }: { onClose: () => void }) {
                   <LinkRow
                     key={item.id}
                     icon={MessageCircle}
-                    title={`Side chat ${index + 1}`}
-                    detail="Open in this app"
+                    title={t("sideChatN", { n: index + 1 })}
+                    detail={t("openInApp")}
                     onPress={() => {
                       select(item);
                       onClose();
@@ -212,7 +213,9 @@ export function ThreadsSheet({ onClose }: { onClose: () => void }) {
                 >
                   <Pressable
                     accessibilityRole="button"
-                    accessibilityLabel={`Open conversation: ${thread.name || "Untitled conversation"}`}
+                    accessibilityLabel={t("openConversation", {
+                      name: thread.name || t("untitledConversation"),
+                    })}
                     accessibilityState={{ selected: selection.id === thread.id }}
                     onPress={() => {
                       select({ id: thread.id, existing: true });
@@ -222,11 +225,11 @@ export function ThreadsSheet({ onClose }: { onClose: () => void }) {
                   >
                     <MessageCircle size={19} color={colors.text} />
                     <Text style={[s.text, { flex: 1 }]}>
-                      {thread.name || "Untitled conversation"}
+                      {thread.name || t("untitledConversation")}
                     </Text>
                   </Pressable>
                   {editing === thread.id && (
-                    <Field label="Conversation name" value={name} onChangeText={setName} />
+                    <Field label={t("conversationName")} value={name} onChangeText={setName} />
                   )}
                   <View style={[s.row, { gap: 8 }]}>
                     <Button
@@ -241,7 +244,7 @@ export function ThreadsSheet({ onClose }: { onClose: () => void }) {
                         }
                       }}
                     >
-                      {editing === thread.id ? "Save name" : "Rename"}
+                      {editing === thread.id ? t("saveName") : t("rename")}
                     </Button>
                     <Button
                       small
@@ -255,7 +258,7 @@ export function ThreadsSheet({ onClose }: { onClose: () => void }) {
                         )
                       }
                     >
-                      {thread.archived ? "Restore" : "Archive"}
+                      {thread.archived ? t("restore") : t("archive")}
                     </Button>
                   </View>
                 </View>
@@ -264,44 +267,34 @@ export function ThreadsSheet({ onClose }: { onClose: () => void }) {
               !threads.error &&
               !threads.threads.some(
                 (thread) => thread.id !== mainId && thread.archived === archived,
-              ) && (
-                <Text style={s.muted}>
-                  {archived
-                    ? "No archived conversations."
-                    : "Keep a separate topic here. Your main chat is always available."}
-                </Text>
-              )}
+              ) && <Text style={s.muted}>{archived ? t("noArchived") : t("sideChatHint")}</Text>}
             <ErrorNotice error={threads.fetchMoreError?.message} />
             {threads.hasMoreThreads && (
               <Button small busy={threads.isFetchingMoreThreads} onPress={threads.fetchMoreThreads}>
-                Load more conversations
+                {t("loadMoreConversations")}
               </Button>
             )}
-            <Text style={s.small}>
-              Side chats keep their own conversation context. Your agent’s saved memory is shared.
-            </Text>
+            <Text style={s.small}>{t("sideChatContextNote")}</Text>
           </>
         ) : (
           <>
             <LinkRow
               icon={MessageCircle}
-              title="Main chat"
-              detail="Saved in this workspace"
+              title={t("mainChat")}
+              detail={t("savedInWorkspace")}
               onPress={() => {
                 navigate("chat");
                 onClose();
               }}
             />
-            <Text style={s.muted}>
-              Your conversation is saved in this workspace. You can manage connections in Apps.
-            </Text>
+            <Text style={s.muted}>{t("localChatNote")}</Text>
           </>
         )}
         <View style={s.divider} />
         <LinkRow
           icon={Plus}
-          title="Delegate task"
-          detail="A plan, document, or spending summary"
+          title={t("delegateTask")}
+          detail={t("delegateDetail")}
           onPress={() => {
             onClose();
             open({ type: "delegate" });
@@ -309,18 +302,18 @@ export function ThreadsSheet({ onClose }: { onClose: () => void }) {
         />
         <LinkRow
           icon={Monitor}
-          title="Agent computer"
-          detail="Browser, sessions and documents"
+          title={t("agentComputer")}
+          detail={t("computerDetail")}
           onPress={() => {
             onClose();
             open({ type: "computer" });
           }}
         />
-        <LinkRow icon={CalendarDays} title="Calendar" onPress={() => go("calendar")} />
-        <LinkRow icon={FileText} title="Files" onPress={() => go("files")} />
-        <LinkRow icon={Settings2} title="Apps & settings" onPress={() => go("apps")} />
+        <LinkRow icon={CalendarDays} title={t("shortcutCalendar")} onPress={() => go("calendar")} />
+        <LinkRow icon={FileText} title={t("shortcutFiles")} onPress={() => go("files")} />
+        <LinkRow icon={Settings2} title={t("appsSettings")} onPress={() => go("apps")} />
         <Button small icon={RefreshCw} onPress={() => void mutate(refresh)}>
-          Refresh workspace
+          {t("refreshWorkspace")}
         </Button>
       </View>
     </Sheet>
diff --git a/apps/mobile/src/ui.tsx b/apps/mobile/src/ui.tsx
index 0346f6478..89661f5aa 100644
--- a/apps/mobile/src/ui.tsx
+++ b/apps/mobile/src/ui.tsx
@@ -15,6 +15,7 @@ import {
   type ViewStyle,
 } from "react-native";
 import { useSafeAreaInsets } from "react-native-safe-area-context";
+import { t } from "./strings";
 export const colors = {
   canvas: "#FCFCFC",
   card: "#FFFFFF",
@@ -297,7 +298,7 @@ export function Sheet({
               <Text style={s.title}>{title}</Text>
               {!!subtitle && <Text style={s.muted}>{subtitle}</Text>}
             </View>
-            <IconButton icon={X} label="Close details" onPress={onClose} />
+            <IconButton icon={X} label={t("closeDetails")} onPress={onClose} />
           </View>
           <ScrollView
             keyboardShouldPersistTaps="handled"
@@ -413,7 +414,7 @@ export function Mascot({
     lilac: "#F1ECF9",
   }[variant];
   return (
-    <View accessibilityLabel="OpenMuse capybara" style={{ width: size, height: size }}>
+    <View accessibilityLabel={t("openmuseCapybara")} style={{ width: size, height: size }}>
       <View
         style={{
           position: "absolute",
@@ -438,18 +439,18 @@ export function dateLabel(value: string, options?: Intl.DateTimeFormatOptions) {
   const date = new Date(value);
   return Number.isNaN(date.getTime())
     ? value
-    : date.toLocaleDateString("en-US", options || { month: "short", day: "numeric" });
+    : date.toLocaleDateString("zh-CN", options || { month: "short", day: "numeric" });
 }
 export function timeLabel(value: string, timeZone?: string) {
   const date = new Date(value);
   return Number.isNaN(date.getTime())
     ? value
-    : date.toLocaleTimeString("en-US", { hour: "numeric", minute: "2-digit", timeZone });
+    : date.toLocaleTimeString("zh-CN", { hour: "numeric", minute: "2-digit", timeZone });
 }
 export { relativeDate } from "./relative-date";
 
 export function resultSummary(value: string) {
   return /^Saved to (?:sample|local) sent mail(?: · .+)?$/.test(value)
-    ? "Reply saved in your local Sent mail."
+    ? t("replySavedLocalSent")
     : value;
 }
diff --git a/apps/mobile/test/jev-actions.test.ts b/apps/mobile/test/jev-actions.test.ts
index 17b2235b1..5eb68a48c 100644
--- a/apps/mobile/test/jev-actions.test.ts
+++ b/apps/mobile/test/jev-actions.test.ts
@@ -74,7 +74,7 @@ test("finds AG-UI function tool calls as rendered by CopilotKit", () => {
   assert.equal(latestJevPanelId(messages, "thread-1"), "panel-1");
   assert.equal(
     displayJevUserMessage(selectionText(panel, "explore"), messages),
-    "Selected: Explore exhibits",
+    "已选择：Explore exhibits",
   );
 });
 
@@ -146,7 +146,7 @@ test("selection uses the bounded server action format and rejects unknown option
     selectionText(panel, "explore"),
     '[OpenMuse choice] {"panelId":"panel-1","threadId":"thread-1","candidateSetVersion":1,"optionId":"explore"}',
   );
-  assert.throws(() => selectionText(panel, "unknown"), /Unknown choice/);
+  assert.throws(() => selectionText(panel, "unknown"), /未知的选择/);
 });
 
 test("the transcript shows the trusted option label instead of the action payload", () => {
@@ -155,10 +155,10 @@ test("the transcript shows the trusted option label instead of the action payloa
     { role: "assistant", toolCalls: [{ id: "tool-1", name: "present_choices" }] },
     { role: "tool", toolCallId: "tool-1", content: JSON.stringify({ panel }) },
   ];
-  assert.equal(displayJevUserMessage(action, history), "Selected: Explore exhibits");
+  assert.equal(displayJevUserMessage(action, history), "已选择：Explore exhibits");
   assert.equal(displayJevUserMessage("Hello", history), "Hello");
-  assert.equal(displayJevUserMessage("[OpenMuse choice] {broken", history), "Choice unavailable");
-  assert.equal(displayJevUserMessage(action, []), "Choice unavailable");
+  assert.equal(displayJevUserMessage("[OpenMuse choice] {broken", history), "选择不可用");
+  assert.equal(displayJevUserMessage(action, []), "选择不可用");
 });
 
 test("a replayed choice is confirmed only after a server continuation", () => {
diff --git a/apps/mobile/test/relative-date.test.ts b/apps/mobile/test/relative-date.test.ts
index ab65f1210..73b281102 100644
--- a/apps/mobile/test/relative-date.test.ts
+++ b/apps/mobile/test/relative-date.test.ts
@@ -5,14 +5,14 @@ import { relativeDate } from "../src/relative-date.ts";
 const now = Date.parse("2026-09-30T12:00:00Z");
 
 test("recent past timestamps keep their buckets", () => {
-  assert.equal(relativeDate("2026-09-30T11:59:30Z", now), "Just now");
-  assert.equal(relativeDate("2026-09-30T11:30:00Z", now), "30m ago");
-  assert.equal(relativeDate("2026-09-30T09:00:00Z", now), "3h ago");
+  assert.equal(relativeDate("2026-09-30T11:59:30Z", now), "刚刚");
+  assert.equal(relativeDate("2026-09-30T11:30:00Z", now), "30 分钟前");
+  assert.equal(relativeDate("2026-09-30T09:00:00Z", now), "3 小时前");
 });
 
