@aiquants/daily-report 0.47.1 → 0.49.0

package/CHANGELOG.md

@@ -2,6 +2,67 @@
 
 All notable changes to `@aiquants/daily-report` are documented here.
 
+## 0.49.0 (2026-10-21)
+
+### Breaking
+
+- **`DailyReportPage` の `sessionEpoch` は必須**: ホストが失効の後に同じ利用者で確かめたセッションの数 (0 以上の安全な整数)。欠けると描画時に
+  `TypeError`、ほかの値は `RangeError`。失効で読み直すホストは定数 (`0` など) を渡せば、これまでと同じに動く。
+- **`DailyReportErrorInfo` は `reason: "failed" | "refused"` を持ち、`operation` は `"liveUpdates"` も取る**: 403 (権限の断り) とライブ更新の
+  `forbidden` の終わりは `refused`、ほかは `failed`。`operation` を網羅して分けるホストは `"liveUpdates"` を足す。
+- **検索・絞り込み・印のフックと置き場の options から `onSessionExpired` を外した**: `useDailyReportSearch`・`useDailyReportSearchFacets`・
+  `useShownSearchMarksStore`・`createDailyReportSearchSession`・`createDailyReportSearchMarksStore` は、セッションの終わりを API の基点の
+  セッションの門へ知らせる (下)。公開の `useDailyReportSseConnection` は `onSessionEnded` と `onRefused` を必須で受ける。
+- **`DailyReportSearchFailure` に `refused` を足した** (403)。
+
+### Added
+
+- **セッションの終わりで読み直さずに止め、ホストが確かめたら続ける (WCAG 2.2.5 Re-authenticating)**: どの読み取り (ids の流れ・詳細・検索・
+  絞り込み・印) か書き込みが 401 で答えるか、SSE が `auth-required` で終わると、パッケージは API の基点ごとのセッションの門で通信を止め、
+  `config.onSessionExpired` を止めるたびに 1 回だけ呼ぶ (これまでは場所ごとに、1 回の失効で何度も呼びえた)。読み取りは中断し、SSE は閉じ、
+  ids の流れ・詳細・検索は新しい要求を出さず、書き込みは送らない (何も送らずに拒み、コメントの欄は下書きを残す)。下書き・開いた編集の形・
+  選択・検索・スクロールはメモリに残る。`sessionEpoch` が止めた時の値と違えば続ける: ids の流れは続きを読み (完走したことのある一覧は
+  読み直す)、SSE はカーソルから開き直し、待たせた詳細と絞り込みの候補を読み、検索と印を頼み直す。書き込みは送り直さない。続ける前に送った
+  要求の 401 は、その後のセッションを止めない。一度完走した一覧は、止めても本体を外さない (選択・検索・スクロールが残る)。
+- **ラベル `operationRefused` (関数) と `liveUpdatesRefused`**: 断られた書き込みと、断られたライブ更新の知らせの文言。固有のキーは 116
+  (文字列 92 → 93・関数 22 → 23) になる。ログのチャンネル `SessionGate` (クライアントのチャンネルは 5 つ)。
+
+### Fixed
+
+- **書き込みの 401 がセッションの終わりを知らせなかった**: 8 つの書き込みは 401 で汎用の「操作に失敗」を出すだけだった。いまは門を止めて
+  `onSessionExpired` を 1 回呼び、パッケージの誤りの知らせは出さない (ホストの知らせが伝える)。
+- **403 を失効として扱っていた**: ids の流れ・検索・絞り込み・印は 403 で `onSessionExpired` を呼び、詳細の置き場は 403 を失効の断りとして
+  扱っていた。403 は権限の断りで、サインインし直しても変わらない: 書き込みは `labels.operationRefused` の知らせ (`reason: "refused"`)、
+  検索と絞り込みは `refused`、詳細は断りを記録の誤りとして分け合い、印は付けず、ids の流れはやり直さずに `failed` で止まる。どれもホストの
+  再認証を求めない。
+- **SSE の `forbidden` が記録だけだった**: ライブ更新が止まったことを読み手が知れるよう、断りとして知らせの口へ出す
+  (`operation: "liveUpdates"`, `reason: "refused"`, `labels.liveUpdatesRefused`)。
+
+## 0.48.0 (2026-10-21)
+
+### Added
+
+- **一覧と詳細ペインの境界の取っ手は、クリックで決まった幅を順に切り替える (WCAG 2.5.7 Dragging Movements)**: `@aiquants/resize-panels` 2.2.0 の
+  `activationSizes` へ一覧のパネルの最小・既定・最大の幅 (160・360・520px) を渡すので、ドラッグの閾値に届かないクリックかタップが一覧の幅を次の止まり先へ
+  進める (最後の後は最初へ)。resize-panels のピアの下限は 2.2.0。
+- **ラベル `resizeHandleHint`**: 取っ手のツールチップ (`title`) の文言。これまでのツールチップは resize-panels の英語の既定の名前で、`locale: "ja"` でも
+  英語だった。固有のキーは 114 になる。
+
+### Changed
+
+- **ラベルのカタログのエンジンのキーは、組み込む `@aiquants/virtualscroll` のキーに従う**: スクロールバーの値を持つ要素を `role="scrollbar"` の
+  トラック 1 つにした `@aiquants/virtualscroll` の版は、つまみが名前を持たなくなったので、カタログから `verticalScrollThumb` /
+  `horizontalScrollThumb` を外した。日報のカタログはエンジンのキー (`VIRTUAL_SCROLL_LABEL_KEYS`) を値で再利用するので、その版の上では
+  `DAILY_REPORT_LABEL_KEYS` からも 2 キーが減り (エンジン 9。固有のキーは下の `resizeHandleHint` を足して 114)、`config.labels` にその 2 キーを渡すと未知のキーとして描画時に
+  `RangeError` になる。両ビューのバーはこれまでどおりポインター専用で支援技術から隠れ、隠れたバーの `role="scrollbar"` の要素が
+  `verticalScrollBar` の名前を持つ。README と設計仕様書は、エンジンのキーの件数を書き写さない形に改めた。
+
+### Tests
+
+- `report-views.scroll-bar-a11y.spec.tsx` と `virtual-scroll-stand-in.conformance.spec.tsx` は、本物のバーを包み (`data-aqvs-scrollbar`) と、その
+  中の `role="scrollbar"` の要素で引く (矢印は `role="scrollbar"` の要素の兄弟になった)。バーと矢印の押下に加えて、`role="scrollbar"` の要素の
+  押下も既定動作を取り消すことを確かめる。
+
 ## 0.47.1 (2026-10-16)
 
 版番号は 0.47.1 (patch) とする: 公開の名前を 1 つ足すだけで、振る舞いは変えない。

package/README.md

@@ -101,7 +101,7 @@ keyboard themselves; see [Keyboard, focus and selection](#keyboard-focus-and-sel
 own parts under `prefers-reduced-motion: reduce` (3.8.2;
 see [Selection and focus appearance](#selection-and-focus-appearance)); and both views re-record their scroll anchor from its `onScrollAdjust`
 notification and rely on its edge-keeping snap (3.9.0; see **Host selections and list changes** and [View height](#view-height-host-layout)). The
-label catalog reuses its 11 engine keys, the names of the scroll bar and its thumb among them (3.10.0; see
