[ufna]

This PR brings integrate/design-polish into main through the frozen snapshot integrate/to-main-9, design-polish at 0297828. It follows to-main-8 (#749). Main e153d1e is already merged into the branch (#759).

What lands

• Accounts (owner request, Accounts: usage in list rows, duplicate-profile tags and Machines rows #769):
  • each list row shows usage per window, with the time to reset from 90%;
  • an id tag tells apart two profiles of one account on the same machine;
  • the Machines card becomes rows with state and a Default badge or a separate Make default button.
• Russian interface (zerus-fck5): the session list and catalog coverage test (Russian session list chrome and a catalog coverage test (fck5) #761), Activity (Russian Activity chrome (fck5) #762), the composer (Russian composer chrome (fck5) #771) and the session dialogs, including Saved drafts (Russian session dialogs chrome (fck5) #772).
• macOS: reopen Zerus from the Dock after closing its window (fix(macos): reopen Zerus from the Dock after closing its window #760).
• Projects:
  • lazy Swarm conflict review and confirmation (Add lazy Swarm conflict review and confirmation #757);
  • the cleanup reminder count in the worktree pane (Show cleanup reminder counts in the Projects worktree pane #766);
  • one-time Qt Windows folder imports prepared in Layout (Prepare one-time Qt Windows folder imports in Layout #763).
• CLI: session-action-status reads an original lifecycle receipt without replay, guarded by --expect-machine and a remote capability probe (cli: inspect original lifecycle receipts without replay #767).
• Migration evidence: Next clone checkpoint bytes are retained, and credential-bearing URLs refuse the family (Preserve Next clone checkpoint bytes in migration evidence #768).
• Linux notifications (G4): update-first negative collision writes, a pure model (Model update-first negative notification collision writes #765).
• Desktop producer (G1, dormant):
  • canonical producer sessions under one configuration slot (Retain canonical producer sessions under one configuration slot #764);
  • a durable negative prepared/abort-requested fence in schema 9 (Persist original prepared producer fences across service loss #770).

Pinned pre-merge reviews at the exact merged heads covered #757, #763, #764, #765, #766, #767, #768 and #770. #760 was reviewed post-merge. #769, #771 and #772 are my own UI changes, with private-launch proof in docs/validation/.

Local gate

The full pre-cut gate ran at 0297828, with logs hashed.

• Passed:
  • all 18 lockfiles --locked;
  • check-source, separators and privacy;
  • the client-scripts, publication and ci-security suites;
  • gitleaks history and tree;
  • root clippy and tests (1458 passed);
  • core fmt and clippy;
  • Tauri clippy and tests with media;
  • Windows cross-clippy for root, core and Tauri;
  • npm check, tests, build and bundle budget;
  • the worktree lifecycle suite (private PID namespace);
  • licences.
• Known non-CI artefacts:
  • root and Tauri rustfmt drift (CI does not format-check those crates);
  • the terminal_launch descriptor test under the gate's deliberately symlinked TMPDIR. The other 64 core test binaries pass.

🤖 Generated with Claude Code