diff --git a/.agents/agents/variants/opencode.json b/.agents/agents/variants/opencode.json
new file mode 100644
index 0000000..b304624
--- /dev/null
+++ b/.agents/agents/variants/opencode.json
@@ -0,0 +1,22 @@
+{
+  "$schema": "./agent-variant.schema.json",
+  "vendor": "opencode",
+  "destDir": ".opencode/agents",
+  "modelDefault": "opencode-go/deepseek-v4-flash",
+  "toolsDefault": [],
+  "protocolPath": ".agents/skills/_shared/runtime/execution-protocols/opencode.md",
+  "agents": {
+    "backend-engineer": {},
+    "frontend-engineer": {},
+    "db-engineer": {},
+    "debug-investigator": {},
+    "architecture-reviewer": {},
+    "tf-infra-engineer": {},
+    "mobile-engineer": {},
+    "pm-planner": {},
+    "qa-reviewer": {},
+    "docs-curator": {},
+    "refactor-engineer": {},
+    "research-explorer": {}
+  }
+}
diff --git a/.agents/config/defaults.yaml b/.agents/config/defaults.yaml
index 1701aab..ca87bb6 100644
--- a/.agents/config/defaults.yaml
+++ b/.agents/config/defaults.yaml
@@ -55,21 +55,6 @@ runtime_profiles:
       tf-infra:      { model: "openai/gpt-5.5", effort: "high" }
       explore:       { model: "openai/gpt-5.4-mini", effort: "low" }
 
-  gemini:
-    description: "Gemini — Google AI Pro"
-    agent_defaults:
-      orchestrator:  { model: "google/gemini-3-flash" }
-      architecture:  { model: "google/gemini-3.1-pro-preview", thinking: true }
-      qa:            { model: "google/gemini-3-flash", thinking: true }
-      pm:            { model: "google/gemini-3-flash" }
-      backend:       { model: "google/gemini-3-flash", thinking: true }
-      frontend:      { model: "google/gemini-3-flash", thinking: true }
-      mobile:        { model: "google/gemini-3-flash", thinking: true }
-      db:            { model: "google/gemini-3-flash", thinking: true }
-      debug:         { model: "google/gemini-3-flash", thinking: true }
-      tf-infra:      { model: "google/gemini-3-flash", thinking: true }
-      explore:       { model: "google/gemini-3.1-flash-lite" }
-
   mixed:
     description: "Mixed — role-optimal vendors per agent (Claude for orchestration/QA/PM, Codex for impl, Gemini for explore)"
     agent_defaults:
diff --git a/.agents/hooks/core/agentmemory-client.ts b/.agents/hooks/core/agentmemory-client.ts
index 5816663..2611828 100644
--- a/.agents/hooks/core/agentmemory-client.ts
+++ b/.agents/hooks/core/agentmemory-client.ts
@@ -142,15 +142,63 @@ export interface RecalledFact {
 
 interface SearchResult {
   score?: number;
+  timestamp?: unknown;
+  created_at?: unknown;
   observation?: {
     narrative?: unknown;
     facts?: unknown;
     title?: unknown;
     type?: unknown;
+    timestamp?: unknown;
+    created_at?: unknown;
   };
 }
 
-function parseSearchResults(body: string, k: number): RecalledFact[] {
+/**
+ * Recall TTL: facts older than this many days are dropped from the snapshot so
+ * stale, long-resolved decisions stop rehydrating every boundary. Default 30
+ * days; set `OMA_RECALL_MAX_AGE_DAYS=0` (or a non-positive value) to disable.
+ * Returns the max age in ms, or null when disabled.
+ */
+function recallMaxAgeMs(): number | null {
+  const raw = process.env.OMA_RECALL_MAX_AGE_DAYS;
+  const days = raw === undefined ? 30 : Number(raw);
+  if (!Number.isFinite(days) || days <= 0) return null;
+  return days * 24 * 60 * 60 * 1000;
+}
+
+/**
+ * Best-effort timestamp extraction from a search result. AgentMemory's response
+ * envelope is not contractually fixed across versions, so several candidate
+ * field names / locations are probed. Numeric epoch seconds are normalised to
+ * ms. Returns null when no parseable timestamp is present — callers then keep
+ * the fact (TTL filtering is fail-open, never dropping facts of unknown age).
+ */
+function extractTimestampMs(entry: SearchResult): number | null {
+  const obs = entry.observation ?? {};
+  const candidates: unknown[] = [
+    obs.timestamp,
+    obs.created_at,
+    entry.timestamp,
+    entry.created_at,
+  ];
+  for (const candidate of candidates) {
+    if (typeof candidate === "number" && Number.isFinite(candidate)) {
+      return candidate < 1e12 ? candidate * 1000 : candidate;
+    }
+    if (typeof candidate === "string" && candidate.trim()) {
+      const parsed = Date.parse(candidate);
+      if (Number.isFinite(parsed)) return parsed;
+    }
+  }
+  return null;
+}
+
+export function parseSearchResults(
+  body: string,
+  k: number,
+  nowMs: number = Date.now(),
+): RecalledFact[] {
   let parsed: { results?: unknown };
   try {
     parsed = JSON.parse(body) as { results?: unknown };
@@ -164,12 +212,20 @@ function parseSearchResults(body: string, k: number): RecalledFact[] {
     return Number.isFinite(raw) ? raw : 1;
   })();
 