+label catalog reuses its engine keys (every label key `@aiquants/virtualscroll` exports), the name of the scroll bar among them (3.10.0; see
 [Localization](#localization-locale--labels)).
 `DailyReportRevealOptions`, the options of the test handle's `revealIndex`, is `@aiquants/virtualscroll`'s `scrollToIndex` options type, which takes
 `align: "nearest"` since 3.11.0, and DetailList rows stay at the tree's tops and heights after a batch of re-measurements whose deltas cancel only
@@ -660,11 +660,12 @@ its payload — with one strict parser each, after authentication and before any
   | `[DailyReportSseReader]` | `info` | the shared SSE reader's Redis errors |
   | `[DailyReportExternalSource]` | `info` | `transformJsonArray`'s malformed JSON columns of an external source |
 
-  The client has no host logger port: its four channels of the same list write to the console from `info` — `[DailyReportActionProvider]` (the action
+  The client has no host logger port: its five channels of the same list write to the console from `info` — `[DailyReportActionProvider]` (the action
   provider: a failed action, the queue of SSE messages about uncached reports, a cache reload), `[DailyReportDetailLoader]` (the detail loading: a
   stale update of a report's cache, a failed prefetch of a business date, a failed refetch that left the shown report in place),
   `[DailyReportIdsStream]` (the ids stream client: a revalidation that gave up, a rejected malformed line, which ends the attempt, a skipped line of
-  an unknown kind, a malformed stream anchor) and `[DailyReportSseConnection]` (the SSE connection hook).
+  an unknown kind, a malformed stream anchor), `[DailyReportSseConnection]` (the SSE connection hook) and `[DailyReportSessionGate]` (the session
+  gate: a pause because the viewer's session ended, and the resume).
   Every line, the server's and the client's, carries exactly one channel prefix: no message spells a `[DailyReport…]` prefix of its own.
 
   A 500 is one line: its message (`500 endpoint=<name> elapsed=<ms>ms name=<error name> code=<code or N/A> message=<message>`,
@@ -1741,8 +1742,8 @@ unexpected error, a request that is not the package's client (another origin's p
 
 | Server-side situation | Response | Client (`useDailyReportSseConnection`) |
 | --- | --- | --- |
-| Not authenticated | 200, `retry: 86400000` → `event: auth-required` (`Set-Cookie` forwarded) | terminated; calls `config.onSessionExpired()` once; never reconnects |
-| Authenticated but no internal user | 200, `retry: 86400000` → `event: forbidden` | terminated; no navigation (a reload cannot fix it); visible through `sseStatus` |
+| Not authenticated | 200, `retry: 86400000` → `event: auth-required` (`Set-Cookie` forwarded) | terminated; pauses the package (`config.onSessionExpired()` once) and reconnects from its cursor when `sessionEpoch` changes |
+| Authenticated but no internal user | 200, `retry: 86400000` → `event: forbidden` | terminated; no navigation (a reload cannot fix it); reported as a refusal through the error surface (`operation: "liveUpdates"`, `reason: "refused"`, `labels.liveUpdatesRefused`) and visible through `sseStatus` |
 | A request from another origin's page that the isolation refuses ([Request isolation](#request-isolation)) | 403 JSON before authentication (`Cache-Control: no-store`, the routes' security headers, no `Set-Cookie`), counted in the bounded refusal record | never met: the package's client connects from the page's own origin |
 | A React Router single-fetch data request (`<path>.data`, `GET` or `HEAD`) | 404 JSON before authentication (`{"error":{"message":"Not Found"}}`, `Cache-Control: no-store`, the routes' security headers, no `Set-Cookie`), with no subscription or timer and no line in the refusal record ([Request isolation](#request-isolation)) | never sent by the client: `EventSource` requests the route itself |
 | Unknown endpoint | 404 | treated as retryable; backoff up to 30 s |
@@ -2301,8 +2302,8 @@ The remainder does not go between a caption and its control: at q = 8 that gap w
   Each request is sent `cache: "no-cache"`: the browser revalidates its previous answer with the ETag (`If-None-Match`) and, on a 304, hands over its
   cached 200, so an unchanged answer's body is not sent again.