 test("future timestamps beyond clock skew show a date instead of just now", () => {
-  assert.equal(relativeDate("2026-09-30T12:00:10Z", now), "Just now");
-  const expected = new Date(Date.parse("2026-10-05T12:00:00Z")).toLocaleDateString("en-US", {
+  assert.equal(relativeDate("2026-09-30T12:00:10Z", now), "刚刚");
+  const expected = new Date(Date.parse("2026-10-05T12:00:00Z")).toLocaleDateString("zh-CN", {
     month: "short",
     day: "numeric",
   });
diff --git a/apps/mobile/test/strings.test.ts b/apps/mobile/test/strings.test.ts
new file mode 100644
index 000000000..e7509b4c1
--- /dev/null
+++ b/apps/mobile/test/strings.test.ts
@@ -0,0 +1,19 @@
+import assert from "node:assert/strict";
+import { test } from "node:test";
+import { t } from "../src/strings.ts";
+
+test("t returns the Chinese text for a known key", () => {
+  assert.equal(t("justNow"), "刚刚");
+});
+
+test("t fills placeholders", () => {
+  assert.equal(t("minutesAgo", { n: 5 }), "5 分钟前");
+});
+
+test("t leaves unknown placeholders alone", () => {
+  assert.equal(t("minutesAgo", { other: 1 }), "{n} 分钟前");
+});
+
+test("t falls back to the key itself when unknown", () => {
+  assert.equal(t("no.such.key"), "no.such.key");
+});
diff --git a/docs/adr/0001-openbot-as-client-entry.md b/docs/adr/0001-openbot-as-client-entry.md
new file mode 100644
index 000000000..4fa2953cb
--- /dev/null
+++ b/docs/adr/0001-openbot-as-client-entry.md
@@ -0,0 +1,11 @@
+---
+status: superseded by ADR-0009
+---
+
+# Use OpenBot as the client entry and retain OpenMuse capabilities internally
+
+OpenMuse clients will use OpenBot for user identity, Bots, channels, conversation threads, and computer access. OpenMuse's Gmail, Calendar, PDF, finance calculations, and reviewed external-write capabilities will remain available through an internal capability service connected to OpenBot. Client requests will enter through OpenBot; the internal service must keep data and credentials isolated by the authenticated OpenBot user. Later decisions place durable task execution and personal goals, ideas, memories, and task notifications in OpenBot; see [ADR 0005](0005-openbot-owns-durable-task-lifecycle.md) and [ADR 0007](0007-openbot-owns-personal-context-and-task-notifications.md).
+
+Existing single-owner OpenMuse data is outside the cutover scope. The integrated product must support its full feature set for new users and new data, while the old instance can be retained separately.
+
+The alternative of moving all OpenMuse business modules into OpenBot would concentrate the backend but requires migrating unrelated storage, OAuth, and document workflows at once. Letting clients call two public backends would expose two authentication and permission models to the app. The Bot-to-business interface remains a separate design decision.
diff --git a/docs/adr/0002-preserve-openmuse-bot-and-review-ownership.md b/docs/adr/0002-preserve-openmuse-bot-and-review-ownership.md
new file mode 100644
index 000000000..d86651f19
--- /dev/null
+++ b/docs/adr/0002-preserve-openmuse-bot-and-review-ownership.md
@@ -0,0 +1,11 @@
+---
+status: superseded by ADR-0009
+---
+
+# Preserve the OpenMuse Bot and each system's review decision
+
+The existing OpenMuse assistant will be adapted as a designated OpenBot Bot. It retains its task-planning and conversation behavior while OpenBot owns the user's channel, thread, and Bot access. Only this Bot receives OpenMuse's personal mail, calendar, PDF, and task capabilities initially; other Bots need an explicit later grant.
+
+The client will show one Activity entry point for pending decisions. OpenBot remains responsible for its policy approvals, including computer actions. OpenMuse remains responsible for reviewed external writes, including proposal identity, expiry, connected account, target version, and the final execution receipt. The common Activity view must preserve the source and decision semantics of each item.
+
+Replacing the OpenMuse assistant with a different Bot would change the established task behavior during a full-capability cutover. Mapping reviewed external writes into OpenBot's general approval flow would drop checks that OpenMuse currently performs at decision time. The cross-system Activity presentation is shared, while execution ownership is not.
diff --git a/docs/adr/0003-delegated-user-identity-and-tool-control.md b/docs/adr/0003-delegated-user-identity-and-tool-control.md
new file mode 100644
index 000000000..9d9e184ac
--- /dev/null
+++ b/docs/adr/0003-delegated-user-identity-and-tool-control.md
@@ -0,0 +1,11 @@
+---
+status: superseded by ADR-0009
+---
+
+# Delegate verified user identity to the OpenMuse Bot
+
+For each remote OpenMuse Bot run, OpenBot will issue a short-lived identity credential scoped to the receiving service, the authenticated user, the Bot, and the run. OpenMuse verifies it before constructing its user-bound agent. The credential is separate from OpenBot's existing opaque `openbotRun` tool callback assertion and does not require sharing OpenBot's deployment signing key. Client-supplied user IDs and a shared agent instance cannot establish data ownership.
+
+OpenBot controls which OpenMuse business tools are offered to the designated Bot and records their calls. OpenMuse remains responsible for user ownership, durable task state, and the exact review and execution checks for external writes. Each OpenBot user connects their own Google account; credentials, documents, tasks, and memories belong to that user.
+
+The alternative of making the remote Bot entirely user-blind would require replacing the existing owner-bound conversation and tool model with callbacks for every personal read and write. Relying only on OpenMuse's local tool checks would leave OpenBot's per-Bot grants unable to constrain the tools offered during a run.
diff --git a/docs/adr/0004-private-openmuse-bot-per-user.md b/docs/adr/0004-private-openmuse-bot-per-user.md
new file mode 100644
index 000000000..c8249e50c
--- /dev/null
+++ b/docs/adr/0004-private-openmuse-bot-per-user.md
@@ -0,0 +1,9 @@
+---
+status: accepted
+---
+
+# Give each user a private OpenMuse Bot
+
+Each OpenBot user will have a private OpenMuse Bot. OpenBot's computer is attached to a Bot profile, so this gives each user a separate browser profile, workspace, and computer lifecycle while preserving the personal assistant experience. A shared public OpenMuse Bot would share those computer assets among its users and is unsuitable for personal mail, files, and tasks.
+
+The first self-hosted deployment targets approximately 1–20 simultaneously active users with ordinary OpenBot account sign-in. Gmail and Calendar are separately connected by each user. Computer capacity and worker concurrency must be bounded for that range. A private OpenMuse Bot is created automatically on a user's first entry, with idempotent provisioning from an administrator-managed template. Template versions roll out common security settings and tool grants to existing Bots; user-editable descriptions and preferences are preserved, with differences shown before updating them.
diff --git a/docs/adr/0005-openbot-owns-durable-task-lifecycle.md b/docs/adr/0005-openbot-owns-durable-task-lifecycle.md
new file mode 100644
index 000000000..90469a8be
--- /dev/null
+++ b/docs/adr/0005-openbot-owns-durable-task-lifecycle.md
@@ -0,0 +1,11 @@
+---
+status: accepted
+---
+
+# Move durable task execution into OpenBot
+
+OpenBot will own the lifecycle and data of newly created OpenMuse delegated tasks, including plans and steps, run records, artifacts and evidence references, background scheduling, monitor definitions and cursors, execution, recovery, pause and resume, and retry. The current OpenMuse TaskWorker will not remain the scheduler for integrated users. This lets offline work use OpenBot's user, Bot, computer, policy, and audit context without an external worker impersonating a user or retaining an expiring run assertion.
+
+Google connections, PDF processing, finance calculations, and reviewed external writes also move into OpenBot under [ADR 0009](0009-openbot-as-sole-backend.md). Personal goals, ideas, memories, and task notification read state are owned by OpenBot under [ADR 0007](0007-openbot-owns-personal-context-and-task-notifications.md). Existing single-owner data remains outside cutover scope.
+
+The rejected alternative retained OpenMuse's worker and introduced a new OpenBot background-call interface for each computer-dependent step. Migrating execution creates a larger initial implementation, because OpenBot's current headless runs do not by themselves prove parity with OpenMuse's task leases, input waits, proposal review, monitor rules, and recovery.
diff --git a/docs/adr/0006-dedicated-openmuse-task-module.md b/docs/adr/0006-dedicated-openmuse-task-module.md
new file mode 100644
index 000000000..aacc9c616
--- /dev/null
+++ b/docs/adr/0006-dedicated-openmuse-task-module.md
@@ -0,0 +1,9 @@
+---
+status: accepted
+---
+
+# Add a dedicated OpenMuse Task module in OpenBot
+
+OpenBot will add a Task module for OpenMuse's single jobs, document workflows, finance jobs, plans, and recurring monitors. The module owns their task state, plan steps, run history, evidence and artifact references, business retry state, monitor schedule, observation cursor, and deduplication. It reuses OpenBot's existing work queue, headless Bot runner, user and Bot authorization, computer gateway, and delivery infrastructure through their interfaces.
+
+Responsibilities remain long-lived goals driven by subscriptions and events. Making them also represent document filling, single jobs, and price monitoring would force unrelated lifecycle and state rules into one concept. A dedicated Task interface makes completion, input waits, cancellation, evidence, and monitor outcomes explicit without duplicating OpenBot's underlying job queue.
diff --git a/docs/adr/0007-openbot-owns-personal-context-and-task-notifications.md b/docs/adr/0007-openbot-owns-personal-context-and-task-notifications.md
new file mode 100644
index 000000000..f72d481da
--- /dev/null
+++ b/docs/adr/0007-openbot-owns-personal-context-and-task-notifications.md
@@ -0,0 +1,9 @@
+---
+status: accepted
+---
+
+# Keep personal context and task notifications with OpenBot
+
+OpenBot will own each integrated user's new goals, ideas, and personal memories, alongside the Task module. They are available only to that user's private OpenMuse Bot; another Bot requires a later explicit grant even if the same user can access it. Task notifications and their read state are also stored in OpenBot, which presents them with policy approvals and reviewed-action requests in one Activity view. The earlier internal-service split was superseded by [ADR 0009](0009-openbot-as-sole-backend.md).
+
+This makes task references to goals and notification events local to their execution authority. Leaving these records in OpenMuse would require two systems to agree on task progress, goal milestones, and notification read state during recovery.
diff --git a/docs/adr/0008-account-deletion-grace-period.md b/docs/adr/0008-account-deletion-grace-period.md
new file mode 100644
index 000000000..033ea0fe1
--- /dev/null
+++ b/docs/adr/0008-account-deletion-grace-period.md
@@ -0,0 +1,9 @@
+---
+status: accepted
+---
+
+# Stop work immediately and delete personal data after 30 days
+
+When an OpenBot user account is deleted, the system immediately disables that user's private OpenMuse Bot and outstanding tasks and disconnects their Google connection. The user's private files and business records remain recoverable by an administrator for 30 days, then are deleted from OpenBot's stores. A durable deletion record makes cleanup retries safe.
+
+Immediate data deletion would make mistaken account removal irreversible. Indefinite retention would leave personal mail-derived files and task history without a bounded cleanup date. The grace period separates immediate loss of access and credentials from delayed removal of recoverable data.
diff --git a/docs/adr/0009-openbot-as-sole-backend.md b/docs/adr/0009-openbot-as-sole-backend.md
new file mode 100644
index 000000000..d3fa59ac1
--- /dev/null
+++ b/docs/adr/0009-openbot-as-sole-backend.md
@@ -0,0 +1,11 @@
+---
+status: accepted
+---
+
+# Make OpenBot the sole backend for OpenMuse
+
+OpenMuse will be a frontend for OpenBot. OpenBot owns identity, each user's private OpenMuse Bot, channels and threads, Google connections and connector calls, files and PDF artifacts, reviewed external writes, computer access, tasks, monitoring, goals, ideas, memories, approvals, and notifications. The existing OpenMuse assistant behavior and business rules are ported into OpenBot modules and tools. OpenMuse keeps rendering, navigation, forms, document viewing, and client-side interaction state; it does not operate a separate business API, OAuth store, TaskWorker, or file store for integrated users.
+
+OpenBot's connector and file infrastructure are the starting points, not proof of feature parity. The selected connector path is OpenConnector. Its live provider directory currently includes Gmail and Google Calendar actions, but OpenBot's adapter selects custom credentials and does not implement the providers' OAuth2 connection flow. OpenBot must add the required per-user Google connection flow and stable mail/calendar interfaces before the existing OpenMuse Gmail and Calendar experience can move. Channel attachments currently reject PDF, while Craft files support PDF but are scoped to a Craft session. OpenBot therefore needs user-owned document and artifact contracts, with PDF inspection/filling and exact reviewed-write checks implemented on the backend. A connector or workspace file path alone does not supply those OpenMuse workflows.
+
+This supersedes the former internal OpenMuse capability-service boundary and its cross-service identity credential. The common Activity interface remains, but OpenBot owns both policy approvals and reviewed external-write records as distinct decision types. Existing single-owner OpenMuse data is not migrated under the accepted cutover scope.
diff --git a/docs/adr/0010-openmuse-repository-as-openbot-submodule.md b/docs/adr/0010-openmuse-repository-as-openbot-submodule.md
new file mode 100644
index 000000000..c3a3f37f9
--- /dev/null
+++ b/docs/adr/0010-openmuse-repository-as-openbot-submodule.md
@@ -0,0 +1,9 @@
+---
+status: accepted
+---
+
+# Reference the OpenMuse repository from OpenBot
+
+The existing OpenMuse repository is the frontend source and will be referenced from OpenBot as a Git submodule. The copied `OpenBot/apps/openmuse-mobile` subtree is removed after its relevant changes have been reconciled with the OpenMuse source. OpenBot builds only the submodule's `apps/mobile` client; its legacy `apps/server` and `apps/worker` are not deployed for the integrated product.
+
+A Git submodule records a committed OpenMuse revision and cannot include uncommitted local edits or mount only `apps/mobile` from a larger repository. The `.gitmodules` URL should be the accessible OpenMuse remote (`https://github.com/1123786563/openmuse`) rather than a local absolute path. OpenBot's CI and build commands must initialize the submodule and use its `apps/mobile` directory without launching the legacy backend.
diff --git a/docs/agents/domain.md b/docs/agents/domain.md
new file mode 100644
index 000000000..0fa1c389a
--- /dev/null
+++ b/docs/agents/domain.md
@@ -0,0 +1,25 @@
+# Domain docs
+
+This repository uses a single domain context.
+
+## Before exploring
+
+- Read the root `CONTEXT.md` for shared vocabulary.
+- Read relevant decisions in `docs/adr/`. An ADR marked superseded is historical context, not the current direction.
+
+If a document is absent, continue without creating it solely to satisfy this reading rule. Add or update domain documentation when a term or decision actually changes.
+
+## Language and decisions
+
+Use the glossary's terms in issues, specs, implementation plans, and review comments. In particular, keep Bot, Channel, and Thread distinct; keep Reviewed action distinct from Policy approval. Avoid synonyms that `CONTEXT.md` explicitly rejects.
+
+If proposed work conflicts with an accepted ADR, name the conflict and resolve it explicitly before treating the new direction as agreed.
+
+## Layout
+
+```text
+/
+├── CONTEXT.md
+└── docs/
+    └── adr/
+```
diff --git a/docs/agents/issue-tracker.md b/docs/agents/issue-tracker.md
new file mode 100644
index 000000000..e9c0caded
--- /dev/null
+++ b/docs/agents/issue-tracker.md
@@ -0,0 +1,34 @@
+# Issue tracker: GitHub
+
+Issues and specs for this repository live in GitHub Issues at `1123786563/openmuse`. Use the authenticated `gh` CLI.
+
+## Conventions
+
+- **Create an issue:** `gh issue create --repo 1123786563/openmuse --title "..." --body-file <prepared-file>`. Prepare multiline bodies in a file first.
+- **Read an issue:** `gh issue view <number> --repo 1123786563/openmuse --comments`. Fetch labels and related issue metadata when needed.
+- **List issues:** `gh issue list --repo 1123786563/openmuse --state open --json number,title,body,labels,comments` with suitable limits and filters.
+- **Comment on an issue:** `gh issue comment <number> --repo 1123786563/openmuse --body-file <prepared-file>`.
+- **Apply or remove labels:** `gh issue edit <number> --repo 1123786563/openmuse --add-label "<label>"` or `--remove-label "<label>"`.
+- **Close an issue:** `gh issue close <number> --repo 1123786563/openmuse --comment "..."`.
+
+## Pull requests as a request surface
+
+**PRs as a request surface: no.** External pull requests are not automatically part of the issue intake queue.
+
+## When a skill says “publish to the issue tracker”
+
+Create a GitHub issue in `1123786563/openmuse`.
+
+## When a skill says “fetch the relevant ticket”
+
+Read the referenced GitHub issue, including its labels and discussion.
+
+## Wayfinding operations
+
+Used by `/wayfinder`. A map is one GitHub issue with child decision issues.
+
+- **Map:** one issue labelled `wayfinder:map`, containing Notes, Decisions-so-far, and Fog.
+- **Child ticket:** link as a native GitHub sub-issue. If sub-issues are unavailable, use a task list in the map and a `Part of #<map>` line on the child.
+- **Blocking:** use GitHub's native issue dependencies. If unavailable, put `Blocked by: #<number>` near the top of the child. Containment alone does not imply a dependency.
+- **Frontier:** choose an open, unclaimed child whose blocking issues are all closed.
+- **Claim and resolve:** assign the issue before work; record the decision in a comment, close it, and link the result from the map.
diff --git a/docs/superpowers/plans/2026-10-12-openmuse-openbot-acceptance-v4.md b/docs/superpowers/plans/2026-10-12-openmuse-openbot-acceptance-v4.md
new file mode 100644
index 000000000..1e2e7a3fa
--- /dev/null
+++ b/docs/superpowers/plans/2026-10-12-openmuse-openbot-acceptance-v4.md
@@ -0,0 +1,80 @@
+# OpenMuse on OpenBot — release acceptance matrix (v4 draft)
+
+> **Status:** approved and published as [release gate #94](https://github.com/1123786563/openmuse/issues/94); no cases executed. Companion to the [v4 Ticket catalog](2026-10-12-openmuse-openbot-ticket-catalog-v4.md) and [contracts](2026-10-12-openmuse-openbot-contracts-v4.md). The cases below are **release gates**, not Code Agent implementation Tickets. A gate is assigned to one verifier context by a bounded scenario group, and a failure becomes a defect Issue owned by the implementation Ticket in the last column.
+
+## Environment and evidence protocol
+
+- **Users:** OpenBot users U-A and U-B, each with a distinct real Gmail and Calendar test account G-A and G-B. Use separate private Bots B-A/B-B, Channels C-A/C-B and computers K-A/K-B. Seed PDF P-1 (text/checkbox/unsupported dropdown), mail thread M-1 with PDF attachment, calendar event E-1 and finance CSV F-1 from contract §§4–7. No production personal data.
+- **Devices:** Web in a clean browser profile; one iOS device/simulator with the release bundle; one Android device/emulator with the release bundle. Record OS/app versions, API revision, OpenMuse submodule SHA, OpenConnector version, UTC run time, and environment ID. Native tests include process kill/reopen; Web includes refresh. For callbacks, record only sanitized authorization status, never tokens.
+- **Evidence:** each row's ID is a case prefix. Run applicable platforms separately: `W-<ID>`, `I-<ID>`, `A-<ID>`; admin/operator-only rows use `O-<ID>`. Store a record under `docs/acceptance/openmuse-on-openbot/<run-id>/<evidence-id>.md` with preconditions, exact actions, expected UI, expected API/database/provider state, observed result, sanitized screenshot/log/receipt paths, and PASS/FAIL. A row is passed only when every listed platform has a PASS record.
+- **Failure routing:** last-column Ticket owns first investigation; an interface bug can be reassigned with evidence. A fix reruns the failed row on affected platforms and any row sharing the changed contract. Signoff links all 43 row IDs to PASS evidence; missing evidence is a failure, not a waiver. No old OpenMuse server or TaskWorker process may be present.
+- **Bounded verifier groups:** core identity/chat/computer (S01–S14, S38); Google/review (S15–S22); files/document (S23–S29); Tasks/monitor/finance (S28, S30–S35, S37); personal/deletion/ops (S36, S39–S43). Each group is run separately per platform; a verifier receives only that group and the relevant contract section.
+
+## Spec #1 story cases
+
+| ID / platform | Preconditions and action | Expected UI, API and durable/provider state | Owning Ticket |
+| --- | --- | --- | --- |
+| S01 / I | U-A signed out on iOS; sign in and open workspace. | Sign-in returns U-A session; B-A appears, B-B absent; no OpenMuse Bearer token. | I04 |
+| S02 / A | U-A signed out on Android; sign in and open workspace. | Same account and B-A as Web/iOS; B-B absent. | I05 |
+| S03 / W | U-A signed out on Web; sign in and open workspace. | Better Auth cookie session returns U-A; B-A opens; no old /api/session. | I01,I03 |
+| S04 / W,I,A | U-A signed in; kill/reopen native app or refresh Web. | getSession remains U-A; same B-A and Channel list reappear without duplicate Bot. | I03,I04,I05 |
+| S05 / W,I,A | U-A opens Channel, PDF and computer preview; logout; U-B signs in on same device/profile. | U-B sees none of U-A's Channel/cache/PDF bytes/stream; old File URL and session fail. | I06,I07,I08 |
+| S06 / W,I,A | New U-B signs in and enters twice, including concurrent first-entry requests. | One B-B row and one computer profile exist; both requests return same Bot ID. | I02,I03 |
+| S07 / O,W | U-A edits Bot title to Research helper; admin previews v1→v2 template. | Preview shows managed mail.read→calendar.read and unchanged user title; apply preserves title. | I09 |
+| S08 / O,W | Admin applies v2 twice concurrently to B-A/B-B. | Each Bot ends at v2 with one grant update; non-admin apply gets 403. | I09 |
+| S09 / W,I,A | U-A and U-B open computer and workspace views simultaneously. | K-A/K-B IDs differ; foreign stream/input/File request returns 403/404; no cross-user bytes. | I02,K01,K03 |
+| S10 / W,I,A | U-A creates C1/C2, switches, renames C1, archives and reopens it. | C1/C2 retain different Thread IDs; archived filter finds C1 and its history. | C02,C03,C08,C09 |
+| S11 / W,I,A | U-A sends text in C1; reload/reopen and select C1. | Same Thread and messages persist; C2 history remains distinct. | C01,C02 |
+| S12 / W,I,A | Bot streams text, named tool event and error fixture. | Text incrementally appears; exact event card or neutral unknown fallback appears; error is not success. | C01,C06 |
+| S13 / W,I,A | Start run; stop during stream; start another and disconnect after e2, reconnect. | Stopped/completed terminal state is singular; e2 renders once and e3 follows; no spinner. | C04,C05 |
+| S14 / W,I,A | Ask private Bot to delegate a one-step task, then inspect Task status. | Tool invocation creates one durable Task; reply never says complete before Task terminal state. | C07,T02 |
+| S15 / W,I,A | U-A connects G-A Gmail; U-B connects G-B; authorize Calendar separately. | Account/scopes visible; aliases differ; no Google token in client; callback returns to owner. | G01,G03,G06 |
+| S16 / W,I,A | Disconnect G-A, invoke Mail, reconnect and inspect account. | Disconnected UI and 409 provider refusal; new generation on reconnect; G-B unaffected. | G05,G06 |
+| S17 / W,I,A | Seed three Gmail messages with equal timestamp, page size 2; open thread and attachment. | No duplicate/missing IDs; oldest-first thread; attachment metadata/bytes match G-A only. | M01,M02,M03,M04 |
+| S18 / W,I,A | Seed LA DST timed and all-day events; browse Calendar from two device zones. | Timed fixture shows 01:30–03:30 LA and one-hour duration; all-day stays March 8; G-B isolated. | A01,A02,A03 |
+| S19 / W,I,A | Prepare Gmail proposal with exact to/subject/body/G-A; approve once. | Review shows bound fields; one provider message ID and one receipt; Task link if present. | R01,R02 |
+| S20 / W,I,A | Prepare create/update/delete event proposals with E-1 etag; approve each. | Exact calendar/time zone/target visible; one provider outcome/receipt per approved action. | R05,R06,R07 |
+| S21 / W,I,A | Deny one proposal; expire another; change account/etag; inject provider timeout. | Zero writes for deny/expiry/stale; uncertain shows warning and no auto-retry; reconciliation evidence persists. | R03,R04,R08 |
+| S22 / W,I,A | Seed one Policy approval, one Reviewed action and one Task notification; act on each. | One ordered typed feed; wrong decision type returns 409; marking notification read changes only it. | V01,V02 |
+| S23 / W,I,A | U-A uploads File X, lists, renames, downloads, deletes; U-B copies URL. | Metadata persists; SHA-256 matches bytes; old URL and U-B fetch fail; item disappears on delete. | F01,F02,F03,F04,F10 |
+| S24 / W,I,A | U-A selects PDF attachment from M-1 and imports twice with same key. | One owned File version with message/thread provenance; U-B cannot import G-A attachment. | T14 |
+| S25 / W,I,A | Inspect P-1 with text, checkbox and dropdown; inspect encrypted PDF. | Text/checkbox supported; dropdown reason shown; encrypted PDF fails distinctly; original unchanged. | F05 |
+| S26 / W,I,A | Fill P-1 name=Ava and consent=true; try unknown field and wrong type. | New version has Ava/true; original hash unchanged; invalid input creates no version. | F06 |
+| S27 / W,I,A | Open original and copy; transfer copy twice into K-A workspace. | Both versions readable; generated workspace artifact stable on retry; same-name existing file not overwritten. | F07,F08,F09 |
+| S28 / W,I,A | Start one-step Task, close client, reopen after run; inspect detail. | Task runs on private Bot; steps/evidence and terminal result persist; U-B gets 404 for Task ID. | T01,T02,T03 |
+| S29 / W,I,A | Select M-1 PDF, start document Task, omit a required value, reopen and answer; review reply. | Wait survives restart; one filled copy created; exact attachment version bound; no send until approval. | T14,T15,T16 |
+| S30 / W,I,A | Submit F-1 three-row CSV and bad 6.501 row variant. | Valid result: income 4200.00, spending 91.00, saved 4109.00; bad row 4 refuses all output. | T13 |
+| S31 / W,I,A | Run three-step Plan; fail step 2, restart worker, inspect. | Step 1 remains succeeded; step 2 failed; step 3 pending; no duplicate external effect. | T09 |
+| S32 / W,I,A | Create change/contains/price monitor with allowed interval; advance fake clock. | Due check occurs at nextCheckAt; condition match appears once with notification. | T10,T11,T12 |
+| S33 / W,I,A | Queue Task then cancel; pause running Task at safe step, resume; retry failed Task. | Transition matrix matches contract §7; terminal illegal action gets 409; retry has new attempt and old evidence. | T04,T05,T06 |
+| S34 / W,I,A | Kill worker during lease, waiting input and waiting review; restart and answer once. | No lost wait or duplicated completed step; stale worker cannot finish; repeated answer does not advance twice. | T07,T08 |
+| S35 / W,I,A | Repeat Monitor observation after restart and inject three failures. | Same observation creates no second item; next delays 15/30/60 minutes and reset after success. | T11 |
+| S36 / W,I,A | U-A creates Goal, Idea and Memory; private Bot reads IDs; U-B and another Bot try. | Private Bot returns exact ID/title/text; foreign reads refuse; deleted/revoked record no longer returns. | P01,P02,P03 |
+| S37 / W,I,A | Task succeeds then Monitor matches; inspect unread count and mark first read. | One notification per event key; unread count persists; U-B cannot mark A's item. | T12,V02 |
+| S38 / W,I,A | U-A views K-A, requests control; U-B requests K-A; A disconnects then sends input. | A controls until disconnect; B refused; late input returns 403/409 and is not delivered; audit records actor. | K01,K02,K03,K04 |
+| S39 / W,I,A | Delete U-A during active Task, Monitor and pending Reviewed action; attempt API/file/callback. | Session, Bot, Task scheduling, provider and File access stop immediately; U-B unaffected; executing uncertain attempt not replayed. | D01,D02,D03 |
+| S40 / O,W | At day 29 restore U-A; at day 31 repeat on another seeded deletion. | Bot, Channel/Thread, Task history, Files, Goal, Idea, Memory, notifications and review history restored read-only as specified; day-31 restore 410. | D04,D05 |
+| S41 / O | Clean recursive OpenBot checkout at pinned OpenMuse SHA; build Web/iOS/Android. | Exact commands in contract §1 pass; no copied-tree imports; deployed process list has no old OpenMuse backend. | B01,B02,B03,B04,O01 |
+| S42 / O | Start 20 private computers; request a 21st; queue five runnable Tasks; exceed a Bot's 2 GiB disk limit; advance 15 idle minutes. | 21st computer queues/refuses; only four Tasks run; fifth remains queued; disk write refuses; idle stream closes; no cross-user leak. | O03,O04 |
+| S43 / O | Inject connector refresh failure, queued Task age >5 minutes, outcome_unknown write and cleanup retryable_error. | Four health/ops signals appear with safe IDs and no secrets; owner sees delayed/uncertain states; cleanup retries remain visible. | O05,D09 |
+
+## Fault and edge-case run cards
+
+| Case | Setup → action | Expected result | Rerun owners |
+| --- | --- | --- | --- |
+| F-OAUTH-1 | Start Gmail consent, sign out, then return callback | State/session mismatch; no connection; UI asks sign-in | G01,G02,I06–I08 |
+| F-OAUTH-2 | Reuse completed callback URL | Same recorded connection result; no second alias/generation | G02 |
+| F-MAIL-1 | Approve same hash in two clients at once | One claim, one provider attempt, both clients see one receipt | R01,R02 |
+| F-MAIL-2 | Provider accepts send, response times out | outcome_unknown with attempt fingerprint; zero automatic retries | R04,T16 |
+| F-CAL-1 | Change E-1 etag after proposal | 409 stale, zero Calendar update/delete calls | R06,R07,R08 |
+| F-STREAM-1 | Disconnect after e2, replay e2/e3 | e2 rendered once, e3 rendered once | C05,C08,C09 |
+| F-CONTROL-1 | Revoke lease while key event is in flight | Later sequence refused; no input delivered after revocation | K03,K04 |
+| F-TASK-1 | Kill worker after lease claim before side effect | One recovered attempt, no lost Task | T07 |
+| F-TASK-2 | Kill worker after possible external effect | Reconciliation wait/failure; no replay | T07,R04 |
+| F-DELETE-1 | Delete while OAuth callback and signed download race | Both refuse after deletion marker; resource manifest remains retryable | D01,D03,D04 |
+| F-PURGE-1 | Fail File byte deletion once, retry | Manifest retains external key, then marks deleted; relational row not removed first | D04,D06,D08 |
+| F-PURGE-2 | Fail OpenConnector revocation once, retry | Alias remains enumerated and blocked until successful purge | D04,D07,D08 |
+
+## Signoff
+
+A release signer records a table with columns `storyId / requiredPlatforms / evidenceIds / result / codeRevision / defectIssue?`. All 43 rows must have passed evidence for every listed platform, plus all applicable fault cards. A defect triggers rerun of its row, fault card and any case that consumes the changed contract; prior evidence from a different revision cannot be reused for changed behavior. Signoff also attaches the deployment process inventory proving that OpenMuse's old server and TaskWorker were not running.
diff --git a/docs/superpowers/plans/2026-10-12-openmuse-openbot-contracts-v4.md b/docs/superpowers/plans/2026-10-12-openmuse-openbot-contracts-v4.md
new file mode 100644
index 000000000..c44add482
--- /dev/null
+++ b/docs/superpowers/plans/2026-10-12-openmuse-openbot-contracts-v4.md
@@ -0,0 +1,97 @@
+# OpenMuse on OpenBot: implementation contracts and fixed fixtures (v4 draft)
+
+> Approved planning source for the v4 Ticket catalog. **Target contracts, not implemented APIs.** Values copied from current code are marked **existing**; new values are **target decisions**. An implementing Ticket must preserve these contracts or record a reviewed change before downstream work. Spec: [openmuse#1](https://github.com/1123786563/openmuse/issues/1).
+
+## 1. Build and source boundary
+
+- **Existing:** OpenMuse root uses pnpm 11.19.0 and Node >=22; `pnpm install --frozen-lockfile`, `pnpm build:web`, `pnpm build:ios`, `pnpm build:android`, `pnpm typecheck`. OpenBot root uses Bun 1.3.14; `bun install --frozen-lockfile`, `bun run build`, `bun run typecheck`. OpenBot's root Bun workspace includes `app`, `server`, `worker`; it does not include the OpenMuse client.
+- **Target:** OpenBot submodule path `apps/openmuse` points to the entire existing OpenMuse repository. The client entry is `apps/openmuse/apps/mobile`. From an OpenBot clean checkout: `git submodule update --init --recursive`, `cd apps/openmuse && pnpm install --frozen-lockfile && pnpm build:web`; native export uses the corresponding OpenMuse root scripts. OpenBot's normal `bun run build` remains a separate backend build.
+- **Source reconciliation:** compare each path under copied `apps/openmuse-mobile` against the canonical `apps/mobile`, including its vendored domain, Metro configuration, tests, lockfiles and assets. Record `copied path / canonical path / difference hash / intent / target Ticket / resolved commit`. No deletion Ticket starts while a row is unresolved.
+- **CI acceptance:** a clean checkout records the OpenMuse commit SHA, builds Web and native exports from the submodule, builds OpenBot, and never starts the old OpenMuse server or TaskWorker.
+
+## 2. Identity, private Bot and local session state
+
+- **Existing:** OpenBot `createRequireUser` resolves the Better Auth session into an authenticated actor. `/api/mobile/workspace` reads the current user, accessible Bots and Channels; `/api/mobile/conversations` resolves a permitted Bot to a Channel/Thread. OpenMuse currently uses `POST /api/session`, a Bearer token held in `App.tsx` memory, `MuseApi`, CopilotKit headers, computer preview headers, and PDF download/view headers.
+- **Target first-entry contract:** `POST /api/mobile/openmuse-bot` takes no user ID. It returns `{botId, templateVersion, computerProfileId}`; ownership comes from the session. Add a database unique constraint on `(owner_user_id, template_key)` for `template_key=openmuse-private`. On concurrent calls, one insert wins and all callers read the same Bot. `GET /api/mobile/workspace` then returns that Bot. A foreign Bot ID remains a 404.
+- **Template ownership:** managed: `templateVersion`, `visibility=private`, `ownerUserId`, allowed tool grants, computer policy/profile, and system prompt revision. User-editable: Bot display name, title, description/role text, avatar and personal tone/preferences. A template revision applies only if `storedVersion < targetVersion`, under compare-and-swap or row lock; two concurrent updates produce one final version. Preview returns `{field, old, new, ownership}` and never proposes overwriting a user-editable value. Fixture: v1 grants `mail.read`; v2 adds `calendar.read` while a user-edited title “Research helper” remains unchanged.
+- **Client state inventory:** in-memory session token and `MuseApi` in the current app; CopilotKit runtime/session state; Channel and Thread list/cache; `ComputerDraftProvider` drafts; computer preview/image URL and live stream; PDF viewer URL plus `expo-file-system` cache file named from File ID; current Web/native browser cookies or Better Auth Expo session store. File-level plans must identify every current storage key or cache path before changing it. Target Web uses credentialed HttpOnly session cookies. Target native uses the Better Auth Expo session store rather than the old OpenMuse Bearer token. Logout revokes the session, clears these caches, closes streams, deletes downloaded PDF cache files and prevents a shared-device user B from seeing user A's data. A 401 from `getSession` is the expired-session signal; a client must clear private state and show sign-in.
+
+  | State | Current location found | Target invalidation proof |
+  | --- | --- | --- |
+  | Old access token and `MuseApi` | `App.tsx` React state; copied into request/CopilotKit headers | Replace with OpenBot session; remount provider on user change |
+  | Channel/Thread/chat and computer drafts | React component/context state, including `ComputerDraftProvider` | Clear on logout/401; A→B shared-device flow shows no A title/draft |
+  | Computer frame and live stream | Image URI/component memory plus stream socket | Close socket; subsequent A stream URL returns 401/404 |
+  | Native PDF download | `expo-file-system` cache directory, current `<fileId>.pdf` filename | Delete downloaded path; A's URL/bytes cannot open after B login |
+  | Web browser session | Target Better Auth HttpOnly cookie | Sign-out invalidates cookie and all authenticated media fetches |
+  | Native session credential | Target Better Auth Expo secure session adapter; library key is fixed in the I04/I05 file-level plan after SDK inspection | Sign-out clears adapter; `getSession` returns 401 and A→B cannot restore A |
+
+## 3. Conversation and computer contracts
+
+- **Conversation identity:** `{botId, channelId, threadId, runId?}` are distinct IDs. `/api/mobile/conversations` already returns the first three. Channel list is ordered by OpenBot's existing pinned/recency/ID keyset cursor. Archive hides a Channel from the active list; an Archived filter can list and reopen its retained Thread, without changing its `threadId`.
+- **Stream resume target:** persist/render each event once by `(threadId, runId, eventId)`. Resume requests events strictly after the last committed `eventId`; if the server cannot replay that cursor, reload the persisted Thread history and show a non-duplicating interruption. Stop is idempotent and reaches `stopped` or `completed`, never an eternal spinner. Fixture: events `e1:text`, `e2:tool-start`, disconnect, replay `e2,e3:tool-result` renders `e2` once and then `e3`. A stop racing with completion leaves one terminal state and one transcript.
+- **Tool-event fixtures:** text delta, tool start, tool result, tool error, reviewed-action card, Policy approval card, computer screenshot, browser navigation, mail thread, calendar event, file artifact, and unknown event. Each has a readable UI state; the unknown event is a neutral fallback, not a fabricated success.
+- **Computer control:** proposed `viewing → requesting → controlling → released` with `refused` and `expired` outcomes. A control lease binds `userId, botId, streamId, leaseId, expiresAt`. Input requires the active lease and monotonic input sequence. Two concurrent requests cannot both control; transfer requires explicit release or expiry. Logout, disconnect or Policy refusal revokes the lease; any later keyboard/mouse event returns 403/409 and is not delivered. Audit records actor, Bot, lease and decision. Existing OpenBot computer gateway and Policy approval are reused; a new UI does not implement authorization.
+
+## 4. OpenConnector OAuth and Google domain data
+
+- **OAuth state:** target `state` is a random at-least-128-bit one-use value, bound to session user, provider, requested scopes and allowed return URI, expiring after 10 minutes. Callback requires the same active OpenBot user/session; wrong, expired or cross-session state fails without creating a connection. A repeated callback for the same completed state and session returns the recorded connection result without another alias or token exchange; replay in another session fails. `nonce` is used if the provider response includes identity claims. The alias is server-derived via OpenBot's existing personal alias seam, never client-selected.
+- **Connection:** `{provider, accountEmail, status, grantedScopes, generation, connectedAt}`. Status is `connected | refresh_required | disconnected | revoked`. Generation increments on reconnect or account change and is embedded in every Reviewed action. A disconnected/revoked/refresh-required connection refuses Mail/Calendar provider calls with a stable 409 response before reaching OpenConnector. Gmail read can depend directly on Gmail consent; Calendar consent is a separate branch. Tokens and client secrets remain in OpenConnector.
+- **Mail read DTO:** `{id, threadId, from, to[], subject, bodyText, receivedAt, unread, labels[], attachments:[{id,name,mimeType,size}]}`. List is newest `receivedAt` first, then `id` descending; default 25, maximum 100, opaque owner/connection-bound `nextCursor`. Invalid cursor returns 400; provider truncation returns `truncated=true` and a visible message. Thread messages are oldest first by provider time/ID. Fixture: three messages at equal timestamp return deterministic ID order over page size two, without duplicate or missing item.
+- **Calendar read DTO:** `{id, calendarId, etag, title, start, end, allDay, timeZone, location, description, attendees[]}`. List is ascending start then ID, default 50, maximum 100, with owner/connection-bound cursor. The range is half-open `[timeMin,timeMax)` and at most 366 days, matching existing OpenMuse validation. All-day uses date-only start and exclusive date-only end. Fixture LA DST: `2026-03-08T01:30:00-08:00` to `2026-03-08T03:30:00-07:00` lasts one hour and displays 01:30–03:30 in `America/Los_Angeles`; all-day `2026-03-08` to `2026-03-09` displays only March 8. A changed device zone changes presentation, not stored instants.
+
+## 5. File and PDF contracts
+
+- **File:** `{id, ownerUserId, name, mimeType, size, sha256, versionId, parentId?, source, createdAt, deletedAt?}`; byte path is server-derived and never accepted from the client. Proposed general upload ceiling is 20 MiB; PDF retains the existing 10 MiB and 500-page limit. SHA-256 is over original bytes. Version IDs are immutable; rename changes display metadata only; delete tombstones immediately, removes the list item and refuses old URLs. A retried upload with the same owner-scoped idempotency key returns the existing File/version, while a new key creates a new File even with identical bytes.
+- **Content access:** authenticated stream or short-lived URL checks current owner and deletion state on every fetch. Foreign ID, old signed URL after logout/deletion, and path traversal refuse. File bytes and metadata remain recoverable during account-deletion grace period using a durable cleanup manifest.
+- **PDF:** existing OpenMuse supports AcroForm text and checkbox fields; dropdown, option list and radio are returned as `unsupported` with their field name and reason. Encrypted/XFA/malformed files refuse; text value is a string up to 10,000 characters and checkbox value is boolean. Unknown name or wrong type refuses before writing. `fill` creates a new File version; the original SHA-256 stays unchanged. “Deterministic” means the same source plus field values yields the same **semantic field values and provenance**, not byte-for-byte identical PDF serialization. Fixture: `person.name="Ava"`, `consent=true`, unsupported dropdown `region`; inspection lists all three, fill changes only the first two, and the original remains blank.
+- **Workspace transfer:** the target is a generated path under the private Bot workspace using `fileId/versionId`; the client supplies no arbitrary destination. If a same-name file exists, use a distinct generated path rather than overwrite. Retry with the same transfer key returns the same workspace artifact; partial upload is cleaned or marked failed and never reported as complete.
+
+## 6. Reviewed action contract
+
+- **Proposal:** `{id, ownerUserId, kind, canonicalPayload, payloadHash, accountEmail, connectionGeneration, targetId?, targetVersion?, attachmentVersionIds[], expiresAt, status}`. Existing OpenMuse uses 30-minute expiry; retain that value. Canonical payload includes recipients/subject/body or calendar/time-zone fields, and reply `threadId/replyToMessageId`. A proposed attachment binds its immutable File version.
+- **States:** `awaiting_review → denied | expired | cancelled | executing`; `executing → succeeded | failed | outcome_unknown`. Only an atomic compare-and-swap claim may enter `executing`. A repeated decision returns the settled record; it does not call the provider again. Changed hash/account/generation/target version returns 409 and requires a new proposal.
+- **Provider attempt:** one durable `attemptId` and provider request fingerprint per claim. Definite provider rejection before submission may become `failed`; timeout or connection loss after submission becomes `outcome_unknown`. No automatic retry from `outcome_unknown`. Human reconciliation records `confirmed_succeeded | confirmed_not_sent | unresolved` plus evidence and reviewer; only confirmed-not-sent can create a fresh proposal, never reuse the claimed attempt. Receipt contains provider message/event ID when known, request fingerprint, decided/attempted/completed times and reconciler.
+- **Fixed failure matrix:** deny → zero provider calls; expiry at `expiresAt` → 409/expired; two simultaneous approve calls → one attempt; account generation changes → 409/stale; calendar etag changes → 409/stale; timeout after provider accepted → `outcome_unknown` and zero replay; operator confirms provider ID → `succeeded` with receipt; operator cannot verify → unresolved warning remains.
+
+## 7. Task, Monitor and personal context
+
+- **Task minimum:** `{id,ownerUserId,botId,kind,status,createdAt,updatedAt,attempts,steps[],evidence[],artifactIds[]}`. Existing OpenMuse kinds: agent/document/monitor/finance/plan. Existing statuses: queued/running/waiting_approval/waiting_input/scheduled/paused/succeeded/failed/cancelled. Step statuses: pending/running/succeeded/failed/waiting. Evidence kinds: mail/file/web/user. Run events: plan/step/observation/approval/result/error/status. New OpenBot module reuses `WorkQueue.offer/claim/renew/release/finish` and its database-clock lease; it does not create a second lease system.
+- **Small first path:** a one-step agent Task records `queued → running → succeeded` or `failed` within a configurable per-run deadline; the client can close after start. A headless Bot turn uses owner+private Bot context. The first implementation ticket need not support every Task kind or every control transition.
+- **Control transitions:** `queued|scheduled|paused → cancelled`; a running Task sets an internal `cancellationRequested` flag, keeps public status `running`, then reaches `cancelled` after its current safe step; `queued|running|scheduled → paused` at a safe step; `paused → queued` on resume; `failed → queued` only as a new attempt; terminal succeeded/cancelled never resume. An illegal transition returns 409 with current status. Lease loss before any external effect can requeue; after an unconfirmed external effect it records a reconciliation wait or failure rather than replay.
+- **Human wait:** `{waitId,taskId,kind:input|review,question,fields?,createdAt,answeredAt?}`. Answer requires owner, exact waitId and schema. First valid answer atomically consumes; repeat returns the stored result without advancing twice; malformed answer returns 400 and leaves the wait open.
+- **Plan:** step `{id,title,dependsOn[],status,result?,evidenceIds[]}`; only steps whose predecessors succeeded run. Failed step remains failed, successors remain pending until explicit retry/new attempt; succeeded steps are not replayed.
+- **Monitor:** reuse OpenMuse `change|contains|price_below` and interval 1–10,080 minutes. Schedule uses UTC database time, with `nextCheckAt` stored; a due check is at-or-after that instant. Observation identity is `sha256(monitorId + normalizedSource + normalizedValue)`; cursor is the last committed observation ID/time. Failure backoff is 15, 30, 60 minutes, capped at 6 hours, reset on success. A new condition match emits one `monitor.matched` notification keyed by observation ID; a repeated observation emits none.
+- **Task notifications:** `task.succeeded`, `task.failed`, `task.waiting_input`, `task.waiting_review`, `monitor.matched`. Key is `userId/taskId/eventKind/attemptOrObservationId`; each has per-user `readAt`. These events must be emitted by the owning Task/Monitor transition, not inferred by client polling.
+- **Finance fixture:** existing parser requires `date,description,amount,category`, 1–5,000 rows, up to 500 KB, ISO date and max two decimals; positive = expense, negative = income, no currency conversion. Fixture rows `2026-09-01,Salary,-4200.00,Income`; `2026-09-02,Groceries,84.50,Food`; `2026-09-03,Coffee,6.50,Food` give income 4200.00, spending 91.00, saved 4109.00, Food 91.00, count 3. A bad amount `6.501` at row 4 refuses the entire CSV with row number; no partial tracker.
+- **Goal:** use existing `{id,title,description,category,status,milestones[]}`; an authorized private Bot tool returns exact Goal ID/title/milestone status. **Idea:** `{id,title,reason,evidence[],prompt,kind,input,status,taskId?}`; an accepted Idea points to one Task. **Memory:** `{id,text,source,createdAt}`; retrieval is triggered by explicit private Bot tool call and returns ID/text/source, not a subjective “useful” result. Another Bot and another user receive no record; delete/revoke removes it from subsequent retrieval.
+
+## 8. Activity item contract
+
+- Feed item: `{id,type,sourceId,createdAt,status,title,detail,allowedActions[],readAt?}`. Types are `policy_approval | reviewed_action | task_notification`; `sourceId` names the owning OpenBot record. Sort descending `createdAt`, then `id`; default page 25, maximum 100, with owner-bound cursor.
+- Policy approval statuses come from OpenBot's policy store and allow only its own approve/deny operations. Reviewed action uses §6 statuses and allows approve/deny only while `awaiting_review`; `outcome_unknown` allows view/reconcile by an authorized operator, not retry. Task notification allows `mark_read` only. Sending the wrong decision type returns 409 and leaves both source records unchanged.
+- A stale client item is re-read from its source before a decision; the response returns current status. Fixture: a reviewed mail proposal expires while Activity is open; its approve button disappears and an attempted stale approve returns 409/expired. A Policy approval card can be denied without changing that Reviewed action.
+
+## 9. Deletion manifest and evidence
+
+- **Module lifecycle seam:** every module that creates user-owned state implements `disableOwner(userId): Promise<void>`, `enumerateOwner(userId): Promise<ResourceRef[]>`, `restoreOwner(userId): Promise<void>`, and `purgeResource(ref): Promise<void>` as appropriate. `ResourceRef` contains `kind,id,externalKey?`. The module's own Ticket provides focused checks for its hook; D04–D08 coordinate already-tested hooks. A module with no restorable external credential states that explicitly rather than fabricating restoration.
+- A durable deletion marker `{userId,disabledAt,restoreUntil,phase,resources:[{kind,id,externalKey?,state,lastError?}]}` is written before revoking access. Every state-owning module supplies a list and cleanup hook. Enumerate external File object keys and OpenConnector aliases **before** relational metadata is deleted. Resource states: `pending → deleted` or `retryable_error`; repeat cleanup is idempotent. Retain the manifest until every resource is deleted and backup retention has elapsed. Immediate authorization checks consult the disabled marker; cleanup lag never reopens access.
+- Restoration within 30 days covers Bot profile, Channel/Thread, Tasks/steps/evidence, Files/versions, Goals, Ideas, Memory, notifications and unresolved Reviewed actions as read-only history. Queued/running Tasks and all external writes remain cancelled; restoration does not resume them. After `restoreUntil`, restore returns 410.
+- Evidence ID format: `<ticket>/<platform>/<case>`. Every acceptance case records precondition fixture/account, action sequence, expected UI, expected API/persisted state, observed result, sanitized screenshot/log/receipt path, code revision and date. A failure names its owning implementation Ticket and blocks only the affected acceptance case plus any downstream signoff. Fixes rerun the failed case and directly related cases; final signoff maps all 43 Spec stories to passed evidence IDs.
+
+## 10. Reference deployment configuration and failure signals
+
+These are **approved v4 planning defaults** for the 1–20 active-user self-hosted profile, not claims about current capacity. Capacity tickets may revise them only with measured evidence and a corresponding update to their acceptance cases.
+
+| Setting or signal | Proposed value / trigger | Expected observable result |
+| --- | --- | --- |
+| Active private computers | Maximum 20 | 21st start queues or returns a capacity response; no Bot reuses another user's computer |
+| Computer idle stop | 15 minutes without run or human control | Workspace state persists; stream closes cleanly |
+| Computer workspace disk | 2 GiB per private Bot | Write above limit refuses with a visible quota error |
+| Concurrent Task workers | 4 | Fifth runnable Task remains queued and visible |
+| Active Tasks per user | 100, matching current OpenMuse service limit | 101st active Task creation returns 409 with the existing limit message |
+| WorkQueue attempts | 5, matching OpenBot's existing default | Terminal exhausted item remains inspectable; no silent retries |
+| One-step Task acceptance deadline | 300 seconds | Timeout yields failed Task with cause; it does not claim success |
+| Connector refresh failure | Any refresh failure | Connected-account status becomes refresh_required; operator signal contains no token |
+| Stuck Task | Runnable queued >5 minutes or expired lease without recovery >1 minute | Owner sees delayed state; operator sees Task ID and queue reason |
+| Uncertain Reviewed action | Any outcome_unknown | Owner sees warning; operator sees attempt ID and reconciliation status |
+| Cleanup retry | Any retryable_error row past next retry time | Operator sees resource kind, safe ID and last error; no secret/byte payload |
diff --git a/docs/superpowers/plans/2026-10-12-openmuse-openbot-delivery-plan.md b/docs/superpowers/plans/2026-10-12-openmuse-openbot-delivery-plan.md
new file mode 100644
index 000000000..c0c4867f9
--- /dev/null
+++ b/docs/superpowers/plans/2026-10-12-openmuse-openbot-delivery-plan.md
@@ -0,0 +1,275 @@
+# OpenMuse on OpenBot Implementation Plan
+
+> Superseded by the [single-context revision 3 plan](2026-10-12-openmuse-openbot-single-context-tickets-v3.md); retained for decision history.
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+>
+> **Status:** proposed Ticket breakdown for user review. Do not publish child Issues or implement from this draft before the breakdown is approved. Each approved Ticket receives its own file-level writing plan before implementation.
+
+**Goal:** Deliver the full existing OpenMuse experience for new multiuser data on OpenBot as the sole backend, with the existing OpenMuse repository as its frontend submodule.
+
+**Architecture:** OpenBot owns identity, private Bots, Channels, Threads, Google access through OpenConnector, files, tasks, personal context, approvals, reviewed external actions, and computers. OpenMuse renders these capabilities on iOS, Android, and Web through one authenticated OpenBot transport. Vertical Tickets add complete user paths and reuse OpenBot's queue, headless runner, policy, and computer gateway.
+
+**Tech Stack:** OpenMuse React Native/Expo/Web and pnpm; OpenBot TypeScript, Bun, PostgreSQL, Better Auth, CopilotKit, WorkQueue and computer gateway; OpenConnector for Google OAuth and provider actions.
+
+**Spec:** [openmuse#1](https://github.com/1123786563/openmuse/issues/1), the OpenBot integration design dated 2026-10-12, OpenMuse `CONTEXT.md` and accepted ADRs 0004–0010. The design currently resides in the sibling OpenBot checkout and must be preserved with the execution records before work starts.
+
+## Global Constraints
+
+- OpenBot is the only business backend; no OpenMuse server, TaskWorker, OAuth store, or file store runs in the integrated deployment.
+- The canonical frontend is the full existing OpenMuse repository, referenced as an OpenBot Git submodule; reconcile copied-client changes before removing the copy.
+- First cutover preserves all named experiences for **new users and new data** on iOS, Android, and Web. Historical single-owner records are not migrated.
+- Private OpenMuse Bots, computers, Google connections, files, tasks, and personal context must be isolated between users.
+- OpenConnector is the Google provider path; OpenBot derives connection identity from the authenticated user and does not expose provider credentials.
+- Gmail and Calendar external writes use exact Reviewed actions; computer Policy approvals remain distinct.
+- The initial self-hosted capacity target is approximately 1–20 concurrently active users.
+- Deletion stops access and work immediately, preserves recoverable data for 30 days, then purges it.
+- Existing user edits in both checkouts are baselines to preserve. A submodule pin includes only committed OpenMuse content.
+
+## Review Focus
+
+1. Two users switch devices or sessions: private Bot, Google account, file URL, computer stream, and task data must never cross ownership boundaries. Pin this in Tickets 02, 05, 06, 09, and 13.
+2. Google consent expires, is revoked, or changes account between proposal and execution: the UI must show disconnection or stale proposal; no write may execute under the wrong account. Pin this in Tickets 06, 11, and 12.
+3. A provider times out after a send or calendar mutation: the Reviewed action must remain `outcome_unknown` until reconciled; no automatic replay. Pin this in Tickets 11 and 12.
+4. A worker restarts while a task waits for input or approval, holds a lease, or schedules a monitor: state and deduplication must survive without duplicate external effects. Pin this in Tickets 14, 16, and 18.
+5. Account deletion races with a running task, signed download, OAuth callback, or restoration: access must stop immediately and restoration must not resume a cancelled external write. Pin this in Ticket 21.
+
+---
+
+## Shared interfaces and execution rules
+
+Each user-facing Ticket is a complete route from the relevant OpenMuse screen or Bot tool to an authenticated OpenBot domain contract, durable state, and user-visible result. Tests assert observable responses and persistent transitions, not internal call counts. The client sends no authoritative user ID. OpenBot resolves owner, private Bot, and connection from the session. Screens consume stable domain responses rather than OpenConnector action schemas.
+
+The proposed domain contracts are: private Bot provisioning and template revision; Channel/Thread runtime; connected Google account; Mail; Calendar; user File/Artifact; Reviewed action; Task/Run/Step/Evidence; personal context; and Activity. Their exact request/response types and file ownership are fixed in the file-level plan for the first Ticket that produces each contract. Later Tickets consume those frozen types or explicitly version them.
+
+For each Ticket, the implementer writes an observable failing behavior check, confirms it fails for the intended reason, implements the smallest complete path, checks the targeted behavior and relevant platform build, then records a reviewable checkpoint. Integration and independent review follow the global engineering rules before downstream Tickets start. No phase is accepted on a stub UI or mocked provider response alone.
+
+## Proposed Ticket DAG
+
+The numbers below are provisional Ticket IDs, not GitHub Issue numbers. A listed blocker is a genuine interface or data prerequisite; unrelated branches can progress independently after their common foundation. Story numbers refer to Spec #1.
+
+### Ticket 01: Build the canonical OpenMuse frontend from a Git submodule
+
+**Blocked by:** None. **Stories:** 41. **Owner:** source/build integration.
+
+**Delivers:** An operator checks out OpenBot recursively and builds the existing OpenMuse client from its canonical repository. The copied client is reconciled and removed without losing useful adaptations.
+
+**Interface and steps:** Record both repository baselines and compare the copied client with the current OpenMuse source; reconcile differences; pin a committed OpenMuse revision as a submodule; update dependency installation, CI and build entry points; prove the integrated runtime does not launch the old OpenMuse backend. Preserve unrelated local edits.
+
+**Acceptance:** Recursive checkout builds Web and native client artifacts; the copied subtree is gone; a clean checkout reproduces the pin. **Evidence:** CI/build logs, submodule SHA, source reconciliation record.
+
+### Ticket 02: Sign in and enter a private OpenMuse Bot
+
+**Blocked by:** 01. **Stories:** 1–6, 9. **Owner:** identity and client session.
+
+**Delivers:** A new user signs in, gets exactly one private Bot, reopens the app, and sees only that Bot on iOS, Android, and Web.
+
+**Interface and steps:** Reuse Better Auth and OpenBot session guards; add idempotent first-entry provisioning; bind the private Bot to a distinct computer profile; replace old local-user/session bootstrap with one OpenBot transport; clear client caches and media on logout.
+
+**Acceptance:** Two simultaneous users receive different Bots and computers; repeat entry creates no duplicates; invalid sessions and cross-user IDs fail; native and Web session restore works. **Evidence:** authenticated API checks and platform UI flows.
+
+### Ticket 03: Roll out private Bot template revisions
+
+**Blocked by:** 02. **Stories:** 7–8. **Owner:** Bot administration.
+
+**Delivers:** An administrator updates common grants and security settings while a person's Bot description and preferences survive.
+
+**Interface and steps:** Version the template, distinguish managed fields from user fields, preview changes, apply idempotent updates, and expose outcome to the administrator.
+
+**Acceptance:** Existing Bots receive changed grants; user fields remain; rerunning the revision is harmless; unauthorized people cannot alter grants. **Evidence:** admin flow and persisted Bot comparison.
+
+### Ticket 04: Converse through Channels and Threads
+
+**Blocked by:** 02. **Stories:** 10–14. **Owner:** conversation and client runtime.
+
+**Delivers:** A person creates and switches Channels, resumes Threads, receives streaming replies and tool cards, and can stop and reconnect without duplicate messages.
+
+**Interface and steps:** Map Bot, Channel, runtime agent and Thread IDs explicitly; port baseline OpenMuse Bot behavior; replace fixed runtime identity; adapt existing screens and replay/stop handling to OpenBot's CopilotKit runtime.
+
+**Acceptance:** Multiple Channels remain distinct across restart; rename/archive/replay work; stopped/reconnected runs show one coherent history and visible failures. **Evidence:** client flows and Channel/Thread contract checks.
+
+### Ticket 05: View and control the private Bot computer
+
+**Blocked by:** 02. **Stories:** 9, 38. **Owner:** computer and client stream.
+
+**Delivers:** A person sees their own Bot computer and can take human control under OpenBot policy from the existing OpenMuse UI.
+
+**Interface and steps:** Route snapshots, stream, input and workspace actions through authenticated OpenBot computer APIs; preserve Policy approval, audit and refusal states; bound per-Bot capacity.
+
+**Acceptance:** Cross-user stream/input attempts fail; approved control works; refusal is visible; disconnected clients cannot keep sending input. **Evidence:** two-user computer flows and policy audit.
+
+### Ticket 06: Connect an individual Google account through OpenConnector
+
+**Blocked by:** 02. **Stories:** 15–16. **Owner:** connector and connected-account UI.
+
+**Delivers:** A person authorizes Gmail and Calendar separately from OpenBot login, sees the account, reconnects, and disconnects it.
+
+**Interface and steps:** Extend OpenBot's OpenConnector adapter for OAuth configuration, start, callback, status, refresh and revocation; derive a server-side per-user connection alias; expose a stable connection view to OpenMuse.
+
+**Acceptance:** Two real Google test accounts stay isolated; callback, refresh, expiry and disconnect have visible states; neither client nor another user can select a foreign alias. **Evidence:** live consent flow and authenticated contract checks.
+
+### Ticket 07: Read Gmail in OpenMuse
+
+**Blocked by:** 06. **Stories:** 17. **Owner:** Mail domain and client.
+
+**Delivers:** A person searches mail, opens a thread, and reads its attachments through their connected account.
+
+**Interface and steps:** Map OpenConnector Gmail actions to stable Mail search/read/thread/attachment contracts; enforce owner, Bot grant and connection status; render loading, truncation and provider errors.
+
+**Acceptance:** Real account data appears under the correct user; pagination or truncation is explicit; disconnect blocks subsequent reads. **Evidence:** two-account read flows.
+
+### Ticket 08: Read Calendar in OpenMuse
+
+**Blocked by:** 06. **Stories:** 18. **Owner:** Calendar domain and client.
+
+**Delivers:** A person browses events from their own Google Calendar with correct date and time-zone display.
+
+**Interface and steps:** Map OpenConnector Calendar actions to stable list/read contracts; preserve event IDs, time zones, all-day semantics and paging; render empty and provider-failure states.
+
+**Acceptance:** Two users see only their calendars; all-day and cross-time-zone events display correctly; disconnect blocks reads. **Evidence:** live calendar accounts and platform views.
+
+### Ticket 09: Keep a durable personal Files library
+
+**Blocked by:** 02. **Stories:** 23. **Owner:** File domain and client.
+
+**Delivers:** A person uploads, lists, opens and downloads a file beyond any one Channel or Craft session.
+
+**Interface and steps:** Add user-owned file/artifact records, version identity, byte storage, authenticated content delivery and deletion state; connect the existing Files UI. Do not treat conversation attachments as the personal library.
+
+**Acceptance:** Files survive restart and are visible across the user's Channels; rename and deletion update the library; another user cannot list or fetch bytes, including by a previously issued URL. **Evidence:** upload/read/download/manage and isolation checks.
+
+### Ticket 10: Inspect, fill and view PDF copies
+
+**Blocked by:** 09. **Stories:** 25–27. **Owner:** document domain and client viewer.
+
+**Delivers:** A person inspects a PDF's fillable fields, enters values, and views a new filled copy beside the unchanged original on Web and mobile.
+
+**Interface and steps:** Port field inspection, unsupported-field reporting and deterministic fill-copy production into OpenBot; store derived version and workspace transfer reference; keep the client as viewer and form.
+
+**Acceptance:** Supported fields fill correctly; unsupported fields are reported; original hash stays unchanged; derived copy is authorized and viewable on every client. **Evidence:** representative PDFs and version records.
+
+### Ticket 11: Send a reviewed Gmail change
+
+**Blocked by:** 07. **Stories:** 19, 21. **Owner:** Reviewed action and Mail.
+
+**Delivers:** A person sees an exact proposed email or reply, approves or denies it, and receives a trustworthy receipt.
+
+**Interface and steps:** Establish the shared Reviewed action state model; bind proposal hash, recipient, content, account, connection generation, expiry and target; atomically claim approval; execute once through OpenConnector; reconcile `outcome_unknown` without automatic retry.
+
+**Acceptance:** Approval sends once; denial/expiry/change blocks send; concurrent approvals claim once; provider timeout leaves an uncertain state, not a replay. **Evidence:** live test account and fault-injected provider outcomes.
+
+### Ticket 12: Review Calendar mutations
+
+**Blocked by:** 08, 11. **Stories:** 20–21. **Owner:** Reviewed action and Calendar.
+
+**Delivers:** A person reviews exact event create, update and delete proposals before Calendar changes occur.
+
+**Interface and steps:** Reuse the Reviewed action lifecycle; bind event version, calendar, time zone and account; execute provider action once; present receipt or uncertainty.
+
+**Acceptance:** Changed or deleted target invalidates a proposal; create/update/delete honor approval and denial; timeout never causes blind replay. **Evidence:** real calendar workflows and stale-target checks.
+
+### Ticket 13: Run a one-off agent Task in the background
+
+**Blocked by:** 04, 05. **Stories:** 28. **Owner:** Task domain and client.
+
+**Delivers:** A person starts an agent Task, closes the client, and later sees steps, run events, typed evidence and a result.
+
+**Interface and steps:** Create a dedicated Task/Run/Step store and stable API; bind owner and private Bot; reuse WorkQueue and headless runner; expose task list and detail in OpenMuse.
+
+**Acceptance:** Work continues after client exit; run evidence and failure are durable; another user cannot read or execute the task; computer actions use the private Bot gateway. **Evidence:** offline run and two-user checks.
+
+### Ticket 14: Control and recover Tasks
+
+**Blocked by:** 13. **Stories:** 33–34. **Owner:** Task lifecycle.
+
+**Delivers:** A person pauses, resumes, cancels or retries eligible work; waits for input or review remain actionable after restart.
+
+**Interface and steps:** Define legal transitions, lease and retry ownership, waiting payloads and resume token; connect controls to the UI; recover leases and pending waits after worker restart.
+
+**Acceptance:** Illegal transitions refuse clearly; cancellation stops new work; restart does not lose or duplicate a waiting step; retries preserve prior evidence. **Evidence:** persisted-state and restart flows.
+
+### Ticket 15: Execute a visible Plan Task
+
+**Blocked by:** 13. **Stories:** 31. **Owner:** Task planning.
+
+**Delivers:** A person starts a multi-step plan and sees each step's status, evidence and final outcome.
+
+**Interface and steps:** Reuse Task/Run/Step contracts for ordered or dependent plan steps; persist progress and failures; render plan details in OpenMuse.
+
+**Acceptance:** Steps resume from durable state and do not repeat completed external effects after restart; failed steps show cause. **Evidence:** a real multi-step plan flow.
+
+### Ticket 16: Run a deduplicated Monitor and notify its owner
+
+**Blocked by:** 13. **Stories:** 32, 35, 37. **Owner:** Task monitoring and notifications.
+
+**Delivers:** A person creates a recurring monitor, sees observations and receives a notification when its condition changes. Task status notifications from all task kinds also have per-user read state.
+
+**Interface and steps:** Persist schedule, condition, cursor, deduplication key and backoff; run through the existing queue; store per-user notifications and read state; render monitor and notification result.
+
+**Acceptance:** Restart preserves cursor; repeated observations do not spam; failures back off; all task kinds emit applicable status notifications; owner can read and mark only own notifications. **Evidence:** clock-controlled monitor and client notification flow.
+
+### Ticket 17: Produce a finance Task artifact
+
+**Blocked by:** 09, 13. **Stories:** 30. **Owner:** finance Task.
+
+**Delivers:** A person uploads a spending CSV, starts a finance Task, and gets a saved tracker or summary artifact.
+
+**Interface and steps:** Port CSV validation and calculation to OpenBot; run through Task lifecycle; store output in Files with task reference; render invalid-row diagnostics and result.
+
+**Acceptance:** Invalid CSV is rejected with usable errors; valid inputs yield reproducible totals; artifact survives restart and is private. **Evidence:** known-result CSVs and UI flow.
+
+### Ticket 18: Complete a document Task from mail to reviewed reply
+
+**Blocked by:** 07, 10, 11, 14. **Stories:** 24, 29. **Owner:** document Task.
+
+**Delivers:** A person selects a mail PDF attachment, fills a copy with Bot help, supplies missing values, reviews a reply and reaches a recorded outcome.
+
+**Interface and steps:** Import attachment into user Files; inspect fields; create task waits for missing data; fill a copy; prepare a Reviewed action for the reply; execute once and link receipt and artifacts to the Task.
+
+**Acceptance:** Client can close during waits; denial keeps artifacts without sending; uncertain send is not retried; complete workflow is recoverable after restart. **Evidence:** real mail/PDF flow with restart and denial cases.
+
+### Ticket 19: Use private Goals, Ideas and memories
+
+**Blocked by:** 02, 04. **Stories:** 36. **Owner:** personal context and Bot tools.
+
+**Delivers:** A person creates and views Goals and Ideas; their private Bot can use them and private memories in conversation.
+
+**Interface and steps:** Port durable ownership and UI contracts to OpenBot; grant tools only to the private OpenMuse Bot; preserve creation/update/delete and task references; expose clear permission failures.
+
+**Acceptance:** Person and private Bot see their own context; another user and another Bot cannot; data survives restart. **Evidence:** cross-Bot and cross-user conversation/UI checks.
+
+### Ticket 20: Unify Activity without merging decision rules
+
+**Blocked by:** 11, 12, 16. **Stories:** 22, 37. **Owner:** Activity and client.
+
+**Delivers:** A person sees Policy approvals, Reviewed actions and task notifications in one ordered Activity view and can act on each correctly.
+
+**Interface and steps:** Add a typed OpenBot Activity read contract; render source, decision details and read state; route each decision to its owning module; keep notification read state independent.
+
+**Acceptance:** Mixed Activity remains ordered and private; a Policy approval cannot execute a Reviewed action and vice versa; stale decisions show their actual state. **Evidence:** mixed-event UI and contract checks.
+
+### Ticket 21: Delete and recover a user with bounded retention
+
+**Blocked by:** 03, 06, 10, 14, 15, 16, 17, 18, 19, 20. **Stories:** 39–40. **Owner:** account lifecycle.
+
+**Delivers:** Account deletion immediately stops sessions, Bot, Tasks and Google access, permits administrator restoration for 30 days, then cleans personal data.
+
+**Interface and steps:** Create a durable deletion record; revoke sessions and connection, disable Bot and queue work, invalidate file access, and schedule retryable cleanup of domain stores and backups; restoration does not resume cancelled external writes.
+
+**Acceptance:** Deletion races cannot reopen access; recovery within 30 days restores permissible data; after expiry purge is complete or visibly retrying; a second user's data remains untouched. **Evidence:** deletion/recovery clock and fault flows.
+
+### Ticket 22: Cut over and prove full three-platform parity
+
+**Blocked by:** 03, 05, 07, 08, 10, 12, 14, 15, 16, 17, 18, 19, 20, 21. **Stories:** 1–43. **Owner:** release integration.
+
+**Delivers:** An operator deploys one OpenBot backend and the OpenMuse client, and two users complete all accepted experiences on iOS, Android and Web.
+
+**Interface and steps:** Build from a committed submodule pin; provision PostgreSQL, OpenConnector and bounded computers; wire OAuth callback and secrets; run full two-user live acceptance; document roll-forward and rollback that does not replay uncertain writes.
+
+**Acceptance:** All named screens and Task kinds use OpenBot durable state; no OpenMuse server or TaskWorker runs; isolation and recovery pass; CI/build and platform checks pass; remaining deviations are recorded rather than called parity. **Evidence:** release manifest, platform matrix, live Google receipts and acceptance record.
+
+## Coverage and next planning layer
+
+Every Spec #1 story appears in at least one proposed Ticket; Ticket 22 aggregates release acceptance and does not reimplement child behavior. Ticket 01 is a narrow, independently verifiable source/build slice rather than a broad client rewrite. Tickets 11 and 12 deliberately sequence Calendar writes after the first complete Reviewed action path, so the shared decision contract is exercised before reuse.
+
+After the user approves this breakdown, publish one GitHub Issue per Ticket in dependency order, link each to parent Spec #1, and create native blocking links where GitHub supports them. Before implementing each Issue, produce its own file-level writing plan with exact owned files, signatures, failing behavior checks, commands and expected results. That plan is the executable unit; this document is the program-level DAG and acceptance map.
diff --git a/docs/superpowers/plans/2026-10-12-openmuse-openbot-publication-v4.json b/docs/superpowers/plans/2026-10-12-openmuse-openbot-publication-v4.json
new file mode 100644
index 000000000..8b95eb207
--- /dev/null
+++ b/docs/superpowers/plans/2026-10-12-openmuse-openbot-publication-v4.json
@@ -0,0 +1,753 @@
+{
+  "repo": "1123786563/openmuse",
+  "parent": 1,
+  "issues": {
+    "B01": {
+      "number": 2,
+      "id": 5814845149,
+      "url": "https://github.com/1123786563/openmuse/issues/2"
+    },
+    "B02": {
+      "number": 3,
+      "id": 5814845915,
+      "url": "https://github.com/1123786563/openmuse/issues/3"
+    },
+    "B03": {
+      "number": 4,
+      "id": 5814846215,
+      "url": "https://github.com/1123786563/openmuse/issues/4"
+    },
+    "I01": {
+      "number": 5,
+      "id": 5814846666,
+      "url": "https://github.com/1123786563/openmuse/issues/5"
+    },
+    "I02": {
+      "number": 6,
+      "id": 5814847177,
+      "url": "https://github.com/1123786563/openmuse/issues/6"
+    },
+    "I03": {
+      "number": 7,
+      "id": 5814847659,
+      "url": "https://github.com/1123786563/openmuse/issues/7"
+    },
+    "I04": {
+      "number": 8,
+      "id": 5814848057,
+      "url": "https://github.com/1123786563/openmuse/issues/8"
+    },
+    "I05": {
+      "number": 9,
+      "id": 5814848492,
+      "url": "https://github.com/1123786563/openmuse/issues/9"
+    },
+    "I06": {
+      "number": 10,
+      "id": 5814848955,
+      "url": "https://github.com/1123786563/openmuse/issues/10"
+    },
+    "I07": {
+      "number": 11,
+      "id": 5814849286,
+      "url": "https://github.com/1123786563/openmuse/issues/11"
+    },
+    "I08": {
+      "number": 12,
+      "id": 5814849808,
+      "url": "https://github.com/1123786563/openmuse/issues/12"
+    },
+    "I09": {
+      "number": 13,
+      "id": 5814850159,
+      "url": "https://github.com/1123786563/openmuse/issues/13"
+    },
+    "C01": {
+      "number": 14,
+      "id": 5814850594,
+      "url": "https://github.com/1123786563/openmuse/issues/14"
+    },
+    "C02": {
+      "number": 15,
+      "id": 5814851095,
+      "url": "https://github.com/1123786563/openmuse/issues/15"
+    },
+    "C03": {
+      "number": 16,
+      "id": 5814851511,
+      "url": "https://github.com/1123786563/openmuse/issues/16"
+    },
+    "C04": {
+      "number": 17,
+      "id": 5814852009,
+      "url": "https://github.com/1123786563/openmuse/issues/17"
+    },
+    "C05": {
+      "number": 18,
+      "id": 5814852369,
+      "url": "https://github.com/1123786563/openmuse/issues/18"
+    },
+    "C06": {
+      "number": 19,
+      "id": 5814852753,
+      "url": "https://github.com/1123786563/openmuse/issues/19"
+    },
+    "C08": {
+      "number": 20,
+      "id": 5814853221,
+      "url": "https://github.com/1123786563/openmuse/issues/20"
+    },
+    "C09": {
+      "number": 21,
+      "id": 5814853622,
+      "url": "https://github.com/1123786563/openmuse/issues/21"
+    },
+    "K01": {
+      "number": 22,
+      "id": 5814854030,
+      "url": "https://github.com/1123786563/openmuse/issues/22"
+    },
+    "K02": {
+      "number": 23,
+      "id": 5814854428,
+      "url": "https://github.com/1123786563/openmuse/issues/23"
+    },
+    "K03": {
+      "number": 24,
+      "id": 5814854797,
+      "url": "https://github.com/1123786563/openmuse/issues/24"
+    },
+    "K04": {
+      "number": 25,
+      "id": 5814855433,
+      "url": "https://github.com/1123786563/openmuse/issues/25"
+    },
+    "G01": {
+      "number": 26,
+      "id": 5814855938,
+      "url": "https://github.com/1123786563/openmuse/issues/26"
+    },
+    "G02": {
+      "number": 27,
+      "id": 5814856273,
+      "url": "https://github.com/1123786563/openmuse/issues/27"
+    },
+    "G03": {
+      "number": 28,
+      "id": 5814856704,
+      "url": "https://github.com/1123786563/openmuse/issues/28"
+    },
+    "G04": {
+      "number": 29,
+      "id": 5814857097,
+      "url": "https://github.com/1123786563/openmuse/issues/29"
+    },
+    "G05": {
+      "number": 30,
+      "id": 5814857456,
+      "url": "https://github.com/1123786563/openmuse/issues/30"
+    },
+    "G06": {
+      "number": 31,
+      "id": 5814857974,
+      "url": "https://github.com/1123786563/openmuse/issues/31"
+    },
+    "M01": {
+      "number": 32,
+      "id": 5814858328,
+      "url": "https://github.com/1123786563/openmuse/issues/32"
+    },
+    "M02": {
+      "number": 33,
+      "id": 5814858796,
+      "url": "https://github.com/1123786563/openmuse/issues/33"
+    },
+    "M03": {
+      "number": 34,
+      "id": 5814859197,
+      "url": "https://github.com/1123786563/openmuse/issues/34"
+    },
+    "M04": {
+      "number": 35,
+      "id": 5814859528,
+      "url": "https://github.com/1123786563/openmuse/issues/35"
+    },
+    "A01": {
+      "number": 36,
+      "id": 5814859957,
+      "url": "https://github.com/1123786563/openmuse/issues/36"
+    },
+    "A02": {
+      "number": 37,
+      "id": 5814860354,
+      "url": "https://github.com/1123786563/openmuse/issues/37"
+    },
+    "A03": {
+      "number": 38,
+      "id": 5814860843,
+      "url": "https://github.com/1123786563/openmuse/issues/38"
+    },
+    "F01": {
+      "number": 39,
+      "id": 5814861182,
+      "url": "https://github.com/1123786563/openmuse/issues/39"
+    },
+    "F02": {
+      "number": 40,
+      "id": 5814861643,
+      "url": "https://github.com/1123786563/openmuse/issues/40"
+    },
+    "F03": {
+      "number": 41,
+      "id": 5814862105,
+      "url": "https://github.com/1123786563/openmuse/issues/41"
+    },
+    "F04": {
+      "number": 42,
+      "id": 5814862577,
+      "url": "https://github.com/1123786563/openmuse/issues/42"
+    },
+    "F10": {
+      "number": 43,
+      "id": 5814862960,
+      "url": "https://github.com/1123786563/openmuse/issues/43"
+    },
+    "F05": {
+      "number": 44,
+      "id": 5814863428,
+      "url": "https://github.com/1123786563/openmuse/issues/44"
+    },
+    "F06": {
+      "number": 45,
+      "id": 5814863963,
+      "url": "https://github.com/1123786563/openmuse/issues/45"
+    },
+    "F07": {
+      "number": 46,
+      "id": 5814864343,
+      "url": "https://github.com/1123786563/openmuse/issues/46"
+    },
+    "F08": {
+      "number": 47,
+      "id": 5814864690,
+      "url": "https://github.com/1123786563/openmuse/issues/47"
+    },
+    "F09": {
+      "number": 48,
+      "id": 5814865075,
+      "url": "https://github.com/1123786563/openmuse/issues/48"
+    },
+    "R01": {
+      "number": 49,
+      "id": 5814865437,
+      "url": "https://github.com/1123786563/openmuse/issues/49"
+    },
+    "R02": {
+      "number": 50,
+      "id": 5814865808,
+      "url": "https://github.com/1123786563/openmuse/issues/50"
+    },
+    "R03": {
+      "number": 51,
+      "id": 5814866206,
+      "url": "https://github.com/1123786563/openmuse/issues/51"
+    },
+    "R04": {
+      "number": 52,
+      "id": 5814866643,
+      "url": "https://github.com/1123786563/openmuse/issues/52"
+    },
+    "R05": {
+      "number": 53,
+      "id": 5814867117,
+      "url": "https://github.com/1123786563/openmuse/issues/53"
+    },
+    "R06": {
+      "number": 54,
+      "id": 5814867567,
+      "url": "https://github.com/1123786563/openmuse/issues/54"
+    },
+    "R07": {
+      "number": 55,
+      "id": 5814867967,
+      "url": "https://github.com/1123786563/openmuse/issues/55"
+    },
+    "R08": {
+      "number": 56,
+      "id": 5814868333,
+      "url": "https://github.com/1123786563/openmuse/issues/56"
+    },
+    "T01": {
+      "number": 57,
+      "id": 5814868704,
+      "url": "https://github.com/1123786563/openmuse/issues/57"
+    },
+    "T02": {
+      "number": 58,
+      "id": 5814868998,
+      "url": "https://github.com/1123786563/openmuse/issues/58"
+    },
+    "C07": {
+      "number": 59,
+      "id": 5814869372,
+      "url": "https://github.com/1123786563/openmuse/issues/59"
+    },
+    "T03": {
+      "number": 60,
+      "id": 5814869774,
+      "url": "https://github.com/1123786563/openmuse/issues/60"
+    },
+    "T04": {
+      "number": 61,
+      "id": 5814870163,
+      "url": "https://github.com/1123786563/openmuse/issues/61"
+    },
+    "T05": {
+      "number": 62,
+      "id": 5814870603,
+      "url": "https://github.com/1123786563/openmuse/issues/62"
+    },
+    "T06": {
+      "number": 63,
+      "id": 5814871023,
+      "url": "https://github.com/1123786563/openmuse/issues/63"
+    },
+    "T07": {
+      "number": 64,
+      "id": 5814871439,
+      "url": "https://github.com/1123786563/openmuse/issues/64"
+    },
+    "T08": {
+      "number": 65,
+      "id": 5814871808,
+      "url": "https://github.com/1123786563/openmuse/issues/65"
+    },
+    "T09": {
+      "number": 66,
+      "id": 5814872179,
+      "url": "https://github.com/1123786563/openmuse/issues/66"
+    },
+    "T10": {
+      "number": 67,
+      "id": 5814872552,
+      "url": "https://github.com/1123786563/openmuse/issues/67"
+    },
+    "T11": {
+      "number": 68,
+      "id": 5814872919,
+      "url": "https://github.com/1123786563/openmuse/issues/68"
+    },
+    "T12": {
+      "number": 69,
+      "id": 5814873336,
+      "url": "https://github.com/1123786563/openmuse/issues/69"
+    },
+    "T13": {
+      "number": 70,
+      "id": 5814873764,
+      "url": "https://github.com/1123786563/openmuse/issues/70"
+    },
+    "T14": {
+      "number": 71,
+      "id": 5814874132,
+      "url": "https://github.com/1123786563/openmuse/issues/71"
+    },
+    "T15": {
+      "number": 72,
+      "id": 5814874520,
+      "url": "https://github.com/1123786563/openmuse/issues/72"
+    },
+    "T16": {
+      "number": 73,
+      "id": 5814874909,
+      "url": "https://github.com/1123786563/openmuse/issues/73"
+    },
+    "P01": {
+      "number": 74,
+      "id": 5814875281,
+      "url": "https://github.com/1123786563/openmuse/issues/74"
+    },
+    "P02": {
+      "number": 75,
+      "id": 5814875756,
+      "url": "https://github.com/1123786563/openmuse/issues/75"
+    },
+    "P03": {
+      "number": 76,
+      "id": 5814876173,
+      "url": "https://github.com/1123786563/openmuse/issues/76"
+    },
+    "V01": {
+      "number": 77,
+      "id": 5814876619,
+      "url": "https://github.com/1123786563/openmuse/issues/77"
+    },
+    "V02": {
+      "number": 78,
+      "id": 5814877113,
+      "url": "https://github.com/1123786563/openmuse/issues/78"
+    },
+    "D01": {
+      "number": 79,
+      "id": 5814877455,
+      "url": "https://github.com/1123786563/openmuse/issues/79"
+    },
+    "D02": {
+      "number": 80,
+      "id": 5814877885,
+      "url": "https://github.com/1123786563/openmuse/issues/80"
+    },
+    "D03": {
+      "number": 81,
+      "id": 5814878524,
+      "url": "https://github.com/1123786563/openmuse/issues/81"
+    },
+    "D04": {
+      "number": 82,
+      "id": 5814878976,
+      "url": "https://github.com/1123786563/openmuse/issues/82"
+    },
+    "D05": {
+      "number": 83,
+      "id": 5814879366,
+      "url": "https://github.com/1123786563/openmuse/issues/83"
+    },
+    "D06": {
+      "number": 84,
+      "id": 5814885043,
+      "url": "https://github.com/1123786563/openmuse/issues/84"
+    },
+    "D07": {
+      "number": 85,
+      "id": 5814885490,
+      "url": "https://github.com/1123786563/openmuse/issues/85"
+    },
+    "D08": {
+      "number": 86,
+      "id": 5814885914,
+      "url": "https://github.com/1123786563/openmuse/issues/86"
+    },
+    "D09": {
+      "number": 87,
+      "id": 5814886279,
+      "url": "https://github.com/1123786563/openmuse/issues/87"
+    },
+    "O01": {
+      "number": 88,
+      "id": 5814886716,
+      "url": "https://github.com/1123786563/openmuse/issues/88"
+    },
+    "O02": {
+      "number": 89,
+      "id": 5814887132,
+      "url": "https://github.com/1123786563/openmuse/issues/89"
+    },
+    "O03": {
+      "number": 90,
+      "id": 5814887606,
+      "url": "https://github.com/1123786563/openmuse/issues/90"
+    },
+    "O04": {
+      "number": 91,
+      "id": 5814887973,
+      "url": "https://github.com/1123786563/openmuse/issues/91"
+    },
+    "O05": {
+      "number": 92,
+      "id": 5814888384,
+      "url": "https://github.com/1123786563/openmuse/issues/92"
+    },
+    "B04": {
+      "number": 93,
+      "id": 5814888764,
+      "url": "https://github.com/1123786563/openmuse/issues/93"
+    }
+  },
+  "subissues": [
+    "B01",
+    "B02",
+    "B03",
+    "I01",
+    "I02",
+    "I03",
+    "I04",
+    "I05",
+    "I06",
+    "I07",
+    "I08",
+    "I09",
+    "C01",
+    "C02",
+    "C03",
+    "C04",
+    "C05",
+    "C06",
+    "C08",
+    "C09",
+    "K01",
+    "K02",
+    "K03",
+    "K04",
+    "G01",
+    "G02",
+    "G03",
+    "G04",
+    "G05",
+    "G06",
+    "M01",
+    "M02",
+    "M03",
+    "M04",
+    "A01",
+    "A02",
+    "A03",
+    "F01",
+    "F02",
+    "F03",
+    "F04",
+    "F10",
+    "F05",
+    "F06",
+    "F07",
+    "F08",
+    "F09",
+    "R01",
+    "R02",
+    "R03",
+    "R04",
+    "R05",
+    "R06",
+    "R07",
+    "R08",
+    "T01",
+    "T02",
+    "C07",
+    "T03",
+    "T04",
+    "T05",
+    "T06",
+    "T07",
+    "T08",
+    "T09",
+    "T10",
+    "T11",
+    "T12",
+    "T13",
+    "T14",
+    "T15",
+    "T16",
+    "P01",
+    "P02",
+    "P03",
+    "V01",
+    "V02",
+    "D01",
+    "D02",
+    "D03",
+    "D04",
+    "D05",
+    "D06",
+    "D07",
+    "D08",
+    "D09",
+    "O01",
+    "O02",
+    "O03",
+    "O04",
+    "O05",
+    "B04"
+  ],
+  "dependencies": [
+    "B02<-B01",
+    "B03<-B02",
+    "I01<-B02",
+    "I02<-I01",
+    "I03<-I02",
+    "I04<-B03",
+    "I04<-I03",
+    "I05<-B03",
+    "I05<-I03",
+    "I06<-I03",
+    "I07<-I04",
+    "I08<-I05",
+    "I09<-I02",
+    "C01<-I03",
+    "C02<-C01",
+    "C03<-C02",
+    "C04<-C01",
+    "C05<-C01",
+    "C06<-C01",
+    "C08<-I04",
+    "C08<-C02",
+    "C08<-C03",
+    "C08<-C04",
+    "C08<-C05",
+    "C08<-C06",
+    "C09<-I05",
+    "C09<-C02",
+    "C09<-C03",
+    "C09<-C04",
+    "C09<-C05",
+    "C09<-C06",
+    "K01<-I02",
+    "K02<-K01",
+    "K03<-K01",
+    "K04<-K02",
+    "K04<-K03",
+    "G01<-I03",
+    "G02<-G01",
+    "G03<-G01",
+    "G04<-G01",
+    "G04<-G03",
+    "G05<-G01",
+    "G05<-G03",
+    "G06<-G03",
+    "G06<-G04",
+    "G06<-G05",
+    "M01<-G01",
+    "M02<-M01",
+    "M03<-M01",
+    "M04<-M03",
+    "A01<-G03",
+    "A02<-A01",
+    "A03<-A01",
+    "F01<-I03",
+    "F02<-F01",
+    "F03<-F02",
+    "F04<-F02",
+    "F04<-I04",
+    "F10<-F02",
+    "F10<-I05",
+    "F05<-F02",
+    "F06<-F05",
+    "F07<-F06",
+    "F07<-F04",
+    "F08<-F06",
+    "F08<-F10",
+    "F09<-F06",
+    "F09<-K01",
+    "R01<-G01",
+    "R02<-R01",
+    "R02<-M03",
+    "R03<-R02",
+    "R03<-G05",
+    "R04<-R02",
+    "R05<-R01",
+    "R05<-A03",
+    "R06<-R05",
+    "R07<-R05",
+    "R08<-R06",
+    "R08<-R07",
+    "R08<-R04",
+    "T01<-I03",
+    "T02<-T01",
+    "T02<-C01",
+    "C07<-C01",
+    "C07<-T02",
+    "T03<-T02",
+    "T04<-T02",
+    "T05<-T02",
+    "T06<-T03",
+    "T07<-T02",
+    "T08<-T03",
+    "T08<-T07",
+    "T09<-T03",
+    "T09<-T07",
+    "T10<-T02",
+    "T11<-T10",
+    "T11<-T07",
+    "T12<-T03",
+    "T12<-T11",
+    "T13<-F02",
+    "T13<-T03",
+    "T14<-M04",
+    "T14<-F02",
+    "T15<-T08",
+    "T15<-F06",
+    "T15<-T14",
+    "T16<-T15",
+    "T16<-R04",
+    "P01<-I03",
+    "P01<-C01",
+    "P02<-I03",
+    "P02<-C01",
+    "P02<-T01",
+    "P03<-I03",
+    "P03<-C01",
+    "V01<-K03",
+    "V01<-R03",
+    "V01<-R04",
+    "V01<-R06",
+    "V01<-R08",
+    "V02<-V01",
+    "V02<-T12",
+    "D01<-I02",
+    "D02<-D01",
+    "D02<-T08",
+    "D02<-T11",
+    "D02<-R04",
+    "D02<-R08",
+    "D03<-D01",
+    "D03<-G05",
+    "D03<-F02",
+    "D04<-D02",
+    "D04<-D03",
+    "D04<-C03",
+    "D04<-K03",
+    "D04<-F09",
+    "D04<-T09",
+    "D04<-T11",
+    "D04<-T12",
+    "D04<-T13",
+    "D04<-T16",
+    "D04<-P01",
+    "D04<-P02",
+    "D04<-P03",
+    "D04<-V02",
+    "D05<-D04",
+    "D06<-D04",
+    "D06<-D05",
+    "D07<-D04",
+    "D07<-D05",
+    "D08<-D06",
+    "D08<-D07",
+    "D09<-D08",
+    "O01<-B03",
+    "O02<-O01",
+    "O02<-G03",
+    "O03<-O02",
+    "O03<-K03",
+    "O04<-O02",
+    "O04<-T11",
+    "O05<-O03",
+    "O05<-O04",
+    "O05<-R04",
+    "O05<-R08",
+    "O05<-D09",
+    "B04<-B01",
+    "B04<-B03",
+    "B04<-I07",
+    "B04<-I08",
+    "B04<-C07",
+    "B04<-C08",
+    "B04<-C09",
+    "B04<-K04",
+    "B04<-G06",
+    "B04<-M04",
+    "B04<-A03",
+    "B04<-F04",
+    "B04<-F10",
+    "B04<-F07",
+    "B04<-F08",
+    "B04<-R08",
+    "B04<-T16",
+    "B04<-P03",
+    "B04<-V02"
+  ],
+  "release_gate": {
+    "number": 94,
+    "id": 5815042006,
+    "url": "https://github.com/1123786563/openmuse/issues/94",
+    "subissue": true
+  }
+}
diff --git a/docs/superpowers/plans/2026-10-12-openmuse-openbot-published-v4.md b/docs/superpowers/plans/2026-10-12-openmuse-openbot-published-v4.md
new file mode 100644
index 000000000..1ee0fafb2
--- /dev/null
+++ b/docs/superpowers/plans/2026-10-12-openmuse-openbot-published-v4.md
@@ -0,0 +1,100 @@
+# OpenMuse on OpenBot v4 publication index
+
+Published to `1123786563/openmuse` on 2026-10-12, under [Spec #1](https://github.com/1123786563/openmuse/issues/1). The implementation Issues remain **planning tickets** with label `planning-ticket`; they do not have `ready-for-agent`. The separate [release acceptance gate #94](https://github.com/1123786563/openmuse/issues/94) contains the 43 story cases and 12 fault cards.
+
+GitHub native relationships: 92 sub-issues of Spec #1; 185 direct `blocked_by` edges. The local [publication journal](2026-10-12-openmuse-openbot-publication-v4.json) records GitHub issue IDs and successful link calls.
+
+| ID | Issue | Direct blockers |
+| --- | --- | --- |
+| B01 | [#2 Inventory copied-client differences](https://github.com/1123786563/openmuse/issues/2) | None |
+| B02 | [#3 Build canonical Web from submodule](https://github.com/1123786563/openmuse/issues/3) | [B01](https://github.com/1123786563/openmuse/issues/2) |
+| B03 | [#4 Build iOS and Android exports from submodule](https://github.com/1123786563/openmuse/issues/4) | [B02](https://github.com/1123786563/openmuse/issues/3) |
+| I01 | [#5 Sign in on Web and read an existing Bot](https://github.com/1123786563/openmuse/issues/5) | [B02](https://github.com/1123786563/openmuse/issues/3) |
+| I02 | [#6 Provision exactly one private OpenMuse Bot](https://github.com/1123786563/openmuse/issues/6) | [I01](https://github.com/1123786563/openmuse/issues/5) |
+| I03 | [#7 Enter the provisioned Bot on Web](https://github.com/1123786563/openmuse/issues/7) | [I02](https://github.com/1123786563/openmuse/issues/6) |
+| I04 | [#8 Restore an iOS Better Auth session](https://github.com/1123786563/openmuse/issues/8) | [B03](https://github.com/1123786563/openmuse/issues/4), [I03](https://github.com/1123786563/openmuse/issues/7) |
+| I05 | [#9 Restore an Android Better Auth session](https://github.com/1123786563/openmuse/issues/9) | [B03](https://github.com/1123786563/openmuse/issues/4), [I03](https://github.com/1123786563/openmuse/issues/7) |
+| I06 | [#10 Clear Web private state on logout](https://github.com/1123786563/openmuse/issues/10) | [I03](https://github.com/1123786563/openmuse/issues/7) |
+| I07 | [#11 Clear iOS private state on logout](https://github.com/1123786563/openmuse/issues/11) | [I04](https://github.com/1123786563/openmuse/issues/8) |
+| I08 | [#12 Clear Android private state on logout](https://github.com/1123786563/openmuse/issues/12) | [I05](https://github.com/1123786563/openmuse/issues/9) |
+| I09 | [#13 Preview and apply a Bot template revision](https://github.com/1123786563/openmuse/issues/13) | [I02](https://github.com/1123786563/openmuse/issues/6) |
+| C01 | [#14 Send one Channel message](https://github.com/1123786563/openmuse/issues/14) | [I03](https://github.com/1123786563/openmuse/issues/7) |
+| C02 | [#15 Create and switch Channels](https://github.com/1123786563/openmuse/issues/15) | [C01](https://github.com/1123786563/openmuse/issues/14) |
+| C03 | [#16 Rename, archive and reopen a Channel](https://github.com/1123786563/openmuse/issues/16) | [C02](https://github.com/1123786563/openmuse/issues/15) |
+| C04 | [#17 Stop a streamed Bot run](https://github.com/1123786563/openmuse/issues/17) | [C01](https://github.com/1123786563/openmuse/issues/14) |
+| C05 | [#18 Resume a stream without duplicate events](https://github.com/1123786563/openmuse/issues/18) | [C01](https://github.com/1123786563/openmuse/issues/14) |
+| C06 | [#19 Render named tool events and failures](https://github.com/1123786563/openmuse/issues/19) | [C01](https://github.com/1123786563/openmuse/issues/14) |
+| C08 | [#20 Use Channels on iOS](https://github.com/1123786563/openmuse/issues/20) | [I04](https://github.com/1123786563/openmuse/issues/8), [C02](https://github.com/1123786563/openmuse/issues/15), [C03](https://github.com/1123786563/openmuse/issues/16), [C04](https://github.com/1123786563/openmuse/issues/17), [C05](https://github.com/1123786563/openmuse/issues/18), [C06](https://github.com/1123786563/openmuse/issues/19) |
+| C09 | [#21 Use Channels on Android](https://github.com/1123786563/openmuse/issues/21) | [I05](https://github.com/1123786563/openmuse/issues/9), [C02](https://github.com/1123786563/openmuse/issues/15), [C03](https://github.com/1123786563/openmuse/issues/16), [C04](https://github.com/1123786563/openmuse/issues/17), [C05](https://github.com/1123786563/openmuse/issues/18), [C06](https://github.com/1123786563/openmuse/issues/19) |
+| K01 | [#22 Authorize a private computer stream](https://github.com/1123786563/openmuse/issues/22) | [I02](https://github.com/1123786563/openmuse/issues/6) |
+| K02 | [#23 Show computer preview](https://github.com/1123786563/openmuse/issues/23) | [K01](https://github.com/1123786563/openmuse/issues/22) |
+| K03 | [#24 Claim and revoke a human-control lease](https://github.com/1123786563/openmuse/issues/24) | [K01](https://github.com/1123786563/openmuse/issues/22) |
+| K04 | [#25 Control the computer from OpenMuse](https://github.com/1123786563/openmuse/issues/25) | [K02](https://github.com/1123786563/openmuse/issues/23), [K03](https://github.com/1123786563/openmuse/issues/24) |
+| G01 | [#26 Connect Gmail with an OAuth callback](https://github.com/1123786563/openmuse/issues/26) | [I03](https://github.com/1123786563/openmuse/issues/7) |
+| G02 | [#27 Handle expired, repeated and abandoned Gmail callbacks](https://github.com/1123786563/openmuse/issues/27) | [G01](https://github.com/1123786563/openmuse/issues/26) |
+| G03 | [#28 Grant Calendar access separately](https://github.com/1123786563/openmuse/issues/28) | [G01](https://github.com/1123786563/openmuse/issues/26) |
+| G04 | [#29 Refresh an expired Google grant](https://github.com/1123786563/openmuse/issues/29) | [G01](https://github.com/1123786563/openmuse/issues/26), [G03](https://github.com/1123786563/openmuse/issues/28) |
+| G05 | [#30 Disconnect and reconnect Google](https://github.com/1123786563/openmuse/issues/30) | [G01](https://github.com/1123786563/openmuse/issues/26), [G03](https://github.com/1123786563/openmuse/issues/28) |
+| G06 | [#31 Show Google account status in OpenMuse](https://github.com/1123786563/openmuse/issues/31) | [G03](https://github.com/1123786563/openmuse/issues/28), [G04](https://github.com/1123786563/openmuse/issues/29), [G05](https://github.com/1123786563/openmuse/issues/30) |
+| M01 | [#32 List and search Gmail](https://github.com/1123786563/openmuse/issues/32) | [G01](https://github.com/1123786563/openmuse/issues/26) |
+| M02 | [#33 Page Gmail without gaps](https://github.com/1123786563/openmuse/issues/33) | [M01](https://github.com/1123786563/openmuse/issues/32) |
+| M03 | [#34 Read a Gmail thread](https://github.com/1123786563/openmuse/issues/34) | [M01](https://github.com/1123786563/openmuse/issues/32) |
+| M04 | [#35 Read attachment metadata and bytes](https://github.com/1123786563/openmuse/issues/35) | [M03](https://github.com/1123786563/openmuse/issues/34) |
+| A01 | [#36 List and open Calendar events](https://github.com/1123786563/openmuse/issues/36) | [G03](https://github.com/1123786563/openmuse/issues/28) |
+| A02 | [#37 Page Calendar without gaps](https://github.com/1123786563/openmuse/issues/37) | [A01](https://github.com/1123786563/openmuse/issues/36) |
+| A03 | [#38 Render Calendar time zones and all-day dates](https://github.com/1123786563/openmuse/issues/38) | [A01](https://github.com/1123786563/openmuse/issues/36) |
+| F01 | [#39 Upload and list one personal File](https://github.com/1123786563/openmuse/issues/39) | [I03](https://github.com/1123786563/openmuse/issues/7) |
+| F02 | [#40 Download a private File](https://github.com/1123786563/openmuse/issues/40) | [F01](https://github.com/1123786563/openmuse/issues/39) |
+| F03 | [#41 Rename and delete a File](https://github.com/1123786563/openmuse/issues/41) | [F02](https://github.com/1123786563/openmuse/issues/40) |
+| F04 | [#42 Use Files on iOS](https://github.com/1123786563/openmuse/issues/42) | [F02](https://github.com/1123786563/openmuse/issues/40), [I04](https://github.com/1123786563/openmuse/issues/8) |
+| F10 | [#43 Use Files on Android](https://github.com/1123786563/openmuse/issues/43) | [F02](https://github.com/1123786563/openmuse/issues/40), [I05](https://github.com/1123786563/openmuse/issues/9) |
+| F05 | [#44 Inspect supported PDF fields](https://github.com/1123786563/openmuse/issues/44) | [F02](https://github.com/1123786563/openmuse/issues/40) |
+| F06 | [#45 Generate a filled PDF copy](https://github.com/1123786563/openmuse/issues/45) | [F05](https://github.com/1123786563/openmuse/issues/44) |
+| F07 | [#46 View original and filled PDF on iOS](https://github.com/1123786563/openmuse/issues/46) | [F06](https://github.com/1123786563/openmuse/issues/45), [F04](https://github.com/1123786563/openmuse/issues/42) |
+| F08 | [#47 View original and filled PDF on Android](https://github.com/1123786563/openmuse/issues/47) | [F06](https://github.com/1123786563/openmuse/issues/45), [F10](https://github.com/1123786563/openmuse/issues/43) |
+| F09 | [#48 Transfer a PDF version to Bot workspace](https://github.com/1123786563/openmuse/issues/48) | [F06](https://github.com/1123786563/openmuse/issues/45), [K01](https://github.com/1123786563/openmuse/issues/22) |
+| R01 | [#49 Establish a Reviewed action seam with a fake executor](https://github.com/1123786563/openmuse/issues/49) | [G01](https://github.com/1123786563/openmuse/issues/26) |
+| R02 | [#50 Approve and send one Gmail message](https://github.com/1123786563/openmuse/issues/50) | [R01](https://github.com/1123786563/openmuse/issues/49), [M03](https://github.com/1123786563/openmuse/issues/34) |
+| R03 | [#51 Reject stale Gmail proposals](https://github.com/1123786563/openmuse/issues/51) | [R02](https://github.com/1123786563/openmuse/issues/50), [G05](https://github.com/1123786563/openmuse/issues/30) |
+| R04 | [#52 Reconcile an uncertain Gmail send](https://github.com/1123786563/openmuse/issues/52) | [R02](https://github.com/1123786563/openmuse/issues/50) |
+| R05 | [#53 Create a reviewed Calendar event](https://github.com/1123786563/openmuse/issues/53) | [R01](https://github.com/1123786563/openmuse/issues/49), [A03](https://github.com/1123786563/openmuse/issues/38) |
+| R06 | [#54 Update a reviewed Calendar event](https://github.com/1123786563/openmuse/issues/54) | [R05](https://github.com/1123786563/openmuse/issues/53) |
+| R07 | [#55 Delete a reviewed Calendar event](https://github.com/1123786563/openmuse/issues/55) | [R05](https://github.com/1123786563/openmuse/issues/53) |
+| R08 | [#56 Reconcile uncertain Calendar mutations](https://github.com/1123786563/openmuse/issues/56) | [R06](https://github.com/1123786563/openmuse/issues/54), [R07](https://github.com/1123786563/openmuse/issues/55), [R04](https://github.com/1123786563/openmuse/issues/52) |
+| T01 | [#57 Create and list a queued Task](https://github.com/1123786563/openmuse/issues/57) | [I03](https://github.com/1123786563/openmuse/issues/7) |
+| T02 | [#58 Execute one Task with the existing headless runner](https://github.com/1123786563/openmuse/issues/58) | [T01](https://github.com/1123786563/openmuse/issues/57), [C01](https://github.com/1123786563/openmuse/issues/14) |
+| C07 | [#59 Port observable assistant delegation behavior](https://github.com/1123786563/openmuse/issues/59) | [C01](https://github.com/1123786563/openmuse/issues/14), [T02](https://github.com/1123786563/openmuse/issues/58) |
+| T03 | [#60 Show Task steps and evidence](https://github.com/1123786563/openmuse/issues/60) | [T02](https://github.com/1123786563/openmuse/issues/58) |
+| T04 | [#61 Cancel a Task](https://github.com/1123786563/openmuse/issues/61) | [T02](https://github.com/1123786563/openmuse/issues/58) |
+| T05 | [#62 Pause and resume a Task](https://github.com/1123786563/openmuse/issues/62) | [T02](https://github.com/1123786563/openmuse/issues/58) |
+| T06 | [#63 Retry a failed Task](https://github.com/1123786563/openmuse/issues/63) | [T03](https://github.com/1123786563/openmuse/issues/60) |
+| T07 | [#64 Recover a lost Task lease](https://github.com/1123786563/openmuse/issues/64) | [T02](https://github.com/1123786563/openmuse/issues/58) |
+| T08 | [#65 Answer a Task waiting for input](https://github.com/1123786563/openmuse/issues/65) | [T03](https://github.com/1123786563/openmuse/issues/60), [T07](https://github.com/1123786563/openmuse/issues/64) |
+| T09 | [#66 Run a Plan Task](https://github.com/1123786563/openmuse/issues/66) | [T03](https://github.com/1123786563/openmuse/issues/60), [T07](https://github.com/1123786563/openmuse/issues/64) |
+| T10 | [#67 Schedule a Monitor](https://github.com/1123786563/openmuse/issues/67) | [T02](https://github.com/1123786563/openmuse/issues/58) |
+| T11 | [#68 Deduplicate and back off Monitor observations](https://github.com/1123786563/openmuse/issues/68) | [T10](https://github.com/1123786563/openmuse/issues/67), [T07](https://github.com/1123786563/openmuse/issues/64) |
+| T12 | [#69 Notify Task and Monitor owners](https://github.com/1123786563/openmuse/issues/69) | [T03](https://github.com/1123786563/openmuse/issues/60), [T11](https://github.com/1123786563/openmuse/issues/68) |
+| T13 | [#70 Create a finance Task artifact](https://github.com/1123786563/openmuse/issues/70) | [F02](https://github.com/1123786563/openmuse/issues/40), [T03](https://github.com/1123786563/openmuse/issues/60) |
+| T14 | [#71 Import a Gmail PDF attachment into Files](https://github.com/1123786563/openmuse/issues/71) | [M04](https://github.com/1123786563/openmuse/issues/35), [F02](https://github.com/1123786563/openmuse/issues/40) |
+| T15 | [#72 Fill a document Task after an input wait](https://github.com/1123786563/openmuse/issues/72) | [T08](https://github.com/1123786563/openmuse/issues/65), [F06](https://github.com/1123786563/openmuse/issues/45), [T14](https://github.com/1123786563/openmuse/issues/71) |
+| T16 | [#73 Send a document Task's reviewed reply](https://github.com/1123786563/openmuse/issues/73) | [T15](https://github.com/1123786563/openmuse/issues/72), [R04](https://github.com/1123786563/openmuse/issues/52) |
+| P01 | [#74 Create and use a private Goal](https://github.com/1123786563/openmuse/issues/74) | [I03](https://github.com/1123786563/openmuse/issues/7), [C01](https://github.com/1123786563/openmuse/issues/14) |
+| P02 | [#75 Capture and use a private Idea](https://github.com/1123786563/openmuse/issues/75) | [I03](https://github.com/1123786563/openmuse/issues/7), [C01](https://github.com/1123786563/openmuse/issues/14), [T01](https://github.com/1123786563/openmuse/issues/57) |
+| P03 | [#76 Write and retrieve private Memory](https://github.com/1123786563/openmuse/issues/76) | [I03](https://github.com/1123786563/openmuse/issues/7), [C01](https://github.com/1123786563/openmuse/issues/14) |
+| V01 | [#77 Show Policy and Reviewed action items in Activity](https://github.com/1123786563/openmuse/issues/77) | [K03](https://github.com/1123786563/openmuse/issues/24), [R03](https://github.com/1123786563/openmuse/issues/51), [R04](https://github.com/1123786563/openmuse/issues/52), [R06](https://github.com/1123786563/openmuse/issues/54), [R08](https://github.com/1123786563/openmuse/issues/56) |
+| V02 | [#78 Show Task notifications in Activity](https://github.com/1123786563/openmuse/issues/78) | [V01](https://github.com/1123786563/openmuse/issues/77), [T12](https://github.com/1123786563/openmuse/issues/69) |
+| D01 | [#79 Fence a deleted account at authentication](https://github.com/1123786563/openmuse/issues/79) | [I02](https://github.com/1123786563/openmuse/issues/6) |
+| D02 | [#80 Stop Task, Monitor and pending write work](https://github.com/1123786563/openmuse/issues/80) | [D01](https://github.com/1123786563/openmuse/issues/79), [T08](https://github.com/1123786563/openmuse/issues/65), [T11](https://github.com/1123786563/openmuse/issues/68), [R04](https://github.com/1123786563/openmuse/issues/52), [R08](https://github.com/1123786563/openmuse/issues/56) |
+| D03 | [#81 Revoke Google and File access at deletion](https://github.com/1123786563/openmuse/issues/81) | [D01](https://github.com/1123786563/openmuse/issues/79), [G05](https://github.com/1123786563/openmuse/issues/30), [F02](https://github.com/1123786563/openmuse/issues/40) |
+| D04 | [#82 Create a durable deletion resource manifest](https://github.com/1123786563/openmuse/issues/82) | [D02](https://github.com/1123786563/openmuse/issues/80), [D03](https://github.com/1123786563/openmuse/issues/81), [C03](https://github.com/1123786563/openmuse/issues/16), [K03](https://github.com/1123786563/openmuse/issues/24), [F09](https://github.com/1123786563/openmuse/issues/48), [T09](https://github.com/1123786563/openmuse/issues/66), [T11](https://github.com/1123786563/openmuse/issues/68), [T12](https://github.com/1123786563/openmuse/issues/69), [T13](https://github.com/1123786563/openmuse/issues/70), [T16](https://github.com/1123786563/openmuse/issues/73), [P01](https://github.com/1123786563/openmuse/issues/74), [P02](https://github.com/1123786563/openmuse/issues/75), [P03](https://github.com/1123786563/openmuse/issues/76), [V02](https://github.com/1123786563/openmuse/issues/78) |
+| D05 | [#83 Restore the full recoverable set within 30 days](https://github.com/1123786563/openmuse/issues/83) | [D04](https://github.com/1123786563/openmuse/issues/82) |
+| D06 | [#84 Purge external File bytes](https://github.com/1123786563/openmuse/issues/84) | [D04](https://github.com/1123786563/openmuse/issues/82), [D05](https://github.com/1123786563/openmuse/issues/83) |
+| D07 | [#85 Purge OpenConnector grants](https://github.com/1123786563/openmuse/issues/85) | [D04](https://github.com/1123786563/openmuse/issues/82), [D05](https://github.com/1123786563/openmuse/issues/83) |
+| D08 | [#86 Purge OpenBot relational personal data](https://github.com/1123786563/openmuse/issues/86) | [D06](https://github.com/1123786563/openmuse/issues/84), [D07](https://github.com/1123786563/openmuse/issues/85) |
+| D09 | [#87 Enforce backup retention and final cleanup visibility](https://github.com/1123786563/openmuse/issues/87) | [D08](https://github.com/1123786563/openmuse/issues/86) |
+| O01 | [#88 Deploy the OpenBot API and database baseline](https://github.com/1123786563/openmuse/issues/88) | [B03](https://github.com/1123786563/openmuse/issues/4) |