+  const maxAgeMs = recallMaxAgeMs();
+  const cutoffMs = maxAgeMs === null ? null : nowMs - maxAgeMs;
+
   const facts: RecalledFact[] = [];
   for (const entry of parsed.results as SearchResult[]) {
     const score = typeof entry.score === "number" ? entry.score : 0;
     // Raw `/observe` envelopes score near-zero (~0.006); enriched facts score
     // in the single digits. Drop the noise floor so the snapshot stays useful.
     if (score < minScore) continue;
+    // TTL: drop facts older than the cutoff (fail-open on unknown age).
+    if (cutoffMs !== null) {
+      const tsMs = extractTimestampMs(entry);
+      if (tsMs !== null && tsMs < cutoffMs) continue;
+    }
     const obs = entry.observation ?? {};
     const narrative =
       typeof obs.narrative === "string" && obs.narrative.trim()
diff --git a/.agents/hooks/core/triggers.json b/.agents/hooks/core/triggers.json
index 29747e0..a0c6335 100644
--- a/.agents/hooks/core/triggers.json
+++ b/.agents/hooks/core/triggers.json
@@ -3033,6 +3033,54 @@
           "会议转录"
         ]
       }
+    },
+    "oma-refactor": {
+      "keywords": {
+        "*": ["oma-refactor"],
+        "en": [
+          "refactor this",
+          "refactoring plan",
+          "extract class",
+          "extract method",
+          "reduce complexity",
+          "measure complexity",
+          "code smell",
+          "technical debt",
+          "characterization test",
+          "hotspot analysis",
+          "split this class",
+          "clean up this code"
+        ],
+        "ko": [
+          "리팩토링",
+          "리팩터링",
+          "복잡도 줄여",
+          "복잡도 측정",
+          "코드 스멜",
+          "기술 부채",
+          "클래스 분리",
+          "메서드 추출",
+          "코드 정리해줘"
+        ],
+        "ja": [
+          "リファクタリング",
+          "複雑度を下げ",
+          "複雑度を測定",
+          "コードスメル",
+          "技術的負債",
+          "クラスを分割",
+          "メソッド抽出"
+        ],
+        "zh": [
+          "重构",
+          "降低复杂度",
+          "测量复杂度",
+          "代码异味",
+          "技术债",
+          "拆分类",
+          "提取方法"
+        ]
+      }
     }
   },
   "informationalPatterns": {
diff --git a/.agents/hooks/variants/claude.json b/.agents/hooks/variants/claude.json
index 901d5a9..b9a8a41 100644
--- a/.agents/hooks/variants/claude.json
+++ b/.agents/hooks/variants/claude.json
@@ -9,19 +9,19 @@
     "UserPromptSubmit": [
       {
         "hook": "keyword-detector.ts",
-        "timeout": 5
+        "timeout": 2
       },
       {
         "hook": "state-boundary.ts",
-        "timeout": 5
+        "timeout": 4
       },
       {
         "hook": "skill-injector.ts",
-        "timeout": 3
+        "timeout": 2
       },
       {
         "hook": "serena-primer.ts",
-        "timeout": 3
+        "timeout": 2
       }
     ],
     "PreToolUse": {
diff --git a/.agents/hooks/variants/opencode/oma.ts b/.agents/hooks/variants/opencode/oma.ts
new file mode 100644
index 0000000..2e0e5c6
--- /dev/null
+++ b/.agents/hooks/variants/opencode/oma.ts
@@ -0,0 +1,211 @@
+/**
+ * oh-my-agent — opencode (Sst opencode) plugin bridge.
+ *
+ * SSOT source. At install time `installOpencodePlugin` copies this file to
+ * `.opencode/plugins/oma/oma.ts` alongside the core hook scripts. opencode
+ * auto-discovers plugins under each `.opencode/plugins` subdirectory.
+ *
+ * Why a bridge instead of a per-vendor variants JSON entry: opencode does NOT
+ * register settings-file hooks like the other vendors. It loads in-process
+ * TypeScript plugins and dispatches plugin event handlers. So rather than the
+ * generic `installHooksFromVariant` path (events → settings file → `bun
+ * <script>` subprocess), opencode gets this thin shim that maps opencode
+ * lifecycle events onto oma's existing, vendor-agnostic core scripts via
+ * subprocess. All matching logic stays in the core scripts.
+ *
+ * Intentionally dependency-free (no @opencode-ai/plugin import) so this file
+ * works in any user project without requiring opencode as a dev dependency.
+ * The `Plugin` type is satisfied structurally via JSDoc.
+ *
+ * Event mapping:
+ *   chat.message        ← UserPromptSubmit  (keyword-detector + skill-injector)
+ *   tool.execute.before ← PreToolUse        (test-filter for bash tools)
+ *   session.idle        ← Stop              BEST-EFFORT / NON-BLOCKING
+ *                         opencode's session.idle is a notification-only event
+ *                         that fires when the session has no pending work. It
+ *                         is the closest analog to the Claude `Stop` hook but
+ *                         cannot block the session from terminating. Persistent
+ *                         workflow Stop semantics are therefore DEGRADED under
+ *                         opencode: the handler runs best-effort and must not
+ *                         throw or block — if the underlying hook returns
+ *                         non-zero or times out, the error is swallowed and
+ *                         opencode proceeds normally.
+ */
+
+import { spawnSync } from "node:child_process";
+import { fileURLToPath } from "node:url";
+
+/** Absolute path to a core script copied next to this bridge at install time. */
+function corePath(script: string): string {
+  return fileURLToPath(new URL(`./${script}`, import.meta.url));
+}
+
+/**
+ * Run an oma core hook script as a subprocess: feed it JSON on stdin, parse
+ * its JSON stdout. Fail-open (returns null) on any error — a broken hook must
+ * never block the agent. Spawns with `cwd` = opencode's working directory so
+ * the core scripts resolve the project (git) root the same way they do for
+ * every other vendor.
+ */
+function runCore(
+  script: string,
+  payload: Record<string, unknown>,
+  cwd: string,
+): Record<string, unknown> | null {
+  try {
+    const res = spawnSync("bun", [corePath(script)], {
+      input: JSON.stringify(payload),
+      cwd,
+      encoding: "utf-8",
+      timeout: 5000,
+      env: process.env,
+    });
+    const out = (res.stdout ?? "").trim();
+    if (!out) return null;
+    return JSON.parse(out) as Record<string, unknown>;
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Run an oma core hook script best-effort: like runCore but swallows all
+ * errors and never throws. Used for session.idle (Stop equivalent) where
+ * throwing would surface as an unhandled rejection inside opencode.
+ */
+function runCoreBestEffort(
+  script: string,
+  payload: Record<string, unknown>,
+  cwd: string,
+): void {
+  try {
+    runCore(script, payload, cwd);
+  } catch {
+    // Non-zero exit or parse error — swallow silently (Stop degraded semantics).
+  }
+}
+
+/**
+ * oh-my-agent opencode plugin.
+ *
+ * Structural shape satisfies the opencode `Plugin` contract without importing
+ * @opencode-ai/plugin, keeping this bridge dependency-free in the user's
+ * project.
+ *
+ * @satisfies Plugin
+ */
+export default (async ({ $ }: { $: { cwd: string } }) => {
+  const cwd = $.cwd ?? process.cwd();
+
+  return {
+    /**
+     * chat.message ← UserPromptSubmit
+     *
+     * Invoked when the user submits a new message to the chat. Runs the OMA
+     * keyword-detector (workflow activation) and skill-injector (context
+     * injection) and appends any resulting context to the system prompt for
+     * this turn.
+     */
+    "chat.message": async (event: {
+      message?: { content?: string };
+      session?: { systemPrompt?: string };
+    }) => {
+      const prompt = event.message?.content ?? "";
+      const payload = {
+        prompt,
+        cwd,
+        hook_event_name: "UserPromptSubmit",
+      };
+
+      const parts: string[] = [];
+
+      const kd = runCore("keyword-detector.ts", payload, cwd);
+      if (kd && typeof kd.additionalContext === "string") {
+        parts.push(kd.additionalContext);
+      }
+
+      const si = runCore("skill-injector.ts", payload, cwd);
+      if (si && typeof si.additionalContext === "string") {
+        parts.push(si.additionalContext);
+      }
+
+      if (parts.length === 0) return undefined;
+
+      const existing = event.session?.systemPrompt ?? "";
+      return {
+        session: {
+          systemPrompt: existing
+            ? `${existing}\n\n${parts.join("\n\n")}`
+            : parts.join("\n\n"),
+        },
+      };
+    },
+
+    /**
+     * tool.execute.before ← PreToolUse (Bash)
+     *
+     * Invoked before a tool call is executed. Runs the OMA test-filter for
+     * bash/shell tools to rewrite test-runner commands so only failures reach
+     * the model. Non-bash tools are passed through unchanged.
+     */
+    "tool.execute.before": async (event: {
+      tool?: { name?: string };
+      input?: { command?: string };
+    }) => {
+      const toolName = event.tool?.name ?? "";
+      if (toolName !== "bash" && toolName !== "Bash") return undefined;
+
+      const command = event.input?.command;
+      if (!command) return undefined;
+
+      const tf = runCore(
+        "test-filter.ts",
+        {
+          tool_name: "Bash",
+          tool_input: { command },
+          cwd,
+          hook_event_name: "PreToolUse",
+        },
+        cwd,
+      );
+
+      const updated = (tf?.updatedInput as { command?: string } | undefined)
+        ?.command;
+      if (updated && event.input) {
+        event.input.command = updated;
+      }
+
+      return undefined;
+    },
+
+    /**
+     * session.idle ← Stop (BEST-EFFORT / NON-BLOCKING)
+     *
+     * Invoked when the session has no pending work. This is the nearest
+     * opencode analog to the Claude `Stop` hook but it CANNOT block session
+     * termination — opencode treats it as a notification-only event.
+     *
+     * Persistent-workflow Stop semantics are therefore degraded: the handler
+     * runs best-effort and any non-zero hook exit or thrown error is swallowed
+     * so opencode can proceed normally. Do not rely on this handler to hold
+     * the session open; keyword-detector re-injection on the next chat.message
+     * event provides the fallback reinforcement path instead.
+     */
+    "session.idle": async (_event: unknown) => {
+      // BEST-EFFORT: errors are swallowed — must not throw or block.
+      runCoreBestEffort(
+        "keyword-detector.ts",
+        {
+          cwd,
+          hook_event_name: "Stop",
+        },
+        cwd,
+      );
+      return undefined;
+    },
+  };
+}) satisfies (ctx: { $: { cwd: string } }) => Promise<{
+  "chat.message": (event: unknown) => Promise<unknown>;
+  "tool.execute.before": (event: unknown) => Promise<unknown>;
+  "session.idle": (event: unknown) => Promise<unknown>;
+}>;
diff --git a/.agents/rules/i18n-arb.md b/.agents/rules/i18n-arb.md
new file mode 100644
index 0000000..7657c7a
--- /dev/null
+++ b/.agents/rules/i18n-arb.md
@@ -0,0 +1,18 @@
+---
+description: ARB-based localization standards — ARB as the single cross-platform source of truth for UI strings
+globs: "**/*.arb"
+alwaysApply: false
+---
+
+# ARB-Based Localization
+
+When ARB files exist in the project, they are the **single source of truth** for all user-facing strings — regardless of target platform. A build step generates the platform-specific artifacts from ARB (e.g. JSON for web, generated Dart for Flutter).
+
+1. **Never hardcode UI strings** — all user-visible text must come from ARB files (`*.arb`)
+2. **Edit ARB first** — when adding or changing UI text, update the ARB file, then run the i18n build
+3. **Build after changes** — run the project's i18n build task (e.g. `mise i18n:build`, or `dart run build_runner build` in a Flutter package) to regenerate localized output (JSON for web, generated Dart, etc.). Prefer the `mise` task when one exists.
+4. **Generated output is never hand-edited** — change the ARB and rebuild; treat the emitted JSON/Dart as derived artifacts
+5. **Base locale** — the primary ARB file (e.g., `app_en.arb`) is the reference; other locales derive from it
+6. **Key naming** — use `camelCase` keys describing the purpose, not the content: `loginButton` not `clickHere`
+7. **Placeholders** — use ICU message syntax for interpolation: `"greeting": "Hello, {name}!"`
+8. **Do not translate keys** — ARB keys are identifiers, always in English
diff --git a/.agents/rules/i18n-guide.md b/.agents/rules/i18n-guide.md
index ef02ebe..26b0cb8 100644
--- a/.agents/rules/i18n-guide.md
+++ b/.agents/rules/i18n-guide.md
@@ -74,17 +74,9 @@ All workflows follow these rules. The following line in existing workflows refer
 - **Response language follows `language` setting in `.agents/oma-config.yaml` if configured.**
 ```
 
-## ARB-Based Localization (`packages/i18n/`)
-
-If `packages/i18n/` exists in the project, ARB files are the **single source of truth** for all user-facing strings.
-
-1. **Never hardcode UI strings** — all user-visible text must come from ARB files (`*.arb`)
-2. **Edit ARB first** — when adding or changing UI text, update the ARB file, then run the build in `packages/i18n/`
-3. **Build after changes** — run `dart run build_runner build` (or equivalent) inside `packages/i18n/` to regenerate localization code
-4. **Base locale** — the primary ARB file (e.g., `app_en.arb`) is the reference; other locales derive from it
-5. **Key naming** — use `camelCase` keys describing the purpose, not the content: `loginButton` not `clickHere`
-6. **Placeholders** — use ICU message syntax for interpolation: `"greeting": "Hello, {name}!"`
-7. **Do not translate keys** — ARB keys are identifiers, always in English
+> ARB-based localization (ARB as the single cross-platform source of truth for
+> UI strings) is a path-scoped rule — see `i18n-arb.md`, which loads only when
+> `*.arb` files are in context.
 
 ## Subagent Behavior
 
diff --git a/.agents/skills/_shared/runtime/execution-protocols/opencode.md b/.agents/skills/_shared/runtime/execution-protocols/opencode.md
new file mode 100644
index 0000000..c366b31
--- /dev/null
+++ b/.agents/skills/_shared/runtime/execution-protocols/opencode.md
@@ -0,0 +1,63 @@
+# Execution Protocol (opencode)
+
+When running as a CLI subagent (`opencode` headless mode), follow this protocol for shared state coordination. **In headless mode your stdout is captured in the spawner log, but the orchestrator reads only the result artifact below.** If you do not write it, the orchestrator reports your run as `crashed` even on success.
+
+## State Management
+
+Use file-based I/O for coordination. Coordination/state files (task-board, progress,
+result hand-offs) MUST be written to the **project-root memory store** `.serena/memories/`
+— that is the only location the orchestrator (`oma agent:status`), `oma verify`, and the
+memory/retro tooling read. Writing them anywhere else (e.g. `.agents/results/`) leaves them
+orphaned and your run is reported as `crashed`. Human-facing deliverables (plans, bug
+reports, design docs) belong under `.agents/results/` instead.
+
+If Serena MCP is available, use `read_memory`/`write_memory`/`edit_memory` (its default
+base path is `.serena/memories`); otherwise write the same files there directly with
+opencode's file tools.
+
+### Path Resolution (CRITICAL)
+
+All result, progress, and state files MUST be written to the **project root** `.serena/memories/` directory, never to a subdirectory's `.serena/memories/`.
+
+- **Project root** = the git repository root (where `.git` exists)
+- **Session-scoped naming**: when running under an orchestration session, append session ID as suffix:
+  - `result-{agent-id}-{sessionId}.md` (e.g., `result-frontend-session-20260405-100835.md`)
+  - `progress-{agent-id}-{sessionId}.md`
+- **Manual (non-orchestrated) runs**: no suffix, `result-{agent-id}.md`
+
+## On Start
+
+1. Read `.serena/memories/task-board.md` (or `read_memory("task-board.md")`) to confirm your assigned task when it exists.
+2. Create `.serena/memories/progress-{agent-id}[-{sessionId}].md` with initial status.
+
+## During Execution
+
+- Periodically update `progress-{agent-id}[-{sessionId}].md` with current state.
+- Include: action taken, current status, files created/modified.
+
+## On Completion
+
+- Create `.serena/memories/result-{agent-id}[-{sessionId}].md` with final result including:
+  - A status line — see **Status line format** below (REQUIRED)
+  - Summary of work done
+  - Files created/modified
+  - Acceptance criteria checklist
+
+## On Failure
+
+- Still create `result-{agent-id}[-{sessionId}].md` with the status line set to `failed`.
+- Include detailed error description and what remains incomplete.
+
+## Status line format (REQUIRED)
+
+The orchestrator parses the status with the regex `^## Status:\s*(\S+)`. The result file
+MUST contain a single line in exactly this shape — heading marker, colon on the same line,
+plain word, no backticks, no quotes:
+
+```
+## Status: completed
+```
+
+Use `## Status: failed` on failure. Do NOT split it across lines or render it as a
+sub-bullet (e.g. `- Status: completed`) — that fails to parse and a failed run would be
+silently misreported as completed.
diff --git a/.agents/skills/_version.json b/.agents/skills/_version.json
index 49aacb3..6545581 100644
--- a/.agents/skills/_version.json
+++ b/.agents/skills/_version.json
@@ -1,6 +1,6 @@
 {
-  "version": "9.0.2",
+  "version": "9.5.0",
   "schemaVersion": 2,
   "mode": "project",
-  "installedAt": "2026-06-12T03:20:12.101Z"
+  "installedAt": "2026-06-15T14:58:49.217Z"
 }
diff --git a/.agents/skills/oma-mobile/SKILL.md b/.agents/skills/oma-mobile/SKILL.md
index ff3bfbd..ff201ce 100644
--- a/.agents/skills/oma-mobile/SKILL.md
+++ b/.agents/skills/oma-mobile/SKILL.md
@@ -124,9 +124,13 @@ Then run the project's mobile verification commands, typically unit/widget tests
 7. Use Maestro for E2E testing of critical user flows
 8. Swift native: SwiftUI + `@Observable` (Observation framework, iOS 17+) for state management
 9. Swift native: use the generated `Client` from `swift-openapi-generator` — never hand-roll `URLRequest`/`JSONDecoder` for API calls
-10. Swift native: follow `App/Core/Features/Shared` project layout
-11. Swift native: iOS Human Interface Guidelines for all UI decisions
-12. Swift native: XCTest/XCUITest for critical flows; cancel `Task` in `deinit` to prevent leaks
+10. Swift native: cache API responses at the Repository layer via a `ResponseCache` actor over `hyperoslo/Cache` — cache DECODED models (never `HTTPBody`), serve stale-while-revalidate on reads, invalidate keys on writes; view models depend on a protocol seam, not the concrete service (see `variants/swift-ios/snippets.md` §10)
+11. Swift native: follow `App/Core/Features/Shared` project layout
+12. Swift native: iOS Human Interface Guidelines for all UI decisions
+13. Swift native: XCTest/XCUITest for critical flows; cancel `Task` in `deinit` to prevent leaks
+14. Swift native: restore edge swipe-back at the route layer — nav-bar-hidden screens (`.toolbar(.hidden, for: .navigationBar)`) lose it, so register push routes via a `swipeBackDestination` wrapper, not per-screen (see `variants/swift-ios/snippets.md` §9)
+15. Flutter: mandate a repository-layer offline-first cache (Drift) — read cached entities then revalidate (stale-while-revalidate), invalidate/refresh affected rows on every write; cache decoded entities at the data layer, never at the Dio transport (see `variants/flutter/snippets.md`)
+16. React Native: server state goes through TanStack Query (the repository-layer cache) with explicit `staleTime`/`gcTime` — invalidate affected query keys on every mutation, persist the cache to MMKV for offline; screens consume query/mutation hooks, never call axios directly (see `variants/react-native/snippets.md`)
 
 ## References
 Follow `resources/execution-protocol.md` step by step.
@@ -136,15 +140,20 @@ Vendor-specific execution protocols are injected automatically by `oma agent:spa
 Source files live under `../_shared/runtime/execution-protocols/{vendor}.md`.
 - Execution steps: `resources/execution-protocol.md`
 - Code examples: `resources/examples.md`
-- Code snippets (Flutter/RN): `resources/snippets.md`
 - Code snippets (Swift): `variants/swift-ios/snippets.md`
+- Code snippets (Flutter): `variants/flutter/snippets.md`
+- Code snippets (React Native): `variants/react-native/snippets.md`
 - Checklist: `resources/checklist.md`
 - Error recovery: `resources/error-playbook.md`
-- Tech stack (Flutter/RN): `resources/tech-stack.md`
+- Tech stack index (all platforms): `resources/tech-stack.md`
 - Tech stack (Swift): `variants/swift-ios/tech-stack.md`
+- Tech stack (Flutter): `variants/flutter/tech-stack.md`
+- Tech stack (React Native): `variants/react-native/tech-stack.md`
 - Screen template (Flutter): `resources/screen-template.dart`
 - Screen template (Swift): `resources/screen-template.swift`
 - API service template (Swift): `variants/swift-ios/api-template.swift`
+- API service template (Flutter): `variants/flutter/api-template.dart`
+- API service template (React Native): `variants/react-native/api-template.ts`
 - Variant registry: `variants/README.md`
 - Context loading: `../_shared/core/context-loading.md`
 - Reasoning templates: `../_shared/core/reasoning-templates.md`
diff --git a/.agents/skills/oma-mobile/resources/checklist.md b/.agents/skills/oma-mobile/resources/checklist.md
index 9673922..c1c63c3 100644
--- a/.agents/skills/oma-mobile/resources/checklist.md
+++ b/.agents/skills/oma-mobile/resources/checklist.md
@@ -43,5 +43,6 @@ Run through every item before submitting your work.
 - [ ] SwiftUI state via `@Observable` (Observation framework); `Task`s cancelled in `deinit` to avoid leaks
 - [ ] Loading / error (with retry) / empty / data states handled in views
 - [ ] iOS Human Interface Guidelines followed
+- [ ] Push routes registered via a `swipeBackDestination` wrapper (not bare `navigationDestination`), so nav-bar-hidden screens keep edge swipe-back; guarded pops (unsaved edits) override explicitly — see `variants/swift-ios/snippets.md` §9
 - [ ] `swift build` succeeds (runs the generator plugin) and `swift test` passes
 - [ ] XCTest/XCUITest coverage for critical flows
diff --git a/.agents/skills/oma-mobile/resources/examples.md b/.agents/skills/oma-mobile/resources/examples.md
index 0eac80f..9f25465 100644
--- a/.agents/skills/oma-mobile/resources/examples.md
+++ b/.agents/skills/oma-mobile/resources/examples.md
@@ -111,18 +111,23 @@ Core/
     openapi.yaml                # Vendored OpenAPI spec; source of truth for generator
     openapi-generator-config.yaml
     APIClient.swift             # Wraps generated Client; URLSession transport + auth
-    TodoService.swift           # Typed wrapper around generated client.listTodos()
+    TodoProviding.swift         # Protocol seam the VM depends on (mockable)
+    TodoService.swift           # Cached repository: generated Client + ResponseCache
+  Cache/
+    ResponseCache.swift         # actor over hyperoslo/Cache; read-through + invalidation
 App/
   MyApp.swift                   # @main; instantiates AppDependencies
   AppDependencies.swift         # Composition root; injects TodoService into TodosView
 Tests/
-  TodosViewModelTests.swift     # XCTest; MockTodoService via subclass/protocol override
+  TodosViewModelTests.swift     # XCTest; MockTodoService conforms to TodoProviding
 
 ### Files Created
 - Sources/Features/Todos/TodosViewModel.swift
 - Sources/Features/Todos/TodosView.swift
+- Sources/Core/Networking/TodoProviding.swift
 - Sources/Core/Networking/TodoService.swift
 - Sources/Core/Networking/APIClient.swift
+- Sources/Core/Cache/ResponseCache.swift
 - Sources/App/AppDependencies.swift
 - Tests/TodosViewModelTests.swift
 
@@ -130,6 +135,9 @@ Tests/
 - @Observable replaces ObservableObject/@Published — no Combine dependency
 - View holds VM with @State (not @StateObject); init via State(wrappedValue:)
 - .task { viewModel.load() } cancels automatically when view disappears
-- TodoService calls the generated client.listTodos() — never hand-rolled URLRequest
+- TodoService calls the generated client — never hand-rolled URLRequest
+- Read-through cache at the repository layer: ResponseCache (hyperoslo/Cache) wraps
+  the generated Client; reads are stale-while-revalidate, writes invalidate keys
+- VM depends on TodoProviding (protocol seam), so MockTodoService needs no mock lib
 - deinit { loadTask?.cancel() } prevents Task leaks when VM is deallocated
 ```
diff --git a/.agents/skills/oma-mobile/resources/tech-stack.md b/.agents/skills/oma-mobile/resources/tech-stack.md
index f37b3a6..091c8c2 100644
--- a/.agents/skills/oma-mobile/resources/tech-stack.md
+++ b/.agents/skills/oma-mobile/resources/tech-stack.md
@@ -1,78 +1,67 @@
-# Mobile Agent - Tech Stack Reference
+# Mobile Agent - Tech Stack Index
 
