From 1bf0567fc20f9cb9032af6cbfa1fac3d6989a702 Mon Sep 17 00:00:00 2001
From: Paul Lizer <paullizer@microsoft.com>
Date: Thu, 17 Sep 2026 16:30:51 -0400
Subject: [PATCH] Stabilize Analyze planning recovery, downloads and responsive
 chat

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
---
 application/single_app/app.py                 |   1 +
 application/single_app/config.py              |   2 +-
 .../functions_orchestration_planner.py        |  26 +-
 .../single_app/route_enhanced_citations.py    |  68 ++-
 .../static/js/chat/chat-enhanced-citations.js |   4 +-
 .../static/js/chat/chat-messages.js           |  32 +-
 .../v2_ui/src/components/chat/Composer.tsx    |   7 +-
 .../components/chat/ConversationDrawer.tsx    |   6 +-
 .../components/chat/GeneratedArtifactCard.tsx |  30 +-
 .../v2_ui/src/components/layout/AppShell.tsx  |  45 +-
 .../v2_ui/src/components/layout/Sidebar.tsx   |  55 ++-
 application/v2_ui/src/lib/endpoints.ts        |  28 +-
 .../v2_ui/src/lib/orchestrationController.ts  |  80 +++-
 application/v2_ui/src/pages/ChatPage.tsx      |   2 +-
 application/v2_ui/src/stores/chatStore.ts     |  21 +-
 docs/explanation/features/ANALYZE_RESULTS.md  |  15 +
 .../fixes/ANALYZE_STABILIZATION_FIX.md        | 149 ++++++
 docs/guides/analyze-results.md                |  24 +-
 .../review-and-edit-orchestration-plans.md    |  21 +-
 docs/reference/chat-controls.md               |  14 +-
 .../test_analyze_three_document_smoke.py      | 149 ++++++
 .../test_chat_artifact_download_bytes.py      | 257 +++++++++++
 ...chestration_planner_failure_diagnostics.py | 150 +++++++
 .../test_v2_artifact_download_cors.py         |  60 +++
 .../fixtures/orchestration/harness_entry.tsx  |   8 +
 ui_tests/test_chat_saved_analysis.py          | 101 ++++-
 ui_tests/test_v2_chat_context_selection.py    |  15 +-
 ui_tests/test_v2_orchestration_elicitation.py |   3 +-
 ui_tests/test_v2_orchestration_plan_editor.py |  13 +-
 ...st_v2_orchestration_plan_editor_backend.py |  10 +-
 .../test_v2_orchestration_planning_retry.py   | 423 ++++++++++++++++++
 31 files changed, 1707 insertions(+), 112 deletions(-)
 create mode 100644 docs/explanation/fixes/ANALYZE_STABILIZATION_FIX.md
 create mode 100644 functional_tests/test_analyze_three_document_smoke.py
 create mode 100644 functional_tests/test_chat_artifact_download_bytes.py
 create mode 100644 functional_tests/test_orchestration_planner_failure_diagnostics.py
 create mode 100644 functional_tests/test_v2_artifact_download_cors.py
 create mode 100644 ui_tests/test_v2_orchestration_planning_retry.py

diff --git a/application/single_app/app.py b/application/single_app/app.py
index afd17ffba..9a047084c 100644
--- a/application/single_app/app.py
+++ b/application/single_app/app.py
@@ -1110,6 +1110,7 @@ def add_security_headers(response):
         if request_origin and request_origin in V2_UI_ALLOWED_ORIGINS:
             response.headers['Access-Control-Allow-Origin'] = request_origin
             response.headers['Access-Control-Allow-Credentials'] = 'true'
+            response.headers['Access-Control-Expose-Headers'] = 'Content-Disposition'
             response.headers['Access-Control-Allow-Headers'] = 'Content-Type, Accept'
             response.headers['Access-Control-Allow-Methods'] = 'GET, POST, PUT, PATCH, DELETE, OPTIONS'
             response.headers['Access-Control-Max-Age'] = '600'
diff --git a/application/single_app/config.py b/application/single_app/config.py
index 4cf1558e2..7bd234aaa 100644
--- a/application/single_app/config.py
+++ b/application/single_app/config.py
@@ -97,7 +97,7 @@
 EXECUTOR_TYPE = 'thread'
 EXECUTOR_MAX_WORKERS = 30
 SESSION_TYPE = 'filesystem'
-VERSION = "0.261.112"
+VERSION = "0.261.113"
 IS_DEVELOPMENT = is_development_env_enabled()
 
 SESSION_COOKIE_SAMESITE = os.getenv('SESSION_COOKIE_SAMESITE', 'Lax')
diff --git a/application/single_app/functions_orchestration_planner.py b/application/single_app/functions_orchestration_planner.py
index bad0cac27..89c211fa2 100644
--- a/application/single_app/functions_orchestration_planner.py
+++ b/application/single_app/functions_orchestration_planner.py
@@ -22,7 +22,7 @@
 tries several strategies before giving up. A failed model call or invalid plan is an
 error, not evidence that the task can be answered without gathering information.
 
-Version: 0.261.104
+Version: 0.261.113
 """
 
 import json
@@ -768,10 +768,15 @@ def plan_request(
     ]
     actions = context.get('actions') or []
 
-    def _failure(reason):
+    def _failure(reason, error=None, *, stage=None):
         log_event(
             '[ORCHESTRATION_PLANNER] The request could not be planned.',
-            level=logging.WARNING, extra={'reason': reason},
+            level=logging.WARNING, extra={
+                'reason': reason, 'stage': stage,
+                'conversation_id': conversation_id, 'turn_id': turn_id, 'revision': revision,
+                'error_type': type(error).__name__ if error is not None else None,
+                'response_failure': error.reason if isinstance(error, PlannerResponseError) else None,
+            },
         )
         raise PlannerError(
             'The requested change could not be planned. Your previous plan is unchanged.'
@@ -805,8 +810,8 @@ def _failure(reason):
             client, deployment = planner_model.as_planner_client(), planner_model.deployment
         else:
             client, deployment = resolve_planner_client(settings)
-    except (PlannerError, APIError, AzureError, ValueError):
-        return _failure('model_configuration_failed')
+    except (PlannerError, APIError, AzureError, ValueError) as exc:
+        return _failure('model_configuration_failed', exc, stage='model_binding')
 
     try:
         reply, usage = _call_planner(
@@ -815,8 +820,8 @@ def _failure(reason):
             ),
             require_complete_response=True,
         )
-    except (PlannerError, APIError, AzureError):
-        return _failure('model_request_failed')
+    except (PlannerError, APIError, AzureError) as exc:
+        return _failure('model_request_failed', exc, stage='model_request')
 
     parsed = extract_planner_json(reply)
     if not parsed:
@@ -927,9 +932,12 @@ def _failure(reason):
             agent_names=agent_names,
             actions=actions,
         )
+    except PlanValidationError as exc:
+        return _failure('invalid_plan_or_missing_requirement', exc, stage='plan_normalization')
+    try:
         validate_plan_requirements(plan, seeds, allow_changes=edit_context is not None)
-    except PlanValidationError:
-        return _failure('invalid_plan_or_missing_requirement')
+    except PlanValidationError as exc:
+        return _failure('invalid_plan_or_missing_requirement', exc, stage='selected_requirements')
 
     if plan.get('validation', {}).get('errors'):
         return _failure('invalid_plan_work')
diff --git a/application/single_app/route_enhanced_citations.py b/application/single_app/route_enhanced_citations.py
index fe01b6abd..db3ab47bd 100644
--- a/application/single_app/route_enhanced_citations.py
+++ b/application/single_app/route_enhanced_citations.py
@@ -3,6 +3,7 @@
 
 from flask import jsonify, request, Response
 from datetime import datetime, timedelta, timezone
+import hashlib
 import logging
 import os
 import tempfile
@@ -14,6 +15,7 @@
 import pandas
 import fitz
 from azure.cosmos.exceptions import CosmosResourceNotFoundError
+from azure.core.exceptions import AzureError, ResourceNotFoundError
 from werkzeug.utils import secure_filename
 
 from functions_authentication import login_required, user_required, get_current_user_id, get_current_user_info
@@ -29,6 +31,7 @@
 from functions_saved_analysis import authorize_analysis_artifact
 from functions_simplechat_operations import (
     assert_generated_chat_artifact_is_published_for_user,
+    download_blob_content,
 )
 from swagger_wrapper import swagger_route, get_auth_security
 from config import CLIENTS, storage_account_user_documents_container_name, storage_account_group_documents_container_name, storage_account_public_documents_container_name, storage_account_personal_chat_container_name, IMAGE_EXTENSIONS, VIDEO_EXTENSIONS, AUDIO_EXTENSIONS, TABULAR_EXTENSIONS, VISIO_EXTENSIONS, cosmos_messages_container, cosmos_conversations_container
@@ -194,6 +197,33 @@ def _build_content_disposition(disposition, file_name, fallback='download'):
     return f'{normalized_disposition}; filename="{ascii_file_name}"; filename*=UTF-8\'\'{encoded_file_name}'
 
 
+def _serve_chat_artifact_download(user_id, conversation_id, message_id):
+    """Read an authorized chat artifact, not a workspace document's representation."""
+    artifact = _get_authorized_chat_artifact_message(user_id, conversation_id, message_id)
+    content = download_blob_content(artifact['blob_container'], artifact['blob_path'])
+    current = _get_authorized_chat_artifact_message(user_id, conversation_id, message_id)
+    identity_fields = ('id', 'conversation_id', 'blob_container', 'blob_path', 'filename', '_etag')
+    digest = (artifact.get('metadata') or {}).get('generated_artifact_content_sha256')
+    current_digest = (current.get('metadata') or {}).get('generated_artifact_content_sha256')
+    if any(artifact.get(field) != current.get(field) for field in identity_fields) or digest != current_digest:
+        raise LookupError('The artifact changed during download.')
+    if digest and hashlib.sha256(content).hexdigest() != digest:
+        raise LookupError('The artifact content changed.')
+
+    file_name = _resolve_generated_artifact_file_name(current)
+    content_type = {
+        '.csv': 'text/csv; charset=utf-8',
+        '.md': 'text/markdown; charset=utf-8',
+        '.json': 'application/json',
+    }.get(os.path.splitext(file_name)[1].lower()) or mimetypes.guess_type(file_name)[0] or 'application/octet-stream'
+    return Response(content, content_type=content_type, headers={
+        'Content-Length': str(len(content)),
+        'Content-Disposition': _build_content_disposition('attachment', file_name),
+        'Cache-Control': 'private, no-store',
+        'X-Content-Type-Options': 'nosniff',
+    })
+
+
 def _log_enhanced_citations_debug(message, **details):
     """Write debug-gated enhanced citations diagnostics."""
     log_event(
@@ -613,25 +643,27 @@ def download_chat_artifact():
             return jsonify({"error": "User not authenticated"}), 401
 
         try:
-            message_item = _get_authorized_chat_artifact_message(user_id, conversation_id, message_id)
-            return serve_enhanced_citation_content(
-                {
-                    'file_name': _resolve_generated_artifact_file_name(message_item),
-                    'blob_container': message_item.get('blob_container'),
-                    'blob_path': message_item.get('blob_path'),
-                },
-                force_download=True,
+            return _serve_chat_artifact_download(user_id, conversation_id, message_id)
+        except PermissionError:
+            return jsonify({"error": "You no longer have access to this artifact or its sources."}), 403
+        except (LookupError, ResourceNotFoundError):
+            return jsonify({"error": "The artifact content is unavailable. Refresh the conversation and try again."}), 404
+        except ValueError:
+            return jsonify({"error": "Invalid artifact download request."}), 400
+        except (AzureError, RuntimeError) as exc:
+            log_event(
+                "[ENHANCED_CITATIONS] Chat artifact storage is unavailable.",
+                extra={"error_type": type(exc).__name__, "conversation_id": conversation_id, "message_id": message_id},
+                level=logging.ERROR,
             )
-        except PermissionError as exc:
-            debug_print(f"Forbidden chat artifact download attempt: {exc}")
-            return jsonify({"error": "Forbidden"}), 403
-        except LookupError as exc:
-            return jsonify({"error": str(exc)}), 404
-        except ValueError as exc:
-            return jsonify({"error": str(exc)}), 400
-        except Exception as e:
-            debug_print(f"Error serving chat artifact download: {e}")
-            return jsonify({"error": "An internal error has occurred"}), 500
+            return jsonify({"error": "Artifact storage is temporarily unavailable. Please retry the download."}), 503
+        except Exception as exc:
+            log_event(
+                "[ENHANCED_CITATIONS] Chat artifact download failed.",
+                extra={"error_type": type(exc).__name__, "conversation_id": conversation_id, "message_id": message_id},
+                level=logging.ERROR,
+            )
+            return jsonify({"error": "The artifact could not be downloaded. Please retry."}), 500
 
     @bp.route("/api/chat_artifacts/promote", methods=["POST"])
     @swagger_route(security=get_auth_security())
diff --git a/application/single_app/static/js/chat/chat-enhanced-citations.js b/application/single_app/static/js/chat/chat-enhanced-citations.js
index 6f02bb071..beab46407 100644
--- a/application/single_app/static/js/chat/chat-enhanced-citations.js
+++ b/application/single_app/static/js/chat/chat-enhanced-citations.js
@@ -518,7 +518,7 @@ export function showAudioModal(docId, timestamp, fileName) {
     modalInstance.show();
 }
 
-function triggerBlobDownload(blob, filename) {
+export function triggerBlobDownload(blob, filename) {
     const url = URL.createObjectURL(blob);
     const link = document.createElement('a');
     link.href = url;
@@ -529,7 +529,7 @@ function triggerBlobDownload(blob, filename) {
     window.setTimeout(() => URL.revokeObjectURL(url), 0);
 }
 
-function getDownloadFilename(response, fallbackFilename) {
+export function getDownloadFilename(response, fallbackFilename) {
     const contentDisposition = response.headers.get('Content-Disposition') || '';
     const utf8Match = contentDisposition.match(/filename\*=UTF-8''([^;]+)/i);
     if (utf8Match && utf8Match[1]) {
diff --git a/application/single_app/static/js/chat/chat-messages.js b/application/single_app/static/js/chat/chat-messages.js
index 57ac345e6..6b8592602 100644
--- a/application/single_app/static/js/chat/chat-messages.js
+++ b/application/single_app/static/js/chat/chat-messages.js
@@ -17,6 +17,7 @@ import { updateSidebarConversationTitle } from "./chat-sidebar-conversations.js"
 import { getActiveConversationContext, getActiveConversationScope } from "./chat-conversation-scope.js";
 import { escapeHtml, isColorLight, addTargetBlankToExternalLinks, sanitizeHttpUrl } from "./chat-utils.js";
 import { showToast } from "./chat-toast.js";
+import { getDownloadFilename, triggerBlobDownload } from "./chat-enhanced-citations.js";
 import {
   buildGeneratedFileApprovalBlock,
   generatedFileApprovalBlocksDownload,
@@ -4441,7 +4442,7 @@ function renderReplyQuoteHtml(fullMessageObject = null) {
     return '';
   }
 
-  function triggerGeneratedTabularOutputDownload(outputMetadata) {
+  async function triggerGeneratedTabularOutputDownload(outputMetadata, downloadButton) {
     const downloadHref = buildGeneratedArtifactDownloadUrl(outputMetadata);
 
     if (!downloadHref) {
@@ -4449,13 +4450,26 @@ function renderReplyQuoteHtml(fullMessageObject = null) {
       return;
     }
 