   A failed first load shows only the status line and is retried at the next opening; a failed reload keeps the previous candidates and shows the
-  failure in the status line. 401 and 403 call `onSessionExpired`; 404 shows `unavailable`, 429 `busy`, and anything else, a malformed answer
-  included, `failed`.
+  failure in the status line. A 401 pauses the package at the session's end (see [Client wiring](#client-wiring)) and loads the candidates again
+  when it resumes; a 403 shows `refused`, 404 `unavailable`, 429 `busy`, and anything else, a malformed answer included, `failed`.
   The cells render once the candidates are loaded. The author and customer options are sorted with `Intl.Collator(config.locale)` (values the
   collation ties are ordered by UTF-16 code units) and labelled with their value; the source-type options keep the server's order and are labelled
   with their badge label from `sourceTypeConfigs` (the source type itself without one).
@@ -2426,13 +2427,13 @@ While an answer shows, the List cards, the side pane and the DetailList rows mar
   A field is painted only when its marks were computed on the value drawn (the fingerprint): after a save or an SSE update the old ranges are not
   painted and the field asks once for fresh marks. An answer whose `wordsDigest` differs from the shown answer's words is dropped; a quiet re-query of
   the same search makes the marks stale and the mounted rows ask again;
-  401 and 403 call `onSessionExpired`; a 429 whose `Retry-After` is at most 60 s (one window of the server's rate bucket) is asked again once, after
+  a 401 pauses the package at the session's end (the marks are asked again when it resumes) and a 403 leaves the rows plain; a 429 whose `Retry-After` is at most 60 s (one window of the server's rate bucket) is asked again once, after
   that delay, for the reports still subscribed then (one whose subscribers left meanwhile asks again when it is subscribed again), and a 429 without a
   `Retry-After`, or with a longer one, sets no timer and leaves its reports plain for the answer's epoch (a delay of 2^31 ms or more would overflow
   the timer and ask again at once);
   any other failure of the request — a network failure, an abort, another status, a body that is not JSON — leaves those rows plain for as long as the
   shown answer stays the same and reports nothing.
-  Only the request's own failures are dropped: an error thrown by the host's `onSessionExpired`, by holding a 429's retry or by applying an answer and
+  Only the request's own failures are dropped: an error thrown by the session report (the host's `onSessionExpired`), by holding a 429's retry or by applying an answer and
   notifying the rows rejects the batch, and the scheduler reports it with `reportError` (the window's `error` event, where a host's error monitoring
   sees it) after it has freed the request's slot; a batch that rejects with its own abort's reason reports nothing.
   Disposing the store — a new search, or React hiding the screen inside an `<Activity>` — aborts its requests, cancels its retry timers and gives
@@ -2487,13 +2488,15 @@ export const clientLoader = createDailyReportClientLoader()   // Bootstraps the
 
 export default function Route() {
     const { user, userId } = useLoaderData<typeof clientLoader>()
+    const { sessionEpoch, showSignInNotice } = useYourReauthentication(user)   // Your notice, sign-in window and same-user check
     return (
         <YourAppLayout>
             <DailyReportPage
                 user={user}
                 userId={userId}
+                sessionEpoch={sessionEpoch}                 // Required: advance it when the same user has signed in again (the package resumes)
                 config={{
-                    onSessionExpired: () => navigate(0),    // Required: the host decides the navigation on session expiry
+                    onSessionExpired: showSignInNotice,     // Required: called once each time the package pauses at a session end
                     renderHeader: ({ title, annotation }) => <YourHeader title={title} annotation={annotation} />,
                     showDevControls: import.meta.env.DEV,   // Toggle SSE subscriptions, etc.
                     locale: "en",                           // UI chrome language: "en" (default) | "ja"
@@ -2519,10 +2522,20 @@ one definition of a draft (`draftLabelNames` in [DI ports](#di-ports)), so `conf
 unknown key.
 An optimistic report the viewer creates is a draft with no labels until the server's answer brings its labels (the draft label among them); an
 optimistic publish clears `isDraft` at once and keeps the labels until the answer, and a failed publish restores `isDraft`.
-The package never navigates by itself: when the session is gone — the SSE stream ends with `auth-required`, or the ids stream, a `search` request,
-the filters' candidates (`search-facets`) or the marks (`search-marks`) answer 401 / 403 — it
-calls `onSessionExpired()` exactly once per occurrence and stops. A typical host reloads the route (`navigate(0)`) so its own loader redirects to the
-login page.
+The package never navigates or reloads by itself. When the viewer's session ends — the SSE stream ends with `auth-required`, or the ids stream, a
+detail read, a `search` request, the filters' candidates (`search-facets`), the marks (`search-marks`) or a write answers 401 — it **pauses** its
+network activity and calls `onSessionExpired()` once per pause: in-flight reads are aborted, the SSE connection closes, the ids stream, the detail
+reads and the search requests stop, no new request starts, and a write is not sent at all (it rejects without touching the server or the view; a
+comment field keeps its draft). Everything the page holds in memory stays: comment drafts, an open edit form, the selection, the search and the scroll.