-## Flutter (Recommended)
-- **Framework**: Flutter 3.19+
-- **Language**: Dart 3.3+
-- **State**: Riverpod 2.4+, Bloc, Provider
-- **Navigation**: GoRouter 13+
-- **API Client**: Dio
-- **Local Storage**: Drift, Hive
-- **Testing**: flutter_test, mockito
-- **E2E Testing**: Maestro
+Per-platform tech stacks live under `variants/{platform}/`, mirroring
+`oma-backend/variants/`. Each variant owns its own `stack.yaml` (SSOT),
+`tech-stack.md`, `snippets.md`, and API template. This file holds only the
+**cross-platform guidance** shared by every variant plus a pointer index.
 
-## React Native (Alternative)
-- **Framework**: React Native 0.73+
-- **Language**: TypeScript
-- **State**: Redux Toolkit, Zustand
-- **Navigation**: React Navigation 6+
-- **Testing**: Jest, React Native Testing Library
-- **E2E Testing**: Maestro
+## Platform Variants
 
-## Project Structure (Flutter)
+| Platform | Stack manifest | Tech stack | Snippets | API template |
+|----------|----------------|-----------|----------|--------------|
+| Swift (iOS native) | `../variants/swift-ios/stack.yaml` | `../variants/swift-ios/tech-stack.md` | `../variants/swift-ios/snippets.md` | `../variants/swift-ios/api-template.swift` |
+| Flutter | `../variants/flutter/stack.yaml` | `../variants/flutter/tech-stack.md` | `../variants/flutter/snippets.md` | `../variants/flutter/api-template.dart` |
+| React Native | `../variants/react-native/stack.yaml` | `../variants/react-native/tech-stack.md` | `../variants/react-native/snippets.md` | `../variants/react-native/api-template.ts` |
 
-```
-lib/
-  main.dart
-  core/              # Theme, router, utils
-  features/
-    [feature]/
-      data/          # Models, repositories
-      domain/        # Entities, use cases
-      presentation/  # Screens, widgets, providers
-  shared/            # Shared widgets
-```
+Stack selection: detect from project files (`Package.swift` / `pubspec.yaml` /
+`package.json` + `react-native`), or run `/stack-set` to generate a
+project-specific `stack/` from the matching variant baseline. The variant
+`stack.yaml` is the default; `/stack-set` may override any field per project.
 
-## Architecture Pattern
+## Stack at a glance
 
-Clean Architecture with Riverpod:
-1. Entity (Domain) - Pure business objects
-2. Repository Interface (Domain) - Abstract data access
-3. Repository Implementation (Data) - Dio, database
-4. Providers (Presentation) - State management
-5. Screens/Widgets (Presentation) - UI
+| | Swift iOS | Flutter | React Native |
+|---|---|---|---|
+| Language | Swift 5.9+ / Swift 6 | Dart 3.3+ | TypeScript (strict) |
+| UI | SwiftUI | Flutter / Material 3 | React Native |
+| State | Observation (`@Observable`) | Riverpod | Zustand |
+| Navigation | NavigationStack | GoRouter | React Navigation v6 |
+| HTTP transport | URLSession | Dio | Axios |
+| API/data layer | swift-openapi-generator | Repository (Dio) | TanStack Query + `api/` |
+| Response cache (mandatory, repo layer) | hyperoslo/Cache | Drift offline-first repo | TanStack Query |
+| Durable storage | SwiftData / Keychain | Drift / flutter_secure_storage | MMKV / secure-store |
+| Unit test | XCTest / Swift Testing | flutter_test + mocktail | jest + RNTL |
+| E2E | XCUITest | Maestro | Maestro |
 
-## Platform Guidelines
-- Material Design 3 for Android
-- iOS Human Interface Guidelines for iOS
-- Use `Platform.isIOS` for platform-specific code
+## Mandatory: repository-layer response cache
 
-## Swift (iOS Native)
+Every variant **mandates a response cache at the Repository / data layer** — the
+same philosophy across platforms, different idiomatic tooling:
 
-- **Language**: Swift 5.9+ (Swift 6 compatible)
-- **UI Framework**: SwiftUI
-- **State Management**: Observation framework (`@Observable`, iOS 17+)
-- **API Client**: `swift-openapi-generator` (SwiftPM build plugin) + `swift-openapi-runtime` + `swift-openapi-urlsession`
-- **Concurrency**: async/await, structured concurrency
-- **Local Storage**: SwiftData, UserDefaults, Keychain
-- **Testing**: XCTest, XCUITest
+- Cache **decoded domain models**, never raw transport bytes / `HTTPBody` /
+  raw HTTP responses.
+- **Stale-while-revalidate** on reads: serve cached immediately, revalidate in
+  the background, update state.
+- **Invalidate on write**: every create/update/delete drops the affected cache
+  keys so the next read repopulates.
+- Cache key = operation + params (never URLs); explicit TTL (never infinite).
+- The cache is for transient, server-owned data only. Durable user-owned data
+  and secrets stay in the platform's durable store / secure store.
 