-    const downloadLink = document.createElement('a');
-    downloadLink.href = downloadHref;
-    downloadLink.rel = 'noopener';
-    downloadLink.className = 'd-none';
-    document.body.appendChild(downloadLink);
-    downloadLink.click();
-    downloadLink.remove();
+    if (downloadButton.disabled) {
+        return;
+    }
+    const originalText = downloadButton.textContent;
+    downloadButton.disabled = true;
+    downloadButton.textContent = 'Downloading...';
+    try {
+        const response = await fetch(downloadHref, { credentials: 'same-origin', cache: 'no-store' });
+        const disposition = response.headers.get('Content-Disposition') || '';
+        if (!response.ok || response.redirected || !/^\s*attachment(?:;|$)/i.test(disposition)) {
+            throw new Error('The artifact could not be downloaded.');
+        }
+        const blob = await response.blob();
+        triggerBlobDownload(blob, getDownloadFilename(response, outputMetadata.file_name || 'generated-artifact'));
+    } catch {
+        showToast('The artifact could not be downloaded. Refresh the conversation and try again.', 'danger');
+    } finally {
+        downloadButton.disabled = false;
+        downloadButton.textContent = originalText;
+    }
   }
 
   async function viewGeneratedMarkdownArtifact(outputMetadata, viewButton) {
@@ -5579,7 +5593,7 @@ function renderReplyQuoteHtml(fullMessageObject = null) {
         memberCount: 1,
         formats: [outputFormat],
       });
-      triggerGeneratedTabularOutputDownload(outputMetadata);
+      void triggerGeneratedTabularOutputDownload(outputMetadata, downloadButton);
     });
     actions.appendChild(downloadButton);
 
diff --git a/application/v2_ui/src/components/chat/Composer.tsx b/application/v2_ui/src/components/chat/Composer.tsx
index 73ec89cb3..4c17683bd 100644
--- a/application/v2_ui/src/components/chat/Composer.tsx
+++ b/application/v2_ui/src/components/chat/Composer.tsx
@@ -881,7 +881,8 @@ export function Composer({ initialAgentSelection }: { initialAgentSelection?: st
         const seeds: Record<string, unknown> = {
             web_search_enabled: options.webSearch,
             required_capabilities: [
-                ...(options.documentSearch || contextItems.length > 0 ? ['document_search'] : []),
+                // Pinned sources constrain inputs, not the operation (search, Analyze, or Compare).
+                ...(options.documentSearch ? ['document_search'] : []),
                 ...(options.webSearch ? ['web_search'] : []),
                 ...(options.deepResearch ? ['deep_research'] : []),
                 ...(options.urlAccess && promptUrls(message).length > 0 ? ['url_fetch'] : []),
@@ -991,10 +992,6 @@ export function Composer({ initialAgentSelection }: { initialAgentSelection?: st
                     return;
                 }
                 handoffApplied.current = true;
-                setOptions((current) => ({
-                    ...current,
-                    documentSearch: items.length > 0 || current.documentSearch,
-                }));
                 setDraft((current) => ({
                     ...current,
                     contextItems: items.reduce(
diff --git a/application/v2_ui/src/components/chat/ConversationDrawer.tsx b/application/v2_ui/src/components/chat/ConversationDrawer.tsx
index 2706b76db..b29385743 100644
--- a/application/v2_ui/src/components/chat/ConversationDrawer.tsx
+++ b/application/v2_ui/src/components/chat/ConversationDrawer.tsx
@@ -261,13 +261,13 @@ export function ConversationDrawer() {
     return (
         <aside
             aria-label="Conversation details"
-            className="glass glass-edge flex w-[22rem] shrink-0 flex-col rounded-none border-t-0 border-r-0 border-b-0"
+            className="glass glass-edge absolute inset-y-0 right-0 z-30 flex w-[22rem] max-w-full shrink-0 flex-col rounded-none border-t-0 border-r-0 border-b-0 xl:static xl:z-auto"
         >
-            <div className="flex h-14 shrink-0 items-center gap-2 border-b border-edge px-3">
+            <div className="flex min-h-14 shrink-0 flex-wrap items-center gap-2 border-b border-edge px-3 py-2">
                 <div
                     role="tablist"
                     aria-label="Drawer mode"
-                    className="flex gap-1 rounded-xl bg-surface-sunken p-1"
+                    className="flex min-w-0 flex-wrap gap-1 rounded-xl bg-surface-sunken p-1"
                 >
                     {tabs.map((tab) => (
                         <button
diff --git a/application/v2_ui/src/components/chat/GeneratedArtifactCard.tsx b/application/v2_ui/src/components/chat/GeneratedArtifactCard.tsx
index 3366ad1e5..dbbd35ded 100644
--- a/application/v2_ui/src/components/chat/GeneratedArtifactCard.tsx
+++ b/application/v2_ui/src/components/chat/GeneratedArtifactCard.tsx
@@ -15,7 +15,7 @@ import { useMemo, useState } from 'react';
 import { createPortal } from 'react-dom';
 import { clsx } from 'clsx';
 import { Download, Eye, FileLock2, Loader2, X } from 'lucide-react';
-import { generatedArtifactDownloadUrl } from '../../lib/endpoints';
+import { downloadGeneratedArtifact, generatedArtifactDownloadUrl } from '../../lib/endpoints';
 import { resolveGeneratedFileApproval } from '../../lib/collaboration';
 import { toast } from '../../stores/toastStore';
 import { GlassButton, GlassPanel } from '../ui/primitives';
@@ -265,6 +265,7 @@ export function GeneratedArtifactCard({
     const [finished, setFinished] = useState<GeneratedArtifact[] | null>(null);
     const [previewOpen, setPreviewOpen] = useState(false);
     const [deciding, setDeciding] = useState<'approve' | 'deny' | null>(null);
+    const [downloading, setDownloading] = useState(false);
 
     // A completed run replaces its own progress card with the files it produced.
     if (finished) {
@@ -354,17 +355,22 @@ export function GeneratedArtifactCard({
         }
     };
 
-    const download = () => {
+    const download = async () => {
+        if (downloading) {
+            return;
+        }
         if (!downloadUrl) {
             toast.error('Generated export is missing download metadata.');
             return;
         }
-        const link = document.createElement('a');
-        link.href = downloadUrl;
-        link.rel = 'noopener';
-        document.body.appendChild(link);
-        link.click();
-        link.remove();
+        setDownloading(true);
+        try {
+            await downloadGeneratedArtifact(artifact, conversationId);
+        } catch {
+            toast.error('The artifact could not be downloaded. Refresh the conversation and try again.');
+        } finally {
+            setDownloading(false);
+        }
     };
 
     // While a run is in flight the supporting notes move inside its collapsed details, so the
@@ -386,7 +392,7 @@ export function GeneratedArtifactCard({
     );
 
     return (
-        <section className="glass-flat mt-3 rounded-xl p-3">
+        <section className="glass-flat mt-3 min-w-0 rounded-xl p-3 [overflow-wrap:anywhere]">
             <div className="flex flex-wrap items-start justify-between gap-2">
                 <div className="min-w-0">
                     <h4 className="text-sm font-semibold text-text-1">{artifactTitle(artifact)}</h4>
@@ -491,9 +497,9 @@ export function GeneratedArtifactCard({
 
             {!running && !withheld && downloadUrl && (
                 <div className="mt-3 flex flex-wrap gap-2">
-                    <GlassButton size="sm" variant="subtle" onClick={download}>
-                        <Download size={13} />
-                        Download {outputFormat.toUpperCase()}
+                    <GlassButton size="sm" variant="subtle" onClick={() => void download()} disabled={downloading}>
+                        {downloading ? <Loader2 size={13} className="animate-spin" /> : <Download size={13} />}
+                        {downloading ? 'Downloading' : 'Download'} {outputFormat.toUpperCase()}
                     </GlassButton>
 
                     {compact && hasArtifactPreview(artifact) && (
diff --git a/application/v2_ui/src/components/layout/AppShell.tsx b/application/v2_ui/src/components/layout/AppShell.tsx
index 6f6308a9c..932930981 100644
--- a/application/v2_ui/src/components/layout/AppShell.tsx
+++ b/application/v2_ui/src/components/layout/AppShell.tsx
@@ -7,10 +7,12 @@
 // deployment styling or asserting against it does not have to know which interface it is
 // looking at.
 
-import type { ReactNode } from 'react';
+import { useEffect, useRef, useState, type ReactNode } from 'react';
 import { Sidebar } from './Sidebar';
 import { Toaster } from '../ui/Toaster';
 import { useBootstrapStore } from '../../stores/bootstrapStore';
+import { useUiStore } from '../../stores/uiStore';
+import { useCollaborationStore } from '../../stores/collaborationStore';
 
 function ClassificationBanner() {
     const banner = useBootstrapStore((state) => state.data?.branding?.classification_banner);
@@ -32,12 +34,47 @@ function ClassificationBanner() {
 }
 
 export function AppShell({ children }: { children: ReactNode }) {
+    const [mobile, setMobile] = useState(() => window.matchMedia('(max-width: 767px)').matches);
+    const mobileNavOpen = useUiStore((state) => state.mobileNavOpen);
+    const setMobileNavOpen = useUiStore((state) => state.setMobileNavOpen);
+    const participantsOpen = useCollaborationStore((state) => state.panelTarget !== null);
+    const contentRef = useRef<HTMLElement>(null);
+
+    useEffect(() => {
+        const query = window.matchMedia('(max-width: 767px)');
+        const update = () => {
+            setMobile(query.matches);
+            if (!query.matches) setMobileNavOpen(false);
+        };
+        update();
+        query.addEventListener('change', update);
+        return () => query.removeEventListener('change', update);
+    }, [setMobileNavOpen]);
+
+    useEffect(() => {
+        if (contentRef.current) contentRef.current.inert = mobile && mobileNavOpen;
+    }, [mobile, mobileNavOpen]);
+
+    useEffect(() => {
+        if (mobileNavOpen && participantsOpen) setMobileNavOpen(false);
+    }, [mobileNavOpen, participantsOpen, setMobileNavOpen]);
+
     return (
         <div className="flex h-full flex-col">
             <ClassificationBanner />
-            <div className="flex min-h-0 flex-1">
-                <Sidebar />
-                <main className="flex min-w-0 flex-1 flex-col">{children}</main>
+            <div className="relative flex min-h-0 min-w-0 flex-1">
+                {mobile && <div className="w-[68px] shrink-0" aria-hidden="true" />}
+                {mobile && mobileNavOpen && (
+                    <button
+                        type="button"
+                        tabIndex={-1}
+                        aria-label="Close navigation"
+                        className="absolute inset-0 z-40 bg-black/40"
+                        onClick={() => setMobileNavOpen(false)}
+                    />
+                )}
+                <Sidebar mobile={mobile} />
+                <main ref={contentRef} className="flex min-w-0 flex-1 flex-col">{children}</main>
             </div>
             <Toaster />
         </div>
diff --git a/application/v2_ui/src/components/layout/Sidebar.tsx b/application/v2_ui/src/components/layout/Sidebar.tsx
index 7bb1e487f..4f076f5d4 100644
--- a/application/v2_ui/src/components/layout/Sidebar.tsx
+++ b/application/v2_ui/src/components/layout/Sidebar.tsx
@@ -269,13 +269,37 @@ function UserMenu({ collapsed }: { collapsed: boolean }) {
     );
 }
 
-export function Sidebar() {
-    const { railCollapsed, toggleRail, theme, toggleTheme } = useUiStore();
+export function Sidebar({ mobile = false }: { mobile?: boolean }) {
+    const { railCollapsed, toggleRail, theme, toggleTheme, mobileNavOpen, setMobileNavOpen } = useUiStore();
     const startNewConversation = useChatStore((state) => state.startNewConversation);
+    const activeConversationId = useChatStore((state) => state.activeConversationId);
     const location = useLocation();
+    const expandRef = useRef<HTMLButtonElement>(null);
+    const collapseRef = useRef<HTMLButtonElement>(null);
 
     const onChatPage = location.pathname.startsWith('/chat');
-    const collapsed = railCollapsed;
+    const collapsed = mobile ? !mobileNavOpen : railCollapsed;
+    const toggleNavigation = () => mobile ? setMobileNavOpen(!mobileNavOpen) : toggleRail();
+
+    useEffect(() => {
+        if (mobile) setMobileNavOpen(false);
+    }, [mobile, location.pathname, activeConversationId, setMobileNavOpen]);
+
+    useEffect(() => {
+        if (!mobile || !mobileNavOpen) return;
+        collapseRef.current?.focus();
+        const onKeyDown = (event: KeyboardEvent) => {
+            if (event.key === 'Escape') {
+                event.preventDefault();
+                setMobileNavOpen(false);
+            }
+        };
+        document.addEventListener('keydown', onKeyDown);
+        return () => {
+            document.removeEventListener('keydown', onKeyDown);
+            expandRef.current?.focus();
+        };
+    }, [mobile, mobileNavOpen, setMobileNavOpen]);
 
     /**
      * Arriving at the chat page from elsewhere starts a fresh chat.
@@ -306,10 +330,18 @@ export function Sidebar() {
 
     return (
         <nav
+            id="primary-navigation"
             aria-label="Primary"
+            onClickCapture={(event) => {
+                if (mobile && event.target instanceof Element && event.target.closest('a')) {
+                    setMobileNavOpen(false);
+                }
+            }}
             className={clsx(
-                'glass glass-edge flex h-full flex-col rounded-none border-y-0 border-l-0 transition-[width] duration-200',
+                'glass glass-edge flex h-full shrink-0 flex-col rounded-none border-y-0 border-l-0 transition-[width] duration-200',
                 collapsed ? 'w-[68px]' : 'w-[280px]',
+                mobile && 'absolute inset-y-0 left-0 z-50 max-w-full',
+                mobile && mobileNavOpen && 'glass-modal',
             )}
         >
             <div
@@ -322,8 +354,11 @@ export function Sidebar() {
                 {!collapsed && (
                     <button
                         type="button"
-                        onClick={toggleRail}
+                        ref={collapseRef}
+                        onClick={toggleNavigation}
                         aria-label="Collapse navigation"
+                        aria-expanded="true"
+                        aria-controls="primary-navigation"
                         className="ml-auto rounded-lg p-1.5 text-text-3 transition-colors hover:bg-surface-2 hover:text-text-1"
                     >
                         <ChevronLeft size={17} />
@@ -334,8 +369,11 @@ export function Sidebar() {
             {collapsed && (
                 <button
                     type="button"
-                    onClick={toggleRail}
+                    ref={expandRef}
+                    onClick={toggleNavigation}
                     aria-label="Expand navigation"
+                    aria-expanded="false"
+                    aria-controls="primary-navigation"
                     className="mx-auto mb-2 rounded-lg p-1.5 text-text-3 transition-colors hover:bg-surface-2 hover:text-text-1"
                 >
                     <ChevronRight size={17} />
@@ -349,7 +387,10 @@ export function Sidebar() {
                 <div className="px-3">
                     <button
                         type="button"
-                        onClick={startNewConversation}
+                        onClick={() => {
+                            startNewConversation();
+                            if (mobile) setMobileNavOpen(false);
+                        }}
                         title="Start a new chat"
                         className={clsx(
                             'flex w-full items-center gap-2 rounded-xl bg-accent px-3 py-2.5',
diff --git a/application/v2_ui/src/lib/endpoints.ts b/application/v2_ui/src/lib/endpoints.ts
index 8e765aa8c..0e8bce030 100644
--- a/application/v2_ui/src/lib/endpoints.ts
+++ b/application/v2_ui/src/lib/endpoints.ts
@@ -7,7 +7,7 @@
 
 import { api, apiUrl, uploadFile, ApiError, API_BASE, CREDENTIALS_MODE } from './apiClient';
 import { buildDocumentListParams } from './documentExplorer';
-import { artifactDownloadPath } from './generatedArtifacts';
+import { artifactDownloadPath, artifactFileName } from './generatedArtifacts';
 import { ANALYSIS_PAGE_SIZE, analysisResultContext, validateAnalysisPage } from './savedAnalysis';
 import type { EnhancedCitationMetadata } from './enhancedCitations';
 import type { ExportVisualAsset } from './exportVisuals';
@@ -1025,13 +1025,15 @@ export function conversationExportExtension(
  *
  * The server already names the file, including its timestamp, so honouring the header keeps
  * a V2 export indistinguishable from a classic one. Both a quoted and a bare filename are
- * accepted because the header is not written by us.
+ * accepted because the header is not written by us. Prefer the UTF-8 name over its
+ * ASCII fallback when the server supplies both.
  */
 export function filenameFromContentDisposition(header: string | null): string | null {
     if (!header) {
         return null;
     }
-    const match = /filename\*?=(?:UTF-8'')?"?([^";]+)"?/i.exec(header);
+    const match = /filename\*=(?:UTF-8'')?"?([^";]+)"?/i.exec(header)
+        ?? /filename="?([^";]+)"?/i.exec(header);
     const filename = match?.[1]?.trim();
     if (!filename) {
         return null;
@@ -1195,6 +1197,26 @@ export function generatedArtifactDownloadUrl(
     return path ? apiUrl(path) : '';
 }
 