+The package resumes when the page's required `sessionEpoch` prop (a safe integer >= 0; a missing one throws a `TypeError` at render and any other
+value a `RangeError`) differs from the value it paused at: the ids stream continues, the SSE reconnects from its cursor, held detail reads and the
+filters' candidates load again, and the search and the marks are asked again. Nothing is sent again on the viewer's behalf. A request sent before a
+resume whose 401 arrives after it does not pause the session that followed. A 403 is a refusal of the viewer, never a session end: a write answered 403
+is reported through the error surface with `reason: "refused"` and `labels.operationRefused(operation)`, the live updates ending with `forbidden`
+are reported the same way (`operation: "liveUpdates"`, `labels.liveUpdatesRefused`), a search or the filters show `refused`, a detail read keeps the
+refusal as the record's error, the marks stay plain, and the ids stream fails without retrying.
+A host that re-authenticates without a reload shows its own notice from `onSessionExpired`, lets the viewer sign in again (in another window, say), checks
+that the same user signed in, and then advances `sessionEpoch`; a host that reloads instead passes a constant and navigates from `onSessionExpired`.
 `DailyReportConfigProvider` takes the same required `config`, and every component and hook of the package that reads the configuration needs it above:
 outside it `useDailyReportConfig` throws at render (`[daily-report] useDailyReportConfig must be used within a DailyReportConfigProvider`); no default
 configuration renders silently.
@@ -2554,16 +2567,18 @@ inside its TTL is not fetched. A refetch of a shown report that fails (the re-va
 leaves the report in place with no error and only logs a warning on `[DailyReportDetailLoader]`, so the next new reader re-validates again. A settled
 load error is not shared either: a reader that subscribes to a record holding an error — a row that mounts, an id that enters the input lead's band,
 the side pane — asks again, and the answer replaces the error. Only a new subscription asks again or re-validates (a re-render or a second
-subscription of the same listener does not, so a row that keeps showing a failure or an expired report never loops), and a refusal of the viewer's
-session (401 or 403, which cannot succeed before `onSessionExpired` has run) is shared like an answer: it becomes the record's error even over a
-shown report, and no new reader asks again or re-validates.
+subscription of the same listener does not, so a row that keeps showing a failure or an expired report never loops), and a refusal of this read to
+the viewer (403, which signing in again does not change) is shared like an answer: it becomes the record's error even over a shown report, and no new
+reader asks again or re-validates. A session end (401) is not an error: the record keeps what it shows, the package pauses (see
+[Client wiring](#client-wiring)), no load starts while it is paused, and the held reports are asked again when it resumes.
 The first load of a report that is not cached starts inside its first reader's subscription, with no task between the row's mount and its request,
 so a held arrow key's stream of keydowns cannot postpone it until the key is released; only the refetch of an expired cached report waits 120 ms, to
 absorb rows that only scroll past. Loads of reports of one business date share one request.
 
 Mutation failures (save / publish / delete / comment) are surfaced through an error seam: inject `config.onError(info: DailyReportErrorInfo)` to route
 them into your own toast/notification system, or omit it to use the package's built-in notice. Failures on a continuation that resolves after a
-no-reload user switch are suppressed.
+no-reload user switch are suppressed, and so is a write answered 401 (the package pauses at the session's end and the host's notice speaks) or refused
+while the package is paused (nothing was sent). A write answered 403 is a refusal (`reason: "refused"`), which trying again does not change.
 Deleting a report or a comment that the server no longer has (404) counts as done: the row or the comment stays removed and nothing is shown. Only the
 deleting intents, `delete` and `deleteComment`, read a 404 so (their callbacks must say what a 404 means, `onGone`, and no other intent's callbacks
 may, by type: `ActionCallbacks`); the 404 of any other intent rolls back and is reported.
@@ -2951,10 +2966,10 @@ the resize handle and the side pane lie outside the list.
   `enableArrowButtonTabStops: false`, `@aiquants/virtualscroll`'s one signal that the host scrolls by keyboard itself (3.10.0, its README "Scrollbar
   accessibility and the Tab order").
   The bar carries `aria-hidden="true"`, so assistive technology sees no `scrollbar` and no `slider` in either view, named or not; its arrow buttons
-  have `tabIndex=-1` and the bar and its thumb no `tabindex`, so the bar adds no Tab stop; and a press anywhere on the bar has its default prevented,
+  have `tabIndex=-1` and its `role="scrollbar"` element no `tabindex`, so the bar adds no Tab stop; and a press anywhere on the bar has its default prevented,
   so it moves no focus, neither onto a part of the bar nor away from the composite. Every pointer interaction still scrolls: the arrows on a press and
   while held, the track, the thumb and the tap-scroll circle.
-  The bar and its thumb still carry their names (the engine keys `verticalScrollBar` and `verticalScrollThumb`, below), which the hidden bar does not
+  The bar's `role="scrollbar"` element still carries its name (the engine key `verticalScrollBar`, below), which the hidden bar does not
   expose.
 - **Leaving the list** (`Ctrl+Home` / `Ctrl+End`, as in the WAI-ARIA feed pattern): focus moves to the last Tab stop before the list or the first one
   after it — where real `Shift+Tab` from the list's first stop and real `Tab` from its last stop go — and the browser scrolls it into view as it does
@@ -3333,8 +3348,9 @@ the resize handle and the side pane lie outside the list.
   The comment field is named by that heading (`aria-labelledby`; `labels.comments`), which renders whenever the form does, so the field has a name of
   its own in the DetailList row, the side pane and the mobile overlay; its placeholder (`labels.commentPlaceholder`) stays a hint, not its name.