+| O02 | [#89 Deploy OpenConnector and OAuth callback](https://github.com/1123786563/openmuse/issues/89) | [O01](https://github.com/1123786563/openmuse/issues/88), [G03](https://github.com/1123786563/openmuse/issues/28) |
+| O03 | [#90 Bound private computer capacity](https://github.com/1123786563/openmuse/issues/90) | [O02](https://github.com/1123786563/openmuse/issues/89), [K03](https://github.com/1123786563/openmuse/issues/24) |
+| O04 | [#91 Bound Task worker capacity](https://github.com/1123786563/openmuse/issues/91) | [O02](https://github.com/1123786563/openmuse/issues/89), [T11](https://github.com/1123786563/openmuse/issues/68) |
+| O05 | [#92 Expose connector, task, review and cleanup failures](https://github.com/1123786563/openmuse/issues/92) | [O03](https://github.com/1123786563/openmuse/issues/90), [O04](https://github.com/1123786563/openmuse/issues/91), [R04](https://github.com/1123786563/openmuse/issues/52), [R08](https://github.com/1123786563/openmuse/issues/56), [D09](https://github.com/1123786563/openmuse/issues/87) |
+| B04 | [#93 Remove copied client after all mapped adaptations land](https://github.com/1123786563/openmuse/issues/93) | [B01](https://github.com/1123786563/openmuse/issues/2), [B03](https://github.com/1123786563/openmuse/issues/4), [I07](https://github.com/1123786563/openmuse/issues/11), [I08](https://github.com/1123786563/openmuse/issues/12), [C07](https://github.com/1123786563/openmuse/issues/59), [C08](https://github.com/1123786563/openmuse/issues/20), [C09](https://github.com/1123786563/openmuse/issues/21), [K04](https://github.com/1123786563/openmuse/issues/25), [G06](https://github.com/1123786563/openmuse/issues/31), [M04](https://github.com/1123786563/openmuse/issues/35), [A03](https://github.com/1123786563/openmuse/issues/38), [F04](https://github.com/1123786563/openmuse/issues/42), [F10](https://github.com/1123786563/openmuse/issues/43), [F07](https://github.com/1123786563/openmuse/issues/46), [F08](https://github.com/1123786563/openmuse/issues/47), [R08](https://github.com/1123786563/openmuse/issues/56), [T16](https://github.com/1123786563/openmuse/issues/73), [P03](https://github.com/1123786563/openmuse/issues/76), [V02](https://github.com/1123786563/openmuse/issues/78) |
diff --git a/docs/superpowers/plans/2026-10-12-openmuse-openbot-review-resolution-v4.md b/docs/superpowers/plans/2026-10-12-openmuse-openbot-review-resolution-v4.md
new file mode 100644
index 000000000..e40ac493a
--- /dev/null
+++ b/docs/superpowers/plans/2026-10-12-openmuse-openbot-review-resolution-v4.md
@@ -0,0 +1,37 @@
+# v3 review resolution for the OpenMuse–OpenBot plan
+
+> This records how the user's detailed review changed the plan. The authoritative v4 sources are the [Ticket catalog](2026-10-12-openmuse-openbot-ticket-catalog-v4.md), [contracts and fixtures](2026-10-12-openmuse-openbot-contracts-v4.md), and [acceptance matrix](2026-10-12-openmuse-openbot-acceptance-v4.md). The approved planning Tickets are [published](2026-10-12-openmuse-openbot-published-v4.md).
+
+| Reviewed v3 item | v4 change | Contract / evidence |
+| --- | --- | --- |
+| 01–02 source layout and unknown copied-tree delta | B01 inventories every path/hash/intent; B02 Web submodule build; B03 native exports; B04 removes copy only after mapped adaptations resolve. Exact checkout and build commands fixed. | Contract §1; S41 |
+| 03 Web login and Bot provisioning too broad | I01 existing-session read, I02 atomic private Bot creation with unique owner/template constraint, I03 first-entry UI. | Contract §2; S03/S06 |
+| 04–05 native cache and expiry vague | I04/I05 session restore and 401; I06–I08 platform logout; current and target state locations listed. | Contract §2 table; S04/S05 |
+| 06 template rules vague | I09 uses managed/user field table, v1→v2 grant fixture and concurrent apply rule. | Contract §2; S07/S08 |
+| 07 baseline chat too broad | C01 one Channel; C02/C03 management; C04/C05 run lifecycle; C06 cards; C07 observable delegation after Task runner. | Contract §3; S10–S14 |
+| 08–10 archive/replay/cards vague or overblocked | Archived filter retains Thread; e1/e2/e3 cursor fixture and terminal states; named tool-event list; C06 depends directly on C01. | Contract §3; S10/S13/F-STREAM-1 |
+| 11 native multi-Channel dependency missing | C08 and C09 separate iOS/Android, each blocked by C02/C03/C04/C05/C06. | S10–S13 on I/A |
+| 12–13 computer control underspecified | K01 auth, K02 preview, K03 lease/Policy state machine, K04 UI. Competing claims and late input are explicit. | Contract §3; S38/F-CONTROL-1 |
+| 14–15 OAuth breadth and failures | G01 Gmail callback, G02 callback faults, G03 Calendar consent, G04 refresh, G05 disconnect, G06 status UI. State/nonce/generation matrix fixed. | Contract §4; S15/S16/F-OAUTH-1/2 |
+| 16–19 domain data/paging/time zone vague | M01–M04 and A01–A03 use fixed DTOs, sort/cursor bounds, DST/all-day examples. Gmail read depends G01, not Calendar grant. | Contract §4; S17/S18 |
+| 20–21 File scope/semantics vague | F01 upload/list, F02 content auth, F03 mutations, F04/F10 native clients; SHA-256, size, version, tombstone fixed. | Contract §5; S23 |
+| 22–24 PDF and transfer underspecified | F05 inspection, F06 immutable fill/Web view, F07/F08 native viewers, F09 workspace transfer; type/limit/collision/retry fixtures fixed. | Contract §5; S25–S27 |
+| 25–28 Reviewed action too broad | R01 shared prefactor with fake executor; R02–R04 Gmail send/stale/uncertain; R05–R08 Calendar create/update/delete/uncertain. | Contract §6; S19–S21/F-MAIL-1/2/F-CAL-1 |
+| 29–30 Task base too broad | T01 queued UI/store then T02 one-step existing WorkQueue/headless runner, T03 typed step/evidence; lease system reused. | Contract §7; S28 |
+| 31–34 control/recovery vague | T04 cancel, T05 pause/resume, T06 retry, T07 lease loss, T08 input wait, T09 Plan; legal transitions and three-step fixture fixed. | Contract §7; S31/S33/S34 |
+| 35–37 Monitor→notification gap | T10 schedule, T11 cursor/dedupe/backoff, T12 event-keyed notifications blocked by T11. | Contract §7; S32/S35/S37 |
+| 38–41 finance/document examples absent | T13 exact three-row totals and bad-row refusal; T14 owner-scoped idempotent import; T15 wait/filled version; T16 reply target/attachment binding. | Contracts §§5–7; S24/S29/S30 |
+| 42–44 subjective personal-context checks | P01/P02/P03 use explicit Goal/Idea/Memory fields, exact ID retrieval, another-Bot refusal and delete behavior. | Contract §7; S36 |
+| 45 Activity missing stale dependencies | V01 blocked by R03/R04/R06/R08 and K03; V02 adds notifications. Typed source/status/action table fixed. | Contract §8; S22 |
+| 46–48 deletion and restoration incomplete | D01 auth fence, D02 work stop, D03 File/Google closure, D04 manifest, D05 full recoverable-set restore. Module lifecycle hooks are required. | Contract §9; S39/S40 |
+| 49–50 unsafe purge order | D04 records external keys before cleanup; D06 File bytes and D07 connector grants run before D08 relational removal; D09 checks backups/retry visibility. | Contract §9; F-PURGE-1/2 |
+| 51 deployment breadth/fault visibility | O01 API/DB, O02 connector/callback, O03 computer limits, O04 worker limits, O05 fault signals. Exact first-release values proposed. | Contract §10; S41–S43 |
+| 52–65 unexecutable matrices | Replaced by 43 story cases plus 12 fault cards with fixtures, steps, expected UI/API/state, evidence IDs, owner routing and rerun rule. They are release gates, not Code Agent implementation Issues. | Acceptance matrix |
+
+## Publication rule
+
+The v4 catalog contains planning Tickets. A one-context file-level writing plan is still required for each Ticket before it may receive `ready-for-agent`. This is intentional: exact owned files and test commands cannot be safely fixed for ninety-plus future changes before earlier interfaces and copied-tree differences land. A file-level plan must name the integrated predecessor checkpoint and consume the contract version it was written against.
+
+## Approved v4 planning defaults
+
+The approved v4 contract fixes testable first-release defaults that were not explicitly decided in Spec #1: 20 MiB generic File upload, 10-minute OAuth state TTL, Mail page 25/max 100, Calendar page 50/max 100, 20 concurrent computers, 15-minute computer idle stop, 2 GiB per-Bot disk, four Task workers, 300-second first Task deadline, and the Monitor backoff sequence. They are **planning baselines**, not claims about existing code; a capacity or implementation Ticket may change them with reviewed evidence and updated acceptance cases.
diff --git a/docs/superpowers/plans/2026-10-12-openmuse-openbot-single-context-tickets-v3.md b/docs/superpowers/plans/2026-10-12-openmuse-openbot-single-context-tickets-v3.md
new file mode 100644
index 000000000..ee2e25074
--- /dev/null
+++ b/docs/superpowers/plans/2026-10-12-openmuse-openbot-single-context-tickets-v3.md
@@ -0,0 +1,923 @@
+# OpenMuse on OpenBot Implementation Plan — single-context tickets, revision 3
+
+> Superseded by the [v4 Ticket catalog](2026-10-12-openmuse-openbot-ticket-catalog-v4.md), [contracts](2026-10-12-openmuse-openbot-contracts-v4.md) and [acceptance matrix](2026-10-12-openmuse-openbot-acceptance-v4.md). Revision 3 is retained for decision history.
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+>
+> **Status:** revision 3 draft for user approval. Ticket IDs below are provisional and are not GitHub Issue numbers. No Ticket is published or implemented by this document.
+
+**Goal:** Make OpenMuse a three-platform frontend for OpenBot, preserving the existing product behavior for new multiuser data.
+
+**Architecture:** OpenBot owns all business state and execution. OpenMuse is the canonical frontend repository mounted as an OpenBot Git submodule. OpenConnector owns Google provider credentials and actions; OpenBot exposes stable user-scoped Mail and Calendar contracts. Each ticket traverses the relevant UI or Bot tool, authenticated domain interface, persistence or provider, and visible result.
+
+**Tech Stack:** Expo/React Native/Web and pnpm in OpenMuse; Bun/TypeScript, Hono, Better Auth, CopilotKit, PostgreSQL, WorkQueue and computer gateway in OpenBot; OpenConnector for Google OAuth and actions.
+
+**Spec:** [openmuse#1](https://github.com/1123786563/openmuse/issues/1); OpenMuse `CONTEXT.md` and accepted ADRs 0004–0010; the 2026-10-12 integration design in the sibling OpenBot checkout.
+
+## Global Constraints
+
+- One Code Agent owns one ticket in one fresh context. A ticket has one primary behavior and its own focused verification; if investigation shows broader work, split it before implementation.
+- Every user-facing ticket includes its narrow end-to-end path: OpenMuse screen or Bot tool → authenticated OpenBot contract → durable state or real connector → user-visible result. Existing shared React Native components serve Web/iOS/Android unless a platform-specific ticket says otherwise.
+- OpenBot is the only business backend. The old OpenMuse server and TaskWorker are never deployed for acceptance. No legacy single-owner records or tokens are migrated.
+- OpenBot derives user ownership from the session. Private Bot, computer, Google connection, Files, Tasks, Goals, Ideas and Memory cannot cross users. Personal tools are granted only to the private OpenMuse Bot.
+- OpenConnector is the only Google connector path. Gmail and Calendar external writes use exact Reviewed actions; computer Policy approvals remain separate.
+- The release targets approximately 1–20 concurrent active users. Two people with distinct real Google test accounts complete Web, iOS and Android acceptance.
+- Account deletion stops access and work immediately, allows 30-day recovery, then purges. A provider outcome marked uncertain is never retried automatically.
+- Each issue records its acceptance evidence and a reviewable checkpoint. Source layout or cross-repo changes require a committed OpenMuse revision before an OpenBot submodule pin can include them.
+- Each state-owning slice includes an owner-scoped deletion/retention hook behind the common lifecycle contract. Tickets 49–50 coordinate and verify those hooks rather than adding every module's cleanup logic at once.
+
+## Review Focus
+
+- Expired native sessions and logout: no stale cached personal data or media URLs remain available; tickets 04–05 pin this.
+- Concurrent first entry and changed Bot template: exactly one private Bot is created and managed fields update without overwriting user fields; tickets 03 and 06 pin this.
+- Foreign user IDs, file IDs, connection aliases and computer stream URLs: OpenBot refuses them even if the client fabricates a request; tickets 03, 12, 14, 20–21 and 29 pin this.
+- Google account or target changes after proposal, concurrent approval, and provider timeout: stale actions refuse and uncertain outcomes do not replay; tickets 25–28 pin this.
+- Worker death during a lease, monitor observation, human wait or account deletion: durable state resumes safely and no external change is repeated; tickets 32–33, 36 and 46–50 pin this.
+
+---
+
+## Sizing and dependency rules
+
+A ticket is complete when a fresh Code Agent can implement the stated behavior, run the focused check, and hand over a reviewable diff without opening another ticket's unfinished interface. It should normally touch one primary domain module and one client surface; shared schema or API edits are included only when required for that same path. The later platform acceptance tickets verify shared behavior and create new defect tickets if they expose work larger than a local fix.
+
+`Blocked by` means a required interface or persisted state from the blocker must be integrated and reviewed. A ticket with no blocker may start immediately. IDs are topologically ordered; containment under Spec #1 is not a dependency. GitHub Issues will use native dependency links where available, with an explicit `Blocked by` list in each body as a readable fallback.
+
+Every ticket below includes a user-visible delivery, direct blockers, Spec #1 story numbers, acceptance conditions, and the smallest verification evidence expected. The exact owned files, signatures and RED/GREEN commands belong in that ticket's file-level writing plan before implementation.
+
+For a code Ticket, the evidence package must include a focused failing-then-passing behavior check, the relevant OpenBot test command, the OpenMuse client check when UI changes, and TypeScript checks in each touched workspace. Provider and platform tickets additionally record a live or device flow. These are implementation requirements, not tests run during planning.
+
+## Proposed tickets
+
+### Ticket 01: Build the canonical Web client from a submodule
+
+**Blocked by:** None. **Spec stories:** 41.
+
+**What it delivers:** A clean OpenBot checkout builds the OpenMuse Web client from the canonical repository.
+
+**Acceptance criteria:**
+- [ ] Recursive checkout pins a committed OpenMuse revision
+- [ ] Web install/build uses the submodule
+- [ ] no copied client is used by the Web build.
+
+**Verification:** Clean-checkout build log plus recorded submodule SHA.
+
+### Ticket 02: Build native clients and retire the copied tree
+
+**Blocked by:** 01. **Spec stories:** 41.
+
+**What it delivers:** An operator builds iOS and Android bundles from the same submodule and has one frontend source.
+
+**Acceptance criteria:**
+- [ ] Compare and carry over useful copied-client adaptations before deletion
+- [ ] native bundle commands use the submodule
+- [ ] copied subtree is removed without losing source behavior.
+
+**Verification:** iOS/Android bundle logs and reconciliation checklist.
+
+### Ticket 03: Open a private Bot from Web login
+
+**Blocked by:** 01. **Spec stories:** 1, 3, 6, 9.
+
+**What it delivers:** A Web user signs in and enters an automatically provisioned private OpenMuse Bot.
+
+**Acceptance criteria:**
+- [ ] Concurrent first entries create exactly one Bot per user
+- [ ] the two Bots have different computer profiles
+- [ ] a foreign Bot ID is refused
+- [ ] logout removes the Web session view.
+
+**Verification:** Two-user authenticated Web/API flow and provisioning concurrency check.
+
+### Ticket 04: Restore and clear an iOS session
+
+**Blocked by:** 02, 03. **Spec stories:** 2, 4, 5.
+
+**What it delivers:** An iOS user returns to their own Bot after app restart and loses private cache on logout.
+
+**Acceptance criteria:**
+- [ ] Native login returns to the same Bot
+- [ ] expired session asks for login
+- [ ] logout clears conversation cache, media access and credentials.
+
+**Verification:** iOS simulator/device restart, expiry and logout flow.
+
+### Ticket 05: Restore and clear an Android session
+
+**Blocked by:** 02, 03. **Spec stories:** 2, 4, 5.
+
+**What it delivers:** An Android user returns to their own Bot after app restart and loses private cache on logout.
+
+**Acceptance criteria:**
+- [ ] Native login returns to the same Bot
+- [ ] expired session asks for login
+- [ ] logout clears conversation cache, media access and credentials.
+
+**Verification:** Android emulator/device restart, expiry and logout flow.
+
+### Ticket 06: Roll out a private Bot template revision
+
+**Blocked by:** 03. **Spec stories:** 7–8.
+
+**What it delivers:** An administrator changes common grants while users keep their own Bot descriptions and preferences.
+
+**Acceptance criteria:**
+- [ ] Preview distinguishes managed and user fields
+- [ ] applying twice is idempotent
+- [ ] existing Bots receive new grants
+- [ ] non-admin changes are refused.
+
+**Verification:** Admin flow with two existing Bots and persisted-field comparison.
+
+### Ticket 07: Send and receive one Channel conversation
+
+**Blocked by:** 03. **Spec stories:** 10–12, 14.
+
+**What it delivers:** A person opens a Channel with their private Bot, sends a message and receives a streamed answer.
+
+**Acceptance criteria:**
+- [ ] OpenBot returns explicit Bot/Channel/Thread IDs
+- [ ] history survives reload
+- [ ] baseline Bot behavior comes from OpenBot rather than the old OpenMuse server.
+
+**Verification:** Authenticated client conversation and stored Thread check.
+
+### Ticket 08: Manage multiple Channels
+
+**Blocked by:** 07. **Spec stories:** 10–11.
+
+**What it delivers:** A person creates, switches, renames and archives Channels without mixing Threads.
+
+**Acceptance criteria:**
+- [ ] Each Channel retains its own Thread
+- [ ] archived Channel leaves active list but history remains accessible
+- [ ] foreign Channel operations refuse.
+
+**Verification:** Two-Channel UI flow and authorization checks.
+
+### Ticket 09: Stop and reconnect a streamed run
+
+**Blocked by:** 07. **Spec stories:** 12–13.
+
+**What it delivers:** A person stops a reply or reconnects after network loss and sees one coherent conversation.
+
+**Acceptance criteria:**
+- [ ] Stop reaches the active OpenBot run
+- [ ] reconnect replays existing events without duplicate messages
+- [ ] a failed run shows its status.
+
+**Verification:** Interrupted stream/reconnect behavior check.
+
+### Ticket 10: Render tool cards and run failures
+
+**Blocked by:** 09. **Spec stories:** 12, 14.
+
+**What it delivers:** A person sees OpenMuse's rich tool cards and actionable failure states during Bot work.
+
+**Acceptance criteria:**
+- [ ] Known tool events map to existing cards
+- [ ] unknown event has a safe readable fallback
+- [ ] failed tool/run is not shown as success.
+
+**Verification:** Representative tool-event fixtures and client rendering check.
+
+### Ticket 11: Use shared chat behavior on native clients
+
+**Blocked by:** 04, 05, 09, 10. **Spec stories:** 1–2, 10–14.
+
+**What it delivers:** iOS and Android users can use the same Channel and Thread behavior as Web.
+
+**Acceptance criteria:**
+- [ ] Shared client state preserves Channel/Thread identity
+- [ ] native stop/reconnect does not duplicate
+- [ ] tool cards and errors remain readable on both platforms.
+
+**Verification:** One native conversation/reconnect flow per platform.
+
+### Ticket 12: View the private Bot computer
+
+**Blocked by:** 03. **Spec stories:** 9, 38.
+
+**What it delivers:** A person watches their own Bot computer from OpenMuse.
+
+**Acceptance criteria:**
+- [ ] Snapshot and live stream use OpenBot session authorization
+- [ ] foreign Bot stream URLs refuse
+- [ ] lost session closes the stream.
+
+**Verification:** Two-user preview/stream isolation flow.
+
+### Ticket 13: Take human control under computer policy
+
+**Blocked by:** 12. **Spec stories:** 38.
+
+**What it delivers:** A person takes and releases control of their Bot computer with visible policy decisions.
+
+**Acceptance criteria:**
+- [ ] Input is accepted only during authorized control
+- [ ] policy refusal is shown
+- [ ] control ends on logout or disconnect
+- [ ] audit records the actor.
+
+**Verification:** Control/refusal/reconnect flow and audit check.
+
+### Ticket 14: Authorize Gmail through OpenConnector
+
+**Blocked by:** 03. **Spec stories:** 15.
+
+**What it delivers:** A person completes Gmail OAuth consent after OpenBot login and sees the connected account.
+
+**Acceptance criteria:**
+- [ ] OpenBot derives a user-specific connection alias
+- [ ] callback binds to the initiating session
+- [ ] tokens never reach the client
+- [ ] a second user cannot select the alias.
+
+**Verification:** Two real Google accounts and callback/foreign-alias checks.
+
+### Ticket 15: Authorize Calendar and manage Google connection state
+
+**Blocked by:** 14. **Spec stories:** 15–16.
+
+**What it delivers:** A person grants Calendar access, sees connection status, refreshes an expired grant and disconnects.
+
+**Acceptance criteria:**
+- [ ] Gmail and Calendar grant status is explicit
+- [ ] revoked/expired grants are visible
+- [ ] disconnect prevents subsequent provider calls
+- [ ] account identity stays user-scoped.
+
+**Verification:** Real Calendar consent, refresh, revoke and reconnect flow.
+
+### Ticket 16: Search and list Gmail messages
+
+**Blocked by:** 15. **Spec stories:** 17.
+
+**What it delivers:** A person searches their own Gmail and sees a paged or explicitly truncated result list.
+
+**Acceptance criteria:**
+- [ ] Query and pagination map to stable OpenBot Mail data
+- [ ] disconnected accounts fail visibly
+- [ ] another user cannot read the result.
+
+**Verification:** Two-account search/list flow and contract check.
+
+### Ticket 17: Read Gmail threads and attachments
+
+**Blocked by:** 16. **Spec stories:** 17.
+
+**What it delivers:** A person opens a mail thread and can inspect its attachment metadata.
+
+**Acceptance criteria:**
+- [ ] Thread order and message identity are preserved
+- [ ] attachment access uses the current owner/connection
+- [ ] provider errors do not expose another user's content.
+
+**Verification:** Real thread with attachment and foreign-ID check.
+
+### Ticket 18: Browse Calendar events
+
+**Blocked by:** 15. **Spec stories:** 18.
+
+**What it delivers:** A person views their own calendar and opens an event.
+
+**Acceptance criteria:**
+- [ ] Event IDs, calendar identity and paging are stable
+- [ ] empty and disconnected states are visible
+- [ ] another user cannot read an event by ID.
+
+**Verification:** Two-account list/detail flow.
+
+### Ticket 19: Show all-day and cross-time-zone events correctly
+
+**Blocked by:** 18. **Spec stories:** 18.
+
+**What it delivers:** A person sees Calendar dates and times correctly across local time zones.
+
+**Acceptance criteria:**
+- [ ] All-day events do not shift dates
+- [ ] timed events preserve source zone and display local zone
+- [ ] daylight-saving boundary is handled.
+
+**Verification:** Known all-day/cross-zone event fixtures and platform view.
+
+### Ticket 20: Upload and list personal Files
+
+**Blocked by:** 03. **Spec stories:** 23.
+
+**What it delivers:** A person uploads a file and sees it in a durable personal Files list.
+
+**Acceptance criteria:**
+- [ ] The record has owner, stable ID, MIME, size and hash
+- [ ] it remains after restart and outside the originating Channel
+- [ ] a foreign list request refuses.
+
+**Verification:** Upload/list/restart two-user flow.
+
+### Ticket 21: Open, download, rename and delete a File
+
+**Blocked by:** 20. **Spec stories:** 23.
+
+**What it delivers:** A person manages and downloads a private file from the Files page.
+
+**Acceptance criteria:**
+- [ ] Authenticated byte access enforces owner even with a copied URL
+- [ ] rename persists
+- [ ] deletion removes it from list and invalidates access
+- [ ] version identity stays stable.
+
+**Verification:** Download/rename/delete and foreign-URL check.
+
+### Ticket 22: Inspect PDF fields
+
+**Blocked by:** 21. **Spec stories:** 25.
+
+**What it delivers:** A person opens a PDF and sees supported fields and unsupported-field reasons.
+
+**Acceptance criteria:**
+- [ ] Inspection runs on OpenBot
+- [ ] malformed or encrypted PDF fails clearly
+- [ ] original bytes remain unchanged
+- [ ] field identity is stable for later fill.
+
+**Verification:** Representative supported/unsupported/malformed PDF fixtures.
+
+### Ticket 23: Fill and view a PDF copy
+
+**Blocked by:** 22. **Spec stories:** 26–27.
+
+**What it delivers:** A person submits values, receives a new PDF version and views it beside the original.
+
+**Acceptance criteria:**
+- [ ] Fill is deterministic for the same input
+- [ ] missing/invalid values are reported
+- [ ] original hash is unchanged
+- [ ] Web/native viewers load authorized derived bytes.
+
+**Verification:** Field-value fixture, hashes and three-platform viewer check.
+
+### Ticket 24: Transfer a PDF artifact to the private workspace
+
+**Blocked by:** 12, 23. **Spec stories:** 27.
+
+**What it delivers:** A person moves an authorized PDF copy into their Bot computer workspace.
+
+**Acceptance criteria:**
+- [ ] OpenBot resolves the private computer
+- [ ] only owner files transfer
+- [ ] workspace result references the correct file version
+- [ ] failures remain visible.
+
+**Verification:** Two-user workspace transfer and copied-file check.
+
+### Ticket 25: Approve and send an exact Gmail proposal
+
+**Blocked by:** 17. **Spec stories:** 19, 21.
+
+**What it delivers:** A person approves or denies an exact email/reply proposal and sees a receipt.
+
+**Acceptance criteria:**
+- [ ] Proposal binds recipients, content, account, connection generation and expiry
+- [ ] approval claims once
+- [ ] denial/expiry sends nothing
+- [ ] receipt links the actual provider result.
+
+**Verification:** Real test-account send and concurrent approval check.
+
+### Ticket 26: Reconcile changed or uncertain Gmail sends
+
+**Blocked by:** 25. **Spec stories:** 21.
+
+**What it delivers:** A person sees stale or uncertain send outcomes without silent replay.
+
+**Acceptance criteria:**
+- [ ] Changed account/recipient/target invalidates proposal
+- [ ] provider timeout after submission becomes outcome_unknown
+- [ ] retry requires reconciliation rather than automatic resend.
+
+**Verification:** Fault-injected timeout and changed-account checks.
+
+### Ticket 27: Create a reviewed Calendar event
+
+**Blocked by:** 19, 25. **Spec stories:** 20–21.
+
+**What it delivers:** A person reviews and approves a new event before it appears in Calendar.
+
+**Acceptance criteria:**
+- [ ] Proposal binds calendar, account, time zone, attendees and details
+- [ ] denial/expiry creates nothing
+- [ ] approval creates once with receipt.
+
+**Verification:** Real Google Calendar create/deny flow and concurrent approval check.
+
+### Ticket 28: Review Calendar update and deletion
+
+**Blocked by:** 27. **Spec stories:** 20–21.
+
+**What it delivers:** A person reviews the exact change or deletion of an existing event.
+
+**Acceptance criteria:**
+- [ ] Proposal binds target event version
+- [ ] changed/deleted target refuses
+- [ ] uncertain provider response does not auto-repeat
+- [ ] receipt reflects create/update/delete outcome.
+
+**Verification:** Real update/delete and stale-target/timeout checks.
+
+### Ticket 29: Start a one-off Task with the private Bot
+
+**Blocked by:** 07, 12. **Spec stories:** 28.
+
+**What it delivers:** A person starts an agent Task, closes the app and later sees its final state.
+
+**Acceptance criteria:**
+- [ ] OpenBot stores owner, Bot, Task and run identity
+- [ ] headless runner uses the private Bot
+- [ ] task continues with client closed
+- [ ] foreign Task ID refuses.
+
+**Verification:** Offline run and two-user authorization check.
+
+### Ticket 30: Show Task steps and typed evidence
+
+**Blocked by:** 29. **Spec stories:** 28.
+
+**What it delivers:** A person opens Task detail and understands each step, event, artifact and failure.
+
+**Acceptance criteria:**
+- [ ] Step/run/evidence IDs remain stable across reload
+- [ ] evidence types render distinctly
+- [ ] a failed step has a visible cause and does not appear complete.
+
+**Verification:** Task detail flow with success and failure runs.
+
+### Ticket 31: Cancel, pause, resume and retry a Task
+
+**Blocked by:** 30. **Spec stories:** 33.
+
+**What it delivers:** A person controls an eligible Task from the UI.
+
+**Acceptance criteria:**
+- [ ] Only legal transitions appear
+- [ ] cancellation prevents new work
+- [ ] retry creates a new attempt while preserving prior evidence
+- [ ] foreign actor cannot transition Task.
+
+**Verification:** Transition matrix and client control flow.
+
+### Ticket 32: Recover a Task after worker lease loss
+
+**Blocked by:** 29. **Spec stories:** 34.
+
+**What it delivers:** A person sees a Task continue or fail safely after a worker restart.
+
+**Acceptance criteria:**
+- [ ] Expired lease is reclaimed once
+- [ ] completed step is not re-executed
+- [ ] running step resumes from a durable checkpoint or records a clear failure.
+
+**Verification:** Kill/restart worker at a controlled step and inspect durable run state.
+
+### Ticket 33: Resume a Task waiting for human input
+
+**Blocked by:** 30, 32. **Spec stories:** 34.
+
+**What it delivers:** A person supplies missing task input after closing and reopening the app.
+
+**Acceptance criteria:**
+- [ ] Waiting payload and owner survive restart
+- [ ] only the owner may answer
+- [ ] answer is consumed once
+- [ ] Task moves to the next state without duplicate execution.
+
+**Verification:** Restart at wait state, submit once, repeat-submit refusal.
+
+### Ticket 34: Run a multi-step Plan Task
+
+**Blocked by:** 30, 32. **Spec stories:** 31.
+
+**What it delivers:** A person sees a plan's ordered steps, outcomes and final result.
+
+**Acceptance criteria:**
+- [ ] Plan steps persist before execution
+- [ ] completed steps are not repeated after restart
+- [ ] failure identifies the step and retained evidence.
+
+**Verification:** Three-step plan with controlled restart and failed step.
+
+### Ticket 35: Schedule a recurring Monitor
+
+**Blocked by:** 29. **Spec stories:** 32.
+
+**What it delivers:** A person creates, views and stops a Monitor that performs periodic observations.
+
+**Acceptance criteria:**
+- [ ] Schedule, condition and owner persist
+- [ ] next due time is visible
+- [ ] stopping prevents future runs
+- [ ] only private Bot tools execute it.
+
+**Verification:** Clock-controlled due/stop flow.
+
+### Ticket 36: Deduplicate Monitor observations and back off failures
+
+**Blocked by:** 35, 32. **Spec stories:** 35.
+
+**What it delivers:** A person receives only new Monitor outcomes and sees a recoverable failure state.
+
+**Acceptance criteria:**
+- [ ] Observation cursor survives restart
+- [ ] same event is not emitted twice
+- [ ] repeated failures back off
+- [ ] recovery resumes from saved cursor.
+
+**Verification:** Repeated observation/restart/failure schedule check.
+
+### Ticket 37: Receive and mark Task notifications
+
+**Blocked by:** 30. **Spec stories:** 37.
+
+**What it delivers:** A person receives Task status notifications and marks them read.
+
+**Acceptance criteria:**
+- [ ] Each relevant Task state emits one owner-scoped notification
+- [ ] unread count survives restart
+- [ ] marking one user's item does not affect another.
+
+**Verification:** Two-user notification/read-state flow.
+
+### Ticket 38: Produce a finance Task from CSV
+
+**Blocked by:** 21, 30. **Spec stories:** 30.
+
+**What it delivers:** A person submits a spending CSV and receives a private summary artifact.
+
+**Acceptance criteria:**
+- [ ] Invalid rows report line and reason
+- [ ] valid totals match known fixtures
+- [ ] Task links the derived artifact
+- [ ] restarting does not duplicate artifact.
+
+**Verification:** Known-result CSV, malformed-row and artifact access checks.
+
+### Ticket 39: Import a Gmail PDF attachment into Files
+
+**Blocked by:** 17, 21. **Spec stories:** 24.
+
+**What it delivers:** A person selects a mail PDF attachment and finds an owned File in the Files library.
+
+**Acceptance criteria:**
+- [ ] Import reads only the connected user's attachment
+- [ ] MIME and hash are recorded
+- [ ] duplicate retry does not create unrelated copies
+- [ ] foreign attachment refuses.
+
+**Verification:** Real test-message attachment and two-user import flow.
+
+### Ticket 40: Fill a document Task after requesting missing values
+
+**Blocked by:** 23, 33, 39. **Spec stories:** 29.
+
+**What it delivers:** A person starts a document Task, supplies missing values and gets a filled PDF artifact.
+
+**Acceptance criteria:**
+- [ ] Task links original and derived versions
+- [ ] wait survives restart
+- [ ] unsupported fields are shown
+- [ ] filling does not overwrite source.
+
+**Verification:** PDF attachment task with missing-value/restart flow.
+
+### Ticket 41: Send the document Task's reviewed reply
+
+**Blocked by:** 26, 40. **Spec stories:** 29.
+
+**What it delivers:** A person reviews a prepared reply with the filled PDF and reaches a recorded Task outcome.
+
+**Acceptance criteria:**
+- [ ] Reply proposal binds exact attachment version and account
+- [ ] denial retains artifacts and sends nothing
+- [ ] uncertainty does not auto-resend
+- [ ] receipt links Task.
+
+**Verification:** Real test-account approval/denial/timeout document flow.
+
+### Ticket 42: Create Goals usable by the private Bot
+
+**Blocked by:** 03, 07. **Spec stories:** 36.
+
+**What it delivers:** A person creates and edits a Goal that their private Bot can reference.
+
+**Acceptance criteria:**
+- [ ] Goal is owner-scoped and durable
+- [ ] private Bot tool can read it
+- [ ] another user or Bot without grant cannot
+- [ ] deleted Goal stops appearing.
+
+**Verification:** Goal UI plus two-Bot conversation/permission flow.
+
+### Ticket 43: Capture Ideas usable by the private Bot
+
+**Blocked by:** 03, 07. **Spec stories:** 36.
+
+**What it delivers:** A person captures, views and updates an Idea that their private Bot can use.
+
+**Acceptance criteria:**
+- [ ] Idea remains private and durable
+- [ ] Bot can cite the correct Idea
+- [ ] another user or ungranted Bot cannot read it.
+
+**Verification:** Idea UI plus two-Bot permission flow.
+
+### Ticket 44: Keep private Bot Memory isolated
+
+**Blocked by:** 03, 07. **Spec stories:** 36.
+
+**What it delivers:** A person sees useful private memory in later conversations without sharing it to another Bot.
+
+**Acceptance criteria:**
+- [ ] Memory write/read is scoped to user and private Bot
+- [ ] revoke or delete removes access
+- [ ] another Bot cannot retrieve it even for the same user without grant.
+
+**Verification:** Two-Bot memory recall and isolation flow.
+
+### Ticket 45: Show one typed Activity feed
+
+**Blocked by:** 13, 25, 27, 37. **Spec stories:** 22, 37.
+
+**What it delivers:** A person sees Policy approvals, Reviewed actions and Task notifications together and acts through the correct decision path.
+
+**Acceptance criteria:**
+- [ ] Feed items have type/source and stable ordering
+- [ ] Policy approval cannot execute a Reviewed action
+- [ ] stale items show their real state
+- [ ] notification read state is independent.
+
+**Verification:** Mixed-item Activity UI and wrong-decision-type refusal.
+
+### Ticket 46: Stop sessions, Bot and Tasks at account deletion
+
+**Blocked by:** 03, 31. **Spec stories:** 39.
+
+**What it delivers:** Deleting an account immediately prevents new authenticated work and halts its private Bot and Tasks.
+
+**Acceptance criteria:**
+- [ ] A durable deletion marker is idempotent
+- [ ] sessions stop authorizing requests
+- [ ] queued/running Tasks stop scheduling new steps
+- [ ] another user's work continues.
+
+**Verification:** Race deletion with a running Task and repeat the request.
+
+### Ticket 47: Disconnect Google and invalidate file access at deletion
+
+**Blocked by:** 15, 21, 46. **Spec stories:** 39.
+
+**What it delivers:** A deleted user's Google grants and File URLs stop working immediately.
+
+**Acceptance criteria:**
+- [ ] Deletion triggers connector revocation or a durable retry with all OpenBot access already denied
+- [ ] copied File URLs fail
+- [ ] a late OAuth callback cannot reconnect the account.
+
+**Verification:** Race deletion with OAuth callback and a signed download.
+
+### Ticket 48: Restore an account within 30 days
+
+**Blocked by:** 47. **Spec stories:** 40.
+
+**What it delivers:** An administrator restores recoverable private data during the grace period.
+
+**Acceptance criteria:**
+- [ ] Only an administrator can restore
+- [ ] Bot and Files regain the correct owner
+- [ ] cancelled external writes and Tasks do not restart
+- [ ] day 31 refuses restoration.
+
+**Verification:** Clock-controlled day-29 restore and day-31 refusal.
+
+### Ticket 49: Purge expired OpenBot personal records
+
+**Blocked by:** 24, 28, 34, 36, 38, 41, 42, 43, 45, 48. **Spec stories:** 40.
+
+**What it delivers:** After the grace period, OpenBot removes the user's business records and reports partial cleanup.
+
+**Acceptance criteria:**
+- [ ] Tasks, reviews, personal context, notifications and File metadata are removed by owner
+- [ ] failure leaves a retryable deletion record
+- [ ] another user is untouched.
+
+**Verification:** Clock-controlled purge with one injected database failure and retry.
+
+### Ticket 50: Purge file bytes and connector credentials after retention
+
+**Blocked by:** 49. **Spec stories:** 40.
+
+**What it delivers:** After relational cleanup, the operator sees external personal bytes and credentials removed.
+
+**Acceptance criteria:**
+- [ ] Original/derived File bytes are deleted
+- [ ] OpenConnector grants and aliases are gone
+- [ ] cleanup retries are idempotent
+- [ ] backup retention is bounded to the same policy.
+
+**Verification:** Injected storage/connector failure, retry, and retention configuration review.
+
+### Ticket 51: Deploy a bounded self-hosted stack
+
+**Blocked by:** 02, 13, 15, 36. **Spec stories:** 41–43.
+
+**What it delivers:** An operator deploys one OpenBot backend, database, OpenConnector and private computers.
+
+**Acceptance criteria:**
+- [ ] OAuth callback is reachable while connector admin is restricted
+- [ ] worker/computer concurrency and disk limits suit 1–20 active users
+- [ ] health signals expose connector, queue and computer failure.
+
+**Verification:** Clean environment deployment and capacity/health smoke.
+
+### Ticket 52: Accept Web identity, chat and computer paths
+
+**Blocked by:** 06, 08, 10, 13, 51. **Spec stories:** 1–14, 38.
+
+**What it delivers:** Two users prove Web login, private Bot, Channels, streaming and computer control.
+
+**Acceptance criteria:**
+- [ ] Sessions and template grants are correct
+- [ ] Threads stay distinct across restart
+- [ ] computer and policy decisions never cross users.
+
+**Verification:** Recorded Web two-user chat/computer matrix.
+
+### Ticket 53: Accept Web Google reads and reviewed writes
+
+**Blocked by:** 26, 28, 51. **Spec stories:** 15–21.
+
+**What it delivers:** Two real Google accounts prove Web Gmail, Calendar and exact Reviewed actions.
+
+**Acceptance criteria:**
+- [ ] Account isolation, read paging and time zones pass
+- [ ] approval, denial, stale proposal and uncertain outcome behave as specified.
+
+**Verification:** Web live Gmail/Calendar receipts and fault matrix.
+
+### Ticket 54: Accept Web Files, PDF and document workflow
+
+**Blocked by:** 24, 41, 51. **Spec stories:** 23–29.
+
+**What it delivers:** Two users prove Web Files, PDF copies, workspace transfer and mail-document reply.
+
+**Acceptance criteria:**
+- [ ] Original/derived versions stay private
+- [ ] attachment import and human wait survive restart
+- [ ] reviewed reply executes at most once.
+
+**Verification:** Web file/PDF/document acceptance record.
+
+### Ticket 55: Accept Web Task, Monitor and finance paths
+
+**Blocked by:** 34, 36, 37, 38, 51. **Spec stories:** 28, 30–35, 37.
+
+**What it delivers:** Two users prove all Task kinds, monitor deduplication, notifications and finance output on Web.
+
+**Acceptance criteria:**
+- [ ] Offline execution and restart recovery pass
+- [ ] CSV totals match known data
+- [ ] notifications and evidence remain owner-scoped.
+
+**Verification:** Web Task/monitor/finance matrix.
+
+### Ticket 56: Accept Web personal context, Activity and deletion
+
+**Blocked by:** 44, 45, 50, 51. **Spec stories:** 22, 36–40.
+
+**What it delivers:** Two users prove Goals, Ideas, Memory, mixed Activity and the deletion lifecycle on Web.
+
+**Acceptance criteria:**
+- [ ] Only private Bot uses personal tools
+- [ ] decision types cannot be confused
+- [ ] deletion, day-29 restore and day-31 purge show correct ownership.
+
+**Verification:** Web personal/Activity/deletion matrix.
+
+### Ticket 57: Accept iOS identity, chat and computer paths
+
+**Blocked by:** 04, 11, 13, 51. **Spec stories:** 1–14, 38.
+
+**What it delivers:** Two users prove native session, Channels, streaming and computer control on iOS.
+
+**Acceptance criteria:**
+- [ ] App restart and logout clear the right state
+- [ ] Bot/Thread and computer stay private
+- [ ] stop/reconnect works on device.
+
+**Verification:** iOS two-user core matrix.
+
+### Ticket 58: Accept iOS Google and reviewed actions
+
+**Blocked by:** 15, 26, 28, 51. **Spec stories:** 15–21.
+
+**What it delivers:** Two Google accounts prove OAuth callback, Mail, Calendar and Reviewed actions on iOS.
+
+**Acceptance criteria:**
+- [ ] Callback returns to the correct person
+- [ ] time zones display correctly
+- [ ] approval/denial/uncertainty is visible and cannot duplicate a write.
+
+**Verification:** iOS live Google matrix.
+
+### Ticket 59: Accept iOS Files, PDF and document workflow
+
+**Blocked by:** 23, 24, 41, 51. **Spec stories:** 23–29.
+
+**What it delivers:** Two users prove native file access, PDF viewing, workspace transfer and reviewed document reply on iOS.
+
+**Acceptance criteria:**
+- [ ] PDF copy and original are readable
+- [ ] foreign file links fail
+- [ ] human wait resumes after app restart.
+
+**Verification:** iOS file/document matrix.
+
+### Ticket 60: Accept iOS Tasks, personal context and Activity
+
+**Blocked by:** 34, 36, 37, 38, 44, 45, 50, 51. **Spec stories:** 22, 28–40.
+
+**What it delivers:** Two users prove background Tasks, monitor, finance, personal tools, Activity and deletion on iOS.
+
+**Acceptance criteria:**
+- [ ] Task state survives app closure
+- [ ] notifications and private context stay scoped
+- [ ] deletion stops access.
+
+**Verification:** iOS Task/personal/Activity matrix.
+
+### Ticket 61: Accept Android identity, chat and computer paths
+
+**Blocked by:** 05, 11, 13, 51. **Spec stories:** 1–14, 38.
+
+**What it delivers:** Two users prove native session, Channels, streaming and computer control on Android.
+
+**Acceptance criteria:**
+- [ ] App restart and logout clear the right state
+- [ ] Bot/Thread and computer stay private
+- [ ] stop/reconnect works on device.
+
+**Verification:** Android two-user core matrix.
+
+### Ticket 62: Accept Android Google and reviewed actions
+
+**Blocked by:** 15, 26, 28, 51. **Spec stories:** 15–21.
+
+**What it delivers:** Two Google accounts prove OAuth callback, Mail, Calendar and Reviewed actions on Android.
+
+**Acceptance criteria:**
+- [ ] Callback returns to the correct person
+- [ ] time zones display correctly
+- [ ] approval/denial/uncertainty is visible and cannot duplicate a write.
+
+**Verification:** Android live Google matrix.
+
+### Ticket 63: Accept Android Files, PDF and document workflow
+
+**Blocked by:** 23, 24, 41, 51. **Spec stories:** 23–29.
+
+**What it delivers:** Two users prove native file access, PDF viewing, workspace transfer and reviewed document reply on Android.
+
+**Acceptance criteria:**
+- [ ] PDF copy and original are readable
+- [ ] foreign file links fail
+- [ ] human wait resumes after app restart.
+
+**Verification:** Android file/document matrix.
+
+### Ticket 64: Accept Android Tasks, personal context and Activity
+
+**Blocked by:** 34, 36, 37, 38, 44, 45, 50, 51. **Spec stories:** 22, 28–40.
+
+**What it delivers:** Two users prove background Tasks, monitor, finance, personal tools, Activity and deletion on Android.
+
+**Acceptance criteria:**
+- [ ] Task state survives app closure
+- [ ] notifications and private context stay scoped
+- [ ] deletion stops access.
+
+**Verification:** Android Task/personal/Activity matrix.
+
+### Ticket 65: Sign off the single-backend cutover evidence
+
+**Blocked by:** 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64. **Spec stories:** 1–43.
+
+**What it delivers:** An operator has one traceable release decision from all completed acceptance records.
+
+**Acceptance criteria:**
+- [ ] Every Spec story maps to passed evidence
+- [ ] deployment process inventory shows no OpenMuse server or TaskWorker
+- [ ] deviations become explicit defect Issues and block signoff.
+
+**Verification:** Review platform matrices, runtime inventory and release manifest.
+## Coverage and publication gate
+
+Spec story coverage: 1–8 (01–06), 9–14 (03, 07–13), 15–22 (14–19, 25–28, 45), 23–27 (20–24, 39), 28–35 (29–36, 38, 40–41), 36–38 (37, 42–45), 39–43 (46–65). Tickets 52–65 are bounded acceptance and signoff slices; they do not replace implementation by earlier Tickets.
+
+Before publication, confirm granularity, direct blockers and any merge/split changes with the user. Then create one `ready-for-agent` GitHub Issue per approved Ticket under Spec #1, in topological order, and add native dependency edges where supported. Do not edit or close Spec #1. Each Issue copies its acceptance and verification text, refers to its parent, and lists direct blockers. Before implementation, write that Issue's exact file-level plan and integrate its reviewed checkpoint before starting downstream work.
diff --git a/docs/superpowers/plans/2026-10-12-openmuse-openbot-single-context-tickets.md b/docs/superpowers/plans/2026-10-12-openmuse-openbot-single-context-tickets.md
new file mode 100644
index 000000000..bdbc245f2
--- /dev/null
+++ b/docs/superpowers/plans/2026-10-12-openmuse-openbot-single-context-tickets.md
@@ -0,0 +1,752 @@
+# OpenMuse on OpenBot Implementation Plan — single-context tickets
+
+> Superseded by [revision 3](2026-10-12-openmuse-openbot-single-context-tickets-v3.md); retained for decision history.
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+>
+> **Status:** revised draft for user approval. Ticket IDs below are provisional and are not GitHub Issue numbers. No Ticket is published or implemented by this document.
+
+**Goal:** Make OpenMuse a three-platform frontend for OpenBot, preserving the existing product behavior for new multiuser data.
+
+**Architecture:** OpenBot owns all business state and execution. OpenMuse is the canonical frontend repository mounted as an OpenBot Git submodule. OpenConnector owns Google provider credentials and actions; OpenBot exposes stable user-scoped Mail and Calendar contracts. Each ticket traverses the relevant UI or Bot tool, authenticated domain interface, persistence or provider, and visible result.
+
+**Tech Stack:** Expo/React Native/Web and pnpm in OpenMuse; Bun/TypeScript, Hono, Better Auth, CopilotKit, PostgreSQL, WorkQueue and computer gateway in OpenBot; OpenConnector for Google OAuth and actions.
+
+**Spec:** [openmuse#1](https://github.com/1123786563/openmuse/issues/1); OpenMuse `CONTEXT.md` and accepted ADRs 0004–0010; the 2026-10-12 integration design in the sibling OpenBot checkout.
+
+## Global Constraints
+
+- One Code Agent owns one ticket in one fresh context. A ticket has one primary behavior and its own focused verification; if investigation shows broader work, split it before implementation.
+- Every user-facing ticket includes its narrow end-to-end path: OpenMuse screen or Bot tool → authenticated OpenBot contract → durable state or real connector → user-visible result. Existing shared React Native components serve Web/iOS/Android unless a platform-specific ticket says otherwise.
+- OpenBot is the only business backend. The old OpenMuse server and TaskWorker are never deployed for acceptance. No legacy single-owner records or tokens are migrated.
+- OpenBot derives user ownership from the session. Private Bot, computer, Google connection, Files, Tasks, Goals, Ideas and Memory cannot cross users. Personal tools are granted only to the private OpenMuse Bot.
+- OpenConnector is the only Google connector path. Gmail and Calendar external writes use exact Reviewed actions; computer Policy approvals remain separate.
+- The release targets approximately 1–20 concurrent active users. Two people with distinct real Google test accounts complete Web, iOS and Android acceptance.
+- Account deletion stops access and work immediately, allows 30-day recovery, then purges. A provider outcome marked uncertain is never retried automatically.
+- Each issue records its acceptance evidence and a reviewable checkpoint. Source layout or cross-repo changes require a committed OpenMuse revision before an OpenBot submodule pin can include them.
+
+## Review Focus
+
+- Expired native sessions and logout: no stale cached personal data or media URLs remain available; tickets 04–05 pin this.
+- Concurrent first entry and changed Bot template: exactly one private Bot is created and managed fields update without overwriting user fields; tickets 03 and 06 pin this.
+- Foreign user IDs, file IDs, connection aliases and computer stream URLs: OpenBot refuses them even if the client fabricates a request; tickets 03, 12, 14, 20–21 and 29 pin this.
+- Google account or target changes after proposal, concurrent approval, and provider timeout: stale actions refuse and uncertain outcomes do not replay; tickets 25–28 pin this.
+- Worker death during a lease, monitor observation, human wait or account deletion: durable state resumes safely and no external change is repeated; tickets 32–33, 36 and 46–48 pin this.
+
+---
+
+## Sizing and dependency rules
+
+A ticket is complete when a fresh Code Agent can implement the stated behavior, run the focused check, and hand over a reviewable diff without opening another ticket's unfinished interface. It should normally touch one primary domain module and one client surface; shared schema or API edits are included only when required for that same path. The later platform acceptance tickets verify shared behavior and create new defect tickets if they expose work larger than a local fix.
+
+`Blocked by` means a required interface or persisted state from the blocker must be integrated and reviewed. A ticket with no blocker may start immediately. IDs are topologically ordered; containment under Spec #1 is not a dependency. GitHub Issues will use native dependency links where available, with an explicit `Blocked by` list in each body as a readable fallback.
+
+Every ticket below includes a user-visible delivery, direct blockers, Spec #1 story numbers, acceptance conditions, and the smallest verification evidence expected. The exact owned files, signatures and RED/GREEN commands belong in that ticket's file-level writing plan before implementation.
+
+## Proposed tickets
+
+### Ticket 01: Build the canonical Web client from a submodule
+
+**Blocked by:** None. **Spec stories:** 41.
+
+**What it delivers:** A clean OpenBot checkout builds the OpenMuse Web client from the canonical repository.
+
+**Acceptance criteria:**
+- [ ] Recursive checkout pins a committed OpenMuse revision
+- [ ] Web install/build uses the submodule
+- [ ] no copied client is used by the Web build.
+
+**Verification:** Clean-checkout build log plus recorded submodule SHA.
+
+### Ticket 02: Build native clients and retire the copied tree
+
+**Blocked by:** 01. **Spec stories:** 41.
+
+**What it delivers:** An operator builds iOS and Android bundles from the same submodule and has one frontend source.
+
+**Acceptance criteria:**
+- [ ] Compare and carry over useful copied-client adaptations before deletion
+- [ ] native bundle commands use the submodule
+- [ ] copied subtree is removed without losing source behavior.
+
+**Verification:** iOS/Android bundle logs and reconciliation checklist.
+
+### Ticket 03: Open a private Bot from Web login
+
+**Blocked by:** 01. **Spec stories:** 1, 3, 6, 9.
+
+**What it delivers:** A Web user signs in and enters an automatically provisioned private OpenMuse Bot.
+
+**Acceptance criteria:**
+- [ ] Concurrent first entries create exactly one Bot per user
+- [ ] the two Bots have different computer profiles
+- [ ] a foreign Bot ID is refused
+- [ ] logout removes the Web session view.
+
+**Verification:** Two-user authenticated Web/API flow and provisioning concurrency check.
+
+### Ticket 04: Restore and clear an iOS session
+
+**Blocked by:** 02, 03. **Spec stories:** 2, 4, 5.
+
+**What it delivers:** An iOS user returns to their own Bot after app restart and loses private cache on logout.
+
+**Acceptance criteria:**
+- [ ] Native login returns to the same Bot
+- [ ] expired session asks for login
+- [ ] logout clears conversation cache, media access and credentials.
+
+**Verification:** iOS simulator/device restart, expiry and logout flow.
+
+### Ticket 05: Restore and clear an Android session
+
+**Blocked by:** 02, 03. **Spec stories:** 2, 4, 5.
+
+**What it delivers:** An Android user returns to their own Bot after app restart and loses private cache on logout.
+
+**Acceptance criteria:**
+- [ ] Native login returns to the same Bot
+- [ ] expired session asks for login
+- [ ] logout clears conversation cache, media access and credentials.
+
+**Verification:** Android emulator/device restart, expiry and logout flow.
+
+### Ticket 06: Roll out a private Bot template revision
+
+**Blocked by:** 03. **Spec stories:** 7–8.
+
+**What it delivers:** An administrator changes common grants while users keep their own Bot descriptions and preferences.
+
+**Acceptance criteria:**
+- [ ] Preview distinguishes managed and user fields
+- [ ] applying twice is idempotent
+- [ ] existing Bots receive new grants
+- [ ] non-admin changes are refused.
+
+**Verification:** Admin flow with two existing Bots and persisted-field comparison.
+
+### Ticket 07: Send and receive one Channel conversation
+
+**Blocked by:** 03. **Spec stories:** 10–12, 14.
+
+**What it delivers:** A person opens a Channel with their private Bot, sends a message and receives a streamed answer.
+
+**Acceptance criteria:**
+- [ ] OpenBot returns explicit Bot/Channel/Thread IDs
+- [ ] history survives reload
+- [ ] baseline Bot behavior comes from OpenBot rather than the old OpenMuse server.
+
+**Verification:** Authenticated client conversation and stored Thread check.
+
+### Ticket 08: Manage multiple Channels
+
+**Blocked by:** 07. **Spec stories:** 10–11.
+
+**What it delivers:** A person creates, switches, renames and archives Channels without mixing Threads.
+
+**Acceptance criteria:**
+- [ ] Each Channel retains its own Thread
+- [ ] archived Channel leaves active list but history remains accessible
+- [ ] foreign Channel operations refuse.
+
+**Verification:** Two-Channel UI flow and authorization checks.
+
+### Ticket 09: Stop and reconnect a streamed run
+
+**Blocked by:** 07. **Spec stories:** 12–13.
+
+**What it delivers:** A person stops a reply or reconnects after network loss and sees one coherent conversation.
+
+**Acceptance criteria:**
+- [ ] Stop reaches the active OpenBot run
+- [ ] reconnect replays existing events without duplicate messages
+- [ ] a failed run shows its status.
+
+**Verification:** Interrupted stream/reconnect behavior check.
+
+### Ticket 10: Render tool cards and run failures
+
+**Blocked by:** 09. **Spec stories:** 12, 14.
+
+**What it delivers:** A person sees OpenMuse's rich tool cards and actionable failure states during Bot work.
+
+**Acceptance criteria:**
+- [ ] Known tool events map to existing cards
+- [ ] unknown event has a safe readable fallback
+- [ ] failed tool/run is not shown as success.
+
+**Verification:** Representative tool-event fixtures and client rendering check.
+
+### Ticket 11: Use shared chat behavior on native clients
+
+**Blocked by:** 04, 05, 09, 10. **Spec stories:** 1–2, 10–14.
+
+**What it delivers:** iOS and Android users can use the same Channel and Thread behavior as Web.
+
+**Acceptance criteria:**
+- [ ] Shared client state preserves Channel/Thread identity
+- [ ] native stop/reconnect does not duplicate
+- [ ] tool cards and errors remain readable on both platforms.
+
+**Verification:** One native conversation/reconnect flow per platform.
+
+### Ticket 12: View the private Bot computer
+
+**Blocked by:** 03. **Spec stories:** 9, 38.
+
+**What it delivers:** A person watches their own Bot computer from OpenMuse.
+
+**Acceptance criteria:**
+- [ ] Snapshot and live stream use OpenBot session authorization
+- [ ] foreign Bot stream URLs refuse
+- [ ] lost session closes the stream.
+
+**Verification:** Two-user preview/stream isolation flow.
+
+### Ticket 13: Take human control under computer policy
+
+**Blocked by:** 12. **Spec stories:** 38.
+
+**What it delivers:** A person takes and releases control of their Bot computer with visible policy decisions.
+
+**Acceptance criteria:**
+- [ ] Input is accepted only during authorized control
+- [ ] policy refusal is shown
+- [ ] control ends on logout or disconnect
+- [ ] audit records the actor.
+
+**Verification:** Control/refusal/reconnect flow and audit check.
+
+### Ticket 14: Authorize Gmail through OpenConnector
+
+**Blocked by:** 03. **Spec stories:** 15.
+
+**What it delivers:** A person completes Gmail OAuth consent after OpenBot login and sees the connected account.
+
+**Acceptance criteria:**
+- [ ] OpenBot derives a user-specific connection alias
+- [ ] callback binds to the initiating session
+- [ ] tokens never reach the client
+- [ ] a second user cannot select the alias.
+
+**Verification:** Two real Google accounts and callback/foreign-alias checks.
+
+### Ticket 15: Authorize Calendar and manage Google connection state
+
+**Blocked by:** 14. **Spec stories:** 15–16.
+
+**What it delivers:** A person grants Calendar access, sees connection status, refreshes an expired grant and disconnects.
+
+**Acceptance criteria:**
+- [ ] Gmail and Calendar grant status is explicit
+- [ ] revoked/expired grants are visible
+- [ ] disconnect prevents subsequent provider calls
+- [ ] account identity stays user-scoped.
+
+**Verification:** Real Calendar consent, refresh, revoke and reconnect flow.
+
+### Ticket 16: Search and list Gmail messages
+
+**Blocked by:** 15. **Spec stories:** 17.
+
+**What it delivers:** A person searches their own Gmail and sees a paged or explicitly truncated result list.
+
+**Acceptance criteria:**
+- [ ] Query and pagination map to stable OpenBot Mail data
+- [ ] disconnected accounts fail visibly
+- [ ] another user cannot read the result.
+
+**Verification:** Two-account search/list flow and contract check.
+
+### Ticket 17: Read Gmail threads and attachments
+
+**Blocked by:** 16. **Spec stories:** 17.
+
+**What it delivers:** A person opens a mail thread and can inspect its attachment metadata.
+
+**Acceptance criteria:**
+- [ ] Thread order and message identity are preserved
+- [ ] attachment access uses the current owner/connection
+- [ ] provider errors do not expose another user's content.
+
+**Verification:** Real thread with attachment and foreign-ID check.
+
+### Ticket 18: Browse Calendar events
+
+**Blocked by:** 15. **Spec stories:** 18.
+
+**What it delivers:** A person views their own calendar and opens an event.
+
+**Acceptance criteria:**
+- [ ] Event IDs, calendar identity and paging are stable
+- [ ] empty and disconnected states are visible
+- [ ] another user cannot read an event by ID.
+
+**Verification:** Two-account list/detail flow.
+
+### Ticket 19: Show all-day and cross-time-zone events correctly
+
+**Blocked by:** 18. **Spec stories:** 18.
+
+**What it delivers:** A person sees Calendar dates and times correctly across local time zones.
+
+**Acceptance criteria:**
+- [ ] All-day events do not shift dates
+- [ ] timed events preserve source zone and display local zone
+- [ ] daylight-saving boundary is handled.
+
+**Verification:** Known all-day/cross-zone event fixtures and platform view.
+
+### Ticket 20: Upload and list personal Files
+
+**Blocked by:** 03. **Spec stories:** 23.
+
+**What it delivers:** A person uploads a file and sees it in a durable personal Files list.
+
+**Acceptance criteria:**
+- [ ] The record has owner, stable ID, MIME, size and hash
+- [ ] it remains after restart and outside the originating Channel
+- [ ] a foreign list request refuses.
+
+**Verification:** Upload/list/restart two-user flow.
+
+### Ticket 21: Open, download, rename and delete a File
+
+**Blocked by:** 20. **Spec stories:** 23.
+
+**What it delivers:** A person manages and downloads a private file from the Files page.
+
+**Acceptance criteria:**
+- [ ] Authenticated byte access enforces owner even with a copied URL
+- [ ] rename persists
+- [ ] deletion removes it from list and invalidates access
+- [ ] version identity stays stable.
+
+**Verification:** Download/rename/delete and foreign-URL check.
+
+### Ticket 22: Inspect PDF fields
+
+**Blocked by:** 21. **Spec stories:** 25.
+
+**What it delivers:** A person opens a PDF and sees supported fields and unsupported-field reasons.
+
+**Acceptance criteria:**
+- [ ] Inspection runs on OpenBot
+- [ ] malformed or encrypted PDF fails clearly
+- [ ] original bytes remain unchanged
+- [ ] field identity is stable for later fill.
+
+**Verification:** Representative supported/unsupported/malformed PDF fixtures.
+
+### Ticket 23: Fill and view a PDF copy
+
+**Blocked by:** 22. **Spec stories:** 26–27.
+
+**What it delivers:** A person submits values, receives a new PDF version and views it beside the original.
+
+**Acceptance criteria:**
+- [ ] Fill is deterministic for the same input
+- [ ] missing/invalid values are reported
+- [ ] original hash is unchanged
+- [ ] Web/native viewers load authorized derived bytes.
+
+**Verification:** Field-value fixture, hashes and three-platform viewer check.
+
+### Ticket 24: Transfer a PDF artifact to the private workspace
+
+**Blocked by:** 12, 23. **Spec stories:** 27.
+
+**What it delivers:** A person moves an authorized PDF copy into their Bot computer workspace.
+
+**Acceptance criteria:**
+- [ ] OpenBot resolves the private computer
+- [ ] only owner files transfer
+- [ ] workspace result references the correct file version
+- [ ] failures remain visible.
+
+**Verification:** Two-user workspace transfer and copied-file check.
+
+### Ticket 25: Approve and send an exact Gmail proposal
+
+**Blocked by:** 17. **Spec stories:** 19, 21.
+
+**What it delivers:** A person approves or denies an exact email/reply proposal and sees a receipt.
+
+**Acceptance criteria:**
+- [ ] Proposal binds recipients, content, account, connection generation and expiry
+- [ ] approval claims once
+- [ ] denial/expiry sends nothing
+- [ ] receipt links the actual provider result.
+
+**Verification:** Real test-account send and concurrent approval check.
+
+### Ticket 26: Reconcile changed or uncertain Gmail sends
+
+**Blocked by:** 25. **Spec stories:** 21.
+
+**What it delivers:** A person sees stale or uncertain send outcomes without silent replay.
+
+**Acceptance criteria:**
+- [ ] Changed account/recipient/target invalidates proposal
+- [ ] provider timeout after submission becomes outcome_unknown
+- [ ] retry requires reconciliation rather than automatic resend.
+
+**Verification:** Fault-injected timeout and changed-account checks.
+
+### Ticket 27: Create a reviewed Calendar event
+
+**Blocked by:** 19, 25. **Spec stories:** 20–21.
+
+**What it delivers:** A person reviews and approves a new event before it appears in Calendar.
+
+**Acceptance criteria:**
+- [ ] Proposal binds calendar, account, time zone, attendees and details
+- [ ] denial/expiry creates nothing
+- [ ] approval creates once with receipt.
+
+**Verification:** Real Google Calendar create/deny flow and concurrent approval check.
+
+### Ticket 28: Review Calendar update and deletion
+
+**Blocked by:** 27. **Spec stories:** 20–21.
+
+**What it delivers:** A person reviews the exact change or deletion of an existing event.
+
+**Acceptance criteria:**
+- [ ] Proposal binds target event version
+- [ ] changed/deleted target refuses
+- [ ] uncertain provider response does not auto-repeat
+- [ ] receipt reflects create/update/delete outcome.
+
+**Verification:** Real update/delete and stale-target/timeout checks.
+
+### Ticket 29: Start a one-off Task with the private Bot
+
+**Blocked by:** 07, 12. **Spec stories:** 28.
+
+**What it delivers:** A person starts an agent Task, closes the app and later sees its final state.
+
+**Acceptance criteria:**
+- [ ] OpenBot stores owner, Bot, Task and run identity
+- [ ] headless runner uses the private Bot
+- [ ] task continues with client closed
+- [ ] foreign Task ID refuses.
+
+**Verification:** Offline run and two-user authorization check.
+
+### Ticket 30: Show Task steps and typed evidence
+
+**Blocked by:** 29. **Spec stories:** 28.
+
+**What it delivers:** A person opens Task detail and understands each step, event, artifact and failure.
+
+**Acceptance criteria:**
+- [ ] Step/run/evidence IDs remain stable across reload
+- [ ] evidence types render distinctly
+- [ ] a failed step has a visible cause and does not appear complete.
+
+**Verification:** Task detail flow with success and failure runs.
+
+### Ticket 31: Cancel, pause, resume and retry a Task
+
+**Blocked by:** 30. **Spec stories:** 33.
+
+**What it delivers:** A person controls an eligible Task from the UI.
+
+**Acceptance criteria:**
+- [ ] Only legal transitions appear
+- [ ] cancellation prevents new work
+- [ ] retry creates a new attempt while preserving prior evidence
+- [ ] foreign actor cannot transition Task.
+
+**Verification:** Transition matrix and client control flow.
+
+### Ticket 32: Recover a Task after worker lease loss
+
+**Blocked by:** 29. **Spec stories:** 34.
+
+**What it delivers:** A person sees a Task continue or fail safely after a worker restart.
+
+**Acceptance criteria:**
+- [ ] Expired lease is reclaimed once
+- [ ] completed step is not re-executed
+- [ ] running step resumes from a durable checkpoint or records a clear failure.
+
+**Verification:** Kill/restart worker at a controlled step and inspect durable run state.
+
+### Ticket 33: Resume a Task waiting for human input
+
+**Blocked by:** 30, 32. **Spec stories:** 34.
+
+**What it delivers:** A person supplies missing task input after closing and reopening the app.
+
+**Acceptance criteria:**
+- [ ] Waiting payload and owner survive restart
+- [ ] only the owner may answer
+- [ ] answer is consumed once
+- [ ] Task moves to the next state without duplicate execution.
+
+**Verification:** Restart at wait state, submit once, repeat-submit refusal.
+
+### Ticket 34: Run a multi-step Plan Task
+
+**Blocked by:** 30, 32. **Spec stories:** 31.
+
+**What it delivers:** A person sees a plan's ordered steps, outcomes and final result.
+
+**Acceptance criteria:**
+- [ ] Plan steps persist before execution
+- [ ] completed steps are not repeated after restart
+- [ ] failure identifies the step and retained evidence.
+
+**Verification:** Three-step plan with controlled restart and failed step.
+
+### Ticket 35: Schedule a recurring Monitor
+
+**Blocked by:** 29. **Spec stories:** 32.
+
+**What it delivers:** A person creates, views and stops a Monitor that performs periodic observations.
+
+**Acceptance criteria:**
+- [ ] Schedule, condition and owner persist
+- [ ] next due time is visible
+- [ ] stopping prevents future runs
+- [ ] only private Bot tools execute it.
+
+**Verification:** Clock-controlled due/stop flow.
+
+### Ticket 36: Deduplicate Monitor observations and back off failures
+
+**Blocked by:** 35, 32. **Spec stories:** 35.
+
+**What it delivers:** A person receives only new Monitor outcomes and sees a recoverable failure state.
+
+**Acceptance criteria:**
+- [ ] Observation cursor survives restart
+- [ ] same event is not emitted twice
+- [ ] repeated failures back off
+- [ ] recovery resumes from saved cursor.
+
+**Verification:** Repeated observation/restart/failure schedule check.
+
+### Ticket 37: Receive and mark Task notifications
+
+**Blocked by:** 30. **Spec stories:** 37.
+
+**What it delivers:** A person receives Task status notifications and marks them read.
+
+**Acceptance criteria:**
+- [ ] Each relevant Task state emits one owner-scoped notification
+- [ ] unread count survives restart
+- [ ] marking one user's item does not affect another.
+
+**Verification:** Two-user notification/read-state flow.
+
+### Ticket 38: Produce a finance Task from CSV
+
+**Blocked by:** 21, 30. **Spec stories:** 30.
+
+**What it delivers:** A person submits a spending CSV and receives a private summary artifact.
+
+**Acceptance criteria:**
+- [ ] Invalid rows report line and reason
+- [ ] valid totals match known fixtures
+- [ ] Task links the derived artifact
+- [ ] restarting does not duplicate artifact.
+
+**Verification:** Known-result CSV, malformed-row and artifact access checks.
+
+### Ticket 39: Import a Gmail PDF attachment into Files
+
+**Blocked by:** 17, 21. **Spec stories:** 24.
+
+**What it delivers:** A person selects a mail PDF attachment and finds an owned File in the Files library.
+
+**Acceptance criteria:**
+- [ ] Import reads only the connected user's attachment
+- [ ] MIME and hash are recorded
+- [ ] duplicate retry does not create unrelated copies
+- [ ] foreign attachment refuses.
+
+**Verification:** Real test-message attachment and two-user import flow.
+
+### Ticket 40: Fill a document Task after requesting missing values
+
+**Blocked by:** 23, 33, 39. **Spec stories:** 29.
+
+**What it delivers:** A person starts a document Task, supplies missing values and gets a filled PDF artifact.
+
+**Acceptance criteria:**
+- [ ] Task links original and derived versions
+- [ ] wait survives restart
+- [ ] unsupported fields are shown
+- [ ] filling does not overwrite source.
+
+**Verification:** PDF attachment task with missing-value/restart flow.
+
+### Ticket 41: Send the document Task's reviewed reply
+
+**Blocked by:** 26, 40. **Spec stories:** 29.
+
+**What it delivers:** A person reviews a prepared reply with the filled PDF and reaches a recorded Task outcome.
+
+**Acceptance criteria:**
+- [ ] Reply proposal binds exact attachment version and account
+- [ ] denial retains artifacts and sends nothing
+- [ ] uncertainty does not auto-resend
+- [ ] receipt links Task.
+
+**Verification:** Real test-account approval/denial/timeout document flow.
+
+### Ticket 42: Create Goals usable by the private Bot
+
+**Blocked by:** 03, 07. **Spec stories:** 36.
+
+**What it delivers:** A person creates and edits a Goal that their private Bot can reference.
+
+**Acceptance criteria:**
+- [ ] Goal is owner-scoped and durable
+- [ ] private Bot tool can read it
+- [ ] another user or Bot without grant cannot
+- [ ] deleted Goal stops appearing.
+
+**Verification:** Goal UI plus two-Bot conversation/permission flow.
+
+### Ticket 43: Capture Ideas usable by the private Bot
+
+**Blocked by:** 03, 07. **Spec stories:** 36.
+
+**What it delivers:** A person captures, views and updates an Idea that their private Bot can use.
+
+**Acceptance criteria:**
+- [ ] Idea remains private and durable
+- [ ] Bot can cite the correct Idea
+- [ ] another user or ungranted Bot cannot read it.
+
+**Verification:** Idea UI plus two-Bot permission flow.
+
+### Ticket 44: Keep private Bot Memory isolated
+
+**Blocked by:** 03, 07. **Spec stories:** 36.
+
+**What it delivers:** A person sees useful private memory in later conversations without sharing it to another Bot.
+
+**Acceptance criteria:**
+- [ ] Memory write/read is scoped to user and private Bot
+- [ ] revoke or delete removes access
+- [ ] another Bot cannot retrieve it even for the same user without grant.
+
+**Verification:** Two-Bot memory recall and isolation flow.
+
+### Ticket 45: Show one typed Activity feed
+
+**Blocked by:** 13, 25, 27, 37. **Spec stories:** 22, 37.
+
+**What it delivers:** A person sees Policy approvals, Reviewed actions and Task notifications together and acts through the correct decision path.
+
+**Acceptance criteria:**
+- [ ] Feed items have type/source and stable ordering
+- [ ] Policy approval cannot execute a Reviewed action
+- [ ] stale items show their real state
+- [ ] notification read state is independent.
+
+**Verification:** Mixed-item Activity UI and wrong-decision-type refusal.
+
+### Ticket 46: Stop access immediately when an account is deleted
+
+**Blocked by:** 03, 15, 21, 31, 44. **Spec stories:** 39.
+
+**What it delivers:** A deleted person immediately loses sessions, Bot, Task execution, Google access and file access.
+
+**Acceptance criteria:**
+- [ ] Deletion marker is atomic/idempotent
+- [ ] running and queued work stop
+- [ ] OAuth callback and signed file access cannot revive access
+- [ ] another user is unaffected.
+
+**Verification:** Deletion race with run, callback and download checks.
+
+### Ticket 47: Restore recoverable data within 30 days
+
+**Blocked by:** 46. **Spec stories:** 40.
+
+**What it delivers:** An administrator can restore an accidentally deleted person's permitted data during the grace period.
+
+**Acceptance criteria:**
+- [ ] Restore requires administrator authority
+- [ ] private Bot and files return with correct owner
+- [ ] cancelled external writes do not restart
+- [ ] after 30 days restore refuses.
+
+**Verification:** Clock-controlled restore at day 29 and refusal at day 31.
+
+### Ticket 48: Purge expired personal data and report retries
+
+**Blocked by:** 24, 28, 34, 36, 38, 41, 42, 43, 45, 47. **Spec stories:** 40, 43.
+
+**What it delivers:** After the 30-day grace period, an operator sees complete or retryable cleanup across personal stores.
+
+**Acceptance criteria:**
+- [ ] Task, Files, derived PDF, goals, ideas, memory, notifications and connector data purge by owner
+- [ ] partial failure is recorded and retried
+- [ ] backup retention respects the boundary.
+
+**Verification:** Clock-controlled purge with injected storage/provider failure and retry.
+
+### Ticket 49: Deploy one bounded self-hosted stack
+
+**Blocked by:** 02, 13, 15, 36. **Spec stories:** 41–43.
+
+**What it delivers:** An operator deploys OpenBot, PostgreSQL, OpenConnector and per-Bot computers without the old OpenMuse backend.
+
+**Acceptance criteria:**
+- [ ] OAuth callback is reachable and admin connector UI restricted
+- [ ] per-Bot computer/worker limits suit 1–20 active users
+- [ ] health and failure signals identify connector/queue/computer faults.
+
+**Verification:** Clean environment deployment, capacity and observability smoke.
+
+### Ticket 50: Prove the two-user Web cutover
+
+**Blocked by:** 24, 28, 34, 36, 38, 41, 44, 45, 48, 49. **Spec stories:** 1–43.
+
+**What it delivers:** Two real users finish the accepted OpenMuse flows on Web with OpenBot as the only backend.
+
+**Acceptance criteria:**
+- [ ] Both Google accounts and all five Task kinds work
+- [ ] cross-user isolation and reviewed writes pass
+- [ ] no old server/worker is running
+- [ ] deviations become defect tickets, not waivers.
+
+**Verification:** Recorded Web acceptance matrix and backend process inventory.
+
+### Ticket 51: Prove the iOS cutover
+
+**Blocked by:** 04, 11, 50. **Spec stories:** 1–43.
+
+**What it delivers:** Two real users finish the same accepted flows on iOS.
+
+**Acceptance criteria:**
+- [ ] Native auth/session, computer, file/PDF, Activity and all Task flows work
+- [ ] Google callback returns to app
+- [ ] no platform-only data leak or stuck wait remains.
+
+**Verification:** Recorded iOS device/simulator acceptance matrix.
+
+### Ticket 52: Prove the Android cutover
+
+**Blocked by:** 05, 11, 50. **Spec stories:** 1–43.
+
+**What it delivers:** Two real users finish the same accepted flows on Android.
+
+**Acceptance criteria:**
+- [ ] Native auth/session, computer, file/PDF, Activity and all Task flows work
+- [ ] Google callback returns to app
+- [ ] no platform-only data leak or stuck wait remains.
+
+**Verification:** Recorded Android device/emulator acceptance matrix.
+## Coverage and publication gate
+
+Spec story coverage: 1–8 (01–06), 9–14 (03, 07–13), 15–22 (14–19, 25–28, 45), 23–27 (20–24, 39), 28–35 (29–36, 38, 40–41), 36–38 (37, 42–45), 39–43 (46–52). Tickets 50–52 aggregate acceptance; they do not replace delivery by earlier Tickets.
+
+Before publication, confirm granularity, the direct blocker edges and any merge/split changes with the user. Then create one `ready-for-agent` GitHub Issue per approved Ticket under Spec #1, in topological order, and add native dependency edges where supported. Do not edit or close Spec #1. Each issue must copy its own acceptance and verification text, refer to the parent, and list its direct blockers. Before any implementation, write that issue's exact file-level plan and integrate its reviewed checkpoint before starting downstream work.
diff --git a/docs/superpowers/plans/2026-10-12-openmuse-openbot-ticket-catalog-v4.md b/docs/superpowers/plans/2026-10-12-openmuse-openbot-ticket-catalog-v4.md
new file mode 100644
index 000000000..c18610b9b
--- /dev/null
+++ b/docs/superpowers/plans/2026-10-12-openmuse-openbot-ticket-catalog-v4.md
@@ -0,0 +1,762 @@
+# OpenMuse on OpenBot — v4 Ticket catalog (planning, not agent-ready)
+
+> **Status:** approved and published as 92 planning Issues under [Spec #1](https://github.com/1123786563/openmuse/issues/1); see the [publication index](2026-10-12-openmuse-openbot-published-v4.md). This catalog and [contracts](2026-10-12-openmuse-openbot-contracts-v4.md) are the authoritative v4 planning pair. The 65-ticket revision 3 is superseded. **No item is ready for a Code Agent or labelled `ready-for-agent` until its own file-level writing plan identifies owned files, Consumes/Produces signatures, RED/GREEN commands and expected outputs.**
+>
+> Parent Spec: [openmuse#1](https://github.com/1123786563/openmuse/issues/1). Source decisions: OpenMuse CONTEXT.md and accepted ADRs 0004–0010.
+
+## How to read and approve
+
+Each ID is stable within this draft. `Blocked by` lists only direct code/interface prerequisites; a listed parent is not an implied dependency. An item has one primary behavior and one focused verification cycle. At most one shared contract and one screen/tool path are introduced in a Ticket. If its file-level plan needs a second independent behavior or cannot fit one fresh Agent context, split it before changing code. **B01** is a read-only source reconciliation task and **R01** is an explicit prefactoring exception; both have independently reviewable evidence. The release acceptance matrix is a separate gate, not a large Code Agent implementation Ticket.
+
+Each Ticket below inherits exact fields, values and failure states from the named section of the [v4 contracts](2026-10-12-openmuse-openbot-contracts-v4.md). Its acceptance is a concrete observable check; the later file-level plan supplies test file names and commands.
+
+Every state-owning Ticket also implements and checks its narrow lifecycle hook from contract §9. D04–D09 coordinate those hooks, so deletion and restoration do not become one enormous cross-module implementation Ticket.
+
+## Source and identity
+
+### B01 — Inventory copied-client differences
+
+**Blocked by:** None. **Produces/Consumes:** source path/hash list.
+
+**Acceptance:** Read-only reconciliation table covers every copied client path, vendored domain, Metro config, tests, assets and lockfiles; each difference has intent, owner Ticket and resolution; no unresolved row is silently discarded.
+
+**Evidence:** Reviewed diff manifest, both HEADs and content hashes.
+
+### B02 — Build canonical Web from submodule
+
+**Blocked by:** B01. **Produces/Consumes:** pinned source layout.
+
+**Acceptance:** OpenBot pins the full OpenMuse repository at apps/openmuse; a clean recursive checkout runs the exact pnpm Web export and OpenBot Bun build from contract §1; current user edits are not mistaken for pinned content.
+
+**Evidence:** Clean checkout log, SHA and Web artifact.
+
+### B03 — Build iOS and Android exports from submodule
+
+**Blocked by:** B02. **Produces/Consumes:** native build entry.
+
+**Acceptance:** Clean checkout runs the exact OpenMuse root iOS and Android export commands; the Bun workspace does not absorb the pnpm workspace; both artifacts record the same submodule SHA.
+
+**Evidence:** Two native export logs and SHA.
+
+### I01 — Sign in on Web and read an existing Bot
+
+**Blocked by:** B02. **Produces/Consumes:** session transport.
+
+**Acceptance:** Web uses Better Auth session and existing mobile workspace read; 401 shows sign-in; a foreign Bot ID returns 404; no old /api/session Bearer token is created.
+
+**Evidence:** Web session/401/foreign-ID route checks.
+
+### I02 — Provision exactly one private OpenMuse Bot
+
+**Blocked by:** I01. **Produces/Consumes:** first-entry endpoint.
+
+**Acceptance:** POST without user ID returns one Bot and computer profile per user; concurrent calls satisfy unique(owner_user_id, template_key); two users get distinct profiles; foreign actor cannot request another owner.
+
+**Evidence:** Concurrent provisioning/unique-constraint check.
+
+### I03 — Enter the provisioned Bot on Web
+
+**Blocked by:** I02. **Produces/Consumes:** first-entry UI.
+
+**Acceptance:** First Web entry calls provisioning then workspace read and opens returned private Bot; repeat entry reuses ID; no fixed default runtime identity remains.
+
+**Evidence:** Web first/repeat entry and persisted Bot ID.
+
+### I04 — Restore an iOS Better Auth session
+
+**Blocked by:** B03, I03. **Produces/Consumes:** native session.
+
+**Acceptance:** iOS returns to the same Bot after process restart; getSession 401 clears private view and asks sign-in; no old OpenMuse access key is used.
+
+**Evidence:** iOS restart/expiry flow.
+
+### I05 — Restore an Android Better Auth session
+
+**Blocked by:** B03, I03. **Produces/Consumes:** native session.
+
+**Acceptance:** Android returns to the same Bot after process restart; getSession 401 clears private view and asks sign-in; no old OpenMuse access key is used.
+
+**Evidence:** Android restart/expiry flow.
+
+### I06 — Clear Web private state on logout
+
+**Blocked by:** I03. **Produces/Consumes:** logout cache contract.
+
+**Acceptance:** Logout revokes Web cookie and clears CopilotKit, Channel/Thread, drafts, preview URLs and viewer state listed in contract §2; user B on the same browser sees none of user A's data.
+
+**Evidence:** Shared-browser A logout/B login check.
+
+### I07 — Clear iOS private state on logout
+
+**Blocked by:** I04. **Produces/Consumes:** logout cache contract.
+
+**Acceptance:** Logout revokes native session, closes streams and deletes cached PDF bytes and drafts listed in contract §2; A logout/B login on the same device cannot open A's File URL.
+
+**Evidence:** iOS shared-device cache and old-URL check.
+
+### I08 — Clear Android private state on logout
+
+**Blocked by:** I05. **Produces/Consumes:** logout cache contract.
+
+**Acceptance:** Logout revokes native session, closes streams and deletes cached PDF bytes and drafts listed in contract §2; A logout/B login on the same device cannot open A's File URL.
+
+**Evidence:** Android shared-device cache and old-URL check.
+
+### I09 — Preview and apply a Bot template revision
+
+**Blocked by:** I02. **Produces/Consumes:** template version.
+
+**Acceptance:** Managed/user field table in contract §2 drives a preview; v1 mail.read→v2 calendar.read changes grants once while title Research helper remains; concurrent apply leaves one final version.
+
+**Evidence:** Preview diff and two concurrent update check.
+## Conversation and computer
+
+### C01 — Send one Channel message
+
+**Blocked by:** I03. **Produces/Consumes:** Channel/Thread identity.
+
+**Acceptance:** Client opens one permitted Bot through existing mobile conversation seam; distinct botId/channelId/threadId are retained; one reply and persisted Thread history appear after reload.
+
+**Evidence:** Web send/reload and foreign Channel check.
+
+### C02 — Create and switch Channels
+
+**Blocked by:** C01. **Produces/Consumes:** Channel list.
+
+**Acceptance:** Two Channels have different Thread IDs; switching restores each history; OpenBot's pinned/recency/ID cursor remains stable.
+
+**Evidence:** Two-Channel Web flow.
+
+### C03 — Rename, archive and reopen a Channel
+
+**Blocked by:** C02. **Produces/Consumes:** archive access.
+
+**Acceptance:** Archived filter lists archived Channel; reopening keeps the same Thread ID and history; foreign rename/archive returns 404.
+
+**Evidence:** Archive/reopen and foreign-ID flow.
+
+### C04 — Stop a streamed Bot run
+
+**Blocked by:** C01. **Produces/Consumes:** run terminal state.
+
+**Acceptance:** Stop is idempotent; racing completion produces one stopped/completed terminal state and no permanent spinner.
+
+**Evidence:** Stop/completion race fixture.
+
+### C05 — Resume a stream without duplicate events
+
+**Blocked by:** C01. **Produces/Consumes:** event cursor.
+
+**Acceptance:** Resume after event e2 replays e2/e3 but renders e2 once; unavailable cursor reloads persisted Thread with interruption indicator.
+
+**Evidence:** e1/e2/e3 replay fixture from contract §3.
+
+### C06 — Render named tool events and failures
+
+**Blocked by:** C01. **Produces/Consumes:** tool event view.
+
+**Acceptance:** Every event class enumerated in contract §3 has an asserted card/fallback; unknown event is neutral; tool error is not shown as success. This does not depend on stream resume.
+
+**Evidence:** One fixture per event class and UI snapshot.
+
+### C07 — Port observable assistant delegation behavior
+
+**Blocked by:** C01, T02. **Produces/Consumes:** Bot prompt/tool intent.
+
+**Acceptance:** Given the fixed prompt 'summarize this task and delegate it', private Bot invokes a durable Task tool after that tool exists; until then this Ticket remains blocked by T02; no response claims completion before Task status/receipt.
+
+**Evidence:** Recorded tool call and final reply against task status.
+
+### C08 — Use Channels on iOS
+
+**Blocked by:** I04, C02, C03, C04, C05, C06. **Produces/Consumes:** native chat.
+
+**Acceptance:** iOS creates/switches/archives Channels, stops and resumes one run and renders named events using shared client state; a platform-specific defect stays in this Ticket.
+
+**Evidence:** iOS device flow with two Threads.
+
+### C09 — Use Channels on Android
+
+**Blocked by:** I05, C02, C03, C04, C05, C06. **Produces/Consumes:** native chat.
+
+**Acceptance:** Android creates/switches/archives Channels, stops and resumes one run and renders named events using shared client state; a platform-specific defect stays in this Ticket.
+
+**Evidence:** Android device flow with two Threads.
+
+### K01 — Authorize a private computer stream
+
+**Blocked by:** I02. **Produces/Consumes:** stream auth.
+
+**Acceptance:** OpenBot stream authorization binds session and private botId; foreign stream URL and expired session refuse; disconnect closes the stream.
+
+**Evidence:** Two-user stream URL and 401/404 checks.
+
+### K02 — Show computer preview
+
+**Blocked by:** K01. **Produces/Consumes:** preview UI.
+
+**Acceptance:** OpenMuse shows own Bot snapshot and live state; stream closure changes UI to disconnected without retaining an accessible preview URL.
+
+**Evidence:** Web preview/disconnect flow.
+
+### K03 — Claim and revoke a human-control lease
+
+**Blocked by:** K01. **Produces/Consumes:** control state machine.
+
+**Acceptance:** Contract §3 viewing/requesting/controlling/released/refused/expired transitions hold; competing claim has one winner; stale sequence or revoked lease delivers zero input; Policy audit names actor/lease.
+
+**Evidence:** Concurrent claims, late input and Policy refusal check.
+
+### K04 — Control the computer from OpenMuse
+
+**Blocked by:** K02, K03. **Produces/Consumes:** human-control UI.
+
+**Acceptance:** Request, refusal, active control and release are visible; logout or disconnect ends control; late keyboard/mouse UI input is refused.
+
+**Evidence:** Take-control/release/race UI flow.
+## Google, Mail and Calendar
+
+### G01 — Connect Gmail with an OAuth callback
+
+**Blocked by:** I03. **Produces/Consumes:** Gmail connection.
+
+**Acceptance:** State is one-use, session-bound and 10-minute TTL as contract §4; successful consent shows accountEmail/generation; foreign alias and wrong state create no connection.
+
+**Evidence:** Real Gmail account plus wrong-state callback.
+
+### G02 — Handle expired, repeated and abandoned Gmail callbacks
+
+**Blocked by:** G01. **Produces/Consumes:** callback result.
+
+**Acceptance:** Expired state and signed-out callback fail; completed callback replay returns stored result without duplicate alias; nonce/return URI mismatch refuses.
+
+**Evidence:** OAuth fault matrix with fake callback clock.
+
+### G03 — Grant Calendar access separately
+
+**Blocked by:** G01. **Produces/Consumes:** Calendar scope.
+
+**Acceptance:** Same user can grant Calendar after Gmail; Calendar scope and account identity are explicit; Gmail-only grant does not authorize Calendar calls.
+
+**Evidence:** Real Calendar consent and Gmail-only refusal.
+
+### G04 — Refresh an expired Google grant
+
+**Blocked by:** G01, G03. **Produces/Consumes:** refresh status.
+
+**Acceptance:** refresh_required is visible; one successful refresh restores provider calls and increments generation when credential identity changes; failed refresh never calls Mail/Calendar.
+
+**Evidence:** Expired-grant/refresh flow.
+
+### G05 — Disconnect and reconnect Google
+
+**Blocked by:** G01, G03. **Produces/Consumes:** connection generation.
+
+**Acceptance:** Disconnect blocks provider calls before OpenConnector; reconnect creates a new generation; an action bound to an old generation remains stale.
+
+**Evidence:** Disconnect/reconnect with two generations.
+
+### G06 — Show Google account status in OpenMuse
+
+**Blocked by:** G03, G04, G05. **Produces/Consumes:** connected-account UI.
+
+**Acceptance:** UI shows accountEmail, scopes, connected/refresh_required/disconnected/revoked; each action's failure appears without exposing tokens.
+
+**Evidence:** Web connection-state fixture grid.
+
+### M01 — List and search Gmail
+
+**Blocked by:** G01. **Produces/Consumes:** Mail DTO.
+
+**Acceptance:** Contract §4 fields and newest-time/ID order are returned for the authenticated account; disconnected account refuses; other user's message ID does not resolve.
+
+**Evidence:** Two-account search/list fixture.
+
+### M02 — Page Gmail without gaps
+
+**Blocked by:** M01. **Produces/Consumes:** Mail cursor.
+
+**Acceptance:** Page size 2 over equal-timestamp three-message fixture returns each ID once; malformed/foreign cursor returns 400; truncation is visible.
+
+**Evidence:** Boundary page fixture and cursor rejection.
+
+### M03 — Read a Gmail thread
+
+**Blocked by:** M01. **Produces/Consumes:** thread DTO.
+
+**Acceptance:** Messages are oldest-time/ID order with normalized body and headers; direct foreign thread ID refuses; missing provider thread is a visible not-found state.
+
+**Evidence:** Three-message thread fixture.
+
+### M04 — Read attachment metadata and bytes
+
+**Blocked by:** M03. **Produces/Consumes:** attachment DTO.
+
+**Acceptance:** Attachment name/MIME/size are shown; authenticated owner can fetch bytes within existing Google size limit; copied foreign attachment ID refuses.
+
+**Evidence:** Real PDF attachment and foreign-ID check.
+
+### A01 — List and open Calendar events
+
+**Blocked by:** G03. **Produces/Consumes:** event DTO.
+
+**Acceptance:** Contract §4 event fields and start/ID ordering are returned for a half-open range ≤366 days; Gmail-only grant refuses; foreign event ID refuses.
+
+**Evidence:** Two-account list/detail range fixture.
+
+### A02 — Page Calendar without gaps
+
+**Blocked by:** A01. **Produces/Consumes:** event cursor.
+
+**Acceptance:** Page size 2 over equal-start three-event fixture returns every ID once; bad/foreign cursor returns 400; provider truncation is explicit.
+
+**Evidence:** Boundary page fixture.
+
+### A03 — Render Calendar time zones and all-day dates
+
+**Blocked by:** A01. **Produces/Consumes:** date presentation.
+
+**Acceptance:** Contract §4 LA DST timed fixture shows 01:30–03:30 for a one-hour event; all-day March 8 remains March 8 across device zones.
+
+**Evidence:** LA/New York/device-zone fixture outputs.
+## Files and PDF
+
+### F01 — Upload and list one personal File
+
+**Blocked by:** I03. **Produces/Consumes:** File metadata/store.
+
+**Acceptance:** Owner uploads ≤20 MiB non-PDF or ≤10 MiB PDF; list shows stable ID, size and SHA-256 after restart; same idempotency key does not duplicate.
+
+**Evidence:** Upload/list/restart and over-limit checks.
+
+### F02 — Download a private File
+
+**Blocked by:** F01. **Produces/Consumes:** content access.
+
+**Acceptance:** Authenticated current owner downloads exact hash; copied URL after logout or foreign ID fails; path input cannot select server storage location.
+
+**Evidence:** Hash/foreign/old-URL checks.
+
+### F03 — Rename and delete a File
+
+**Blocked by:** F02. **Produces/Consumes:** File mutation.
+
+**Acceptance:** Rename changes metadata only; delete tombstones and hides item immediately; old content URL fails; a new upload key creates a new version.
+
+**Evidence:** Rename/delete/reupload flow.
+
+### F04 — Use Files on iOS
+
+**Blocked by:** F02, I04. **Produces/Consumes:** iOS Files.
+
+**Acceptance:** iOS uses authenticated bytes and owner-scoped cache; list/download works; logout clears cached content and old URL access.
+
+**Evidence:** iOS cache/download flow.
+
+### F10 — Use Files on Android
+
+**Blocked by:** F02, I05. **Produces/Consumes:** Android Files.
+
+**Acceptance:** Android uses authenticated bytes and owner-scoped cache; list/download works; logout clears cached content and old URL access.
+
+**Evidence:** Android cache/download flow.
+
+### F05 — Inspect supported PDF fields
+
+**Blocked by:** F02. **Produces/Consumes:** inspection DTO.
+
+**Acceptance:** Text and checkbox appear with exact names; dropdown/radio/list report unsupported reason; encrypted/XFA/malformed and >500-page PDFs refuse with distinct error.
+
+**Evidence:** PDF fixture table in contract §5.
+
+### F06 — Generate a filled PDF copy
+
+**Blocked by:** F05. **Produces/Consumes:** immutable version.
+
+**Acceptance:** Ava/consent fixture fills text and checkbox; unsupported/unknown/wrong-type input refuses; original SHA remains unchanged; derived version records parent and values; Web viewer opens both versions.
+
+**Evidence:** Original/derived hash and field-value check.
+
+### F07 — View original and filled PDF on iOS
+
+**Blocked by:** F06, F04. **Produces/Consumes:** native viewer.
+
+**Acceptance:** iOS opens both authorized versions; expired session and deleted File fail without displaying stale cached bytes.
+
+**Evidence:** iOS original/copy/session flow.
+
+### F08 — View original and filled PDF on Android
+
+**Blocked by:** F06, F10. **Produces/Consumes:** native viewer.
+
+**Acceptance:** Android opens both authorized versions; expired session and deleted File fail without displaying stale cached bytes.
+
+**Evidence:** Android original/copy/session flow.
+
+### F09 — Transfer a PDF version to Bot workspace
+
+**Blocked by:** F06, K01. **Produces/Consumes:** workspace artifact.
+
+**Acceptance:** Server derives destination from fileId/versionId; same-name file is not overwritten; retry key returns same artifact; partial transfer is not marked complete.
+
+**Evidence:** Collision/retry/failure fixture.
+
+## Reviewed actions
+
+### R01 — Establish a Reviewed action seam with a fake executor
+
+**Blocked by:** G01. **Produces/Consumes:** proposal/claim/receipt contract.
+
+**Acceptance:** A fixture proposal is shown, denied or atomically claimed; two approvals yield one fake-executor call; status/receipt follow contract §6. This prefactor owns no Gmail/Calendar provider behavior.
+
+**Evidence:** State-table and concurrent-claim checks.
+
+### R02 — Approve and send one Gmail message
+
+**Blocked by:** R01, M03. **Produces/Consumes:** Gmail execution.
+
+**Acceptance:** Exact recipient/subject/body/account are shown; approve sends once with provider message ID; deny and 30-minute expiry send nothing.
+
+**Evidence:** Real test-account send/deny/expiry receipts.
+
+### R03 — Reject stale Gmail proposals
+
+**Blocked by:** R02, G05. **Produces/Consumes:** staleness guard.
+
+**Acceptance:** Changed payload hash, account generation or reply target returns 409 and zero provider sends; UI asks for a new proposal.
+
+**Evidence:** Changed-account/recipient/thread fixture.
+
+### R04 — Reconcile an uncertain Gmail send
+
+**Blocked by:** R02. **Produces/Consumes:** outcome_unknown.
+
+**Acceptance:** Timeout after accepted request records attemptId and outcome_unknown; no queue replay; operator records confirmed-succeeded/not-sent/unresolved with evidence.
+
+**Evidence:** Fault-injected timeout and manual reconciliation matrix.
+
+### R05 — Create a reviewed Calendar event
+
+**Blocked by:** R01, A03. **Produces/Consumes:** Calendar create execution.
+
+**Acceptance:** Exact calendar/timezone/attendees are shown; approve creates once with event ID; deny/expiry creates none.
+
+**Evidence:** Real Calendar create/deny receipts.
+
+### R06 — Update a reviewed Calendar event
+
+**Blocked by:** R05. **Produces/Consumes:** Calendar update execution.
+
+**Acceptance:** Proposal binds event ID and etag; matching version updates once; changed etag returns 409 with zero writes.
+
+**Evidence:** Real update and stale-etag fixture.
+
+### R07 — Delete a reviewed Calendar event
+
+**Blocked by:** R05. **Produces/Consumes:** Calendar delete execution.
+
+**Acceptance:** Proposal binds event ID and etag; approve deletes once; deny or missing target leaves calendar unchanged.
+
+**Evidence:** Real delete/deny/missing-target fixture.
+
+### R08 — Reconcile uncertain Calendar mutations
+
+**Blocked by:** R06, R07, R04. **Produces/Consumes:** Calendar uncertainty.
+
+**Acceptance:** Provider timeout after create/update/delete leaves outcome_unknown with attempt fingerprint; no automatic retry; reconciler records provider evidence.
+
+**Evidence:** Fault-injected Calendar timeout and reconciliation matrix.
+## Tasks, monitoring and document work
+
+### T01 — Create and list a queued Task
+
+**Blocked by:** I03. **Produces/Consumes:** Task identity/state.
+
+**Acceptance:** UI creates one owner-scoped agent Task with queued state and stable ID; repeated idempotency key returns same Task; foreign ID returns 404. No runner is introduced here.
+
+**Evidence:** Create/list/restart and two-user checks.
+
+### T02 — Execute one Task with the existing headless runner
+
+**Blocked by:** T01, C01. **Produces/Consumes:** one-step run.
+
+**Acceptance:** WorkQueue offers/claims Task once; a one-step private Bot turn reaches succeeded/failed within configured deadline; client may close; no second lease table is added.
+
+**Evidence:** Offline success/failure/timeout flow.
+
+### T03 — Show Task steps and evidence
+
+**Blocked by:** T02. **Produces/Consumes:** Task detail.
+
+**Acceptance:** Step/run/evidence kinds from contract §7 render by stable IDs; failed step has error; reload does not duplicate event.
+
+**Evidence:** mail/file/web/user and failure fixtures.
+
+### T04 — Cancel a Task
+
+**Blocked by:** T02. **Produces/Consumes:** cancel transition.
+
+**Acceptance:** queued/scheduled Task cancels immediately; running Task sets `cancellationRequested`, remains publicly `running` until it stops before the next safe step, then becomes `cancelled`; terminal status rejects cancel with 409.
+
+**Evidence:** Transition matrix and running-step interruption.
+
+### T05 — Pause and resume a Task
+
+**Blocked by:** T02. **Produces/Consumes:** pause/resume transition.
+
+**Acceptance:** queued/running/scheduled pause at safe boundary; paused→queued resumes once; terminal status or wrong owner returns 409.
+
+**Evidence:** Pause boundary/restart/resume flow.
+
+### T06 — Retry a failed Task
+
+**Blocked by:** T03. **Produces/Consumes:** new attempt.
+
+**Acceptance:** failed→queued creates a new attempt while retaining old evidence; succeeded/cancelled cannot retry; retry idempotency key creates only one attempt.
+
+**Evidence:** Failure/retry/duplicate-request check.
+
+### T07 — Recover a lost Task lease
+
+**Blocked by:** T02. **Produces/Consumes:** lease recovery.
+
+**Acceptance:** Database-clock lease loss before external effect requeues once; after unconfirmed effect does not replay and records reconciliation wait/failure; stale worker cannot finish a new owner's claim.
+
+**Evidence:** Killed-worker before/after effect fixture.
+
+### T08 — Answer a Task waiting for input
+
+**Blocked by:** T03, T07. **Produces/Consumes:** wait schema.
+
+**Acceptance:** Owner submits exact waitId and typed fields; first valid answer consumes once; duplicate answer returns stored result; invalid/foreign answer leaves wait open.
+
+**Evidence:** Restart-at-wait and duplicate-answer check.
+
+### T09 — Run a Plan Task
+
+**Blocked by:** T03, T07. **Produces/Consumes:** plan step graph.
+
+**Acceptance:** Three-step fixture runs only when dependsOn predecessors succeed; restart retains succeeded steps; failed second step leaves third pending until explicit new attempt.
+
+**Evidence:** Three-step success/failure/restart fixture.
+
+### T10 — Schedule a Monitor
+
+**Blocked by:** T02. **Produces/Consumes:** monitor schedule.
+
+**Acceptance:** Condition is change/contains/price_below with interval 1–10,080 minutes; UTC nextCheckAt controls first due run; stop prevents later offers.
+
+**Evidence:** Clock-controlled before/due/after/stop cases.
+
+### T11 — Deduplicate and back off Monitor observations
+
+**Blocked by:** T10, T07. **Produces/Consumes:** observation cursor.
+
+**Acceptance:** Same normalized observation ID emits once after restart; new match emits once; failures back off 15/30/60 minutes capped at six hours.
+
+**Evidence:** Repeated page/price fixture and fake clock.
+
+### T12 — Notify Task and Monitor owners
+
+**Blocked by:** T03, T11. **Produces/Consumes:** notification event.
+
+**Acceptance:** Only enumerated events in contract §7 create one user-scoped item; monitor.matched uses observation ID; readAt persists and other user cannot mark it.
+
+**Evidence:** State-transition/monitor match and two-user read check.
+
+### T13 — Create a finance Task artifact
+
+**Blocked by:** F02, T03. **Produces/Consumes:** finance result.
+
+**Acceptance:** Exact three-row fixture gives 4200.00 income, 91.00 spending, 4109.00 saved; row 4 amount 6.501 refuses whole CSV; output File/Artifact is owner-scoped.
+
+**Evidence:** CSV fixture, Task detail and private artifact check.
+
+### T14 — Import a Gmail PDF attachment into Files
+
+**Blocked by:** M04, F02. **Produces/Consumes:** attachment provenance.
+
+**Acceptance:** Current user's PDF attachment becomes one File with source message/thread ID and SHA-256; retry with same import key returns same version; foreign attachment refuses.
+
+**Evidence:** Real PDF mail and duplicate-import check.
+
+### T15 — Fill a document Task after an input wait
+
+**Blocked by:** T08, F06, T14. **Produces/Consumes:** document step.
+
+**Acceptance:** Task requests missing text/checkbox values with schema; owner answer fills one copy, source stays unchanged; restart preserves wait and artifact version.
+
+**Evidence:** Missing-value/restart/PDF fixture.
+
+### T16 — Send a document Task's reviewed reply
+
+**Blocked by:** T15, R04. **Produces/Consumes:** document reply.
+
+**Acceptance:** Proposal binds reply thread/message, account generation and filled attachment version; denial retains File without send; uncertainty does not resend; receipt links Task.
+
+**Evidence:** Real reply approve/deny/timeout flow.
+## Personal context, Activity and account lifecycle
+
+### P01 — Create and use a private Goal
+
+**Blocked by:** I03, C01. **Produces/Consumes:** Goal tool.
+
+**Acceptance:** Goal fields/milestones follow contract §7; private Bot retrieves exact ID/title/status; foreign user or Bot without grant gets no Goal; delete hides it.
+
+**Evidence:** Goal UI/tool/permission fixture.
+
+### P02 — Capture and use a private Idea
+
+**Blocked by:** I03, C01, T01. **Produces/Consumes:** Idea tool.
+
+**Acceptance:** Idea fields/status follow contract §7; accepted Idea points to one Task; private Bot cites exact Idea ID; foreign actor cannot retrieve.
+
+**Evidence:** Idea UI/accept/tool/permission fixture.
+
+### P03 — Write and retrieve private Memory
+
+**Blocked by:** I03, C01. **Produces/Consumes:** Memory tool.
+
+**Acceptance:** Explicit tool call writes ID/text/source and later retrieves exact record; another Bot/user cannot retrieve; delete/revoke removes future retrieval.
+
+**Evidence:** Two-Bot write/read/delete fixture.
+
+### V01 — Show Policy and Reviewed action items in Activity
+
+**Blocked by:** K03, R03, R04, R06, R08. **Produces/Consumes:** typed action feed.
+
+**Acceptance:** Feed source/type/status/order follow contract §8; stale/unknown reviewed items show actual state; Policy decision cannot claim a Reviewed action and vice versa.
+
+**Evidence:** Mixed policy/reviewed action fixture.
+
+### V02 — Show Task notifications in Activity
+
+**Blocked by:** V01, T12. **Produces/Consumes:** typed notification feed.
+
+**Acceptance:** task and monitor notifications join ordered feed with readAt; marking read never changes review/policy state; foreign user cannot read.
+
+**Evidence:** Mixed feed, read and foreign-ID check.
+
+### D01 — Fence a deleted account at authentication
+
+**Blocked by:** I02. **Produces/Consumes:** deletion marker.
+
+**Acceptance:** Atomic disabled marker makes all new authenticated requests fail immediately; repeated delete is idempotent; another user remains active.
+
+**Evidence:** Session request race and repeat delete.
+
+### D02 — Stop Task, Monitor and pending write work
+
+**Blocked by:** D01, T08, T11, R04, R08. **Produces/Consumes:** work shutdown hook.
+
+**Acceptance:** Deletion cancels queued/running/waiting Tasks, future Monitor offers and awaiting Reviewed actions; lease recovery cannot restart them; an executing external attempt remains outcome_unknown for reconciliation.
+
+**Evidence:** Delete during run/wait/monitor/review fixtures.
+
+### D03 — Revoke Google and File access at deletion
+
+**Blocked by:** D01, G05, F02. **Produces/Consumes:** external access shutdown.
+
+**Acceptance:** Provider calls and File bytes refuse immediately through fence; OpenConnector disconnect is attempted and retryable; late OAuth callback cannot restore a connection.
+
+**Evidence:** Callback/download/provider-call race.
+
+### D04 — Create a durable deletion resource manifest
+
+**Blocked by:** D02, D03, C03, K03, F09, T09, T11, T12, T13, T16, P01, P02, P03, V02. **Produces/Consumes:** cleanup enumeration.
+
+**Acceptance:** Before metadata removal, manifest records Bot/Channel/Thread/computer, Task/Monitor, reviews, personal context, File object keys and connector aliases; each resource has pending/deleted/retryable_error state.
+
+**Evidence:** Inventory comparison against two-user seeded data.
+
+### D05 — Restore the full recoverable set within 30 days
+
+**Blocked by:** D04. **Produces/Consumes:** restoration.
+
+**Acceptance:** Day 29 restores Bot, Channel/Thread, Task history, Files/versions, Goal, Idea, Memory, notification and reviewed history for correct owner; cancelled work stays stopped; day 31 returns 410.
+
+**Evidence:** Fake-clock restore matrix.
+
+### D06 — Purge external File bytes
+
+**Blocked by:** D04, D05. **Produces/Consumes:** File cleanup.
+
+**Acceptance:** Manifest object keys drive deletion of original and derived bytes before File metadata is removed; injected storage failure remains retryable; retry never touches another user's object.
+
+**Evidence:** Storage fault/retry and two-user object count.
+
+### D07 — Purge OpenConnector grants
+
+**Blocked by:** D04, D05. **Produces/Consumes:** connector cleanup.
+
+**Acceptance:** Manifest aliases drive revocation and deletion before account metadata is removed; injected connector failure remains retryable; repeated cleanup does not reconnect or affect another user.
+
+**Evidence:** Connector fault/retry and alias inventory.
+
+### D08 — Purge OpenBot relational personal data
+
+**Blocked by:** D06, D07. **Produces/Consumes:** relational cleanup.
+
+**Acceptance:** After external states are deleted, remove all manifested Bot/computer, Channel/Thread, Task/Monitor, reviewed, personal-context and notification records; partial DB failure retains manifest for retry.
+
+**Evidence:** DB fault/retry and cross-user count check.
+
+### D09 — Enforce backup retention and final cleanup visibility
+
+**Blocked by:** D08. **Produces/Consumes:** retention/ops.
+
+**Acceptance:** Backups containing deleted personal bytes expire within configured retention; unresolved manifest rows remain operator-visible; successful cleanup leaves only non-personal audit proof.
+
+**Evidence:** Backup policy inspection and expired-manifest check.
+## Deployment and source cleanup
+
+### O01 — Deploy the OpenBot API and database baseline
+
+**Blocked by:** B03. **Produces/Consumes:** reference environment.
+
+**Acceptance:** Clean stack starts OpenBot API and PostgreSQL with migrations; readiness fails if database is absent; neither old OpenMuse server nor TaskWorker starts.
+
+**Evidence:** Fresh deployment process inventory and database-off smoke.
+
+### O02 — Deploy OpenConnector and OAuth callback
+
+**Blocked by:** O01, G03. **Produces/Consumes:** connector environment.
+
+**Acceptance:** Callback reaches the configured public origin; connector runtime/admin interfaces are backend-restricted; no secret enters the mobile bundle.
+
+**Evidence:** Callback and network-boundary smoke.
+
+### O03 — Bound private computer capacity
+
+**Blocked by:** O02, K03. **Produces/Consumes:** computer capacity config.
+
+**Acceptance:** 1–20 active-user profile fixes max concurrent computers, idle timeout and per-Bot disk cap; excess demand queues/refuses visibly without cross-user effects.
+
+**Evidence:** Computer limit table and 21st-request smoke.
+
+### O04 — Bound Task worker capacity
+
+**Blocked by:** O02, T11. **Produces/Consumes:** worker capacity config.
+
+**Acceptance:** Worker concurrency and queue ceiling are explicit; excess jobs remain queued or refuse with a visible reason; another user's Task is not starved indefinitely.
+
+**Evidence:** Worker limit table and controlled overload smoke.
+
+### O05 — Expose connector, task, review and cleanup failures
+
+**Blocked by:** O03, O04, R04, R08, D09. **Produces/Consumes:** ops signals.
+
+**Acceptance:** Health/status reports connector refresh failure, queue stuck Task, outcome_unknown Reviewed action and retryable cleanup with owner-safe identifiers; no secret leaks.
+
+**Evidence:** Four injected fault signals and redacted log check.
+
+### B04 — Remove copied client after all mapped adaptations land
+
+**Blocked by:** B01, B03, I07, I08, C07, C08, C09, K04, G06, M04, A03, F04, F10, F07, F08, R08, T16, P03, V02. **Produces/Consumes:** single source.
+
+**Acceptance:** Every B01 difference row names a resolved canonical commit and check; deleting apps/openmuse-mobile leaves Web/iOS/Android builds green and no import/CI reference to the copy.
+
+**Evidence:** Resolved manifest, rg reference scan, three clean exports.
+## Publication and execution gate
+
+The following are **planning Tickets**, not dispatchable tasks. The approved breakdown is published as [Issues #2–#93](2026-10-12-openmuse-openbot-published-v4.md) with native GitHub dependencies. Spec #1 remains open; [Issue #94](https://github.com/1123786563/openmuse/issues/94) holds the separate release acceptance gate. Before a Ticket is claimed, write a file-level `writing-plans` plan with exact owned files, Consumes/Produces signatures, RED/GREEN commands and expected outputs; only then apply `ready-for-agent`.

