feat: full plan execution - CI/CD, critical fixes, UX polish, secondary/advanced features, E2E + docs

Phase 0 (CI/CD): fix root typecheck to cover api+worker+web; reconcile migration
story into idempotent db:migrate (db:sync + db:triggers); add Gitea Actions
quality/deploy/smoke workflow; rewrite README/AGENTS/DEPLOY docs; add
requireWorkspaceAccess + recordActivityForEntity conventions.

Phase 1 (critical fixes): calendar delete + drag/resize DnD; canvas card CRUD +
bulk save + debounced autosave; logout route; graph edge workspaceId derivation;
real analytics endpoints (drop Math.random); task board droppable columns +
reorder persistence; Tiptap notes editor with sanitized HTML rendering; remove
insecure passkey auth; domain/owner scoping (IDOR) on all by-ID routes + search/
export/realtime scoping; command palette routing + agent mention fetch; agent
activity SSE handler; graph fly-to with tracked positions.

Phase 2 (UX polish): login on design system; Sonner toasts app-wide; shared
Loading/Empty/Error state components; working density/sidebarPos/reduce-motion
settings; Inter typography; consolidated status-colors lib; unified detail
routes; dashboard sort/realtime/responsive fixes; mobile responsive; a11y
(radiogroups, sanitized snippets, badge labels).

Phase 3 (features): daily notes timezone fix + delete + autosave + mood/energy
create; active-domain store + topbar picker; graph domain picker + navigable
entity links; tag assign/remove UI + server-side tag filter; real CSV export +
import validation; custom fields on tasks.

Phase 4 (advanced): migrate job worker into apps/worker (webhook delivery with
HMAC, recurring spawn, ai_dispatch disabled); webhook queue helper + entity
event enqueuing + test endpoint fix; recurring scheduledJobs pipeline; agents
CRUD + permission editing + activity filters; real notifications feed; MCP
polish (validation, error codes, domain scoping, dead sql leftover).

Phase 5 (E2E + docs): rewrite Playwright suite for the Vite SPA (15 specs, new
auth helpers, chromium-only in CI); add ephemeral-Postgres e2e CI job; rewrite
docs/API.md for the real Hono API.

apps/web/src/routes/_app.tsx

@@ -1,3 +1,4 @@
+import { useEffect } from "react";
 import { createRoute, Outlet } from "@tanstack/react-router";
 import { Route as rootRoute } from "./__root";
 import { Sidebar } from "@/components/shell/sidebar";
@@ -9,6 +10,18 @@ import { useKeyboardShortcuts } from "@/hooks/use-keyboard-shortcuts";
 function AppLayout() {
   useKeyboardShortcuts();
 
+  // Apply persisted appearance preferences (density, reduced motion) right
+  // after the first paint. The settings page updates these live while open;
+  // this covers reloads where the settings page was never visited.
+  useEffect(() => {
+    const root = document.documentElement;
+    root.classList.remove("density-compact", "density-spacious");
+    const density = localStorage.getItem("density");
+    if (density === "compact") root.classList.add("density-compact");
+    if (density === "spacious") root.classList.add("density-spacious");
+    if (localStorage.getItem("reduced-motion") === "true") root.classList.add("reduce-motion");
+  }, []);
+
   return (
     <div className="flex min-h-screen">
       <Sidebar />
@@ -16,7 +29,7 @@ function AppLayout() {
         <Topbar />
         <main
           id="main-content"
-          className="flex-1 overflow-auto p-4 md:p-6"
+          className="flex-1 overflow-auto p-[calc(1rem*var(--density-scale))] md:p-[calc(1.5rem*var(--density-scale))]"
           tabIndex={-1}
         >
           <Outlet />