…ngIdFromPayload)

Two docstring accuracy nits from Copilot round 2:

1. pg-clear-wing-filter handler: previous comment claimed it "re-renders
   explicitly so it doesn't depend on the hashchange listener" but the
   wing-actually-cleared branch DOES rely on hashchange. Comment now
   describes both branches accurately (hashchange path when wing was
   set; explicit-render path for the unusual double-click case).

2. resolveWingIdFromPayload: docstring claimed null is returned when
   payload is "not an object", but the signature already excludes that
   case at compile time. Docstring now lists the actual runtime cases
   (undefined payload, missing/non-string registryId, no lifebook
   match, lifebook with no wing).

Test plan: db builds clean; web syntax clean.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Closes the last of the three #193 Child 1 follow-ups deferred by PR
filter shipped in #257, this one). The weekly briefing worker now
emits, in addition to the existing global briefing, one per-Lifebook
briefing for each visible domain with activity in the window. The
lifebook page renders the per-domain briefing when one exists.

Migration 042:
- Adds nullable domain_name STRING to twin_briefings. NULL preserves
  the historical global-briefing semantic. A string scopes the
  briefing to that lifebook's domain.
- Partial index (user_id, domain_name, generated_at DESC) WHERE
  domain_name IS NOT NULL keeps per-domain queries fast without
  bloating storage for global rows.

Repository:
- create() accepts optional domainName.
- getLatestForUser() now explicitly scopes to domain_name IS NULL
  (the historical implicit semantic, made explicit).
- New getLatestForUserDomain(userId, domain, cadence?).

Worker:
- After writing the global briefing, fetch visible lifebooks and
  emit one per-domain briefing per lifebook with matching events.
  Events filtered by registry_id ∈ lifebook.suggested_capabilities.
- Empty filtered sets skipped (no "nothing happened in Health"
  rows).
- Per-lifebook failures caught and logged so one broken domain
  doesn't take out the rest.
- Prompt carries optional {{domain}} input; the template's
  {{#if domain}} block adds a one-sentence framing for the scoped
  domain. Deterministic fallback unchanged.

API:
- New GET /api/twin-briefings/lifebook/:domain/latest?cadence=
  returns { briefing: TwinBriefingRow | null }.

Frontend:
- Lifebook page fetches the per-domain briefing best-effort and
  renders a briefing card. Friendly empty state when none exists
  yet.

Test plan: 3 new vitest cases in briefing-generator.test.ts (per-
Lifebook write, no-events skip, per-lifebook failure resilience).
worker 86/86 (+3 new), api 547/547, db 189/189. Workspace 70/70
turbo tasks green; build clean.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* feat(#193 follow-up): per-Lifebook briefing prose

Closes the last of the three #193 Child 1 follow-ups deferred by PR
filter shipped in #257, this one). The weekly briefing worker now
emits, in addition to the existing global briefing, one per-Lifebook
briefing for each visible domain with activity in the window. The
lifebook page renders the per-domain briefing when one exists.

Migration 042:
- Adds nullable domain_name STRING to twin_briefings. NULL preserves
  the historical global-briefing semantic. A string scopes the
  briefing to that lifebook's domain.
- Partial index (user_id, domain_name, generated_at DESC) WHERE
  domain_name IS NOT NULL keeps per-domain queries fast without
  bloating storage for global rows.

Repository:
- create() accepts optional domainName.
- getLatestForUser() now explicitly scopes to domain_name IS NULL
  (the historical implicit semantic, made explicit).
- New getLatestForUserDomain(userId, domain, cadence?).

Worker:
- After writing the global briefing, fetch visible lifebooks and
  emit one per-domain briefing per lifebook with matching events.
  Events filtered by registry_id ∈ lifebook.suggested_capabilities.
- Empty filtered sets skipped (no "nothing happened in Health"
  rows).
- Per-lifebook failures caught and logged so one broken domain
  doesn't take out the rest.
- Prompt carries optional {{domain}} input; the template's
  {{#if domain}} block adds a one-sentence framing for the scoped
  domain. Deterministic fallback unchanged.

API:
- New GET /api/twin-briefings/lifebook/:domain/latest?cadence=
  returns { briefing: TwinBriefingRow | null }.

Frontend:
- Lifebook page fetches the per-domain briefing best-effort and
  renders a briefing card. Friendly empty state when none exists
  yet.

Test plan: 3 new vitest cases in briefing-generator.test.ts (per-
Lifebook write, no-events skip, per-lifebook failure resilience).
worker 86/86 (+3 new), api 547/547, db 189/189. Workspace 70/70
turbo tasks green; build clean.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* fix(#258 post-review): tier-promotion attribution, N+1 fix, empty-allowlist footgun, listForUser scope, +6 route tests

Five substantive Copilot findings on PR #258 addressed:

1. tier_promotion rows now flow into per-Lifebook briefings. The
   prior filter checked payload.registryId, but tier_promotion
   payloads carry { from, to, reason } and reference the server via
   server_id. gatherBriefingData now computes a server_id →
   registry_id map and filterDataByLifebook uses it to attribute
   promotions to the right lifebook.

2. N+1 query pattern eliminated. The orchestrator calls
   gatherBriefingData ONCE per user; the bundle is shared across the
   global briefing and every per-Lifebook briefing via a new
   `preGathered` parameter on generateBriefingProse. Per-lifebook DB
   cost dropped from 2 repo calls + 1 query per lifebook to "filter
   the in-memory bundle."

3. Empty-allowlist footgun fixed. filterDataByLifebook now returns
   an EMPTY bundle when the lifebook has no suggested_capabilities,
   not the unfiltered global bundle. Previously a scoped call with
   an empty allowlist would have written a global briefing under the
   domain's label.

4. listForUser() defaults to global (domain_name IS NULL) — adding
   the column would otherwise have silently interleaved per-Lifebook
   rows into existing twin-briefings history surfaces. New
   opts.includeDomainScoped lets callers opt in. New
   listForUserDomain() mirror serves the per-domain history.

5. 6 new route-level tests for GET /lifebook/:domain/latest.

Test plan: worker 86/86 still green; api 550/550 (+6 new tests).
Build clean across db, worker, api.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>