-Full reference: `../variants/swift-ios/tech-stack.md`
+See each variant's `tech-stack.md` "Response Cache" section and `snippets.md`
+for the platform-specific implementation.
 
-### Project Layout (App / Core / Features / Shared)
+## Cross-platform guidelines (shared)
 
-```
-Sources/
-  App/          # @main entry, composition root, DI wiring
-  Core/
-    Networking/ # openapi.yaml, generated Client, transport, auth middleware
-    Services/   # AuthService, TokenStore, etc.
-  Features/     # Vertical slices — one folder per feature (View + @Observable ViewModel)
-  Shared/       # Reusable UI components, extensions, utilities
-Tests/
-```
-
-### Architecture Pattern
-
-```
-View (SwiftUI)  ->  @Observable ViewModel  ->  Core Service  ->  Generated Client  ->  Backend
-```
+- **Clean Architecture**: domain → data → presentation (or App/Core/Features/Shared
+  on Swift). Business logic never lives in UI widgets/views.
+- **Platform design**: Material Design 3 on Android, iOS Human Interface
+  Guidelines on iOS. Use platform checks for platform-specific behavior.
+- **State management**: no raw `setState`/ad-hoc state for complex logic — use
+  the variant's state solution.
+- **Networking**: transport-layer interceptors handle auth/retry/logging only;
+  domain-model caching is a repository concern (see above). Handle offline
+  gracefully.
+- **Lifecycle**: dispose controllers / cancel tasks to prevent leaks.
+- **Performance**: 60fps target; test on both platforms.
+- **E2E**: Maestro for critical user flows.
diff --git a/.agents/skills/oma-mobile/variants/README.md b/.agents/skills/oma-mobile/variants/README.md
index a48ba6d..7aeb467 100644
--- a/.agents/skills/oma-mobile/variants/README.md
+++ b/.agents/skills/oma-mobile/variants/README.md
@@ -1,3 +1,43 @@
 # variants/ — Mobile Platform Variants
 