   While a post is sent, the field keeps the draft, read-only, with the submit button disabled, and empties only when the post is accepted; a refused
-  post (401, 403, a 5xx) leaves the draft, its text and its caret untouched, so a viewer whose session ended sends it again after signing in
-  (the package's part of WCAG 2.2.5; keeping a draft across a navigation or a reload is the host's).
+  post (401, 403, a 5xx), and a post while the package is paused at a session end (never sent), leave the draft, its text and its caret untouched, so a
+  viewer whose session ended sends it again after signing in again, on the same page (WCAG 2.2.5, with the host's re-authentication; see
+  [Client wiring](#client-wiring)).
   A report of a source that takes no comments and has none shows no empty section, and deleting the last comment of such a report removes the section,
   so focus goes to the report's anchor above.
 - **Mobile detail overlay** (List, single-column layout): the platform's modal dialog, a `<dialog data-daily-report-mobile-overlay>` (implicit
@@ -3776,12 +3792,10 @@ luminance by 0.026 in the light theme, and a `shadow-md` brings the ring down to
   The centres of their 24 px circles are 12 px apart (the handle's on the panel boundary, the bar's 12 px before it), so the circles intersect and the
   spacing exception does not apply either. Both keep the specified frame — the 2G channel and the 8 px scroll bar of both views — and no wider
   construction has been decided yet.
-  The splitter also falls short of WCAG 2.5.7 (Dragging Movements, AA): the handle moves the boundary by dragging or by the arrow keys, and a keyboard
-  path does not satisfy 2.5.7, which asks that a single pointer can do it without dragging (a click or a tap). `@aiquants/resize-panels` 2.1.0 has no
-  such path on the handle: a press and release without movement does nothing.
-  The step belongs in the handle's own gesture model, which every consumer of the handle shares, so it is handed over to resize-panels as an issue (an
-  optional `activationSizes` prop that a click under the drag threshold steps through, to which the List will pass its panel's minimum, default and
-  maximum widths, 160, 360 and 520 px); until it ships, a pointer user who cannot drag keeps the List panel's width.
+  The splitter meets WCAG 2.5.7 (Dragging Movements, AA): besides dragging and the arrow keys, a click or a tap on the handle that stays under
+  `@aiquants/resize-panels`' drag threshold steps the List panel to its next preset width — the panel's minimum, default and maximum widths, 160, 360
+  and 520 px, in that order and back to the first after the last (the handle's `activationSizes`; the stops are clipped to what the pair of panels can
+  reach, and a stop where the border already is gets skipped). The handle's tooltip (`resizeHandleHint`) names all three ways.
   The side-pane panel is at least 200 px wide: the frame around its centred selection prompt — 2G = 16 (the pane sits G inside its panel), the card
   surface's insets 2 × 16 and the placeholder panel's insets 2 × 12, 72 in all — plus the prompt's longest phrase at the default 16 px root,
   「選択してください。」 (9 full-width glyphs of `text-sm`, 9 × 0.875 rem = 126 px), is 198, rounded up to the 4 px lattice.
@@ -3858,12 +3872,13 @@ luminance by 0.026 in the light theme, and a `shadow-md` brings the ring down to
   and the report headings tell where the viewer is), 2.4.9 (links name their purpose), 2.4.10 (sections carry headings), 2.4.12 and 2.4.13 (the focus
   is never obscured, and its outline is 2 px at 3:1), 3.1.3, 3.1.4 (abbreviated source badges, **External Source Badge Configuration**), 3.2.5 and
   3.3.6. Not met, by decision: 2.2.4 (Interruptions): live updates (SSE) apply as they arrive, with no pause, and
-  the scroll anchoring keeps the rows on screen in place. Not met at AA: 2.5.8 for the List's resize handle and the scroll bar beside it, and 2.5.7 for
-  the List's splitter (**Side pane** above): a path without dragging belongs to `@aiquants/resize-panels`, and larger hit areas for the handle and the
+  the scroll anchoring keeps the rows on screen in place. Not met at AA: 2.5.8 for the List's resize handle and the scroll bar beside it (**Side pane** above): larger hit areas for the handle and the
   bar wait for the same layout pass as 2.5.5. Not claimed yet: 2.5.5 (44 px targets), 1.4.8 (a line measure and the List preview's
   leading) and 3.3.5 (a help control for the search syntax), which need a layout pass, and 3.1.6 (readings of names), which needs readings from the
-  host's directory. 2.2.5 is met by the package for a refused comment post (**One comment section rule** above); keeping work across a
-  re-authentication elsewhere is the host's, as is 2.2.6 (telling users how long a session lasts). The floating tap-scroll circle hides while the view root carries `data-daily-report-keyboard-focus` (through the class both views pass in
+  host's directory. 2.2.5 (Re-authenticating) is met with the host: at a session end the package pauses without reloading and keeps every draft, the
+  open edit form, the selection, the search and the scroll in memory; the host lets the viewer sign in again without leaving the page and advances
+  `sessionEpoch`, and the package resumes and sends nothing again by itself ([Client wiring](#client-wiring)). 2.2.6 (Timeouts) is the host's: the
+  package keeps unsent work only in the open tab's memory until it is closed, and the host states how long a session lasts and what ends it. The floating tap-scroll circle hides while the view root carries `data-daily-report-keyboard-focus` (through the class both views pass in
   `VirtualScroll`'s tap-scroll circle options).