From 491d6215fa508808289053757e5084c875b7318c Mon Sep 17 00:00:00 2001
From: wuyj <wuyj@yinhai.com>
Date: Sun, 18 Oct 2026 15:55:37 +0800
Subject: [PATCH 2/7] =?UTF-8?q?docs(agents):=20=E5=AF=B9=E9=BD=90=20OpenBo?=
 =?UTF-8?q?t=20=E9=9B=86=E6=88=90=E5=B7=A5=E4=BD=9C=E7=9A=84=20Issue=20tra?=
 =?UTF-8?q?cker=20=E4=B8=8E=E4=BA=8B=E5=AE=9E=E6=BA=90=E8=BE=B9=E7=95=8C?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 AGENTS.md | 30 ++++++++++++++++++++----------
 1 file changed, 20 insertions(+), 10 deletions(-)

diff --git a/AGENTS.md b/AGENTS.md
index 4642d4279..b2b0f8662 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -4,11 +4,11 @@
 
 ### Issue tracker
 
-Issues and specs for this repository are tracked in GitHub Issues at `1123786563/openmuse`. See `docs/agents/issue-tracker.md`.
+OpenBot integration Issues are tracked in GitHub at `1123786563/OpenBot`. Before reading, creating, or updating one, read the parent repository's `../../docs/agents/issue-tracker.md`.
 
 ### Domain docs
 
-This repository uses a single domain context at the root. See `docs/agents/domain.md`.
+For OpenBot shared terms, read `../../CONTEXT.md`; for OpenMuse-specific terms, read this submodule's `CONTEXT.md`. See `../../docs/agents/domain.md` for their boundaries.
 
 # Agent 开发工作流
 
@@ -17,10 +17,10 @@ This repository uses a single domain context at the root. See `docs/agents/domai
 
 ## 事实源
 
-- `docs/specs/`：已批准需求、行为、范围、非目标和验收标准。
-- `docs/adr/`：架构决策与约束。
-- `CONTEXT.md`：统一的领域术语和领域模型。
-- `docs/plans/`：Superpowers 实施计划。
+- `../../docs/specs/`：Spec 所在目录；逐份核对状态，只有明确批准的 Spec 才作为实施依据。
+- `../../docs/adr/`：OpenBot 架构决策与约束。
+- `../../CONTEXT.md`：OpenBot 共享术语；本目录 `CONTEXT.md`：OpenMuse 局部术语。
+- `../../docs/plans/`：OpenBot 的 Superpowers 实施计划。
 - Git + Superpowers Ledger：执行历史和已完成任务的证据。
 
 如果实施 Plan 与已批准 Spec 冲突，以 Spec 为准。
@@ -62,7 +62,16 @@ This repository uses a single domain context at the root. See `docs/agents/domai
 - `verification-before-completion`
 - `finishing-a-development-branch`
 
-开始实现前先读取 `CONTEXT.md`、已批准 Spec、相关 ADR 和当前 Ticket，然后再创建 Implementation Plan。
+开始实现 OpenBot 集成前先读取 `../../CONTEXT.md`、本目录 `CONTEXT.md`、已批准 Spec、相关 ADR 和当前 Ticket，然后再创建 Implementation Plan。
+上述 Superpowers Skill 必须在当前会话中可调用；若未暴露，记录能力缺口并报告，不能声称已执行相应 Skill 或通过其关卡。
+
+### 测试与容器
+
+验证 OpenBot 集成改动时遵守父仓库 `../../docs/agents/testing.md`。测试结束时确认本次新建的测试容器已关闭。
+
+### 分支与 Worktree
+
+创建、复用或清理 Orca 工作区及 Git 分支前，遵守父仓库 `../../docs/agents/worktrees.md`；本子模块属于独立 Git 仓库，分别核对其状态与提交。
 
 ### 冲突规则
 
@@ -82,7 +91,7 @@ Matt Ticket 应是“业务完整的纵向切片”；Superpowers Task 是 Ticke
 
 ### 子 Agent 上下文
 
-给子 Agent 提供最小必要上下文，并尽量使用这些文件指针：`CONTEXT.md`、相关 ADR、批准 Spec、当前 Ticket、Task Brief、前置任务接口。
+给子 Agent 提供最小必要上下文，并尽量使用这些文件指针：`../../CONTEXT.md`、本目录 `CONTEXT.md`、相关 ADR、批准 Spec、当前 Ticket、Task Brief、前置任务接口。
 不要把整个父会话复制给每个 Child Agent。长上下文是储备容量，不是信息倾倒场。
 
 ### TDD
@@ -99,15 +108,16 @@ Superpowers 负责实现阶段的 TDD 编排。
 ### Review
 
 每个任务和实现阶段最终 Review 由 Superpowers 负责。
-之后可选运行 Matt `code-review`，再做一轮 Standards + Spec Compliance 独立审查。
+之后可选运行  `open-code-review`，再做一轮 Standards + Spec Compliance 独立审查。
 Review Agent 默认应保持只读。
+OpenBot 集成任务还须遵守父仓库 `../../AGENTS.md` 的“Open Code Review（OCR）”两级审查关卡。
 
 ## 长上下文 / Context Management 策略
 
 本项目假设存在 1M 级原生上下文，但可持久化项目文件仍然是事实源。
 
 - 不要因为模型能记更多，就推迟记录重要决策。
-- 决策一旦稳定，应更新 `CONTEXT.md`、ADR 或 Spec。
+- 决策一旦稳定，应更新对应范围的 `CONTEXT.md`、ADR 或 Spec。
 - 工具输出保持针对性；大体积证据保存到文件，只读取相关范围。
 - 到达阶段边界时，如果前一阶段的大量聊天细节已经无用，优先使用新任务 / 新 Session / 干净子 Agent Context。
 - 自动压缩或上下文滚动后，从文件 + Git + Superpowers Ledger 重建状态，不依赖模型自己的回忆。

From 0144897f377834aaa888d7589e7dd3d8310116ee Mon Sep 17 00:00:00 2001
From: wuyj <wuyj@yinhai.com>
Date: Tue, 20 Oct 2026 18:48:34 +0800
Subject: [PATCH 3/7] docs: align OpenBot integration guidance

---
 docs/OPENBOT-INTEGRATION.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/OPENBOT-INTEGRATION.md b/docs/OPENBOT-INTEGRATION.md
index 0f4660e2b..351240aed 100644
--- a/docs/OPENBOT-INTEGRATION.md
+++ b/docs/OPENBOT-INTEGRATION.md
@@ -67,7 +67,7 @@ interface OpenBotTransport {
 
 The adapter's `runtime()` returns an Intelligence descriptor for a compatible CopilotKit client; it is not a raw SSE URL. `probe`, `createConversation`, `computerStatus`, `snapshot`, `navigate` and control methods validate responses and surface refusals. Cancellation is passed through AbortSignal; ambiguous mutations are marked as uncertain and are not retried. Workspace text-file operations and full browser interaction mapping remain extensions.
 
-Navigation, browser actions, file operations and shell commands must use the server gateway, which checks policy and records decisions before acting. Never call computer port 4100 or supervisor endpoints from mobile. Snapshot refs are opaque and require their original `snapshotId`. Human control refuses Bot actions. OpenMuse's durable approval record remains necessary for its reviewed external writes; OpenBot policy decisions do not implement that approval lifecycle. [Architecture](https://github.com/CopilotKit/OpenBot/blob/a96d88c6fb75385842529d7db7d463f4a8c4a86e/docs/architecture.md)
+Navigation, browser actions, file operations and shell commands must use the server gateway, which checks policy and records decisions before acting. Never call computer port 4100 or supervisor endpoints from mobile. Snapshot refs are opaque and require their original `snapshotId`. Human control refuses Bot actions. OpenMuse's durable approval record remains necessary for its reviewed external writes; OpenBot policy decisions do not implement that approval lifecycle. [Architecture](https://github.com/CopilotKit/OpenBot/blob/a96d88c6fb75385842529d7db7d463f4a8c4a86e/reference/architecture.md)
 
 For a later custom AG-UI agent, preserve opaque `forwardedProps.openbotRun` and distinguish `openbotDeploymentTools` from frontend tools. Server-side granted tools call `POST /api/agent-tools/call` with `{name,args,run}` and `x-openbot-agent-token`; OpenBot verifies token and signed run together. These are agent credentials, not mobile login credentials. [Callback implementation](https://github.com/CopilotKit/OpenBot/blob/a96d88c6fb75385842529d7db7d463f4a8c4a86e/server/src/app.ts#L1265)
 

From f5700b6e2288a75b11c493ab45e4dfaec5dcdc0b Mon Sep 17 00:00:00 2001
From: wuyj <wuyj@yinhai.com>
Date: Fri, 23 Oct 2026 00:02:52 +0800
Subject: [PATCH 4/7] =?UTF-8?q?test:=20=E6=B7=BB=E5=8A=A0=E7=A7=BB?=
 =?UTF-8?q?=E5=8A=A8=E7=AB=AF=E5=A4=9A=E7=A7=9F=E6=88=B7=E9=80=82=E9=85=8D?=
 =?UTF-8?q?=E5=99=A8=E7=9A=84=E6=B5=8B=E8=AF=95=E6=96=87=E4=BB=B6?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 apps/mobile/src/openbot/tenancy.test.ts   | 337 +++++++++++++++++
 apps/mobile/src/openbot/tenancy.ts        | 421 ++++++++++++++++++++++
 apps/mobile/src/openbot/transport.test.ts | 346 ++++++++++++++++++
 apps/mobile/src/openbot/transport.ts      | 402 +++++++++++++++++++++
 4 files changed, 1506 insertions(+)
 create mode 100644 apps/mobile/src/openbot/tenancy.test.ts
 create mode 100644 apps/mobile/src/openbot/tenancy.ts
 create mode 100644 apps/mobile/src/openbot/transport.test.ts
 create mode 100644 apps/mobile/src/openbot/transport.ts

diff --git a/apps/mobile/src/openbot/tenancy.test.ts b/apps/mobile/src/openbot/tenancy.test.ts
new file mode 100644
index 000000000..722a11b25
--- /dev/null
+++ b/apps/mobile/src/openbot/tenancy.test.ts
@@ -0,0 +1,337 @@
+// MT104 (Issue #147): the mobile tenancy adapter's selection and cache half, pinned against the
+// WEB side's contract. Every behavior here has its twin in the web suites
+// (app/tests/multitenancy/selection.test.tsx, cache-generation.test.tsx): the same six kinds, the
+// same refusal mapping, the same URL-authority and never-default rules, the same
+// one-generation/one-removal switch. The file imports nothing but bun:test and the adapter — no
+// React Native, no app runtime — which is AC4: the adapter layer's tests run in CI independently.
+
+import { describe, expect, test } from "bun:test";
+
+import {
+  createTenancyStore,
+  type ScopeSelection,
+  type ScopeStorage,
+  selectionFromSources,
+  selectionState,
+  selectionStorageKey,
+  readStoredSelection,
+  readWorkspaceScopeListing,
+  scopeRefusalOf,
+  storeSelection,
+  WorkspaceScopeRefusedError,
+} from "./tenancy";
+
+const USER = "user-1";
+const ACME: ScopeSelection = { tenantId: "acme", workspaceId: "acme-finance" };
+const ACME_OPS: ScopeSelection = { tenantId: "acme", workspaceId: "acme-ops" };
+const GLOBEX: ScopeSelection = {
+  tenantId: "globex",
+  workspaceId: "globex-ops",
+};
+
+const LISTING = {
+  companies: [
+    {
+      tenantId: "acme",
+      name: "Acme",
+      role: "member",
+      memberEpoch: 7,
+      teams: [
+        { workspaceId: "acme-finance", name: "Finance" },
+        { workspaceId: "acme-ops", name: "Ops" },
+      ],
+    },
+    {
+      tenantId: "globex",
+      name: "Globex",
+      role: "member",
+      memberEpoch: 2,
+      teams: [{ workspaceId: "globex-ops", name: "Ops" }],
+    },
+  ],
+};
+
+/** An in-memory storage stand-in, so the persistence rules run the adapter's real code in CI. */
+function memoryStorage(seed: Record<string, string> = {}): ScopeStorage {
+  const slots = new Map(Object.entries(seed));
+  return {
+    getItem: (key: string) => slots.get(key) ?? null,
+    setItem: (key: string, value: string) => {
+      slots.set(key, value);
+    },
+  };
+}
+
+// ---------------------------------------------------------------------------
+// The listing read: refusal semantics identical to the web's
+// ---------------------------------------------------------------------------
+
+describe("readWorkspaceScopeListing", () => {
+  test("a listing answers as itself", async () => {
+    const listing = await readWorkspaceScopeListing(async () =>
+      jsonResponse(200, LISTING),
+    );
+    expect(listing.companies).toHaveLength(2);
+  });
+
+  test("a non-ok listing refuses with the server's own code", async () => {
+    const error = await capture(async () =>
+      readWorkspaceScopeListing(() =>
+        jsonResponse(403, { error: { code: "WORKSPACE_FORBIDDEN" } }),
+      ),
+    );
+    expect(error).toBeInstanceOf(WorkspaceScopeRefusedError);
+    const refusal = scopeRefusalOf(error);
+    expect(refusal?.status).toBe(403);
+    expect(refusal?.code).toBe("WORKSPACE_FORBIDDEN");
+  });
+
+  test("a broken body is malformed, never 'no companies'", async () => {
+    for (const body of ["not json", "{}", '{"companies": "acme"}', '{"companies": [{}]}']) {
+      const error = await capture(async () =>
+        readWorkspaceScopeListing(() => textResponse(200, body)),
+      );
+      expect(scopeRefusalOf(error)?.code).toBe("WORKSPACE_SCOPE_MALFORMED");
+    }
+  });
+
+  test("anything else thrown is not a scope refusal", () => {
+    expect(scopeRefusalOf(new Error("network died"))).toBeNull();
+    expect(scopeRefusalOf(null)).toBeNull();
+  });
+});
+
+// ---------------------------------------------------------------------------
+// The state machine: the web's six kinds
+// ---------------------------------------------------------------------------
+
+describe("selectionState", () => {
+  test("pending is loading; an error stays an error — infrastructure is not an authorization fact", () => {
+    expect(selectionState({ status: "pending" }, null)).toEqual({
+      kind: "loading",
+    });
+    expect(selectionState({ status: "error" }, ACME)).toEqual({ kind: "error" });
+  });
+
+  test("no eligible companies is the empty state", () => {
+    expect(
+      selectionState({ status: "success", listing: { companies: [] } }, null),
+    ).toEqual({ kind: "empty" });
+  });
+
+  test("eligible companies and no choice is ready — nothing is picked for the person", () => {
+    expect(
+      selectionState({ status: "success", listing: LISTING }, null),
+    ).toEqual({ kind: "ready" });
+  });
+
+  test("a listed pair is selected", () => {
+    const state = selectionState(
+      { status: "success", listing: LISTING },
+      ACME,
+    );
+    expect(state.kind).toBe("selected");
+    if (state.kind === "selected") {
+      expect(state.company.tenantId).toBe("acme");
+      expect(state.team.workspaceId).toBe("acme-finance");
+    }
+  });
+
+  test("a pair the listing no longer names is revoked — shown, never silently cleared", () => {
+    expect(
+      selectionState({ status: "success", listing: LISTING }, {
+        tenantId: "gone",
+        workspaceId: "gone-team",
+      }),
+    ).toEqual({ kind: "revoked", selection: { tenantId: "gone", workspaceId: "gone-team" } });
+    // A company that still exists but hid this team is revoked too, not re-homed.
+    expect(
+      selectionState({ status: "success", listing: LISTING }, {
+        tenantId: "acme",
+        workspaceId: "acme-hid",
+      }),
+    ).toEqual({ kind: "revoked", selection: { tenantId: "acme", workspaceId: "acme-hid" } });
+  });
+});
+
+describe("selectionFromSources", () => {
+  test("a complete deep link is the authority", () => {
+    expect(
+      selectionFromSources({ company: "acme", team: "acme-ops" }, GLOBEX),
+    ).toEqual(ACME_OPS);
+  });
+
+  test("a link naming only a company is an incomplete scope, never half of the stored one", () => {
+    expect(selectionFromSources({ company: "acme" }, GLOBEX)).toBeNull();
+    expect(selectionFromSources({ team: "acme-ops" }, GLOBEX)).toBeNull();
+  });
+
+  test("a silent link falls back to the stored choice; storage never invents one", () => {
+    expect(selectionFromSources({}, GLOBEX)).toEqual(GLOBEX);
+    expect(selectionFromSources({}, null)).toBeNull();
+  });
+});
+
+// ---------------------------------------------------------------------------
+// Persistence
+// ---------------------------------------------------------------------------
+
+describe("stored selection", () => {
+  test("the slot is per-account and damaged slots read as nothing", async () => {
+    const storage = memoryStorage();
+    await storeSelection(storage, USER, ACME);
+    expect(await readStoredSelection(storage, USER)).toEqual(ACME);
+    expect(await readStoredSelection(storage, "user-2")).toBeNull();
+
+    const damaged = memoryStorage({
+      [selectionStorageKey(USER)]: "{corrupted",
+    });
+    expect(await readStoredSelection(damaged, USER)).toBeNull();
+
+    const halfShaped = memoryStorage({
+      [selectionStorageKey(USER)]: JSON.stringify({ tenantId: "acme" }),
+    });
+    expect(await readStoredSelection(halfShaped, USER)).toBeNull();
+  });
+});
+
+// ---------------------------------------------------------------------------
+// The store: one generation, one removal discipline (the MT083 rule, mobile-shaped)
+// ---------------------------------------------------------------------------
+
+describe("createTenancyStore", () => {
+  test("the scope world: pending before the user resolves, then open with the live pair", async () => {
+    const unresolved = createTenancyStore({
+      userId: undefined,
+      storage: memoryStorage(),
+    });
+    expect(unresolved.scope()).toEqual({ status: "pending" });
+
+    const storage = memoryStorage();
+    await storeSelection(storage, USER, ACME);
+    const store = createTenancyStore({
+      userId: USER,
+      storage,
+      selection: await readStoredSelection(storage, USER),
+    });
+    expect(store.scope()).toEqual({
+      status: "open",
+      userId: USER,
+      selection: ACME,
+      generation: 0,
+      key: "acme/acme-finance@0",
+    });
+  });
+
+  test("business keys name user, company and team: two scopes never read one entry (AC2)", async () => {
+    const store = createTenancyStore({
+      userId: USER,
+      storage: memoryStorage(),
+    });
+    await store.selectScope(ACME);
+    store.write("channels", ["acme-channel"]);
+    expect(store.read<string[]>("channels")).toEqual({
+      status: "present",
+      value: ["acme-channel"],
+    });
+
+    await store.selectScope(GLOBEX);
+    // The new scope's read is absent: the old scope's entry does not appear after the switch.
+    expect(store.read("channels")).toEqual({ status: "absent" });
+    store.write("channels", ["globex-channel"]);
+    expect(store.read<string[]>("channels")).toEqual({
+      status: "present",
+      value: ["globex-channel"],
+    });
+
+    // And the personal context is its own subtree, in both directions.
+    await store.selectScope(null);
+    expect(store.read("channels")).toEqual({ status: "absent" });
+    store.write("channels", ["personal-channel"]);
+    await store.selectScope(ACME);
+    expect(store.read("channels")).toEqual({ status: "absent" });
+  });
+
+  test("a team change drops only the old team's entries; a company change drops the company's", async () => {
+    const store = createTenancyStore({
+      userId: USER,
+      storage: memoryStorage(),
+    });
+    await store.selectScope(ACME);
+    store.write("draft", "finance draft");
+    await store.selectScope(ACME_OPS);
+    // Same company, other team: the finance draft is gone and does not bleed through.
+    expect(store.read("draft")).toEqual({ status: "absent" });
+    store.write("draft", "ops draft");
+    await store.selectScope(GLOBEX);
+    expect(store.read("draft")).toEqual({ status: "absent" });
+    // Back into Acme: the old team's entries were dropped with the company switch, not parked.
+    await store.selectScope(ACME);
+    expect(store.read("draft")).toEqual({ status: "absent" });
+  });
+
+  test("every switch advances the generation, and an in-flight answer is refused on arrival", async () => {
+    const storage = memoryStorage();
+    const store = createTenancyStore({ userId: USER, storage });
+    await store.selectScope(ACME);
+    const at = store.generationNow();
+
+    // An answer that lands while the scope is unchanged is accepted.
+    expect(store.stillCurrent(at)).toBe(true);
+
+    await store.selectScope(GLOBEX);
+    // The generation moved BEFORE anything else: the answer that left under Acme is refused.
+    expect(store.stillCurrent(at)).toBe(false);
+    expect(store.generationNow()).toBe(at + 1);
+
+    // The new generation's captures are current until the next switch.
+    const next = store.generationNow();
+    expect(store.stillCurrent(next)).toBe(true);
+    await store.selectScope(null);
+    expect(store.stillCurrent(next)).toBe(false);
+  });
+
+  test("a same-scope switch is a no-op: the generation does not churn", async () => {
+    const store = createTenancyStore({
+      userId: USER,
+      storage: memoryStorage(),
+    });
+    await store.selectScope(ACME);
+    const at = store.generationNow();
+    await store.selectScope(ACME);
+    expect(store.generationNow()).toBe(at);
+  });
+
+  test("the switch mirrors the choice to the per-account storage slot", async () => {
+    const storage = memoryStorage();
+    const store = createTenancyStore({ userId: USER, storage });
+    await store.selectScope(ACME);
+    expect(await readStoredSelection(storage, USER)).toEqual(ACME);
+    await store.selectScope(GLOBEX);
+    expect(await readStoredSelection(storage, USER)).toEqual(GLOBEX);
+  });
+});
+
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+
+function jsonResponse(status: number, body: unknown): Response {
+  return new Response(JSON.stringify(body), {
+    status,
+    headers: { "content-type": "application/json" },
+  });
+}
+
+function textResponse(status: number, body: string): Response {
+  return new Response(body, { status });
+}
+
+async function capture(run: () => Promise<unknown>): Promise<unknown> {
+  try {
+    await run();
+    return null;
+  } catch (error) {
+    return error;
+  }
+}
diff --git a/apps/mobile/src/openbot/tenancy.ts b/apps/mobile/src/openbot/tenancy.ts
new file mode 100644
index 000000000..03f3b0a81
--- /dev/null
+++ b/apps/mobile/src/openbot/tenancy.ts
@@ -0,0 +1,421 @@
+/*
+ * The mobile tenancy adapter's selection half, MT104 (Issue #147).
+ *
+ * THE CONTRACT IS THE WEB SIDE'S. The OpenBot web workbench shipped its selection as three seams
+ * — `lib/enterprise/tenant/selection.ts` (the choice and its state machine), `scoped-cache.ts`
+ * (where one scope's business entries live) and `stream-scope.ts` (the live selection + the
+ * generation) — and this module is that same design re-expressed for a mobile app: the same
+ * listing shape, the same six kinds, the same refusal behavior, the same storage discipline, the
+ * same one-generation rule. Where the web reads `window.localStorage` and a `QueryClient`, the
+ * mobile adapter takes injected collaborators (`ScopeStorage`, a plain store) because a React
+ * Native app owns neither — and because injected collaborators are what let this file's tests run
+ * in CI with no runtime beneath them (AC4).
+ *
+ * WHAT STAYS TRUE, BIT FOR BIT:
+ * - The listing is the server's own eligibility fact (`GET /api/enterprise/workspace-scope`, the
+ *   MT006 lister); nothing is selected unless a person picks it, and nothing is ever defaulted
+ *   (spec A6).
+ * - A non-ok listing is a typed refusal (`WorkspaceScopeRefusedError`) and a broken body is
+ *   `WORKSPACE_SCOPE_MALFORMED` — an infrastructure failure never masquerades as "no companies".
+ * - A deep link is the authority whenever it names anything; a link naming only a company is an
+ *   incomplete scope, never half of the stored one.
+ * - The switch advances ONE generation and removes the old scope's business entries; a response
+ *   that left under one selection and lands under another is refused on arrival.
+ */
+
+/** One team the actor belongs to, named by the tenant-scoped data read. */
+export type WorkspaceScopeTeam = {
+  workspaceId: string;
+  name: string;
+};
+
+/** One company the actor is an active member of, with the teams they belong to. */
+export type WorkspaceScopeCompany = {
+  tenantId: string;
+  name: string;
+  role: string;
+  memberEpoch: number;
+  teams: WorkspaceScopeTeam[];
+};
+
+/** The listing's whole answer: eligible companies, nothing pre-selected. */
+export type WorkspaceScopeListing = {
+  companies: WorkspaceScopeCompany[];
+};
+
+/** A complete selection: both halves, or no selection at all. */
+export type ScopeSelection = {
+  tenantId: string;
+  workspaceId: string;
+};
+
+/**
+ * The refusal a non-ok listing raises — the same facts the web error carries (status and the
+ * server's own code), never flattened into a sentence an empty state could mistake for its own.
+ */
+export class WorkspaceScopeRefusedError extends Error {
+  readonly status: number;
+  readonly code: string;
+
+  constructor(status: number, code: string) {
+    super(
+      `The workspace-scope listing refused the request (${status} ${code}).`,
+    );
+    this.name = "WorkspaceScopeRefusedError";
+    this.status = status;
+    this.code = code;
+  }
+}
+
+/** The typed refusal behind an error, for callers that branch on it; anything else is not one. */
+export function scopeRefusalOf(
+  error: unknown,
+): WorkspaceScopeRefusedError | null {
+  return error instanceof WorkspaceScopeRefusedError ? error : null;
+}
+
+/**
+ * Read one listing from a fetch-like answer, with the web side's exact refusal mapping: a non-ok
+ * answer refuses with the server's own error code (or `WORKSPACE_SCOPE_REFUSED`), and a 200 that
+ * is not a listing of companies with teams refuses as `WORKSPACE_SCOPE_MALFORMED` — because a
+ * broken body must never read as "you have no companies".
+ */
+export async function readWorkspaceScopeListing(
+  fetchListing: () => Promise<Response>,
+): Promise<WorkspaceScopeListing> {
+  const response = await fetchListing();
+  if (!response.ok) {
+    const body = (await response.json().catch(() => null)) as {
+      error?: unknown;
+    } | null;
+    const envelope = body?.error;
+    const code =
+      envelope !== null &&
+      typeof envelope === "object" &&
+      typeof (envelope as Record<string, unknown>).code === "string"
+        ? (envelope as { code: string }).code
+        : "WORKSPACE_SCOPE_REFUSED";
+    throw new WorkspaceScopeRefusedError(response.status, code);
+  }
+  const body = (await response.json().catch(() => null)) as unknown;
+  if (
+    body === null ||
+    typeof body !== "object" ||
+    !Array.isArray((body as Record<string, unknown>).companies)
+  ) {
+    throw new WorkspaceScopeRefusedError(
+      response.status,
+      "WORKSPACE_SCOPE_MALFORMED",
+    );
+  }
+  const companies: unknown[] = (body as { companies: unknown[] }).companies;
+  const shaped = companies.every(
+    (company) =>
+      company !== null &&
+      typeof company === "object" &&
+      typeof (company as Record<string, unknown>).tenantId === "string" &&
+      Array.isArray((company as Record<string, unknown>).teams),
+  );
+  if (!shaped) {
+    throw new WorkspaceScopeRefusedError(
+      response.status,
+      "WORKSPACE_SCOPE_MALFORMED",
+    );
+  }
+  return body as WorkspaceScopeListing;
+}
+
+// ---------------------------------------------------------------------------
+// The state machine — pure, the web's six kinds verbatim
+// ---------------------------------------------------------------------------
+
+/** The listing read a screen holds, narrowed to the facts the state machine answers on. */
+export type ListingRead =
+  | { status: "pending" }
+  | { status: "error" }
+  | { status: "success"; listing: WorkspaceScopeListing };
+
+export type SelectionState =
+  | { kind: "loading" }
+  | { kind: "error" }
+  | { kind: "empty" }
+  /** Eligible companies exist; nobody has chosen a scope. Nothing is picked for them. */
+  | { kind: "ready" }
+  | {
+      kind: "selected";
+      company: WorkspaceScopeCompany;
+      team: WorkspaceScopeTeam;
+    }
+  | {
+      kind: "revoked";
+      /** The selection that no longer matches the listing — shown, never silently cleared. */
+      selection: ScopeSelection;
+    };
+
+/**
+ * Where the chosen pair sits in the listing, or null when it does not.
+ *
+ * This IS the revocation judgment, as on the web: the server's lister is the live membership fact
+ * (a suspended company hides whole, a suspended team hides alone), so an absent pair means
+ * revoked access — and an erroring listing stays an error, because infrastructure trouble is not
+ * an authorization fact and must not dress up as one.
+ */
+export function findSelection(
+  listing: WorkspaceScopeListing,
+  selection: ScopeSelection,
+): { company: WorkspaceScopeCompany; team: WorkspaceScopeTeam } | null {
+  const company = listing.companies.find(
+    (candidate) => candidate.tenantId === selection.tenantId,
+  );
+  if (company === undefined) return null;
+  const team = company.teams.find(
+    (candidate) => candidate.workspaceId === selection.workspaceId,
+  );
+  if (team === undefined) return null;
+  return { company, team };
+}
+
+export function selectionState(
+  read: ListingRead,
+  selection: ScopeSelection | null,
+): SelectionState {
+  if (read.status === "pending") return { kind: "loading" };
+  if (read.status === "error") return { kind: "error" };
+  if (read.listing.companies.length === 0) return { kind: "empty" };
+  if (selection === null) return { kind: "ready" };
+  const found = findSelection(read.listing, selection);
+  if (found === null) return { kind: "revoked", selection };
+  return { kind: "selected", company: found.company, team: found.team };
+}
+
+/**
+ * The selection this screen holds, from the two user-explicit sources — the web rule, with the
+ * mobile deep link in the URL's seat. A deep link is the authority whenever it names anything;
+ * a link that names only a company is an incomplete scope — not half of the stored one. Storage
+ * fills only a silent link with the user's own last explicit choice; it never invents one.
+ */
+export function selectionFromSources(
+  deepLink: { company?: string; team?: string },
+  stored: ScopeSelection | null,
+): ScopeSelection | null {
+  if (deepLink.company !== undefined || deepLink.team !== undefined) {
+    if (deepLink.company !== undefined && deepLink.team !== undefined) {
+      return { tenantId: deepLink.company, workspaceId: deepLink.team };
+    }
+    return null;
+  }
+  return stored;
+}
+
+// ---------------------------------------------------------------------------
+// Persistence — the choice itself is user-explicit; storage only remembers it
+// ---------------------------------------------------------------------------
+
+/** The storage contract this module needs; AsyncStorage satisfies it, and so does a Map in CI. */
+export interface ScopeStorage {
+  getItem(key: string): string | null | Promise<string | null>;
+  setItem(key: string, value: string): void | Promise<void>;
+}
+
+/** Same prefix as the web mirror, so one account's slot means the same thing on both clients. */
+const STORAGE_PREFIX = "openbot.workspace-scope.v1:";
+
+export function selectionStorageKey(userId: string): string {
+  return `${STORAGE_PREFIX}${userId}`;
+}
+
+function scopeOf(value: unknown): ScopeSelection | null {
+  if (value === null || typeof value !== "object") return null;
+  const tenantId = (value as Record<string, unknown>).tenantId;
+  const workspaceId = (value as Record<string, unknown>).workspaceId;
+  if (
+    typeof tenantId !== "string" ||
+    tenantId === "" ||
+    typeof workspaceId !== "string" ||
+    workspaceId === ""
+  ) {
+    return null;
+  }
+  return { tenantId, workspaceId };
+}
+
+/** The user's last explicit selection, or null. A damaged slot reads as nothing. */
+export async function readStoredSelection(
+  storage: ScopeStorage,
+  userId: string,
+): Promise<ScopeSelection | null> {
+  let raw: string | null;
+  try {
+    raw = await storage.getItem(selectionStorageKey(userId));
+  } catch {
+    return null;
+  }
+  if (raw === null) return null;
+  try {
+    return scopeOf(JSON.parse(raw));
+  } catch {
+    return null;
+  }
+}
+
+/** Remember an explicit choice; storage trouble is swallowed — the caller still holds the choice. */
+export async function storeSelection(
+  storage: ScopeStorage,
+  userId: string,
+  selection: ScopeSelection,
+): Promise<void> {
+  try {
+    await storage.setItem(
+      selectionStorageKey(userId),
+      JSON.stringify(selection),
+    );
+  } catch {
+    /* best-effort mirror, exactly as on the web */
+  }
+}
+
+// ---------------------------------------------------------------------------
+// The store — one selection, one generation, one removal discipline
+// ---------------------------------------------------------------------------
+
+/**
+ * The scoped cache's answer while the scope source (the signed-in user) is unresolved — the same
+ * refusal the web streams live by: a business read is not established on a guess.
+ */
+export type TenancyScope = { status: "pending" } | {
+  status: "open";
+  userId: string;
+  selection: ScopeSelection | null;
+  generation: number;
+  /** Changes exactly when a business key must change: the pair moved, or the generation moved. */
+  key: string;
+};
+
+function sameScope(
+  left: ScopeSelection | null,
+  right: ScopeSelection | null,
+): boolean {
+  if (left === null || right === null) return left === right;
+  return (
+    left.tenantId === right.tenantId && left.workspaceId === right.workspaceId
+  );
+}
+
+/**
+ * The mobile tenancy store: the one place the live selection and its generation live. The web
+ * holds these in two cache entries a QueryClient owns; a mobile app owns no such thing, so the
+ * adapter owns them itself — a plain object, one instance per app session, created with the
+ * signed-in user and seeded from that user's storage slot.
+ */
+export function createTenancyStore(options: {
+  userId: string | undefined;
+  storage: ScopeStorage;
+  selection?: ScopeSelection | null;
+  generation?: number;
+}) {
+  const userId = options.userId;
+  let selection: ScopeSelection | null = options.selection ?? null;
+  let generation: number = options.generation ?? 0;
+  /** One cache per (company, team, generation) prefix, dropped wholesale on a switch. */
+  const scopes = new Map<string, Map<string, unknown>>();
+
+  const prefixOf = (pair: ScopeSelection | null): string => {
+    if (pair === null) return "personal";
+    return `${pair.tenantId}/${pair.workspaceId}`;
+  };
+
+  const store = {
+    /** The live scope world, in the web `StreamScope`'s shape. */
+    scope(): TenancyScope {
+      if (userId === undefined) return { status: "pending" };
+      return {
+        status: "open",
+        userId,
+        selection,
+        generation,
+        key: `${prefixOf(selection)}@${generation}`,
+      };
+    },
+
+    /**
+     * The whole switch, in the web `selectWorkspaceScope`'s order: the generation moves FIRST, so
+     * a response already in flight against the old scope is refused on arrival, and the old
+     * scope's business entries go AFTER — dropped, not invalidated, so a stale row is never
+     * visible for one render while the refetch runs. A team change inside one company drops only
+     * the old team's entries (leaving one team is not leaving the company); a company change drops
+     * the old company's whole subtree; and choosing a scope out of the personal context drops the
+     * personal context's business subtree beside it, so no stale personal entry can render beside
+     * the scope just chosen.
+     */
+    async selectScope(next: ScopeSelection | null): Promise<void> {
+      if (sameScope(selection, next)) return;
+      generation += 1;
+      const previous = selection;
+      const sameCompany =
+        previous !== null &&
+        next !== null &&
+        previous.tenantId === next.tenantId;
+      if (sameCompany) {
+        scopes.delete(prefixOf(previous));
+      } else {
+        if (previous !== null) {
+          for (const key of scopes.keys()) {
+            if (key.startsWith(`${previous.tenantId}/`)) scopes.delete(key);
+          }
+        }
+        if (previous === null && next !== null) scopes.delete("personal");
+      }
+      selection = next;
+      if (userId !== undefined && next !== null) {
+        await storeSelection(options.storage, userId, next);
+      }
+    },
+
+    // -- The scoped cache half (the web `scoped-cache.ts` rule) ------------------
+
+    /**
+     * Where one scope's business entries live: under the selection's own prefix (user, company
+     * and team all named), or — when nothing is selected — under the personal context's. A key
+     * filed here is gone the moment its scope is (AC2: the cache key names user, company and
+     * team; after a switch the old scope's data does not appear).
+     */
+    cachePrefix(): string {
+      return userId === undefined ? "unresolved" : prefixOf(selection);
+    },
+
+    read<T>(key: string): { status: "present"; value: T } | { status: "absent" } {
+      const bucket = scopes.get(prefixOf(selection));
+      if (bucket === undefined || !bucket.has(key)) return { status: "absent" };
+      return { status: "present", value: bucket.get(key) as T };
+    },
+
+    /** Write under the CURRENT scope's prefix only; a write never leaks into another scope's bucket. */
+    write(key: string, value: unknown): void {
+      const prefix = prefixOf(selection);
+      let bucket = scopes.get(prefix);
+      if (bucket === undefined) {
+        bucket = new Map();
+        scopes.set(prefix, bucket);
+      }
+      bucket.set(key, value);
+    },
+
+    /** The generation at capture time, for the in-flight refusal below. */
+    generationNow(): number {
+      return generation;
+    },
+
+    /**
+     * Whether a write that left at `at` may still land — the web `streamWriteStillCurrent` /
+     * `cacheWriteGate` rule: once any switch advanced the generation, the old scope's entries are
+     * gone, and replaying into them (or into the new scope's key) would resurrect or corrupt what
+     * the switch just cleared.
+     */
+    stillCurrent(at: number): boolean {
+      return generation === at;
+    },
+  };
+  return store;
+}
+
+export type TenancyStore = ReturnType<typeof createTenancyStore>;
diff --git a/apps/mobile/src/openbot/transport.test.ts b/apps/mobile/src/openbot/transport.test.ts
new file mode 100644
index 000000000..05eb1900e
--- /dev/null
+++ b/apps/mobile/src/openbot/transport.test.ts
@@ -0,0 +1,346 @@
+// MT105 (Issue #148): the mobile transport carries the current company/team selection on its
+// streams, uploads/downloads and media reads — and nothing else does. The attachment gates, the
+// subscription lifecycle, the generation rule and the reconnect rule are the web transport's
+// (MT082/MT083) re-expressed over the mobile tenancy store: this file pins them with the same
+// fixture discipline. It imports nothing but bun:test and the adapter — AC-adjacent: the tests
+// run in CI with no runtime beneath them.
+
+import { describe, expect, test } from "bun:test";
+
+import {
+  createTenancyStore,
+  type ScopeSelection,
+  type ScopeStorage,
+} from "./tenancy";
+import {
+  createScopeBoundStream,
+  createScopedFetch,
+  mediaCacheKey,
+  readMediaCache,
+  scopeHeaders,
+  SCOPE_HEADER_ALLOWED_PATHS,
+  TenantSelectionChangedError,
+  TENANT_HEADER,
+  withStreamScope,
+  WORKSPACE_HEADER,
+  writeMediaCache,
+} from "./transport";
+
+const ACME: ScopeSelection = { tenantId: "acme", workspaceId: "acme-finance" };
+const GLOBEX: ScopeSelection = { tenantId: "globex", workspaceId: "globex-ops" };
+
+/** An in-memory storage stand-in, so the store's persistence mirror runs its real code in CI. */
+function memoryStorage(): ScopeStorage {
+  const slots = new Map<string, string>();
+  return {
+    getItem: (key: string) => slots.get(key) ?? null,
+    setItem: (key: string, value: string) => {
+      slots.set(key, value);
+    },
+  };
+}
+
+// ---------------------------------------------------------------------------
+// AC1: the pair rides reviewed same-origin paths only
+// ---------------------------------------------------------------------------
+
+describe("scopeHeaders", () => {
+  test("a reviewed REST path carries the pair as headers", () => {
+    expect(scopeHeaders("/api/channels", ACME)).toEqual({
+      [TENANT_HEADER]: "acme",
+      [WORKSPACE_HEADER]: "acme-finance",
+    });
+    expect(scopeHeaders("/api/enterprise/workspace-scope", ACME)).toEqual({
+      [TENANT_HEADER]: "acme",
+      [WORKSPACE_HEADER]: "acme-finance",
+    });
+  });
+
+  test("an unreviewed path is left undecorated", () => {
+    expect(scopeHeaders("/api/unreviewed/thing", ACME)).toBeNull();
+    expect(scopeHeaders("/api/unreviewed", ACME)).toBeNull();
+  });
+
+  test("a non-same-origin path never receives the pair", () => {
+    expect(scopeHeaders("https://elsewhere.example/api/agents", ACME)).toBeNull();
+    expect(scopeHeaders("//api/agents", ACME)).toBeNull();
+  });
+
+  test("no selection attaches nothing — absence is carried as absence, never defaulted", () => {
+    expect(scopeHeaders("/api/agents", null)).toBeNull();
+  });
+
+  test("every inventory entry names its owner and reason — a closed, reviewable list", () => {
+    for (const entry of SCOPE_HEADER_ALLOWED_PATHS) {
+      expect(entry.id).toBeTruthy();
+      expect(entry.prefix.startsWith("/api/")).toBe(true);
+      expect(entry.reason.length).toBeGreaterThan(0);
+      expect(entry.ownerTicket).toBe("MT105");
+    }
+  });
+});
+
+describe("withStreamScope", () => {
+  test("a reviewed stream path carries the pair as query, preserving what is already there", () => {
+    expect(withStreamScope("/api/workshop/turn/1", ACME)).toBe(
+      "/api/workshop/turn/1?x-openbot-tenant=acme&x-openbot-workspace=acme-finance",
+    );
+    expect(withStreamScope("/api/craft/session/1/events?cursor=7", ACME)).toBe(
+      "/api/craft/session/1/events?cursor=7&x-openbot-tenant=acme&x-openbot-workspace=acme-finance",
+    );
+    expect(withStreamScope("/api/channels/events", ACME)).toBe(
+      "/api/channels/events?x-openbot-tenant=acme&x-openbot-workspace=acme-finance",
+    );
+  });
+
+  test("the pair is encoded — an id with a space is still one value", () => {
+    expect(
+      withStreamScope("/api/computers/1/screen", {
+        tenantId: "ac me",
+        workspaceId: "finance team",
+      }),
+    ).toBe("/api/computers/1/screen?x-openbot-tenant=ac%20me&x-openbot-workspace=finance%20team");
+  });
+
+  test("an unreviewed stream path, a foreign origin, and no selection all change nothing", () => {
+    expect(withStreamScope("/api/other/stream", ACME)).toBe("/api/other/stream");
+    expect(withStreamScope("wss://third.party/stream", ACME)).toBe(
+      "wss://third.party/stream",
+    );
+    expect(withStreamScope("//echo/stream", ACME)).toBe("//echo/stream");
+    expect(withStreamScope("/api/workshop/turn/1", null)).toBe(
+      "/api/workshop/turn/1",
+    );
+  });
+});
+
+// ---------------------------------------------------------------------------
+// AC3: an in-flight answer that outlived its selection is refused on arrival
+// ---------------------------------------------------------------------------
+
+describe("createScopedFetch", () => {
+  test("the pair rides the request, and an answer that lands in time is accepted", async () => {
+    const store = createTenancyStore({
+      userId: "user-1",
+      storage: memoryStorage(),
+    });
+    await store.selectScope(ACME);
+    const seen: Array<{ url: string; headers: Record<string, string> | undefined }> = [];
+    const scoped = createScopedFetch({
+      store,
+      fetchLike: async (url, init) => {
+        seen.push({ url, headers: init?.headers });
+        return new Response("{}", { status: 200 });
+      },
+    });
+    const response = await scoped("/api/agents");
+    expect(response.status).toBe(200);
+    expect(seen[0]?.url).toBe("/api/agents");
+    expect(seen[0]?.headers).toEqual({
+      [TENANT_HEADER]: "acme",
+      [WORKSPACE_HEADER]: "acme-finance",
+    });
+  });
+
+  test("an answer that arrives after a switch is refused, never applied", async () => {
+    const store = createTenancyStore({
+      userId: "user-1",
+      storage: memoryStorage(),
+    });
+    await store.selectScope(ACME);
+    let answer: ((response: Response) => void) | null = null;
+    const scoped = createScopedFetch({
+      store,
+      fetchLike: () =>
+        new Promise<Response>((resolve) => {
+          answer = resolve;
+        }),
+    });
+    const inFlight = scoped("/api/agents");
+    // The switch happens while the answer is in flight.
+    await store.selectScope(GLOBEX);
+    answer?.(new Response("{}", { status: 200 }));
+    const error = await capture(inFlight);
+    expect(error).toBeInstanceOf(TenantSelectionChangedError);
+  });
+
+  test("a pending scope source refuses before dialing — no read on a guess", async () => {
+    const store = createTenancyStore({
+      userId: undefined,
+      storage: memoryStorage(),
+    });
+    const scoped = createScopedFetch({
+      store,
+      fetchLike: async () => {
+        throw new Error("must not dial");
+      },
+    });
+    const error = await capture(scoped("/api/agents"));
+    expect(String(error)).toContain("scope source has not answered");
+  });
+});
+
+// ---------------------------------------------------------------------------
+// AC2: a switch tears the old subscription down and the old media cache is not served
+// ---------------------------------------------------------------------------
+
+describe("createScopeBoundStream", () => {
+  function harness() {
+    const store = createTenancyStore({
+      userId: "user-1",
+      storage: memoryStorage(),
+    });
+    const opened: string[] = [];
+    const closed: string[] = [];
+    const stream = createScopeBoundStream({
+      store,
+      open: (url) => {
+        opened.push(url);
+        return {
+          close: () => {
+            closed.push(url);
+          },
+        };
+      },
+    });
+    return { store, stream, opened, closed };
+  }
+
+  test("opens under the current pair; refuses while the scope source is pending", async () => {
+    const pending = createTenancyStore({
+      userId: undefined,
+      storage: memoryStorage(),
+    });
+    const stream = createScopeBoundStream({
+      store: pending,
+      open: () => {
+        throw new Error("must not open");
+      },
+    });
+    expect(stream.reopen("/api/workshop/turn/1")).toEqual({
+      refused: "scope-pending",
+    });
+
+    const { store, stream: live, opened } = harness();
+    await store.selectScope(ACME);
+    const opened0 = live.reopen("/api/workshop/turn/1");
+    expect(opened0).toMatchObject({ generation: expect.any(Number) });
+    expect(opened[0]).toBe(
+      "/api/workshop/turn/1?x-openbot-tenant=acme&x-openbot-workspace=acme-finance",
+    );
+  });
+
+  test("a switch cancels the old subscription and the next open carries the NEW pair (AC2/AC4)", async () => {
+    const { store, stream, opened, closed } = harness();
+    await store.selectScope(ACME);
+    stream.reopen("/api/workshop/turn/1");
+    const keyBefore = stream.openedKey();
+
+    await store.selectScope(GLOBEX);
+    // The teardown signal, as the app's effect reads it: the live connection was opened under a
+    // key the store has since left. The wrapper still names the old key — that IS the staleness.
+    const scopeNow = store.scope();
+    expect(scopeNow.status).toBe("open");
+    if (scopeNow.status === "open") {
+      expect(scopeNow.key).not.toBe(keyBefore);
+    }
+    expect(stream.openedKey()).toBe(keyBefore);
+    // Reopening under the moved scope closes the old connection and carries the NEW pair.
+    stream.reopen("/api/workshop/turn/1");
+    expect(closed).toHaveLength(1);
+    expect(opened[1]).toBe(
+      "/api/workshop/turn/1?x-openbot-tenant=globex&x-openbot-workspace=globex-ops",
+    );
+    expect(stream.openedKey()).not.toBe(keyBefore);
+  });
+
+  test("a late frame from a torn-down connection is refused by the generation rule", async () => {
+    const { store, stream } = harness();
+    await store.selectScope(ACME);
+    const { generation } = stream.reopen("/api/workshop/turn/1") as {
+      generation: number;
+    };
+    expect(stream.frameStillCurrent(generation)).toBe(true);
+    await store.selectScope(GLOBEX);
+    // The frame's connection was opened under the old generation: dropped, not applied.
+    expect(stream.frameStillCurrent(generation)).toBe(false);
+  });
+
+  test("a reconnect after a dropped line re-reads the CURRENT selection, never a default", async () => {
+    const { store, stream, opened } = harness();
+    await store.selectScope(ACME);
+    stream.reopen("/api/workshop/turn/1");
+    // The line drops; while it is down, the person switches scope.
+    await store.selectScope(GLOBEX);
+    stream.reopen("/api/workshop/turn/1");
+    expect(opened[1]).toContain("x-openbot-tenant=globex");
+    // And with no selection at all, the reconnected stream carries no pair at all — not a default.
+    await store.selectScope(null);
+    stream.reopen("/api/workshop/turn/1");
+    expect(opened[2]).toBe("/api/workshop/turn/1");
+  });
+});
+
+// ---------------------------------------------------------------------------
+// AC2, the media half: the old scope's media cache is not served after a switch
+// ---------------------------------------------------------------------------
+
+describe("scoped media cache", () => {
+  test("one URI is one entry per scope; after a switch the old scope's media is absent", async () => {
+    const store = createTenancyStore({
+      userId: "user-1",
+      storage: memoryStorage(),
+    });
+    await store.selectScope(ACME);
+    writeMediaCache(store, "/api/craft/file/1/media", { bytes: "acme-bytes" });
+    expect(readMediaCache<{ bytes: string }>(store, "/api/craft/file/1/media")).toEqual({
+      status: "present",
+      value: { bytes: "acme-bytes" },
+    });
+
+    await store.selectScope(GLOBEX);
+    // The same URI under the new scope is a miss — the old company's media does not display.
+    expect(readMediaCache(store, "/api/craft/file/1/media")).toEqual({
+      status: "absent",
+    });
+    writeMediaCache(store, "/api/craft/file/1/media", { bytes: "globex-bytes" });
+    expect(readMediaCache<{ bytes: string }>(store, "/api/craft/file/1/media")).toEqual({
+      status: "present",
+      value: { bytes: "globex-bytes" },
+    });
+
+    // The personal context is its own shelf, in both directions.
+    await store.selectScope(null);
+    expect(readMediaCache(store, "/api/craft/file/1/media")).toEqual({
+      status: "absent",
+    });
+  });
+
+  test("the media key names the scope beside the URI", async () => {
+    const store = createTenancyStore({
+      userId: "user-1",
+      storage: memoryStorage(),
+    });
+    await store.selectScope(ACME);
+    expect(mediaCacheKey(store, "/media/1")).toBe(
+      "media:acme/acme-finance:/media/1",
+    );
+    await store.selectScope(null);
+    expect(mediaCacheKey(store, "/media/1")).toBe("media:personal:/media/1");
+  });
+});
+
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+
+async function capture(
+  run: Promise<unknown> | (() => Promise<unknown>),
+): Promise<unknown> {
+  try {
+    await (typeof run === "function" ? run() : run);
+    return null;
+  } catch (error) {
+    return error;
+  }
+}
diff --git a/apps/mobile/src/openbot/transport.ts b/apps/mobile/src/openbot/transport.ts
new file mode 100644
index 000000000..369b1b780
--- /dev/null
+++ b/apps/mobile/src/openbot/transport.ts
@@ -0,0 +1,402 @@
+/*
+ * The mobile tenancy adapter's transport half, MT105 (Issue #148).
+ *
+ * THE RULES ARE THE WEB TRANSPORT'S, in both registers. The REST register is `client.ts`'s: the
+ * selection pair rides as HEADERS (`x-openbot-tenant`, `x-openbot-workspace`) on reviewed
+ * same-origin business paths only — a closed inventory, each entry owned by the ticket that
+ * reviewed it, never widened by accident. The stream register is `stream-scope.ts`'s: a streaming
+ * connection cannot carry request headers (an SSE read, a WebSocket upgrade), so on those surfaces
+ * the SAME pair rides the URL's query under the same two names, on the same kind of closed
+ * inventory — one vocabulary, so the server-side wiring (MT125) reads one set of names wherever
+ * the connection came from.
+ *
+ * THE LIFECYCLE HALF IS THE TICKET'S REAL SUBJECT, as it was MT082's: a stream that outlives its
+ * scope is a pipe pushing one company's events into a screen that has moved on, and a media cache
+ * that outlives its scope is yesterday's company file one tap away. So every business connection
+ * this module serves is bound to the tenancy store's live scope: it opens only once the scope
+ * source has resolved (never on a guess), is torn down when the scope moves, re-reads the CURRENT
+ * selection at every (re)connect — a dropped line that comes back answers under the scope that is
+ * current THEN, never a defaulted one (spec A6) — and every answer is checked against the
+ * generation it left under, so an in-flight response that lands after a switch is refused rather
+ * than applied (the same `stillCurrent` rule the web streams and caches share).
+ */
+
+import { type ScopeSelection, type TenancyStore } from "./tenancy";
+
+/** The header names, identical to the web client's — one vocabulary across clients. */
+export const TENANT_HEADER = "x-openbot-tenant";
+export const WORKSPACE_HEADER = "x-openbot-workspace";
+
+/** One reviewed REST path the selection pair may ride as headers. */
+export interface ScopeHeaderPathEntry {
+  readonly id: string;
+  readonly prefix: string;
+  readonly reason: string;
+  readonly ownerTicket: string;
+}
+
+/**
+ * The closed inventory of reviewed same-origin REST paths the mobile client may carry the
+ * selection pair on (MT105 / Issue #148).
+ *
+ * The families are the same ones the web client's inventory reviews (`client.ts`, MT081 onward):
+ * the mobile app is another client of the same deployment API, so the review that admitted a
+ * family on the web admits the mobile client onto it — and a family neither ticket reviewed stays
+ * undecorated until one does. Widening this list is a review, not an accident.
+ */
+export const SCOPE_HEADER_ALLOWED_PATHS: readonly ScopeHeaderPathEntry[] = [
+  {
+    id: "enterprise-api",
+    prefix: "/api/enterprise/",
+    reason:
+      "the enterprise API is the scope middleware's own surface: it resolves the selection pair into a trusted scope (MT005 ruling #1 — the headers only select; database membership decides)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "agents-rest",
+    prefix: "/api/agents",
+    reason:
+      "the coworker surface's reads and writes, the same family the web review admitted (MT084); the server consumes the pair when the legacy assembly reads it (MT125)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "team-bots-rest",
+    prefix: "/api/team-bots",
+    reason:
+      "the Team Bot publication surface, the same family the web review admitted (MT085)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "approvals-rest",
+    prefix: "/api/approvals",
+    reason:
+      "the approval surface, the same family the web review admitted (MT086)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "responsibilities-rest",
+    prefix: "/api/responsibilities",
+    reason:
+      "the standing-responsibility surface, the same family the web review admitted (MT086)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "computers-rest",
+    prefix: "/api/computers",
+    reason:
+      "the computer surface — the fleet, its action boundary and the live screen it streams, the same family the web review admitted (MT086)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "channels-rest",
+    prefix: "/api/channels",
+    reason:
+      "the conversation surface — roster, detail, attachments and member writes, the same family the web review admitted (MT087)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "groups-rest",
+    prefix: "/api/groups",
+    reason:
+      "the group-conversation surface, the same family the web review admitted (MT087)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "plugins-rest",
+    prefix: "/api/plugins",
+    reason:
+      "the plugin surface, the same family the web review admitted (MT088)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "memory-rest",
+    prefix: "/api/memory",
+    reason:
+      "the personal/company memory surface, the same family the web review admitted",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "routines-rest",
+    prefix: "/api/routines",
+    reason:
+      "the routine surface, the same family the web review admitted",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "craft-rest",
+    prefix: "/api/craft",
+    reason:
+      "the craft surface — sessions, files, artifacts and their downloads, the same family the web review admitted",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "workshop-rest",
+    prefix: "/api/workshop",
+    reason:
+      "the workshop surface — turns, artifacts and their uploads/downloads, the same family the web review admitted",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "marketplace-rest",
+    prefix: "/api/marketplace",
+    reason:
+      "the marketplace surface, the same family the web review admitted",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "components-rest",
+    prefix: "/api/components",
+    reason:
+      "the component surface, the same family the web review admitted",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "billing-rest",
+    prefix: "/api/billing",
+    reason:
+      "the billing surface, the same family the web review admitted (MT097)",
+    ownerTicket: "MT105",
+  },
+];
+
+/** One reviewed stream path the selection pair may ride as query parameters. */
+export interface ScopeStreamPathEntry {
+  readonly id: string;
+  readonly prefix: string;
+  readonly reason: string;
+  readonly ownerTicket: string;
+}
+
+/**
+ * The closed inventory of reviewed same-origin stream paths the mobile client may carry the
+ * selection pair on — the same five connection families the web inventory reviews (MT082),
+ * because the mobile app opens the same streams against the same deployment.
+ */
+export const SCOPE_STREAM_ALLOWED_PATHS: readonly ScopeStreamPathEntry[] = [
+  {
+    id: "workshop-turn-events",
+    prefix: "/api/workshop/",
+    reason:
+      "the workshop turn stream: an SSE read, which cannot carry request headers, so the pair rides the query on the one URL family this stream opens",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "craft-turn-events",
+    prefix: "/api/craft/",
+    reason:
+      "the craft session's turn and scheduled-run stream reads: same connection family as the workshop stream",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "channel-roster-events",
+    prefix: "/api/channels/events",
+    reason:
+      "the channel roster's event stream: an upgrade or SSE read, which cannot carry request headers, so the pair rides the query",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "computer-screen-stream",
+    prefix: "/api/computers/",
+    reason:
+      "the live computer screen stream: an upgrade request, which cannot carry request headers, so the pair rides the query",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "voice-call-establishment",
+    prefix: "/api/voice/calls",
+    reason:
+      "the POST that establishes a voice call — the stream's subscription moment; the realtime socket it returns is a third-party origin and never receives the pair",
+    ownerTicket: "MT105",
+  },
+];
+
+/** Whether a path is same-origin shaped for this client: a root-relative path, not protocol-relative. */
+function sameOriginPath(path: string): boolean {
+  return path.startsWith("/") && !path.startsWith("//");
+}
+
+/**
+ * The header half of the pair, for REST-shaped requests (fetch can carry headers).
+ *
+ * `null` (personal context: no company/team selected) attaches NOTHING — a missing selection is
+ * carried as absent, never defaulted. A path outside the inventory, or one that is not a
+ * same-origin relative path, is left undecorated: the pair must not leak onto a surface no ticket
+ * reviewed (AC1).
+ */
+export function scopeHeaders(
+  path: string,
+  selection: ScopeSelection | null,
+): Record<string, string> | null {
+  if (selection === null) return null;
+  if (!sameOriginPath(path)) return null;
+  const bare = path.split("?")[0] as string;
+  if (
+    !SCOPE_HEADER_ALLOWED_PATHS.some((entry) => bare.startsWith(entry.prefix))
+  ) {
+    return null;
+  }
+  return {
+    [TENANT_HEADER]: selection.tenantId,
+    [WORKSPACE_HEADER]: selection.workspaceId,
+  };
+}
+
+/**
+ * The query half of the pair, for stream-shaped connections (SSE reads and WebSocket upgrades
+ * cannot carry request headers).
+ *
+ * Same gates as `scopeHeaders`: same-origin relative paths on the reviewed stream inventory only,
+ * existing query parameters preserved (a stream's resume cursor rides the same URL), and a `null`
+ * selection changes nothing at all.
+ */
+export function withStreamScope(
+  path: string,
+  selection: ScopeSelection | null,
+): string {
+  if (selection === null) return path;
+  if (!sameOriginPath(path)) return path;
+  const queryAt = path.indexOf("?");
+  const bare = queryAt === -1 ? path : path.slice(0, queryAt);
+  if (
+    !SCOPE_STREAM_ALLOWED_PATHS.some((entry) => bare.startsWith(entry.prefix))
+  ) {
+    return path;
+  }
+  const pair =
+    `${TENANT_HEADER}=${encodeURIComponent(selection.tenantId)}` +
+    `&${WORKSPACE_HEADER}=${encodeURIComponent(selection.workspaceId)}`;
+  return queryAt === -1 ? `${path}?${pair}` : `${path}&${pair}`;
+}
+
+/**
+ * The typed refusal an answer earns when it outlived its scope — the mobile name for the web's
+ * `TenantSelectionChangedError`, message included: an answer that arrives after the switch is
+ * dropped, never applied to the scope that replaced the one it was asked under (AC3).
+ */
+export class TenantSelectionChangedError extends Error {
+  constructor() {
+    super("That answer outlived the tenant it was asked under.");
+    this.name = "TenantSelectionChangedError";
+  }
+}
+
+/**
+ * One scope-bound fetch: the pair rides the URL as headers (REST) or query (streams) per the two
+ * inventories, and the answer is refused on arrival if the generation moved while it was in
+ * flight.
+ *
+ * `fetchLike` is injected (the app's fetch, a test's stand-in) so the rule runs identically in CI
+ * with no runtime beneath it. A pending scope source refuses before dialing: a business read is
+ * not established on a guess.
+ */
+export function createScopedFetch(options: {
+  store: TenancyStore;
+  fetchLike: (input: string, init?: { headers?: Record<string, string> }) => Promise<Response>;
+}): (
+  path: string,
+  init?: { headers?: Record<string, string> },
+) => Promise<Response> {
+  return async (path, init) => {
+    const scope = options.store.scope();
+    if (scope.status === "pending") {
+      throw new Error("The scope source has not answered yet.");
+    }
+    const at = scope.generation;
+    const headers = scopeHeaders(path, scope.selection);
+    const streamPath = withStreamScope(path, scope.selection);
+    const response = await options.fetchLike(streamPath, {
+      ...init,
+      ...(headers === null ? {} : { headers: { ...init?.headers, ...headers } }),
+    });
+    if (!options.store.stillCurrent(at)) {
+      throw new TenantSelectionChangedError();
+    }
+    return response;
+  };
+}
+
+/**
+ * A stream subscription bound to the live scope (AC2/AC4).
+ *
+ * `open(url)` is the app's connection factory (its EventSource/WebSocket adapter); this wrapper
+ * owns WHEN it opens and when it tears down: never while the scope source is pending, always
+ * under the CURRENT selection at (re)connect — never a defaulted one — and torn down the moment
+ * the scope key moves (a pair change or a generation advance, i.e. a switch anywhere), with the
+ * old connection's late frames dropped by the generation check `frameStillCurrent`.
+ *
+ * The app drives reconnects itself (its runtime owns backoff); every reconnect calls `reopen()`,
+ * which re-reads the scope world fresh — a dropped line that comes back answers under the scope
+ * that is current THEN (AC4).
+ */
+export function createScopeBoundStream(options: {
+  store: TenancyStore;
+  open: (url: string) => { close: () => void };
+}): {
+  /** Open (or reopen) under the current scope; refuses while the scope source is pending. */
+  reopen: (path: string) => { url: string; generation: number } | { refused: "scope-pending" };
+  /** Tear the live connection down, if one is open. */
+  close: () => void;
+  /** The scope key the live connection was opened under, for change detection. */
+  openedKey: () => string | null;
+  /** Whether a frame from the live connection may still be applied (the generation rule). */
+  frameStillCurrent: (generation: number) => boolean;
+} {
+  let live: { connection: { close: () => void }; key: string; generation: number } | null = null;
+  return {
+    reopen(path) {
+      const scope = options.store.scope();
+      if (scope.status === "pending") return { refused: "scope-pending" };
+      // Reconnects answer under the CURRENT selection — never the one the dropped line had.
+      live?.connection.close();
+      const url = withStreamScope(path, scope.selection);
+      live = {
+        connection: options.open(url),
+        key: scope.key,
+        generation: scope.generation,
+      };
+      return { url, generation: scope.generation };
+    },
+    close() {
+      live?.connection.close();
+      live = null;
+    },
+    openedKey() {
+      return live?.key ?? null;
+    },
+    frameStillCurrent(generation) {
+      // A frame from a connection opened at `generation` may not decorate a screen whose scope
+      // has since moved — the belt for a frame already in flight through the teardown.
+      return live !== null && live.generation === generation && options.store.stillCurrent(generation);
+    },
+  };
+}
+
+/**
+ * The media cache key for one URI: names the user's scope beside the URI itself, so the same
+ * company file cached under two scopes is two entries, and an entry filed under one scope is
+ * simply not found after a switch (AC2: the old scope's media is no longer served).
+ *
+ * Filed through the tenancy store's own bucket (the same prefix a switch drops wholesale), so
+ * media isolation rides the SAME removal discipline as every other business entry — no second
+ * cache to keep in step.
+ */
+export function mediaCacheKey(store: TenancyStore, uri: string): string {
+  return `media:${store.cachePrefix()}:${uri}`;
+}
+
+/** Read one URI's cached media bytes through the store (absent after a switch, by the store's rule). */
+export function readMediaCache<T>(
+  store: TenancyStore,
+  uri: string,
+): { status: "present"; value: T } | { status: "absent" } {
+  return store.read<T>(mediaCacheKey(store, uri));
+}
+
+/** Cache one URI's media under the current scope only. */
+export function writeMediaCache(
+  store: TenancyStore,
+  uri: string,
+  value: unknown,
+): void {
+  store.write(mediaCacheKey(store, uri), value);
+}