+/** Fetch before saving so a failed or expired download never navigates away from chat. */
+export async function downloadGeneratedArtifact(
+    artifact: GeneratedArtifact,
+    fallbackConversationId = '',
+): Promise<void> {
+    const url = generatedArtifactDownloadUrl(artifact, fallbackConversationId);
+    if (!url) {
+        throw new Error('Generated export is missing download metadata.');
+    }
+    const response = await fetch(url, { credentials: CREDENTIALS_MODE, cache: 'no-store' });
+    const disposition = response.headers.get('Content-Disposition');
+    if (!response.ok || response.redirected || !/^\s*attachment(?:;|$)/i.test(disposition ?? '')) {
+        throw new ApiError('The artifact could not be downloaded. Refresh the conversation and try again.', response.status, null);
+    }
+    saveBlob(
+        await response.blob(),
+        filenameFromContentDisposition(disposition) || artifactFileName(artifact),
+    );
+}
+
 export interface GeneratedOutputRunResponse {
     success?: boolean;
     message?: string;
diff --git a/application/v2_ui/src/lib/orchestrationController.ts b/application/v2_ui/src/lib/orchestrationController.ts
index aaae967cb..361ce1579 100644
--- a/application/v2_ui/src/lib/orchestrationController.ts
+++ b/application/v2_ui/src/lib/orchestrationController.ts
@@ -325,12 +325,12 @@ async function dispatchPlan(
     };
 
     const body: OrchestrationPlanRequest = {
+        ...context.seeds,
         message: context.message,
         conversation_id: currentConversationId,
         turn_id: currentTurnId,
         revision: context.revision,
         approval_mode: context.approvalMode,
-        ...context.seeds,
     };
     if (continuation) {
         body.elicitation = continuation.elicitation;
@@ -377,15 +377,9 @@ async function dispatchPlan(
                 if (!isCurrentRequest()) {
                     return;
                 }
-                adoptServerTurnId(plan.turn_id);
-                context.revision = plan.revision ?? context.revision;
-                useOrchestrationStore.getState().setPlan(currentConversationId, currentTurnId, {
-                    ...plan,
-                    reasoning_adjustments: normalizeReasoningAdjustments([
-                        ...reasoningAdjustments, ...(plan.reasoning_adjustments ?? []),
-                    ]),
-                });
-                if (!selectPlan(useOrchestrationStore.getState(), currentConversationId, currentTurnId)) {
+                const normalized = normalizePlan(plan);
+                if (!normalized?.plan_id || !normalized.run_id || !normalized.turn_id
+                    || normalized.conversation_id !== currentConversationId || !isPlanRunnable(normalized)) {
                     errored = true;
                     failure = 'The planner returned an invalid plan. Please try again.';
                     useChatStore.getState().settleOrchestrationTurn(currentConversationId, {
@@ -394,8 +388,16 @@ async function dispatchPlan(
                     });
                     return;
                 }
+                adoptServerTurnId(normalized.turn_id);
+                context.revision = normalized.revision ?? context.revision;
+                useOrchestrationStore.getState().setPlan(currentConversationId, currentTurnId, {
+                    ...normalized,
+                    reasoning_adjustments: normalizeReasoningAdjustments([
+                        ...reasoningAdjustments, ...(normalized.reasoning_adjustments ?? []),
+                    ]),
+                });
                 produced = true;
-                maybeAutoOpenDrawer(currentConversationId, plan);
+                maybeAutoOpenDrawer(currentConversationId, normalized);
             },
             onElicitation: (elicitation) => {
                 if (!isCurrentRequest()) {
@@ -487,6 +489,7 @@ export async function startOrchestrationPlan(params: StartPlanParams): Promise<v
     if (!message) {
         return;
     }
+    const seeds = structuredClone(params.seeds ?? {});
     const conversationId = await ensureConversation(params.conversationId, message);
     if (!conversationId) {
         return;
@@ -498,7 +501,7 @@ export async function startOrchestrationPlan(params: StartPlanParams): Promise<v
         {
             message,
             approvalMode: params.approvalMode,
-            seeds: params.seeds ?? {},
+            seeds,
             revision: 0,
             pendingUserMessageId: '',
         },
@@ -506,6 +509,58 @@ export async function startOrchestrationPlan(params: StartPlanParams): Promise<v
     );
 }
 
+/** Retry only an unsaved planning turn whose original request is still held in this tab. */
+export async function retryOrchestrationPlanning(
+    conversationId: string,
+    turnId: string,
+    messageId: string,
+): Promise<ElicitationSubmitResult> {
+    const chat = useChatStore.getState();
+    const context = turnContexts.get(scopeKey(conversationId, turnId));
+    const message = chat.messages.find((candidate) => candidate.id === messageId);
+    if (chat.activeConversationId !== conversationId || !context
+        || context.pendingUserMessageId !== messageId
+        || message?.conversation_id !== conversationId || message.role !== 'user'
+        || message.content !== context.message) {
+        return {
+            ok: false,
+            error: 'This planning request is no longer available in this tab. Copy the original message to the composer, review the model and documents, and send it again.',
+        };
+    }
+    if (hasActiveOrchestration(conversationId) || chat.streaming) {
+        return { ok: false, error: 'This conversation already has a request in progress.' };
+    }
+    const store = useOrchestrationStore.getState();
+    if (selectPlan(store, conversationId, turnId)) {
+        return { ok: false, error: 'This request already has a plan. Review the saved plan instead of starting another attempt.' };
+    }
+    if (selectElicitation(store, conversationId, turnId)) {
+        return { ok: false, error: 'This request has a planner question. Continue from that question so your answers are preserved.' };
+    }
+    return dispatchPlan(conversationId, turnId, { ...context }, false);
+}
+
+/** A deleted conversation must not regain a plan from a late response or retained Retry context. */
+export function forgetOrchestrationConversation(conversationId: string): void {
+    activeControllers.get(conversationId)?.abort();
+    activeControllers.delete(conversationId);
+    activeRunIds.delete(conversationId);
+    const store = useOrchestrationStore.getState();
+    const prefix = `${conversationId}\u0000`;
+    for (const key of turnContexts.keys()) {
+        if (!key.startsWith(prefix)) {
+            continue;
+        }
+        const turnId = key.slice(prefix.length);
+        turnContexts.delete(key);
+        store.clearPlan(conversationId, turnId);
+        store.clearElicitation(conversationId, turnId);
+        editorControllers.get(key)?.abort();
+        editorControllers.delete(key);
+    }
+    store.clearActiveTurn(conversationId);
+}
+
 /**
  * Answer a planner's question and re-plan the same turn.
  *
@@ -1062,6 +1117,7 @@ export function hasActiveOrchestration(conversationId: string): boolean {
 export function dismissOrchestrationTurn(conversationId: string, turnId: string): void {
     cancelOrchestration(conversationId);
     const key = scopeKey(conversationId, turnId);
+    turnContexts.delete(key);
     editorControllers.get(key)?.abort();
     editorControllers.delete(key);
     const store = useOrchestrationStore.getState();
diff --git a/application/v2_ui/src/pages/ChatPage.tsx b/application/v2_ui/src/pages/ChatPage.tsx
index 7cc73c147..aad51a486 100644
--- a/application/v2_ui/src/pages/ChatPage.tsx
+++ b/application/v2_ui/src/pages/ChatPage.tsx
@@ -420,7 +420,7 @@ export function ChatPage() {
     }
 
     return (
-        <div className="flex min-h-0 flex-1">
+        <div className="relative flex min-h-0 min-w-0 flex-1">
             <div className="flex min-w-0 flex-1 flex-col">
                 <ChatHeader onOpenDetails={() => setDetailsOpen(true)} />
                 <FileApprovals />
diff --git a/application/v2_ui/src/stores/chatStore.ts b/application/v2_ui/src/stores/chatStore.ts
index cbcefc873..e4c95654a 100644
--- a/application/v2_ui/src/stores/chatStore.ts
+++ b/application/v2_ui/src/stores/chatStore.ts
@@ -112,7 +112,11 @@ import { proposalSourceMessageId, type ImageProposalSpec } from '../lib/imagePro
 import { toast } from './toastStore';
 import { ApiError } from '../lib/apiClient';
 import { normalizeOrchestrationAttempt } from '../lib/orchestration';
-import { openOrchestrationRecovery } from '../lib/orchestrationController';
+import {
+    forgetOrchestrationConversation,
+    openOrchestrationRecovery,
+    retryOrchestrationPlanning,
+} from '../lib/orchestrationController';
 import { foundryAuthUrl } from '../lib/foundryAuth';
 import { useBootstrapStore } from './bootstrapStore';
 import { useCollaborationStore, participantName } from './collaborationStore';
@@ -1949,6 +1953,7 @@ export const useChatStore = create<ChatState>((set, get) => ({
             } else {
                 await deleteConversationApi(conversationId);
             }
+            forgetOrchestrationConversation(conversationId);
         } catch (error) {
             set({ conversations: previous });
             toast.error(
@@ -2964,6 +2969,20 @@ export const useChatStore = create<ChatState>((set, get) => ({
         const message = get().messages.find((candidate) => candidate.id === messageId);
         const attempt = normalizeOrchestrationAttempt(message?.metadata?.orchestration);
         const recoveryConversationId = get().activeConversationId;
+        if (messageId.startsWith('pending-user-')) {
+            const turnId = message?.metadata?.orchestration_turn_id;
+            const result = recoveryConversationId && typeof turnId === 'string' && turnId
+                ? await retryOrchestrationPlanning(recoveryConversationId, turnId, messageId)
+                : {
+                    ok: false,
+                    error: 'This message has not been saved. Copy the original message to the composer, review your selections, and send it again.',
+                };
+            if (!result.ok && get().activeConversationId === recoveryConversationId
+                && get().messages.some((candidate) => candidate.id === messageId)) {
+                set({ streamError: result.error, streamAuthUrl: null });
+            }
+            return;
+        }
         if (attempt.run_id && recoveryConversationId) {
             openOrchestrationRecovery(recoveryConversationId, attempt.run_id);
             return;
diff --git a/docs/explanation/features/ANALYZE_RESULTS.md b/docs/explanation/features/ANALYZE_RESULTS.md
index 9c24ce257..62dde7900 100644
--- a/docs/explanation/features/ANALYZE_RESULTS.md
+++ b/docs/explanation/features/ANALYZE_RESULTS.md
@@ -3,6 +3,9 @@
 Implemented in version: **0.261.109**, recorded in
 `application/single_app/config.py`.
 
+Planning, download, and responsive stabilization updated in version:
+**0.261.113**. See [Analyze stabilization](../fixes/ANALYZE_STABILIZATION_FIX.md).
+
 ## Overview
 
 Analyze separates accepted findings from window-level candidates, source
@@ -102,6 +105,18 @@ Already published workspace copies have their own destination permissions and
 lifecycle. They do not inherit later access changes to the original sources.
 Previously delivered or downloaded bytes cannot be recalled.
 
+Original chat artifacts use their own authorized byte reader rather than the
+workspace-document citation reader. Conversation participation, generated-file
+approval, publication state, and saved-source access are checked before and
+after reading the persisted blob reference. Changed identity, revision, or
+recorded content digest prevents delivery. Legacy artifacts without a saved
+analysis binding retain their existing authorization contract.
+
+Classic and V2 download controls fetch the attachment before invoking browser
+download handling. An error response or sign-in page is not saved as a file and
+does not navigate away from chat. Original artifact responses are not cached for
+reuse after an authorization change.
+
 ## Validation and limitations
 
