feat: auth scaffold, notifications inbox, resources CRUD, vitest baseline, typed API client

Auth
- ~/lib/session.ts: Session type + loadSession/signIn/signOut/hasSession,
  reactive useSession hook (mock backend; replace fetch calls with your
  real auth endpoint when ready)
- routes/login.tsx: form with email/password (mock-validated), bounces
  to ?next= on success
- AppShell: redirects to /login when no session; account-menu Sign out
  now actually signs out; live session.name/email used for the appbar
  avatar (falls back to profile)

Notifications
- ~/lib/notifications.ts: persistent inbox with kinds (info/success/
  warning/error), unreadCount, markRead, markAllRead, dismiss,
  dismissAll; seedIfEmpty for a friendly first-run
- AppShell bell: 320px popover with badge, kind dots, per-row open
  (navigates to href) and dismiss; Mark all read + Clear actions
- Hidden NotificationDispatcher in AppShell so the action bus can
  create real notifications via fill notif-title / notif-body /
  notif-kind / notif-href + click notif-create

Data layer
- ~/lib/api.ts: typed apiFetch<T> + api.get/post/put/patch/del,
  auto-attaches the session token, throws structured ApiError, signs
  out on 401
- ~/lib/resources.ts: example domain entity (CRUD) backed by
  localStorage today; each call is a 1:1 swap for api.get/post/put/del
- routes/resources.tsx: real working table — search, add, inline
  status edit, delete; seeded demo rows on first load

Tests
- vitest + jsdom + @testing-library/react + @testing-library/jest-dom
  + vite-tsconfig-paths installed
- vitest.config.ts (jsdom, globals, ~ aliases via tsconfig-paths)
- vitest.setup.ts (RTL cleanup + localStorage clear between tests)
- app/lib/session.test.ts and resources.test.ts as starter coverage
- npm test / npm run test:watch scripts

UI Control catalog
- Login form, resources CRUD, notifications inbox, and the hidden
  notif-bridge ids tagged so the assistant can drive every new surface

Threads
- ThreadMessage now carries optional agentId so per-message authorship
  survives persona switches and handoffs

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

app/lib/resources.test.ts

@@ -0,0 +1,32 @@
+import { describe, expect, it, beforeEach } from "vitest"
+
+import {
+  createResource,
+  deleteResource,
+  listResources,
+  updateResource,
+} from "./resources"
+
+describe("resources", () => {
+  beforeEach(() => {
+    localStorage.clear()
+  })
+
+  it("creates, updates, and deletes", () => {
+    expect(listResources()).toEqual([])
+    const r = createResource({ name: "Test", owner: "Atlas" })
+    expect(r.status).toBe("active")
+    expect(listResources()).toHaveLength(1)
+
+    const updated = updateResource(r.id, { status: "paused" })
+    expect(updated?.status).toBe("paused")
+    expect(updated?.updatedAt).toBeGreaterThanOrEqual(r.updatedAt)
+
+    deleteResource(r.id)
+    expect(listResources()).toEqual([])
+  })
+
+  it("ignores updates for unknown ids", () => {
+    expect(updateResource("missing", { name: "x" })).toBeNull()
+  })
+})