-The `variants/` directory is the intended home for **all** mobile platform stacks, mirroring the layout used by `oma-backend/variants/`. The `swift-ios` variant lands here first. Flutter and React Native assets currently live in `resources/` as a transitional measure — they will migrate to `variants/flutter/` and `variants/react-native/` respectively in a follow-up pass once the variant schema and verification pipeline are fully validated. This asymmetry is intentional and time-boxed: the end-state is every supported mobile platform represented under `variants/{platform}/` with a `stack.yaml`, `tech-stack.md`, `snippets.md`, and an API or screen template file, making the `resources/` directory strictly for protocol and meta documents shared across all platforms.
+The `variants/` directory is the home for **all** mobile platform stacks,
+mirroring the layout used by `oma-backend/variants/`. Every supported platform
+is represented here, each as a self-contained variant.
+
+| Variant | `stack.yaml` `language` | Files |
+|---------|------------------------|-------|
+| `swift-ios/` | `swift` | `stack.yaml`, `tech-stack.md`, `snippets.md`, `api-template.swift` |
+| `flutter/` | `flutter` | `stack.yaml`, `tech-stack.md`, `snippets.md`, `api-template.dart` |
+| `react-native/` | `react-native` | `stack.yaml`, `tech-stack.md`, `snippets.md`, `api-template.ts` |
+
+## Layout contract
+
+Each `variants/{platform}/` directory contains:
+
+- **`stack.yaml`** — the stack SSOT, validated against `stack.schema.json`.
+  Declares `language`, `framework`, `state`, `navigation`, `http_client`,
+  `local_storage`, `response_cache`, `structure`, `source`, and a `verify:`
+  block consumed by `oma verify mobile`.
+- **`tech-stack.md`** — human-readable narrative reference (`stack.yaml` wins on
+  conflict).
+- **`snippets.md`** — copy-paste-ready, numbered code patterns.
+- **`api-template.{swift,dart,ts}`** — the canonical data/repository template,
+  including the mandatory repository-layer response cache.
+
+`stack.schema.json` is the shared schema for all variants.
+
+## resources/ is shared meta only
+
+The sibling `resources/` directory holds **only** cross-platform, protocol, and
+meta documents shared by every variant: `execution-protocol.md`, `examples.md`,
+`checklist.md`, `error-playbook.md`, `tech-stack.md` (the variant index +
+cross-platform guidance), and the screen templates. Platform-specific stack
+narrative and snippets belong in the variant, not in `resources/`.
+
+## Stack selection
+
+A project's stack is detected from its manifest (`Package.swift`, `pubspec.yaml`,
+`package.json` + `react-native`) or chosen via `/stack-set`, which seeds a
+project-specific `stack/` from the matching variant baseline (adapt, never
+blind-copy). The variant `stack.yaml` is the default; any field may be overridden
+per project.
diff --git a/.agents/skills/oma-mobile/variants/flutter/api-template.dart b/.agents/skills/oma-mobile/variants/flutter/api-template.dart
new file mode 100644
index 0000000..33484bb
--- /dev/null
+++ b/.agents/skills/oma-mobile/variants/flutter/api-template.dart
@@ -0,0 +1,428 @@
+/// API Repository Template for Mobile Agent (Flutter)
+///
+/// This file is the Flutter analogue of `variants/swift-ios/api-template.swift`.
+/// It provides a complete, commented [TodoRepository] showing:
+///   - The abstract repository interface (domain layer)
+///   - The offline-first implementation (data layer) with stale-while-revalidate caching
+///   - The Drift-backed local cache (DAO)
+///   - The Dio-backed remote data source
+///   - Cache invalidation on every write (create / toggle / delete)
+///
+/// Caching contract (mandatory — mirrors the swift-ios ResponseCache rules):
+///   - Cache DECODED domain entities ([Todo]) at the Repository layer,
+///     NOT raw HTTP bytes or JSON strings at the Dio transport layer.
+///   - [TodoRepositoryImpl.watchAll] emits the locally-cached Drift rows first
+///     (instant render), then revalidates from the network and re-emits via the
+///     Drift stream (stale-while-revalidate). The UI renders immediately then updates.
+///   - Every write ([create] / [toggle] / [delete]) upserts or removes the
+///     affected Drift row after a successful network response so the stream
+///     re-emits the change without a separate read round-trip.
+///   - Cache key = logical operation name + params (never URLs or raw path strings).
+///   - TTL is explicit ([_kCacheTtl]). No implicit or infinite cache.
+///   - Secrets → flutter_secure_storage. User-authored durable data → a separate
+///     Drift table. This cache is for transient server-owned data only.
+///
+/// File layout (split into real files in production):
+///   lib/features/todos/
+///     domain/
+///       todo.dart                   <- [Todo] domain entity (§ Domain Entity)
+///       todo_repository.dart        <- [TodoRepository] abstract interface
+///     data/
+///       dtos/
+///         todo_dto.dart             <- [TodoDto] JSON transfer object
+///       local/
+///         todos_dao.dart            <- [TodosDao] Drift DAO (this file, combined)
+///       remote/
+///         todos_remote_data_source.dart  <- [TodosRemoteDataSource] Dio calls
+///       todo_repository_impl.dart   <- [TodoRepositoryImpl] offline-first impl
+///
+/// See snippets.md for the Riverpod [AsyncNotifier] that consumes this repository
+/// and the flutter_test + mocktail tests that stub the interface seam.
+
+// ignore_for_file: avoid_print
+
+import 'package:drift/drift.dart';
+import 'package:dio/dio.dart';
+import 'package:freezed_annotation/freezed_annotation.dart';
+import 'package:json_annotation/json_annotation.dart';
+
+// ---------------------------------------------------------------------------
+// DOMAIN ENTITY
+// ---------------------------------------------------------------------------
+// lib/features/todos/domain/todo.dart
+
+part 'api-template.freezed.dart';
+part 'api-template.g.dart';
+
+/// Pure domain entity — no Drift columns, no JSON annotations, no Dio types.
+/// Equality, copyWith, and toString are generated by freezed.
+@freezed
+class Todo with _$Todo {
+  const factory Todo({
+    required int id,
+    required String title,
+    required bool completed,
+    /// Timestamp set by the Repository when the entity is written to the cache.
+    /// Used to evaluate staleness against [_kCacheTtl].
+    required DateTime cachedAt,
+  }) = _Todo;
+}
+
+// ---------------------------------------------------------------------------
+// REPOSITORY INTERFACE (domain layer)
+// ---------------------------------------------------------------------------
+// lib/features/todos/domain/todo_repository.dart
+
+/// Abstract contract that the presentation layer (Riverpod providers) depends on.
+///
+/// Concrete implementations ([TodoRepositoryImpl], stubs, mocks) swap behind
+/// this interface seam. View models and providers NEVER import [TodoRepositoryImpl],
+/// [TodosRemoteDataSource], or [TodosDao] directly.
+abstract interface class TodoRepository {
+  /// Returns a live [Stream] of all todos.
+  ///
+  /// Emits the locally-cached list immediately (may be empty on first launch),
+  /// then silently revalidates from the network when the cache is stale or empty.
+  /// Drift re-emits the stream automatically after each upsert, so the UI
+  /// updates without any explicit refresh call.
+  Stream<List<Todo>> watchAll();
+
+  /// Fetches a single todo by [id].
+  ///
+  /// Returns the cached entity first if available; always revalidates from the
+  /// network and re-emits after. Returns null if not found locally or remotely.
+  Future<Todo?> findById(int id);
+
+  /// Creates a new todo with the given [title].
+  ///
+  /// Hits the network first, then upserts the returned entity into the local
+  /// Drift cache so [watchAll()] emits the new item immediately.
+  Future<Todo> create(String title);
+
+  /// Toggles the [completed] flag on the todo with the given [id].
+  ///
+  /// Hits the network first, then upserts the updated entity into the local cache.
+  Future<Todo> toggle(int id);
+
+  /// Permanently deletes the todo with the given [id].
+  ///
+  /// Hits the network first, then removes the row from the local cache so
+  /// [watchAll()] emits the deletion immediately.
+  Future<void> delete(int id);
+}
+
+// ---------------------------------------------------------------------------
+// JSON TRANSFER OBJECT (data layer)
+// ---------------------------------------------------------------------------
+// lib/features/todos/data/dtos/todo_dto.dart
+
+/// JSON ↔ Dart mapping object. Isolated from the domain entity so that
+/// API shape changes don't propagate into the domain.
+@JsonSerializable()
+class TodoDto {
+  const TodoDto({
+    required this.id,
+    required this.title,
+    required this.completed,
+  });
+
+  final int id;
+  final String title;
+  final bool completed;
+
+  factory TodoDto.fromJson(Map<String, dynamic> json) =>
+      _$TodoDtoFromJson(json);
+
+  Map<String, dynamic> toJson() => _$TodoDtoToJson(this);
+
+  /// Converts this DTO to a domain [Todo].
+  ///
+  /// [cachedAt] is provided by the Repository (not the network) so that
+  /// TTL comparisons use the local clock, not the server's.
+  Todo toDomain({required DateTime cachedAt}) => Todo(
+        id: id,
+        title: title,
+        completed: completed,
+        cachedAt: cachedAt,
+      );
+}
+
+// ---------------------------------------------------------------------------
+// DRIFT TABLE (data layer — local cache)
+// ---------------------------------------------------------------------------
+// lib/core/database/todos_table.dart  (excerpt; actual table defined in AppDatabase)
+
+/// One Drift row per server-owned Todo.
+///
+/// [cachedAt] is written by the Repository at insert/upsert time.
+/// It is compared against [_kCacheTtl] to decide whether to revalidate.
+class TodosTable extends Table {
+  IntColumn get id => integer()();
+  TextColumn get title => text()();
+  BoolColumn get completed =>
+      boolean().withDefault(const Constant(false))();
+  DateTimeColumn get cachedAt => dateTime()();
+
+  @override
+  Set<Column> get primaryKey => {id};
+}
+
+// ---------------------------------------------------------------------------
+// DRIFT DAO (data layer — typed queries)
+// ---------------------------------------------------------------------------
+// lib/features/todos/data/local/todos_dao.dart
+
+/// Type-safe Data Access Object for the todos cache table.
+///
+/// Exposes [Stream]-returning methods so [TodoRepositoryImpl] can forward
+/// live Drift updates directly to Riverpod without any manual polling.
+// Note: In production, annotate with @DriftAccessor and use the generated mixin.
+// Shown here as a plain class for readability; generation is handled by build_runner.
+abstract class TodosDao {
+  /// Live stream — Drift re-emits on every INSERT / UPDATE / DELETE on the table.
+  Stream<List<TodosTableData>> watchAll();
+
+  /// Returns the most recently cached entity for [id], or null if not present.
+  Future<TodosTableData?> findById(int id);
+
+  /// Upserts all rows (INSERT OR REPLACE). Used after a full list fetch.
+  Future<void> upsertAll(List<TodosTableCompanion> rows);
+
+  /// Upserts a single row. Used after create / toggle.
+  Future<void> upsertOne(TodosTableCompanion row);
+
+  /// Removes the row for [id]. Used after delete.
+  Future<void> deleteById(int id);
+}
+
+// Placeholder types so this file compiles standalone.
+// In production these come from app_database.g.dart.
+typedef TodosTableData = Object;
+typedef TodosTableCompanion = Object;
+
+// ---------------------------------------------------------------------------
+// REMOTE DATA SOURCE (data layer — Dio calls)
+// ---------------------------------------------------------------------------
+// lib/features/todos/data/remote/todos_remote_data_source.dart
+
+/// All Dio HTTP calls for the /todos resource.
+///
+/// This class is transport-only — no caching, no domain types.
+/// It maps HTTP responses to [TodoDto] and surfaces [DioException] on failure.
+/// Interceptors (auth, retry, logging) are registered on the [Dio] instance
+/// in `core/network/dio_client.dart`, not here.
+class TodosRemoteDataSource {
+  TodosRemoteDataSource(this._dio);
+
+  final Dio _dio;
+
+  /// GET /todos — returns the full list.
+  Future<List<TodoDto>> fetchAll() async {
+    final response = await _dio.get<List<dynamic>>('/todos');
+    return (response.data ?? [])
+        .map((json) => TodoDto.fromJson(json as Map<String, dynamic>))
+        .toList();
+  }
+
+  /// GET /todos/:id — returns a single item.
+  Future<TodoDto> fetchById(int id) async {
+    final response =
+        await _dio.get<Map<String, dynamic>>('/todos/$id');
+    return TodoDto.fromJson(response.data!);
+  }
+
+  /// POST /todos — creates a new item with the given [title].
+  Future<TodoDto> create(String title) async {
+    final response = await _dio.post<Map<String, dynamic>>(
+      '/todos',
+      data: {'title': title},
+    );
+    return TodoDto.fromJson(response.data!);
+  }
+
+  /// PATCH /todos/:id/toggle — flips the completed flag.
+  Future<TodoDto> toggle(int id) async {
+    final response = await _dio
+        .patch<Map<String, dynamic>>('/todos/$id/toggle');
+    return TodoDto.fromJson(response.data!);
+  }
+