From 9564cc6769e8e4ca1ce14d77e91efdd59cbbb6b4 Mon Sep 17 00:00:00 2001
From: wuyj <wuyj@yinhai.com>
Date: Fri, 23 Oct 2026 00:03:05 +0800
Subject: [PATCH 5/7] =?UTF-8?q?feat:=20=E6=96=B0=E5=A2=9E=E7=A7=BB?=
 =?UTF-8?q?=E5=8A=A8=E5=AE=A2=E6=88=B7=E7=AB=AF=E5=A4=9A=E7=A7=9F=E6=88=B7?=
 =?UTF-8?q?=E6=B5=8B=E8=AF=95=E5=A5=97=E4=BB=B6=EF=BC=88MT104/105/106/107?=
 =?UTF-8?q?=EF=BC=89?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

新增四个测试文件，覆盖移动客户端多租户的核心规则：
1. tenancy.test.ts：验证租户选择、权限拒绝、状态机及持久化逻辑
2. transport.test.ts：验证请求携带租户标识、流连接生命周期及媒体缓存隔离
3. three-client-selection.test.ts：验证三个客户端选择状态一致性
4. aggregation.test.ts：验证聚合接口按当前租户返回数据

所有测试基于Bun测试运行，复用适配器代码，确保与Web端规则一致。
---
 apps/mobile/src/openbot/aggregation.test.ts   | 330 ++++++++++++++
 apps/mobile/src/openbot/tenancy.test.ts       | 337 ++++++++++++++
 apps/mobile/src/openbot/tenancy.ts            | 421 ++++++++++++++++++
 .../openbot/three-client-selection.test.ts    | 392 ++++++++++++++++
 apps/mobile/src/openbot/transport.test.ts     | 349 +++++++++++++++
 apps/mobile/src/openbot/transport.ts          | 409 +++++++++++++++++
 6 files changed, 2238 insertions(+)
 create mode 100644 apps/mobile/src/openbot/aggregation.test.ts
 create mode 100644 apps/mobile/src/openbot/tenancy.test.ts
 create mode 100644 apps/mobile/src/openbot/tenancy.ts
 create mode 100644 apps/mobile/src/openbot/three-client-selection.test.ts
 create mode 100644 apps/mobile/src/openbot/transport.test.ts
 create mode 100644 apps/mobile/src/openbot/transport.ts

diff --git a/apps/mobile/src/openbot/aggregation.test.ts b/apps/mobile/src/openbot/aggregation.test.ts
new file mode 100644
index 000000000..0ba7fa836
--- /dev/null
+++ b/apps/mobile/src/openbot/aggregation.test.ts
@@ -0,0 +1,330 @@
+// MT107 (Issue #150): the mobile aggregation surface answers under the scope the
+// client CURRENTLY holds — every sub-query of it — and the streaming and media
+// transports keep the same discipline across three clients.
+//
+// Two halves, one per ticket AC group:
+//
+//   The AGGREGATION half is client-side here. The aggregation snapshot (MT066's
+//   readMobileAggregate: voice sessions, dictation usage, push devices — three sub-queries)
+//   is read through the scoped transport: the request carries the current selection pair as
+//   headers on the reviewed mobile-aggregation family (the inventory entry MT107's review
+//   admits in transport.ts), an EMPTY scope is carried as absent (never a defaulted pair),
+//   and each sub-collection lands only while the generation it left under still stands — a
+//   switch mid-snapshot refuses the rest and drops what landed. The SERVER half of
+//   "every sub-query returns only the current scope" is MT066's own suite
+//   (server/tests/multitenancy/voice-mobile-bff.test.ts, real PostgreSQL + restricted roles);
+//   this round's run record for it lives in the parent worktree's .archive run (see the run
+//   report), so both halves are independently re-checkable.
+//
+//   The STREAM/MEDIA half re-runs MT105's lifecycle rules AT the three clients over one
+//   identity matrix (same shape as three-client-selection.test.ts): a stream opens with the
+//   current pair in its query, its late frames die with a switch, a reconnect answers under
+//   the scope current THEN, and media never crosses a scope.
+//
+// Platform deltas are recorded, not guessed at: device and simulator runs are explicitly
+// UNVERIFIED in the parent worktree's run report (the ticket's own note); this file runs the
+// whole matrix in CI with no runtime beneath it.
+//
+// Rerun: bun test apps/openmuse/apps/mobile/src/openbot/aggregation.test.ts
+
+import { describe, expect, test } from "bun:test";
+
+import {
+  createTenancyStore,
+  type ScopeSelection,
+  type ScopeStorage,
+} from "./tenancy";
+import {
+  createScopedFetch,
+  createScopeBoundStream,
+  mediaCacheKey,
+  readMediaCache,
+  TENANT_HEADER,
+  TenantSelectionChangedError,
+  WORKSPACE_HEADER,
+  writeMediaCache,
+  withStreamScope,
+} from "./transport";
+
+const USER = "user-1";
+const ACME: ScopeSelection = { tenantId: "acme", workspaceId: "acme-finance" };
+const GLOBEX: ScopeSelection = { tenantId: "globex", workspaceId: "globex-ops" };
+
+/** The aggregation snapshot's shape, mirroring MT066's ScopedMobileAggregate sub-collections. */
+type AggregateSnapshot = {
+  voiceSessions: { sessionId: string; tenantId: string }[];
+  dictationUsage: { id: string; tenantId: string }[];
+  pushDevices: { deviceId: string; tenantId: string }[];
+};
+
+function snapshotOf(tenantId: string): AggregateSnapshot {
+  return {
+    voiceSessions: [{ sessionId: `${tenantId}-session`, tenantId }],
+    dictationUsage: [{ id: `${tenantId}-usage`, tenantId }],
+    pushDevices: [{ deviceId: `${tenantId}-device`, tenantId }],
+  };
+}
+
+const AGGREGATE_PATH = "/api/voice/mobile/aggregate";
+
+const CLIENTS = ["web-mirror", "ios", "android"] as const;
+type ClientName = (typeof CLIENTS)[number];
+
+/** One whole client: its own store, storage slot, scoped fetch and a recording transport. */
+function clientWorld(name: ClientName) {
+  const storage = memoryStorage();
+  const store = createTenancyStore({ userId: USER, storage });
+  const calls: Array<{ url: string; headers: Record<string, string> }> = [];
+  const fetch = createScopedFetch({
+    store,
+    fetchLike: async (url, init) => {
+      calls.push({ url, headers: { ...(init?.headers ?? {}) } });
+      return jsonResponse(200, snapshotOf(scopeTenantOf(url, init?.headers)));
+    },
+  });
+  return { name, storage, store, fetch, calls };
+}
+
+/** What the server would have answered: the scope the request actually arrived under. */
+function scopeTenantOf(
+  url: string,
+  headers?: Record<string, string>,
+): string {
+  return headers?.[TENANT_HEADER] ?? new URL(`https://x.test${url}`).searchParams.get(TENANT_HEADER) ?? "personal";
+}
+
+/**
+ * The aggregation read as the app consumes it: one scoped request, then the snapshot's three
+ * sub-collections landing one by one — each write gated by the generation the request left
+ * under, so a switch anywhere in the snapshot refuses everything not yet landed (and the
+ * store's own switch has already dropped whatever did land).
+ */
+async function landAggregate(
+  world: ReturnType<typeof clientWorld>,
+  betweenSubqueries?: () => Promise<void> | void,
+): Promise<{ landed: string[] }> {
+  const at = world.store.generationNow();
+  const response = await world.fetch(AGGREGATE_PATH);
+  const snapshot = (await response.json()) as AggregateSnapshot;
+  const landed: string[] = [];
+  for (const [key, rows] of [
+    ["aggregate:voice-sessions", snapshot.voiceSessions],
+    ["aggregate:dictation-usage", snapshot.dictationUsage],
+    ["aggregate:push-devices", snapshot.pushDevices],
+  ] as const) {
+    await betweenSubqueries?.();
+    if (!world.store.stillCurrent(at)) {
+      // The same refusal the scoped fetch raises for a whole answer, raised here per
+      // sub-query: a sub-collection may not land into a scope it was not asked under.
+      return Promise.reject(new TenantSelectionChangedError());
+    }
+    world.store.write(key, rows);
+    landed.push(key);
+  }
+  return { landed };
+}
+
+// ---------------------------------------------------------------------------
+// AC1: the aggregation request and every sub-query answer under the current
+//      scope — including the empty scope
+// ---------------------------------------------------------------------------
+
+describe("MT107 AC1 the aggregation surface carries the current scope", () => {
+  test("the request carries the CURRENT pair — per request, on every client", async () => {
+    for (const name of CLIENTS) {
+      const world = clientWorld(name);
+      await world.store.selectScope(ACME);
+      await landAggregate(world);
+      expect(world.calls[0]?.headers[TENANT_HEADER]).toBe("acme");
+      expect(world.calls[0]?.headers[WORKSPACE_HEADER]).toBe("acme-finance");
+      // The pair is read per request: after a switch, the next aggregation reads Globex.
+      await world.store.selectScope(GLOBEX);
+      await landAggregate(world);
+      expect(world.calls[1]?.headers[TENANT_HEADER]).toBe("globex");
+      expect(world.calls[1]?.headers[WORKSPACE_HEADER]).toBe("globex-ops");
+    }
+  });
+
+  test("a switch mid-snapshot refuses the un-landed sub-queries and drops the landed", async () => {
+    for (const name of CLIENTS) {
+      const world = clientWorld(name);
+      await world.store.selectScope(ACME);
+      let switched = false;
+      const outcome = await capture(() =>
+        landAggregate(world, async () => {
+          // The switch lands after the first sub-collection, before the second.
+          if (!switched) {
+            switched = true;
+            await world.store.selectScope(GLOBEX);
+          }
+        }),
+      );
+      expect(outcome).toBeInstanceOf(TenantSelectionChangedError);
+      // Nothing of the Acme snapshot survived: the landed sub-collection went with the
+      // switch's bucket drop, and the un-landed ones never wrote anywhere.
+      expect(world.store.read("aggregate:voice-sessions").status).toBe("absent");
+      expect(world.store.read("aggregate:dictation-usage").status).toBe("absent");
+      expect(world.store.read("aggregate:push-devices").status).toBe("absent");
+      // The Globex bucket is clean too: a late sub-query may not land into the scope that
+      // replaced the one it was asked under.
+      await world.store.selectScope(ACME);
+      expect(world.store.read("aggregate:voice-sessions").status).toBe("absent");
+    }
+  });
+
+  test("the empty scope is carried as absent — never a defaulted pair — and lands on the personal shelf", async () => {
+    for (const name of CLIENTS) {
+      const world = clientWorld(name);
+      // No selection: the request carries NO pair at all, and the answer is the personal
+      // context's own (the server keys an undecorated request to the caller's personal
+      // scope — a missing selection is carried as missing, MT104's rule, on the wire).
+      await landAggregate(world);
+      expect(TENANT_HEADER in (world.calls[0]?.headers ?? {})).toBe(false);
+      expect(WORKSPACE_HEADER in (world.calls[0]?.headers ?? {})).toBe(false);
+      expect(world.store.read("aggregate:voice-sessions").status).toBe("present");
+      // A later scoped read never sees the personal shelf's aggregate, in either direction.
+      await world.store.selectScope(ACME);
+      expect(world.store.read("aggregate:voice-sessions").status).toBe("absent");
+      await world.store.selectScope(null);
+      expect(world.store.read("aggregate:voice-sessions").status).toBe("absent");
+    }
+  });
+});
+
+// ---------------------------------------------------------------------------
+// AC2: streaming requests carry the right scope; an old connection is
+//      cancelled and its late frames refused
+// ---------------------------------------------------------------------------
+
+describe("MT107 AC2 streams carry the current scope and die with a switch", () => {
+  test("the stream URL carries the current pair; a switch cancels the line and its late frames", async () => {
+    for (const name of CLIENTS) {
+      const world = clientWorld(name);
+      const opened: Array<{ url: string; closed: () => void }> = [];
+      const stream = createScopeBoundStream({
+        store: world.store,
+        open: (url) => {
+          const connection = { closed: false, close: () => { connection.closed = true; } };
+          opened.push({ url, closed: () => connection.closed });
+          return connection;
+        },
+      });
+      await world.store.selectScope(ACME);
+      const first = stream.reopen("/api/voice/calls/live");
+      if ("refused" in first) throw new Error("expected an open, not a refusal");
+      expect(first.url).toContain(`${TENANT_HEADER}=acme`);
+      expect(first.url).toContain(`${WORKSPACE_HEADER}=acme-finance`);
+      expect(stream.openedKey()).toContain("acme/acme-finance");
+
+      // A frame from the live connection may land while the scope stands…
+      expect(stream.frameStillCurrent(first.generation)).toBe(true);
+      // …and the switch kills it: late frames are refused by the generation rule.
+      await world.store.selectScope(GLOBEX);
+      expect(stream.frameStillCurrent(first.generation)).toBe(false);
+
+      // Reconnect answers under the scope that is current THEN, and the old line is closed.
+      const second = stream.reopen("/api/voice/calls/live");
+      if ("refused" in second) throw new Error("expected an open, not a refusal");
+      expect(second.url).toContain(`${TENANT_HEADER}=globex`);
+      expect(second.url).toContain(`${WORKSPACE_HEADER}=globex-ops`);
+      const firstLineClosed = opened[0].closed();
+      expect(firstLineClosed).toBe(true);
+      expect(stream.frameStillCurrent(second.generation)).toBe(true);
+    }
+  });
+
+  test("a pending scope source refuses before dialing, on every client", () => {
+    const store = createTenancyStore({ userId: undefined, storage: memoryStorage() });
+    let dialed = 0;
+    const stream = createScopeBoundStream({
+      store,
+      open: () => {
+        dialed += 1;
+        return { close: () => {} };
+      },
+    });
+    expect(stream.reopen("/api/voice/calls/live")).toEqual({
+      refused: "scope-pending",
+    });
+    expect(dialed).toBe(0);
+  });
+
+  test("the stream scope rides the query with the resume cursor preserved", () => {
+    const url = withStreamScope("/api/voice/calls/live?cursor=42", ACME);
+    expect(url).toContain("cursor=42");
+    expect(url).toContain(`${TENANT_HEADER}=acme`);
+    expect(url).toContain(`${WORKSPACE_HEADER}=acme-finance`);
+    // An empty selection changes nothing at all.
+    expect(withStreamScope("/api/voice/calls/live?cursor=42", null)).toBe(
+      "/api/voice/calls/live?cursor=42",
+    );
+  });
+});
+
+// ---------------------------------------------------------------------------
+// AC3: media never crosses a scope, on every client
+// ---------------------------------------------------------------------------
+
+describe("MT107 AC3 media does not cross scopes", () => {
+  test("one URI is one entry per scope, and a switch makes the old entry unreachable", async () => {
+    for (const name of CLIENTS) {
+      const world = clientWorld(name);
+      const URI = "/api/craft/file/1/media";
+      await world.store.selectScope(ACME);
+      writeMediaCache(world.store, URI, { bytes: "acme-bytes" });
+      expect(readMediaCache<{ bytes: string }>(world.store, URI)).toEqual({
+        status: "present",
+        value: { bytes: "acme-bytes" },
+      });
+
+      await world.store.selectScope(GLOBEX);
+      // The Acme media is simply not found — never served beside Globex's own.
+      expect(readMediaCache(world.store, URI)).toEqual({ status: "absent" });
+      writeMediaCache(world.store, URI, { bytes: "globex-bytes" });
+      expect(readMediaCache<{ bytes: string }>(world.store, URI)).toEqual({
+        status: "present",
+        value: { bytes: "globex-bytes" },
+      });
+
+      // The personal context is its own shelf, in both directions.
+      await world.store.selectScope(null);
+      expect(readMediaCache(world.store, URI)).toEqual({ status: "absent" });
+
+      // The media key names the scope beside the URI (the isolation is in the key).
+      await world.store.selectScope(ACME);
+      expect(mediaCacheKey(world.store, URI)).toBe(
+        `media:acme/acme-finance:${URI}`,
+      );
+    }
+  });
+});
+
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+
+function memoryStorage(seed: Record<string, string> = {}): ScopeStorage {
+  const slots = new Map(Object.entries(seed));
+  return {
+    getItem: (key: string) => slots.get(key) ?? null,
+    setItem: (key: string, value: string) => {
+      slots.set(key, value);
+    },
+  };
+}
+
+function jsonResponse(status: number, body: unknown): Response {
+  return new Response(JSON.stringify(body), {
+    status,
+    headers: { "content-type": "application/json" },
+  });
+}
+
+async function capture(run: () => Promise<unknown>): Promise<unknown> {
+  try {
+    await run();
+    return null;
+  } catch (error) {
+    return error;
+  }
+}
diff --git a/apps/mobile/src/openbot/tenancy.test.ts b/apps/mobile/src/openbot/tenancy.test.ts
new file mode 100644
index 000000000..722a11b25
--- /dev/null
+++ b/apps/mobile/src/openbot/tenancy.test.ts
@@ -0,0 +1,337 @@
+// MT104 (Issue #147): the mobile tenancy adapter's selection and cache half, pinned against the
+// WEB side's contract. Every behavior here has its twin in the web suites
+// (app/tests/multitenancy/selection.test.tsx, cache-generation.test.tsx): the same six kinds, the
+// same refusal mapping, the same URL-authority and never-default rules, the same
+// one-generation/one-removal switch. The file imports nothing but bun:test and the adapter — no
+// React Native, no app runtime — which is AC4: the adapter layer's tests run in CI independently.
+
+import { describe, expect, test } from "bun:test";
+
+import {
+  createTenancyStore,
+  type ScopeSelection,
+  type ScopeStorage,
+  selectionFromSources,
+  selectionState,
+  selectionStorageKey,
+  readStoredSelection,
+  readWorkspaceScopeListing,
+  scopeRefusalOf,
+  storeSelection,
+  WorkspaceScopeRefusedError,
+} from "./tenancy";
+
+const USER = "user-1";
+const ACME: ScopeSelection = { tenantId: "acme", workspaceId: "acme-finance" };
+const ACME_OPS: ScopeSelection = { tenantId: "acme", workspaceId: "acme-ops" };
+const GLOBEX: ScopeSelection = {
+  tenantId: "globex",
+  workspaceId: "globex-ops",
+};
+
+const LISTING = {
+  companies: [
+    {
+      tenantId: "acme",
+      name: "Acme",
+      role: "member",
+      memberEpoch: 7,
+      teams: [
+        { workspaceId: "acme-finance", name: "Finance" },
+        { workspaceId: "acme-ops", name: "Ops" },
+      ],
+    },
+    {
+      tenantId: "globex",
+      name: "Globex",
+      role: "member",
+      memberEpoch: 2,
+      teams: [{ workspaceId: "globex-ops", name: "Ops" }],
+    },
+  ],
+};
+
+/** An in-memory storage stand-in, so the persistence rules run the adapter's real code in CI. */
+function memoryStorage(seed: Record<string, string> = {}): ScopeStorage {
+  const slots = new Map(Object.entries(seed));
+  return {
+    getItem: (key: string) => slots.get(key) ?? null,
+    setItem: (key: string, value: string) => {
+      slots.set(key, value);
+    },
+  };
+}
+
+// ---------------------------------------------------------------------------
+// The listing read: refusal semantics identical to the web's
+// ---------------------------------------------------------------------------
+
+describe("readWorkspaceScopeListing", () => {
+  test("a listing answers as itself", async () => {
+    const listing = await readWorkspaceScopeListing(async () =>
+      jsonResponse(200, LISTING),
+    );
+    expect(listing.companies).toHaveLength(2);
+  });
+
+  test("a non-ok listing refuses with the server's own code", async () => {
+    const error = await capture(async () =>
+      readWorkspaceScopeListing(() =>
+        jsonResponse(403, { error: { code: "WORKSPACE_FORBIDDEN" } }),
+      ),
+    );
+    expect(error).toBeInstanceOf(WorkspaceScopeRefusedError);
+    const refusal = scopeRefusalOf(error);
+    expect(refusal?.status).toBe(403);
+    expect(refusal?.code).toBe("WORKSPACE_FORBIDDEN");
+  });
+
+  test("a broken body is malformed, never 'no companies'", async () => {
+    for (const body of ["not json", "{}", '{"companies": "acme"}', '{"companies": [{}]}']) {
+      const error = await capture(async () =>
+        readWorkspaceScopeListing(() => textResponse(200, body)),
+      );
+      expect(scopeRefusalOf(error)?.code).toBe("WORKSPACE_SCOPE_MALFORMED");
+    }
+  });
+
+  test("anything else thrown is not a scope refusal", () => {
+    expect(scopeRefusalOf(new Error("network died"))).toBeNull();
+    expect(scopeRefusalOf(null)).toBeNull();
+  });
+});
+
+// ---------------------------------------------------------------------------
+// The state machine: the web's six kinds
+// ---------------------------------------------------------------------------
+
+describe("selectionState", () => {
+  test("pending is loading; an error stays an error — infrastructure is not an authorization fact", () => {
+    expect(selectionState({ status: "pending" }, null)).toEqual({
+      kind: "loading",
+    });
+    expect(selectionState({ status: "error" }, ACME)).toEqual({ kind: "error" });
+  });
+
+  test("no eligible companies is the empty state", () => {
+    expect(
+      selectionState({ status: "success", listing: { companies: [] } }, null),
+    ).toEqual({ kind: "empty" });
+  });
+
+  test("eligible companies and no choice is ready — nothing is picked for the person", () => {
+    expect(
+      selectionState({ status: "success", listing: LISTING }, null),
+    ).toEqual({ kind: "ready" });
+  });
+
+  test("a listed pair is selected", () => {
+    const state = selectionState(
+      { status: "success", listing: LISTING },
+      ACME,
+    );
+    expect(state.kind).toBe("selected");
+    if (state.kind === "selected") {
+      expect(state.company.tenantId).toBe("acme");
+      expect(state.team.workspaceId).toBe("acme-finance");
+    }
+  });
+
+  test("a pair the listing no longer names is revoked — shown, never silently cleared", () => {
+    expect(
+      selectionState({ status: "success", listing: LISTING }, {
+        tenantId: "gone",
+        workspaceId: "gone-team",
+      }),
+    ).toEqual({ kind: "revoked", selection: { tenantId: "gone", workspaceId: "gone-team" } });
+    // A company that still exists but hid this team is revoked too, not re-homed.
+    expect(
+      selectionState({ status: "success", listing: LISTING }, {
+        tenantId: "acme",
+        workspaceId: "acme-hid",
+      }),
+    ).toEqual({ kind: "revoked", selection: { tenantId: "acme", workspaceId: "acme-hid" } });
+  });
+});
+
+describe("selectionFromSources", () => {
+  test("a complete deep link is the authority", () => {
+    expect(
+      selectionFromSources({ company: "acme", team: "acme-ops" }, GLOBEX),
+    ).toEqual(ACME_OPS);
+  });
+
+  test("a link naming only a company is an incomplete scope, never half of the stored one", () => {
+    expect(selectionFromSources({ company: "acme" }, GLOBEX)).toBeNull();
+    expect(selectionFromSources({ team: "acme-ops" }, GLOBEX)).toBeNull();
+  });
+
+  test("a silent link falls back to the stored choice; storage never invents one", () => {
+    expect(selectionFromSources({}, GLOBEX)).toEqual(GLOBEX);
+    expect(selectionFromSources({}, null)).toBeNull();
+  });
+});
+
+// ---------------------------------------------------------------------------
+// Persistence
+// ---------------------------------------------------------------------------
+
+describe("stored selection", () => {
+  test("the slot is per-account and damaged slots read as nothing", async () => {
+    const storage = memoryStorage();
+    await storeSelection(storage, USER, ACME);
+    expect(await readStoredSelection(storage, USER)).toEqual(ACME);
+    expect(await readStoredSelection(storage, "user-2")).toBeNull();
+
+    const damaged = memoryStorage({
+      [selectionStorageKey(USER)]: "{corrupted",
+    });
+    expect(await readStoredSelection(damaged, USER)).toBeNull();
+
+    const halfShaped = memoryStorage({
+      [selectionStorageKey(USER)]: JSON.stringify({ tenantId: "acme" }),
+    });
+    expect(await readStoredSelection(halfShaped, USER)).toBeNull();
+  });
+});
+
+// ---------------------------------------------------------------------------
+// The store: one generation, one removal discipline (the MT083 rule, mobile-shaped)
+// ---------------------------------------------------------------------------
+
+describe("createTenancyStore", () => {
+  test("the scope world: pending before the user resolves, then open with the live pair", async () => {
+    const unresolved = createTenancyStore({
+      userId: undefined,
+      storage: memoryStorage(),
+    });
+    expect(unresolved.scope()).toEqual({ status: "pending" });
+
+    const storage = memoryStorage();
+    await storeSelection(storage, USER, ACME);
+    const store = createTenancyStore({
+      userId: USER,
+      storage,
+      selection: await readStoredSelection(storage, USER),
+    });
+    expect(store.scope()).toEqual({
+      status: "open",
+      userId: USER,
+      selection: ACME,
+      generation: 0,
+      key: "acme/acme-finance@0",
+    });
+  });
+
+  test("business keys name user, company and team: two scopes never read one entry (AC2)", async () => {
+    const store = createTenancyStore({
+      userId: USER,
+      storage: memoryStorage(),
+    });
+    await store.selectScope(ACME);
+    store.write("channels", ["acme-channel"]);
+    expect(store.read<string[]>("channels")).toEqual({
+      status: "present",
+      value: ["acme-channel"],
+    });
+
+    await store.selectScope(GLOBEX);
+    // The new scope's read is absent: the old scope's entry does not appear after the switch.
+    expect(store.read("channels")).toEqual({ status: "absent" });
+    store.write("channels", ["globex-channel"]);
+    expect(store.read<string[]>("channels")).toEqual({
+      status: "present",
+      value: ["globex-channel"],
+    });
+
+    // And the personal context is its own subtree, in both directions.
+    await store.selectScope(null);
+    expect(store.read("channels")).toEqual({ status: "absent" });
+    store.write("channels", ["personal-channel"]);
+    await store.selectScope(ACME);
+    expect(store.read("channels")).toEqual({ status: "absent" });
+  });
+
+  test("a team change drops only the old team's entries; a company change drops the company's", async () => {
+    const store = createTenancyStore({
+      userId: USER,
+      storage: memoryStorage(),
+    });
+    await store.selectScope(ACME);
+    store.write("draft", "finance draft");
+    await store.selectScope(ACME_OPS);
+    // Same company, other team: the finance draft is gone and does not bleed through.
+    expect(store.read("draft")).toEqual({ status: "absent" });
+    store.write("draft", "ops draft");
+    await store.selectScope(GLOBEX);
+    expect(store.read("draft")).toEqual({ status: "absent" });
+    // Back into Acme: the old team's entries were dropped with the company switch, not parked.
+    await store.selectScope(ACME);
+    expect(store.read("draft")).toEqual({ status: "absent" });
+  });
+
+  test("every switch advances the generation, and an in-flight answer is refused on arrival", async () => {
+    const storage = memoryStorage();
+    const store = createTenancyStore({ userId: USER, storage });
+    await store.selectScope(ACME);
+    const at = store.generationNow();
+
+    // An answer that lands while the scope is unchanged is accepted.
+    expect(store.stillCurrent(at)).toBe(true);
+
+    await store.selectScope(GLOBEX);
+    // The generation moved BEFORE anything else: the answer that left under Acme is refused.
+    expect(store.stillCurrent(at)).toBe(false);
+    expect(store.generationNow()).toBe(at + 1);
+
+    // The new generation's captures are current until the next switch.
+    const next = store.generationNow();
+    expect(store.stillCurrent(next)).toBe(true);
+    await store.selectScope(null);
+    expect(store.stillCurrent(next)).toBe(false);
+  });
+
+  test("a same-scope switch is a no-op: the generation does not churn", async () => {
+    const store = createTenancyStore({
+      userId: USER,
+      storage: memoryStorage(),
+    });
+    await store.selectScope(ACME);
+    const at = store.generationNow();
+    await store.selectScope(ACME);
+    expect(store.generationNow()).toBe(at);
+  });
+
+  test("the switch mirrors the choice to the per-account storage slot", async () => {
+    const storage = memoryStorage();
+    const store = createTenancyStore({ userId: USER, storage });
+    await store.selectScope(ACME);
+    expect(await readStoredSelection(storage, USER)).toEqual(ACME);
+    await store.selectScope(GLOBEX);
+    expect(await readStoredSelection(storage, USER)).toEqual(GLOBEX);
+  });
+});
+
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+
+function jsonResponse(status: number, body: unknown): Response {
+  return new Response(JSON.stringify(body), {
+    status,
+    headers: { "content-type": "application/json" },
+  });
+}
+
+function textResponse(status: number, body: string): Response {
+  return new Response(body, { status });
+}
+
+async function capture(run: () => Promise<unknown>): Promise<unknown> {
+  try {
+    await run();
+    return null;
+  } catch (error) {
+    return error;
+  }
+}
diff --git a/apps/mobile/src/openbot/tenancy.ts b/apps/mobile/src/openbot/tenancy.ts
new file mode 100644
index 000000000..03f3b0a81
--- /dev/null
+++ b/apps/mobile/src/openbot/tenancy.ts
@@ -0,0 +1,421 @@
+/*
+ * The mobile tenancy adapter's selection half, MT104 (Issue #147).
+ *
+ * THE CONTRACT IS THE WEB SIDE'S. The OpenBot web workbench shipped its selection as three seams
+ * — `lib/enterprise/tenant/selection.ts` (the choice and its state machine), `scoped-cache.ts`
+ * (where one scope's business entries live) and `stream-scope.ts` (the live selection + the
+ * generation) — and this module is that same design re-expressed for a mobile app: the same
+ * listing shape, the same six kinds, the same refusal behavior, the same storage discipline, the
+ * same one-generation rule. Where the web reads `window.localStorage` and a `QueryClient`, the
+ * mobile adapter takes injected collaborators (`ScopeStorage`, a plain store) because a React
+ * Native app owns neither — and because injected collaborators are what let this file's tests run
+ * in CI with no runtime beneath them (AC4).
+ *
+ * WHAT STAYS TRUE, BIT FOR BIT:
+ * - The listing is the server's own eligibility fact (`GET /api/enterprise/workspace-scope`, the
+ *   MT006 lister); nothing is selected unless a person picks it, and nothing is ever defaulted
+ *   (spec A6).
+ * - A non-ok listing is a typed refusal (`WorkspaceScopeRefusedError`) and a broken body is
+ *   `WORKSPACE_SCOPE_MALFORMED` — an infrastructure failure never masquerades as "no companies".
+ * - A deep link is the authority whenever it names anything; a link naming only a company is an
+ *   incomplete scope, never half of the stored one.
+ * - The switch advances ONE generation and removes the old scope's business entries; a response
+ *   that left under one selection and lands under another is refused on arrival.
+ */
+
+/** One team the actor belongs to, named by the tenant-scoped data read. */
+export type WorkspaceScopeTeam = {
+  workspaceId: string;
+  name: string;
+};
+
+/** One company the actor is an active member of, with the teams they belong to. */
+export type WorkspaceScopeCompany = {
+  tenantId: string;
+  name: string;
+  role: string;
+  memberEpoch: number;
+  teams: WorkspaceScopeTeam[];
+};
+
+/** The listing's whole answer: eligible companies, nothing pre-selected. */
+export type WorkspaceScopeListing = {
+  companies: WorkspaceScopeCompany[];
+};
+
+/** A complete selection: both halves, or no selection at all. */
+export type ScopeSelection = {
+  tenantId: string;
+  workspaceId: string;
+};
+
+/**
+ * The refusal a non-ok listing raises — the same facts the web error carries (status and the
+ * server's own code), never flattened into a sentence an empty state could mistake for its own.
+ */
+export class WorkspaceScopeRefusedError extends Error {
+  readonly status: number;
+  readonly code: string;
+
+  constructor(status: number, code: string) {
+    super(
+      `The workspace-scope listing refused the request (${status} ${code}).`,
+    );
+    this.name = "WorkspaceScopeRefusedError";
+    this.status = status;
+    this.code = code;
+  }
+}
+
+/** The typed refusal behind an error, for callers that branch on it; anything else is not one. */
+export function scopeRefusalOf(
+  error: unknown,
+): WorkspaceScopeRefusedError | null {
+  return error instanceof WorkspaceScopeRefusedError ? error : null;
+}
+
+/**
+ * Read one listing from a fetch-like answer, with the web side's exact refusal mapping: a non-ok
+ * answer refuses with the server's own error code (or `WORKSPACE_SCOPE_REFUSED`), and a 200 that
+ * is not a listing of companies with teams refuses as `WORKSPACE_SCOPE_MALFORMED` — because a
+ * broken body must never read as "you have no companies".
+ */
+export async function readWorkspaceScopeListing(
+  fetchListing: () => Promise<Response>,
+): Promise<WorkspaceScopeListing> {
+  const response = await fetchListing();
+  if (!response.ok) {
+    const body = (await response.json().catch(() => null)) as {
+      error?: unknown;
+    } | null;
+    const envelope = body?.error;
+    const code =
+      envelope !== null &&
+      typeof envelope === "object" &&
+      typeof (envelope as Record<string, unknown>).code === "string"
+        ? (envelope as { code: string }).code
+        : "WORKSPACE_SCOPE_REFUSED";
+    throw new WorkspaceScopeRefusedError(response.status, code);
+  }
+  const body = (await response.json().catch(() => null)) as unknown;
+  if (
+    body === null ||
+    typeof body !== "object" ||
+    !Array.isArray((body as Record<string, unknown>).companies)
+  ) {
+    throw new WorkspaceScopeRefusedError(
+      response.status,
+      "WORKSPACE_SCOPE_MALFORMED",
+    );
+  }
+  const companies: unknown[] = (body as { companies: unknown[] }).companies;
+  const shaped = companies.every(
+    (company) =>
+      company !== null &&
+      typeof company === "object" &&
+      typeof (company as Record<string, unknown>).tenantId === "string" &&
+      Array.isArray((company as Record<string, unknown>).teams),
+  );
+  if (!shaped) {
+    throw new WorkspaceScopeRefusedError(
+      response.status,
+      "WORKSPACE_SCOPE_MALFORMED",
+    );
+  }
+  return body as WorkspaceScopeListing;
+}
+
+// ---------------------------------------------------------------------------
+// The state machine — pure, the web's six kinds verbatim
+// ---------------------------------------------------------------------------
+
+/** The listing read a screen holds, narrowed to the facts the state machine answers on. */
+export type ListingRead =
+  | { status: "pending" }
+  | { status: "error" }
+  | { status: "success"; listing: WorkspaceScopeListing };
+
+export type SelectionState =
+  | { kind: "loading" }
+  | { kind: "error" }
+  | { kind: "empty" }
+  /** Eligible companies exist; nobody has chosen a scope. Nothing is picked for them. */
+  | { kind: "ready" }
+  | {
+      kind: "selected";
+      company: WorkspaceScopeCompany;
+      team: WorkspaceScopeTeam;
+    }
+  | {
+      kind: "revoked";
+      /** The selection that no longer matches the listing — shown, never silently cleared. */
+      selection: ScopeSelection;
+    };
+
+/**
+ * Where the chosen pair sits in the listing, or null when it does not.
+ *
+ * This IS the revocation judgment, as on the web: the server's lister is the live membership fact
+ * (a suspended company hides whole, a suspended team hides alone), so an absent pair means
+ * revoked access — and an erroring listing stays an error, because infrastructure trouble is not
+ * an authorization fact and must not dress up as one.
+ */
+export function findSelection(
+  listing: WorkspaceScopeListing,
+  selection: ScopeSelection,
+): { company: WorkspaceScopeCompany; team: WorkspaceScopeTeam } | null {
+  const company = listing.companies.find(
+    (candidate) => candidate.tenantId === selection.tenantId,
+  );
+  if (company === undefined) return null;
+  const team = company.teams.find(
+    (candidate) => candidate.workspaceId === selection.workspaceId,
+  );
+  if (team === undefined) return null;
+  return { company, team };
+}
+
+export function selectionState(
+  read: ListingRead,
+  selection: ScopeSelection | null,
+): SelectionState {
+  if (read.status === "pending") return { kind: "loading" };
+  if (read.status === "error") return { kind: "error" };
+  if (read.listing.companies.length === 0) return { kind: "empty" };
+  if (selection === null) return { kind: "ready" };
+  const found = findSelection(read.listing, selection);
+  if (found === null) return { kind: "revoked", selection };
+  return { kind: "selected", company: found.company, team: found.team };
+}
+
+/**
+ * The selection this screen holds, from the two user-explicit sources — the web rule, with the
+ * mobile deep link in the URL's seat. A deep link is the authority whenever it names anything;
+ * a link that names only a company is an incomplete scope — not half of the stored one. Storage
+ * fills only a silent link with the user's own last explicit choice; it never invents one.
+ */
+export function selectionFromSources(
+  deepLink: { company?: string; team?: string },
+  stored: ScopeSelection | null,
+): ScopeSelection | null {
+  if (deepLink.company !== undefined || deepLink.team !== undefined) {
+    if (deepLink.company !== undefined && deepLink.team !== undefined) {
+      return { tenantId: deepLink.company, workspaceId: deepLink.team };
+    }
+    return null;
+  }
+  return stored;
+}
+
+// ---------------------------------------------------------------------------
+// Persistence — the choice itself is user-explicit; storage only remembers it
+// ---------------------------------------------------------------------------
+
+/** The storage contract this module needs; AsyncStorage satisfies it, and so does a Map in CI. */
+export interface ScopeStorage {
+  getItem(key: string): string | null | Promise<string | null>;
+  setItem(key: string, value: string): void | Promise<void>;
+}
+
+/** Same prefix as the web mirror, so one account's slot means the same thing on both clients. */
+const STORAGE_PREFIX = "openbot.workspace-scope.v1:";
+
+export function selectionStorageKey(userId: string): string {
+  return `${STORAGE_PREFIX}${userId}`;
+}
+
+function scopeOf(value: unknown): ScopeSelection | null {
+  if (value === null || typeof value !== "object") return null;
+  const tenantId = (value as Record<string, unknown>).tenantId;
+  const workspaceId = (value as Record<string, unknown>).workspaceId;
+  if (
+    typeof tenantId !== "string" ||
+    tenantId === "" ||
+    typeof workspaceId !== "string" ||
+    workspaceId === ""
+  ) {
+    return null;
+  }
+  return { tenantId, workspaceId };
+}
+
+/** The user's last explicit selection, or null. A damaged slot reads as nothing. */
+export async function readStoredSelection(
+  storage: ScopeStorage,
+  userId: string,
+): Promise<ScopeSelection | null> {
+  let raw: string | null;
+  try {
+    raw = await storage.getItem(selectionStorageKey(userId));
+  } catch {
+    return null;
+  }
+  if (raw === null) return null;
+  try {
+    return scopeOf(JSON.parse(raw));
+  } catch {
+    return null;
+  }
+}
+
+/** Remember an explicit choice; storage trouble is swallowed — the caller still holds the choice. */
+export async function storeSelection(
+  storage: ScopeStorage,
+  userId: string,
+  selection: ScopeSelection,
+): Promise<void> {
+  try {
+    await storage.setItem(
+      selectionStorageKey(userId),
+      JSON.stringify(selection),
+    );
+  } catch {
+    /* best-effort mirror, exactly as on the web */
+  }
+}
+
+// ---------------------------------------------------------------------------
+// The store — one selection, one generation, one removal discipline
+// ---------------------------------------------------------------------------
+
+/**
+ * The scoped cache's answer while the scope source (the signed-in user) is unresolved — the same
+ * refusal the web streams live by: a business read is not established on a guess.
+ */
+export type TenancyScope = { status: "pending" } | {
+  status: "open";
+  userId: string;
+  selection: ScopeSelection | null;
+  generation: number;
+  /** Changes exactly when a business key must change: the pair moved, or the generation moved. */
+  key: string;
+};
+
+function sameScope(
+  left: ScopeSelection | null,
+  right: ScopeSelection | null,
+): boolean {
+  if (left === null || right === null) return left === right;
+  return (
+    left.tenantId === right.tenantId && left.workspaceId === right.workspaceId
+  );
+}
+
+/**
+ * The mobile tenancy store: the one place the live selection and its generation live. The web
+ * holds these in two cache entries a QueryClient owns; a mobile app owns no such thing, so the
+ * adapter owns them itself — a plain object, one instance per app session, created with the
+ * signed-in user and seeded from that user's storage slot.
+ */
+export function createTenancyStore(options: {
+  userId: string | undefined;
+  storage: ScopeStorage;
+  selection?: ScopeSelection | null;
+  generation?: number;
+}) {
+  const userId = options.userId;
+  let selection: ScopeSelection | null = options.selection ?? null;
+  let generation: number = options.generation ?? 0;
+  /** One cache per (company, team, generation) prefix, dropped wholesale on a switch. */
+  const scopes = new Map<string, Map<string, unknown>>();
+
+  const prefixOf = (pair: ScopeSelection | null): string => {
+    if (pair === null) return "personal";
+    return `${pair.tenantId}/${pair.workspaceId}`;
+  };
+
+  const store = {
+    /** The live scope world, in the web `StreamScope`'s shape. */
+    scope(): TenancyScope {
+      if (userId === undefined) return { status: "pending" };
+      return {
+        status: "open",
+        userId,
+        selection,
+        generation,
+        key: `${prefixOf(selection)}@${generation}`,
+      };
+    },
+
+    /**
+     * The whole switch, in the web `selectWorkspaceScope`'s order: the generation moves FIRST, so
+     * a response already in flight against the old scope is refused on arrival, and the old
+     * scope's business entries go AFTER — dropped, not invalidated, so a stale row is never
+     * visible for one render while the refetch runs. A team change inside one company drops only
+     * the old team's entries (leaving one team is not leaving the company); a company change drops
+     * the old company's whole subtree; and choosing a scope out of the personal context drops the
+     * personal context's business subtree beside it, so no stale personal entry can render beside
+     * the scope just chosen.
+     */
+    async selectScope(next: ScopeSelection | null): Promise<void> {
+      if (sameScope(selection, next)) return;
+      generation += 1;
+      const previous = selection;
+      const sameCompany =
+        previous !== null &&
+        next !== null &&
+        previous.tenantId === next.tenantId;
+      if (sameCompany) {
+        scopes.delete(prefixOf(previous));
+      } else {
+        if (previous !== null) {
+          for (const key of scopes.keys()) {
+            if (key.startsWith(`${previous.tenantId}/`)) scopes.delete(key);
+          }
+        }
+        if (previous === null && next !== null) scopes.delete("personal");
+      }
+      selection = next;
+      if (userId !== undefined && next !== null) {
+        await storeSelection(options.storage, userId, next);
+      }
+    },
+
+    // -- The scoped cache half (the web `scoped-cache.ts` rule) ------------------
+
+    /**
+     * Where one scope's business entries live: under the selection's own prefix (user, company
+     * and team all named), or — when nothing is selected — under the personal context's. A key
+     * filed here is gone the moment its scope is (AC2: the cache key names user, company and
+     * team; after a switch the old scope's data does not appear).
+     */
+    cachePrefix(): string {
+      return userId === undefined ? "unresolved" : prefixOf(selection);
+    },
+
+    read<T>(key: string): { status: "present"; value: T } | { status: "absent" } {
+      const bucket = scopes.get(prefixOf(selection));
+      if (bucket === undefined || !bucket.has(key)) return { status: "absent" };
+      return { status: "present", value: bucket.get(key) as T };
+    },
+
+    /** Write under the CURRENT scope's prefix only; a write never leaks into another scope's bucket. */
+    write(key: string, value: unknown): void {
+      const prefix = prefixOf(selection);
+      let bucket = scopes.get(prefix);
+      if (bucket === undefined) {
+        bucket = new Map();
+        scopes.set(prefix, bucket);
+      }
+      bucket.set(key, value);
+    },
+
+    /** The generation at capture time, for the in-flight refusal below. */
+    generationNow(): number {
+      return generation;
+    },
+
+    /**
+     * Whether a write that left at `at` may still land — the web `streamWriteStillCurrent` /
+     * `cacheWriteGate` rule: once any switch advanced the generation, the old scope's entries are
+     * gone, and replaying into them (or into the new scope's key) would resurrect or corrupt what
+     * the switch just cleared.
+     */
+    stillCurrent(at: number): boolean {
+      return generation === at;
+    },
+  };
+  return store;
+}
+
+export type TenancyStore = ReturnType<typeof createTenancyStore>;
diff --git a/apps/mobile/src/openbot/three-client-selection.test.ts b/apps/mobile/src/openbot/three-client-selection.test.ts
new file mode 100644
index 000000000..98b085934
--- /dev/null
+++ b/apps/mobile/src/openbot/three-client-selection.test.ts
@@ -0,0 +1,392 @@
+// MT106 (Issue #149): selection, empty states, switching and revocation answered
+// CONSISTENTLY by three clients over ONE identity matrix, with no cache crossing a scope.
+//
+// The three clients. iOS and Android run the same JavaScript layer (one Expo app, one shared
+// src/openbot), so "the iOS client" and "the Android client" are two independent instances of this
+// adapter over the same account — and "the web client" is the contract the adapter re-expresses
+// (app/src/lib/enterprise/tenant, pinned by the web suites). Each world here is therefore a full
+// client: its own store, its own device storage slot, its own scoped fetch — never a shared cache,
+// because consistency is sameness of answers, not shared state.
+//
+// The identity matrix is one set of server facts — the same listing answers (the eligibility
+// listing IS the membership fact, per MT104) — replayed at every client. What the matrix says, all
+// three must answer identically: what is eligible (AC1), what no-eligibility and revocation look
+// like (AC2), and what a switch leaves behind (AC3). Platform deltas beyond this shared layer are
+// recorded, not guessed at: the register lives in the parent worktree's run report — real-device
+// and simulator runs are explicitly UNVERIFIED there (the ticket's own note), and this file runs
+// the whole matrix in CI with no runtime beneath it, exactly like the MT104/MT105 suites it builds
+// on.
+//
+// Rerun: bun test apps/openmuse/apps/mobile/src/openbot/three-client-selection.test.ts
+
+import { describe, expect, test } from "bun:test";
+
+import {
+  createTenancyStore,
+  type ListingRead,
+  readStoredSelection,
+  readWorkspaceScopeListing,
+  type ScopeSelection,
+  type ScopeStorage,
+  scopeRefusalOf,
+  selectionFromSources,
+  selectionState,
+  type TenancyStore,
+  type WorkspaceScopeCompany,
+  type WorkspaceScopeListing,
+  WorkspaceScopeRefusedError,
+} from "./tenancy";
+import {
+  createScopedFetch,
+  TenantSelectionChangedError,
+} from "./transport";
+
+// ---------------------------------------------------------------------------
+// The identity matrix — one source of server facts, replayed at every client
+// ---------------------------------------------------------------------------
+
+const USER = "user-1";
+const ACME: ScopeSelection = { tenantId: "acme", workspaceId: "acme-finance" };
+const ACME_OPS: ScopeSelection = { tenantId: "acme", workspaceId: "acme-ops" };
+const GLOBEX: ScopeSelection = { tenantId: "globex", workspaceId: "globex-ops" };
+
+/** The companies the server currently calls eligible, with the teams under each. */
+function listingOf(
+  ...tenantIds: string[]
+): { status: "success"; listing: WorkspaceScopeListing } {
+  const catalogue: Record<string, WorkspaceScopeCompany> = {
+    acme: {
+      tenantId: "acme",
+      name: "Acme",
+      role: "member",
+      memberEpoch: 7,
+      teams: [
+        { workspaceId: "acme-finance", name: "Finance" },
+        { workspaceId: "acme-ops", name: "Ops" },
+      ],
+    },
+    globex: {
+      tenantId: "globex",
+      name: "Globex",
+      role: "member",
+      memberEpoch: 2,
+      teams: [{ workspaceId: "globex-ops", name: "Ops" }],
+    },
+  };
+  return {
+    status: "success",
+    listing: {
+      companies: tenantIds.map((id) => catalogue[id]),
+    },
+  };
+}
+
+/** The matrix's moments: full eligibility, one company suspended, everything gone, infra down. */
+const MATRIX = {
+  both: listingOf("acme", "globex"),
+  globexOnly: listingOf("globex"),
+  none: listingOf(),
+  error: { status: "error" } as ListingRead,
+};
+
+const CLIENTS = ["web-mirror", "ios", "android"] as const;
+type ClientName = (typeof CLIENTS)[number];
+
+/** One whole client over the matrix: its own store, storage slot and scoped fetch. */
+function clientWorld(name: ClientName, answer: () => Promise<Response>) {
+  const storage = memoryStorage();
+  const store = createTenancyStore({ userId: USER, storage });
+  const fetch = createScopedFetch({ store, fetchLike: () => answer() });
+  return { name, storage, store, fetch };
+}
+
+/** Run the matrix at every client and fold the answers into one comparable array. */
+async function atEveryClient(
+  run: (world: ReturnType<typeof clientWorld>) => Promise<unknown> | unknown,
+  answer: () => Promise<Response> = () => Promise.resolve(new Response("{}")),
+): Promise<Record<ClientName, unknown>> {
+  const answers = {} as Record<ClientName, unknown>;
+  for (const name of CLIENTS) {
+    answers[name] = await run(clientWorld(name, answer));
+  }
+  return answers;
+}
+
+/** The battery every client must answer identically: each matrix moment × each selection. */
+const STATE_BATTERY: Array<{
+  read: ListingRead;
+  selection: ScopeSelection | null;
+}> = [
+  ...([MATRIX.both, MATRIX.globexOnly, MATRIX.none, MATRIX.error] as const).flatMap(
+    (read) => [
+      { read, selection: null },
+      { read, selection: ACME },
+      { read, selection: ACME_OPS },
+      { read, selection: GLOBEX },
+    ],
+  ),
+];
+
+// ---------------------------------------------------------------------------
+// AC1: the selection surface lists only truly eligible companies and teams,
+//      and every client answers alike
+// ---------------------------------------------------------------------------
+
+describe("MT106 AC1 three clients list only real eligibility, identically", () => {
+  test("the whole matrix × selection battery answers identically on all three clients", async () => {
+    const answers = await atEveryClient((world) =>
+      STATE_BATTERY.map(({ read, selection }) =>
+        JSON.stringify(selectionState(read, selection)),
+      ),
+    );
+    const web = answers["web-mirror"];
+    for (const name of CLIENTS) {
+      expect(answers[name]).toEqual(web);
+      expect(answers[name]).toHaveLength(STATE_BATTERY.length);
+    }
+  });
+
+  test("a selected screen carries the listing's own row, never a local invention", async () => {
+    const answers = await atEveryClient(() => selectionState(MATRIX.both, ACME));
+    for (const name of CLIENTS) {
+      const state = answers[name] as ReturnType<typeof selectionState>;
+      expect(state).toEqual({
+        kind: "selected",
+        // The company and team objects are the matrix's own rows, byte for byte: the screen's
+        // data comes from the server's eligibility fact, and both teams appear under Acme —
+        // eligibility is the listing's word, not the selection's.
+        company: MATRIX.both.listing.companies[0],
+        team: MATRIX.both.listing.companies[0].teams[0],
+      });
+    }
+  });
+
+  test("a deep link is the authority on every client, including the half-pair refusal", async () => {
+    const answers = await atEveryClient(() => [
+      selectionFromSources({ company: "acme", team: "acme-ops" }, GLOBEX),
+      // A link naming only a company is an incomplete scope, never half of the stored one.
+      selectionFromSources({ company: "acme" }, GLOBEX),
+      selectionFromSources({}, GLOBEX),
+    ]);
+    for (const name of CLIENTS) {
+      expect(answers[name]).toEqual([ACME_OPS, null, GLOBEX]);
+    }
+  });
+});
+
+// ---------------------------------------------------------------------------
+// AC2: no-eligibility and revocation are explicit states with explicit
+//      refusals, on every client
+// ---------------------------------------------------------------------------
+
+describe("MT106 AC2 no-eligibility and revocation are explicit on every client", () => {
+  test("no eligible companies is the empty state — never an error, never a silent default", async () => {
+    const answers = await atEveryClient(() => selectionState(MATRIX.none, null));
+    for (const name of CLIENTS) {
+      expect(answers[name]).toEqual({ kind: "empty" });
+    }
+  });
+
+  test("a revoked selection is shown, not silently cleared — and re-admission re-selects", async () => {
+    const answers = await atEveryClient(async (world) => {
+      // The user's explicit choice sits in the slot; the matrix then suspends Acme.
+      await world.store.selectScope(ACME);
+      const revoked = selectionState(MATRIX.globexOnly, ACME);
+      // The slot still holds the pair: revocation is displayed, not erased.
+      const storedWhileRevoked = await readStoredSelection(
+        world.storage,
+        USER,
+      );
+      // The matrix re-admits Acme: the same stored pair selects again, no re-prompt.
+      const readmitted = selectionState(MATRIX.both, ACME);
+      return { revoked, storedWhileRevoked, readmitted };
+    });
+    for (const name of CLIENTS) {
+      expect(answers[name]).toEqual({
+        revoked: { kind: "revoked", selection: ACME },
+        storedWhileRevoked: ACME,
+        readmitted: {
+          kind: "selected",
+          company: MATRIX.both.listing.companies[0],
+          team: MATRIX.both.listing.companies[0].teams[0],
+        },
+      });
+    }
+  });
+
+  test("an infrastructure failure is an error, never 'no companies'", async () => {
+    const answers = await atEveryClient(() => selectionState(MATRIX.error, ACME));
+    for (const name of CLIENTS) {
+      expect(answers[name]).toEqual({ kind: "error" });
+    }
+  });
+
+  test("the listing refusal is typed and identical on every client", async () => {
+    const answers = await atEveryClient(() =>
+      Promise.all([
+        capture(() =>
+          readWorkspaceScopeListing(async () =>
+            jsonResponse(403, { error: { code: "WORKSPACE_FORBIDDEN" } }),
+          ),
+        ),
+        capture(() =>
+          readWorkspaceScopeListing(async () => textResponse(200, "not json")),
+        ),
+      ]),
+    );
+    for (const name of CLIENTS) {
+      const [refused, malformed] = answers[name] as [unknown, unknown];
+      expect(scopeRefusalOf(refused)?.status).toBe(403);
+      expect(scopeRefusalOf(refused)?.code).toBe("WORKSPACE_FORBIDDEN");
+      expect(scopeRefusalOf(malformed)?.code).toBe(
+        "WORKSPACE_SCOPE_MALFORMED",
+      );
+    }
+  });
+});
+
+// ---------------------------------------------------------------------------
+// AC3: after a switch, no old-scope cache and no in-flight answer — on every
+//      client, and never across clients
+// ---------------------------------------------------------------------------
+
+describe("MT106 AC3 switching leaves no old-scope cache or in-flight answer", () => {
+  test("every switch shape drops exactly the old scope's entries, on all three clients", async () => {
+    const answers = await atEveryClient(async (world) => {
+      const trace: string[] = [];
+      await world.store.selectScope(ACME);
+      world.store.write("threads", ["acme-finance-threads"]);
+      trace.push(present(world.store, "threads"));
+      // Team change inside Acme: only the old team's bucket goes.
+      await world.store.selectScope(ACME_OPS);
+      trace.push(present(world.store, "threads"));
+      world.store.write("threads", ["acme-ops-threads"]);
+      // Company change: Acme's whole subtree goes.
+      await world.store.selectScope(GLOBEX);
+      trace.push(present(world.store, "threads"));
+      world.store.write("threads", ["globex-threads"]);
+      // Scope → personal: the scoped subtree goes beside the personal shelf.
+      await world.store.selectScope(null);
+      trace.push(present(world.store, "threads"));
+      world.store.write("threads", ["personal-threads"]);
+      // Personal → scope: the personal business subtree goes too.
+      await world.store.selectScope(ACME);
+      trace.push(present(world.store, "threads"));
+      return trace;
+    });
+    for (const name of CLIENTS) {
+      // Present under its own scope, absent the moment that scope is left — no shape of
+      // switch leaves the old scope's data readable.
+      expect(answers[name]).toEqual([
+        "present",
+        "absent",
+        "absent",
+        "absent",
+        "absent",
+      ]);
+    }
+  });
+
+  test("an answer that outlives its scope is refused on arrival, on all three clients", async () => {
+    const deferred = deferredResponse();
+    const answers = await atEveryClient(async (world) => {
+      await world.store.selectScope(ACME);
+      const asked = world.fetch("/api/enterprise/threads");
+      await world.store.selectScope(GLOBEX);
+      deferred.resolve(jsonResponse(200, { threads: ["acme-finance-threads"] }));
+      const error = await capture(() => asked);
+      // And nothing of the refused answer landed anywhere: not under the new scope…
+      const newScope = present(world.store, "threads");
+      await world.store.selectScope(ACME);
+      // …and not back under the scope it was asked for.
+      const oldScope = present(world.store, "threads");
+      return { error, newScope, oldScope };
+    }, () => deferred.promise);
+    for (const name of CLIENTS) {
+      const { error, newScope, oldScope } = answers[name] as {
+        error: unknown;
+        newScope: string;
+        oldScope: string;
+      };
+      expect(error).toBeInstanceOf(TenantSelectionChangedError);
+      expect(newScope).toBe("absent");
+      expect(oldScope).toBe("absent");
+    }
+  });
+
+  test("clients are independent worlds: no shared cache, no cross-client eviction", async () => {
+    // Same account, three devices: a write on one client is invisible on the others, and a
+    // switch on one client never drops another client's entries — consistency without shared
+    // state is the whole point.
+    const worlds = CLIENTS.map((name) =>
+      clientWorld(name, () => Promise.resolve(new Response("{}"))),
+    );
+    const [web, ios, android] = worlds;
+    for (const world of worlds) await world.store.selectScope(ACME);
+    ios.store.write("threads", ["ios-only-threads"]);
+    expect(present(web.store, "threads")).toBe("absent");
+    expect(present(android.store, "threads")).toBe("absent");
+    // iOS moves to Globex; web and android keep reading their own Acme entries.
+    await ios.store.selectScope(GLOBEX);
+    expect(present(ios.store, "threads")).toBe("absent");
+    expect(present(web.store, "threads")).toBe("absent"); // web never had ios's entry
+    web.store.write("threads", ["web-threads"]);
+    expect(present(web.store, "threads")).toBe("present");
+    expect(present(android.store, "threads")).toBe("absent");
+    // The account's slot is the user's explicit choice on each client — ios's switch moved
+    // only ios's slot.
+    expect(await readStoredSelection(web.storage, USER)).toEqual(ACME);
+    expect(await readStoredSelection(ios.storage, USER)).toEqual(GLOBEX);
+  });
+});
+
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+
+function present(store: TenancyStore, key: string): "present" | "absent" {
+  const read = store.read(key);
+  return read.status;
+}
+
+function memoryStorage(seed: Record<string, string> = {}): ScopeStorage {
+  const slots = new Map(Object.entries(seed));
+  return {
+    getItem: (key: string) => slots.get(key) ?? null,
+    setItem: (key: string, value: string) => {
+      slots.set(key, value);
+    },
+  };
+}
+
+function jsonResponse(status: number, body: unknown): Response {
+  return new Response(JSON.stringify(body), {
+    status,
+    headers: { "content-type": "application/json" },
+  });
+}
+
+function textResponse(status: number, body: string): Response {
+  return new Response(body, { status });
+}
+
+/** One answer whose arrival the test controls, for the in-flight refusal cases. */
+function deferredResponse(): {
+  promise: Promise<Response>;
+  resolve: (response: Response) => void;
+} {
+  let resolve!: (response: Response) => void;
+  const promise = new Promise<Response>((settle) => {
+    resolve = settle;
+  });
+  return { promise, resolve };
+}
+
+async function capture(run: () => Promise<unknown>): Promise<unknown> {
+  try {
+    await run();
+    return null;
+  } catch (error) {
+    return error;
+  }
+}
diff --git a/apps/mobile/src/openbot/transport.test.ts b/apps/mobile/src/openbot/transport.test.ts
new file mode 100644
index 000000000..0c3193328
--- /dev/null
+++ b/apps/mobile/src/openbot/transport.test.ts
@@ -0,0 +1,349 @@
+// MT105 (Issue #148): the mobile transport carries the current company/team selection on its
+// streams, uploads/downloads and media reads — and nothing else does. The attachment gates, the
+// subscription lifecycle, the generation rule and the reconnect rule are the web transport's
+// (MT082/MT083) re-expressed over the mobile tenancy store: this file pins them with the same
+// fixture discipline. It imports nothing but bun:test and the adapter — AC-adjacent: the tests
+// run in CI with no runtime beneath them.
+
+import { describe, expect, test } from "bun:test";
+
+import {
+  createTenancyStore,
+  type ScopeSelection,
+  type ScopeStorage,
+} from "./tenancy";
+import {
+  createScopeBoundStream,
+  createScopedFetch,
+  mediaCacheKey,
+  readMediaCache,
+  scopeHeaders,
+  SCOPE_HEADER_ALLOWED_PATHS,
+  TenantSelectionChangedError,
+  TENANT_HEADER,
+  withStreamScope,
+  WORKSPACE_HEADER,
+  writeMediaCache,
+} from "./transport";
+
+const ACME: ScopeSelection = { tenantId: "acme", workspaceId: "acme-finance" };
+const GLOBEX: ScopeSelection = { tenantId: "globex", workspaceId: "globex-ops" };
+
+/** An in-memory storage stand-in, so the store's persistence mirror runs its real code in CI. */
+function memoryStorage(): ScopeStorage {
+  const slots = new Map<string, string>();
+  return {
+    getItem: (key: string) => slots.get(key) ?? null,
+    setItem: (key: string, value: string) => {
+      slots.set(key, value);
+    },
+  };
+}
+
+// ---------------------------------------------------------------------------
+// AC1: the pair rides reviewed same-origin paths only
+// ---------------------------------------------------------------------------
+
+describe("scopeHeaders", () => {
+  test("a reviewed REST path carries the pair as headers", () => {
+    expect(scopeHeaders("/api/channels", ACME)).toEqual({
+      [TENANT_HEADER]: "acme",
+      [WORKSPACE_HEADER]: "acme-finance",
+    });
+    expect(scopeHeaders("/api/enterprise/workspace-scope", ACME)).toEqual({
+      [TENANT_HEADER]: "acme",
+      [WORKSPACE_HEADER]: "acme-finance",
+    });
+  });
+
+  test("an unreviewed path is left undecorated", () => {
+    expect(scopeHeaders("/api/unreviewed/thing", ACME)).toBeNull();
+    expect(scopeHeaders("/api/unreviewed", ACME)).toBeNull();
+  });
+
+  test("a non-same-origin path never receives the pair", () => {
+    expect(scopeHeaders("https://elsewhere.example/api/agents", ACME)).toBeNull();
+    expect(scopeHeaders("//api/agents", ACME)).toBeNull();
+  });
+
+  test("no selection attaches nothing — absence is carried as absence, never defaulted", () => {
+    expect(scopeHeaders("/api/agents", null)).toBeNull();
+  });
+
+  test("every inventory entry names its owner and reason — a closed, reviewable list", () => {
+    // Widening the list is a review, not an accident: each entry's owner names the ticket
+    // that performed it (MT107's is the mobile-aggregation family's own review).
+    const reviewedBy = ["MT105", "MT107"];
+    for (const entry of SCOPE_HEADER_ALLOWED_PATHS) {
+      expect(entry.id).toBeTruthy();
+      expect(entry.prefix.startsWith("/api/")).toBe(true);
+      expect(entry.reason.length).toBeGreaterThan(0);
+      expect(reviewedBy).toContain(entry.ownerTicket);
+    }
+  });
+});
+
+describe("withStreamScope", () => {
+  test("a reviewed stream path carries the pair as query, preserving what is already there", () => {
+    expect(withStreamScope("/api/workshop/turn/1", ACME)).toBe(
+      "/api/workshop/turn/1?x-openbot-tenant=acme&x-openbot-workspace=acme-finance",
+    );
+    expect(withStreamScope("/api/craft/session/1/events?cursor=7", ACME)).toBe(
+      "/api/craft/session/1/events?cursor=7&x-openbot-tenant=acme&x-openbot-workspace=acme-finance",
+    );
+    expect(withStreamScope("/api/channels/events", ACME)).toBe(
+      "/api/channels/events?x-openbot-tenant=acme&x-openbot-workspace=acme-finance",
+    );
+  });
+
+  test("the pair is encoded — an id with a space is still one value", () => {
+    expect(
+      withStreamScope("/api/computers/1/screen", {
+        tenantId: "ac me",
+        workspaceId: "finance team",
+      }),
+    ).toBe("/api/computers/1/screen?x-openbot-tenant=ac%20me&x-openbot-workspace=finance%20team");
+  });
+
+  test("an unreviewed stream path, a foreign origin, and no selection all change nothing", () => {
+    expect(withStreamScope("/api/other/stream", ACME)).toBe("/api/other/stream");
+    expect(withStreamScope("wss://third.party/stream", ACME)).toBe(
+      "wss://third.party/stream",
+    );
+    expect(withStreamScope("//echo/stream", ACME)).toBe("//echo/stream");
+    expect(withStreamScope("/api/workshop/turn/1", null)).toBe(
+      "/api/workshop/turn/1",
+    );
+  });
+});
+
+// ---------------------------------------------------------------------------
+// AC3: an in-flight answer that outlived its selection is refused on arrival
+// ---------------------------------------------------------------------------
+
+describe("createScopedFetch", () => {
+  test("the pair rides the request, and an answer that lands in time is accepted", async () => {
+    const store = createTenancyStore({
+      userId: "user-1",
+      storage: memoryStorage(),
+    });
+    await store.selectScope(ACME);
+    const seen: Array<{ url: string; headers: Record<string, string> | undefined }> = [];
+    const scoped = createScopedFetch({
+      store,
+      fetchLike: async (url, init) => {
+        seen.push({ url, headers: init?.headers });
+        return new Response("{}", { status: 200 });
+      },
+    });
+    const response = await scoped("/api/agents");
+    expect(response.status).toBe(200);
+    expect(seen[0]?.url).toBe("/api/agents");
+    expect(seen[0]?.headers).toEqual({
+      [TENANT_HEADER]: "acme",
+      [WORKSPACE_HEADER]: "acme-finance",
+    });
+  });
+
+  test("an answer that arrives after a switch is refused, never applied", async () => {
+    const store = createTenancyStore({
+      userId: "user-1",
+      storage: memoryStorage(),
+    });
+    await store.selectScope(ACME);
+    let answer: ((response: Response) => void) | null = null;
+    const scoped = createScopedFetch({
+      store,
+      fetchLike: () =>
+        new Promise<Response>((resolve) => {
+          answer = resolve;
+        }),
+    });
+    const inFlight = scoped("/api/agents");
+    // The switch happens while the answer is in flight.
+    await store.selectScope(GLOBEX);
+    answer?.(new Response("{}", { status: 200 }));
+    const error = await capture(inFlight);
+    expect(error).toBeInstanceOf(TenantSelectionChangedError);
+  });
+
+  test("a pending scope source refuses before dialing — no read on a guess", async () => {
+    const store = createTenancyStore({
+      userId: undefined,
+      storage: memoryStorage(),
+    });
+    const scoped = createScopedFetch({
+      store,
+      fetchLike: async () => {
+        throw new Error("must not dial");
+      },
+    });
+    const error = await capture(scoped("/api/agents"));
+    expect(String(error)).toContain("scope source has not answered");
+  });
+});
+
+// ---------------------------------------------------------------------------
+// AC2: a switch tears the old subscription down and the old media cache is not served
+// ---------------------------------------------------------------------------
+
+describe("createScopeBoundStream", () => {
+  function harness() {
+    const store = createTenancyStore({
+      userId: "user-1",
+      storage: memoryStorage(),
+    });
+    const opened: string[] = [];
+    const closed: string[] = [];
+    const stream = createScopeBoundStream({
+      store,
+      open: (url) => {
+        opened.push(url);
+        return {
+          close: () => {
+            closed.push(url);
+          },
+        };
+      },
+    });
+    return { store, stream, opened, closed };
+  }
+
+  test("opens under the current pair; refuses while the scope source is pending", async () => {
+    const pending = createTenancyStore({
+      userId: undefined,
+      storage: memoryStorage(),
+    });
+    const stream = createScopeBoundStream({
+      store: pending,
+      open: () => {
+        throw new Error("must not open");
+      },
+    });
+    expect(stream.reopen("/api/workshop/turn/1")).toEqual({
+      refused: "scope-pending",
+    });
+
+    const { store, stream: live, opened } = harness();
+    await store.selectScope(ACME);
+    const opened0 = live.reopen("/api/workshop/turn/1");
+    expect(opened0).toMatchObject({ generation: expect.any(Number) });
+    expect(opened[0]).toBe(
+      "/api/workshop/turn/1?x-openbot-tenant=acme&x-openbot-workspace=acme-finance",
+    );
+  });
+
+  test("a switch cancels the old subscription and the next open carries the NEW pair (AC2/AC4)", async () => {
+    const { store, stream, opened, closed } = harness();
+    await store.selectScope(ACME);
+    stream.reopen("/api/workshop/turn/1");
+    const keyBefore = stream.openedKey();
+
+    await store.selectScope(GLOBEX);
+    // The teardown signal, as the app's effect reads it: the live connection was opened under a
+    // key the store has since left. The wrapper still names the old key — that IS the staleness.
+    const scopeNow = store.scope();
+    expect(scopeNow.status).toBe("open");
+    if (scopeNow.status === "open") {
+      expect(scopeNow.key).not.toBe(keyBefore);
+    }
+    expect(stream.openedKey()).toBe(keyBefore);
+    // Reopening under the moved scope closes the old connection and carries the NEW pair.
+    stream.reopen("/api/workshop/turn/1");
+    expect(closed).toHaveLength(1);
+    expect(opened[1]).toBe(
+      "/api/workshop/turn/1?x-openbot-tenant=globex&x-openbot-workspace=globex-ops",
+    );
+    expect(stream.openedKey()).not.toBe(keyBefore);
+  });
+
+  test("a late frame from a torn-down connection is refused by the generation rule", async () => {
+    const { store, stream } = harness();
+    await store.selectScope(ACME);
+    const { generation } = stream.reopen("/api/workshop/turn/1") as {
+      generation: number;
+    };
+    expect(stream.frameStillCurrent(generation)).toBe(true);
+    await store.selectScope(GLOBEX);
+    // The frame's connection was opened under the old generation: dropped, not applied.
+    expect(stream.frameStillCurrent(generation)).toBe(false);
+  });
+
+  test("a reconnect after a dropped line re-reads the CURRENT selection, never a default", async () => {
+    const { store, stream, opened } = harness();
+    await store.selectScope(ACME);
+    stream.reopen("/api/workshop/turn/1");
+    // The line drops; while it is down, the person switches scope.
+    await store.selectScope(GLOBEX);
+    stream.reopen("/api/workshop/turn/1");
+    expect(opened[1]).toContain("x-openbot-tenant=globex");
+    // And with no selection at all, the reconnected stream carries no pair at all — not a default.
+    await store.selectScope(null);
+    stream.reopen("/api/workshop/turn/1");
+    expect(opened[2]).toBe("/api/workshop/turn/1");
+  });
+});
+
+// ---------------------------------------------------------------------------
+// AC2, the media half: the old scope's media cache is not served after a switch
+// ---------------------------------------------------------------------------
+
+describe("scoped media cache", () => {
+  test("one URI is one entry per scope; after a switch the old scope's media is absent", async () => {
+    const store = createTenancyStore({
+      userId: "user-1",
+      storage: memoryStorage(),
+    });
+    await store.selectScope(ACME);
+    writeMediaCache(store, "/api/craft/file/1/media", { bytes: "acme-bytes" });
+    expect(readMediaCache<{ bytes: string }>(store, "/api/craft/file/1/media")).toEqual({
+      status: "present",
+      value: { bytes: "acme-bytes" },
+    });
+
+    await store.selectScope(GLOBEX);
+    // The same URI under the new scope is a miss — the old company's media does not display.
+    expect(readMediaCache(store, "/api/craft/file/1/media")).toEqual({
+      status: "absent",
+    });
+    writeMediaCache(store, "/api/craft/file/1/media", { bytes: "globex-bytes" });
+    expect(readMediaCache<{ bytes: string }>(store, "/api/craft/file/1/media")).toEqual({
+      status: "present",
+      value: { bytes: "globex-bytes" },
+    });
+
+    // The personal context is its own shelf, in both directions.
+    await store.selectScope(null);
+    expect(readMediaCache(store, "/api/craft/file/1/media")).toEqual({
+      status: "absent",
+    });
+  });
+
+  test("the media key names the scope beside the URI", async () => {
+    const store = createTenancyStore({
+      userId: "user-1",
+      storage: memoryStorage(),
+    });
+    await store.selectScope(ACME);
+    expect(mediaCacheKey(store, "/media/1")).toBe(
+      "media:acme/acme-finance:/media/1",
+    );
+    await store.selectScope(null);
+    expect(mediaCacheKey(store, "/media/1")).toBe("media:personal:/media/1");
+  });
+});
+
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+
+async function capture(
+  run: Promise<unknown> | (() => Promise<unknown>),
+): Promise<unknown> {
+  try {
+    await (typeof run === "function" ? run() : run);
+    return null;
+  } catch (error) {
+    return error;
+  }
+}
diff --git a/apps/mobile/src/openbot/transport.ts b/apps/mobile/src/openbot/transport.ts
new file mode 100644
index 000000000..e4af77287
--- /dev/null
+++ b/apps/mobile/src/openbot/transport.ts
@@ -0,0 +1,409 @@
+/*
+ * The mobile tenancy adapter's transport half, MT105 (Issue #148).
+ *
+ * THE RULES ARE THE WEB TRANSPORT'S, in both registers. The REST register is `client.ts`'s: the
+ * selection pair rides as HEADERS (`x-openbot-tenant`, `x-openbot-workspace`) on reviewed
+ * same-origin business paths only — a closed inventory, each entry owned by the ticket that
+ * reviewed it, never widened by accident. The stream register is `stream-scope.ts`'s: a streaming
+ * connection cannot carry request headers (an SSE read, a WebSocket upgrade), so on those surfaces
+ * the SAME pair rides the URL's query under the same two names, on the same kind of closed
+ * inventory — one vocabulary, so the server-side wiring (MT125) reads one set of names wherever
+ * the connection came from.
+ *
+ * THE LIFECYCLE HALF IS THE TICKET'S REAL SUBJECT, as it was MT082's: a stream that outlives its
+ * scope is a pipe pushing one company's events into a screen that has moved on, and a media cache
+ * that outlives its scope is yesterday's company file one tap away. So every business connection
+ * this module serves is bound to the tenancy store's live scope: it opens only once the scope
+ * source has resolved (never on a guess), is torn down when the scope moves, re-reads the CURRENT
+ * selection at every (re)connect — a dropped line that comes back answers under the scope that is
+ * current THEN, never a defaulted one (spec A6) — and every answer is checked against the
+ * generation it left under, so an in-flight response that lands after a switch is refused rather
+ * than applied (the same `stillCurrent` rule the web streams and caches share).
+ */
+
+import { type ScopeSelection, type TenancyStore } from "./tenancy";
+
+/** The header names, identical to the web client's — one vocabulary across clients. */
+export const TENANT_HEADER = "x-openbot-tenant";
+export const WORKSPACE_HEADER = "x-openbot-workspace";
+
+/** One reviewed REST path the selection pair may ride as headers. */
+export interface ScopeHeaderPathEntry {
+  readonly id: string;
+  readonly prefix: string;
+  readonly reason: string;
+  readonly ownerTicket: string;
+}
+
+/**
+ * The closed inventory of reviewed same-origin REST paths the mobile client may carry the
+ * selection pair on (MT105 / Issue #148).
+ *
+ * The families are the same ones the web client's inventory reviews (`client.ts`, MT081 onward):
+ * the mobile app is another client of the same deployment API, so the review that admitted a
+ * family on the web admits the mobile client onto it — and a family neither ticket reviewed stays
+ * undecorated until one does. Widening this list is a review, not an accident.
+ */
+export const SCOPE_HEADER_ALLOWED_PATHS: readonly ScopeHeaderPathEntry[] = [
+  {
+    id: "enterprise-api",
+    prefix: "/api/enterprise/",
+    reason:
+      "the enterprise API is the scope middleware's own surface: it resolves the selection pair into a trusted scope (MT005 ruling #1 — the headers only select; database membership decides)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "agents-rest",
+    prefix: "/api/agents",
+    reason:
+      "the coworker surface's reads and writes, the same family the web review admitted (MT084); the server consumes the pair when the legacy assembly reads it (MT125)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "team-bots-rest",
+    prefix: "/api/team-bots",
+    reason:
+      "the Team Bot publication surface, the same family the web review admitted (MT085)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "approvals-rest",
+    prefix: "/api/approvals",
+    reason:
+      "the approval surface, the same family the web review admitted (MT086)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "responsibilities-rest",
+    prefix: "/api/responsibilities",
+    reason:
+      "the standing-responsibility surface, the same family the web review admitted (MT086)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "computers-rest",
+    prefix: "/api/computers",
+    reason:
+      "the computer surface — the fleet, its action boundary and the live screen it streams, the same family the web review admitted (MT086)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "channels-rest",
+    prefix: "/api/channels",
+    reason:
+      "the conversation surface — roster, detail, attachments and member writes, the same family the web review admitted (MT087)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "groups-rest",
+    prefix: "/api/groups",
+    reason:
+      "the group-conversation surface, the same family the web review admitted (MT087)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "plugins-rest",
+    prefix: "/api/plugins",
+    reason:
+      "the plugin surface, the same family the web review admitted (MT088)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "memory-rest",
+    prefix: "/api/memory",
+    reason:
+      "the personal/company memory surface, the same family the web review admitted",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "routines-rest",
+    prefix: "/api/routines",
+    reason:
+      "the routine surface, the same family the web review admitted",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "craft-rest",
+    prefix: "/api/craft",
+    reason:
+      "the craft surface — sessions, files, artifacts and their downloads, the same family the web review admitted",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "workshop-rest",
+    prefix: "/api/workshop",
+    reason:
+      "the workshop surface — turns, artifacts and their uploads/downloads, the same family the web review admitted",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "marketplace-rest",
+    prefix: "/api/marketplace",
+    reason:
+      "the marketplace surface, the same family the web review admitted",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "components-rest",
+    prefix: "/api/components",
+    reason:
+      "the component surface, the same family the web review admitted",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "billing-rest",
+    prefix: "/api/billing",
+    reason:
+      "the billing surface, the same family the web review admitted (MT097)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "voice-mobile-aggregate-rest",
+    prefix: "/api/voice/mobile",
+    reason:
+      "the mobile aggregation snapshot surface — the BFF shape MT066's readMobileAggregate answers behind the voice family, whose every sub-query must answer under the scope the client currently holds. The review admitting the family is MT107's own ticket; the server's HTTP wiring of the exact route lands with MT125, and the client pair rides the moment it does",
+    ownerTicket: "MT107",
+  },
+];
+
+/** One reviewed stream path the selection pair may ride as query parameters. */
+export interface ScopeStreamPathEntry {
+  readonly id: string;
+  readonly prefix: string;
+  readonly reason: string;
+  readonly ownerTicket: string;
+}
+
+/**
+ * The closed inventory of reviewed same-origin stream paths the mobile client may carry the
+ * selection pair on — the same five connection families the web inventory reviews (MT082),
+ * because the mobile app opens the same streams against the same deployment.
+ */
+export const SCOPE_STREAM_ALLOWED_PATHS: readonly ScopeStreamPathEntry[] = [
+  {
+    id: "workshop-turn-events",
+    prefix: "/api/workshop/",
+    reason:
+      "the workshop turn stream: an SSE read, which cannot carry request headers, so the pair rides the query on the one URL family this stream opens",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "craft-turn-events",
+    prefix: "/api/craft/",
+    reason:
+      "the craft session's turn and scheduled-run stream reads: same connection family as the workshop stream",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "channel-roster-events",
+    prefix: "/api/channels/events",
+    reason:
+      "the channel roster's event stream: an upgrade or SSE read, which cannot carry request headers, so the pair rides the query",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "computer-screen-stream",
+    prefix: "/api/computers/",
+    reason:
+      "the live computer screen stream: an upgrade request, which cannot carry request headers, so the pair rides the query",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "voice-call-establishment",
+    prefix: "/api/voice/calls",
+    reason:
+      "the POST that establishes a voice call — the stream's subscription moment; the realtime socket it returns is a third-party origin and never receives the pair",
+    ownerTicket: "MT105",
+  },
+];
+
+/** Whether a path is same-origin shaped for this client: a root-relative path, not protocol-relative. */
+function sameOriginPath(path: string): boolean {
+  return path.startsWith("/") && !path.startsWith("//");
+}
+
+/**
+ * The header half of the pair, for REST-shaped requests (fetch can carry headers).
+ *
+ * `null` (personal context: no company/team selected) attaches NOTHING — a missing selection is
+ * carried as absent, never defaulted. A path outside the inventory, or one that is not a
+ * same-origin relative path, is left undecorated: the pair must not leak onto a surface no ticket
+ * reviewed (AC1).
+ */
+export function scopeHeaders(
+  path: string,
+  selection: ScopeSelection | null,
+): Record<string, string> | null {
+  if (selection === null) return null;
+  if (!sameOriginPath(path)) return null;
+  const bare = path.split("?")[0] as string;
+  if (
+    !SCOPE_HEADER_ALLOWED_PATHS.some((entry) => bare.startsWith(entry.prefix))
+  ) {
+    return null;
+  }
+  return {
+    [TENANT_HEADER]: selection.tenantId,
+    [WORKSPACE_HEADER]: selection.workspaceId,
+  };
+}
+
+/**
+ * The query half of the pair, for stream-shaped connections (SSE reads and WebSocket upgrades
+ * cannot carry request headers).
+ *
+ * Same gates as `scopeHeaders`: same-origin relative paths on the reviewed stream inventory only,
+ * existing query parameters preserved (a stream's resume cursor rides the same URL), and a `null`
+ * selection changes nothing at all.
+ */
+export function withStreamScope(
+  path: string,
+  selection: ScopeSelection | null,
+): string {
+  if (selection === null) return path;
+  if (!sameOriginPath(path)) return path;
+  const queryAt = path.indexOf("?");
+  const bare = queryAt === -1 ? path : path.slice(0, queryAt);
+  if (
+    !SCOPE_STREAM_ALLOWED_PATHS.some((entry) => bare.startsWith(entry.prefix))
+  ) {
+    return path;
+  }
+  const pair =
+    `${TENANT_HEADER}=${encodeURIComponent(selection.tenantId)}` +
+    `&${WORKSPACE_HEADER}=${encodeURIComponent(selection.workspaceId)}`;
+  return queryAt === -1 ? `${path}?${pair}` : `${path}&${pair}`;
+}
+
+/**
+ * The typed refusal an answer earns when it outlived its scope — the mobile name for the web's
+ * `TenantSelectionChangedError`, message included: an answer that arrives after the switch is
+ * dropped, never applied to the scope that replaced the one it was asked under (AC3).
+ */
+export class TenantSelectionChangedError extends Error {
+  constructor() {
+    super("That answer outlived the tenant it was asked under.");
+    this.name = "TenantSelectionChangedError";
+  }
+}
+
+/**
+ * One scope-bound fetch: the pair rides the URL as headers (REST) or query (streams) per the two
+ * inventories, and the answer is refused on arrival if the generation moved while it was in
+ * flight.
+ *
+ * `fetchLike` is injected (the app's fetch, a test's stand-in) so the rule runs identically in CI
+ * with no runtime beneath it. A pending scope source refuses before dialing: a business read is
+ * not established on a guess.
+ */
+export function createScopedFetch(options: {
+  store: TenancyStore;
+  fetchLike: (input: string, init?: { headers?: Record<string, string> }) => Promise<Response>;
+}): (
+  path: string,
+  init?: { headers?: Record<string, string> },
+) => Promise<Response> {
+  return async (path, init) => {
+    const scope = options.store.scope();
+    if (scope.status === "pending") {
+      throw new Error("The scope source has not answered yet.");
+    }
+    const at = scope.generation;
+    const headers = scopeHeaders(path, scope.selection);
+    const streamPath = withStreamScope(path, scope.selection);
+    const response = await options.fetchLike(streamPath, {
+      ...init,
+      ...(headers === null ? {} : { headers: { ...init?.headers, ...headers } }),
+    });
+    if (!options.store.stillCurrent(at)) {
+      throw new TenantSelectionChangedError();
+    }
+    return response;
+  };
+}
+
+/**
+ * A stream subscription bound to the live scope (AC2/AC4).
+ *
+ * `open(url)` is the app's connection factory (its EventSource/WebSocket adapter); this wrapper
+ * owns WHEN it opens and when it tears down: never while the scope source is pending, always
+ * under the CURRENT selection at (re)connect — never a defaulted one — and torn down the moment
+ * the scope key moves (a pair change or a generation advance, i.e. a switch anywhere), with the
+ * old connection's late frames dropped by the generation check `frameStillCurrent`.
+ *
+ * The app drives reconnects itself (its runtime owns backoff); every reconnect calls `reopen()`,
+ * which re-reads the scope world fresh — a dropped line that comes back answers under the scope
+ * that is current THEN (AC4).
+ */
+export function createScopeBoundStream(options: {
+  store: TenancyStore;
+  open: (url: string) => { close: () => void };
+}): {
+  /** Open (or reopen) under the current scope; refuses while the scope source is pending. */
+  reopen: (path: string) => { url: string; generation: number } | { refused: "scope-pending" };
+  /** Tear the live connection down, if one is open. */
+  close: () => void;
+  /** The scope key the live connection was opened under, for change detection. */
+  openedKey: () => string | null;
+  /** Whether a frame from the live connection may still be applied (the generation rule). */
+  frameStillCurrent: (generation: number) => boolean;
+} {
+  let live: { connection: { close: () => void }; key: string; generation: number } | null = null;
+  return {
+    reopen(path) {
+      const scope = options.store.scope();
+      if (scope.status === "pending") return { refused: "scope-pending" };
+      // Reconnects answer under the CURRENT selection — never the one the dropped line had.
+      live?.connection.close();
+      const url = withStreamScope(path, scope.selection);
+      live = {
+        connection: options.open(url),
+        key: scope.key,
+        generation: scope.generation,
+      };
+      return { url, generation: scope.generation };
+    },
+    close() {
+      live?.connection.close();
+      live = null;
+    },
+    openedKey() {
+      return live?.key ?? null;
+    },
+    frameStillCurrent(generation) {
+      // A frame from a connection opened at `generation` may not decorate a screen whose scope
+      // has since moved — the belt for a frame already in flight through the teardown.
+      return live !== null && live.generation === generation && options.store.stillCurrent(generation);
+    },
+  };
+}
+
+/**
+ * The media cache key for one URI: names the user's scope beside the URI itself, so the same
+ * company file cached under two scopes is two entries, and an entry filed under one scope is
+ * simply not found after a switch (AC2: the old scope's media is no longer served).
+ *
+ * Filed through the tenancy store's own bucket (the same prefix a switch drops wholesale), so
+ * media isolation rides the SAME removal discipline as every other business entry — no second
+ * cache to keep in step.
+ */
+export function mediaCacheKey(store: TenancyStore, uri: string): string {
+  return `media:${store.cachePrefix()}:${uri}`;
+}
+
+/** Read one URI's cached media bytes through the store (absent after a switch, by the store's rule). */
+export function readMediaCache<T>(
+  store: TenancyStore,
+  uri: string,
+): { status: "present"; value: T } | { status: "absent" } {
+  return store.read<T>(mediaCacheKey(store, uri));
+}
+
+/** Cache one URI's media under the current scope only. */
+export function writeMediaCache(
+  store: TenancyStore,
+  uri: string,
+  value: unknown,
+): void {
+  store.write(mediaCacheKey(store, uri), value);
+}

