Support deep-linking into a view from the branded /app/ wrapper

Analytics (events/dwell/run-completion) + sidebar sign-in row

Account row: build it into the sidebar foot (Claude-style)

Auth prompts: docked right side-panel instead of centered overlay

Engine-ready ping for the /app cold-start boot screen

Retention 90→45 days + live auto-delete countdown in the saved hub

Session refresh: push rotated JWT into iframe (no reload, no "out of sync" loop)

Fix reported production bugs: stuck dropdowns, blocked SNP, session loop

Honest copy on session-out-of-sync modal

Fix: signed-in users no longer redirected to /signin on 402/403

Kill CRISPR reload loop + ship friendly anon modal

Fix CRISPR signin_required false-positive: trust backend, handle 403 in auth.js, persist sequence across iframe reload

Trial modal copy (password not magic-link) + session resume across signin bounce

Audit sweep: signin redirects, honest footer, runBtn defensive type, JWT refresh fix

Trial timer: 5-min anonymous window + in-engine sign-in modal