+  /// DELETE /todos/:id — permanently removes the item.
+  Future<void> delete(int id) => _dio.delete<void>('/todos/$id');
+}
+
+// ---------------------------------------------------------------------------
+// OFFLINE-FIRST REPOSITORY IMPLEMENTATION (data layer)
+// ---------------------------------------------------------------------------
+// lib/features/todos/data/todo_repository_impl.dart
+
+/// How long a cached list is considered fresh before a background revalidation
+/// is triggered. Adjust per resource; NEVER use Duration.zero or "infinite".
+const Duration _kCacheTtl = Duration(minutes: 5);
+
+/// Offline-first implementation of [TodoRepository].
+///
+/// # Caching contract
+///
+/// ## Reads (stale-while-revalidate)
+/// [watchAll] and [findById] emit the locally-cached Drift data first.
+/// A background revalidation is triggered whenever the cache is empty or
+/// older than [_kCacheTtl]. After the network response is upserted into
+/// Drift, the DAO stream re-emits automatically — the UI updates without
+/// any explicit refresh call.
+///
+/// ## Writes (invalidate-on-write)
+/// [create] and [toggle] hit the network first, then upsert the returned
+/// entity into Drift so the stream emits the change instantly.
+/// [delete] hits the network first, then removes the Drift row so the
+/// stream emits the deletion instantly.
+///
+/// ## Key strategy
+/// Cache key = the DAO method name + the primary-key param (where applicable).
+/// Examples: "watchAll" → the full [TodosTable]; "findById:42" → a single row.
+/// Never key on URLs or path strings.
+///
+/// ## Boundaries
+/// This class caches transient server-owned data only. Secrets belong in
+/// [FlutterSecureStorage]. Durable user-authored data belongs in a separate
+/// Drift table with an independent retention policy.
+class TodoRepositoryImpl implements TodoRepository {
+  TodoRepositoryImpl({
+    required TodosDao dao,
+    required TodosRemoteDataSource remote,
+  })  : _dao = dao,
+        _remote = remote;
+
+  final TodosDao _dao;
+  final TodosRemoteDataSource _remote;
+
+  // ---------------------------------------------------------------------------
+  // READ — stale-while-revalidate
+  // ---------------------------------------------------------------------------
+
+  @override
+  Stream<List<Todo>> watchAll() async* {
+    // 1. Read the current cache snapshot to determine staleness.
+    final snapshot = await _dao.watchAll().first as List;
+    final now = DateTime.now();
+
+    // 2. Trigger background revalidation if cache is empty or stale.
+    // `ignore()` is intentional — failure is non-fatal when the cache is warm.
+    if (_isStaleOrEmpty(snapshot, now)) {
+      _revalidateAll(now).ignore();
+    }
+
+    // 3. Forward the live Drift stream; it re-emits after every upsert.
+    yield* _dao.watchAll().map(
+          (rows) => (rows as List).map(_rowToEntity).toList(),
+        );
+  }
+
+  @override
+  Future<Todo?> findById(int id) async {
+    final cached = await _dao.findById(id);
+    final now = DateTime.now();
+
+    // Serve stale cached value immediately, then revalidate in background.
+    if (cached != null) {
+      _revalidateById(id, now).ignore();
+      return _rowToEntity(cached);
+    }
+
+    // Cache miss — fetch from network and persist.
+    try {
+      final dto = await _remote.fetchById(id);
+      await _dao.upsertOne(_dtoToCompanion(dto, cachedAt: now));
+      return dto.toDomain(cachedAt: now);
+    } on DioException catch (e) {
+      if (e.response?.statusCode == 404) return null;
+      rethrow;
+    }
+  }
+
+  // ---------------------------------------------------------------------------
+  // WRITE — upsert / delete after success
+  // ---------------------------------------------------------------------------
+
+  @override
+  Future<Todo> create(String title) async {
+    // Network first; cache on success.
+    final dto = await _remote.create(title);
+    final now = DateTime.now();
+    await _dao.upsertOne(_dtoToCompanion(dto, cachedAt: now));
+    // watchAll() stream auto-emits the new row via Drift.
+    return dto.toDomain(cachedAt: now);
+  }
+
+  @override
+  Future<Todo> toggle(int id) async {
+    // Network first; upsert updated entity on success.
+    final dto = await _remote.toggle(id);
+    final now = DateTime.now();
+    await _dao.upsertOne(_dtoToCompanion(dto, cachedAt: now));
+    // watchAll() stream auto-emits the updated row via Drift.
+    return dto.toDomain(cachedAt: now);
+  }
+
+  @override
+  Future<void> delete(int id) async {
+    // Network first; remove local row on success.
+    await _remote.delete(id);
+    await _dao.deleteById(id);
+    // watchAll() stream auto-emits the deletion via Drift.
+  }
+
+  // ---------------------------------------------------------------------------
+  // Private helpers
+  // ---------------------------------------------------------------------------
+
+  bool _isStaleOrEmpty(List<dynamic> rows, DateTime now) {
+    if (rows.isEmpty) return true;
+    // If any row is older than the TTL, revalidate the whole list.
+    return rows.any((row) {
+      // In production: (row as TodosTableData).cachedAt
+      // Placeholder for standalone compilation:
+      return false; // replace with: now.difference(row.cachedAt) > _kCacheTtl
+    });
+  }
+
+  Future<void> _revalidateAll(DateTime now) async {
+    try {
+      final dtos = await _remote.fetchAll();
+      await _dao.upsertAll(
+        dtos.map((dto) => _dtoToCompanion(dto, cachedAt: now)).toList(),
+      );
+    } catch (_) {
+      // Network failure is non-fatal when the cache is warm.
+      // The existing stream emission (stale data) stands silently.
+    }
+  }
+
+  Future<void> _revalidateById(int id, DateTime now) async {
+    try {
+      final dto = await _remote.fetchById(id);
+      await _dao.upsertOne(_dtoToCompanion(dto, cachedAt: now));
+    } catch (_) {
+      // Non-fatal — caller already received the cached value.
+    }
+  }
+
+  /// Maps a Drift table row to a domain [Todo].
+  // ignore: avoid_returning_null_for_void
+  Todo _rowToEntity(dynamic row) {
+    // In production: (row as TodosTableData) gives typed access.
+    // Placeholder for standalone compilation — replace with real field access.
+    throw UnimplementedError('Replace with typed Drift DAO in production.');
+  }
+
+  /// Maps a [TodoDto] to a Drift [TodosTableCompanion] for upsert.
+  // ignore: avoid_returning_null_for_void
+  TodosTableCompanion _dtoToCompanion(
+    TodoDto dto, {
+    required DateTime cachedAt,
+  }) {
+    // In production: TodosTableCompanion(id: Value(dto.id), ...)
+    // Placeholder for standalone compilation — replace with real companion.
+    throw UnimplementedError('Replace with typed Drift companion in production.');
+  }
+}
diff --git a/.agents/skills/oma-mobile/variants/flutter/snippets.md b/.agents/skills/oma-mobile/variants/flutter/snippets.md
new file mode 100644
index 0000000..fe5edc6
--- /dev/null
+++ b/.agents/skills/oma-mobile/variants/flutter/snippets.md
@@ -0,0 +1,1175 @@
+# Mobile Agent - Code Snippets (Flutter)
+
+Copy-paste ready patterns. Use these as starting points; adapt to the specific task.
+Always cache decoded domain entities at the Repository layer — never at the Dio transport layer.
+
+---
+
+## §1. pubspec.yaml Dependencies
+
+```yaml
+# pubspec.yaml
+name: my_app
+description: Flutter app with Clean Architecture + Riverpod + Drift offline-first cache.
+version: 1.0.0+1
+
+environment:
+  sdk: ">=3.3.0 <4.0.0"
+  flutter: ">=3.19.0"
+
+dependencies:
+  flutter:
+    sdk: flutter
+
+  # State management
+  flutter_riverpod: ^2.5.1
+  riverpod_annotation: ^2.3.5
+
+  # Navigation
+  go_router: ^14.2.7
+
+  # HTTP client
+  dio: ^5.4.3+1
+  pretty_dio_logger: ^1.4.0   # debug builds only; wrap in kDebugMode guard
+
+  # Local storage — offline cache (system of record for server-owned data)
+  drift: ^2.18.0
+  sqlite3_flutter_libs: ^0.5.24
+  path_provider: ^2.1.3
+  path: ^1.9.0
+
+  # Secrets
+  flutter_secure_storage: ^9.2.2
+
+  # Lightweight preferences
+  shared_preferences: ^2.3.2
+
+  # Value types / equality (optional but recommended for domain entities)
+  freezed_annotation: ^2.4.4
+  json_annotation: ^4.9.0
+
+dev_dependencies:
+  flutter_test:
+    sdk: flutter
+
+  # Code generation
+  build_runner: ^2.4.11
+  riverpod_generator: ^2.4.3
+  drift_dev: ^2.18.0
+  go_router_builder: ^2.7.1
+  freezed: ^2.5.7
+  json_serializable: ^6.8.0
+
+  # Test mocking
+  mocktail: ^1.0.4
+
+  # Lint
+  flutter_lints: ^4.0.0
+```
+
+Run code generation after adding packages:
+
+```bash
+flutter pub get
+dart run build_runner build --delete-conflicting-outputs
+```
+
+---
+
+## §2. GoRouter with Typed Routes
+
+```dart
+// lib/core/router/app_router.dart
+import 'package:flutter/material.dart';
+import 'package:go_router/go_router.dart';
+import 'package:go_router_builder/go_router_builder.dart';
+import 'package:flutter_riverpod/flutter_riverpod.dart';
+import 'package:riverpod_annotation/riverpod_annotation.dart';
+import '../../features/todos/presentation/screens/todos_screen.dart';
+import '../../features/todos/presentation/screens/todo_detail_screen.dart';
+
+part 'app_router.g.dart';
+
+// ---------------------------------------------------------------------------
+// Typed route declarations — go_router_builder generates push()/go() helpers
+// ---------------------------------------------------------------------------
+
+@TypedGoRoute<TodosRoute>(
+  path: '/',
+  routes: [
+    TypedGoRoute<TodoDetailRoute>(path: 'todos/:id'),
+  ],
+)
+class TodosRoute extends GoRouteData {
+  const TodosRoute();
+  @override
+  Widget build(BuildContext context, GoRouterState state) =>
+      const TodosScreen();
+}
+
+class TodoDetailRoute extends GoRouteData {
+  const TodoDetailRoute({required this.id});
+  final int id;
+  @override
+  Widget build(BuildContext context, GoRouterState state) =>
+      TodoDetailScreen(todoId: id);
+}
+
+// ---------------------------------------------------------------------------
+// Router provider — singleton, lives as long as the ProviderScope
+// ---------------------------------------------------------------------------
+
+@Riverpod(keepAlive: true)
+GoRouter appRouter(AppRouterRef ref) {
+  return GoRouter(
+    initialLocation: '/',
+    debugLogDiagnostics: true,
+    routes: $appRoutes,                         // generated list
+    redirect: (context, state) {
+      // Global auth guard example — replace with real auth state:
+      // final isAuthenticated = ref.read(authProvider).isAuthenticated;
+      // if (!isAuthenticated && state.matchedLocation != '/login') return '/login';
+      return null;
+    },
+  );
+}
+```
+
+Usage in a screen:
+
+```dart
+// Navigate to detail:
+TodoDetailRoute(id: todo.id).push(context);
+
+// Navigate replacing current:
+const TodosRoute().go(context);
+```
+
+---
+
+## §3. Domain Entity + Repository Interface + Offline-First Implementation
+
+### §3a. Domain Entity
+
+```dart
+// lib/features/todos/domain/todo.dart
+import 'package:freezed_annotation/freezed_annotation.dart';
+
+part 'todo.freezed.dart';
+
+/// Pure domain entity — no Drift, no Dio, no JSON annotations.
+/// Equality and copyWith are generated by freezed.
+@freezed
+class Todo with _$Todo {
+  const factory Todo({
+    required int id,
+    required String title,
+    required bool completed,
+    required DateTime cachedAt,   // populated by the Repository when storing
+  }) = _Todo;
+}
+```
+
+### §3b. Repository Interface (domain layer)
+
+```dart
+// lib/features/todos/domain/todo_repository.dart
+import 'todo.dart';
+
+/// Abstract contract the presentation layer depends on.
+/// Concrete implementations (online, offline-first, stub) swap behind this seam.
+abstract interface class TodoRepository {
+  /// Emits the cached list immediately, then re-emits after network revalidation.
+  /// Callers never interact with Drift or Dio directly.
+  Stream<List<Todo>> watchAll();
+
+  Future<Todo> create(String title);
+  Future<Todo> toggle(int id);
+  Future<void> delete(int id);
+}
+```
+
+### §3c. Drift Table + DAO (data layer — local cache)
+
+```dart
+// lib/core/database/app_database.dart
+import 'dart:io';
+import 'package:drift/drift.dart';
+import 'package:drift/native.dart';
+import 'package:path_provider/path_provider.dart';
+import 'package:path/path.dart' as p;
+import 'package:riverpod_annotation/riverpod_annotation.dart';
+import '../../features/todos/data/local/todos_dao.dart';
+
+part 'app_database.g.dart';
+
+// ---------------------------------------------------------------------------
+// Todos cache table
+// ---------------------------------------------------------------------------
+
+/// One row per server-owned Todo. `cachedAt` drives TTL checks.
+class TodosTable extends Table {
+  IntColumn get id       => integer()();
+  TextColumn get title   => text()();
+  BoolColumn get completed => boolean().withDefault(const Constant(false))();
+  DateTimeColumn get cachedAt => dateTime()();
+
+  @override
+  Set<Column> get primaryKey => {id};
+}
+
+@DriftDatabase(tables: [TodosTable], daos: [TodosDao])
+class AppDatabase extends _$AppDatabase {
+  AppDatabase() : super(_openConnection());
+  AppDatabase.forTesting(super.executor);   // pass NativeDatabase.memory() in tests
+
+  @override
+  int get schemaVersion => 1;
+}
+
+LazyDatabase _openConnection() {