 Functional coverage includes source fixtures at 1, 10, 100, 300, and 500 inputs,
diff --git a/docs/explanation/fixes/ANALYZE_STABILIZATION_FIX.md b/docs/explanation/fixes/ANALYZE_STABILIZATION_FIX.md
new file mode 100644
index 000000000..d0222e37d
--- /dev/null
+++ b/docs/explanation/fixes/ANALYZE_STABILIZATION_FIX.md
@@ -0,0 +1,149 @@
+# Analyze planning, Retry, downloads, and responsive stabilization
+
+Fixed in version: **0.261.113**, recorded in
+`application/single_app/config.py`.
+
+## Scope and reproduction baseline
+
+This stabilization builds on `paullizer-react-v2-ui` at
+`c728f62b9a4cd05f4c18fde850082ed76db14168`, application **0.261.112**, after
+#1483 and #1484. It does not reintroduce those feature commits or add workflow
+conditions, loops, aggregation semantics, or another execution/storage engine.
+
+On 2026-09-17, the named Azure test application was still configured for image
+`simplechat:0.261.107-f007187d`. Commit
+`f007187d844a032eaa9aaec26633c9dc4959c513` contains the separate content-screening
+implementation; it is not the integrated V2 baseline. A version string alone
+does not establish matching code or frontend assets.
+
+No deployment, live workspace publication, or permission change is part of this
+fix. Fresh live acceptance requires an explicitly authorized matching target.
+
+## Planning and Retry
+
+The optimistic question had a `pending-user-*` ID and an
+`orchestration_turn_id`, but message Retry only recognized saved orchestration
+attempt metadata. It therefore sent the temporary ID to the persisted-message
+retry API and received 404.
+
+`orchestrationController.ts` now retains an immutable copy of the original
+planning selections. `chatStore.ts` routes an unsaved planning Retry through
+the existing planning dispatcher with the same conversation and turn, without
+another user bubble. Concurrent work prevents another submission. Stop,
+conversation deletion, and superseded responses cannot deliver a late plan
+into another conversation. Missing context requires deliberate composer recovery;
+an existing plan or question cannot be silently replaced. Persisted message Retry
+and checkpoint-based orchestration recovery remain separate.
+
+The controller also rejects missing, malformed, wrong-conversation, and unusable
+plan payloads before treating them as a successful plan.
+
+### Planner validation evidence and correction
+
+The historical console event at **2026-09-17 14:40:06 UTC** recorded
+`invalid_plan_or_missing_requirement`. The preceding capability event required
+`document_search`, although `document_analyze` was available. The historical
+model completion was not captured, so its precise proposed steps remain unknown.
+
+A deterministic local reproduction established an input-contract defect:
+pinning documents automatically required Search, causing a valid Analyze-only
+plan over those documents to fail the selected-operation requirement.
+`Composer.tsx` no longer converts pinned sources or a workspace handoff into
+an implicit Search operation. Explicit Search remains required, and existing
+backend validation still requires all selected documents.
+
+`functions_orchestration_planner.py` retains the existing safe error response
+and adds conversation/turn identity, stage, exception type, and incomplete/refused
+completion classification to failure diagnostics. Normalization failures and
+missing selected work are distinguishable without logging prompts, provider
+response bodies, credentials, or raw SDK exception text. A failed request does
+not become an empty successful plan or switch models.
+
+## Authorized artifact byte delivery
+
+Historical console events at **14:44:31 UTC** and **14:47:48 UTC** reported:
+
+> This document is unavailable until content screening and review are complete.
+
+The deployed screening revision passed only filename, container, and blob path
+from an already-authorized generated artifact into a workspace-only citation
+reader. That reader required a workspace document identity and raised a hold
+before metadata or blob access. Its route converted the hold into a generic 500.
+This deterministic identity mismatch is not evidence of a Blob permission error
+or proof that the source documents were actually quarantined.
+
+`route_enhanced_citations.py` now serves standalone chat artifacts through the
+existing internal `download_blob_content` reader, not through workspace-document
+admission. It obtains container and path only from the authorized stored message.
+Conversation participation, generated-file approval, committed publication, and
+saved-analysis source access run before and after the byte read. Changed message
+identity, blob reference, ETag, or recorded digest prevents delivery; available
+content hashes are checked against the actual bytes.
+
+Successful CSV and Markdown responses contain the actual file bytes, appropriate
+content types, safe attachment filenames, and private `no-store` headers. Missing
+content returns a safe 404, lost access a safe 403, and unavailable storage a safe
+503. Other unexpected failures remain errors, without exposing exception text.
+
+The screening-free baseline does not add screening-specific imports or disable
+screening. When combined with screening, its existing source-evidence check in
+`_get_authorized_chat_artifact_message` must remain on both sides of the read,
+and genuine screening holds must retain that branch's explicit error handling.
+Workspace-linked documents still use their own admitted representation.
+Already-published workspace copies keep their independent destination ACL.
+
+Classic and V2 download buttons now fetch and validate the attachment response
+before saving it. An HTTP error, successful-status JSON error without an attachment,
+or sign-in redirect does not become a downloaded file or replace the chat page.
+The button becomes usable again after failure.
+
+Separately hosted V2 frontends can read `Content-Disposition` through the
+existing exact-origin CORS allowlist. No wildcard origin or additional
+credential exposure is introduced.
+
+## Responsive behavior
+
+The current integrated UI reproduced **457 pixels** of document width at a
+**390 by 844** viewport with expanded navigation. That is a separate current-code
+reproduction, not reuse of the older deployment's 754-pixel observation.
+
+`AppShell.tsx` and `Sidebar.tsx` use the existing mobile navigation state to
+overlay expanded navigation without changing the desktop collapse preference.
+The underlying chat is inert while the mobile rail is open; Escape, navigation,
+and the backdrop dismiss it. Opening Share or People also closes the rail so
+the participants dialog does not remain inside inert content.
+`ChatPage.tsx` and `ConversationDrawer.tsx` keep
+smaller-screen drawers within the chat's width rather than squeezing it beside
+a fixed-width panel. Generated artifact text wraps long names; tables retain
+local scrolling instead of hiding content at page level.
+
+## Regression coverage and acceptance boundaries
+
+The focused regressions execute production functions/components with isolated
+provider, storage, and authentication boundaries:
+
+| Coverage | Regression |
+| --- | --- |
+| Failed planning, exact request reuse, repeated clicks, Stop, deletion/navigation, missing context, ordinary Retry | `ui_tests/test_v2_orchestration_planning_retry.py` |
+| Pinned sources versus explicit operations and safe provider/validation diagnostics | `functional_tests/test_orchestration_planner_failure_diagnostics.py`, `ui_tests/test_v2_chat_context_selection.py` |
+| Exact CSV/Markdown bytes, legacy files, staged/denied access, changed references/digests, and revocation during reads | `functional_tests/test_chat_artifact_download_bytes.py` |
+| Attachment header access for the configured split-origin frontend only | `functional_tests/test_v2_artifact_download_cors.py` |
+| Error recovery without navigation, saved findings/evidence, and full-shell narrow-screen behavior | `ui_tests/test_chat_saved_analysis.py` |
+| Fresh Supplier/Terms/Governance source text, four factual anchors, accepted findings, saved reload, evidence, and Markdown/CSV values | `functional_tests/test_analyze_three_document_smoke.py` |
+
+Existing saved-analysis, workflow result handoff, publication, calculation,
+paging, checkpoint, write-fence, and route-policy regressions remain the
+contracts for those unchanged execution/storage surfaces. Deterministic scale
+fixtures are not hundreds of live model calls.
+
+The three-document regression runs the real narrative producer with scripted
+model responses grounded in the original fictional passages. It checks the
+sole-supplier dependency, one-time USD 10,000 convenience termination fee,
+unstated dates without claiming absent clauses, and Maya Chen's existing
+ownership/quarterly-review controls. It proves data-flow and representation
+contracts, not live model judgment or the complete deployed browser workflow.
+
+A new three-document live result, cross-interface reload, factual-oracle review,
+and controlled second-account authorization check remain separate live gates.
+Opening an old result or completing a production build cannot satisfy them.
+Native/mixed deferred-completion limitations remain unchanged.
diff --git a/docs/guides/analyze-results.md b/docs/guides/analyze-results.md
index 340f93f07..e5acb2eee 100644
--- a/docs/guides/analyze-results.md
+++ b/docs/guides/analyze-results.md
@@ -4,7 +4,7 @@ title: "Read and discuss saved Analyze results"
 description: "Read the answer first, browse saved findings and evidence, and ask follow-up questions without requesting another source pass."
 section: "Guides"
 audience: user
-version: "0.261.109"
+version: "0.261.113"
 ---
 
 ## What this does
@@ -33,6 +33,11 @@ Use the existing source-selection and Analyze flow:
   Analyze, use the existing plan-review and approval controls; the saved-result
   view appears with its answer. **Documents** is not a separate Analyze button.
 
+Since **0.261.113**, pinning documents does not also require a Search step. Ask
+for Analyze in the message and review the proposed operation. All selected
+documents must still be accounted for; an explicit Search selection remains a
+requirement rather than being silently replaced by Analyze.
+
 Source access, supported documents, and your deployment's existing Analyze limits
 still apply. See [Chat controls]({{ '/reference/chat-controls/#saved-analyze-results-both-interfaces' | relative_url }})
 and [Review and edit orchestration plans]({{ '/guides/review-and-edit-orchestration-plans/' | relative_url }}).
@@ -60,6 +65,15 @@ download actions, such as **Download CSV**, when an output is available. Downloa
 are optional supporting outputs, not a prerequisite for reading or discussing the
 findings.
 
+Downloads check current artifact and source access before returning the file.
+If a download fails, the conversation remains open and the download button becomes
+available again. Refresh the conversation before retrying a stale or unavailable
+file. A preview opening successfully does not establish that a download will work.
+
+In React V2 on a narrow screen, **Expand navigation** opens the rail over the chat
+instead of narrowing the report. Collapse it, press Escape, or select the shaded
+backdrop to return to the report. Wide tables scroll inside their own container.
+
 ## Inspect evidence and limitations
 
 Expand **Evidence for finding …** beside a finding; the label includes that
@@ -143,7 +157,7 @@ An unavailable or stale notice is not an empty successful analysis:
 
 ## Validation scope
 
-The controls and saved-result reads have local functional and browser-fixture
-coverage for both interfaces. A live authenticated target was unavailable for this
-change, so deployment-specific integration and elapsed-time improvements have not
-been verified.
+Local functional and browser-fixture coverage is separate from live acceptance.
+Use a matching backend and V2 build, a new conversation, and currently authorized
+sources when evaluating a deployment. Reopening an old conversation does not
+re-analyze its documents or retrofit new saved-result metadata.
diff --git a/docs/guides/review-and-edit-orchestration-plans.md b/docs/guides/review-and-edit-orchestration-plans.md
index cf4ed8813..246d603d3 100644
--- a/docs/guides/review-and-edit-orchestration-plans.md
+++ b/docs/guides/review-and-edit-orchestration-plans.md
@@ -4,7 +4,7 @@ title: "Review and edit orchestration plans"
 description: "Refine proposed work with the planner before running it."
 section: "Guides"
 audience: user
-version: "0.261.105"
+version: "0.261.113"
 ---
 
 ## Decide what should run
@@ -44,6 +44,11 @@ Research is not compulsory. The planner can answer directly when the available
 context is enough. Capability lookup or model failures produce errors rather
 than a replacement answer-only plan.
 
+Pinned documents specify the inputs, not the operation. Since **0.261.113**, the
+planner may Analyze or Compare those inputs without adding a Search step merely
+because they were pinned. Explicitly selected Search still constrains the plan,
+and the validator still rejects a plan that omits selected documents.
+
 ## Review versus Edit
 
 **Review** opens the existing drawer. You can inspect steps and their rationales,
@@ -117,6 +122,20 @@ history or reactivate an old execution.
 Capabilities and source access are checked again. A version that depends on a
 document or integration you can no longer use may not be restorable.
 
+## Recover before a plan exists
+
+Since **0.261.113**, **Retry** on a failed planning question retries planning with
+the original prompt, model or agent selection, documents, scope, and approval
+mode retained in that browser tab. It does not use the temporary chat bubble as
+a saved message ID or append a duplicate question. Stop interrupts the local
+planning request; a late response cannot populate another or deleted conversation.
+
+If the request context is no longer available, follow the notice to copy the
+original message into the composer, review its selections, and send it deliberately.
+The application does not guess a model or document selection from current controls.
+If a plan or clarification already exists, continue from that plan or question
+instead; Retry must not discard accepted answers or start an independent execution.
+
 ## Recover from a failed change
 
 The last valid plan remains available when an instruction cannot be planned or
diff --git a/docs/reference/chat-controls.md b/docs/reference/chat-controls.md
index 512ac3c0c..5b0112b7a 100644
--- a/docs/reference/chat-controls.md
+++ b/docs/reference/chat-controls.md
@@ -4,7 +4,7 @@ title: "Chat interface controls"
 description: "Reference for every documented control in the SimpleChat chat interface."
 section: "Reference"
 audience: user
-version: "0.261.112"
+version: "0.261.113"
 ---
 
 ## How to use this reference
@@ -25,6 +25,18 @@ Use this page when you can see a control in Chat but are not sure what it does o
 
 ## Conversation header and status
 
+### React V2 navigation on narrow screens
+
+Since **0.261.113**, **Expand navigation** opens the navigation rail above the
+chat on screens narrower than 768 pixels. **Collapse navigation**, Escape, or
+the shaded **Close navigation** backdrop closes it. Choosing a destination or
+conversation also closes the mobile rail. These actions do not change the
+desktop navigation preference.
+
+Conversation drawers overlay the chat below the wide-desktop breakpoint rather
+than leaving the message pane too narrow to read. **Close panel** returns to the
+chat; wide result tables keep their scrolling inside the table.
+
 ### Foundry sign-in requests
 