 - **Action buttons and icons**: the List card's star and read toggles, the star, read, edit and delete buttons of the DetailList header and the side
   pane, and the trash button of the viewer's comments share one 24 px round target that never shrinks, with a 16 px SVG icon centred in it (4 px on
@@ -4215,14 +4230,14 @@ locale**: English (`"en"`, the default) and Japanese (`"ja"`). Pick the language
 />
 ```
 
-- **One surface for all wording.** The catalog covers the 11 engine chrome keys of `@aiquants/virtualscroll` plus 113 own keys: field headings, the
+- **One surface for all wording.** The catalog covers the engine chrome keys of `@aiquants/virtualscroll` (every label key it exports) plus 116 own keys: field headings, the
   page title (`title`, passed to `renderHeader` and used as the accessible name of both lists), the lists' keyboard help, the row states (read, read and updated since, and
   starred, editing), the updated-since-read pill and the List card's position read to screen readers, tabs, buttons, placeholders, the `confirm()` text, stream badges, the search box, its filter row and the
   search's match indicator, the status screen and the page's status region and the mutation-failure message with its repeat count. The engine part of
-  each catalog is `@aiquants/virtualscroll`'s own catalog of the same locale, reused by value, so the scroll arrows, the names of the scroll bar and
-  its thumb, and the "No items" text always speak the same language as the rest.
+  each catalog is `@aiquants/virtualscroll`'s own catalog of the same locale, reused by value, so the scroll arrows, the name of the scroll bar and
+  the "No items" text always speak the same language as the rest.
 - **Forwarded to every embedded `VirtualScroll`.** Both the List and the DetailList pass `locale`
-  and the 11 engine keys of the resolved labels to their `VirtualScroll`. The engine label object keeps
+  and the engine keys of the resolved labels to their `VirtualScroll`. The engine label object keeps
   its identity while its values are unchanged, so rebuilding `config.labels` on every render does not
   re-render the memoized list subtree.
 - **Formatter keys.** Twenty-two keys take arguments and are functions: `totalCount(count)`,
@@ -4241,7 +4256,7 @@ locale**: English (`"en"`, the default) and Japanese (`"ja"`). Pick the language
   locale built once (the row positions and counts re-render on every stream publish); a host override receives
   the raw number and formats it itself.
 - **Fail-fast**: an unsupported `locale` (`"EN"`, `"ja-JP"`, `"fr"`, `""`, `null`, ...) throws a
-  `RangeError` at render. So do an unknown `labels` key (a key error that lists the 124 keys), a string
+  `RangeError` at render. So do an unknown `labels` key (a key error that lists every key of `DAILY_REPORT_LABEL_KEYS`), a string
   key whose value is not a string with non-whitespace content, and a formatter key whose value is not a
   function. An `undefined` value keeps the catalog value.
 - **`config` has a closed key set**: `apiBasePath`, `ssePath`, `locale`, `labels`,
@@ -4274,13 +4289,16 @@ locale**: English (`"en"`, the default) and Japanese (`"ja"`). Pick the language
 - **Not tied to `locale`**: `sourceTypeConfigs` (host data). Only the built-in default badge map used when `sourceTypeConfigs`
   is omitted takes its `Internal` label from `labels.sourceInternal`.
 - **Host notifications**: `config.onError` receives `DailyReportErrorInfo` with the stable
-  `operation` key and `message` = `labels.operationFailed(operation)` in the chosen locale.
+  `operation` key (an operation, or `"liveUpdates"` when the server refused the viewer the live updates), the `reason` (`"refused"` for a 403 or the
+  live updates' `forbidden` end, `"failed"` otherwise) and `message` = `labels.operationRefused(operation)`, `labels.liveUpdatesRefused` or
+  `labels.operationFailed(operation)` in the chosen locale. A session end (401) is never reported here: the package pauses and calls
+  `onSessionExpired` instead.
 - **`locale` is the only language axis.** This package has no BCP 47 `formatLocale` option: digit
   grouping follows `locale` (`en` → `"en-US"`, `ja` → `"ja-JP"`) and dates stay in ISO form. Packages
   that do format dates (for example `@aiquants/period-slider`) name that separate axis `formatLocale`.
 
-Exported API (`@aiquants/daily-report/client`): `DAILY_REPORT_LABEL_KEYS` (all 124 keys, the 11 engine keys
-first), `DAILY_REPORT_LABEL_CATALOGS` (the frozen catalogs), `resolveDailyReportLabels(locale, labels)`
+Exported API (`@aiquants/daily-report/client`): `DAILY_REPORT_LABEL_KEYS` (every key: the engine keys `@aiquants/virtualscroll` exports, in its order,
+first, then the 116 own keys), `DAILY_REPORT_LABEL_CATALOGS` (the frozen catalogs), `resolveDailyReportLabels(locale, labels)`
 (the effective frozen labels — the catalog object itself when `labels` is `undefined`), the resolved
 `locale` / `labels` on `useDailyReportConfig()`, and the types `DailyReportLocale` (= `VirtualScrollLocale`),
 `DailyReportLabels`, `DailyReportLabelOverrides` and `DailyReportOperation`.