+  return LazyDatabase(() async {
+    final dir = await getApplicationDocumentsDirectory();
+    final file = File(p.join(dir.path, 'app.sqlite'));
+    return NativeDatabase.createInBackground(file);
+  });
+}
+
+// ---------------------------------------------------------------------------
+// App-wide DB provider
+// ---------------------------------------------------------------------------
+
+@Riverpod(keepAlive: true)
+AppDatabase appDatabase(AppDatabaseRef ref) {
+  final db = AppDatabase();
+  ref.onDispose(db.close);
+  return db;
+}
+```
+
+```dart
+// lib/features/todos/data/local/todos_dao.dart
+import 'package:drift/drift.dart';
+import '../../../../core/database/app_database.dart';
+
+part 'todos_dao.g.dart';
+
+@DriftAccessor(tables: [TodosTable])
+class TodosDao extends DatabaseAccessor<AppDatabase> with _$TodosDaoMixin {
+  TodosDao(super.db);
+
+  /// Live stream — emits updated rows whenever Drift detects a change.
+  Stream<List<TodosTableData>> watchAll() => select(todosTable).watch();
+
+  /// Upsert full list from network (replaces stale rows).
+  Future<void> upsertAll(List<TodosTableCompanion> rows) =>
+      batch((b) => b.insertAllOnConflictUpdate(todosTable, rows));
+
+  /// Upsert a single row after create/toggle.
+  Future<void> upsertOne(TodosTableCompanion row) =>
+      into(todosTable).insertOnConflictUpdate(row);
+
+  Future<void> deleteById(int id) =>
+      (delete(todosTable)..where((t) => t.id.equals(id))).go();
+
+  Future<TodosTableData?> findById(int id) =>
+      (select(todosTable)..where((t) => t.id.equals(id))).getSingleOrNull();
+}
+```
+
+### §3d. Remote Data Source (data layer — Dio calls)
+
+```dart
+// lib/features/todos/data/remote/todos_remote_data_source.dart
+import 'package:dio/dio.dart';
+import '../dtos/todo_dto.dart';
+
+/// All Dio calls for the /todos resource.
+/// No caching here — transport concerns only.
+class TodosRemoteDataSource {
+  TodosRemoteDataSource(this._dio);
+  final Dio _dio;
+
+  Future<List<TodoDto>> fetchAll() async {
+    final response = await _dio.get<List<dynamic>>('/todos');
+    return (response.data ?? [])
+        .map((json) => TodoDto.fromJson(json as Map<String, dynamic>))
+        .toList();
+  }
+
+  Future<TodoDto> create(String title) async {
+    final response = await _dio.post<Map<String, dynamic>>(
+      '/todos',
+      data: {'title': title},
+    );
+    return TodoDto.fromJson(response.data!);
+  }
+
+  Future<TodoDto> toggle(int id) async {
+    final response = await _dio.patch<Map<String, dynamic>>('/todos/$id/toggle');
+    return TodoDto.fromJson(response.data!);
+  }
+
+  Future<void> delete(int id) => _dio.delete<void>('/todos/$id');
+}
+```
+
+```dart
+// lib/features/todos/data/dtos/todo_dto.dart
+import 'package:json_annotation/json_annotation.dart';
+import '../../domain/todo.dart';
+
+part 'todo_dto.g.dart';
+
+/// JSON transfer object. Isolated from the domain entity.
+@JsonSerializable()
+class TodoDto {
+  const TodoDto({
+    required this.id,
+    required this.title,
+    required this.completed,
+  });
+
+  final int id;
+  final String title;
+  final bool completed;
+
+  factory TodoDto.fromJson(Map<String, dynamic> json) => _$TodoDtoFromJson(json);
+  Map<String, dynamic> toJson() => _$TodoDtoToJson(this);
+
+  /// Map to domain entity; `cachedAt` is set by the Repository, not the DTO.
+  Todo toDomain({required DateTime cachedAt}) => Todo(
+        id: id,
+        title: title,
+        completed: completed,
+        cachedAt: cachedAt,
+      );
+}
+```
+
+### §3e. Offline-First Repository Implementation (data layer)
+
+```dart
+// lib/features/todos/data/todo_repository_impl.dart
+import 'package:drift/drift.dart';
+import '../../../../core/database/app_database.dart';
+import '../domain/todo.dart';
+import '../domain/todo_repository.dart';
+import 'dtos/todo_dto.dart';
+import 'local/todos_dao.dart';
+import 'remote/todos_remote_data_source.dart';
+
+/// TTL for the todos list cache. Revalidate if the newest row is older than this.
+const _kCacheTtl = Duration(minutes: 5);
+
+/// Offline-first implementation of [TodoRepository].
+///
+/// Caching contract:
+///   - [watchAll] maps the Drift stream to domain entities and emits immediately.
+///     A background revalidation triggers whenever the cache is stale (> TTL)
+///     or empty. Drift re-emits the stream automatically after each upsert.
+///   - Writes ([create], [toggle], [delete]) hit the network first, then upsert
+///     or delete the local Drift row so the stream emits the change instantly.
+///   - Cache key = logical operation, never URLs. TTL is explicit; no infinite cache.
+///   - Secrets and user-authored data are NOT stored here — use flutter_secure_storage
+///     or a separate Drift table with a different retention policy.
+class TodoRepositoryImpl implements TodoRepository {
+  TodoRepositoryImpl({
+    required TodosDao dao,
+    required TodosRemoteDataSource remote,
+  })  : _dao = dao,
+        _remote = remote;
+
+  final TodosDao _dao;
+  final TodosRemoteDataSource _remote;
+
+  // ---------------------------------------------------------------------------
+  // READ — stale-while-revalidate
+  // ---------------------------------------------------------------------------
+
+  @override
+  Stream<List<Todo>> watchAll() async* {
+    // 1. Emit cached rows immediately (may be empty on first run).
+    final initial = await _dao.watchAll().first;
+    final now = DateTime.now();
+
+    // 2. Determine whether revalidation is needed.
+    final isStale = initial.isEmpty ||
+        initial.any((row) => now.difference(row.cachedAt) > _kCacheTtl);
+
+    if (isStale) {
+      // 3. Fetch from network in the background and upsert into Drift.
+      // Drift's stream will re-emit automatically after the upsert.
+      _revalidate().ignore();
+    }
+
+    // 4. Forward the live Drift stream (emits on every upsert from step 3 onward).
+    yield* _dao.watchAll().map(
+          (rows) => rows.map(_rowToEntity).toList(),
+        );
+  }
+
+  Future<void> _revalidate() async {
+    try {
+      final dtos = await _remote.fetchAll();
+      final now = DateTime.now();
+      await _dao.upsertAll(
+        dtos.map((dto) => _dtoToCompanion(dto, cachedAt: now)).toList(),
+      );
+    } catch (_) {
+      // Network failure is non-fatal when the cache is warm.
+      // The existing stream emission (stale data) stands.
+    }
+  }
+
+  // ---------------------------------------------------------------------------
+  // WRITE — invalidate/update cache after success
+  // ---------------------------------------------------------------------------
+
+  @override
+  Future<Todo> create(String title) async {
+    final dto = await _remote.create(title);
+    final now = DateTime.now();
+    // Upsert the new row so watchAll() emits without waiting for a revalidation.
+    await _dao.upsertOne(_dtoToCompanion(dto, cachedAt: now));
+    return dto.toDomain(cachedAt: now);
+  }
+
+  @override
+  Future<Todo> toggle(int id) async {
+    final dto = await _remote.toggle(id);
+    final now = DateTime.now();
+    await _dao.upsertOne(_dtoToCompanion(dto, cachedAt: now));
+    return dto.toDomain(cachedAt: now);
+  }
+
+  @override
+  Future<void> delete(int id) async {
+    await _remote.delete(id);
+    // Remove the row so the stream emits the deletion immediately.
+    await _dao.deleteById(id);
+  }
+
+  // ---------------------------------------------------------------------------
+  // Helpers
+  // ---------------------------------------------------------------------------
+
+  Todo _rowToEntity(TodosTableData row) => Todo(
+        id: row.id,
+        title: row.title,
+        completed: row.completed,
+        cachedAt: row.cachedAt,
+      );
+
+  TodosTableCompanion _dtoToCompanion(TodoDto dto, {required DateTime cachedAt}) =>
+      TodosTableCompanion(
+        id: Value(dto.id),
+        title: Value(dto.title),
+        completed: Value(dto.completed),
+        cachedAt: Value(cachedAt),
+      );
+}
+```
+
+---
+
+## §4. Riverpod AsyncNotifier Consuming the Repository Stream
+
+```dart
+// lib/features/todos/presentation/providers/todos_provider.dart
+import 'package:riverpod_annotation/riverpod_annotation.dart';
+import 'package:flutter_riverpod/flutter_riverpod.dart';
+import '../../domain/todo.dart';
+import '../../domain/todo_repository.dart';
+import '../../../../core/di/providers.dart';   // todoRepositoryProvider
+
+part 'todos_provider.g.dart';
+
+/// Exposes the offline-first todo list.
+///
+/// Riverpod converts the Repository's Stream into AsyncValue<List<Todo>>.
+/// The UI receives AsyncValue.loading() on first subscription, then
+/// AsyncValue.data(cachedList) on the first Drift emission, then
+/// AsyncValue.data(freshList) after network revalidation — without any
+/// loading flicker if the cache is warm.
+@riverpod
+class TodosNotifier extends _$TodosNotifier {
+  @override
+  Stream<List<Todo>> build() {
+    final repo = ref.watch(todoRepositoryProvider);
+    return repo.watchAll();
+  }
+
+  Future<void> create(String title) async {
+    final repo = ref.read(todoRepositoryProvider);
+    await repo.create(title);
+    // Stream auto-updates via Drift; no manual state mutation needed.
+  }
+
+  Future<void> toggle(int id) async {
+    final repo = ref.read(todoRepositoryProvider);
+    await repo.toggle(id);
+  }
+
+  Future<void> delete(int id) async {
+    final repo = ref.read(todoRepositoryProvider);
+    await repo.delete(id);
+  }
+}
+```
+
+```dart
+// lib/core/di/providers.dart
+import 'package:dio/dio.dart';
+import 'package:flutter_riverpod/flutter_riverpod.dart';
+import 'package:riverpod_annotation/riverpod_annotation.dart';
+import '../database/app_database.dart';
+import '../network/dio_client.dart';
+import '../../features/todos/data/local/todos_dao.dart';
+import '../../features/todos/data/remote/todos_remote_data_source.dart';
+import '../../features/todos/data/todo_repository_impl.dart';
+import '../../features/todos/domain/todo_repository.dart';
+
+part 'providers.g.dart';
+
+@Riverpod(keepAlive: true)
+Dio dio(DioRef ref) => buildDioClient(ref);
+
+@Riverpod(keepAlive: true)
+TodosDao todosDao(TodosDaoRef ref) {
+  final db = ref.watch(appDatabaseProvider);
+  return db.todosDao;
+}
+
+@Riverpod(keepAlive: true)
+TodosRemoteDataSource todosRemoteDataSource(TodosRemoteDataSourceRef ref) =>
+    TodosRemoteDataSource(ref.watch(dioProvider));
+
+@Riverpod(keepAlive: true)
+TodoRepository todoRepository(TodoRepositoryRef ref) => TodoRepositoryImpl(
+      dao: ref.watch(todosDaoProvider),
+      remote: ref.watch(todosRemoteDataSourceProvider),
+    );
+```
+
+---
+
+## §5. Dio Client with Auth + Retry + Logging Interceptors
+
+```dart
+// lib/core/network/dio_client.dart
+import 'package:dio/dio.dart';
+import 'package:flutter/foundation.dart';
+import 'package:flutter_riverpod/flutter_riverpod.dart';
+import 'package:flutter_secure_storage/flutter_secure_storage.dart';
+import 'package:pretty_dio_logger/pretty_dio_logger.dart';
+
+/// Builds the app-wide Dio instance with interceptors.
+/// Called once from the DI layer; never instantiated in features directly.
+Dio buildDioClient(Ref ref) {
+  final dio = Dio(
+    BaseOptions(
+      baseUrl: const String.fromEnvironment(
+        'API_BASE_URL',
+        defaultValue: 'https://api.example.com',
+      ),
+      connectTimeout: const Duration(seconds: 15),
+      receiveTimeout: const Duration(seconds: 30),
+      headers: {'Content-Type': 'application/json'},
+    ),
+  );
+
+  // Transport-layer interceptors only — no caching here.
+  dio.interceptors.addAll([
+    AuthInterceptor(const FlutterSecureStorage()),
+    RetryInterceptor(dio),
+    if (kDebugMode) PrettyDioLogger(requestBody: true, responseBody: true),
+  ]);
+
+  return dio;
+}
+
+// ---------------------------------------------------------------------------
+// Auth interceptor — injects Bearer token from secure storage
+// ---------------------------------------------------------------------------
+
+class AuthInterceptor extends Interceptor {
+  AuthInterceptor(this._storage);
+  final FlutterSecureStorage _storage;
+
+  @override
+  Future<void> onRequest(
+    RequestOptions options,
+    RequestInterceptorHandler handler,
+  ) async {
+    final token = await _storage.read(key: 'access_token');
+    if (token != null) {
+      options.headers['Authorization'] = 'Bearer $token';
+    }
+    handler.next(options);
+  }
+
+  @override
+  void onError(DioException err, ErrorInterceptorHandler handler) {
+    if (err.response?.statusCode == 401) {
+      // TODO: trigger token refresh or sign-out flow via ref
+      // For now, pass the error through to the caller.
+    }
+    handler.next(err);
+  }
+}
+
+// ---------------------------------------------------------------------------
+// Retry interceptor — exponential back-off on transient failures
+// ---------------------------------------------------------------------------
+
+class RetryInterceptor extends Interceptor {
+  RetryInterceptor(this._dio, {this.maxRetries = 3});
+  final Dio _dio;
+  final int maxRetries;
+
+  @override
+  Future<void> onError(
+    DioException err,
+    ErrorInterceptorHandler handler,
+  ) async {
+    final attempt = err.requestOptions.extra['_retryCount'] as int? ?? 0;
+    final isRetriable = err.type == DioExceptionType.connectionTimeout ||