 From version **0.261.093**, when a called Foundry agent needs delegated sign-in
diff --git a/functional_tests/test_analyze_three_document_smoke.py b/functional_tests/test_analyze_three_document_smoke.py
new file mode 100644
index 000000000..5ee972db7
--- /dev/null
+++ b/functional_tests/test_analyze_three_document_smoke.py
@@ -0,0 +1,149 @@
+# test_analyze_three_document_smoke.py
+"""
+Fresh three-document Analyze producer, saved-result, and export regression.
+Version: 0.261.113
+Implemented in: 0.261.113
+
+Original fictional source text passes through the production narrative producer,
+collector, saved section reader, and export builders. Only source I/O and model
+completions are deterministic. This is not live model or deployed UI acceptance.
+"""
+
+import csv
+import io
+import json
+import re
+from copy import deepcopy
+
+from test_analyze_backend_saved_integration import runner_namespace
+from test_document_analysis_final_results import run_analysis
+from test_saved_analysis_service import ChatSections, saved
+from test_support.document_analysis import USER_ID, FixtureAnalysisClient, document_analysis_runtime, original_document
+
+
+PROMPT = (
+    "Use Analyze on the three selected documents. Explain the main risks in these "
+    "documents. Include source references and a concise table. Do not invent scores. "
+    "Also provide Markdown and CSV outputs."
+)
+PASSAGES = {
+    "supplier": "Northstar Components is the sole Orion sensor assembly supplier; no qualified alternative.",
+    "terms": "USD 10,000 one-time convenience termination fee. Renewal and expiry dates are unstated in these documents.",
+    "governance": "Maya Chen is the assigned owner; quarterly reviews are an existing control.",
+}
+FINDINGS = {
+    "supplier": [("supplier_dependency", {
+        "finding": "Sole supplier dependency",
+        "explanation": "Northstar Components is the sole Orion sensor assembly supplier; no qualified alternative.",
+    })],
+    "terms": [
+        ("termination_fee", {
+            "finding": "One-time convenience termination cost",
+            "explanation": "USD 10,000 one-time convenience termination fee.",
+        }),
+        ("unstated_dates", {
+            "finding": "Dates require confirmation",
+            "explanation": "Renewal and expiry dates are unstated; this does not establish that contractual clauses are absent.",
+        }),
+    ],
+    "governance": [("existing_controls", {
+        "finding": "Existing ownership and review controls",
+        "explanation": "Maya Chen is the assigned owner; quarterly reviews are an existing control.",
+    })],
+}
+
+
+def source_completion(prompt):
+    excerpt = prompt.split("<DocumentSlice>\n", 1)[1].rsplit("\n</DocumentSlice>", 1)[0]
+    findings = []
+    for match in re.finditer(r"\[(?:Page \d+, )?Chunk (\d+)\] ([^\n]+)", excerpt):
+        chunk, quote = match.groups()
+        source = next(name for name, passage in PASSAGES.items() if passage == quote)
+        findings.extend({
+            "finding_key": key, "values": values, "status": "supported", "issues": [],
+            "evidence": [{"chunk_sequence": int(chunk), "quote": quote}],
+        } for key, values in FINDINGS[source])
+    return json.dumps({"findings": findings})
+
+
+def test_fresh_three_document_findings_survive_save_reload_and_both_export_formats():
+    documents = {
+        name: original_document(name, [passage], scope="group", scope_id="isolated-analysis-qa")
+        for name, passage in PASSAGES.items()
+    }
+    client = FixtureAnalysisClient(response_builder=source_completion)
+    with document_analysis_runtime(documents) as runtime:
+        result, _ = run_analysis(runtime, documents, client, analysis_prompt=PROMPT)
+        records = result["authoritative_result"]["value"]
+        assert len(records) == 4
+        assert {record["document_id"] for record in records} == set(PASSAGES)
+        assert result["analysis_validation"]["status"] == "valid"
+        assert result["analysis_validation"]["coverage"]["completed_sources"] == 3
+        assert len(client.calls) == 3
+        assert {call["stage"] for call in client.calls} == {"window_analysis"}
+        source_reads = list(runtime.source_reads)
+        assert [document_id for kind, document_id in source_reads if kind == "chunks"] == list(PASSAGES)
+
+        uploads = {}
+
+        def upload(**kwargs):
+            uploads[kwargs["output_format"]] = kwargs["file_content"].encode("utf-8")
+            return {"message": {"id": f"fresh-artifact-{kwargs['output_format']}", "file_name": kwargs["file_name"]}}
+
+        producer = {"kind": "chat", "conversation_id": "fresh-three-source-chat", "message_id": "fresh-analysis"}
+        exports = runner_namespace(upload_generated_analysis_artifact_for_current_user=upload)
+        artifacts = exports["_maybe_create_document_analysis_generated_artifacts"](
+            result, PROMPT, conversation_id=producer["conversation_id"], analysis_producer=producer,
+        )
+        assert artifacts["assistant_reply"] == result["analysis_reply"]
+        expected_rows = runtime.results.get_document_analysis_export_rows(result)
+        assert list(csv.DictReader(io.StringIO(uploads["csv"].decode("utf-8")))) == expected_rows
+        assert result["analysis_reply"] in uploads["md"].decode("utf-8")
+        for values in (values for findings in FINDINGS.values() for _, values in findings):
+            assert values["explanation"] in result["analysis_reply"]
+            assert values["explanation"] in uploads["md"].decode("utf-8")
+        assert "end_chunk_sequence" not in uploads["md"].decode("utf-8")
+        assert "end_chunk_sequence" not in uploads["csv"].decode("utf-8")
+        assert all("score" not in key.lower() for row in expected_rows for key in row)
+
+        sources = result["analysis_sources"]
+        sections = ChatSections()
+
+        def authorize(actor, conversation):
+            assert actor == USER_ID and conversation == producer["conversation_id"]
+            return {"id": conversation, "user_id": USER_ID}
+
+        def resolve(document_ids, **kwargs):
+            assert set(document_ids) == set(PASSAGES)
+            return [{**deepcopy(source), "authorization_status": "authorized"} for source in sources]
+
+        descriptor = saved.save_chat_analysis(
+            {"reply": result["reply"], "analysis_result": result},
+            user_id=USER_ID, conversation_id=producer["conversation_id"], message_id=producer["message_id"],
+            authorize_conversation=authorize, save_result=sections.save, source_resolver=resolve,
+        )
+        message = {
+            "id": producer["message_id"], "conversation_id": producer["conversation_id"],
+            "role": "assistant", "content": result["reply"], "metadata": {"saved_analysis": descriptor},
+        }
+
+        def load_message(actor, conversation, message_id):
+            authorize(actor, conversation)
+            assert message_id == producer["message_id"]
+            return message
+
+        reloaded = ChatSections(deepcopy(sections.contents))
+        context = saved.saved_analysis_context(descriptor)
+        options = {"message_loader": load_message, "chat_loader": reloaded.load, "source_resolver": resolve}
+        page = saved.read_saved_analysis_page(USER_ID, context, **options)
+        assert page["total_records"] == 4 and descriptor["source_count"] == 3
+        assert [record["values"] for record in page["records"]] == expected_rows
+        for record in page["records"]:
+            evidence = saved.read_saved_analysis_page(
+                USER_ID, context, representation="evidence", record_id=record["record_id"], **options,
+            )
+            assert evidence["evidence"]
+        payload, _ = saved.load_saved_analysis_input(USER_ID, context, **options)
+        assert len(json.loads(payload)["records"]) == 4
+        assert json.loads(payload)["original_sources_reanalyzed"] is False
+        assert len(client.calls) == 3 and runtime.source_reads == source_reads
diff --git a/functional_tests/test_chat_artifact_download_bytes.py b/functional_tests/test_chat_artifact_download_bytes.py
new file mode 100644
index 000000000..ce6ccb540
--- /dev/null
+++ b/functional_tests/test_chat_artifact_download_bytes.py
@@ -0,0 +1,257 @@
+# test_chat_artifact_download_bytes.py
+"""
+Functional regressions for authorized generated artifact download bytes.
+Version: 0.261.113
+Implemented in: 0.261.113
+
+Production route, message/lifecycle authorization, internal blob reader, saved
+analysis/source reader, and response functions execute against isolated storage.
+Workspace-document admission is deliberately unavailable: a standalone generated
+artifact must not be misidentified as an ID-less workspace source.
+"""
+
+import ast
+import hashlib
+import logging
+import mimetypes
+import os
+from copy import deepcopy
+from pathlib import Path
+from types import SimpleNamespace
+from urllib.parse import quote
+
+import pytest
+from azure.core.exceptions import AzureError, ResourceNotFoundError
+from flask import Flask, Response, jsonify, request
+from werkzeug.utils import secure_filename
+
+from test_generated_artifact_lifecycle_authorization import (
+    FakeContainer,
+    FakeNotFound,
+    load_operation_helpers,
+)
+from test_saved_analysis_service import read_options, saved, saved_chat  # noqa: F401
+
+
+APP = Path(__file__).resolve().parents[1] / "application" / "single_app"
+CONVERSATION = "conversation-1"
+ARTIFACT = "artifact-1"
+DOWNLOAD = f"/api/chat_artifacts/download?conversation_id={CONVERSATION}&message_id={ARTIFACT}"
+CSV = b"finding,source\nSole supplier,Supplier\n"
+MARKDOWN = b"# Findings\n\nSole supplier -- Supplier.\n"
+
+
+def load_definitions(filename, names, namespace):
+    tree = ast.parse((APP / filename).read_text(encoding="utf-8"))
+    definitions = []
+    for node in ast.walk(tree):
+        if isinstance(node, ast.FunctionDef) and node.name in names:
+            node.decorator_list = []
+            definitions.append(node)
+    assert {node.name for node in definitions} == names
+    exec(compile(ast.Module(body=definitions, type_ignores=[]), filename, "exec"), namespace)
+
+
+class SnapshotContainer(FakeContainer):
+    def read_item(self, item, partition_key):
+        return deepcopy(super().read_item(item, partition_key))
+
+
+@pytest.fixture
+def artifact_download(saved_chat):
+    identity = {"user_id": "reader", "allowed": True, "approved": True}
+    metadata = {
+        "is_generated_chat_artifact": True,
+        "generated_artifact_output_format": "csv",
+        "generated_artifact_content_sha256": hashlib.sha256(CSV).hexdigest(),
+        **saved.analysis_artifact_metadata({
+            "kind": "chat", "conversation_id": CONVERSATION, "message_id": "assistant-1",
+        }),
+    }
+    artifact = {
+        "id": ARTIFACT, "conversation_id": CONVERSATION, "role": "file",
+        "filename": "review.json", "file_content_source": "blob",
+        "blob_container": "chat-files", "blob_path": "owner/conversation/generated/review.csv",
+        "_etag": "artifact-v1", "metadata": metadata,
+    }
+    conversations = SnapshotContainer({CONVERSATION: {"id": CONVERSATION, "user_id": "owner"}})
+    messages = SnapshotContainer({ARTIFACT: artifact})
+    reads = []
+    state = {"content": CSV, "failure": None, "after_read": None}
+    logs = []
+
+    def participate(user_id, conversation):
+        if not identity["allowed"] or user_id not in ("owner", "reader"):
+            raise PermissionError("PRIVATE_CONVERSATION_DETAIL")
+        assert conversation["id"] == CONVERSATION
+        return {"is_owner": user_id == "owner", "user_id": user_id}
+
+    def approval(user_id, message):
+        if not identity["approved"]:
+            raise PermissionError("PRIVATE_APPROVAL_DETAIL")
+
+    def authorize_analysis(user_id, message):
+        return saved.authorize_analysis_artifact(
+            user_id, message, parents_loader=lambda *args: [saved_chat["message"]],
+            result_reader=lambda actor, context: saved.load_saved_analysis(actor, context, **read_options(saved_chat)),
+        )
+
+    publication = load_operation_helpers(conversations.items[CONVERSATION], artifact)
+    publication["authorize_analysis_artifact"] = authorize_analysis
+
+    def get_blob_client(*, container, blob):
+        reads.append((container, blob))
+        assert (container, blob) == ("chat-files", "owner/conversation/generated/review.csv")
+
+        def readall():
+            if state["failure"]:
+                raise state["failure"]
+            content = state["content"]
+            if state["after_read"]:
+                state["after_read"]()
+            return content
+
+        return SimpleNamespace(download_blob=lambda: SimpleNamespace(readall=readall))
+
+    namespace = {
+        "hashlib": hashlib, "logging": logging, "mimetypes": mimetypes, "os": os,
+        "quote": quote, "secure_filename": secure_filename,
+        "Response": Response, "jsonify": jsonify, "request": request,
+        "AzureError": AzureError, "ResourceNotFoundError": ResourceNotFoundError,
+        "CosmosResourceNotFoundError": FakeNotFound,
+        "CLIENTS": {"storage_account_office_docs_client": SimpleNamespace(get_blob_client=get_blob_client)},
+        "cosmos_conversations_container": conversations, "cosmos_messages_container": messages,
+        "build_conversation_participation_context": participate,
+        "assert_generated_file_approval_allows_download": approval,
+        "assert_generated_chat_artifact_is_published_for_user": publication["assert_generated_chat_artifact_is_published_for_user"],
+        "get_current_user_id": lambda: identity["user_id"],
+        "log_event": lambda message, **kwargs: logs.append((message, kwargs)),
+        "debug_print": lambda *args: None,
+        "serve_enhanced_citation_content": lambda *args, **kwargs: pytest.fail(
+            "A generated chat artifact must not enter workspace-document admission."
+        ),
+    }
+    load_definitions("functions_simplechat_operations.py", {"download_blob_content"}, namespace)
+    load_definitions("route_enhanced_citations.py", {
+        "_get_authorized_chat_artifact_message", "_resolve_generated_artifact_file_name",
+        "_normalize_response_file_name", "_build_content_disposition",
+        "_serve_chat_artifact_download", "download_chat_artifact",
+    }, namespace)
+    app = Flask(__name__)
+    app.add_url_rule("/api/chat_artifacts/download", view_func=namespace["download_chat_artifact"])
+    return SimpleNamespace(
+        client=app.test_client(), artifact=artifact, identity=identity, messages=messages,
+        conversations=conversations, reads=reads, state=state, saved=saved_chat,
+        namespace=namespace, logs=logs,
+    )
+
+
+@pytest.mark.parametrize("format,content,content_type,filename", [
+    ("csv", CSV, "text/csv", "review.csv"),
+    ("md", MARKDOWN, "text/markdown", "review.md"),
+])
+def test_download_returns_exact_bytes_and_server_owned_filename(artifact_download, format, content, content_type, filename):
+    fixture = artifact_download
+    fixture.state["content"] = content
+    fixture.artifact["metadata"].update(
+        generated_artifact_output_format=format,
+        generated_artifact_content_sha256=hashlib.sha256(content).hexdigest(),
+    )
+    response = fixture.client.get(DOWNLOAD + "&blob_container=foreign&blob_path=private&filename=forged.txt")
+    assert response.status_code == 200
+    assert response.data == content
+    assert response.mimetype == content_type
+    assert int(response.headers["Content-Length"]) == len(content)
+    assert f'filename="{filename}"' in response.headers["Content-Disposition"]
+    assert response.headers["Content-Disposition"].startswith("attachment;")
+    assert "no-store" in response.headers["Cache-Control"]
+    assert response.headers["X-Content-Type-Options"] == "nosniff"
+    assert fixture.saved["state"]["resolutions"] >= 2
+    assert fixture.reads == [("chat-files", "owner/conversation/generated/review.csv")]
+
+
+@pytest.mark.parametrize("denial", ["conversation", "source", "approval", "staged", "deleted_parent"])
+def test_denial_happens_before_blob_read(artifact_download, denial):
+    fixture = artifact_download
+    if denial == "conversation":
+        fixture.identity["allowed"] = False
+    elif denial == "source":
+        fixture.saved["state"]["source_allowed"] = False
+    elif denial == "approval":
+        fixture.identity["approved"] = False
+    elif denial == "staged":
+        fixture.artifact["metadata"]["generated_artifact_lifecycle_state"] = "staged"
+    else:
+        fixture.saved["message"]["metadata"]["masked_ranges"] = [{"start": 0, "end": 10}]
+    response = fixture.client.get(DOWNLOAD)
+    assert response.status_code == 403
+    assert fixture.reads == []
+    assert b"PRIVATE" not in response.data and CSV not in response.data
+
+
+@pytest.mark.parametrize("change", ["source", "membership", "approval", "reference", "revision"])
+def test_access_or_identity_changes_during_read_never_release_bytes(artifact_download, change):
+    fixture = artifact_download
+
+    def change_during_read():
+        if change == "source":
+            fixture.saved["state"]["source_allowed"] = False
+        elif change == "membership":
+            fixture.identity["allowed"] = False
+        elif change == "approval":
+            fixture.identity["approved"] = False
+        elif change == "reference":
+            fixture.artifact["blob_path"] = "different-reference"
+        else:
+            fixture.artifact["_etag"] = "artifact-v2"
+
+    fixture.state["after_read"] = change_during_read
+    response = fixture.client.get(DOWNLOAD)
+    assert response.status_code == (404 if change in ("reference", "revision") else 403)
+    assert response.is_json and CSV not in response.data
+
+
+@pytest.mark.parametrize("missing", ["conversation", "message", "reference", "blob"])
+def test_missing_artifact_has_a_safe_not_found_response(artifact_download, missing):
+    fixture = artifact_download
+    if missing == "conversation":
+        fixture.conversations.items.clear()
+    elif missing == "message":
+        fixture.messages.items.clear()
+    elif missing == "reference":
+        fixture.artifact.pop("blob_path")
+    else:
+        fixture.state["failure"] = ResourceNotFoundError("PRIVATE_STORAGE_DETAIL")
+    response = fixture.client.get(DOWNLOAD)
+    assert response.status_code == 404
+    assert b"PRIVATE" not in response.data
+
+
+@pytest.mark.parametrize("missing_client", [False, True])
+def test_unavailable_storage_reports_retry_without_exposing_sdk_details(artifact_download, missing_client):
+    fixture = artifact_download
+    if missing_client:
+        fixture.namespace["CLIENTS"].clear()
+    else:
+        fixture.state["failure"] = AzureError("PRIVATE_STORAGE_DETAIL")
+    response = fixture.client.get(DOWNLOAD)
+    assert response.status_code == 503
+    assert b"PRIVATE" not in response.data
+    assert fixture.logs and "error_type" in fixture.logs[-1][1]["extra"]
+
+
+def test_legacy_artifact_without_saved_analysis_or_hash_remains_readable(artifact_download):
+    fixture = artifact_download
+    fixture.artifact["metadata"] = {"is_generated_chat_artifact": True}
+    fixture.artifact["filename"] = "legacy.csv"
+    fixture.saved["state"]["source_allowed"] = False
+    response = fixture.client.get(DOWNLOAD)
+    assert response.status_code == 200 and response.data == CSV
+
+
+def test_modified_blob_bytes_do_not_pass_the_saved_content_digest(artifact_download):
+    fixture = artifact_download
+    fixture.state["content"] = b"Replaced private content"
+    response = fixture.client.get(DOWNLOAD)
+    assert response.status_code == 404
+    assert b"Replaced private content" not in response.data
diff --git a/functional_tests/test_orchestration_planner_failure_diagnostics.py b/functional_tests/test_orchestration_planner_failure_diagnostics.py
new file mode 100644
index 000000000..545a3a4de
--- /dev/null
+++ b/functional_tests/test_orchestration_planner_failure_diagnostics.py
@@ -0,0 +1,150 @@
+# test_orchestration_planner_failure_diagnostics.py
+"""
+Functional regressions for planner selection constraints and safe diagnostics.
+Version: 0.261.113
+Implemented in: 0.261.113
+
+The real planner, registry, request context, and validator use controlled provider
+responses. Tests distinguish missing selected work from malformed/provider output,
+without accepting empty plans, switching models, or logging provider secrets.
+"""
+
+import json
+from types import SimpleNamespace
+from unittest.mock import patch
+
+import httpx
+import pytest
+from openai import APIError, APITimeoutError
+
+from test_orchestration_research_selection import ScriptedClient, model_plan
+from test_support.orchestration_research import case_inputs, load_case_suite, planner_runtime
+
+
+PROMPT = (
+    "Use Analyze on the three selected documents. Explain the main risks in these "
+    "documents. Include source references and a concise table. Do not invent scores. "
+    "Also provide Markdown and CSV outputs."
+)
+
+
+@pytest.fixture
+def planner_case():
+    with planner_runtime() as runtime:
+        suite = load_case_suite()
+        case = next(item for item in suite["cases"] if item["id"] == "long-simple-drafting")
+        settings, caller, context = case_inputs(runtime, suite, case)
+        logs = []
+        with patch.dict(runtime.planner, {
+            "log_event": lambda message, **kwargs: logs.append((message, kwargs)),
+        }):
+            yield SimpleNamespace(runtime=runtime, settings=settings, caller=caller, context=context, logs=logs)
+
+
+def plan(fixture, client, *, seeds=None, context=None, authorized=None):
+    with patch.dict(fixture.runtime.planner, {
+        "resolve_planner_client": lambda settings: (client, "gpt-4o"),
+    }):
+        return fixture.runtime.planner["plan_request"](
+            PROMPT, context or fixture.context, "three-document-chat", fixture.caller["user_id"],
+            turn_id="three-document-turn", settings=fixture.settings, request_context=fixture.caller,
+            seeds=seeds, authorized_document_ids=authorized, approval_mode="manual",
+        )
+
+
+def failure_log(fixture):
+    return next(
+        details["extra"] for message, details in reversed(fixture.logs)
+        if message == "[ORCHESTRATION_PLANNER] The request could not be planned."
+    )
+
+
+def test_three_pinned_documents_allow_analyze_but_explicit_search_stays_required(planner_case):
+    fixture = planner_case
+    fixture.settings.update({
+        "enable_group_workspaces": True,
+        "chat_orchestration_enabled_capabilities": ["document_search", "document_analyze", "respond"],
+    })
+    ids = ["supplier", "terms", "governance"]
+    seeds = {"document_ids": ids}
+    context = fixture.runtime.context["build_planner_context"](
+        PROMPT, candidates=[{"document_id": document_id, "file_name": f"{document_id}.txt"} for document_id in ids],
+        seeds=seeds,
+    )
+    proposal = model_plan()
+    proposal["steps"].insert(0, {
+        "step_id": "review", "capability_id": "document_analyze", "title": "Analyze the selected documents",
+        "arguments": {"document_ids": ids, "analysis_prompt": PROMPT}, "depends_on": [],
+    })
+    proposal["steps"][-1]["depends_on"] = ["review"]
+    client = ScriptedClient(proposal)
+    kind, document = plan(fixture, client, seeds=seeds, context=context, authorized=ids)
+    assert kind == "plan"
+    assert {step["capability_id"] for step in document["steps"]} == {"document_analyze", "respond"}
+    assert set(fixture.runtime.schema["plan_document_ids"](document)) == set(ids)
+    assert document["approval"]["mode"] == "manual"
+    assert len(client.calls) == 1 and client.calls[0]["model"] == "gpt-4o"
+
+    with pytest.raises(fixture.runtime.planner["PlannerError"]):
+        plan(fixture, ScriptedClient(proposal), seeds={**seeds, "required_capabilities": ["document_search"]},
+             context=context, authorized=ids)
+    diagnostic = failure_log(fixture)
+    assert diagnostic["reason"] == "invalid_plan_or_missing_requirement"
+    assert diagnostic["stage"] == "selected_requirements"
+    assert diagnostic["conversation_id"] == "three-document-chat"
+    assert diagnostic["turn_id"] == "three-document-turn"
+
+
+@pytest.mark.parametrize("reply,reason", [
+    ("PRIVATE_UNPARSEABLE_PROVIDER_REPLY", "unparseable_plan"),
+    ({"kind": "something_else", "message": "PRIVATE_PROVIDER_REPLY"}, "invalid_planner_response_kind"),
+    ({"kind": "plan", "steps": []}, "invalid_plan_work"),
+    ({"kind": "plan"}, "invalid_plan_work"),
+])
+def test_unusable_provider_output_is_not_a_successful_empty_plan(planner_case, reply, reason):
+    fixture = planner_case
+    client = ScriptedClient(reply)
+    with pytest.raises(fixture.runtime.planner["PlannerError"]) as failure:
+        plan(fixture, client)
+    assert failure_log(fixture)["reason"] == reason
+    assert len(client.calls) == 1
+    assert "PRIVATE" not in str(failure.value)
+    assert "PRIVATE" not in json.dumps(fixture.logs)
+
+
+@pytest.mark.parametrize("timeout", [False, True])
+def test_provider_errors_and_timeouts_keep_safe_type_and_request_identity(planner_case, timeout):
+    fixture = planner_case
+    request = httpx.Request("POST", "https://private.test/model?key=PRIVATE_PROVIDER_SECRET")
+    error = APITimeoutError(request=request) if timeout else APIError(
+        "PRIVATE_PROVIDER_SECRET", request=request, body={"error": "PRIVATE_PROVIDER_SECRET"},
+    )
+    client = ScriptedClient(error)
+    with pytest.raises(fixture.runtime.planner["PlannerError"]) as failure:
+        plan(fixture, client)
+    diagnostic = failure_log(fixture)
+    assert diagnostic["stage"] == "model_request"
+    assert diagnostic["error_type"] == type(error).__name__
+    assert diagnostic["reason"] == "model_request_failed"
+    assert len(client.calls) == 1
+    assert "PRIVATE" not in str(failure.value)
+    assert "PRIVATE" not in json.dumps(fixture.logs)
+    assert "private.test" not in json.dumps(fixture.logs)
+
+
+@pytest.mark.parametrize("finish,content,reason", [
+    ("length", '{"kind":"plan"}', "incomplete_completion"),
+    ("content_filter", "", "model_refusal"),
+    ("stop", "", "empty_completion"),
+])
+def test_incomplete_refused_and_missing_completions_are_identifiable(planner_case, finish, content, reason):
+    fixture = planner_case
+    create = lambda **kwargs: SimpleNamespace(choices=[SimpleNamespace(
+        finish_reason=finish, message=SimpleNamespace(content=content),
+    )])
+    client = SimpleNamespace(chat=SimpleNamespace(completions=SimpleNamespace(create=create)))
+    with pytest.raises(fixture.runtime.planner["PlannerError"]):
+        plan(fixture, client)
+    diagnostic = failure_log(fixture)
+    assert diagnostic["response_failure"] == reason
+    assert diagnostic["error_type"] == "PlannerResponseError"
diff --git a/functional_tests/test_v2_artifact_download_cors.py b/functional_tests/test_v2_artifact_download_cors.py
new file mode 100644
index 000000000..c5b986e8f
--- /dev/null
+++ b/functional_tests/test_v2_artifact_download_cors.py
@@ -0,0 +1,60 @@
+# test_v2_artifact_download_cors.py
+"""
+Functional regression for separately hosted V2 artifact attachment headers.
+Version: 0.261.113
+Implemented in: 0.261.113
+
+The production response hook must expose Content-Disposition to the exact
+configured frontend origin without granting other origins credentialed access.
+"""
+
+import ast
+from pathlib import Path
+
+import pytest
+from flask import Flask, Response, request
+
+from test_support.app_stubs import stubbed_config
+
+
+TRUSTED_ORIGIN = "https://v2.example.test"
+APP_FILE = Path(__file__).resolve().parents[1] / "application" / "single_app" / "app.py"
+
+
+@pytest.fixture
+def cors_client():
+    tree = ast.parse(APP_FILE.read_text(encoding="utf-8"))
+    hook = next(node for node in tree.body if isinstance(node, ast.FunctionDef) and node.name == "add_security_headers")
+    hook.decorator_list = []
+    namespace = {"request": request}
+    exec(compile(ast.Module(body=[hook], type_ignores=[]), str(APP_FILE), "exec"), namespace)
+    app = Flask(__name__)
+    app.after_request(namespace["add_security_headers"])
+    app.add_url_rule("/api/chat_artifacts/download", view_func=lambda: Response(
+        b"finding,source\nSole supplier,Supplier\n", content_type="text/csv",
+        headers={"Content-Disposition": 'attachment; filename="findings.csv"'},
+    ))
+    with stubbed_config(
+        SECURITY_HEADERS={}, ENABLE_STRICT_TRANSPORT_SECURITY=False, HSTS_MAX_AGE=31536000,
+        V2_UI_ALLOWED_ORIGINS={TRUSTED_ORIGIN},
+    ):
+        yield app.test_client()
+
+
+def test_allowed_split_origin_can_read_the_attachment_header(cors_client):
+    response = cors_client.get("/api/chat_artifacts/download", headers={"Origin": TRUSTED_ORIGIN})
+    assert response.status_code == 200
+    assert response.headers["Access-Control-Allow-Origin"] == TRUSTED_ORIGIN
+    assert response.headers["Access-Control-Allow-Credentials"] == "true"
+    exposed = {header.strip().lower() for header in response.headers["Access-Control-Expose-Headers"].split(",")}
+    assert "content-disposition" in exposed
+    assert "Origin" in response.headers["Vary"]
+    assert response.headers["Content-Disposition"].startswith("attachment;")
+
+
+@pytest.mark.parametrize("origin", [None, "https://untrusted.example.test", TRUSTED_ORIGIN + ".untrusted.test"])
+def test_other_origins_do_not_gain_credentialed_attachment_access(cors_client, origin):
+    response = cors_client.get("/api/chat_artifacts/download", headers={"Origin": origin} if origin else {})
+    assert "Access-Control-Allow-Origin" not in response.headers
+    assert "Access-Control-Allow-Credentials" not in response.headers
+    assert "Access-Control-Expose-Headers" not in response.headers
diff --git a/ui_tests/fixtures/orchestration/harness_entry.tsx b/ui_tests/fixtures/orchestration/harness_entry.tsx
index d62296134..5c115b9b2 100644
--- a/ui_tests/fixtures/orchestration/harness_entry.tsx
+++ b/ui_tests/fixtures/orchestration/harness_entry.tsx
@@ -35,6 +35,12 @@ import { Composer } from '../../../application/v2_ui/src/components/chat/Compose
 import { DocumentExplorer } from '../../../application/v2_ui/src/components/documents/DocumentExplorer';
 import { ParticipantsPanel } from '../../../application/v2_ui/src/components/chat/ParticipantsPanel';
 import { Toaster } from '../../../application/v2_ui/src/components/ui/Toaster';
+import { AppShell } from '../../../application/v2_ui/src/components/layout/AppShell';
+import { ChatPage } from '../../../application/v2_ui/src/pages/ChatPage';
+
+function ChatExperience() {
+    return <div style={{ height: '100dvh' }}><AppShell><ChatPage /></AppShell></div>;
+}
 