@@ -4293,8 +4311,6 @@ first), `DAILY_REPORT_LABEL_CATALOGS` (the frozen catalogs), `resolveDailyReport
 | `scrollRight` | engine: horizontal arrow (not rendered by this package) | Scroll right | 右へスクロール |
 | `verticalScrollBar` | engine: name (`aria-label`) of the vertical ScrollBar (`role="scrollbar"`); both views hide their pointer-only bar from assistive technology, so it is not announced | Vertical | 縦方向 |
 | `horizontalScrollBar` | engine: name of the horizontal ScrollBar (not rendered by this package) | Horizontal | 横方向 |
-| `verticalScrollThumb` | engine: name (`aria-label`) of the vertical ScrollBar's thumb (`role="slider"`), inside the hidden bar | Vertical scroll position | 縦スクロール位置 |
-| `horizontalScrollThumb` | engine: name of the horizontal ScrollBar's thumb (not rendered by this package) | Horizontal scroll position | 横スクロール位置 |
 | `scrollToTop` | engine: top pill (not enabled by this package) | Top | 先頭へ |
 | `scrollToBottom` | engine: bottom pill (not enabled by this package) | Bottom | 末尾へ |
 | `noItems` | engine: the one message of an empty List or DetailList, over the top of the list | No items | 項目がありません |
@@ -4358,6 +4374,7 @@ first), `DAILY_REPORT_LABEL_CATALOGS` (the frozen catalogs), `resolveDailyReport
 | `deleteReport` | report delete button | Delete | 削除する |
 | `edit` | edit button of the viewer's own report (`aria-label` / tooltip) | Edit | 編集 |
 | `resizeHandle` | list / detail resize handle `aria-label` | Resize the border between the report list and the detail pane | 日報一覧と詳細ペインの境界のサイズ変更ハンドル |
+| `resizeHandleHint` | list / detail resize handle tooltip (`title`): the ways to move the border | Drag or use the arrow keys to resize, or click to step through the preset widths | ドラッグか矢印キーで幅を変え、クリックで決まった幅を順に切り替える |
 | `close` | mobile overlay close button, the error notice's close `aria-label` | Close | 閉じる |
 | `formTitle` | edit form | Title | タイトル |
 | `formTitlePlaceholder` | edit form | Enter the report title | 日報のタイトルを入力 |

package/dist/client.d.mts

@@ -37,7 +37,7 @@ type DailyReportDetailListProps = {
     scrollRestoreRef?: RefObject<DailyReportDetailListScrollRestore>;
 };
 declare const DailyReportDetailList: (props: DailyReportDetailListProps) => react.JSX.Element;
-type DailyReportSearchFailure = "invalid" | "busy" | "unavailable" | "failed";
+type DailyReportSearchFailure = "invalid" | "busy" | "unavailable" | "failed" | "refused";
 type DailyReportLocale = VirtualScrollLocale;
 type DailyReportOperation = Exclude<DailyReportActionIntent, "clearCache">;
 type DailyReportLabels = VirtualScrollLabels & {
@@ -84,6 +84,7 @@ type DailyReportLabels = VirtualScrollLabels & {
     readonly reload: string;
     readonly loadingIds: string;
     readonly streamFailed: string;
+    readonly liveUpdatesRefused: string;
     readonly streamRetry: string;
     readonly streamRevalidating: string;
     readonly selectPrompt: string;
@@ -101,6 +102,7 @@ type DailyReportLabels = VirtualScrollLabels & {
     readonly deleteReport: string;
     readonly edit: string;
     readonly resizeHandle: string;
+    readonly resizeHandleHint: string;
     readonly close: string;
     readonly formTitle: string;
     readonly formTitlePlaceholder: string;
@@ -141,6 +143,7 @@ type DailyReportLabels = VirtualScrollLabels & {
     readonly reportSummaryLoadFailed: (reportHubId: number) => string;
     readonly interviewerWithAffiliation: (name: string, affiliation: string) => string;
     readonly operationFailed: (operation: DailyReportOperation) => string;
+    readonly operationRefused: (operation: DailyReportOperation) => string;
     readonly noticeRepeated: (count: number) => string;
     readonly rowState: (state: {
         readonly readState: DailyReportReadState;
@@ -170,8 +173,6 @@ declare const DAILY_REPORT_LABEL_KEYS: readonly [
     "scrollRight",
     "verticalScrollBar",
     "horizontalScrollBar",
-    "verticalScrollThumb",
-    "horizontalScrollThumb",
     "scrollToTop",
     "scrollToBottom",
     "noItems",
@@ -218,6 +219,7 @@ declare const DAILY_REPORT_LABEL_KEYS: readonly [
     "reload",
     "loadingIds",
     "streamFailed",
+    "liveUpdatesRefused",
     "streamRetry",
     "streamRevalidating",
     "selectPrompt",
@@ -235,6 +237,7 @@ declare const DAILY_REPORT_LABEL_KEYS: readonly [
     "deleteReport",
     "edit",
     "resizeHandle",
+    "resizeHandleHint",
     "close",
     "formTitle",
     "formTitlePlaceholder",
@@ -275,6 +278,7 @@ declare const DAILY_REPORT_LABEL_KEYS: readonly [
     "reportSummaryLoadFailed",
     "interviewerWithAffiliation",
     "operationFailed",
+    "operationRefused",
     "noticeRepeated",
     "rowState",
     "rowEditingState",
@@ -364,7 +368,8 @@ type DailyReportHeaderProps = {
     annotation?: ReactNode;
 };
 type DailyReportErrorInfo = {
-    operation: DailyReportOperation;
+    operation: DailyReportOperation | "liveUpdates";
+    reason: "failed" | "refused";
     message: string;
     cause?: unknown;
 };