From 1b1994469fb8ba122e76cfbbdb8789fd4dc858bb Mon Sep 17 00:00:00 2001
From: wuyj <wuyj@yinhai.com>
Date: Fri, 23 Oct 2026 00:09:50 +0800
Subject: [PATCH 6/7] =?UTF-8?q?test:=20=E6=B7=BB=E5=8A=A0=E7=A7=BB?=
 =?UTF-8?q?=E5=8A=A8=E7=AB=AF=E5=A4=9A=E7=A7=9F=E6=88=B7=E7=9B=B8=E5=85=B3?=
 =?UTF-8?q?=E7=9A=84=E6=B5=8B=E8=AF=95=E6=96=87=E4=BB=B6=EF=BC=88MT104-MT1?=
 =?UTF-8?q?07=EF=BC=89?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 apps/mobile/src/openbot/aggregation.test.ts   | 330 ++++++++++++++
 apps/mobile/src/openbot/tenancy.test.ts       | 337 ++++++++++++++
 apps/mobile/src/openbot/tenancy.ts            | 421 ++++++++++++++++++
 .../openbot/three-client-selection.test.ts    | 392 ++++++++++++++++
 apps/mobile/src/openbot/transport.test.ts     | 349 +++++++++++++++
 apps/mobile/src/openbot/transport.ts          | 409 +++++++++++++++++
 6 files changed, 2238 insertions(+)
 create mode 100644 apps/mobile/src/openbot/aggregation.test.ts
 create mode 100644 apps/mobile/src/openbot/tenancy.test.ts
 create mode 100644 apps/mobile/src/openbot/tenancy.ts
 create mode 100644 apps/mobile/src/openbot/three-client-selection.test.ts
 create mode 100644 apps/mobile/src/openbot/transport.test.ts
 create mode 100644 apps/mobile/src/openbot/transport.ts