 function PlanEditorExperience() {
     const conversationId = chatStore.useChatStore((state) => state.activeConversationId);
@@ -101,6 +107,7 @@ type ComponentName =
     | 'MessageList'
     | 'Composer'
     | 'PromptExperience'
+    | 'ChatExperience'
     | 'ApprovalPreferenceWorkflow'
     | 'PlanEditorExperience'
     | 'OrchestrationPlanEditorHost'
@@ -118,6 +125,7 @@ const components: Record<ComponentName, (props: any) => ReactElement | null> = {
     MessageList,
     Composer,
     PromptExperience,
+    ChatExperience,
     ApprovalPreferenceWorkflow,
     PlanEditorExperience,
     OrchestrationPlanEditorHost,
diff --git a/ui_tests/test_chat_saved_analysis.py b/ui_tests/test_chat_saved_analysis.py
index 9b031de08..a6323f493 100644
--- a/ui_tests/test_chat_saved_analysis.py
+++ b/ui_tests/test_chat_saved_analysis.py
@@ -1,7 +1,7 @@
 # test_chat_saved_analysis.py
 """
 Saved Analyze findings, evidence, and explanation context in both chat interfaces.
-Version: 0.261.109
+Version: 0.261.113
 Implemented in: 0.261.109
 
 Runs the real classic message/stream modules and React MessageList/Composer/store.
@@ -19,7 +19,7 @@
 import sys
 from pathlib import Path
 from types import SimpleNamespace
-from urllib.parse import parse_qs, urlsplit
+from urllib.parse import parse_qs, quote, urlsplit
 
 import pytest
 from playwright.sync_api import expect
@@ -83,6 +83,9 @@ def __init__(self, backend, css):
         self.unsafe_values = False
         self.validation_status = None
         self.page_failures = 0
+        self.download_failure = None
+        self.download_filename = "saved-findings.csv"
+        self.long_names = False
 
     def stream(self, route, *, replay=False):
         body = route.request.post_data_json if route.request.post_data else {}
@@ -119,6 +122,8 @@ def records(self, route):
                     payload["records"][0]["source"]["file_name"] = "<script>unsafe()</script>.txt"
                 if payload.get("evidence"):
                     payload["evidence"][0]["quote"] = "<img src=x onerror=window.analysisXss=true>"
+            if self.long_names and payload.get("records"):
+                payload["records"][0]["source"]["file_name"] = "Supplier_very_long_document_name_" * 12 + ".txt"
         route.fulfill(status=response.status_code, json=payload)
 
     def handle(self, route):
@@ -210,6 +215,9 @@ def handle(self, route):
         if path in ("/api/get_conversations", "/api/conversations/feed"):
             route.fulfill(json={"conversations": [], "has_more": False, "next_cursor": None})
             return
+        if path == "/api/v2/orchestration/runs":
+            route.fulfill(json={"runs": []})
+            return
         if path in ("/api/documents", "/api/group_documents", "/api/public_workspace_documents"):
             route.fulfill(json={"documents": [], "total_count": 0})
             return
@@ -217,8 +225,14 @@ def handle(self, route):
             route.fulfill(json={"tags": []})
             return
         if path == "/api/chat_artifacts/download":
+            if self.download_failure is not None:
+                route.fulfill(status=self.download_failure, json={"error": "PRIVATE_STORAGE_DIAGNOSTIC"})
+                return
             route.fulfill(
-                headers={"Content-Disposition": 'attachment; filename="saved-findings.csv"'},
+                headers={"Content-Disposition": (
+                    'attachment; filename="saved-findings.csv"; '
+                    f"filename*=UTF-8''{quote(self.download_filename, safe='')}"
+                )},
                 content_type="text/csv", body="control,finding\nControl 0,Owner unassigned\n",
             )
             return
@@ -235,13 +249,13 @@ def analysis_ui(request, page, analysis_client, analysis_assets):
     page.on("pageerror", lambda error: errors.append(str(error)))
     page.set_viewport_size({"width": 1280, "height": 900})
 
-    def mount(*, history=True, orchestration=False):
+    def mount(*, history=True, orchestration=False, shell=False):
         if renderer == "v2":
             page.goto(f"{ORIGIN}/harness.html")
             page.add_style_tag(url="/assets/chat.css")
             page.wait_for_function("() => Boolean(window.OrchHarness)")
             page.evaluate(
-                """({conversationId, orchestration}) => {
+                """({conversationId, orchestration, shell}) => {
                     const H = window.OrchHarness;
                     H.reset();
                     H.stores.bootstrap.useBootstrapStore.setState({data: {
@@ -257,7 +271,9 @@ def mount(*, history=True, orchestration=False):
                         messages: [], streaming: false, streamError: null,
                         analysisResultContext: null, analysisContextChosen: false, analysisContextRevision: 0,
                     });
-                    H.mount('mount-a', 'PromptExperience');
+                    H.mount('mount-a', shell ? 'ChatExperience' : 'PromptExperience', {},
+                        {initialEntries: ['/chat']});
+                    if (!shell) H.mount('mount-b', 'Toaster');
                     const store = () => H.stores.chat.useChatStore.getState();
                     window.analysisUI = {
                         reload: () => store().reloadMessages(),
@@ -271,12 +287,13 @@ def mount(*, history=True, orchestration=False):
                         }),
                     };
                 }""",
-                {"conversationId": CONVERSATION, "orchestration": orchestration},
+                {"conversationId": CONVERSATION, "orchestration": orchestration, "shell": shell},
             )
         else:
             page.goto(f"{ORIGIN}/classic.html")
             page.add_style_tag(url="/static/css/bootstrap.min.css")
             page.add_script_tag(url="/static/js/bootstrap/bootstrap.bundle.min.js")
+            page.add_script_tag(url="/static/js/toast.js")
             page.add_script_tag(url="/static/js/chat/marked.min.js")
             page.add_script_tag(url="/static/js/chat/purify.min.js")
             page.evaluate(
@@ -288,6 +305,7 @@ def mount(*, history=True, orchestration=False):
                         documentActionCapabilities: {}};
                     window.scrollChatToBottom = () => {};
                     document.getElementById('test-root').innerHTML = `
+                        <div id="toast-container" class="toast-container position-fixed top-0 end-0 p-3"></div>
                         <div id="chat-messages-container"><div id="chatbox"></div></div>
                         <div class="chat-input-container"><div id="normal-input-container">
                             <textarea id="user-input" aria-label="Message"></textarea>
@@ -431,6 +449,75 @@ def test_completion_and_reconnect_keep_answer_and_select_followup(analysis_ui):
     assert len([item for item in ui.api.requests if item["path"].startswith("/api/chat/stream/reattach/")]) == 1
 