@@ -413,6 +418,7 @@ type DailyReportPageProps = {
     user?: DailyReportUser;
     userId?: string | null;
     config: DailyReportClientConfigInput;
+    sessionEpoch: number;
 };
 declare const DailyReportPage: ({ config, ...rest }: DailyReportPageProps) => react.JSX.Element;
 type DailyReportResolvedContentProps = {
@@ -427,8 +433,10 @@ type UseDailyReportSseConnectionOptions = {
     onMessage: (payload: Exclude<DailyReportSseMessage, {
         type: "connected";
     }>) => void;
+    onSessionEnded: () => void;
+    onRefused: () => void;
 };
-declare const useDailyReportSseConnection: ({ isSseEnabled, onMessage }: UseDailyReportSseConnectionOptions) => DailyReportSseConnectionStatus;
+declare const useDailyReportSseConnection: ({ isSseEnabled, onMessage, onSessionEnded, onRefused }: UseDailyReportSseConnectionOptions) => DailyReportSseConnectionStatus;
 type ReportBusinessDate = DailyReportDetail["date"];
 type DailyReportActionFunctions = {
     toggleSse: () => void;

package/dist/client.d.ts

@@ -37,7 +37,7 @@ type DailyReportDetailListProps = {
     scrollRestoreRef?: RefObject<DailyReportDetailListScrollRestore>;
 };
 declare const DailyReportDetailList: (props: DailyReportDetailListProps) => react.JSX.Element;
-type DailyReportSearchFailure = "invalid" | "busy" | "unavailable" | "failed";
+type DailyReportSearchFailure = "invalid" | "busy" | "unavailable" | "failed" | "refused";
 type DailyReportLocale = VirtualScrollLocale;
 type DailyReportOperation = Exclude<DailyReportActionIntent, "clearCache">;
 type DailyReportLabels = VirtualScrollLabels & {
@@ -84,6 +84,7 @@ type DailyReportLabels = VirtualScrollLabels & {
     readonly reload: string;
     readonly loadingIds: string;
     readonly streamFailed: string;
+    readonly liveUpdatesRefused: string;
     readonly streamRetry: string;
     readonly streamRevalidating: string;
     readonly selectPrompt: string;
@@ -101,6 +102,7 @@ type DailyReportLabels = VirtualScrollLabels & {
     readonly deleteReport: string;
     readonly edit: string;
     readonly resizeHandle: string;
+    readonly resizeHandleHint: string;
     readonly close: string;
     readonly formTitle: string;
     readonly formTitlePlaceholder: string;
@@ -141,6 +143,7 @@ type DailyReportLabels = VirtualScrollLabels & {
     readonly reportSummaryLoadFailed: (reportHubId: number) => string;
     readonly interviewerWithAffiliation: (name: string, affiliation: string) => string;
     readonly operationFailed: (operation: DailyReportOperation) => string;
+    readonly operationRefused: (operation: DailyReportOperation) => string;
     readonly noticeRepeated: (count: number) => string;
     readonly rowState: (state: {
         readonly readState: DailyReportReadState;
@@ -170,8 +173,6 @@ declare const DAILY_REPORT_LABEL_KEYS: readonly [
     "scrollRight",
     "verticalScrollBar",
     "horizontalScrollBar",
-    "verticalScrollThumb",
-    "horizontalScrollThumb",
     "scrollToTop",
     "scrollToBottom",
     "noItems",
@@ -218,6 +219,7 @@ declare const DAILY_REPORT_LABEL_KEYS: readonly [
     "reload",
     "loadingIds",
     "streamFailed",
+    "liveUpdatesRefused",
     "streamRetry",
     "streamRevalidating",
     "selectPrompt",
@@ -235,6 +237,7 @@ declare const DAILY_REPORT_LABEL_KEYS: readonly [
     "deleteReport",
     "edit",
     "resizeHandle",
+    "resizeHandleHint",
     "close",
     "formTitle",
     "formTitlePlaceholder",
@@ -275,6 +278,7 @@ declare const DAILY_REPORT_LABEL_KEYS: readonly [
     "reportSummaryLoadFailed",
     "interviewerWithAffiliation",
     "operationFailed",
+    "operationRefused",
     "noticeRepeated",
     "rowState",
     "rowEditingState",
@@ -364,7 +368,8 @@ type DailyReportHeaderProps = {
     annotation?: ReactNode;
 };
 type DailyReportErrorInfo = {
-    operation: DailyReportOperation;
+    operation: DailyReportOperation | "liveUpdates";
+    reason: "failed" | "refused";
     message: string;
     cause?: unknown;
 };
@@ -413,6 +418,7 @@ type DailyReportPageProps = {
     user?: DailyReportUser;
     userId?: string | null;
     config: DailyReportClientConfigInput;
+    sessionEpoch: number;
 };
 declare const DailyReportPage: ({ config, ...rest }: DailyReportPageProps) => react.JSX.Element;
 type DailyReportResolvedContentProps = {
@@ -427,8 +433,10 @@ type UseDailyReportSseConnectionOptions = {
     onMessage: (payload: Exclude<DailyReportSseMessage, {
         type: "connected";
     }>) => void;
+    onSessionEnded: () => void;
+    onRefused: () => void;
 };
-declare const useDailyReportSseConnection: ({ isSseEnabled, onMessage }: UseDailyReportSseConnectionOptions) => DailyReportSseConnectionStatus;
+declare const useDailyReportSseConnection: ({ isSseEnabled, onMessage, onSessionEnded, onRefused }: UseDailyReportSseConnectionOptions) => DailyReportSseConnectionStatus;
 type ReportBusinessDate = DailyReportDetail["date"];
 type DailyReportActionFunctions = {
     toggleSse: () => void;