diff --git a/apps/mobile/src/openbot/aggregation.test.ts b/apps/mobile/src/openbot/aggregation.test.ts
new file mode 100644
index 000000000..0ba7fa836
--- /dev/null
+++ b/apps/mobile/src/openbot/aggregation.test.ts
@@ -0,0 +1,330 @@
+// MT107 (Issue #150): the mobile aggregation surface answers under the scope the
+// client CURRENTLY holds — every sub-query of it — and the streaming and media
+// transports keep the same discipline across three clients.
+//
+// Two halves, one per ticket AC group:
+//
+//   The AGGREGATION half is client-side here. The aggregation snapshot (MT066's
+//   readMobileAggregate: voice sessions, dictation usage, push devices — three sub-queries)
+//   is read through the scoped transport: the request carries the current selection pair as
+//   headers on the reviewed mobile-aggregation family (the inventory entry MT107's review
+//   admits in transport.ts), an EMPTY scope is carried as absent (never a defaulted pair),
+//   and each sub-collection lands only while the generation it left under still stands — a
+//   switch mid-snapshot refuses the rest and drops what landed. The SERVER half of
+//   "every sub-query returns only the current scope" is MT066's own suite
+//   (server/tests/multitenancy/voice-mobile-bff.test.ts, real PostgreSQL + restricted roles);
+//   this round's run record for it lives in the parent worktree's .archive run (see the run
+//   report), so both halves are independently re-checkable.
+//
+//   The STREAM/MEDIA half re-runs MT105's lifecycle rules AT the three clients over one
+//   identity matrix (same shape as three-client-selection.test.ts): a stream opens with the
+//   current pair in its query, its late frames die with a switch, a reconnect answers under
+//   the scope current THEN, and media never crosses a scope.
+//
+// Platform deltas are recorded, not guessed at: device and simulator runs are explicitly
+// UNVERIFIED in the parent worktree's run report (the ticket's own note); this file runs the
+// whole matrix in CI with no runtime beneath it.
+//
+// Rerun: bun test apps/openmuse/apps/mobile/src/openbot/aggregation.test.ts
+
+import { describe, expect, test } from "bun:test";
+
+import {
+  createTenancyStore,
+  type ScopeSelection,
+  type ScopeStorage,
+} from "./tenancy";
+import {
+  createScopedFetch,
+  createScopeBoundStream,
+  mediaCacheKey,
+  readMediaCache,
+  TENANT_HEADER,
+  TenantSelectionChangedError,
+  WORKSPACE_HEADER,
+  writeMediaCache,
+  withStreamScope,
+} from "./transport";
+
+const USER = "user-1";
+const ACME: ScopeSelection = { tenantId: "acme", workspaceId: "acme-finance" };
+const GLOBEX: ScopeSelection = { tenantId: "globex", workspaceId: "globex-ops" };
+
+/** The aggregation snapshot's shape, mirroring MT066's ScopedMobileAggregate sub-collections. */
+type AggregateSnapshot = {
+  voiceSessions: { sessionId: string; tenantId: string }[];
+  dictationUsage: { id: string; tenantId: string }[];
+  pushDevices: { deviceId: string; tenantId: string }[];
+};
+
+function snapshotOf(tenantId: string): AggregateSnapshot {
+  return {
+    voiceSessions: [{ sessionId: `${tenantId}-session`, tenantId }],
+    dictationUsage: [{ id: `${tenantId}-usage`, tenantId }],
+    pushDevices: [{ deviceId: `${tenantId}-device`, tenantId }],
+  };
+}
+
+const AGGREGATE_PATH = "/api/voice/mobile/aggregate";
+
+const CLIENTS = ["web-mirror", "ios", "android"] as const;
+type ClientName = (typeof CLIENTS)[number];
+
+/** One whole client: its own store, storage slot, scoped fetch and a recording transport. */
+function clientWorld(name: ClientName) {
+  const storage = memoryStorage();
+  const store = createTenancyStore({ userId: USER, storage });
+  const calls: Array<{ url: string; headers: Record<string, string> }> = [];
+  const fetch = createScopedFetch({
+    store,
+    fetchLike: async (url, init) => {
+      calls.push({ url, headers: { ...(init?.headers ?? {}) } });
+      return jsonResponse(200, snapshotOf(scopeTenantOf(url, init?.headers)));
+    },
+  });
+  return { name, storage, store, fetch, calls };
+}
+
+/** What the server would have answered: the scope the request actually arrived under. */
+function scopeTenantOf(
+  url: string,
+  headers?: Record<string, string>,
+): string {
+  return headers?.[TENANT_HEADER] ?? new URL(`https://x.test${url}`).searchParams.get(TENANT_HEADER) ?? "personal";
+}
+
+/**
+ * The aggregation read as the app consumes it: one scoped request, then the snapshot's three
+ * sub-collections landing one by one — each write gated by the generation the request left
+ * under, so a switch anywhere in the snapshot refuses everything not yet landed (and the
+ * store's own switch has already dropped whatever did land).
+ */
+async function landAggregate(
+  world: ReturnType<typeof clientWorld>,
+  betweenSubqueries?: () => Promise<void> | void,
+): Promise<{ landed: string[] }> {
+  const at = world.store.generationNow();
+  const response = await world.fetch(AGGREGATE_PATH);
+  const snapshot = (await response.json()) as AggregateSnapshot;
+  const landed: string[] = [];
+  for (const [key, rows] of [
+    ["aggregate:voice-sessions", snapshot.voiceSessions],
+    ["aggregate:dictation-usage", snapshot.dictationUsage],
+    ["aggregate:push-devices", snapshot.pushDevices],
+  ] as const) {
+    await betweenSubqueries?.();
+    if (!world.store.stillCurrent(at)) {
+      // The same refusal the scoped fetch raises for a whole answer, raised here per
+      // sub-query: a sub-collection may not land into a scope it was not asked under.
+      return Promise.reject(new TenantSelectionChangedError());
+    }
+    world.store.write(key, rows);
+    landed.push(key);
+  }
+  return { landed };
+}
+
+// ---------------------------------------------------------------------------
+// AC1: the aggregation request and every sub-query answer under the current
+//      scope — including the empty scope
+// ---------------------------------------------------------------------------
+
+describe("MT107 AC1 the aggregation surface carries the current scope", () => {
+  test("the request carries the CURRENT pair — per request, on every client", async () => {
+    for (const name of CLIENTS) {
+      const world = clientWorld(name);
+      await world.store.selectScope(ACME);
+      await landAggregate(world);
+      expect(world.calls[0]?.headers[TENANT_HEADER]).toBe("acme");
+      expect(world.calls[0]?.headers[WORKSPACE_HEADER]).toBe("acme-finance");
+      // The pair is read per request: after a switch, the next aggregation reads Globex.
+      await world.store.selectScope(GLOBEX);
+      await landAggregate(world);
+      expect(world.calls[1]?.headers[TENANT_HEADER]).toBe("globex");
+      expect(world.calls[1]?.headers[WORKSPACE_HEADER]).toBe("globex-ops");
+    }
+  });
+
+  test("a switch mid-snapshot refuses the un-landed sub-queries and drops the landed", async () => {
+    for (const name of CLIENTS) {
+      const world = clientWorld(name);
+      await world.store.selectScope(ACME);
+      let switched = false;
+      const outcome = await capture(() =>
+        landAggregate(world, async () => {
+          // The switch lands after the first sub-collection, before the second.
+          if (!switched) {
+            switched = true;
+            await world.store.selectScope(GLOBEX);
+          }
+        }),
+      );
+      expect(outcome).toBeInstanceOf(TenantSelectionChangedError);
+      // Nothing of the Acme snapshot survived: the landed sub-collection went with the
+      // switch's bucket drop, and the un-landed ones never wrote anywhere.
+      expect(world.store.read("aggregate:voice-sessions").status).toBe("absent");
+      expect(world.store.read("aggregate:dictation-usage").status).toBe("absent");
+      expect(world.store.read("aggregate:push-devices").status).toBe("absent");
+      // The Globex bucket is clean too: a late sub-query may not land into the scope that
+      // replaced the one it was asked under.
+      await world.store.selectScope(ACME);
+      expect(world.store.read("aggregate:voice-sessions").status).toBe("absent");
+    }
+  });
+
+  test("the empty scope is carried as absent — never a defaulted pair — and lands on the personal shelf", async () => {
+    for (const name of CLIENTS) {
+      const world = clientWorld(name);
+      // No selection: the request carries NO pair at all, and the answer is the personal
+      // context's own (the server keys an undecorated request to the caller's personal
+      // scope — a missing selection is carried as missing, MT104's rule, on the wire).
+      await landAggregate(world);
+      expect(TENANT_HEADER in (world.calls[0]?.headers ?? {})).toBe(false);
+      expect(WORKSPACE_HEADER in (world.calls[0]?.headers ?? {})).toBe(false);
+      expect(world.store.read("aggregate:voice-sessions").status).toBe("present");
+      // A later scoped read never sees the personal shelf's aggregate, in either direction.
+      await world.store.selectScope(ACME);
+      expect(world.store.read("aggregate:voice-sessions").status).toBe("absent");
+      await world.store.selectScope(null);
+      expect(world.store.read("aggregate:voice-sessions").status).toBe("absent");
+    }
+  });
+});
+
+// ---------------------------------------------------------------------------
+// AC2: streaming requests carry the right scope; an old connection is
+//      cancelled and its late frames refused
+// ---------------------------------------------------------------------------
+
+describe("MT107 AC2 streams carry the current scope and die with a switch", () => {
+  test("the stream URL carries the current pair; a switch cancels the line and its late frames", async () => {
+    for (const name of CLIENTS) {
+      const world = clientWorld(name);
+      const opened: Array<{ url: string; closed: () => void }> = [];
+      const stream = createScopeBoundStream({
+        store: world.store,
+        open: (url) => {
+          const connection = { closed: false, close: () => { connection.closed = true; } };
+          opened.push({ url, closed: () => connection.closed });
+          return connection;
+        },
+      });
+      await world.store.selectScope(ACME);
+      const first = stream.reopen("/api/voice/calls/live");
+      if ("refused" in first) throw new Error("expected an open, not a refusal");
+      expect(first.url).toContain(`${TENANT_HEADER}=acme`);
+      expect(first.url).toContain(`${WORKSPACE_HEADER}=acme-finance`);
+      expect(stream.openedKey()).toContain("acme/acme-finance");
+
+      // A frame from the live connection may land while the scope stands…
+      expect(stream.frameStillCurrent(first.generation)).toBe(true);
+      // …and the switch kills it: late frames are refused by the generation rule.
+      await world.store.selectScope(GLOBEX);
+      expect(stream.frameStillCurrent(first.generation)).toBe(false);
+
+      // Reconnect answers under the scope that is current THEN, and the old line is closed.
+      const second = stream.reopen("/api/voice/calls/live");
+      if ("refused" in second) throw new Error("expected an open, not a refusal");
+      expect(second.url).toContain(`${TENANT_HEADER}=globex`);
+      expect(second.url).toContain(`${WORKSPACE_HEADER}=globex-ops`);
+      const firstLineClosed = opened[0].closed();
+      expect(firstLineClosed).toBe(true);
+      expect(stream.frameStillCurrent(second.generation)).toBe(true);
+    }
+  });
+
+  test("a pending scope source refuses before dialing, on every client", () => {
+    const store = createTenancyStore({ userId: undefined, storage: memoryStorage() });
+    let dialed = 0;
+    const stream = createScopeBoundStream({
+      store,
+      open: () => {
+        dialed += 1;
+        return { close: () => {} };
+      },
+    });
+    expect(stream.reopen("/api/voice/calls/live")).toEqual({
+      refused: "scope-pending",
+    });
+    expect(dialed).toBe(0);
+  });
+
+  test("the stream scope rides the query with the resume cursor preserved", () => {
+    const url = withStreamScope("/api/voice/calls/live?cursor=42", ACME);
+    expect(url).toContain("cursor=42");
+    expect(url).toContain(`${TENANT_HEADER}=acme`);
+    expect(url).toContain(`${WORKSPACE_HEADER}=acme-finance`);
+    // An empty selection changes nothing at all.
+    expect(withStreamScope("/api/voice/calls/live?cursor=42", null)).toBe(
+      "/api/voice/calls/live?cursor=42",
+    );
+  });
+});
+
+// ---------------------------------------------------------------------------
+// AC3: media never crosses a scope, on every client
+// ---------------------------------------------------------------------------
+
+describe("MT107 AC3 media does not cross scopes", () => {
+  test("one URI is one entry per scope, and a switch makes the old entry unreachable", async () => {
+    for (const name of CLIENTS) {
+      const world = clientWorld(name);
+      const URI = "/api/craft/file/1/media";
+      await world.store.selectScope(ACME);
+      writeMediaCache(world.store, URI, { bytes: "acme-bytes" });
+      expect(readMediaCache<{ bytes: string }>(world.store, URI)).toEqual({
+        status: "present",
+        value: { bytes: "acme-bytes" },
+      });
+
+      await world.store.selectScope(GLOBEX);
+      // The Acme media is simply not found — never served beside Globex's own.
+      expect(readMediaCache(world.store, URI)).toEqual({ status: "absent" });
+      writeMediaCache(world.store, URI, { bytes: "globex-bytes" });
+      expect(readMediaCache<{ bytes: string }>(world.store, URI)).toEqual({
+        status: "present",
+        value: { bytes: "globex-bytes" },
+      });
+
+      // The personal context is its own shelf, in both directions.
+      await world.store.selectScope(null);
+      expect(readMediaCache(world.store, URI)).toEqual({ status: "absent" });
+
+      // The media key names the scope beside the URI (the isolation is in the key).
+      await world.store.selectScope(ACME);
+      expect(mediaCacheKey(world.store, URI)).toBe(
+        `media:acme/acme-finance:${URI}`,
+      );
+    }
+  });
+});
+
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+
+function memoryStorage(seed: Record<string, string> = {}): ScopeStorage {
+  const slots = new Map(Object.entries(seed));
+  return {
+    getItem: (key: string) => slots.get(key) ?? null,
+    setItem: (key: string, value: string) => {
+      slots.set(key, value);
+    },
+  };
+}
+
+function jsonResponse(status: number, body: unknown): Response {
+  return new Response(JSON.stringify(body), {
+    status,
+    headers: { "content-type": "application/json" },
+  });
+}
+
+async function capture(run: () => Promise<unknown>): Promise<unknown> {
+  try {
+    await run();
+    return null;
+  } catch (error) {
+    return error;
+  }
+}
diff --git a/apps/mobile/src/openbot/tenancy.test.ts b/apps/mobile/src/openbot/tenancy.test.ts
new file mode 100644
index 000000000..722a11b25
--- /dev/null
+++ b/apps/mobile/src/openbot/tenancy.test.ts
@@ -0,0 +1,337 @@
+// MT104 (Issue #147): the mobile tenancy adapter's selection and cache half, pinned against the
+// WEB side's contract. Every behavior here has its twin in the web suites
+// (app/tests/multitenancy/selection.test.tsx, cache-generation.test.tsx): the same six kinds, the
+// same refusal mapping, the same URL-authority and never-default rules, the same
+// one-generation/one-removal switch. The file imports nothing but bun:test and the adapter — no
+// React Native, no app runtime — which is AC4: the adapter layer's tests run in CI independently.
+
+import { describe, expect, test } from "bun:test";
+
+import {
+  createTenancyStore,
+  type ScopeSelection,
+  type ScopeStorage,
+  selectionFromSources,
+  selectionState,
+  selectionStorageKey,
+  readStoredSelection,
+  readWorkspaceScopeListing,
+  scopeRefusalOf,
+  storeSelection,
+  WorkspaceScopeRefusedError,
+} from "./tenancy";
+
+const USER = "user-1";
+const ACME: ScopeSelection = { tenantId: "acme", workspaceId: "acme-finance" };
+const ACME_OPS: ScopeSelection = { tenantId: "acme", workspaceId: "acme-ops" };
+const GLOBEX: ScopeSelection = {
+  tenantId: "globex",
+  workspaceId: "globex-ops",
+};
+
+const LISTING = {
+  companies: [
+    {
+      tenantId: "acme",
+      name: "Acme",
+      role: "member",
+      memberEpoch: 7,
+      teams: [
+        { workspaceId: "acme-finance", name: "Finance" },
+        { workspaceId: "acme-ops", name: "Ops" },
+      ],
+    },
+    {
+      tenantId: "globex",
+      name: "Globex",
+      role: "member",
+      memberEpoch: 2,
+      teams: [{ workspaceId: "globex-ops", name: "Ops" }],
+    },
+  ],
+};
+
+/** An in-memory storage stand-in, so the persistence rules run the adapter's real code in CI. */
+function memoryStorage(seed: Record<string, string> = {}): ScopeStorage {
+  const slots = new Map(Object.entries(seed));
+  return {
+    getItem: (key: string) => slots.get(key) ?? null,
+    setItem: (key: string, value: string) => {
+      slots.set(key, value);
+    },
+  };
+}
+
+// ---------------------------------------------------------------------------
+// The listing read: refusal semantics identical to the web's
+// ---------------------------------------------------------------------------
+
+describe("readWorkspaceScopeListing", () => {
+  test("a listing answers as itself", async () => {
+    const listing = await readWorkspaceScopeListing(async () =>
+      jsonResponse(200, LISTING),
+    );
+    expect(listing.companies).toHaveLength(2);
+  });
+
+  test("a non-ok listing refuses with the server's own code", async () => {
+    const error = await capture(async () =>
+      readWorkspaceScopeListing(() =>
+        jsonResponse(403, { error: { code: "WORKSPACE_FORBIDDEN" } }),
+      ),
+    );
+    expect(error).toBeInstanceOf(WorkspaceScopeRefusedError);
+    const refusal = scopeRefusalOf(error);
+    expect(refusal?.status).toBe(403);
+    expect(refusal?.code).toBe("WORKSPACE_FORBIDDEN");
+  });
+
+  test("a broken body is malformed, never 'no companies'", async () => {
+    for (const body of ["not json", "{}", '{"companies": "acme"}', '{"companies": [{}]}']) {
+      const error = await capture(async () =>
+        readWorkspaceScopeListing(() => textResponse(200, body)),
+      );
+      expect(scopeRefusalOf(error)?.code).toBe("WORKSPACE_SCOPE_MALFORMED");
+    }
+  });
+
+  test("anything else thrown is not a scope refusal", () => {
+    expect(scopeRefusalOf(new Error("network died"))).toBeNull();
+    expect(scopeRefusalOf(null)).toBeNull();
+  });
+});
+
+// ---------------------------------------------------------------------------
+// The state machine: the web's six kinds
+// ---------------------------------------------------------------------------
+
+describe("selectionState", () => {
+  test("pending is loading; an error stays an error — infrastructure is not an authorization fact", () => {
+    expect(selectionState({ status: "pending" }, null)).toEqual({
+      kind: "loading",
+    });
+    expect(selectionState({ status: "error" }, ACME)).toEqual({ kind: "error" });
+  });
+
+  test("no eligible companies is the empty state", () => {
+    expect(
+      selectionState({ status: "success", listing: { companies: [] } }, null),
+    ).toEqual({ kind: "empty" });
+  });
+
+  test("eligible companies and no choice is ready — nothing is picked for the person", () => {
+    expect(
+      selectionState({ status: "success", listing: LISTING }, null),
+    ).toEqual({ kind: "ready" });
+  });
+
+  test("a listed pair is selected", () => {
+    const state = selectionState(
+      { status: "success", listing: LISTING },
+      ACME,
+    );
+    expect(state.kind).toBe("selected");
+    if (state.kind === "selected") {
+      expect(state.company.tenantId).toBe("acme");
+      expect(state.team.workspaceId).toBe("acme-finance");
+    }
+  });
+
+  test("a pair the listing no longer names is revoked — shown, never silently cleared", () => {
+    expect(
+      selectionState({ status: "success", listing: LISTING }, {
+        tenantId: "gone",
+        workspaceId: "gone-team",
+      }),
+    ).toEqual({ kind: "revoked", selection: { tenantId: "gone", workspaceId: "gone-team" } });
+    // A company that still exists but hid this team is revoked too, not re-homed.
+    expect(
+      selectionState({ status: "success", listing: LISTING }, {
+        tenantId: "acme",
+        workspaceId: "acme-hid",
+      }),
+    ).toEqual({ kind: "revoked", selection: { tenantId: "acme", workspaceId: "acme-hid" } });
+  });
+});
+
+describe("selectionFromSources", () => {
+  test("a complete deep link is the authority", () => {
+    expect(
+      selectionFromSources({ company: "acme", team: "acme-ops" }, GLOBEX),
+    ).toEqual(ACME_OPS);
+  });
+
+  test("a link naming only a company is an incomplete scope, never half of the stored one", () => {
+    expect(selectionFromSources({ company: "acme" }, GLOBEX)).toBeNull();
+    expect(selectionFromSources({ team: "acme-ops" }, GLOBEX)).toBeNull();
+  });
+
+  test("a silent link falls back to the stored choice; storage never invents one", () => {
+    expect(selectionFromSources({}, GLOBEX)).toEqual(GLOBEX);
+    expect(selectionFromSources({}, null)).toBeNull();
+  });
+});
+
+// ---------------------------------------------------------------------------
+// Persistence
+// ---------------------------------------------------------------------------
+
+describe("stored selection", () => {
+  test("the slot is per-account and damaged slots read as nothing", async () => {
+    const storage = memoryStorage();
+    await storeSelection(storage, USER, ACME);
+    expect(await readStoredSelection(storage, USER)).toEqual(ACME);
+    expect(await readStoredSelection(storage, "user-2")).toBeNull();
+
+    const damaged = memoryStorage({
+      [selectionStorageKey(USER)]: "{corrupted",
+    });
+    expect(await readStoredSelection(damaged, USER)).toBeNull();
+
+    const halfShaped = memoryStorage({
+      [selectionStorageKey(USER)]: JSON.stringify({ tenantId: "acme" }),
+    });
+    expect(await readStoredSelection(halfShaped, USER)).toBeNull();
+  });
+});
+
+// ---------------------------------------------------------------------------
+// The store: one generation, one removal discipline (the MT083 rule, mobile-shaped)
+// ---------------------------------------------------------------------------
+
+describe("createTenancyStore", () => {
+  test("the scope world: pending before the user resolves, then open with the live pair", async () => {
+    const unresolved = createTenancyStore({
+      userId: undefined,
+      storage: memoryStorage(),
+    });
+    expect(unresolved.scope()).toEqual({ status: "pending" });
+
+    const storage = memoryStorage();
+    await storeSelection(storage, USER, ACME);
+    const store = createTenancyStore({
+      userId: USER,
+      storage,
+      selection: await readStoredSelection(storage, USER),
+    });
+    expect(store.scope()).toEqual({
+      status: "open",
+      userId: USER,
+      selection: ACME,
+      generation: 0,
+      key: "acme/acme-finance@0",
+    });
+  });
+
+  test("business keys name user, company and team: two scopes never read one entry (AC2)", async () => {
+    const store = createTenancyStore({
+      userId: USER,
+      storage: memoryStorage(),
+    });
+    await store.selectScope(ACME);
+    store.write("channels", ["acme-channel"]);
+    expect(store.read<string[]>("channels")).toEqual({
+      status: "present",
+      value: ["acme-channel"],
+    });
+
+    await store.selectScope(GLOBEX);
+    // The new scope's read is absent: the old scope's entry does not appear after the switch.
+    expect(store.read("channels")).toEqual({ status: "absent" });
+    store.write("channels", ["globex-channel"]);
+    expect(store.read<string[]>("channels")).toEqual({
+      status: "present",
+      value: ["globex-channel"],
+    });
+
+    // And the personal context is its own subtree, in both directions.
+    await store.selectScope(null);
+    expect(store.read("channels")).toEqual({ status: "absent" });
+    store.write("channels", ["personal-channel"]);
+    await store.selectScope(ACME);
+    expect(store.read("channels")).toEqual({ status: "absent" });
+  });
+
+  test("a team change drops only the old team's entries; a company change drops the company's", async () => {
+    const store = createTenancyStore({
+      userId: USER,
+      storage: memoryStorage(),
+    });
+    await store.selectScope(ACME);
+    store.write("draft", "finance draft");
+    await store.selectScope(ACME_OPS);
+    // Same company, other team: the finance draft is gone and does not bleed through.
+    expect(store.read("draft")).toEqual({ status: "absent" });
+    store.write("draft", "ops draft");
+    await store.selectScope(GLOBEX);
+    expect(store.read("draft")).toEqual({ status: "absent" });
+    // Back into Acme: the old team's entries were dropped with the company switch, not parked.
+    await store.selectScope(ACME);
+    expect(store.read("draft")).toEqual({ status: "absent" });
+  });
+
+  test("every switch advances the generation, and an in-flight answer is refused on arrival", async () => {
+    const storage = memoryStorage();
+    const store = createTenancyStore({ userId: USER, storage });
+    await store.selectScope(ACME);
+    const at = store.generationNow();
+
+    // An answer that lands while the scope is unchanged is accepted.
+    expect(store.stillCurrent(at)).toBe(true);
+
+    await store.selectScope(GLOBEX);
+    // The generation moved BEFORE anything else: the answer that left under Acme is refused.
+    expect(store.stillCurrent(at)).toBe(false);
+    expect(store.generationNow()).toBe(at + 1);
+
+    // The new generation's captures are current until the next switch.
+    const next = store.generationNow();
+    expect(store.stillCurrent(next)).toBe(true);
+    await store.selectScope(null);
+    expect(store.stillCurrent(next)).toBe(false);
+  });
+
+  test("a same-scope switch is a no-op: the generation does not churn", async () => {
+    const store = createTenancyStore({
+      userId: USER,
+      storage: memoryStorage(),
+    });
+    await store.selectScope(ACME);
+    const at = store.generationNow();
+    await store.selectScope(ACME);
+    expect(store.generationNow()).toBe(at);
+  });
+
+  test("the switch mirrors the choice to the per-account storage slot", async () => {
+    const storage = memoryStorage();
+    const store = createTenancyStore({ userId: USER, storage });
+    await store.selectScope(ACME);
+    expect(await readStoredSelection(storage, USER)).toEqual(ACME);
+    await store.selectScope(GLOBEX);
+    expect(await readStoredSelection(storage, USER)).toEqual(GLOBEX);
+  });
+});
+
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+
+function jsonResponse(status: number, body: unknown): Response {
+  return new Response(JSON.stringify(body), {
+    status,
+    headers: { "content-type": "application/json" },
+  });
+}
+
+function textResponse(status: number, body: string): Response {
+  return new Response(body, { status });
+}
+
+async function capture(run: () => Promise<unknown>): Promise<unknown> {
+  try {
+    await run();
+    return null;
+  } catch (error) {
+    return error;
+  }
+}
diff --git a/apps/mobile/src/openbot/tenancy.ts b/apps/mobile/src/openbot/tenancy.ts
new file mode 100644
index 000000000..03f3b0a81
--- /dev/null
+++ b/apps/mobile/src/openbot/tenancy.ts
@@ -0,0 +1,421 @@
+/*
+ * The mobile tenancy adapter's selection half, MT104 (Issue #147).
+ *
+ * THE CONTRACT IS THE WEB SIDE'S. The OpenBot web workbench shipped its selection as three seams
+ * — `lib/enterprise/tenant/selection.ts` (the choice and its state machine), `scoped-cache.ts`
+ * (where one scope's business entries live) and `stream-scope.ts` (the live selection + the
+ * generation) — and this module is that same design re-expressed for a mobile app: the same
+ * listing shape, the same six kinds, the same refusal behavior, the same storage discipline, the
+ * same one-generation rule. Where the web reads `window.localStorage` and a `QueryClient`, the
+ * mobile adapter takes injected collaborators (`ScopeStorage`, a plain store) because a React
+ * Native app owns neither — and because injected collaborators are what let this file's tests run
+ * in CI with no runtime beneath them (AC4).
+ *
+ * WHAT STAYS TRUE, BIT FOR BIT:
+ * - The listing is the server's own eligibility fact (`GET /api/enterprise/workspace-scope`, the
+ *   MT006 lister); nothing is selected unless a person picks it, and nothing is ever defaulted
+ *   (spec A6).
+ * - A non-ok listing is a typed refusal (`WorkspaceScopeRefusedError`) and a broken body is
+ *   `WORKSPACE_SCOPE_MALFORMED` — an infrastructure failure never masquerades as "no companies".
+ * - A deep link is the authority whenever it names anything; a link naming only a company is an
+ *   incomplete scope, never half of the stored one.
+ * - The switch advances ONE generation and removes the old scope's business entries; a response
+ *   that left under one selection and lands under another is refused on arrival.
+ */
+
+/** One team the actor belongs to, named by the tenant-scoped data read. */
+export type WorkspaceScopeTeam = {
+  workspaceId: string;
+  name: string;
+};
+
+/** One company the actor is an active member of, with the teams they belong to. */
+export type WorkspaceScopeCompany = {
+  tenantId: string;
+  name: string;
+  role: string;
+  memberEpoch: number;
+  teams: WorkspaceScopeTeam[];
+};
+
+/** The listing's whole answer: eligible companies, nothing pre-selected. */
+export type WorkspaceScopeListing = {
+  companies: WorkspaceScopeCompany[];
+};
+
+/** A complete selection: both halves, or no selection at all. */
+export type ScopeSelection = {
+  tenantId: string;
+  workspaceId: string;
+};
+
+/**
+ * The refusal a non-ok listing raises — the same facts the web error carries (status and the
+ * server's own code), never flattened into a sentence an empty state could mistake for its own.
+ */
+export class WorkspaceScopeRefusedError extends Error {
+  readonly status: number;
+  readonly code: string;
+
+  constructor(status: number, code: string) {
+    super(
+      `The workspace-scope listing refused the request (${status} ${code}).`,
+    );
+    this.name = "WorkspaceScopeRefusedError";
+    this.status = status;
+    this.code = code;
+  }
+}
+
+/** The typed refusal behind an error, for callers that branch on it; anything else is not one. */
+export function scopeRefusalOf(
+  error: unknown,
+): WorkspaceScopeRefusedError | null {
+  return error instanceof WorkspaceScopeRefusedError ? error : null;
+}
+
+/**
+ * Read one listing from a fetch-like answer, with the web side's exact refusal mapping: a non-ok
+ * answer refuses with the server's own error code (or `WORKSPACE_SCOPE_REFUSED`), and a 200 that
+ * is not a listing of companies with teams refuses as `WORKSPACE_SCOPE_MALFORMED` — because a
+ * broken body must never read as "you have no companies".
+ */
+export async function readWorkspaceScopeListing(
+  fetchListing: () => Promise<Response>,
+): Promise<WorkspaceScopeListing> {
+  const response = await fetchListing();
+  if (!response.ok) {
+    const body = (await response.json().catch(() => null)) as {
+      error?: unknown;
+    } | null;
+    const envelope = body?.error;
+    const code =
+      envelope !== null &&
+      typeof envelope === "object" &&
+      typeof (envelope as Record<string, unknown>).code === "string"
+        ? (envelope as { code: string }).code
+        : "WORKSPACE_SCOPE_REFUSED";
+    throw new WorkspaceScopeRefusedError(response.status, code);
+  }
+  const body = (await response.json().catch(() => null)) as unknown;
+  if (
+    body === null ||
+    typeof body !== "object" ||
+    !Array.isArray((body as Record<string, unknown>).companies)
+  ) {
+    throw new WorkspaceScopeRefusedError(
+      response.status,
+      "WORKSPACE_SCOPE_MALFORMED",
+    );
+  }
+  const companies: unknown[] = (body as { companies: unknown[] }).companies;
+  const shaped = companies.every(
+    (company) =>
+      company !== null &&
+      typeof company === "object" &&
+      typeof (company as Record<string, unknown>).tenantId === "string" &&
+      Array.isArray((company as Record<string, unknown>).teams),
+  );
+  if (!shaped) {
+    throw new WorkspaceScopeRefusedError(
+      response.status,
+      "WORKSPACE_SCOPE_MALFORMED",
+    );
+  }
+  return body as WorkspaceScopeListing;
+}
+
+// ---------------------------------------------------------------------------
+// The state machine — pure, the web's six kinds verbatim
+// ---------------------------------------------------------------------------
+
+/** The listing read a screen holds, narrowed to the facts the state machine answers on. */
+export type ListingRead =
+  | { status: "pending" }
+  | { status: "error" }
+  | { status: "success"; listing: WorkspaceScopeListing };
+
+export type SelectionState =
+  | { kind: "loading" }
+  | { kind: "error" }
+  | { kind: "empty" }
+  /** Eligible companies exist; nobody has chosen a scope. Nothing is picked for them. */
+  | { kind: "ready" }
+  | {
+      kind: "selected";
+      company: WorkspaceScopeCompany;
+      team: WorkspaceScopeTeam;
+    }
+  | {
+      kind: "revoked";
+      /** The selection that no longer matches the listing — shown, never silently cleared. */
+      selection: ScopeSelection;
+    };
+
+/**
+ * Where the chosen pair sits in the listing, or null when it does not.
+ *
+ * This IS the revocation judgment, as on the web: the server's lister is the live membership fact
+ * (a suspended company hides whole, a suspended team hides alone), so an absent pair means
+ * revoked access — and an erroring listing stays an error, because infrastructure trouble is not
+ * an authorization fact and must not dress up as one.
+ */
+export function findSelection(
+  listing: WorkspaceScopeListing,
+  selection: ScopeSelection,
+): { company: WorkspaceScopeCompany; team: WorkspaceScopeTeam } | null {
+  const company = listing.companies.find(
+    (candidate) => candidate.tenantId === selection.tenantId,
+  );
+  if (company === undefined) return null;
+  const team = company.teams.find(
+    (candidate) => candidate.workspaceId === selection.workspaceId,
+  );
+  if (team === undefined) return null;
+  return { company, team };
+}
+
+export function selectionState(
+  read: ListingRead,
+  selection: ScopeSelection | null,
+): SelectionState {
+  if (read.status === "pending") return { kind: "loading" };
+  if (read.status === "error") return { kind: "error" };
+  if (read.listing.companies.length === 0) return { kind: "empty" };
+  if (selection === null) return { kind: "ready" };
+  const found = findSelection(read.listing, selection);
+  if (found === null) return { kind: "revoked", selection };
+  return { kind: "selected", company: found.company, team: found.team };
+}
+
+/**
+ * The selection this screen holds, from the two user-explicit sources — the web rule, with the
+ * mobile deep link in the URL's seat. A deep link is the authority whenever it names anything;
+ * a link that names only a company is an incomplete scope — not half of the stored one. Storage
+ * fills only a silent link with the user's own last explicit choice; it never invents one.
+ */
+export function selectionFromSources(
+  deepLink: { company?: string; team?: string },
+  stored: ScopeSelection | null,
+): ScopeSelection | null {
+  if (deepLink.company !== undefined || deepLink.team !== undefined) {
+    if (deepLink.company !== undefined && deepLink.team !== undefined) {
+      return { tenantId: deepLink.company, workspaceId: deepLink.team };
+    }
+    return null;
+  }
+  return stored;
+}
+
+// ---------------------------------------------------------------------------
+// Persistence — the choice itself is user-explicit; storage only remembers it
+// ---------------------------------------------------------------------------
+
+/** The storage contract this module needs; AsyncStorage satisfies it, and so does a Map in CI. */
+export interface ScopeStorage {
+  getItem(key: string): string | null | Promise<string | null>;
+  setItem(key: string, value: string): void | Promise<void>;
+}
+
+/** Same prefix as the web mirror, so one account's slot means the same thing on both clients. */
+const STORAGE_PREFIX = "openbot.workspace-scope.v1:";
+
+export function selectionStorageKey(userId: string): string {
+  return `${STORAGE_PREFIX}${userId}`;
+}
+
+function scopeOf(value: unknown): ScopeSelection | null {
+  if (value === null || typeof value !== "object") return null;
+  const tenantId = (value as Record<string, unknown>).tenantId;
+  const workspaceId = (value as Record<string, unknown>).workspaceId;
+  if (
+    typeof tenantId !== "string" ||
+    tenantId === "" ||
+    typeof workspaceId !== "string" ||
+    workspaceId === ""
+  ) {
+    return null;
+  }
+  return { tenantId, workspaceId };
+}
+
+/** The user's last explicit selection, or null. A damaged slot reads as nothing. */
+export async function readStoredSelection(
+  storage: ScopeStorage,
+  userId: string,
+): Promise<ScopeSelection | null> {
+  let raw: string | null;
+  try {
+    raw = await storage.getItem(selectionStorageKey(userId));
+  } catch {
+    return null;
+  }
+  if (raw === null) return null;
+  try {
+    return scopeOf(JSON.parse(raw));
+  } catch {
+    return null;
+  }
+}
+
+/** Remember an explicit choice; storage trouble is swallowed — the caller still holds the choice. */
+export async function storeSelection(
+  storage: ScopeStorage,
+  userId: string,
+  selection: ScopeSelection,
+): Promise<void> {
+  try {
+    await storage.setItem(
+      selectionStorageKey(userId),
+      JSON.stringify(selection),
+    );
+  } catch {
+    /* best-effort mirror, exactly as on the web */
+  }
+}
+
+// ---------------------------------------------------------------------------
+// The store — one selection, one generation, one removal discipline
+// ---------------------------------------------------------------------------
+
+/**
+ * The scoped cache's answer while the scope source (the signed-in user) is unresolved — the same
+ * refusal the web streams live by: a business read is not established on a guess.
+ */
+export type TenancyScope = { status: "pending" } | {
+  status: "open";
+  userId: string;
+  selection: ScopeSelection | null;
+  generation: number;
+  /** Changes exactly when a business key must change: the pair moved, or the generation moved. */
+  key: string;
+};
+
+function sameScope(
+  left: ScopeSelection | null,
+  right: ScopeSelection | null,
+): boolean {
+  if (left === null || right === null) return left === right;
+  return (
+    left.tenantId === right.tenantId && left.workspaceId === right.workspaceId
+  );
+}
+
+/**
+ * The mobile tenancy store: the one place the live selection and its generation live. The web
+ * holds these in two cache entries a QueryClient owns; a mobile app owns no such thing, so the
+ * adapter owns them itself — a plain object, one instance per app session, created with the
+ * signed-in user and seeded from that user's storage slot.
+ */
+export function createTenancyStore(options: {
+  userId: string | undefined;
+  storage: ScopeStorage;
+  selection?: ScopeSelection | null;
+  generation?: number;
+}) {
+  const userId = options.userId;
+  let selection: ScopeSelection | null = options.selection ?? null;
+  let generation: number = options.generation ?? 0;
+  /** One cache per (company, team, generation) prefix, dropped wholesale on a switch. */
+  const scopes = new Map<string, Map<string, unknown>>();
+
+  const prefixOf = (pair: ScopeSelection | null): string => {
+    if (pair === null) return "personal";
+    return `${pair.tenantId}/${pair.workspaceId}`;
+  };
+
+  const store = {
+    /** The live scope world, in the web `StreamScope`'s shape. */
+    scope(): TenancyScope {
+      if (userId === undefined) return { status: "pending" };
+      return {
+        status: "open",
+        userId,
+        selection,
+        generation,
+        key: `${prefixOf(selection)}@${generation}`,
+      };
+    },
+
+    /**
+     * The whole switch, in the web `selectWorkspaceScope`'s order: the generation moves FIRST, so
+     * a response already in flight against the old scope is refused on arrival, and the old
+     * scope's business entries go AFTER — dropped, not invalidated, so a stale row is never
+     * visible for one render while the refetch runs. A team change inside one company drops only
+     * the old team's entries (leaving one team is not leaving the company); a company change drops
+     * the old company's whole subtree; and choosing a scope out of the personal context drops the
+     * personal context's business subtree beside it, so no stale personal entry can render beside
+     * the scope just chosen.
+     */
+    async selectScope(next: ScopeSelection | null): Promise<void> {
+      if (sameScope(selection, next)) return;
+      generation += 1;
+      const previous = selection;
+      const sameCompany =
+        previous !== null &&
+        next !== null &&
+        previous.tenantId === next.tenantId;
+      if (sameCompany) {
+        scopes.delete(prefixOf(previous));
+      } else {
+        if (previous !== null) {
+          for (const key of scopes.keys()) {
+            if (key.startsWith(`${previous.tenantId}/`)) scopes.delete(key);
+          }
+        }
+        if (previous === null && next !== null) scopes.delete("personal");
+      }
+      selection = next;
+      if (userId !== undefined && next !== null) {
+        await storeSelection(options.storage, userId, next);
+      }
+    },
+
+    // -- The scoped cache half (the web `scoped-cache.ts` rule) ------------------
+
+    /**
+     * Where one scope's business entries live: under the selection's own prefix (user, company
+     * and team all named), or — when nothing is selected — under the personal context's. A key
+     * filed here is gone the moment its scope is (AC2: the cache key names user, company and
+     * team; after a switch the old scope's data does not appear).
+     */
+    cachePrefix(): string {
+      return userId === undefined ? "unresolved" : prefixOf(selection);
+    },
+
+    read<T>(key: string): { status: "present"; value: T } | { status: "absent" } {
+      const bucket = scopes.get(prefixOf(selection));
+      if (bucket === undefined || !bucket.has(key)) return { status: "absent" };
+      return { status: "present", value: bucket.get(key) as T };
+    },
+
+    /** Write under the CURRENT scope's prefix only; a write never leaks into another scope's bucket. */
+    write(key: string, value: unknown): void {
+      const prefix = prefixOf(selection);
+      let bucket = scopes.get(prefix);
+      if (bucket === undefined) {
+        bucket = new Map();
+        scopes.set(prefix, bucket);
+      }
+      bucket.set(key, value);
+    },
+
+    /** The generation at capture time, for the in-flight refusal below. */
+    generationNow(): number {
+      return generation;
+    },
+
+    /**
+     * Whether a write that left at `at` may still land — the web `streamWriteStillCurrent` /
+     * `cacheWriteGate` rule: once any switch advanced the generation, the old scope's entries are
+     * gone, and replaying into them (or into the new scope's key) would resurrect or corrupt what
+     * the switch just cleared.
+     */
+    stillCurrent(at: number): boolean {
+      return generation === at;
+    },
+  };
+  return store;
+}
+
+export type TenancyStore = ReturnType<typeof createTenancyStore>;
diff --git a/apps/mobile/src/openbot/three-client-selection.test.ts b/apps/mobile/src/openbot/three-client-selection.test.ts
new file mode 100644
index 000000000..98b085934
--- /dev/null
+++ b/apps/mobile/src/openbot/three-client-selection.test.ts
@@ -0,0 +1,392 @@
+// MT106 (Issue #149): selection, empty states, switching and revocation answered
+// CONSISTENTLY by three clients over ONE identity matrix, with no cache crossing a scope.
+//
+// The three clients. iOS and Android run the same JavaScript layer (one Expo app, one shared
+// src/openbot), so "the iOS client" and "the Android client" are two independent instances of this
+// adapter over the same account — and "the web client" is the contract the adapter re-expresses
+// (app/src/lib/enterprise/tenant, pinned by the web suites). Each world here is therefore a full
+// client: its own store, its own device storage slot, its own scoped fetch — never a shared cache,
+// because consistency is sameness of answers, not shared state.
+//
+// The identity matrix is one set of server facts — the same listing answers (the eligibility
+// listing IS the membership fact, per MT104) — replayed at every client. What the matrix says, all
+// three must answer identically: what is eligible (AC1), what no-eligibility and revocation look
+// like (AC2), and what a switch leaves behind (AC3). Platform deltas beyond this shared layer are
+// recorded, not guessed at: the register lives in the parent worktree's run report — real-device
+// and simulator runs are explicitly UNVERIFIED there (the ticket's own note), and this file runs
+// the whole matrix in CI with no runtime beneath it, exactly like the MT104/MT105 suites it builds
+// on.
+//
+// Rerun: bun test apps/openmuse/apps/mobile/src/openbot/three-client-selection.test.ts
+
+import { describe, expect, test } from "bun:test";
+
+import {
+  createTenancyStore,
+  type ListingRead,
+  readStoredSelection,
+  readWorkspaceScopeListing,
+  type ScopeSelection,
+  type ScopeStorage,
+  scopeRefusalOf,
+  selectionFromSources,
+  selectionState,
+  type TenancyStore,
+  type WorkspaceScopeCompany,
+  type WorkspaceScopeListing,
+  WorkspaceScopeRefusedError,
+} from "./tenancy";
+import {
+  createScopedFetch,
+  TenantSelectionChangedError,
+} from "./transport";
+
+// ---------------------------------------------------------------------------
+// The identity matrix — one source of server facts, replayed at every client
+// ---------------------------------------------------------------------------
+
+const USER = "user-1";
+const ACME: ScopeSelection = { tenantId: "acme", workspaceId: "acme-finance" };
+const ACME_OPS: ScopeSelection = { tenantId: "acme", workspaceId: "acme-ops" };
+const GLOBEX: ScopeSelection = { tenantId: "globex", workspaceId: "globex-ops" };
+
+/** The companies the server currently calls eligible, with the teams under each. */
+function listingOf(
+  ...tenantIds: string[]
+): { status: "success"; listing: WorkspaceScopeListing } {
+  const catalogue: Record<string, WorkspaceScopeCompany> = {
+    acme: {
+      tenantId: "acme",
+      name: "Acme",
+      role: "member",
+      memberEpoch: 7,
+      teams: [
+        { workspaceId: "acme-finance", name: "Finance" },
+        { workspaceId: "acme-ops", name: "Ops" },
+      ],
+    },
+    globex: {
+      tenantId: "globex",
+      name: "Globex",
+      role: "member",
+      memberEpoch: 2,
+      teams: [{ workspaceId: "globex-ops", name: "Ops" }],
+    },
+  };
+  return {
+    status: "success",
+    listing: {
+      companies: tenantIds.map((id) => catalogue[id]),
+    },
+  };
+}
+
+/** The matrix's moments: full eligibility, one company suspended, everything gone, infra down. */
+const MATRIX = {
+  both: listingOf("acme", "globex"),
+  globexOnly: listingOf("globex"),
+  none: listingOf(),
+  error: { status: "error" } as ListingRead,
+};
+
+const CLIENTS = ["web-mirror", "ios", "android"] as const;
+type ClientName = (typeof CLIENTS)[number];
+
+/** One whole client over the matrix: its own store, storage slot and scoped fetch. */
+function clientWorld(name: ClientName, answer: () => Promise<Response>) {
+  const storage = memoryStorage();
+  const store = createTenancyStore({ userId: USER, storage });
+  const fetch = createScopedFetch({ store, fetchLike: () => answer() });
+  return { name, storage, store, fetch };
+}
+
+/** Run the matrix at every client and fold the answers into one comparable array. */
+async function atEveryClient(
+  run: (world: ReturnType<typeof clientWorld>) => Promise<unknown> | unknown,
+  answer: () => Promise<Response> = () => Promise.resolve(new Response("{}")),
+): Promise<Record<ClientName, unknown>> {
+  const answers = {} as Record<ClientName, unknown>;
+  for (const name of CLIENTS) {
+    answers[name] = await run(clientWorld(name, answer));
+  }
+  return answers;
+}
+
+/** The battery every client must answer identically: each matrix moment × each selection. */
+const STATE_BATTERY: Array<{
+  read: ListingRead;
+  selection: ScopeSelection | null;
+}> = [
+  ...([MATRIX.both, MATRIX.globexOnly, MATRIX.none, MATRIX.error] as const).flatMap(
+    (read) => [
+      { read, selection: null },
+      { read, selection: ACME },
+      { read, selection: ACME_OPS },
+      { read, selection: GLOBEX },
+    ],
+  ),
+];
+
+// ---------------------------------------------------------------------------
+// AC1: the selection surface lists only truly eligible companies and teams,
+//      and every client answers alike
+// ---------------------------------------------------------------------------
+
+describe("MT106 AC1 three clients list only real eligibility, identically", () => {
+  test("the whole matrix × selection battery answers identically on all three clients", async () => {
+    const answers = await atEveryClient((world) =>
+      STATE_BATTERY.map(({ read, selection }) =>
+        JSON.stringify(selectionState(read, selection)),
+      ),
+    );
+    const web = answers["web-mirror"];
+    for (const name of CLIENTS) {
+      expect(answers[name]).toEqual(web);
+      expect(answers[name]).toHaveLength(STATE_BATTERY.length);
+    }
+  });
+
+  test("a selected screen carries the listing's own row, never a local invention", async () => {
+    const answers = await atEveryClient(() => selectionState(MATRIX.both, ACME));
+    for (const name of CLIENTS) {
+      const state = answers[name] as ReturnType<typeof selectionState>;
+      expect(state).toEqual({
+        kind: "selected",
+        // The company and team objects are the matrix's own rows, byte for byte: the screen's
+        // data comes from the server's eligibility fact, and both teams appear under Acme —
+        // eligibility is the listing's word, not the selection's.
+        company: MATRIX.both.listing.companies[0],
+        team: MATRIX.both.listing.companies[0].teams[0],
+      });
+    }
+  });
+
+  test("a deep link is the authority on every client, including the half-pair refusal", async () => {
+    const answers = await atEveryClient(() => [
+      selectionFromSources({ company: "acme", team: "acme-ops" }, GLOBEX),
+      // A link naming only a company is an incomplete scope, never half of the stored one.
+      selectionFromSources({ company: "acme" }, GLOBEX),
+      selectionFromSources({}, GLOBEX),
+    ]);
+    for (const name of CLIENTS) {
+      expect(answers[name]).toEqual([ACME_OPS, null, GLOBEX]);
+    }
+  });
+});
+
+// ---------------------------------------------------------------------------
+// AC2: no-eligibility and revocation are explicit states with explicit
+//      refusals, on every client
+// ---------------------------------------------------------------------------
+
+describe("MT106 AC2 no-eligibility and revocation are explicit on every client", () => {
+  test("no eligible companies is the empty state — never an error, never a silent default", async () => {
+    const answers = await atEveryClient(() => selectionState(MATRIX.none, null));
+    for (const name of CLIENTS) {
+      expect(answers[name]).toEqual({ kind: "empty" });
+    }
+  });
+
+  test("a revoked selection is shown, not silently cleared — and re-admission re-selects", async () => {
+    const answers = await atEveryClient(async (world) => {
+      // The user's explicit choice sits in the slot; the matrix then suspends Acme.
+      await world.store.selectScope(ACME);
+      const revoked = selectionState(MATRIX.globexOnly, ACME);
+      // The slot still holds the pair: revocation is displayed, not erased.
+      const storedWhileRevoked = await readStoredSelection(
+        world.storage,
+        USER,
+      );
+      // The matrix re-admits Acme: the same stored pair selects again, no re-prompt.
+      const readmitted = selectionState(MATRIX.both, ACME);
+      return { revoked, storedWhileRevoked, readmitted };
+    });
+    for (const name of CLIENTS) {
+      expect(answers[name]).toEqual({
+        revoked: { kind: "revoked", selection: ACME },
+        storedWhileRevoked: ACME,
+        readmitted: {
+          kind: "selected",
+          company: MATRIX.both.listing.companies[0],
+          team: MATRIX.both.listing.companies[0].teams[0],
+        },
+      });
+    }
+  });
+
+  test("an infrastructure failure is an error, never 'no companies'", async () => {
+    const answers = await atEveryClient(() => selectionState(MATRIX.error, ACME));
+    for (const name of CLIENTS) {
+      expect(answers[name]).toEqual({ kind: "error" });
+    }
+  });
+
+  test("the listing refusal is typed and identical on every client", async () => {
+    const answers = await atEveryClient(() =>
+      Promise.all([
+        capture(() =>
+          readWorkspaceScopeListing(async () =>
+            jsonResponse(403, { error: { code: "WORKSPACE_FORBIDDEN" } }),
+          ),
+        ),
+        capture(() =>
+          readWorkspaceScopeListing(async () => textResponse(200, "not json")),
+        ),
+      ]),
+    );
+    for (const name of CLIENTS) {
+      const [refused, malformed] = answers[name] as [unknown, unknown];
+      expect(scopeRefusalOf(refused)?.status).toBe(403);
+      expect(scopeRefusalOf(refused)?.code).toBe("WORKSPACE_FORBIDDEN");
+      expect(scopeRefusalOf(malformed)?.code).toBe(
+        "WORKSPACE_SCOPE_MALFORMED",
+      );
+    }
+  });
+});
+
+// ---------------------------------------------------------------------------
+// AC3: after a switch, no old-scope cache and no in-flight answer — on every
+//      client, and never across clients
+// ---------------------------------------------------------------------------
+
+describe("MT106 AC3 switching leaves no old-scope cache or in-flight answer", () => {
+  test("every switch shape drops exactly the old scope's entries, on all three clients", async () => {
+    const answers = await atEveryClient(async (world) => {
+      const trace: string[] = [];
+      await world.store.selectScope(ACME);
+      world.store.write("threads", ["acme-finance-threads"]);
+      trace.push(present(world.store, "threads"));
+      // Team change inside Acme: only the old team's bucket goes.
+      await world.store.selectScope(ACME_OPS);
+      trace.push(present(world.store, "threads"));
+      world.store.write("threads", ["acme-ops-threads"]);
+      // Company change: Acme's whole subtree goes.
+      await world.store.selectScope(GLOBEX);
+      trace.push(present(world.store, "threads"));
+      world.store.write("threads", ["globex-threads"]);
+      // Scope → personal: the scoped subtree goes beside the personal shelf.
+      await world.store.selectScope(null);
+      trace.push(present(world.store, "threads"));
+      world.store.write("threads", ["personal-threads"]);
+      // Personal → scope: the personal business subtree goes too.
+      await world.store.selectScope(ACME);
+      trace.push(present(world.store, "threads"));
+      return trace;
+    });
+    for (const name of CLIENTS) {
+      // Present under its own scope, absent the moment that scope is left — no shape of
+      // switch leaves the old scope's data readable.
+      expect(answers[name]).toEqual([
+        "present",
+        "absent",
+        "absent",
+        "absent",
+        "absent",
+      ]);
+    }
+  });
+
+  test("an answer that outlives its scope is refused on arrival, on all three clients", async () => {
+    const deferred = deferredResponse();
+    const answers = await atEveryClient(async (world) => {
+      await world.store.selectScope(ACME);
+      const asked = world.fetch("/api/enterprise/threads");
+      await world.store.selectScope(GLOBEX);
+      deferred.resolve(jsonResponse(200, { threads: ["acme-finance-threads"] }));
+      const error = await capture(() => asked);
+      // And nothing of the refused answer landed anywhere: not under the new scope…
+      const newScope = present(world.store, "threads");
+      await world.store.selectScope(ACME);
+      // …and not back under the scope it was asked for.
+      const oldScope = present(world.store, "threads");
+      return { error, newScope, oldScope };
+    }, () => deferred.promise);
+    for (const name of CLIENTS) {
+      const { error, newScope, oldScope } = answers[name] as {
+        error: unknown;
+        newScope: string;
+        oldScope: string;
+      };
+      expect(error).toBeInstanceOf(TenantSelectionChangedError);
+      expect(newScope).toBe("absent");
+      expect(oldScope).toBe("absent");
+    }
+  });
+
+  test("clients are independent worlds: no shared cache, no cross-client eviction", async () => {
+    // Same account, three devices: a write on one client is invisible on the others, and a
+    // switch on one client never drops another client's entries — consistency without shared
+    // state is the whole point.
+    const worlds = CLIENTS.map((name) =>
+      clientWorld(name, () => Promise.resolve(new Response("{}"))),
+    );
+    const [web, ios, android] = worlds;
+    for (const world of worlds) await world.store.selectScope(ACME);
+    ios.store.write("threads", ["ios-only-threads"]);
+    expect(present(web.store, "threads")).toBe("absent");
+    expect(present(android.store, "threads")).toBe("absent");
+    // iOS moves to Globex; web and android keep reading their own Acme entries.
+    await ios.store.selectScope(GLOBEX);
+    expect(present(ios.store, "threads")).toBe("absent");
+    expect(present(web.store, "threads")).toBe("absent"); // web never had ios's entry
+    web.store.write("threads", ["web-threads"]);
+    expect(present(web.store, "threads")).toBe("present");
+    expect(present(android.store, "threads")).toBe("absent");
+    // The account's slot is the user's explicit choice on each client — ios's switch moved
+    // only ios's slot.
+    expect(await readStoredSelection(web.storage, USER)).toEqual(ACME);
+    expect(await readStoredSelection(ios.storage, USER)).toEqual(GLOBEX);
+  });
+});
+
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+
+function present(store: TenancyStore, key: string): "present" | "absent" {
+  const read = store.read(key);
+  return read.status;
+}
+
+function memoryStorage(seed: Record<string, string> = {}): ScopeStorage {
+  const slots = new Map(Object.entries(seed));
+  return {
+    getItem: (key: string) => slots.get(key) ?? null,
+    setItem: (key: string, value: string) => {
+      slots.set(key, value);
+    },
+  };
+}
+
+function jsonResponse(status: number, body: unknown): Response {
+  return new Response(JSON.stringify(body), {
+    status,
+    headers: { "content-type": "application/json" },
+  });
+}
+
+function textResponse(status: number, body: string): Response {
+  return new Response(body, { status });
+}
+
+/** One answer whose arrival the test controls, for the in-flight refusal cases. */
+function deferredResponse(): {
+  promise: Promise<Response>;
+  resolve: (response: Response) => void;
+} {
+  let resolve!: (response: Response) => void;
+  const promise = new Promise<Response>((settle) => {
+    resolve = settle;
+  });
+  return { promise, resolve };
+}
+
+async function capture(run: () => Promise<unknown>): Promise<unknown> {
+  try {
+    await run();
+    return null;
+  } catch (error) {
+    return error;
+  }
+}
diff --git a/apps/mobile/src/openbot/transport.test.ts b/apps/mobile/src/openbot/transport.test.ts
new file mode 100644
index 000000000..0c3193328
--- /dev/null
+++ b/apps/mobile/src/openbot/transport.test.ts
@@ -0,0 +1,349 @@
+// MT105 (Issue #148): the mobile transport carries the current company/team selection on its
+// streams, uploads/downloads and media reads — and nothing else does. The attachment gates, the
+// subscription lifecycle, the generation rule and the reconnect rule are the web transport's
+// (MT082/MT083) re-expressed over the mobile tenancy store: this file pins them with the same
+// fixture discipline. It imports nothing but bun:test and the adapter — AC-adjacent: the tests
+// run in CI with no runtime beneath them.
+
+import { describe, expect, test } from "bun:test";
+
+import {
+  createTenancyStore,
+  type ScopeSelection,
+  type ScopeStorage,
+} from "./tenancy";
+import {
+  createScopeBoundStream,
+  createScopedFetch,
+  mediaCacheKey,
+  readMediaCache,
+  scopeHeaders,
+  SCOPE_HEADER_ALLOWED_PATHS,
+  TenantSelectionChangedError,
+  TENANT_HEADER,
+  withStreamScope,
+  WORKSPACE_HEADER,
+  writeMediaCache,
+} from "./transport";
+
+const ACME: ScopeSelection = { tenantId: "acme", workspaceId: "acme-finance" };
+const GLOBEX: ScopeSelection = { tenantId: "globex", workspaceId: "globex-ops" };
+
+/** An in-memory storage stand-in, so the store's persistence mirror runs its real code in CI. */
+function memoryStorage(): ScopeStorage {
+  const slots = new Map<string, string>();
+  return {
+    getItem: (key: string) => slots.get(key) ?? null,
+    setItem: (key: string, value: string) => {
+      slots.set(key, value);
+    },
+  };
+}
+
+// ---------------------------------------------------------------------------
+// AC1: the pair rides reviewed same-origin paths only
+// ---------------------------------------------------------------------------
+
+describe("scopeHeaders", () => {
+  test("a reviewed REST path carries the pair as headers", () => {
+    expect(scopeHeaders("/api/channels", ACME)).toEqual({
+      [TENANT_HEADER]: "acme",
+      [WORKSPACE_HEADER]: "acme-finance",
+    });
+    expect(scopeHeaders("/api/enterprise/workspace-scope", ACME)).toEqual({
+      [TENANT_HEADER]: "acme",
+      [WORKSPACE_HEADER]: "acme-finance",
+    });
+  });
+
+  test("an unreviewed path is left undecorated", () => {
+    expect(scopeHeaders("/api/unreviewed/thing", ACME)).toBeNull();
+    expect(scopeHeaders("/api/unreviewed", ACME)).toBeNull();
+  });
+
+  test("a non-same-origin path never receives the pair", () => {
+    expect(scopeHeaders("https://elsewhere.example/api/agents", ACME)).toBeNull();
+    expect(scopeHeaders("//api/agents", ACME)).toBeNull();
+  });
+
+  test("no selection attaches nothing — absence is carried as absence, never defaulted", () => {
+    expect(scopeHeaders("/api/agents", null)).toBeNull();
+  });
+
+  test("every inventory entry names its owner and reason — a closed, reviewable list", () => {
+    // Widening the list is a review, not an accident: each entry's owner names the ticket
+    // that performed it (MT107's is the mobile-aggregation family's own review).
+    const reviewedBy = ["MT105", "MT107"];
+    for (const entry of SCOPE_HEADER_ALLOWED_PATHS) {
+      expect(entry.id).toBeTruthy();
+      expect(entry.prefix.startsWith("/api/")).toBe(true);
+      expect(entry.reason.length).toBeGreaterThan(0);
+      expect(reviewedBy).toContain(entry.ownerTicket);
+    }
+  });
+});
+
+describe("withStreamScope", () => {
+  test("a reviewed stream path carries the pair as query, preserving what is already there", () => {
+    expect(withStreamScope("/api/workshop/turn/1", ACME)).toBe(
+      "/api/workshop/turn/1?x-openbot-tenant=acme&x-openbot-workspace=acme-finance",
+    );
+    expect(withStreamScope("/api/craft/session/1/events?cursor=7", ACME)).toBe(
+      "/api/craft/session/1/events?cursor=7&x-openbot-tenant=acme&x-openbot-workspace=acme-finance",
+    );
+    expect(withStreamScope("/api/channels/events", ACME)).toBe(
+      "/api/channels/events?x-openbot-tenant=acme&x-openbot-workspace=acme-finance",
+    );
+  });
+
+  test("the pair is encoded — an id with a space is still one value", () => {
+    expect(
+      withStreamScope("/api/computers/1/screen", {
+        tenantId: "ac me",
+        workspaceId: "finance team",
+      }),
+    ).toBe("/api/computers/1/screen?x-openbot-tenant=ac%20me&x-openbot-workspace=finance%20team");
+  });
+
+  test("an unreviewed stream path, a foreign origin, and no selection all change nothing", () => {
+    expect(withStreamScope("/api/other/stream", ACME)).toBe("/api/other/stream");
+    expect(withStreamScope("wss://third.party/stream", ACME)).toBe(
+      "wss://third.party/stream",
+    );
+    expect(withStreamScope("//echo/stream", ACME)).toBe("//echo/stream");
+    expect(withStreamScope("/api/workshop/turn/1", null)).toBe(
+      "/api/workshop/turn/1",
+    );
+  });
+});
+
+// ---------------------------------------------------------------------------
+// AC3: an in-flight answer that outlived its selection is refused on arrival
+// ---------------------------------------------------------------------------
+
+describe("createScopedFetch", () => {
+  test("the pair rides the request, and an answer that lands in time is accepted", async () => {
+    const store = createTenancyStore({
+      userId: "user-1",
+      storage: memoryStorage(),
+    });
+    await store.selectScope(ACME);
+    const seen: Array<{ url: string; headers: Record<string, string> | undefined }> = [];
+    const scoped = createScopedFetch({
+      store,
+      fetchLike: async (url, init) => {
+        seen.push({ url, headers: init?.headers });
+        return new Response("{}", { status: 200 });
+      },
+    });
+    const response = await scoped("/api/agents");
+    expect(response.status).toBe(200);
+    expect(seen[0]?.url).toBe("/api/agents");
+    expect(seen[0]?.headers).toEqual({
+      [TENANT_HEADER]: "acme",
+      [WORKSPACE_HEADER]: "acme-finance",
+    });
+  });
+
+  test("an answer that arrives after a switch is refused, never applied", async () => {
+    const store = createTenancyStore({
+      userId: "user-1",
+      storage: memoryStorage(),
+    });
+    await store.selectScope(ACME);
+    let answer: ((response: Response) => void) | null = null;
+    const scoped = createScopedFetch({
+      store,
+      fetchLike: () =>
+        new Promise<Response>((resolve) => {
+          answer = resolve;
+        }),
+    });
+    const inFlight = scoped("/api/agents");
+    // The switch happens while the answer is in flight.
+    await store.selectScope(GLOBEX);
+    answer?.(new Response("{}", { status: 200 }));
+    const error = await capture(inFlight);
+    expect(error).toBeInstanceOf(TenantSelectionChangedError);
+  });
+
+  test("a pending scope source refuses before dialing — no read on a guess", async () => {
+    const store = createTenancyStore({
+      userId: undefined,
+      storage: memoryStorage(),
+    });
+    const scoped = createScopedFetch({
+      store,
+      fetchLike: async () => {
+        throw new Error("must not dial");
+      },
+    });
+    const error = await capture(scoped("/api/agents"));
+    expect(String(error)).toContain("scope source has not answered");
+  });
+});
+
+// ---------------------------------------------------------------------------
+// AC2: a switch tears the old subscription down and the old media cache is not served
+// ---------------------------------------------------------------------------
+
+describe("createScopeBoundStream", () => {
+  function harness() {
+    const store = createTenancyStore({
+      userId: "user-1",
+      storage: memoryStorage(),
+    });
+    const opened: string[] = [];
+    const closed: string[] = [];
+    const stream = createScopeBoundStream({
+      store,
+      open: (url) => {
+        opened.push(url);
+        return {
+          close: () => {
+            closed.push(url);
+          },
+        };
+      },
+    });
+    return { store, stream, opened, closed };
+  }
+
+  test("opens under the current pair; refuses while the scope source is pending", async () => {
+    const pending = createTenancyStore({
+      userId: undefined,
+      storage: memoryStorage(),
+    });
+    const stream = createScopeBoundStream({
+      store: pending,
+      open: () => {
+        throw new Error("must not open");
+      },
+    });
+    expect(stream.reopen("/api/workshop/turn/1")).toEqual({
+      refused: "scope-pending",
+    });
+
+    const { store, stream: live, opened } = harness();
+    await store.selectScope(ACME);
+    const opened0 = live.reopen("/api/workshop/turn/1");
+    expect(opened0).toMatchObject({ generation: expect.any(Number) });
+    expect(opened[0]).toBe(
+      "/api/workshop/turn/1?x-openbot-tenant=acme&x-openbot-workspace=acme-finance",
+    );
+  });
+
+  test("a switch cancels the old subscription and the next open carries the NEW pair (AC2/AC4)", async () => {
+    const { store, stream, opened, closed } = harness();
+    await store.selectScope(ACME);
+    stream.reopen("/api/workshop/turn/1");
+    const keyBefore = stream.openedKey();
+
+    await store.selectScope(GLOBEX);
+    // The teardown signal, as the app's effect reads it: the live connection was opened under a
+    // key the store has since left. The wrapper still names the old key — that IS the staleness.
+    const scopeNow = store.scope();
+    expect(scopeNow.status).toBe("open");
+    if (scopeNow.status === "open") {
+      expect(scopeNow.key).not.toBe(keyBefore);
+    }
+    expect(stream.openedKey()).toBe(keyBefore);
+    // Reopening under the moved scope closes the old connection and carries the NEW pair.
+    stream.reopen("/api/workshop/turn/1");
+    expect(closed).toHaveLength(1);
+    expect(opened[1]).toBe(
+      "/api/workshop/turn/1?x-openbot-tenant=globex&x-openbot-workspace=globex-ops",
+    );
+    expect(stream.openedKey()).not.toBe(keyBefore);
+  });
+
+  test("a late frame from a torn-down connection is refused by the generation rule", async () => {
+    const { store, stream } = harness();
+    await store.selectScope(ACME);
+    const { generation } = stream.reopen("/api/workshop/turn/1") as {
+      generation: number;
+    };
+    expect(stream.frameStillCurrent(generation)).toBe(true);
+    await store.selectScope(GLOBEX);
+    // The frame's connection was opened under the old generation: dropped, not applied.
+    expect(stream.frameStillCurrent(generation)).toBe(false);
+  });
+
+  test("a reconnect after a dropped line re-reads the CURRENT selection, never a default", async () => {
+    const { store, stream, opened } = harness();
+    await store.selectScope(ACME);
+    stream.reopen("/api/workshop/turn/1");
+    // The line drops; while it is down, the person switches scope.
+    await store.selectScope(GLOBEX);
+    stream.reopen("/api/workshop/turn/1");
+    expect(opened[1]).toContain("x-openbot-tenant=globex");
+    // And with no selection at all, the reconnected stream carries no pair at all — not a default.
+    await store.selectScope(null);
+    stream.reopen("/api/workshop/turn/1");
+    expect(opened[2]).toBe("/api/workshop/turn/1");
+  });
+});
+
+// ---------------------------------------------------------------------------
+// AC2, the media half: the old scope's media cache is not served after a switch
+// ---------------------------------------------------------------------------
+
+describe("scoped media cache", () => {
+  test("one URI is one entry per scope; after a switch the old scope's media is absent", async () => {
+    const store = createTenancyStore({
+      userId: "user-1",
+      storage: memoryStorage(),
+    });
+    await store.selectScope(ACME);
+    writeMediaCache(store, "/api/craft/file/1/media", { bytes: "acme-bytes" });
+    expect(readMediaCache<{ bytes: string }>(store, "/api/craft/file/1/media")).toEqual({
+      status: "present",
+      value: { bytes: "acme-bytes" },
+    });
+
+    await store.selectScope(GLOBEX);
+    // The same URI under the new scope is a miss — the old company's media does not display.
+    expect(readMediaCache(store, "/api/craft/file/1/media")).toEqual({
+      status: "absent",
+    });
+    writeMediaCache(store, "/api/craft/file/1/media", { bytes: "globex-bytes" });
+    expect(readMediaCache<{ bytes: string }>(store, "/api/craft/file/1/media")).toEqual({
+      status: "present",
+      value: { bytes: "globex-bytes" },
+    });
+
+    // The personal context is its own shelf, in both directions.
+    await store.selectScope(null);
+    expect(readMediaCache(store, "/api/craft/file/1/media")).toEqual({
+      status: "absent",
+    });
+  });
+
+  test("the media key names the scope beside the URI", async () => {
+    const store = createTenancyStore({
+      userId: "user-1",
+      storage: memoryStorage(),
+    });
+    await store.selectScope(ACME);
+    expect(mediaCacheKey(store, "/media/1")).toBe(
+      "media:acme/acme-finance:/media/1",
+    );
+    await store.selectScope(null);
+    expect(mediaCacheKey(store, "/media/1")).toBe("media:personal:/media/1");
+  });
+});
+
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+
+async function capture(
+  run: Promise<unknown> | (() => Promise<unknown>),
+): Promise<unknown> {
+  try {
+    await (typeof run === "function" ? run() : run);
+    return null;
+  } catch (error) {
+    return error;
+  }
+}
diff --git a/apps/mobile/src/openbot/transport.ts b/apps/mobile/src/openbot/transport.ts
new file mode 100644
index 000000000..e4af77287
--- /dev/null
+++ b/apps/mobile/src/openbot/transport.ts
@@ -0,0 +1,409 @@
+/*
+ * The mobile tenancy adapter's transport half, MT105 (Issue #148).
+ *
+ * THE RULES ARE THE WEB TRANSPORT'S, in both registers. The REST register is `client.ts`'s: the
+ * selection pair rides as HEADERS (`x-openbot-tenant`, `x-openbot-workspace`) on reviewed
+ * same-origin business paths only — a closed inventory, each entry owned by the ticket that
+ * reviewed it, never widened by accident. The stream register is `stream-scope.ts`'s: a streaming
+ * connection cannot carry request headers (an SSE read, a WebSocket upgrade), so on those surfaces
+ * the SAME pair rides the URL's query under the same two names, on the same kind of closed
+ * inventory — one vocabulary, so the server-side wiring (MT125) reads one set of names wherever
+ * the connection came from.
+ *
+ * THE LIFECYCLE HALF IS THE TICKET'S REAL SUBJECT, as it was MT082's: a stream that outlives its
+ * scope is a pipe pushing one company's events into a screen that has moved on, and a media cache
+ * that outlives its scope is yesterday's company file one tap away. So every business connection
+ * this module serves is bound to the tenancy store's live scope: it opens only once the scope
+ * source has resolved (never on a guess), is torn down when the scope moves, re-reads the CURRENT
+ * selection at every (re)connect — a dropped line that comes back answers under the scope that is
+ * current THEN, never a defaulted one (spec A6) — and every answer is checked against the
+ * generation it left under, so an in-flight response that lands after a switch is refused rather
+ * than applied (the same `stillCurrent` rule the web streams and caches share).
+ */
+
+import { type ScopeSelection, type TenancyStore } from "./tenancy";
+
+/** The header names, identical to the web client's — one vocabulary across clients. */
+export const TENANT_HEADER = "x-openbot-tenant";
+export const WORKSPACE_HEADER = "x-openbot-workspace";
+
+/** One reviewed REST path the selection pair may ride as headers. */
+export interface ScopeHeaderPathEntry {
+  readonly id: string;
+  readonly prefix: string;
+  readonly reason: string;
+  readonly ownerTicket: string;
+}
+
+/**
+ * The closed inventory of reviewed same-origin REST paths the mobile client may carry the
+ * selection pair on (MT105 / Issue #148).
+ *
+ * The families are the same ones the web client's inventory reviews (`client.ts`, MT081 onward):
+ * the mobile app is another client of the same deployment API, so the review that admitted a
+ * family on the web admits the mobile client onto it — and a family neither ticket reviewed stays
+ * undecorated until one does. Widening this list is a review, not an accident.
+ */
+export const SCOPE_HEADER_ALLOWED_PATHS: readonly ScopeHeaderPathEntry[] = [
+  {
+    id: "enterprise-api",
+    prefix: "/api/enterprise/",
+    reason:
+      "the enterprise API is the scope middleware's own surface: it resolves the selection pair into a trusted scope (MT005 ruling #1 — the headers only select; database membership decides)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "agents-rest",
+    prefix: "/api/agents",
+    reason:
+      "the coworker surface's reads and writes, the same family the web review admitted (MT084); the server consumes the pair when the legacy assembly reads it (MT125)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "team-bots-rest",
+    prefix: "/api/team-bots",
+    reason:
+      "the Team Bot publication surface, the same family the web review admitted (MT085)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "approvals-rest",
+    prefix: "/api/approvals",
+    reason:
+      "the approval surface, the same family the web review admitted (MT086)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "responsibilities-rest",
+    prefix: "/api/responsibilities",
+    reason:
+      "the standing-responsibility surface, the same family the web review admitted (MT086)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "computers-rest",
+    prefix: "/api/computers",
+    reason:
+      "the computer surface — the fleet, its action boundary and the live screen it streams, the same family the web review admitted (MT086)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "channels-rest",
+    prefix: "/api/channels",
+    reason:
+      "the conversation surface — roster, detail, attachments and member writes, the same family the web review admitted (MT087)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "groups-rest",
+    prefix: "/api/groups",
+    reason:
+      "the group-conversation surface, the same family the web review admitted (MT087)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "plugins-rest",
+    prefix: "/api/plugins",
+    reason:
+      "the plugin surface, the same family the web review admitted (MT088)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "memory-rest",
+    prefix: "/api/memory",
+    reason:
+      "the personal/company memory surface, the same family the web review admitted",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "routines-rest",
+    prefix: "/api/routines",
+    reason:
+      "the routine surface, the same family the web review admitted",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "craft-rest",
+    prefix: "/api/craft",
+    reason:
+      "the craft surface — sessions, files, artifacts and their downloads, the same family the web review admitted",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "workshop-rest",
+    prefix: "/api/workshop",
+    reason:
+      "the workshop surface — turns, artifacts and their uploads/downloads, the same family the web review admitted",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "marketplace-rest",
+    prefix: "/api/marketplace",
+    reason:
+      "the marketplace surface, the same family the web review admitted",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "components-rest",
+    prefix: "/api/components",
+    reason:
+      "the component surface, the same family the web review admitted",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "billing-rest",
+    prefix: "/api/billing",
+    reason:
+      "the billing surface, the same family the web review admitted (MT097)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "voice-mobile-aggregate-rest",
+    prefix: "/api/voice/mobile",
+    reason:
+      "the mobile aggregation snapshot surface — the BFF shape MT066's readMobileAggregate answers behind the voice family, whose every sub-query must answer under the scope the client currently holds. The review admitting the family is MT107's own ticket; the server's HTTP wiring of the exact route lands with MT125, and the client pair rides the moment it does",
+    ownerTicket: "MT107",
+  },
+];
+
+/** One reviewed stream path the selection pair may ride as query parameters. */
+export interface ScopeStreamPathEntry {
+  readonly id: string;
+  readonly prefix: string;
+  readonly reason: string;
+  readonly ownerTicket: string;
+}
+
+/**
+ * The closed inventory of reviewed same-origin stream paths the mobile client may carry the
+ * selection pair on — the same five connection families the web inventory reviews (MT082),
+ * because the mobile app opens the same streams against the same deployment.
+ */
+export const SCOPE_STREAM_ALLOWED_PATHS: readonly ScopeStreamPathEntry[] = [
+  {
+    id: "workshop-turn-events",
+    prefix: "/api/workshop/",
+    reason:
+      "the workshop turn stream: an SSE read, which cannot carry request headers, so the pair rides the query on the one URL family this stream opens",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "craft-turn-events",
+    prefix: "/api/craft/",
+    reason:
+      "the craft session's turn and scheduled-run stream reads: same connection family as the workshop stream",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "channel-roster-events",
+    prefix: "/api/channels/events",
+    reason:
+      "the channel roster's event stream: an upgrade or SSE read, which cannot carry request headers, so the pair rides the query",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "computer-screen-stream",
+    prefix: "/api/computers/",
+    reason:
+      "the live computer screen stream: an upgrade request, which cannot carry request headers, so the pair rides the query",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "voice-call-establishment",
+    prefix: "/api/voice/calls",
+    reason:
+      "the POST that establishes a voice call — the stream's subscription moment; the realtime socket it returns is a third-party origin and never receives the pair",
+    ownerTicket: "MT105",
+  },
+];
+
+/** Whether a path is same-origin shaped for this client: a root-relative path, not protocol-relative. */
+function sameOriginPath(path: string): boolean {
+  return path.startsWith("/") && !path.startsWith("//");
+}
+
+/**
+ * The header half of the pair, for REST-shaped requests (fetch can carry headers).
+ *
+ * `null` (personal context: no company/team selected) attaches NOTHING — a missing selection is
+ * carried as absent, never defaulted. A path outside the inventory, or one that is not a
+ * same-origin relative path, is left undecorated: the pair must not leak onto a surface no ticket
+ * reviewed (AC1).
+ */
+export function scopeHeaders(
+  path: string,
+  selection: ScopeSelection | null,
+): Record<string, string> | null {
+  if (selection === null) return null;
+  if (!sameOriginPath(path)) return null;
+  const bare = path.split("?")[0] as string;
+  if (
+    !SCOPE_HEADER_ALLOWED_PATHS.some((entry) => bare.startsWith(entry.prefix))
+  ) {
+    return null;
+  }
+  return {
+    [TENANT_HEADER]: selection.tenantId,
+    [WORKSPACE_HEADER]: selection.workspaceId,
+  };
+}
+
+/**
+ * The query half of the pair, for stream-shaped connections (SSE reads and WebSocket upgrades
+ * cannot carry request headers).
+ *
+ * Same gates as `scopeHeaders`: same-origin relative paths on the reviewed stream inventory only,
+ * existing query parameters preserved (a stream's resume cursor rides the same URL), and a `null`
+ * selection changes nothing at all.
+ */
+export function withStreamScope(
+  path: string,
+  selection: ScopeSelection | null,
+): string {
+  if (selection === null) return path;
+  if (!sameOriginPath(path)) return path;
+  const queryAt = path.indexOf("?");
+  const bare = queryAt === -1 ? path : path.slice(0, queryAt);
+  if (
+    !SCOPE_STREAM_ALLOWED_PATHS.some((entry) => bare.startsWith(entry.prefix))
+  ) {
+    return path;
+  }
+  const pair =
+    `${TENANT_HEADER}=${encodeURIComponent(selection.tenantId)}` +
+    `&${WORKSPACE_HEADER}=${encodeURIComponent(selection.workspaceId)}`;
+  return queryAt === -1 ? `${path}?${pair}` : `${path}&${pair}`;
+}
+
+/**
+ * The typed refusal an answer earns when it outlived its scope — the mobile name for the web's
+ * `TenantSelectionChangedError`, message included: an answer that arrives after the switch is
+ * dropped, never applied to the scope that replaced the one it was asked under (AC3).
+ */
+export class TenantSelectionChangedError extends Error {
+  constructor() {
+    super("That answer outlived the tenant it was asked under.");
+    this.name = "TenantSelectionChangedError";
+  }
+}
+
+/**
+ * One scope-bound fetch: the pair rides the URL as headers (REST) or query (streams) per the two
+ * inventories, and the answer is refused on arrival if the generation moved while it was in
+ * flight.
+ *
+ * `fetchLike` is injected (the app's fetch, a test's stand-in) so the rule runs identically in CI
+ * with no runtime beneath it. A pending scope source refuses before dialing: a business read is
+ * not established on a guess.
+ */
+export function createScopedFetch(options: {
+  store: TenancyStore;
+  fetchLike: (input: string, init?: { headers?: Record<string, string> }) => Promise<Response>;
+}): (
+  path: string,
+  init?: { headers?: Record<string, string> },
+) => Promise<Response> {
+  return async (path, init) => {
+    const scope = options.store.scope();
+    if (scope.status === "pending") {
+      throw new Error("The scope source has not answered yet.");
+    }
+    const at = scope.generation;
+    const headers = scopeHeaders(path, scope.selection);
+    const streamPath = withStreamScope(path, scope.selection);
+    const response = await options.fetchLike(streamPath, {
+      ...init,
+      ...(headers === null ? {} : { headers: { ...init?.headers, ...headers } }),
+    });
+    if (!options.store.stillCurrent(at)) {
+      throw new TenantSelectionChangedError();
+    }
+    return response;
+  };
+}
+
+/**
+ * A stream subscription bound to the live scope (AC2/AC4).
+ *
+ * `open(url)` is the app's connection factory (its EventSource/WebSocket adapter); this wrapper
+ * owns WHEN it opens and when it tears down: never while the scope source is pending, always
+ * under the CURRENT selection at (re)connect — never a defaulted one — and torn down the moment
+ * the scope key moves (a pair change or a generation advance, i.e. a switch anywhere), with the
+ * old connection's late frames dropped by the generation check `frameStillCurrent`.
+ *
+ * The app drives reconnects itself (its runtime owns backoff); every reconnect calls `reopen()`,
+ * which re-reads the scope world fresh — a dropped line that comes back answers under the scope
+ * that is current THEN (AC4).
+ */
+export function createScopeBoundStream(options: {
+  store: TenancyStore;
+  open: (url: string) => { close: () => void };
+}): {
+  /** Open (or reopen) under the current scope; refuses while the scope source is pending. */
+  reopen: (path: string) => { url: string; generation: number } | { refused: "scope-pending" };
+  /** Tear the live connection down, if one is open. */
+  close: () => void;
+  /** The scope key the live connection was opened under, for change detection. */
+  openedKey: () => string | null;
+  /** Whether a frame from the live connection may still be applied (the generation rule). */
+  frameStillCurrent: (generation: number) => boolean;
+} {
+  let live: { connection: { close: () => void }; key: string; generation: number } | null = null;
+  return {
+    reopen(path) {
+      const scope = options.store.scope();
+      if (scope.status === "pending") return { refused: "scope-pending" };
+      // Reconnects answer under the CURRENT selection — never the one the dropped line had.
+      live?.connection.close();
+      const url = withStreamScope(path, scope.selection);
+      live = {
+        connection: options.open(url),
+        key: scope.key,
+        generation: scope.generation,
+      };
+      return { url, generation: scope.generation };
+    },
+    close() {
+      live?.connection.close();
+      live = null;
+    },
+    openedKey() {
+      return live?.key ?? null;
+    },
+    frameStillCurrent(generation) {
+      // A frame from a connection opened at `generation` may not decorate a screen whose scope
+      // has since moved — the belt for a frame already in flight through the teardown.
+      return live !== null && live.generation === generation && options.store.stillCurrent(generation);
+    },
+  };
+}
+
+/**
+ * The media cache key for one URI: names the user's scope beside the URI itself, so the same
+ * company file cached under two scopes is two entries, and an entry filed under one scope is
+ * simply not found after a switch (AC2: the old scope's media is no longer served).
+ *
+ * Filed through the tenancy store's own bucket (the same prefix a switch drops wholesale), so
+ * media isolation rides the SAME removal discipline as every other business entry — no second
+ * cache to keep in step.
+ */
+export function mediaCacheKey(store: TenancyStore, uri: string): string {
+  return `media:${store.cachePrefix()}:${uri}`;
+}
+
+/** Read one URI's cached media bytes through the store (absent after a switch, by the store's rule). */
+export function readMediaCache<T>(
+  store: TenancyStore,
+  uri: string,
+): { status: "present"; value: T } | { status: "absent" } {
+  return store.read<T>(mediaCacheKey(store, uri));
+}
+
+/** Cache one URI's media under the current scope only. */
+export function writeMediaCache(
+  store: TenancyStore,
+  uri: string,
+  value: unknown,
+): void {
+  store.write(mediaCacheKey(store, uri), value);
+}

From 403380ffe3a1b63795e84e792ed583dbf02af29f Mon Sep 17 00:00:00 2001
From: wuyj <wuyj@yinhai.com>
Date: Fri, 23 Oct 2026 00:10:21 +0800
Subject: [PATCH 7/7] =?UTF-8?q?chore(sync):=20=E4=BF=9D=E5=AD=98=20mobile?=
 =?UTF-8?q?=20openbot=20=E9=9B=86=E6=88=90=E6=9C=AA=E6=8F=90=E4=BA=A4?=
 =?UTF-8?q?=E6=96=87=E4=BB=B6?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 apps/mobile/src/openbot/aggregation.test.ts   | 330 ++++++++++++++
 apps/mobile/src/openbot/tenancy.test.ts       | 337 ++++++++++++++
 apps/mobile/src/openbot/tenancy.ts            | 421 ++++++++++++++++++
 .../openbot/three-client-selection.test.ts    | 392 ++++++++++++++++
 apps/mobile/src/openbot/transport.test.ts     | 349 +++++++++++++++
 apps/mobile/src/openbot/transport.ts          | 409 +++++++++++++++++
 6 files changed, 2238 insertions(+)
 create mode 100644 apps/mobile/src/openbot/aggregation.test.ts
 create mode 100644 apps/mobile/src/openbot/tenancy.test.ts
 create mode 100644 apps/mobile/src/openbot/tenancy.ts
 create mode 100644 apps/mobile/src/openbot/three-client-selection.test.ts
 create mode 100644 apps/mobile/src/openbot/transport.test.ts
 create mode 100644 apps/mobile/src/openbot/transport.ts