 
+@pytest.mark.parametrize("status", [200, 401, 403, 404, 409, 500, 503])
+def test_download_errors_stay_in_chat_and_can_be_retried(analysis_ui, status):
+    ui = analysis_ui
+    ui.api.download_failure = status
+    ui.mount()
+    original_url = ui.page.url
+    downloads = []
+    ui.page.on("download", lambda download: downloads.append(download))
+    ui.page.locator("summary").filter(has_text="Downloads").click()
+    download_button(ui).click()
+    expect(ui.page.get_by_text(
+        "The artifact could not be downloaded. Refresh the conversation and try again.", exact=True,
+    )).to_be_visible()
+    expect(download_button(ui)).to_be_enabled()
+    expect(ui.page.get_by_text(ANSWER, exact=True).first).to_be_visible()
+    assert ui.page.url == original_url and not downloads
+    assert "PRIVATE_STORAGE_DIAGNOSTIC" not in ui.page.locator("body").inner_text()
+    ui.api.download_failure = None
+    with ui.page.expect_download() as downloaded:
+        download_button(ui).click()
+    assert downloaded.value.suggested_filename == "saved-findings.csv"
+    assert Path(downloaded.value.path()).read_bytes() == b"control,finding\nControl 0,Owner unassigned\n"
+    assert ui.page.url == original_url
+
+
+@pytest.mark.parametrize("analysis_ui", ["v2"], indirect=True)
+@pytest.mark.parametrize("width", [390, 1280])
+def test_analysis_with_expanded_navigation_has_only_local_table_scrolling(analysis_ui, width):
+    ui = analysis_ui
+    ui.page.set_viewport_size({"width": width, "height": 844})
+    ui.api.long_names = True
+    ui.api.message["metadata"]["generated_analysis_artifacts"][0]["file_name"] = (
+        "Supplier_very_long_document_name_" * 12 + ".csv"
+    )
+    ui.mount(shell=True)
+    expect(ui.page.get_by_role("navigation", name="Primary")).to_be_visible()
+    expand = ui.page.get_by_role("button", name="Expand navigation", exact=True)
+    if expand.is_visible():
+        expand.click()
+    expect(ui.page.get_by_role("button", name="Collapse navigation", exact=True)).to_be_visible()
+    dimensions = ui.page.evaluate("({viewport: innerWidth, document: document.documentElement.scrollWidth})")
+    assert dimensions["document"] <= width + 1, dimensions
+    ui.page.get_by_role("button", name="Collapse navigation", exact=True).click()
+    result(ui).locator("summary").filter(has_text="Findings and limitations").click()
+    expect(result(ui)).to_contain_text("Showing 1–25 of 60 records")
+    result(ui).locator("summary").filter(has_text="Evidence for finding record-0").click()
+    expect(result(ui).get_by_role("blockquote")).to_be_visible()
+    ui.page.locator("summary").filter(has_text="Downloads").click()
+    button = download_button(ui)
+    button.scroll_into_view_if_needed()
+    expect(button).to_be_in_viewport()
+    box = button.bounding_box()
+    assert box and box["x"] >= 0 and box["x"] + box["width"] <= width + 1
+    assert ui.page.evaluate("document.documentElement.scrollWidth <= innerWidth + 1")
+    with ui.page.expect_download() as downloaded:
+        button.click()
+    assert Path(downloaded.value.path()).read_bytes() == b"control,finding\nControl 0,Owner unassigned\n"
+
+
+def test_download_prefers_the_server_utf8_filename(analysis_ui):
+    ui = analysis_ui
+    ui.api.download_filename = "R\u00e9sum\u00e9 findings.csv"
+    ui.mount()
+    ui.page.locator("summary").filter(has_text="Downloads").click()
+    with ui.page.expect_download() as downloaded:
+        download_button(ui).click()
+    assert downloaded.value.suggested_filename == ui.api.download_filename
+
+
 def test_saved_explanation_request_bypasses_sources_and_orchestration(analysis_ui):
     ui = analysis_ui
     ui.mount(orchestration=True)
diff --git a/ui_tests/test_v2_chat_context_selection.py b/ui_tests/test_v2_chat_context_selection.py
index fbf4b6a30..9f232f846 100644
--- a/ui_tests/test_v2_chat_context_selection.py
+++ b/ui_tests/test_v2_chat_context_selection.py
@@ -1,7 +1,7 @@
 # test_v2_chat_context_selection.py
 """
 Browser regressions for V2 context selection and explicitly chosen inline mentions.
-Version: 0.261.099
+Version: 0.261.113
 Implemented in: 0.261.094
 Shared editor and prompt dispatch regression coverage added in: 0.261.096
 
@@ -120,6 +120,7 @@ def handle(self, route: Route):
                             "plan_id": "context-plan",
                             "run_id": "context-run",
                             "turn_id": body["turn_id"],
+                            "conversation_id": body["conversation_id"],
                             "intent": {"summary": "Compare sources", "complexity": "simple"},
                             "steps": [
                                 {
@@ -394,6 +395,18 @@ def send_draft(page: Page, api: ContextApi, dispatch="chat"):
     return payload
 
 
+def test_pinned_documents_do_not_force_search_in_an_analyze_plan(context_page):
+    page, api = context_page
+    mount_workflow(page, orchestration=True)
+    pick_context(page, "Quarterly brief", "Budget notes")
+    page.get_by_role("textbox", name="Message", exact=True).fill(
+        "Use Analyze on the selected documents. Explain the main risks and provide CSV and Markdown."
+    )
+    payload = send_draft(page, api, dispatch="plan")
+    assert payload["selected_document_ids"] == ["personal-brief", "personal-budget"]
+    assert "document_search" not in payload["required_capabilities"]
+
+
 def expect_context_metadata(payload, *, documents=(), tags=(), group=False, public=False):
     assert sorted(payload["selected_document_ids"]) == sorted(documents)
     assert payload.get("tags", []) == list(tags)
diff --git a/ui_tests/test_v2_orchestration_elicitation.py b/ui_tests/test_v2_orchestration_elicitation.py
index 5258ee450..ac91d3ba3 100644
--- a/ui_tests/test_v2_orchestration_elicitation.py
+++ b/ui_tests/test_v2_orchestration_elicitation.py
@@ -1,7 +1,7 @@
 # test_v2_orchestration_elicitation.py
 """
 UI test for the V2 chat orchestration elicitation card: paged schema form and the MCP answer shape.
-Version: 0.261.096
+Version: 0.261.113
 Implemented in: 0.261.085
 Rich answers implemented in: 0.261.096
 
@@ -111,6 +111,7 @@ def _paged_schema():
                           plan_id: 'accepted-plan',
                           run_id: 'accepted-run',
                           turn_id: parsed.turn_id,
+                          conversation_id: parsed.conversation_id,
                           revision: 1,
                           intent: { summary: 'Use the supplied answer', complexity: 'simple' },
                           steps: [{ step_id: 'respond', capability_id: 'respond', title: 'Answer', arguments: {} }],
diff --git a/ui_tests/test_v2_orchestration_plan_editor.py b/ui_tests/test_v2_orchestration_plan_editor.py
index d01a56bfe..a87143802 100644
--- a/ui_tests/test_v2_orchestration_plan_editor.py
+++ b/ui_tests/test_v2_orchestration_plan_editor.py
@@ -1,7 +1,7 @@
 # test_v2_orchestration_plan_editor.py
 """
 Focused real-component browser tests for conversational orchestration plan editing.
-Version: 0.261.102
+Version: 0.261.113
 Implemented in: 0.261.102
 
 Only HTTP boundaries are mocked. The real store, shared SSE reader, controller,
@@ -26,7 +26,7 @@
 from urllib.parse import parse_qs, unquote, urlsplit
 
 import pytest
-from playwright.sync_api import expect, sync_playwright
+from playwright.sync_api import expect
 
 REPO_ROOT = Path(__file__).resolve().parents[1]
 FIXTURES = REPO_ROOT / "ui_tests" / "fixtures"
@@ -383,11 +383,10 @@ def editor_assets():
 
 
 @pytest.fixture(scope="module")
-def editor_browser(connect_options):
-    with sync_playwright() as playwright:
-        browser = playwright.chromium.connect(**connect_options) if connect_options else playwright.chromium.launch()
-        yield browser
-        browser.close()
+def editor_browser(playwright, connect_options):
+    browser = playwright.chromium.connect(**connect_options) if connect_options else playwright.chromium.launch()
+    yield browser
+    browser.close()
 
 
 @pytest.fixture
diff --git a/ui_tests/test_v2_orchestration_plan_editor_backend.py b/ui_tests/test_v2_orchestration_plan_editor_backend.py
index 88b63d0fe..9e626a0ca 100644
--- a/ui_tests/test_v2_orchestration_plan_editor_backend.py
+++ b/ui_tests/test_v2_orchestration_plan_editor_backend.py
@@ -1,7 +1,7 @@
 # test_v2_orchestration_plan_editor_backend.py
 """
 Browser-to-Flask regression for editing and running an orchestration plan.
-Version: 0.261.104
+Version: 0.261.113
 Implemented in: 0.261.102
 Selected model continuity through editing and execution: 0.261.103
 
@@ -145,6 +145,9 @@ def forward(route):
 def test_real_editor_add_remove_question_restore_and_run(integrated_editor):
     page, backend, requests, original = integrated_editor
     initial_message_count = len(backend.messages.items)
+    initial_chat_count = sum(
+        message.get('role') in {'user', 'assistant'} for message in backend.messages.items.values()
+    )
     dialog = editor_tests.open_editor(page)
     expect(dialog.get_by_role('button', name='Run saved revision')).to_be_enabled()
     held = backend.runs.read_item(original['run_id'], 'conv1')
@@ -206,7 +209,10 @@ def test_real_editor_add_remove_question_restore_and_run(integrated_editor):
     assert task in json.dumps(backend.model.calls[-1]['messages'])
     saved = backend.runs.read_item(current['plan']['run_id'], 'conv1')
     assert saved['status'] == 'completed'
-    assert len(backend.messages.items) == initial_message_count + 1
+    # Saved payload sections share this container but are not extra conversation messages.
+    assert sum(
+        message.get('role') in {'user', 'assistant'} for message in backend.messages.items.values()
+    ) == initial_chat_count + 1
     if hasattr(backend, 'model_clients'):
         assert saved['seeds']['model'] == backend_tests.TERRA_SELECTION
         assert all(call['model'] == 'gpt-5.6-terra' for call in backend.edit_calls)
diff --git a/ui_tests/test_v2_orchestration_planning_retry.py b/ui_tests/test_v2_orchestration_planning_retry.py
new file mode 100644
index 000000000..d9f04eb54
--- /dev/null
+++ b/ui_tests/test_v2_orchestration_planning_retry.py
@@ -0,0 +1,423 @@
+# test_v2_orchestration_planning_retry.py
+"""
+Browser regressions for failed, unpersisted orchestration planning turns.
+Version: 0.261.113
+Implemented in: 0.261.113
+
+The production controller, stores, SSE reader, message actions, and composer run
+with production CSS. Only HTTP responses are deterministic. No live model,
+deployment, source permission, or workspace content is changed.
+"""
+
+import copy
+import json
+from urllib.parse import urlsplit
+
+import pytest
+from playwright.sync_api import expect
+
+import test_v2_orchestration_plan_editor as editor_tests
+from test_v2_orchestration_plan_editor import (  # noqa: F401
+    connect_options,
+    editor_assets,
+    editor_browser,
+)
+
+
+pytestmark = pytest.mark.ui
+CONVERSATION = "planning-retry-chat"
+PLAN = "/api/v2/orchestration/plan"
+PROMPT = (
+    "Use Analyze on the three selected documents. Explain the main risks in these "
+    "documents. Include source references and a concise table. Do not invent scores. "
+    "Also provide Markdown and CSV outputs."
+)
+FAILURE = "The request could not be planned. Please retry."
+SEEDS = {
+    "selected_document_ids": ["supplier", "terms", "governance"],
+    "context_documents": [
+        {"document_id": name, "file_name": f"{name}.txt"}
+        for name in ("supplier", "terms", "governance")
+    ],
+    "doc_scope": "group",
+    "active_group_id": "isolated-analysis-group",
+    "model_deployment": "gpt-4o",
+    "model_endpoint_id": "original-model-endpoint",
+    "required_capabilities": [],
+    "prompt_info": {"id": "risk-prompt", "name": "Risk review", "content": PROMPT},
+}
+
+
+class PlanningApi:
+    def __init__(self, assets):
+        self.assets = assets
+        self.mode = "failure"
+        self.requests = []
+        self.pending = []
+        self.errors = []
+        self.messages = []
+        self.conversations = []
+
+    def answer(self, route, body, mode):
+        if mode == "http":
+            route.fulfill(status=503, json={"error": "Planning is temporarily unavailable."})
+            return
+        plan = editor_tests.make_plan(body["conversation_id"], body["turn_id"])
+        events = {
+            "failure": {"error": FAILURE, "done": True},
+            "missing": {"type": "orchestration_plan", "done": True},
+            "malformed": {"type": "orchestration_plan", "plan": "not a plan", "done": True},
+            "plan": {"type": "orchestration_plan", "plan": plan, "done": True},
+        }
+        event = events.get(mode, {"type": "thought", "content": "Planning the review."})
+        route.fulfill(content_type="text/event-stream", body=f"data: {json.dumps(event)}\n\n")
+
+    def handle(self, route):
+        request = route.request
+        path = urlsplit(request.url).path
+        if request.method == "GET" and path in self.assets:
+            route.fulfill(path=str(self.assets[path]))
+            return
+        if path == "/favicon.ico":
+            route.fulfill(status=204)
+            return
+        body = request.post_data_json if request.post_data else None
+        self.requests.append({"path": path, "method": request.method, "body": copy.deepcopy(body)})
+        if path == PLAN:
+            if self.mode == "held":
+                self.pending.append((route, body))
+            else:
+                self.answer(route, body, self.mode)
+            return
+        if path.startswith("/api/message/") and path.endswith("/retry"):
+            if "pending-user-" in path:
+                route.fulfill(status=404, json={"error": "Message not found."})
+            else:
+                route.fulfill(json={"chat_request": {
+                    "conversation_id": CONVERSATION, "message": "Ordinary persisted message",
+                }})
+            return
+        if path == "/api/chat/stream":
+            self.messages.append({
+                "id": "ordinary-answer", "conversation_id": CONVERSATION,
+                "role": "assistant", "content": "Ordinary retry answer.",
+            })
+            event = {
+                "done": True, "conversation_id": CONVERSATION,
+                "message_id": "ordinary-answer", "full_content": "Ordinary retry answer.",
+            }
+            route.fulfill(content_type="text/event-stream", body=f"data: {json.dumps(event)}\n\n")
+            return
+        if path == "/api/get_messages":
+            route.fulfill(json={"messages": self.messages})
+            return
+        if path in ("/api/get_conversations", "/api/conversations/feed"):
+            route.fulfill(json={"conversations": self.conversations, "has_more": False})
+            return
+        if path == "/api/user/settings":
+            route.fulfill(json={"settings": {}})
+            return
+        if path == "/api/v2/orchestration/runs":
+            route.fulfill(json={"runs": []})
+            return
+        if path == "/api/collaboration/file-approvals":
+            route.fulfill(json={"approvals": []})
+            return
+        if path == "/api/user/collaboration-suggestions":
+            route.fulfill(json={"results": []})
+            return
+        if path == f"/api/conversations/{CONVERSATION}/metadata":
+            route.fulfill(json={
+                "conversation_id": CONVERSATION, "title": "Three document review",
+                "used_documents": [
+                    {"document_id": name, "file_name": name * 80 + ".txt"}
+                    for name in ("Supplier", "Terms", "Governance")
+                ],
+            })
+            return
+        if request.method == "DELETE" and CONVERSATION in path:
+            route.fulfill(json={"success": True})
+            return
+        self.errors.append(f"{request.method} {path}")
+        route.fulfill(status=404, json={"error": "Unexpected test request."})
+
+    def calls(self, path):
+        return [request for request in self.requests if request["path"] == path]
+
+    def release(self, mode="plan"):
+        pending, self.pending = self.pending, []
+        for route, body in pending:
+            self.answer(route, body, mode)
+
+
+@pytest.fixture
+def planning_ui(editor_browser, editor_assets):
+    context = editor_browser.new_context(viewport={"width": 1280, "height": 900})
+    page = context.new_page()
+    api = PlanningApi(editor_assets)
+    page.route("**/*", api.handle)
+    page.on("pageerror", lambda error: api.errors.append(str(error)))
+    try:
+        mount(page, api)
+        yield page, api
+    finally:
+        api.release()
+        context.close()
+        assert not api.errors, api.errors
+
+
+def mount(page, api, messages=None):
+    page.goto(editor_tests.ORIGIN + editor_tests.HARNESS)
+    page.wait_for_function("() => Boolean(window.OrchHarness)")
+    for url in api.assets:
+        if url.endswith(".css"):
+            page.add_style_tag(url=editor_tests.ORIGIN + url)
+    page.evaluate(
+        """({conversation, messages}) => {
+            const H = window.OrchHarness;
+            H.reset();
+            H.stores.bootstrap.useBootstrapStore.setState({data: {
+                features: {enable_chat_orchestration: true},
+                settings: {}, user: {id: 'tester', display_name: 'Tester'},
+                catalogs: {models: [], agents: [], prompts: []},
+                scope: {groups: [], public_workspaces: []},
+                orchestration: {enabled: true, capabilities: [], default_approval_mode: 'manual'},
+            }});
+            H.stores.chat.useChatStore.setState({
+                activeConversationId: conversation, activeConversationKind: 'personal',
+                messages, messagesLoading: false, streaming: false, streamError: null,
+                streamingContent: '', thoughts: [],
+                conversations: [{id: conversation, title: 'Three document review'}],
+            });
+            H.mount('mount-a', 'PromptExperience');
+        }""",
+        {"conversation": CONVERSATION, "messages": messages or []},
+    )
+
+
+def start_failed_plan(page, api, seeds=None):
+    page.evaluate(
+        """(spec) => {
+            window.originalPlanningSeeds = spec.seeds;
+            void window.OrchHarness.controller.startOrchestrationPlan(spec);
+        }""",
+        {"conversationId": CONVERSATION, "message": PROMPT, "approvalMode": "manual",
+         "seeds": seeds if seeds is not None else SEEDS},
+    )
+    page.wait_for_function("() => Boolean(window.OrchHarness.stores.chat.useChatStore.getState().streamError)")
+    assert len(api.calls(PLAN)) == 1
+    return page.evaluate("window.OrchHarness.stores.chat.useChatStore.getState().messages[0]")
+
+
+@pytest.mark.parametrize("failure", ["failure", "http", "missing", "malformed", "truncated"])
+def test_failed_planning_retry_reuses_exact_context_without_a_second_bubble(planning_ui, failure):
+    page, api = planning_ui
+    api.mode = failure
+    original = start_failed_plan(page, api)
+    page.evaluate("""() => {
+        window.originalPlanningSeeds.selected_document_ids.push('unrelated-document');
+        window.originalPlanningSeeds.context_documents[0].file_name = 'changed.txt';
+        window.originalPlanningSeeds.model_deployment = 'different-model';
+    }""")
+    api.mode = "plan"
+    page.get_by_role("button", name="Retry", exact=True).click()
+    expect(page.get_by_role("button", name="Approve and run the plan").first).to_be_visible()
+    assert len(api.calls(PLAN)) == 2
+    assert api.calls(PLAN)[0]["body"] == api.calls(PLAN)[1]["body"]
+    state = page.evaluate("""() => {
+        const S = window.OrchHarness.stores.chat.useChatStore.getState();
+        return {messages: S.messages, error: S.streamError, streaming: S.streaming};
+    }""")
+    assert state["messages"] == [original]
+    assert state["error"] is None and not state["streaming"]
+    assert not any(request["path"].endswith("/retry") for request in api.requests)
+    assert not api.calls(editor_tests.RUN)
+
+
+def test_repeated_retry_clicks_share_one_request_and_stop_discards_late_plan(planning_ui):
+    page, api = planning_ui
+    original = start_failed_plan(page, api)
+    api.mode = "held"
+    with page.expect_request(lambda request: urlsplit(request.url).path == PLAN):
+        page.get_by_role("button", name="Retry", exact=True).click()
+    expect(page.get_by_role("button", name="Retry", exact=True)).to_be_disabled()
+    page.evaluate(
+        "(id) => window.OrchHarness.stores.chat.useChatStore.getState().retryMessage(id)", original["id"],
+    )
+    assert len(api.calls(PLAN)) == 2
+    page.evaluate("(id) => window.OrchHarness.controller.cancelOrchestration(id)", CONVERSATION)
+    page.wait_for_function("() => !window.OrchHarness.stores.chat.useChatStore.getState().streaming")
+    api.release()
+    assert page.evaluate("Object.keys(window.OrchHarness.stores.orchestration.useOrchestrationStore.getState().plans)") == []
+    assert page.evaluate("window.OrchHarness.stores.chat.useChatStore.getState().messages") == [original]
+    assert not api.calls(editor_tests.RUN)
+
+
+def test_failed_planning_retry_keeps_the_original_group_agent(planning_ui):
+    page, api = planning_ui
+    seeds = copy.deepcopy(SEEDS)
+    seeds.pop("model_deployment")
+    seeds.pop("model_endpoint_id")
+    seeds["agent_info"] = {"id": "group-agent", "name": "risk-reviewer", "is_group": True, "group_id": "original-group"}
+    start_failed_plan(page, api, seeds)
+    page.evaluate("window.originalPlanningSeeds.agent_info.group_id = 'different-group'")
+    api.mode = "plan"
+    page.get_by_role("button", name="Retry", exact=True).click()
+    expect(page.get_by_role("button", name="Approve and run the plan").first).to_be_visible()
+    assert api.calls(PLAN)[0]["body"] == api.calls(PLAN)[1]["body"]
+    assert api.calls(PLAN)[1]["body"]["agent_info"] == seeds["agent_info"]
+    assert "model_deployment" not in api.calls(PLAN)[1]["body"]
+
+
+def test_retry_does_not_replace_an_existing_plan_or_execute_it(planning_ui):
+    page, api = planning_ui
+    start_failed_plan(page, api)
+    api.mode = "plan"
+    page.get_by_role("button", name="Retry", exact=True).click()
+    expect(page.get_by_role("button", name="Approve and run the plan").first).to_be_visible()
+    page.get_by_role("button", name="Retry", exact=True).click()
+    expect(page.get_by_text("This request already has a plan.", exact=False)).to_be_visible()
+    assert len(api.calls(PLAN)) == 2
+    assert not api.calls(editor_tests.RUN)
+    assert not any(request["path"].endswith("/retry") for request in api.requests)
+
+
+@pytest.mark.parametrize("action", ["navigate", "delete"])
+def test_late_retry_does_not_write_into_a_new_or_deleted_conversation(planning_ui, action):
+    page, api = planning_ui
+    start_failed_plan(page, api)
+    api.mode = "held"
+    with page.expect_request(lambda request: urlsplit(request.url).path == PLAN):
+        page.get_by_role("button", name="Retry", exact=True).click()
+    page.evaluate(
+        """({action, conversation}) => {
+            const S = window.OrchHarness.stores.chat.useChatStore.getState();
+            return action === 'delete' ? S.removeConversation(conversation) : S.startNewConversation();
+        }""",
+        {"action": action, "conversation": CONVERSATION},
+    )
+    api.release()
+    page.wait_for_function("() => !window.OrchHarness.controller.hasActiveOrchestration('planning-retry-chat')")
+    state = page.evaluate("""() => {
+        const H = window.OrchHarness;
+        const S = H.stores.chat.useChatStore.getState();
+        return {id: S.activeConversationId, messages: S.messages, error: S.streamError,
+            plans: H.stores.orchestration.useOrchestrationStore.getState().plans};
+    }""")
+    assert state["id"] is None and state["messages"] == [] and state["error"] is None
+    if action == "delete":
+        assert state["plans"] == {}
+    assert not api.calls(editor_tests.RUN)
+
+
+def test_lost_planning_context_requires_deliberate_recovery_not_message_retry(planning_ui):
+    page, api = planning_ui
+    original = start_failed_plan(page, api)
+    mount(page, api, [original])
+    api.requests.clear()
+    page.get_by_role("button", name="Retry", exact=True).click()
+    expect(page.get_by_text("Copy the original message to the composer", exact=False)).to_be_visible()
+    assert not api.calls(PLAN)
+    assert not any(request["path"].endswith("/retry") for request in api.requests)
+
+
+def test_ordinary_persisted_message_retry_still_uses_message_api(planning_ui):
+    page, api = planning_ui
+    api.messages = [{
+        "id": "persisted-user", "conversation_id": CONVERSATION,
+        "role": "user", "content": "Ordinary persisted message",
+    }]
+    mount(page, api, api.messages)
+    page.get_by_role("button", name="Retry", exact=True).click()
+    expect(page.get_by_text("Ordinary retry answer.", exact=True)).to_be_visible()
+    assert len(api.calls("/api/message/persisted-user/retry")) == 1
+    assert not api.calls(PLAN)
+
+
+@pytest.mark.parametrize("width", [390, 1280])
+def test_analysis_shell_responsive_navigation_does_not_widen_the_page(planning_ui, width):
+    page, api = planning_ui
+    page.set_viewport_size({"width": width, "height": 844})
+    page.evaluate(
+        """(conversation) => {
+            const H = window.OrchHarness;
+            H.stores.chat.useChatStore.setState({messages: [{
+                id: 'analysis-layout', conversation_id: conversation, role: 'assistant',
+                content: 'Northstar is the sole supplier. Maya Chen owns quarterly reviews.\\n\\n'
+                    + '| Source | Finding |\\n| --- | --- |\\n'
+                    + '| Supplier | No qualified alternative |\\n'
+                    + '| Terms | USD 10,000 convenience termination fee; dates unstated |',
+                metadata: {generated_analysis_artifacts: [{
+                    artifact_message_id: 'artifact-layout', conversation_id: conversation,
+                    capability: 'analyze', storage_scope: 'chat', output_format: 'csv',
+                    file_name: 'Supplier_very_long_name_'.repeat(18) + '.csv',
+                    preview_rows: [{source: 'Supplier', finding: 'No qualified alternative'}],
+                }]},
+            }]});
+            H.unmount('mount-a');
+            H.mount('mount-a', 'ChatExperience', {}, {initialEntries: ['/chat']});
+        }""",
+        CONVERSATION,
+    )
+    expect(page.get_by_role("navigation", name="Primary")).to_be_visible()
+    expand = page.get_by_role("button", name="Expand navigation", exact=True)
+    if expand.is_visible():
+        expand.click()
+    expect(page.get_by_role("button", name="Collapse navigation", exact=True)).to_be_visible()
+    dimensions = page.evaluate("({viewport: innerWidth, document: document.documentElement.scrollWidth})")
+    assert dimensions["document"] <= width + 1, dimensions
+    page.get_by_role("button", name="Collapse navigation", exact=True).click()
+    button = page.get_by_role("button", name="Download CSV", exact=True)
+    button.scroll_into_view_if_needed()
+    box = button.bounding_box()
+    assert box and box["x"] >= 0 and box["x"] + box["width"] <= width + 1
+    assert page.evaluate("document.documentElement.scrollWidth <= innerWidth + 1")
+    page.get_by_role("button", name="Open used documents", exact=True).click()
+    expect(page.get_by_role("complementary", name="Conversation details")).to_be_visible()
+    expect(page.get_by_role("button", name="Close panel", exact=True)).to_be_in_viewport()
+    assert page.evaluate("document.documentElement.scrollWidth <= innerWidth + 1")
+    page.get_by_role("button", name="Close panel", exact=True).click()
+    if width == 390:
+        expand = page.get_by_role("button", name="Expand navigation", exact=True)
+        expand.focus()
+        expand.press("Enter")
+        expect(page.get_by_role("button", name="Collapse navigation", exact=True)).to_be_focused()
+        assert page.evaluate("document.querySelector('nav[aria-label=\"Primary\"]').parentElement.querySelector('main').inert")
+        page.keyboard.press("Escape")
+        expect(expand).to_be_focused()
+        assert not page.evaluate("document.querySelector('nav[aria-label=\"Primary\"]').parentElement.querySelector('main').inert")
+        expand.click()
+        page.get_by_role("button", name="Close navigation", exact=True).click(position={"x": width - 10, "y": 100})
+        expect(expand).to_be_visible()
+        assert not [
+            call for call in api.calls("/api/user/settings")
+            if call["method"] != "GET" and "v2RailCollapsed" in json.dumps(call["body"])
+        ]
+        page.set_viewport_size({"width": 1280, "height": 844})
+        expect(page.get_by_role("button", name="Collapse navigation", exact=True)).to_be_visible()
+
+
+def test_mobile_share_dialog_does_not_remain_inside_inert_chat(planning_ui):
+    page, api = planning_ui
+    page.set_viewport_size({"width": 390, "height": 844})
+    api.conversations = [{"id": CONVERSATION, "title": "Shared review", "user_id": "tester", "chat_type": "personal_single_user"}]
+    page.evaluate("""(conversations) => {
+        const H = window.OrchHarness;
+        H.stores.bootstrap.useBootstrapStore.setState(state => ({data: {
+            ...state.data, features: {...state.data.features, enable_collaborative_conversations: true},
+        }}));
+        H.stores.chat.useChatStore.setState({conversations});
+        H.unmount('mount-a');
+        H.mount('mount-a', 'ChatExperience', {}, {initialEntries: ['/chat']});
+    }""", api.conversations)
+    page.get_by_role("button", name="Expand navigation", exact=True).click()
+    page.get_by_role("button", name="Actions for Shared review", exact=True).click()
+    page.get_by_role("button", name="Share", exact=True).click()
+    panel = page.get_by_role("dialog", name="Conversation participants")
+    expect(panel).to_be_visible()
+    expect(page.get_by_role("button", name="Expand navigation", exact=True)).to_be_visible()
+    search = panel.get_by_role("searchbox", name="Search for people to add")
+    search.focus()
+    expect(search).to_be_focused()
+    panel.get_by_role("button", name="Close participants", exact=True).click()
+    expect(panel).not_to_be_visible()