diff --git a/apps/mobile/src/openbot/aggregation.test.ts b/apps/mobile/src/openbot/aggregation.test.ts
new file mode 100644
index 000000000..0ba7fa836
--- /dev/null
+++ b/apps/mobile/src/openbot/aggregation.test.ts
@@ -0,0 +1,330 @@
+// MT107 (Issue #150): the mobile aggregation surface answers under the scope the
+// client CURRENTLY holds — every sub-query of it — and the streaming and media
+// transports keep the same discipline across three clients.
+//
+// Two halves, one per ticket AC group:
+//
+//   The AGGREGATION half is client-side here. The aggregation snapshot (MT066's
+//   readMobileAggregate: voice sessions, dictation usage, push devices — three sub-queries)
+//   is read through the scoped transport: the request carries the current selection pair as
+//   headers on the reviewed mobile-aggregation family (the inventory entry MT107's review
+//   admits in transport.ts), an EMPTY scope is carried as absent (never a defaulted pair),
+//   and each sub-collection lands only while the generation it left under still stands — a
+//   switch mid-snapshot refuses the rest and drops what landed. The SERVER half of
+//   "every sub-query returns only the current scope" is MT066's own suite
+//   (server/tests/multitenancy/voice-mobile-bff.test.ts, real PostgreSQL + restricted roles);
+//   this round's run record for it lives in the parent worktree's .archive run (see the run
+//   report), so both halves are independently re-checkable.
+//
+//   The STREAM/MEDIA half re-runs MT105's lifecycle rules AT the three clients over one
+//   identity matrix (same shape as three-client-selection.test.ts): a stream opens with the
+//   current pair in its query, its late frames die with a switch, a reconnect answers under
+//   the scope current THEN, and media never crosses a scope.
+//
+// Platform deltas are recorded, not guessed at: device and simulator runs are explicitly
+// UNVERIFIED in the parent worktree's run report (the ticket's own note); this file runs the
+// whole matrix in CI with no runtime beneath it.
+//
+// Rerun: bun test apps/openmuse/apps/mobile/src/openbot/aggregation.test.ts
+
+import { describe, expect, test } from "bun:test";
+
+import {
+  createTenancyStore,
+  type ScopeSelection,
+  type ScopeStorage,
+} from "./tenancy";
+import {
+  createScopedFetch,
+  createScopeBoundStream,
+  mediaCacheKey,
+  readMediaCache,
+  TENANT_HEADER,
+  TenantSelectionChangedError,
+  WORKSPACE_HEADER,
+  writeMediaCache,
+  withStreamScope,
+} from "./transport";
+
+const USER = "user-1";
+const ACME: ScopeSelection = { tenantId: "acme", workspaceId: "acme-finance" };
+const GLOBEX: ScopeSelection = { tenantId: "globex", workspaceId: "globex-ops" };
+
+/** The aggregation snapshot's shape, mirroring MT066's ScopedMobileAggregate sub-collections. */
+type AggregateSnapshot = {
+  voiceSessions: { sessionId: string; tenantId: string }[];
+  dictationUsage: { id: string; tenantId: string }[];
+  pushDevices: { deviceId: string; tenantId: string }[];
+};
+
+function snapshotOf(tenantId: string): AggregateSnapshot {
+  return {
+    voiceSessions: [{ sessionId: `${tenantId}-session`, tenantId }],
+    dictationUsage: [{ id: `${tenantId}-usage`, tenantId }],
+    pushDevices: [{ deviceId: `${tenantId}-device`, tenantId }],
+  };
+}
+
+const AGGREGATE_PATH = "/api/voice/mobile/aggregate";
+
+const CLIENTS = ["web-mirror", "ios", "android"] as const;
+type ClientName = (typeof CLIENTS)[number];
+
+/** One whole client: its own store, storage slot, scoped fetch and a recording transport. */
+function clientWorld(name: ClientName) {
+  const storage = memoryStorage();
+  const store = createTenancyStore({ userId: USER, storage });
+  const calls: Array<{ url: string; headers: Record<string, string> }> = [];
+  const fetch = createScopedFetch({
+    store,
+    fetchLike: async (url, init) => {
+      calls.push({ url, headers: { ...(init?.headers ?? {}) } });
+      return jsonResponse(200, snapshotOf(scopeTenantOf(url, init?.headers)));
+    },
+  });
+  return { name, storage, store, fetch, calls };
+}
+
+/** What the server would have answered: the scope the request actually arrived under. */
+function scopeTenantOf(
+  url: string,
+  headers?: Record<string, string>,
+): string {
+  return headers?.[TENANT_HEADER] ?? new URL(`https://x.test${url}`).searchParams.get(TENANT_HEADER) ?? "personal";
+}
+
+/**
+ * The aggregation read as the app consumes it: one scoped request, then the snapshot's three
+ * sub-collections landing one by one — each write gated by the generation the request left
+ * under, so a switch anywhere in the snapshot refuses everything not yet landed (and the
+ * store's own switch has already dropped whatever did land).
+ */
+async function landAggregate(
+  world: ReturnType<typeof clientWorld>,
+  betweenSubqueries?: () => Promise<void> | void,
+): Promise<{ landed: string[] }> {
+  const at = world.store.generationNow();
+  const response = await world.fetch(AGGREGATE_PATH);
+  const snapshot = (await response.json()) as AggregateSnapshot;
+  const landed: string[] = [];
+  for (const [key, rows] of [
+    ["aggregate:voice-sessions", snapshot.voiceSessions],
+    ["aggregate:dictation-usage", snapshot.dictationUsage],
+    ["aggregate:push-devices", snapshot.pushDevices],
+  ] as const) {
+    await betweenSubqueries?.();
+    if (!world.store.stillCurrent(at)) {
+      // The same refusal the scoped fetch raises for a whole answer, raised here per
+      // sub-query: a sub-collection may not land into a scope it was not asked under.
+      return Promise.reject(new TenantSelectionChangedError());
+    }
+    world.store.write(key, rows);
+    landed.push(key);
+  }
+  return { landed };
+}
+
+// ---------------------------------------------------------------------------
+// AC1: the aggregation request and every sub-query answer under the current
+//      scope — including the empty scope
+// ---------------------------------------------------------------------------
+
+describe("MT107 AC1 the aggregation surface carries the current scope", () => {
+  test("the request carries the CURRENT pair — per request, on every client", async () => {
+    for (const name of CLIENTS) {
+      const world = clientWorld(name);
+      await world.store.selectScope(ACME);
+      await landAggregate(world);
+      expect(world.calls[0]?.headers[TENANT_HEADER]).toBe("acme");
+      expect(world.calls[0]?.headers[WORKSPACE_HEADER]).toBe("acme-finance");
+      // The pair is read per request: after a switch, the next aggregation reads Globex.
+      await world.store.selectScope(GLOBEX);
+      await landAggregate(world);
+      expect(world.calls[1]?.headers[TENANT_HEADER]).toBe("globex");
+      expect(world.calls[1]?.headers[WORKSPACE_HEADER]).toBe("globex-ops");
+    }
+  });
+
+  test("a switch mid-snapshot refuses the un-landed sub-queries and drops the landed", async () => {
+    for (const name of CLIENTS) {
+      const world = clientWorld(name);
+      await world.store.selectScope(ACME);
+      let switched = false;
+      const outcome = await capture(() =>
+        landAggregate(world, async () => {
+          // The switch lands after the first sub-collection, before the second.
+          if (!switched) {
+            switched = true;
+            await world.store.selectScope(GLOBEX);
+          }
+        }),
+      );
+      expect(outcome).toBeInstanceOf(TenantSelectionChangedError);
+      // Nothing of the Acme snapshot survived: the landed sub-collection went with the
+      // switch's bucket drop, and the un-landed ones never wrote anywhere.
+      expect(world.store.read("aggregate:voice-sessions").status).toBe("absent");
+      expect(world.store.read("aggregate:dictation-usage").status).toBe("absent");
+      expect(world.store.read("aggregate:push-devices").status).toBe("absent");
+      // The Globex bucket is clean too: a late sub-query may not land into the scope that
+      // replaced the one it was asked under.
+      await world.store.selectScope(ACME);
+      expect(world.store.read("aggregate:voice-sessions").status).toBe("absent");
+    }
+  });
+
+  test("the empty scope is carried as absent — never a defaulted pair — and lands on the personal shelf", async () => {
+    for (const name of CLIENTS) {
+      const world = clientWorld(name);
+      // No selection: the request carries NO pair at all, and the answer is the personal
+      // context's own (the server keys an undecorated request to the caller's personal
+      // scope — a missing selection is carried as missing, MT104's rule, on the wire).
+      await landAggregate(world);
+      expect(TENANT_HEADER in (world.calls[0]?.headers ?? {})).toBe(false);
+      expect(WORKSPACE_HEADER in (world.calls[0]?.headers ?? {})).toBe(false);
+      expect(world.store.read("aggregate:voice-sessions").status).toBe("present");
+      // A later scoped read never sees the personal shelf's aggregate, in either direction.
+      await world.store.selectScope(ACME);
+      expect(world.store.read("aggregate:voice-sessions").status).toBe("absent");
+      await world.store.selectScope(null);
+      expect(world.store.read("aggregate:voice-sessions").status).toBe("absent");
+    }
+  });
+});
+
+// ---------------------------------------------------------------------------
+// AC2: streaming requests carry the right scope; an old connection is
+//      cancelled and its late frames refused
+// ---------------------------------------------------------------------------
+
+describe("MT107 AC2 streams carry the current scope and die with a switch", () => {
+  test("the stream URL carries the current pair; a switch cancels the line and its late frames", async () => {
+    for (const name of CLIENTS) {
+      const world = clientWorld(name);
+      const opened: Array<{ url: string; closed: () => void }> = [];
+      const stream = createScopeBoundStream({
+        store: world.store,
+        open: (url) => {
+          const connection = { closed: false, close: () => { connection.closed = true; } };
+          opened.push({ url, closed: () => connection.closed });
+          return connection;
+        },
+      });
+      await world.store.selectScope(ACME);
+      const first = stream.reopen("/api/voice/calls/live");
+      if ("refused" in first) throw new Error("expected an open, not a refusal");
+      expect(first.url).toContain(`${TENANT_HEADER}=acme`);
+      expect(first.url).toContain(`${WORKSPACE_HEADER}=acme-finance`);
+      expect(stream.openedKey()).toContain("acme/acme-finance");
+
+      // A frame from the live connection may land while the scope stands…
+      expect(stream.frameStillCurrent(first.generation)).toBe(true);
+      // …and the switch kills it: late frames are refused by the generation rule.
+      await world.store.selectScope(GLOBEX);
+      expect(stream.frameStillCurrent(first.generation)).toBe(false);
+
+      // Reconnect answers under the scope that is current THEN, and the old line is closed.
+      const second = stream.reopen("/api/voice/calls/live");
+      if ("refused" in second) throw new Error("expected an open, not a refusal");
+      expect(second.url).toContain(`${TENANT_HEADER}=globex`);
+      expect(second.url).toContain(`${WORKSPACE_HEADER}=globex-ops`);
+      const firstLineClosed = opened[0].closed();
+      expect(firstLineClosed).toBe(true);
+      expect(stream.frameStillCurrent(second.generation)).toBe(true);
+    }
+  });
+
+  test("a pending scope source refuses before dialing, on every client", () => {
+    const store = createTenancyStore({ userId: undefined, storage: memoryStorage() });
+    let dialed = 0;
+    const stream = createScopeBoundStream({
+      store,
+      open: () => {
+        dialed += 1;
+        return { close: () => {} };
+      },
+    });
+    expect(stream.reopen("/api/voice/calls/live")).toEqual({
+      refused: "scope-pending",
+    });
+    expect(dialed).toBe(0);
+  });
+
+  test("the stream scope rides the query with the resume cursor preserved", () => {
+    const url = withStreamScope("/api/voice/calls/live?cursor=42", ACME);
+    expect(url).toContain("cursor=42");
+    expect(url).toContain(`${TENANT_HEADER}=acme`);
+    expect(url).toContain(`${WORKSPACE_HEADER}=acme-finance`);
+    // An empty selection changes nothing at all.
+    expect(withStreamScope("/api/voice/calls/live?cursor=42", null)).toBe(
+      "/api/voice/calls/live?cursor=42",
+    );
+  });
+});
+
+// ---------------------------------------------------------------------------
+// AC3: media never crosses a scope, on every client
+// ---------------------------------------------------------------------------
+
+describe("MT107 AC3 media does not cross scopes", () => {
+  test("one URI is one entry per scope, and a switch makes the old entry unreachable", async () => {
+    for (const name of CLIENTS) {
+      const world = clientWorld(name);
+      const URI = "/api/craft/file/1/media";
+      await world.store.selectScope(ACME);
+      writeMediaCache(world.store, URI, { bytes: "acme-bytes" });
+      expect(readMediaCache<{ bytes: string }>(world.store, URI)).toEqual({
+        status: "present",
+        value: { bytes: "acme-bytes" },
+      });
+
+      await world.store.selectScope(GLOBEX);
+      // The Acme media is simply not found — never served beside Globex's own.
+      expect(readMediaCache(world.store, URI)).toEqual({ status: "absent" });
+      writeMediaCache(world.store, URI, { bytes: "globex-bytes" });
+      expect(readMediaCache<{ bytes: string }>(world.store, URI)).toEqual({
+        status: "present",
+        value: { bytes: "globex-bytes" },
+      });
+
+      // The personal context is its own shelf, in both directions.
+      await world.store.selectScope(null);
+      expect(readMediaCache(world.store, URI)).toEqual({ status: "absent" });
+
+      // The media key names the scope beside the URI (the isolation is in the key).
+      await world.store.selectScope(ACME);
+      expect(mediaCacheKey(world.store, URI)).toBe(
+        `media:acme/acme-finance:${URI}`,
+      );
+    }
+  });
+});
+
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+
+function memoryStorage(seed: Record<string, string> = {}): ScopeStorage {
+  const slots = new Map(Object.entries(seed));
+  return {
+    getItem: (key: string) => slots.get(key) ?? null,
+    setItem: (key: string, value: string) => {
+      slots.set(key, value);
+    },
+  };
+}
+
+function jsonResponse(status: number, body: unknown): Response {
+  return new Response(JSON.stringify(body), {
+    status,
+    headers: { "content-type": "application/json" },
+  });
+}
+
+async function capture(run: () => Promise<unknown>): Promise<unknown> {
+  try {
+    await run();
+    return null;
+  } catch (error) {
+    return error;
+  }
+}
diff --git a/apps/mobile/src/openbot/tenancy.test.ts b/apps/mobile/src/openbot/tenancy.test.ts
new file mode 100644
index 000000000..722a11b25
--- /dev/null
+++ b/apps/mobile/src/openbot/tenancy.test.ts
@@ -0,0 +1,337 @@
+// MT104 (Issue #147): the mobile tenancy adapter's selection and cache half, pinned against the
+// WEB side's contract. Every behavior here has its twin in the web suites
+// (app/tests/multitenancy/selection.test.tsx, cache-generation.test.tsx): the same six kinds, the
+// same refusal mapping, the same URL-authority and never-default rules, the same
+// one-generation/one-removal switch. The file imports nothing but bun:test and the adapter — no
+// React Native, no app runtime — which is AC4: the adapter layer's tests run in CI independently.
+
+import { describe, expect, test } from "bun:test";
+
+import {
+  createTenancyStore,
+  type ScopeSelection,
+  type ScopeStorage,
+  selectionFromSources,
+  selectionState,
+  selectionStorageKey,
+  readStoredSelection,
+  readWorkspaceScopeListing,
+  scopeRefusalOf,
+  storeSelection,
+  WorkspaceScopeRefusedError,
+} from "./tenancy";
+
+const USER = "user-1";
+const ACME: ScopeSelection = { tenantId: "acme", workspaceId: "acme-finance" };
+const ACME_OPS: ScopeSelection = { tenantId: "acme", workspaceId: "acme-ops" };
+const GLOBEX: ScopeSelection = {
+  tenantId: "globex",
+  workspaceId: "globex-ops",
+};
+
+const LISTING = {
+  companies: [
+    {
+      tenantId: "acme",
+      name: "Acme",
+      role: "member",
+      memberEpoch: 7,
+      teams: [
+        { workspaceId: "acme-finance", name: "Finance" },
+        { workspaceId: "acme-ops", name: "Ops" },
+      ],
+    },
+    {
+      tenantId: "globex",
+      name: "Globex",
+      role: "member",
+      memberEpoch: 2,
+      teams: [{ workspaceId: "globex-ops", name: "Ops" }],
+    },
+  ],
+};
+
+/** An in-memory storage stand-in, so the persistence rules run the adapter's real code in CI. */
+function memoryStorage(seed: Record<string, string> = {}): ScopeStorage {
+  const slots = new Map(Object.entries(seed));
+  return {
+    getItem: (key: string) => slots.get(key) ?? null,
+    setItem: (key: string, value: string) => {
+      slots.set(key, value);
+    },
+  };
+}
+
+// ---------------------------------------------------------------------------
+// The listing read: refusal semantics identical to the web's
+// ---------------------------------------------------------------------------
+
+describe("readWorkspaceScopeListing", () => {
+  test("a listing answers as itself", async () => {
+    const listing = await readWorkspaceScopeListing(async () =>
+      jsonResponse(200, LISTING),
+    );
+    expect(listing.companies).toHaveLength(2);
+  });
+
+  test("a non-ok listing refuses with the server's own code", async () => {
+    const error = await capture(async () =>
+      readWorkspaceScopeListing(() =>
+        jsonResponse(403, { error: { code: "WORKSPACE_FORBIDDEN" } }),
+      ),
+    );
+    expect(error).toBeInstanceOf(WorkspaceScopeRefusedError);
+    const refusal = scopeRefusalOf(error);
+    expect(refusal?.status).toBe(403);
+    expect(refusal?.code).toBe("WORKSPACE_FORBIDDEN");
+  });
+
+  test("a broken body is malformed, never 'no companies'", async () => {
+    for (const body of ["not json", "{}", '{"companies": "acme"}', '{"companies": [{}]}']) {
+      const error = await capture(async () =>
+        readWorkspaceScopeListing(() => textResponse(200, body)),
+      );
+      expect(scopeRefusalOf(error)?.code).toBe("WORKSPACE_SCOPE_MALFORMED");
+    }
+  });
+
+  test("anything else thrown is not a scope refusal", () => {
+    expect(scopeRefusalOf(new Error("network died"))).toBeNull();
+    expect(scopeRefusalOf(null)).toBeNull();
+  });
+});
+
+// ---------------------------------------------------------------------------
+// The state machine: the web's six kinds
+// ---------------------------------------------------------------------------
+
+describe("selectionState", () => {
+  test("pending is loading; an error stays an error — infrastructure is not an authorization fact", () => {
+    expect(selectionState({ status: "pending" }, null)).toEqual({
+      kind: "loading",
+    });
+    expect(selectionState({ status: "error" }, ACME)).toEqual({ kind: "error" });
+  });
+
+  test("no eligible companies is the empty state", () => {
+    expect(
+      selectionState({ status: "success", listing: { companies: [] } }, null),
+    ).toEqual({ kind: "empty" });
+  });
+
+  test("eligible companies and no choice is ready — nothing is picked for the person", () => {
+    expect(
+      selectionState({ status: "success", listing: LISTING }, null),
+    ).toEqual({ kind: "ready" });
+  });
+
+  test("a listed pair is selected", () => {
+    const state = selectionState(
+      { status: "success", listing: LISTING },
+      ACME,
+    );
+    expect(state.kind).toBe("selected");
+    if (state.kind === "selected") {
+      expect(state.company.tenantId).toBe("acme");
+      expect(state.team.workspaceId).toBe("acme-finance");
+    }
+  });
+
+  test("a pair the listing no longer names is revoked — shown, never silently cleared", () => {
+    expect(
+      selectionState({ status: "success", listing: LISTING }, {
+        tenantId: "gone",
+        workspaceId: "gone-team",
+      }),
+    ).toEqual({ kind: "revoked", selection: { tenantId: "gone", workspaceId: "gone-team" } });
+    // A company that still exists but hid this team is revoked too, not re-homed.
+    expect(
+      selectionState({ status: "success", listing: LISTING }, {
+        tenantId: "acme",
+        workspaceId: "acme-hid",
+      }),
+    ).toEqual({ kind: "revoked", selection: { tenantId: "acme", workspaceId: "acme-hid" } });
+  });
+});
+
+describe("selectionFromSources", () => {
+  test("a complete deep link is the authority", () => {
+    expect(
+      selectionFromSources({ company: "acme", team: "acme-ops" }, GLOBEX),
+    ).toEqual(ACME_OPS);
+  });
+
+  test("a link naming only a company is an incomplete scope, never half of the stored one", () => {
+    expect(selectionFromSources({ company: "acme" }, GLOBEX)).toBeNull();
+    expect(selectionFromSources({ team: "acme-ops" }, GLOBEX)).toBeNull();
+  });
+
+  test("a silent link falls back to the stored choice; storage never invents one", () => {
+    expect(selectionFromSources({}, GLOBEX)).toEqual(GLOBEX);
+    expect(selectionFromSources({}, null)).toBeNull();
+  });
+});
+
+// ---------------------------------------------------------------------------
+// Persistence
+// ---------------------------------------------------------------------------
+
+describe("stored selection", () => {
+  test("the slot is per-account and damaged slots read as nothing", async () => {
+    const storage = memoryStorage();
+    await storeSelection(storage, USER, ACME);
+    expect(await readStoredSelection(storage, USER)).toEqual(ACME);
+    expect(await readStoredSelection(storage, "user-2")).toBeNull();
+
+    const damaged = memoryStorage({
+      [selectionStorageKey(USER)]: "{corrupted",
+    });
+    expect(await readStoredSelection(damaged, USER)).toBeNull();
+
+    const halfShaped = memoryStorage({
+      [selectionStorageKey(USER)]: JSON.stringify({ tenantId: "acme" }),
+    });
+    expect(await readStoredSelection(halfShaped, USER)).toBeNull();
+  });
+});
+
+// ---------------------------------------------------------------------------
+// The store: one generation, one removal discipline (the MT083 rule, mobile-shaped)
+// ---------------------------------------------------------------------------
+
+describe("createTenancyStore", () => {
+  test("the scope world: pending before the user resolves, then open with the live pair", async () => {
+    const unresolved = createTenancyStore({
+      userId: undefined,
+      storage: memoryStorage(),
+    });
+    expect(unresolved.scope()).toEqual({ status: "pending" });
+
+    const storage = memoryStorage();
+    await storeSelection(storage, USER, ACME);
+    const store = createTenancyStore({
+      userId: USER,
+      storage,
+      selection: await readStoredSelection(storage, USER),
+    });
+    expect(store.scope()).toEqual({
+      status: "open",
+      userId: USER,
+      selection: ACME,
+      generation: 0,
+      key: "acme/acme-finance@0",
+    });
+  });
+
+  test("business keys name user, company and team: two scopes never read one entry (AC2)", async () => {
+    const store = createTenancyStore({
+      userId: USER,
+      storage: memoryStorage(),
+    });
+    await store.selectScope(ACME);
+    store.write("channels", ["acme-channel"]);
+    expect(store.read<string[]>("channels")).toEqual({
+      status: "present",
+      value: ["acme-channel"],
+    });
+
+    await store.selectScope(GLOBEX);
+    // The new scope's read is absent: the old scope's entry does not appear after the switch.
+    expect(store.read("channels")).toEqual({ status: "absent" });
+    store.write("channels", ["globex-channel"]);
+    expect(store.read<string[]>("channels")).toEqual({
+      status: "present",
+      value: ["globex-channel"],
+    });
+
+    // And the personal context is its own subtree, in both directions.
+    await store.selectScope(null);
+    expect(store.read("channels")).toEqual({ status: "absent" });
+    store.write("channels", ["personal-channel"]);
+    await store.selectScope(ACME);
+    expect(store.read("channels")).toEqual({ status: "absent" });
+  });
+
+  test("a team change drops only the old team's entries; a company change drops the company's", async () => {
+    const store = createTenancyStore({
+      userId: USER,
+      storage: memoryStorage(),
+    });
+    await store.selectScope(ACME);
+    store.write("draft", "finance draft");
+    await store.selectScope(ACME_OPS);
+    // Same company, other team: the finance draft is gone and does not bleed through.
+    expect(store.read("draft")).toEqual({ status: "absent" });
+    store.write("draft", "ops draft");
+    await store.selectScope(GLOBEX);
+    expect(store.read("draft")).toEqual({ status: "absent" });
+    // Back into Acme: the old team's entries were dropped with the company switch, not parked.
+    await store.selectScope(ACME);
+    expect(store.read("draft")).toEqual({ status: "absent" });
+  });
+
+  test("every switch advances the generation, and an in-flight answer is refused on arrival", async () => {
+    const storage = memoryStorage();
+    const store = createTenancyStore({ userId: USER, storage });
+    await store.selectScope(ACME);
+    const at = store.generationNow();
+
+    // An answer that lands while the scope is unchanged is accepted.
+    expect(store.stillCurrent(at)).toBe(true);
+
+    await store.selectScope(GLOBEX);
+    // The generation moved BEFORE anything else: the answer that left under Acme is refused.
+    expect(store.stillCurrent(at)).toBe(false);
+    expect(store.generationNow()).toBe(at + 1);
+
+    // The new generation's captures are current until the next switch.
+    const next = store.generationNow();
+    expect(store.stillCurrent(next)).toBe(true);
+    await store.selectScope(null);
+    expect(store.stillCurrent(next)).toBe(false);
+  });
+
+  test("a same-scope switch is a no-op: the generation does not churn", async () => {
+    const store = createTenancyStore({
+      userId: USER,
+      storage: memoryStorage(),
+    });
+    await store.selectScope(ACME);
+    const at = store.generationNow();
+    await store.selectScope(ACME);
+    expect(store.generationNow()).toBe(at);
+  });
+
+  test("the switch mirrors the choice to the per-account storage slot", async () => {
+    const storage = memoryStorage();
+    const store = createTenancyStore({ userId: USER, storage });
+    await store.selectScope(ACME);
+    expect(await readStoredSelection(storage, USER)).toEqual(ACME);
+    await store.selectScope(GLOBEX);
+    expect(await readStoredSelection(storage, USER)).toEqual(GLOBEX);
+  });
+});
+
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+
+function jsonResponse(status: number, body: unknown): Response {
+  return new Response(JSON.stringify(body), {
+    status,
+    headers: { "content-type": "application/json" },
+  });
+}
+
+function textResponse(status: number, body: string): Response {
+  return new Response(body, { status });
+}
+
+async function capture(run: () => Promise<unknown>): Promise<unknown> {
+  try {
+    await run();
+    return null;
+  } catch (error) {
+    return error;
+  }
+}
diff --git a/apps/mobile/src/openbot/tenancy.ts b/apps/mobile/src/openbot/tenancy.ts
new file mode 100644
index 000000000..03f3b0a81
--- /dev/null
+++ b/apps/mobile/src/openbot/tenancy.ts
@@ -0,0 +1,421 @@
+/*
+ * The mobile tenancy adapter's selection half, MT104 (Issue #147).
+ *
+ * THE CONTRACT IS THE WEB SIDE'S. The OpenBot web workbench shipped its selection as three seams
+ * — `lib/enterprise/tenant/selection.ts` (the choice and its state machine), `scoped-cache.ts`
+ * (where one scope's business entries live) and `stream-scope.ts` (the live selection + the
+ * generation) — and this module is that same design re-expressed for a mobile app: the same
+ * listing shape, the same six kinds, the same refusal behavior, the same storage discipline, the
+ * same one-generation rule. Where the web reads `window.localStorage` and a `QueryClient`, the
+ * mobile adapter takes injected collaborators (`ScopeStorage`, a plain store) because a React
+ * Native app owns neither — and because injected collaborators are what let this file's tests run
+ * in CI with no runtime beneath them (AC4).
+ *
+ * WHAT STAYS TRUE, BIT FOR BIT:
+ * - The listing is the server's own eligibility fact (`GET /api/enterprise/workspace-scope`, the
+ *   MT006 lister); nothing is selected unless a person picks it, and nothing is ever defaulted
+ *   (spec A6).
+ * - A non-ok listing is a typed refusal (`WorkspaceScopeRefusedError`) and a broken body is
+ *   `WORKSPACE_SCOPE_MALFORMED` — an infrastructure failure never masquerades as "no companies".
+ * - A deep link is the authority whenever it names anything; a link naming only a company is an
+ *   incomplete scope, never half of the stored one.
+ * - The switch advances ONE generation and removes the old scope's business entries; a response
+ *   that left under one selection and lands under another is refused on arrival.
+ */
+
+/** One team the actor belongs to, named by the tenant-scoped data read. */
+export type WorkspaceScopeTeam = {
+  workspaceId: string;
+  name: string;
+};
+
+/** One company the actor is an active member of, with the teams they belong to. */
+export type WorkspaceScopeCompany = {
+  tenantId: string;
+  name: string;
+  role: string;
+  memberEpoch: number;
+  teams: WorkspaceScopeTeam[];
+};
+
+/** The listing's whole answer: eligible companies, nothing pre-selected. */
+export type WorkspaceScopeListing = {
+  companies: WorkspaceScopeCompany[];
+};
+
+/** A complete selection: both halves, or no selection at all. */
+export type ScopeSelection = {
+  tenantId: string;
+  workspaceId: string;
+};
+
+/**
+ * The refusal a non-ok listing raises — the same facts the web error carries (status and the
+ * server's own code), never flattened into a sentence an empty state could mistake for its own.
+ */
+export class WorkspaceScopeRefusedError extends Error {
+  readonly status: number;
+  readonly code: string;
+
+  constructor(status: number, code: string) {
+    super(
+      `The workspace-scope listing refused the request (${status} ${code}).`,
+    );
+    this.name = "WorkspaceScopeRefusedError";
+    this.status = status;
+    this.code = code;
+  }
+}
+
+/** The typed refusal behind an error, for callers that branch on it; anything else is not one. */
+export function scopeRefusalOf(
+  error: unknown,
+): WorkspaceScopeRefusedError | null {
+  return error instanceof WorkspaceScopeRefusedError ? error : null;
+}
+
+/**
+ * Read one listing from a fetch-like answer, with the web side's exact refusal mapping: a non-ok
+ * answer refuses with the server's own error code (or `WORKSPACE_SCOPE_REFUSED`), and a 200 that
+ * is not a listing of companies with teams refuses as `WORKSPACE_SCOPE_MALFORMED` — because a
+ * broken body must never read as "you have no companies".
+ */
+export async function readWorkspaceScopeListing(
+  fetchListing: () => Promise<Response>,
+): Promise<WorkspaceScopeListing> {
+  const response = await fetchListing();
+  if (!response.ok) {
+    const body = (await response.json().catch(() => null)) as {
+      error?: unknown;
+    } | null;
+    const envelope = body?.error;
+    const code =
+      envelope !== null &&
+      typeof envelope === "object" &&
+      typeof (envelope as Record<string, unknown>).code === "string"
+        ? (envelope as { code: string }).code
+        : "WORKSPACE_SCOPE_REFUSED";
+    throw new WorkspaceScopeRefusedError(response.status, code);
+  }
+  const body = (await response.json().catch(() => null)) as unknown;
+  if (
+    body === null ||
+    typeof body !== "object" ||
+    !Array.isArray((body as Record<string, unknown>).companies)
+  ) {
+    throw new WorkspaceScopeRefusedError(
+      response.status,
+      "WORKSPACE_SCOPE_MALFORMED",
+    );
+  }
+  const companies: unknown[] = (body as { companies: unknown[] }).companies;
+  const shaped = companies.every(
+    (company) =>
+      company !== null &&
+      typeof company === "object" &&
+      typeof (company as Record<string, unknown>).tenantId === "string" &&
+      Array.isArray((company as Record<string, unknown>).teams),
+  );
+  if (!shaped) {
+    throw new WorkspaceScopeRefusedError(
+      response.status,
+      "WORKSPACE_SCOPE_MALFORMED",
+    );
+  }
+  return body as WorkspaceScopeListing;
+}
+
+// ---------------------------------------------------------------------------
+// The state machine — pure, the web's six kinds verbatim
+// ---------------------------------------------------------------------------
+
+/** The listing read a screen holds, narrowed to the facts the state machine answers on. */
+export type ListingRead =
+  | { status: "pending" }
+  | { status: "error" }
+  | { status: "success"; listing: WorkspaceScopeListing };
+
+export type SelectionState =
+  | { kind: "loading" }
+  | { kind: "error" }
+  | { kind: "empty" }
+  /** Eligible companies exist; nobody has chosen a scope. Nothing is picked for them. */
+  | { kind: "ready" }
+  | {
+      kind: "selected";
+      company: WorkspaceScopeCompany;
+      team: WorkspaceScopeTeam;
+    }
+  | {
+      kind: "revoked";
+      /** The selection that no longer matches the listing — shown, never silently cleared. */
+      selection: ScopeSelection;
+    };
+
+/**
+ * Where the chosen pair sits in the listing, or null when it does not.
+ *
+ * This IS the revocation judgment, as on the web: the server's lister is the live membership fact
+ * (a suspended company hides whole, a suspended team hides alone), so an absent pair means
+ * revoked access — and an erroring listing stays an error, because infrastructure trouble is not
+ * an authorization fact and must not dress up as one.
+ */
+export function findSelection(
+  listing: WorkspaceScopeListing,
+  selection: ScopeSelection,
+): { company: WorkspaceScopeCompany; team: WorkspaceScopeTeam } | null {
+  const company = listing.companies.find(
+    (candidate) => candidate.tenantId === selection.tenantId,
+  );
+  if (company === undefined) return null;
+  const team = company.teams.find(
+    (candidate) => candidate.workspaceId === selection.workspaceId,
+  );
+  if (team === undefined) return null;
+  return { company, team };
+}
+
+export function selectionState(
+  read: ListingRead,
+  selection: ScopeSelection | null,
+): SelectionState {
+  if (read.status === "pending") return { kind: "loading" };
+  if (read.status === "error") return { kind: "error" };
+  if (read.listing.companies.length === 0) return { kind: "empty" };
+  if (selection === null) return { kind: "ready" };
+  const found = findSelection(read.listing, selection);
+  if (found === null) return { kind: "revoked", selection };
+  return { kind: "selected", company: found.company, team: found.team };
+}
+
+/**
+ * The selection this screen holds, from the two user-explicit sources — the web rule, with the
+ * mobile deep link in the URL's seat. A deep link is the authority whenever it names anything;
+ * a link that names only a company is an incomplete scope — not half of the stored one. Storage
+ * fills only a silent link with the user's own last explicit choice; it never invents one.
+ */
+export function selectionFromSources(
+  deepLink: { company?: string; team?: string },
+  stored: ScopeSelection | null,
+): ScopeSelection | null {
+  if (deepLink.company !== undefined || deepLink.team !== undefined) {
+    if (deepLink.company !== undefined && deepLink.team !== undefined) {
+      return { tenantId: deepLink.company, workspaceId: deepLink.team };
+    }
+    return null;
+  }
+  return stored;
+}
+
+// ---------------------------------------------------------------------------
+// Persistence — the choice itself is user-explicit; storage only remembers it
+// ---------------------------------------------------------------------------
+
+/** The storage contract this module needs; AsyncStorage satisfies it, and so does a Map in CI. */
+export interface ScopeStorage {
+  getItem(key: string): string | null | Promise<string | null>;
+  setItem(key: string, value: string): void | Promise<void>;
+}
+
+/** Same prefix as the web mirror, so one account's slot means the same thing on both clients. */
+const STORAGE_PREFIX = "openbot.workspace-scope.v1:";
+
+export function selectionStorageKey(userId: string): string {
+  return `${STORAGE_PREFIX}${userId}`;
+}
+
+function scopeOf(value: unknown): ScopeSelection | null {
+  if (value === null || typeof value !== "object") return null;
+  const tenantId = (value as Record<string, unknown>).tenantId;
+  const workspaceId = (value as Record<string, unknown>).workspaceId;
+  if (
+    typeof tenantId !== "string" ||
+    tenantId === "" ||
+    typeof workspaceId !== "string" ||
+    workspaceId === ""
+  ) {
+    return null;
+  }
+  return { tenantId, workspaceId };
+}
+
+/** The user's last explicit selection, or null. A damaged slot reads as nothing. */
+export async function readStoredSelection(
+  storage: ScopeStorage,
+  userId: string,
+): Promise<ScopeSelection | null> {
+  let raw: string | null;
+  try {
+    raw = await storage.getItem(selectionStorageKey(userId));
+  } catch {
+    return null;
+  }
+  if (raw === null) return null;
+  try {
+    return scopeOf(JSON.parse(raw));
+  } catch {
+    return null;
+  }
+}
+
+/** Remember an explicit choice; storage trouble is swallowed — the caller still holds the choice. */
+export async function storeSelection(
+  storage: ScopeStorage,
+  userId: string,
+  selection: ScopeSelection,
+): Promise<void> {
+  try {
+    await storage.setItem(
+      selectionStorageKey(userId),
+      JSON.stringify(selection),
+    );
+  } catch {
+    /* best-effort mirror, exactly as on the web */
+  }
+}
+
+// ---------------------------------------------------------------------------
+// The store — one selection, one generation, one removal discipline
+// ---------------------------------------------------------------------------
+
+/**
+ * The scoped cache's answer while the scope source (the signed-in user) is unresolved — the same
+ * refusal the web streams live by: a business read is not established on a guess.
+ */
+export type TenancyScope = { status: "pending" } | {
+  status: "open";
+  userId: string;
+  selection: ScopeSelection | null;
+  generation: number;
+  /** Changes exactly when a business key must change: the pair moved, or the generation moved. */
+  key: string;
+};
+
+function sameScope(
+  left: ScopeSelection | null,
+  right: ScopeSelection | null,
+): boolean {
+  if (left === null || right === null) return left === right;
+  return (
+    left.tenantId === right.tenantId && left.workspaceId === right.workspaceId
+  );
+}
+
+/**
+ * The mobile tenancy store: the one place the live selection and its generation live. The web
+ * holds these in two cache entries a QueryClient owns; a mobile app owns no such thing, so the
+ * adapter owns them itself — a plain object, one instance per app session, created with the
+ * signed-in user and seeded from that user's storage slot.
+ */
+export function createTenancyStore(options: {
+  userId: string | undefined;
+  storage: ScopeStorage;
+  selection?: ScopeSelection | null;
+  generation?: number;
+}) {
+  const userId = options.userId;
+  let selection: ScopeSelection | null = options.selection ?? null;
+  let generation: number = options.generation ?? 0;
+  /** One cache per (company, team, generation) prefix, dropped wholesale on a switch. */
+  const scopes = new Map<string, Map<string, unknown>>();
+
+  const prefixOf = (pair: ScopeSelection | null): string => {
+    if (pair === null) return "personal";
+    return `${pair.tenantId}/${pair.workspaceId}`;
+  };
+
+  const store = {
+    /** The live scope world, in the web `StreamScope`'s shape. */
+    scope(): TenancyScope {
+      if (userId === undefined) return { status: "pending" };
+      return {
+        status: "open",
+        userId,
+        selection,
+        generation,
+        key: `${prefixOf(selection)}@${generation}`,
+      };
+    },
+
+    /**
+     * The whole switch, in the web `selectWorkspaceScope`'s order: the generation moves FIRST, so
+     * a response already in flight against the old scope is refused on arrival, and the old
+     * scope's business entries go AFTER — dropped, not invalidated, so a stale row is never
+     * visible for one render while the refetch runs. A team change inside one company drops only
+     * the old team's entries (leaving one team is not leaving the company); a company change drops
+     * the old company's whole subtree; and choosing a scope out of the personal context drops the
+     * personal context's business subtree beside it, so no stale personal entry can render beside
+     * the scope just chosen.
+     */
+    async selectScope(next: ScopeSelection | null): Promise<void> {
+      if (sameScope(selection, next)) return;
+      generation += 1;
+      const previous = selection;
+      const sameCompany =
+        previous !== null &&
+        next !== null &&
+        previous.tenantId === next.tenantId;
+      if (sameCompany) {
+        scopes.delete(prefixOf(previous));
+      } else {
+        if (previous !== null) {
+          for (const key of scopes.keys()) {
+            if (key.startsWith(`${previous.tenantId}/`)) scopes.delete(key);
+          }
+        }
+        if (previous === null && next !== null) scopes.delete("personal");
+      }
+      selection = next;
+      if (userId !== undefined && next !== null) {
+        await storeSelection(options.storage, userId, next);
+      }
+    },
+
+    // -- The scoped cache half (the web `scoped-cache.ts` rule) ------------------
+
+    /**
+     * Where one scope's business entries live: under the selection's own prefix (user, company
+     * and team all named), or — when nothing is selected — under the personal context's. A key
+     * filed here is gone the moment its scope is (AC2: the cache key names user, company and
+     * team; after a switch the old scope's data does not appear).
+     */
+    cachePrefix(): string {
+      return userId === undefined ? "unresolved" : prefixOf(selection);
+    },
+
+    read<T>(key: string): { status: "present"; value: T } | { status: "absent" } {
+      const bucket = scopes.get(prefixOf(selection));
+      if (bucket === undefined || !bucket.has(key)) return { status: "absent" };
+      return { status: "present", value: bucket.get(key) as T };
+    },
+
+    /** Write under the CURRENT scope's prefix only; a write never leaks into another scope's bucket. */
+    write(key: string, value: unknown): void {
+      const prefix = prefixOf(selection);
+      let bucket = scopes.get(prefix);
+      if (bucket === undefined) {
+        bucket = new Map();
+        scopes.set(prefix, bucket);
+      }
+      bucket.set(key, value);
+    },
+
+    /** The generation at capture time, for the in-flight refusal below. */
+    generationNow(): number {
+      return generation;
+    },
+
+    /**
+     * Whether a write that left at `at` may still land — the web `streamWriteStillCurrent` /
+     * `cacheWriteGate` rule: once any switch advanced the generation, the old scope's entries are
+     * gone, and replaying into them (or into the new scope's key) would resurrect or corrupt what
+     * the switch just cleared.
+     */
+    stillCurrent(at: number): boolean {
+      return generation === at;
+    },
+  };
+  return store;
+}
+
+export type TenancyStore = ReturnType<typeof createTenancyStore>;
diff --git a/apps/mobile/src/openbot/three-client-selection.test.ts b/apps/mobile/src/openbot/three-client-selection.test.ts
new file mode 100644
index 000000000..98b085934
--- /dev/null
+++ b/apps/mobile/src/openbot/three-client-selection.test.ts
@@ -0,0 +1,392 @@
+// MT106 (Issue #149): selection, empty states, switching and revocation answered
+// CONSISTENTLY by three clients over ONE identity matrix, with no cache crossing a scope.
+//
+// The three clients. iOS and Android run the same JavaScript layer (one Expo app, one shared
+// src/openbot), so "the iOS client" and "the Android client" are two independent instances of this
+// adapter over the same account — and "the web client" is the contract the adapter re-expresses
+// (app/src/lib/enterprise/tenant, pinned by the web suites). Each world here is therefore a full
+// client: its own store, its own device storage slot, its own scoped fetch — never a shared cache,
+// because consistency is sameness of answers, not shared state.
+//
+// The identity matrix is one set of server facts — the same listing answers (the eligibility
+// listing IS the membership fact, per MT104) — replayed at every client. What the matrix says, all
+// three must answer identically: what is eligible (AC1), what no-eligibility and revocation look
+// like (AC2), and what a switch leaves behind (AC3). Platform deltas beyond this shared layer are
+// recorded, not guessed at: the register lives in the parent worktree's run report — real-device
+// and simulator runs are explicitly UNVERIFIED there (the ticket's own note), and this file runs
+// the whole matrix in CI with no runtime beneath it, exactly like the MT104/MT105 suites it builds
+// on.
+//
+// Rerun: bun test apps/openmuse/apps/mobile/src/openbot/three-client-selection.test.ts
+
+import { describe, expect, test } from "bun:test";
+
+import {
+  createTenancyStore,
+  type ListingRead,
+  readStoredSelection,
+  readWorkspaceScopeListing,
+  type ScopeSelection,
+  type ScopeStorage,
+  scopeRefusalOf,
+  selectionFromSources,
+  selectionState,
+  type TenancyStore,
+  type WorkspaceScopeCompany,
+  type WorkspaceScopeListing,
+  WorkspaceScopeRefusedError,
+} from "./tenancy";
+import {
+  createScopedFetch,
+  TenantSelectionChangedError,
+} from "./transport";
+
+// ---------------------------------------------------------------------------
+// The identity matrix — one source of server facts, replayed at every client
+// ---------------------------------------------------------------------------
+
+const USER = "user-1";
+const ACME: ScopeSelection = { tenantId: "acme", workspaceId: "acme-finance" };
+const ACME_OPS: ScopeSelection = { tenantId: "acme", workspaceId: "acme-ops" };
+const GLOBEX: ScopeSelection = { tenantId: "globex", workspaceId: "globex-ops" };
+
+/** The companies the server currently calls eligible, with the teams under each. */
+function listingOf(
+  ...tenantIds: string[]
+): { status: "success"; listing: WorkspaceScopeListing } {
+  const catalogue: Record<string, WorkspaceScopeCompany> = {
+    acme: {
+      tenantId: "acme",
+      name: "Acme",
+      role: "member",
+      memberEpoch: 7,
+      teams: [
+        { workspaceId: "acme-finance", name: "Finance" },
+        { workspaceId: "acme-ops", name: "Ops" },
+      ],
+    },
+    globex: {
+      tenantId: "globex",
+      name: "Globex",
+      role: "member",
+      memberEpoch: 2,
+      teams: [{ workspaceId: "globex-ops", name: "Ops" }],
+    },
+  };
+  return {
+    status: "success",
+    listing: {
+      companies: tenantIds.map((id) => catalogue[id]),
+    },
+  };
+}
+
+/** The matrix's moments: full eligibility, one company suspended, everything gone, infra down. */
+const MATRIX = {
+  both: listingOf("acme", "globex"),
+  globexOnly: listingOf("globex"),
+  none: listingOf(),
+  error: { status: "error" } as ListingRead,
+};
+
+const CLIENTS = ["web-mirror", "ios", "android"] as const;
+type ClientName = (typeof CLIENTS)[number];
+
+/** One whole client over the matrix: its own store, storage slot and scoped fetch. */
+function clientWorld(name: ClientName, answer: () => Promise<Response>) {
+  const storage = memoryStorage();
+  const store = createTenancyStore({ userId: USER, storage });
+  const fetch = createScopedFetch({ store, fetchLike: () => answer() });
+  return { name, storage, store, fetch };
+}
+
+/** Run the matrix at every client and fold the answers into one comparable array. */
+async function atEveryClient(
+  run: (world: ReturnType<typeof clientWorld>) => Promise<unknown> | unknown,
+  answer: () => Promise<Response> = () => Promise.resolve(new Response("{}")),
+): Promise<Record<ClientName, unknown>> {
+  const answers = {} as Record<ClientName, unknown>;
+  for (const name of CLIENTS) {
+    answers[name] = await run(clientWorld(name, answer));
+  }
+  return answers;
+}
+
+/** The battery every client must answer identically: each matrix moment × each selection. */
+const STATE_BATTERY: Array<{
+  read: ListingRead;
+  selection: ScopeSelection | null;
+}> = [
+  ...([MATRIX.both, MATRIX.globexOnly, MATRIX.none, MATRIX.error] as const).flatMap(
+    (read) => [
+      { read, selection: null },
+      { read, selection: ACME },
+      { read, selection: ACME_OPS },
+      { read, selection: GLOBEX },
+    ],
+  ),
+];
+
+// ---------------------------------------------------------------------------
+// AC1: the selection surface lists only truly eligible companies and teams,
+//      and every client answers alike
+// ---------------------------------------------------------------------------
+
+describe("MT106 AC1 three clients list only real eligibility, identically", () => {
+  test("the whole matrix × selection battery answers identically on all three clients", async () => {
+    const answers = await atEveryClient((world) =>
+      STATE_BATTERY.map(({ read, selection }) =>
+        JSON.stringify(selectionState(read, selection)),
+      ),
+    );
+    const web = answers["web-mirror"];
+    for (const name of CLIENTS) {
+      expect(answers[name]).toEqual(web);
+      expect(answers[name]).toHaveLength(STATE_BATTERY.length);
+    }
+  });
+
+  test("a selected screen carries the listing's own row, never a local invention", async () => {
+    const answers = await atEveryClient(() => selectionState(MATRIX.both, ACME));
+    for (const name of CLIENTS) {
+      const state = answers[name] as ReturnType<typeof selectionState>;
+      expect(state).toEqual({
+        kind: "selected",
+        // The company and team objects are the matrix's own rows, byte for byte: the screen's
+        // data comes from the server's eligibility fact, and both teams appear under Acme —
+        // eligibility is the listing's word, not the selection's.
+        company: MATRIX.both.listing.companies[0],
+        team: MATRIX.both.listing.companies[0].teams[0],
+      });
+    }
+  });
+
+  test("a deep link is the authority on every client, including the half-pair refusal", async () => {
+    const answers = await atEveryClient(() => [
+      selectionFromSources({ company: "acme", team: "acme-ops" }, GLOBEX),
+      // A link naming only a company is an incomplete scope, never half of the stored one.
+      selectionFromSources({ company: "acme" }, GLOBEX),
+      selectionFromSources({}, GLOBEX),
+    ]);
+    for (const name of CLIENTS) {
+      expect(answers[name]).toEqual([ACME_OPS, null, GLOBEX]);
+    }
+  });
+});
+
+// ---------------------------------------------------------------------------
+// AC2: no-eligibility and revocation are explicit states with explicit
+//      refusals, on every client
+// ---------------------------------------------------------------------------
+
+describe("MT106 AC2 no-eligibility and revocation are explicit on every client", () => {
+  test("no eligible companies is the empty state — never an error, never a silent default", async () => {
+    const answers = await atEveryClient(() => selectionState(MATRIX.none, null));
+    for (const name of CLIENTS) {
+      expect(answers[name]).toEqual({ kind: "empty" });
+    }
+  });
+
+  test("a revoked selection is shown, not silently cleared — and re-admission re-selects", async () => {
+    const answers = await atEveryClient(async (world) => {
+      // The user's explicit choice sits in the slot; the matrix then suspends Acme.
+      await world.store.selectScope(ACME);
+      const revoked = selectionState(MATRIX.globexOnly, ACME);
+      // The slot still holds the pair: revocation is displayed, not erased.
+      const storedWhileRevoked = await readStoredSelection(
+        world.storage,
+        USER,
+      );
+      // The matrix re-admits Acme: the same stored pair selects again, no re-prompt.
+      const readmitted = selectionState(MATRIX.both, ACME);
+      return { revoked, storedWhileRevoked, readmitted };
+    });
+    for (const name of CLIENTS) {
+      expect(answers[name]).toEqual({
+        revoked: { kind: "revoked", selection: ACME },
+        storedWhileRevoked: ACME,
+        readmitted: {
+          kind: "selected",
+          company: MATRIX.both.listing.companies[0],
+          team: MATRIX.both.listing.companies[0].teams[0],
+        },
+      });
+    }
+  });
+
+  test("an infrastructure failure is an error, never 'no companies'", async () => {
+    const answers = await atEveryClient(() => selectionState(MATRIX.error, ACME));
+    for (const name of CLIENTS) {
+      expect(answers[name]).toEqual({ kind: "error" });
+    }
+  });
+
+  test("the listing refusal is typed and identical on every client", async () => {
+    const answers = await atEveryClient(() =>
+      Promise.all([
+        capture(() =>
+          readWorkspaceScopeListing(async () =>
+            jsonResponse(403, { error: { code: "WORKSPACE_FORBIDDEN" } }),
+          ),
+        ),
+        capture(() =>
+          readWorkspaceScopeListing(async () => textResponse(200, "not json")),
+        ),
+      ]),
+    );
+    for (const name of CLIENTS) {
+      const [refused, malformed] = answers[name] as [unknown, unknown];
+      expect(scopeRefusalOf(refused)?.status).toBe(403);
+      expect(scopeRefusalOf(refused)?.code).toBe("WORKSPACE_FORBIDDEN");
+      expect(scopeRefusalOf(malformed)?.code).toBe(
+        "WORKSPACE_SCOPE_MALFORMED",
+      );
+    }
+  });
+});
+
+// ---------------------------------------------------------------------------
+// AC3: after a switch, no old-scope cache and no in-flight answer — on every
+//      client, and never across clients
+// ---------------------------------------------------------------------------
+
+describe("MT106 AC3 switching leaves no old-scope cache or in-flight answer", () => {
+  test("every switch shape drops exactly the old scope's entries, on all three clients", async () => {
+    const answers = await atEveryClient(async (world) => {
+      const trace: string[] = [];
+      await world.store.selectScope(ACME);
+      world.store.write("threads", ["acme-finance-threads"]);
+      trace.push(present(world.store, "threads"));
+      // Team change inside Acme: only the old team's bucket goes.
+      await world.store.selectScope(ACME_OPS);
+      trace.push(present(world.store, "threads"));
+      world.store.write("threads", ["acme-ops-threads"]);
+      // Company change: Acme's whole subtree goes.
+      await world.store.selectScope(GLOBEX);
+      trace.push(present(world.store, "threads"));
+      world.store.write("threads", ["globex-threads"]);
+      // Scope → personal: the scoped subtree goes beside the personal shelf.
+      await world.store.selectScope(null);
+      trace.push(present(world.store, "threads"));
+      world.store.write("threads", ["personal-threads"]);
+      // Personal → scope: the personal business subtree goes too.
+      await world.store.selectScope(ACME);
+      trace.push(present(world.store, "threads"));
+      return trace;
+    });
+    for (const name of CLIENTS) {
+      // Present under its own scope, absent the moment that scope is left — no shape of
+      // switch leaves the old scope's data readable.
+      expect(answers[name]).toEqual([
+        "present",
+        "absent",
+        "absent",
+        "absent",
+        "absent",
+      ]);
+    }
+  });
+
+  test("an answer that outlives its scope is refused on arrival, on all three clients", async () => {
+    const deferred = deferredResponse();
+    const answers = await atEveryClient(async (world) => {
+      await world.store.selectScope(ACME);
+      const asked = world.fetch("/api/enterprise/threads");
+      await world.store.selectScope(GLOBEX);
+      deferred.resolve(jsonResponse(200, { threads: ["acme-finance-threads"] }));
+      const error = await capture(() => asked);
+      // And nothing of the refused answer landed anywhere: not under the new scope…
+      const newScope = present(world.store, "threads");
+      await world.store.selectScope(ACME);
+      // …and not back under the scope it was asked for.
+      const oldScope = present(world.store, "threads");
+      return { error, newScope, oldScope };
+    }, () => deferred.promise);
+    for (const name of CLIENTS) {
+      const { error, newScope, oldScope } = answers[name] as {
+        error: unknown;
+        newScope: string;
+        oldScope: string;
+      };
+      expect(error).toBeInstanceOf(TenantSelectionChangedError);
+      expect(newScope).toBe("absent");
+      expect(oldScope).toBe("absent");
+    }
+  });
+
+  test("clients are independent worlds: no shared cache, no cross-client eviction", async () => {
+    // Same account, three devices: a write on one client is invisible on the others, and a
+    // switch on one client never drops another client's entries — consistency without shared
+    // state is the whole point.
+    const worlds = CLIENTS.map((name) =>
+      clientWorld(name, () => Promise.resolve(new Response("{}"))),
+    );
+    const [web, ios, android] = worlds;
+    for (const world of worlds) await world.store.selectScope(ACME);
+    ios.store.write("threads", ["ios-only-threads"]);
+    expect(present(web.store, "threads")).toBe("absent");
+    expect(present(android.store, "threads")).toBe("absent");
+    // iOS moves to Globex; web and android keep reading their own Acme entries.
+    await ios.store.selectScope(GLOBEX);
+    expect(present(ios.store, "threads")).toBe("absent");
+    expect(present(web.store, "threads")).toBe("absent"); // web never had ios's entry
+    web.store.write("threads", ["web-threads"]);
+    expect(present(web.store, "threads")).toBe("present");
+    expect(present(android.store, "threads")).toBe("absent");
+    // The account's slot is the user's explicit choice on each client — ios's switch moved
+    // only ios's slot.
+    expect(await readStoredSelection(web.storage, USER)).toEqual(ACME);
+    expect(await readStoredSelection(ios.storage, USER)).toEqual(GLOBEX);
+  });
+});
+
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+
+function present(store: TenancyStore, key: string): "present" | "absent" {
+  const read = store.read(key);
+  return read.status;
+}
+
+function memoryStorage(seed: Record<string, string> = {}): ScopeStorage {
+  const slots = new Map(Object.entries(seed));
+  return {
+    getItem: (key: string) => slots.get(key) ?? null,
+    setItem: (key: string, value: string) => {
+      slots.set(key, value);
+    },
+  };
+}
+
+function jsonResponse(status: number, body: unknown): Response {
+  return new Response(JSON.stringify(body), {
+    status,
+    headers: { "content-type": "application/json" },
+  });
+}
+
+function textResponse(status: number, body: string): Response {
+  return new Response(body, { status });
+}
+
+/** One answer whose arrival the test controls, for the in-flight refusal cases. */
+function deferredResponse(): {
+  promise: Promise<Response>;
+  resolve: (response: Response) => void;
+} {
+  let resolve!: (response: Response) => void;
+  const promise = new Promise<Response>((settle) => {
+    resolve = settle;
+  });
+  return { promise, resolve };
+}
+
+async function capture(run: () => Promise<unknown>): Promise<unknown> {
+  try {
+    await run();
+    return null;
+  } catch (error) {
+    return error;
+  }
+}
diff --git a/apps/mobile/src/openbot/transport.test.ts b/apps/mobile/src/openbot/transport.test.ts
new file mode 100644
index 000000000..0c3193328
--- /dev/null
+++ b/apps/mobile/src/openbot/transport.test.ts
@@ -0,0 +1,349 @@
+// MT105 (Issue #148): the mobile transport carries the current company/team selection on its
+// streams, uploads/downloads and media reads — and nothing else does. The attachment gates, the
+// subscription lifecycle, the generation rule and the reconnect rule are the web transport's
+// (MT082/MT083) re-expressed over the mobile tenancy store: this file pins them with the same
+// fixture discipline. It imports nothing but bun:test and the adapter — AC-adjacent: the tests
+// run in CI with no runtime beneath them.
+
+import { describe, expect, test } from "bun:test";
+
+import {
+  createTenancyStore,
+  type ScopeSelection,
+  type ScopeStorage,
+} from "./tenancy";
+import {
+  createScopeBoundStream,
+  createScopedFetch,
+  mediaCacheKey,
+  readMediaCache,
+  scopeHeaders,
+  SCOPE_HEADER_ALLOWED_PATHS,
+  TenantSelectionChangedError,
+  TENANT_HEADER,
+  withStreamScope,
+  WORKSPACE_HEADER,
+  writeMediaCache,
+} from "./transport";
+
+const ACME: ScopeSelection = { tenantId: "acme", workspaceId: "acme-finance" };
+const GLOBEX: ScopeSelection = { tenantId: "globex", workspaceId: "globex-ops" };
+
+/** An in-memory storage stand-in, so the store's persistence mirror runs its real code in CI. */
+function memoryStorage(): ScopeStorage {
+  const slots = new Map<string, string>();
+  return {
+    getItem: (key: string) => slots.get(key) ?? null,
+    setItem: (key: string, value: string) => {
+      slots.set(key, value);
+    },
+  };
+}
+
+// ---------------------------------------------------------------------------
+// AC1: the pair rides reviewed same-origin paths only
+// ---------------------------------------------------------------------------
+
+describe("scopeHeaders", () => {
+  test("a reviewed REST path carries the pair as headers", () => {
+    expect(scopeHeaders("/api/channels", ACME)).toEqual({
+      [TENANT_HEADER]: "acme",
+      [WORKSPACE_HEADER]: "acme-finance",
+    });
+    expect(scopeHeaders("/api/enterprise/workspace-scope", ACME)).toEqual({
+      [TENANT_HEADER]: "acme",
+      [WORKSPACE_HEADER]: "acme-finance",
+    });
+  });
+
+  test("an unreviewed path is left undecorated", () => {
+    expect(scopeHeaders("/api/unreviewed/thing", ACME)).toBeNull();
+    expect(scopeHeaders("/api/unreviewed", ACME)).toBeNull();
+  });
+
+  test("a non-same-origin path never receives the pair", () => {
+    expect(scopeHeaders("https://elsewhere.example/api/agents", ACME)).toBeNull();
+    expect(scopeHeaders("//api/agents", ACME)).toBeNull();
+  });
+
+  test("no selection attaches nothing — absence is carried as absence, never defaulted", () => {
+    expect(scopeHeaders("/api/agents", null)).toBeNull();
+  });
+
+  test("every inventory entry names its owner and reason — a closed, reviewable list", () => {
+    // Widening the list is a review, not an accident: each entry's owner names the ticket
+    // that performed it (MT107's is the mobile-aggregation family's own review).
+    const reviewedBy = ["MT105", "MT107"];
+    for (const entry of SCOPE_HEADER_ALLOWED_PATHS) {
+      expect(entry.id).toBeTruthy();
+      expect(entry.prefix.startsWith("/api/")).toBe(true);
+      expect(entry.reason.length).toBeGreaterThan(0);
+      expect(reviewedBy).toContain(entry.ownerTicket);
+    }
+  });
+});
+
+describe("withStreamScope", () => {
+  test("a reviewed stream path carries the pair as query, preserving what is already there", () => {
+    expect(withStreamScope("/api/workshop/turn/1", ACME)).toBe(
+      "/api/workshop/turn/1?x-openbot-tenant=acme&x-openbot-workspace=acme-finance",
+    );
+    expect(withStreamScope("/api/craft/session/1/events?cursor=7", ACME)).toBe(
+      "/api/craft/session/1/events?cursor=7&x-openbot-tenant=acme&x-openbot-workspace=acme-finance",
+    );
+    expect(withStreamScope("/api/channels/events", ACME)).toBe(
+      "/api/channels/events?x-openbot-tenant=acme&x-openbot-workspace=acme-finance",
+    );
+  });
+
+  test("the pair is encoded — an id with a space is still one value", () => {
+    expect(
+      withStreamScope("/api/computers/1/screen", {
+        tenantId: "ac me",
+        workspaceId: "finance team",
+      }),
+    ).toBe("/api/computers/1/screen?x-openbot-tenant=ac%20me&x-openbot-workspace=finance%20team");
+  });
+
+  test("an unreviewed stream path, a foreign origin, and no selection all change nothing", () => {
+    expect(withStreamScope("/api/other/stream", ACME)).toBe("/api/other/stream");
+    expect(withStreamScope("wss://third.party/stream", ACME)).toBe(
+      "wss://third.party/stream",
+    );
+    expect(withStreamScope("//echo/stream", ACME)).toBe("//echo/stream");
+    expect(withStreamScope("/api/workshop/turn/1", null)).toBe(
+      "/api/workshop/turn/1",
+    );
+  });
+});
+
+// ---------------------------------------------------------------------------
+// AC3: an in-flight answer that outlived its selection is refused on arrival
+// ---------------------------------------------------------------------------
+
+describe("createScopedFetch", () => {
+  test("the pair rides the request, and an answer that lands in time is accepted", async () => {
+    const store = createTenancyStore({
+      userId: "user-1",
+      storage: memoryStorage(),
+    });
+    await store.selectScope(ACME);
+    const seen: Array<{ url: string; headers: Record<string, string> | undefined }> = [];
+    const scoped = createScopedFetch({
+      store,
+      fetchLike: async (url, init) => {
+        seen.push({ url, headers: init?.headers });
+        return new Response("{}", { status: 200 });
+      },
+    });
+    const response = await scoped("/api/agents");
+    expect(response.status).toBe(200);
+    expect(seen[0]?.url).toBe("/api/agents");
+    expect(seen[0]?.headers).toEqual({
+      [TENANT_HEADER]: "acme",
+      [WORKSPACE_HEADER]: "acme-finance",
+    });
+  });
+
+  test("an answer that arrives after a switch is refused, never applied", async () => {
+    const store = createTenancyStore({
+      userId: "user-1",
+      storage: memoryStorage(),
+    });
+    await store.selectScope(ACME);
+    let answer: ((response: Response) => void) | null = null;
+    const scoped = createScopedFetch({
+      store,
+      fetchLike: () =>
+        new Promise<Response>((resolve) => {
+          answer = resolve;
+        }),
+    });
+    const inFlight = scoped("/api/agents");
+    // The switch happens while the answer is in flight.
+    await store.selectScope(GLOBEX);
+    answer?.(new Response("{}", { status: 200 }));
+    const error = await capture(inFlight);
+    expect(error).toBeInstanceOf(TenantSelectionChangedError);
+  });
+
+  test("a pending scope source refuses before dialing — no read on a guess", async () => {
+    const store = createTenancyStore({
+      userId: undefined,
+      storage: memoryStorage(),
+    });
+    const scoped = createScopedFetch({
+      store,
+      fetchLike: async () => {
+        throw new Error("must not dial");
+      },
+    });
+    const error = await capture(scoped("/api/agents"));
+    expect(String(error)).toContain("scope source has not answered");
+  });
+});
+
+// ---------------------------------------------------------------------------
+// AC2: a switch tears the old subscription down and the old media cache is not served
+// ---------------------------------------------------------------------------
+
+describe("createScopeBoundStream", () => {
+  function harness() {
+    const store = createTenancyStore({
+      userId: "user-1",
+      storage: memoryStorage(),
+    });
+    const opened: string[] = [];
+    const closed: string[] = [];
+    const stream = createScopeBoundStream({
+      store,
+      open: (url) => {
+        opened.push(url);
+        return {
+          close: () => {
+            closed.push(url);
+          },
+        };
+      },
+    });
+    return { store, stream, opened, closed };
+  }
+
+  test("opens under the current pair; refuses while the scope source is pending", async () => {
+    const pending = createTenancyStore({
+      userId: undefined,
+      storage: memoryStorage(),
+    });
+    const stream = createScopeBoundStream({
+      store: pending,
+      open: () => {
+        throw new Error("must not open");
+      },
+    });
+    expect(stream.reopen("/api/workshop/turn/1")).toEqual({
+      refused: "scope-pending",
+    });
+
+    const { store, stream: live, opened } = harness();
+    await store.selectScope(ACME);
+    const opened0 = live.reopen("/api/workshop/turn/1");
+    expect(opened0).toMatchObject({ generation: expect.any(Number) });
+    expect(opened[0]).toBe(
+      "/api/workshop/turn/1?x-openbot-tenant=acme&x-openbot-workspace=acme-finance",
+    );
+  });
+
+  test("a switch cancels the old subscription and the next open carries the NEW pair (AC2/AC4)", async () => {
+    const { store, stream, opened, closed } = harness();
+    await store.selectScope(ACME);
+    stream.reopen("/api/workshop/turn/1");
+    const keyBefore = stream.openedKey();
+
+    await store.selectScope(GLOBEX);
+    // The teardown signal, as the app's effect reads it: the live connection was opened under a
+    // key the store has since left. The wrapper still names the old key — that IS the staleness.
+    const scopeNow = store.scope();
+    expect(scopeNow.status).toBe("open");
+    if (scopeNow.status === "open") {
+      expect(scopeNow.key).not.toBe(keyBefore);
+    }
+    expect(stream.openedKey()).toBe(keyBefore);
+    // Reopening under the moved scope closes the old connection and carries the NEW pair.
+    stream.reopen("/api/workshop/turn/1");
+    expect(closed).toHaveLength(1);
+    expect(opened[1]).toBe(
+      "/api/workshop/turn/1?x-openbot-tenant=globex&x-openbot-workspace=globex-ops",
+    );
+    expect(stream.openedKey()).not.toBe(keyBefore);
+  });
+
+  test("a late frame from a torn-down connection is refused by the generation rule", async () => {
+    const { store, stream } = harness();
+    await store.selectScope(ACME);
+    const { generation } = stream.reopen("/api/workshop/turn/1") as {
+      generation: number;
+    };
+    expect(stream.frameStillCurrent(generation)).toBe(true);
+    await store.selectScope(GLOBEX);
+    // The frame's connection was opened under the old generation: dropped, not applied.
+    expect(stream.frameStillCurrent(generation)).toBe(false);
+  });
+
+  test("a reconnect after a dropped line re-reads the CURRENT selection, never a default", async () => {
+    const { store, stream, opened } = harness();
+    await store.selectScope(ACME);
+    stream.reopen("/api/workshop/turn/1");
+    // The line drops; while it is down, the person switches scope.
+    await store.selectScope(GLOBEX);
+    stream.reopen("/api/workshop/turn/1");
+    expect(opened[1]).toContain("x-openbot-tenant=globex");
+    // And with no selection at all, the reconnected stream carries no pair at all — not a default.
+    await store.selectScope(null);
+    stream.reopen("/api/workshop/turn/1");
+    expect(opened[2]).toBe("/api/workshop/turn/1");
+  });
+});
+
+// ---------------------------------------------------------------------------
+// AC2, the media half: the old scope's media cache is not served after a switch
+// ---------------------------------------------------------------------------
+
+describe("scoped media cache", () => {
+  test("one URI is one entry per scope; after a switch the old scope's media is absent", async () => {
+    const store = createTenancyStore({
+      userId: "user-1",
+      storage: memoryStorage(),
+    });
+    await store.selectScope(ACME);
+    writeMediaCache(store, "/api/craft/file/1/media", { bytes: "acme-bytes" });
+    expect(readMediaCache<{ bytes: string }>(store, "/api/craft/file/1/media")).toEqual({
+      status: "present",
+      value: { bytes: "acme-bytes" },
+    });
+
+    await store.selectScope(GLOBEX);
+    // The same URI under the new scope is a miss — the old company's media does not display.
+    expect(readMediaCache(store, "/api/craft/file/1/media")).toEqual({
+      status: "absent",
+    });
+    writeMediaCache(store, "/api/craft/file/1/media", { bytes: "globex-bytes" });
+    expect(readMediaCache<{ bytes: string }>(store, "/api/craft/file/1/media")).toEqual({
+      status: "present",
+      value: { bytes: "globex-bytes" },
+    });
+
+    // The personal context is its own shelf, in both directions.
+    await store.selectScope(null);
+    expect(readMediaCache(store, "/api/craft/file/1/media")).toEqual({
+      status: "absent",
+    });
+  });
+
+  test("the media key names the scope beside the URI", async () => {
+    const store = createTenancyStore({
+      userId: "user-1",
+      storage: memoryStorage(),
+    });
+    await store.selectScope(ACME);
+    expect(mediaCacheKey(store, "/media/1")).toBe(
+      "media:acme/acme-finance:/media/1",
+    );
+    await store.selectScope(null);
+    expect(mediaCacheKey(store, "/media/1")).toBe("media:personal:/media/1");
+  });
+});
+
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+
+async function capture(
+  run: Promise<unknown> | (() => Promise<unknown>),
+): Promise<unknown> {
+  try {
+    await (typeof run === "function" ? run() : run);
+    return null;
+  } catch (error) {
+    return error;
+  }
+}
diff --git a/apps/mobile/src/openbot/transport.ts b/apps/mobile/src/openbot/transport.ts
new file mode 100644
index 000000000..e4af77287
--- /dev/null
+++ b/apps/mobile/src/openbot/transport.ts
@@ -0,0 +1,409 @@
+/*
+ * The mobile tenancy adapter's transport half, MT105 (Issue #148).
+ *
+ * THE RULES ARE THE WEB TRANSPORT'S, in both registers. The REST register is `client.ts`'s: the
+ * selection pair rides as HEADERS (`x-openbot-tenant`, `x-openbot-workspace`) on reviewed
+ * same-origin business paths only — a closed inventory, each entry owned by the ticket that
+ * reviewed it, never widened by accident. The stream register is `stream-scope.ts`'s: a streaming
+ * connection cannot carry request headers (an SSE read, a WebSocket upgrade), so on those surfaces
+ * the SAME pair rides the URL's query under the same two names, on the same kind of closed
+ * inventory — one vocabulary, so the server-side wiring (MT125) reads one set of names wherever
+ * the connection came from.
+ *
+ * THE LIFECYCLE HALF IS THE TICKET'S REAL SUBJECT, as it was MT082's: a stream that outlives its
+ * scope is a pipe pushing one company's events into a screen that has moved on, and a media cache
+ * that outlives its scope is yesterday's company file one tap away. So every business connection
+ * this module serves is bound to the tenancy store's live scope: it opens only once the scope
+ * source has resolved (never on a guess), is torn down when the scope moves, re-reads the CURRENT
+ * selection at every (re)connect — a dropped line that comes back answers under the scope that is
+ * current THEN, never a defaulted one (spec A6) — and every answer is checked against the
+ * generation it left under, so an in-flight response that lands after a switch is refused rather
+ * than applied (the same `stillCurrent` rule the web streams and caches share).
+ */
+
+import { type ScopeSelection, type TenancyStore } from "./tenancy";
+
+/** The header names, identical to the web client's — one vocabulary across clients. */
+export const TENANT_HEADER = "x-openbot-tenant";
+export const WORKSPACE_HEADER = "x-openbot-workspace";
+
+/** One reviewed REST path the selection pair may ride as headers. */
+export interface ScopeHeaderPathEntry {
+  readonly id: string;
+  readonly prefix: string;
+  readonly reason: string;
+  readonly ownerTicket: string;
+}
+
+/**
+ * The closed inventory of reviewed same-origin REST paths the mobile client may carry the
+ * selection pair on (MT105 / Issue #148).
+ *
+ * The families are the same ones the web client's inventory reviews (`client.ts`, MT081 onward):
+ * the mobile app is another client of the same deployment API, so the review that admitted a
+ * family on the web admits the mobile client onto it — and a family neither ticket reviewed stays
+ * undecorated until one does. Widening this list is a review, not an accident.
+ */
+export const SCOPE_HEADER_ALLOWED_PATHS: readonly ScopeHeaderPathEntry[] = [
+  {
+    id: "enterprise-api",
+    prefix: "/api/enterprise/",
+    reason:
+      "the enterprise API is the scope middleware's own surface: it resolves the selection pair into a trusted scope (MT005 ruling #1 — the headers only select; database membership decides)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "agents-rest",
+    prefix: "/api/agents",
+    reason:
+      "the coworker surface's reads and writes, the same family the web review admitted (MT084); the server consumes the pair when the legacy assembly reads it (MT125)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "team-bots-rest",
+    prefix: "/api/team-bots",
+    reason:
+      "the Team Bot publication surface, the same family the web review admitted (MT085)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "approvals-rest",
+    prefix: "/api/approvals",
+    reason:
+      "the approval surface, the same family the web review admitted (MT086)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "responsibilities-rest",
+    prefix: "/api/responsibilities",
+    reason:
+      "the standing-responsibility surface, the same family the web review admitted (MT086)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "computers-rest",
+    prefix: "/api/computers",
+    reason:
+      "the computer surface — the fleet, its action boundary and the live screen it streams, the same family the web review admitted (MT086)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "channels-rest",
+    prefix: "/api/channels",
+    reason:
+      "the conversation surface — roster, detail, attachments and member writes, the same family the web review admitted (MT087)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "groups-rest",
+    prefix: "/api/groups",
+    reason:
+      "the group-conversation surface, the same family the web review admitted (MT087)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "plugins-rest",
+    prefix: "/api/plugins",
+    reason:
+      "the plugin surface, the same family the web review admitted (MT088)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "memory-rest",
+    prefix: "/api/memory",
+    reason:
+      "the personal/company memory surface, the same family the web review admitted",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "routines-rest",
+    prefix: "/api/routines",
+    reason:
+      "the routine surface, the same family the web review admitted",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "craft-rest",
+    prefix: "/api/craft",
+    reason:
+      "the craft surface — sessions, files, artifacts and their downloads, the same family the web review admitted",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "workshop-rest",
+    prefix: "/api/workshop",
+    reason:
+      "the workshop surface — turns, artifacts and their uploads/downloads, the same family the web review admitted",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "marketplace-rest",
+    prefix: "/api/marketplace",
+    reason:
+      "the marketplace surface, the same family the web review admitted",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "components-rest",
+    prefix: "/api/components",
+    reason:
+      "the component surface, the same family the web review admitted",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "billing-rest",
+    prefix: "/api/billing",
+    reason:
+      "the billing surface, the same family the web review admitted (MT097)",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "voice-mobile-aggregate-rest",
+    prefix: "/api/voice/mobile",
+    reason:
+      "the mobile aggregation snapshot surface — the BFF shape MT066's readMobileAggregate answers behind the voice family, whose every sub-query must answer under the scope the client currently holds. The review admitting the family is MT107's own ticket; the server's HTTP wiring of the exact route lands with MT125, and the client pair rides the moment it does",
+    ownerTicket: "MT107",
+  },
+];
+
+/** One reviewed stream path the selection pair may ride as query parameters. */
+export interface ScopeStreamPathEntry {
+  readonly id: string;
+  readonly prefix: string;
+  readonly reason: string;
+  readonly ownerTicket: string;
+}
+
+/**
+ * The closed inventory of reviewed same-origin stream paths the mobile client may carry the
+ * selection pair on — the same five connection families the web inventory reviews (MT082),
+ * because the mobile app opens the same streams against the same deployment.
+ */
+export const SCOPE_STREAM_ALLOWED_PATHS: readonly ScopeStreamPathEntry[] = [
+  {
+    id: "workshop-turn-events",
+    prefix: "/api/workshop/",
+    reason:
+      "the workshop turn stream: an SSE read, which cannot carry request headers, so the pair rides the query on the one URL family this stream opens",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "craft-turn-events",
+    prefix: "/api/craft/",
+    reason:
+      "the craft session's turn and scheduled-run stream reads: same connection family as the workshop stream",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "channel-roster-events",
+    prefix: "/api/channels/events",
+    reason:
+      "the channel roster's event stream: an upgrade or SSE read, which cannot carry request headers, so the pair rides the query",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "computer-screen-stream",
+    prefix: "/api/computers/",
+    reason:
+      "the live computer screen stream: an upgrade request, which cannot carry request headers, so the pair rides the query",
+    ownerTicket: "MT105",
+  },
+  {
+    id: "voice-call-establishment",
+    prefix: "/api/voice/calls",
+    reason:
+      "the POST that establishes a voice call — the stream's subscription moment; the realtime socket it returns is a third-party origin and never receives the pair",
+    ownerTicket: "MT105",
+  },
+];
+
+/** Whether a path is same-origin shaped for this client: a root-relative path, not protocol-relative. */
+function sameOriginPath(path: string): boolean {
+  return path.startsWith("/") && !path.startsWith("//");
+}
+
+/**
+ * The header half of the pair, for REST-shaped requests (fetch can carry headers).
+ *
+ * `null` (personal context: no company/team selected) attaches NOTHING — a missing selection is
+ * carried as absent, never defaulted. A path outside the inventory, or one that is not a
+ * same-origin relative path, is left undecorated: the pair must not leak onto a surface no ticket
+ * reviewed (AC1).
+ */
+export function scopeHeaders(
+  path: string,
+  selection: ScopeSelection | null,
+): Record<string, string> | null {
+  if (selection === null) return null;
+  if (!sameOriginPath(path)) return null;
+  const bare = path.split("?")[0] as string;
+  if (
+    !SCOPE_HEADER_ALLOWED_PATHS.some((entry) => bare.startsWith(entry.prefix))
+  ) {
+    return null;
+  }
+  return {
+    [TENANT_HEADER]: selection.tenantId,
+    [WORKSPACE_HEADER]: selection.workspaceId,
+  };
+}
+
+/**
+ * The query half of the pair, for stream-shaped connections (SSE reads and WebSocket upgrades
+ * cannot carry request headers).
+ *
+ * Same gates as `scopeHeaders`: same-origin relative paths on the reviewed stream inventory only,
+ * existing query parameters preserved (a stream's resume cursor rides the same URL), and a `null`
+ * selection changes nothing at all.
+ */
+export function withStreamScope(
+  path: string,
+  selection: ScopeSelection | null,
+): string {
+  if (selection === null) return path;
+  if (!sameOriginPath(path)) return path;
+  const queryAt = path.indexOf("?");
+  const bare = queryAt === -1 ? path : path.slice(0, queryAt);
+  if (
+    !SCOPE_STREAM_ALLOWED_PATHS.some((entry) => bare.startsWith(entry.prefix))
+  ) {
+    return path;
+  }
+  const pair =
+    `${TENANT_HEADER}=${encodeURIComponent(selection.tenantId)}` +
+    `&${WORKSPACE_HEADER}=${encodeURIComponent(selection.workspaceId)}`;
+  return queryAt === -1 ? `${path}?${pair}` : `${path}&${pair}`;
+}
+
+/**
+ * The typed refusal an answer earns when it outlived its scope — the mobile name for the web's
+ * `TenantSelectionChangedError`, message included: an answer that arrives after the switch is
+ * dropped, never applied to the scope that replaced the one it was asked under (AC3).
+ */
+export class TenantSelectionChangedError extends Error {
+  constructor() {
+    super("That answer outlived the tenant it was asked under.");
+    this.name = "TenantSelectionChangedError";
+  }
+}
+
+/**
+ * One scope-bound fetch: the pair rides the URL as headers (REST) or query (streams) per the two
+ * inventories, and the answer is refused on arrival if the generation moved while it was in
+ * flight.
+ *
+ * `fetchLike` is injected (the app's fetch, a test's stand-in) so the rule runs identically in CI
+ * with no runtime beneath it. A pending scope source refuses before dialing: a business read is
+ * not established on a guess.
+ */
+export function createScopedFetch(options: {
+  store: TenancyStore;
+  fetchLike: (input: string, init?: { headers?: Record<string, string> }) => Promise<Response>;
+}): (
+  path: string,
+  init?: { headers?: Record<string, string> },
+) => Promise<Response> {
+  return async (path, init) => {
+    const scope = options.store.scope();
+    if (scope.status === "pending") {
+      throw new Error("The scope source has not answered yet.");
+    }
+    const at = scope.generation;
+    const headers = scopeHeaders(path, scope.selection);
+    const streamPath = withStreamScope(path, scope.selection);
+    const response = await options.fetchLike(streamPath, {
+      ...init,
+      ...(headers === null ? {} : { headers: { ...init?.headers, ...headers } }),
+    });
+    if (!options.store.stillCurrent(at)) {
+      throw new TenantSelectionChangedError();
+    }
+    return response;
+  };
+}
+
+/**
+ * A stream subscription bound to the live scope (AC2/AC4).
+ *
+ * `open(url)` is the app's connection factory (its EventSource/WebSocket adapter); this wrapper
+ * owns WHEN it opens and when it tears down: never while the scope source is pending, always
+ * under the CURRENT selection at (re)connect — never a defaulted one — and torn down the moment
+ * the scope key moves (a pair change or a generation advance, i.e. a switch anywhere), with the
+ * old connection's late frames dropped by the generation check `frameStillCurrent`.
+ *
+ * The app drives reconnects itself (its runtime owns backoff); every reconnect calls `reopen()`,
+ * which re-reads the scope world fresh — a dropped line that comes back answers under the scope
+ * that is current THEN (AC4).
+ */
+export function createScopeBoundStream(options: {
+  store: TenancyStore;
+  open: (url: string) => { close: () => void };
+}): {
+  /** Open (or reopen) under the current scope; refuses while the scope source is pending. */
+  reopen: (path: string) => { url: string; generation: number } | { refused: "scope-pending" };
+  /** Tear the live connection down, if one is open. */
+  close: () => void;
+  /** The scope key the live connection was opened under, for change detection. */
+  openedKey: () => string | null;
+  /** Whether a frame from the live connection may still be applied (the generation rule). */
+  frameStillCurrent: (generation: number) => boolean;
+} {
+  let live: { connection: { close: () => void }; key: string; generation: number } | null = null;
+  return {
+    reopen(path) {
+      const scope = options.store.scope();
+      if (scope.status === "pending") return { refused: "scope-pending" };
+      // Reconnects answer under the CURRENT selection — never the one the dropped line had.
+      live?.connection.close();
+      const url = withStreamScope(path, scope.selection);
+      live = {
+        connection: options.open(url),
+        key: scope.key,
+        generation: scope.generation,
+      };
+      return { url, generation: scope.generation };
+    },
+    close() {
+      live?.connection.close();
+      live = null;
+    },
+    openedKey() {
+      return live?.key ?? null;
+    },
+    frameStillCurrent(generation) {
+      // A frame from a connection opened at `generation` may not decorate a screen whose scope
+      // has since moved — the belt for a frame already in flight through the teardown.
+      return live !== null && live.generation === generation && options.store.stillCurrent(generation);
+    },
+  };
+}
+
+/**
+ * The media cache key for one URI: names the user's scope beside the URI itself, so the same
+ * company file cached under two scopes is two entries, and an entry filed under one scope is
+ * simply not found after a switch (AC2: the old scope's media is no longer served).
+ *
+ * Filed through the tenancy store's own bucket (the same prefix a switch drops wholesale), so
+ * media isolation rides the SAME removal discipline as every other business entry — no second
+ * cache to keep in step.
+ */
+export function mediaCacheKey(store: TenancyStore, uri: string): string {
+  return `media:${store.cachePrefix()}:${uri}`;
+}
+
+/** Read one URI's cached media bytes through the store (absent after a switch, by the store's rule). */
+export function readMediaCache<T>(
+  store: TenancyStore,
+  uri: string,
+): { status: "present"; value: T } | { status: "absent" } {
+  return store.read<T>(mediaCacheKey(store, uri));
+}
+
+/** Cache one URI's media under the current scope only. */
+export function writeMediaCache(
+  store: TenancyStore,
+  uri: string,
+  value: unknown,
+): void {
+  store.write(mediaCacheKey(store, uri), value);
+}