+        err.type == DioExceptionType.receiveTimeout ||
+        err.type == DioExceptionType.connectionError;
+
+    if (isRetriable && attempt < maxRetries) {
+      await Future.delayed(Duration(milliseconds: 200 * (1 << attempt)));
+      try {
+        final opts = err.requestOptions
+          ..extra['_retryCount'] = attempt + 1;
+        final response = await _dio.fetch<dynamic>(opts);
+        handler.resolve(response);
+        return;
+      } catch (_) {
+        // Fall through to next handler on retry failure.
+      }
+    }
+    handler.next(err);
+  }
+}
+```
+
+---
+
+## §6. Todos Screen (ConsumerStatefulWidget)
+
+```dart
+// lib/features/todos/presentation/screens/todos_screen.dart
+import 'package:flutter/material.dart';
+import 'package:flutter_riverpod/flutter_riverpod.dart';
+import '../../domain/todo.dart';
+import '../providers/todos_provider.dart';
+import '../widgets/todo_list_item.dart';
+import '../../../../shared/widgets/empty_state.dart';
+import '../../../../shared/widgets/error_view.dart';
+
+class TodosScreen extends ConsumerStatefulWidget {
+  const TodosScreen({super.key});
+
+  @override
+  ConsumerState<TodosScreen> createState() => _TodosScreenState();
+}
+
+class _TodosScreenState extends ConsumerState<TodosScreen> {
+  final _titleController = TextEditingController();
+
+  @override
+  void dispose() {
+    _titleController.dispose();   // always dispose controllers
+    super.dispose();
+  }
+
+  @override
+  Widget build(BuildContext context) {
+    final todosAsync = ref.watch(todosNotifierProvider);
+
+    return Scaffold(
+      appBar: AppBar(
+        title: const Text('Todos'),
+        actions: [
+          IconButton(
+            icon: const Icon(Icons.refresh),
+            tooltip: 'Refresh',
+            // Invalidate causes build() to re-subscribe to watchAll()
+            // which triggers a fresh revalidation cycle.
+            onPressed: () => ref.invalidate(todosNotifierProvider),
+          ),
+        ],
+      ),
+      body: todosAsync.when(
+        // Warm cache is available — render immediately, no spinner.
+        // Riverpod passes skipLoadingOnRefresh: true by default in Riverpod 2.x
+        // so a background revalidation does not re-show the loading state.
+        data: (todos) => todos.isEmpty
+            ? const EmptyState(
+                icon: Icons.check_circle_outline,
+                title: 'No todos yet',
+                subtitle: 'Add your first todo below.',
+              )
+            : _TodoList(todos: todos),
+        loading: () => const Center(child: CircularProgressIndicator()),
+        error: (err, _) => ErrorView(
+          message: err.toString(),
+          onRetry: () => ref.invalidate(todosNotifierProvider),
+        ),
+      ),
+      floatingActionButton: FloatingActionButton(
+        onPressed: _showAddDialog,
+        tooltip: 'Add todo',
+        child: const Icon(Icons.add),
+      ),
+    );
+  }
+
+  void _showAddDialog() {
+    _titleController.clear();
+    showDialog<void>(
+      context: context,
+      builder: (ctx) => AlertDialog(
+        title: const Text('New Todo'),
+        content: TextField(
+          controller: _titleController,
+          autofocus: true,
+          decoration: const InputDecoration(
+            labelText: 'Title',
+            hintText: 'What needs to be done?',
+          ),
+          onSubmitted: (_) => _submitAdd(ctx),
+        ),
+        actions: [
+          TextButton(
+            onPressed: () => Navigator.of(ctx).pop(),
+            child: const Text('Cancel'),
+          ),
+          FilledButton(
+            onPressed: () => _submitAdd(ctx),
+            child: const Text('Add'),
+          ),
+        ],
+      ),
+    );
+  }
+
+  Future<void> _submitAdd(BuildContext dialogCtx) async {
+    final title = _titleController.text.trim();
+    if (title.isEmpty) return;
+    Navigator.of(dialogCtx).pop();
+    await ref.read(todosNotifierProvider.notifier).create(title);
+  }
+}
+
+// ---------------------------------------------------------------------------
+// Internal list widget
+// ---------------------------------------------------------------------------
+
+class _TodoList extends ConsumerWidget {
+  const _TodoList({required this.todos});
+  final List<Todo> todos;
+
+  @override
+  Widget build(BuildContext context, WidgetRef ref) {
+    return RefreshIndicator(
+      // Pull-to-refresh forces a full revalidation cycle.
+      onRefresh: () async => ref.invalidate(todosNotifierProvider),
+      child: ListView.builder(
+        itemCount: todos.length,
+        itemBuilder: (ctx, i) => TodoListItem(
+          todo: todos[i],
+          onToggle: () =>
+              ref.read(todosNotifierProvider.notifier).toggle(todos[i].id),
+          onDelete: () =>
+              ref.read(todosNotifierProvider.notifier).delete(todos[i].id),
+        ),
+      ),
+    );
+  }
+}
+```
+
+---
+
+## §7. Shared Widgets (EmptyState, ErrorView, TodoListItem)
+
+```dart
+// lib/shared/widgets/empty_state.dart
+import 'package:flutter/material.dart';
+
+class EmptyState extends StatelessWidget {
+  const EmptyState({
+    super.key,
+    required this.icon,
+    required this.title,
+    this.subtitle,
+  });
+
+  final IconData icon;
+  final String title;
+  final String? subtitle;
+
+  @override
+  Widget build(BuildContext context) {
+    final theme = Theme.of(context);
+    return Center(
+      child: Padding(
+        padding: const EdgeInsets.all(32),
+        child: Column(
+          mainAxisSize: MainAxisSize.min,
+          children: [
+            Icon(icon, size: 64, color: theme.colorScheme.secondary),
+            const SizedBox(height: 16),
+            Text(title, style: theme.textTheme.titleLarge),
+            if (subtitle != null) ...[
+              const SizedBox(height: 8),
+              Text(
+                subtitle!,
+                style: theme.textTheme.bodyMedium?.copyWith(
+                  color: theme.colorScheme.onSurface.withOpacity(0.6),
+                ),
+                textAlign: TextAlign.center,
+              ),
+            ],
+          ],
+        ),
+      ),
+    );
+  }
+}
+```
+
+```dart
+// lib/shared/widgets/error_view.dart
+import 'package:flutter/material.dart';
+
+class ErrorView extends StatelessWidget {
+  const ErrorView({super.key, required this.message, this.onRetry});
+
+  final String message;
+  final VoidCallback? onRetry;
+
+  @override
+  Widget build(BuildContext context) {
+    final theme = Theme.of(context);
+    return Center(
+      child: Padding(
+        padding: const EdgeInsets.all(24),
+        child: Column(
+          mainAxisSize: MainAxisSize.min,
+          children: [
+            Icon(Icons.error_outline, size: 64, color: theme.colorScheme.error),
+            const SizedBox(height: 16),
+            Text(
+              'Something went wrong',
+              style: theme.textTheme.titleLarge,
+              textAlign: TextAlign.center,
+            ),
+            const SizedBox(height: 8),
+            Text(
+              message,
+              style: theme.textTheme.bodyMedium?.copyWith(
+                color: theme.colorScheme.onSurface.withOpacity(0.6),
+              ),
+              textAlign: TextAlign.center,
+            ),
+            if (onRetry != null) ...[
+              const SizedBox(height: 24),
+              FilledButton.icon(
+                onPressed: onRetry,
+                icon: const Icon(Icons.refresh),
+                label: const Text('Try Again'),
+              ),
+            ],
+          ],
+        ),
+      ),
+    );
+  }
+}
+```
+
+```dart
+// lib/features/todos/presentation/widgets/todo_list_item.dart
+import 'package:flutter/material.dart';
+import '../../domain/todo.dart';
+
+class TodoListItem extends StatelessWidget {
+  const TodoListItem({
+    super.key,
+    required this.todo,
+    required this.onToggle,
+    required this.onDelete,
+  });
+
+  final Todo todo;
+  final VoidCallback onToggle;
+  final VoidCallback onDelete;
+
+  @override
+  Widget build(BuildContext context) {
+    return ListTile(
+      leading: Checkbox(
+        value: todo.completed,
+        onChanged: (_) => onToggle(),
+      ),
+      title: Text(
+        todo.title,
+        style: todo.completed
+            ? TextStyle(
+                decoration: TextDecoration.lineThrough,
+                color: Theme.of(context).colorScheme.onSurface.withOpacity(0.5),
+              )
+            : null,
+      ),
+      trailing: IconButton(
+        icon: const Icon(Icons.delete_outline),
+        tooltip: 'Delete',
+        onPressed: onDelete,
+      ),
+    );
+  }
+}
+```
+
+---
+
+## §8. App Entry Point (main.dart)
+
+```dart
+// lib/main.dart
+import 'package:flutter/material.dart';
+import 'package:flutter_riverpod/flutter_riverpod.dart';
+import 'core/router/app_router.dart';
+import 'core/theme/app_theme.dart';
+
+void main() {
+  WidgetsFlutterBinding.ensureInitialized();
+  runApp(
+    // ProviderScope is the Riverpod root — must wrap the entire widget tree.
+    const ProviderScope(child: MyApp()),
+  );
+}
+
+class MyApp extends ConsumerWidget {
+  const MyApp({super.key});
+
+  @override
+  Widget build(BuildContext context, WidgetRef ref) {
+    final router = ref.watch(appRouterProvider);
+
+    return MaterialApp.router(
+      title: 'My App',
+      theme: AppTheme.light(),
+      darkTheme: AppTheme.dark(),
+      routerConfig: router,
+      debugShowCheckedModeBanner: false,
+    );
+  }
+}
+```
+
+---
+
+## §9. flutter_test + mocktail Unit Tests
+
+```dart
+// test/features/todos/todos_provider_test.dart
+import 'package:flutter_riverpod/flutter_riverpod.dart';
+import 'package:flutter_test/flutter_test.dart';
+import 'package:mocktail/mocktail.dart';
+import 'package:my_app/features/todos/domain/todo.dart';
+import 'package:my_app/features/todos/domain/todo_repository.dart';
+import 'package:my_app/features/todos/presentation/providers/todos_provider.dart';
+import 'package:my_app/core/di/providers.dart';
+
+// ---------------------------------------------------------------------------
+// Mock — depends on the abstract repository interface, not the Dio/Drift impl
+// ---------------------------------------------------------------------------
+
+class MockTodoRepository extends Mock implements TodoRepository {}
+
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+
+final _now = DateTime(2025, 1, 1);
+
+Todo _makeTodo(int id, {bool completed = false}) => Todo(
+      id: id,
+      title: 'Todo $id',
+      completed: completed,
+      cachedAt: _now,
+    );
+
+// ---------------------------------------------------------------------------
+// Tests
+// ---------------------------------------------------------------------------
+
+void main() {
+  late MockTodoRepository mockRepo;
+  late ProviderContainer container;
+
+  setUp(() {
+    mockRepo = MockTodoRepository();
+    container = ProviderContainer(
+      overrides: [
+        // Swap the real repository for the mock at the DI seam.
+        todoRepositoryProvider.overrideWithValue(mockRepo),
+      ],
+    );
+    addTearDown(container.dispose);
+  });
+
+  test('todosNotifierProvider emits data from repository stream', () async {
+    final todos = [_makeTodo(1), _makeTodo(2)];
+    when(() => mockRepo.watchAll()).thenAnswer(
+      (_) => Stream.value(todos),
+    );
+
+    // Wait for the async stream to emit.
+    final result = await container
+        .read(todosNotifierProvider.future);
+
+    expect(result, equals(todos));
+  });
+
+  test('todosNotifierProvider emits empty list when repository returns []', () async {
+    when(() => mockRepo.watchAll()).thenAnswer((_) => Stream.value([]));
+
+    final result = await container.read(todosNotifierProvider.future);
+
+    expect(result, isEmpty);
+  });
+
+  test('todosNotifierProvider propagates repository errors', () async {
+    when(() => mockRepo.watchAll())
+        .thenAnswer((_) => Stream.error(Exception('network error')));
+
+    final asyncValue = await container
+        .read(todosNotifierProvider.future)
+        .then((_) => null)
+        .onError((e, _) => e);
+
+    expect(asyncValue, isA<Exception>());
+  });
+
+  test('create calls repository and stream auto-updates', () async {
+    final initial = [_makeTodo(1)];
+    final afterCreate = [_makeTodo(1), _makeTodo(2, completed: false)];
+    var streamIndex = 0;
+    final streams = [Stream.value(initial), Stream.value(afterCreate)];
+
+    when(() => mockRepo.watchAll())
+        .thenAnswer((_) => streams[streamIndex++ % streams.length]);
+    when(() => mockRepo.create(any()))
+        .thenAnswer((_) async => _makeTodo(2));
+
+    await container.read(todosNotifierProvider.notifier).create('Todo 2');
+
+    verify(() => mockRepo.create('Todo 2')).called(1);
+  });
+}
+```
+
+```dart
+// test/features/todos/todo_repository_impl_test.dart
+// Tests the real TodoRepositoryImpl with an in-memory Drift database.
+import 'package:drift/native.dart';
+import 'package:flutter_test/flutter_test.dart';
+import 'package:mocktail/mocktail.dart';
+import 'package:my_app/core/database/app_database.dart';
+import 'package:my_app/features/todos/data/dtos/todo_dto.dart';
+import 'package:my_app/features/todos/data/local/todos_dao.dart';
+import 'package:my_app/features/todos/data/remote/todos_remote_data_source.dart';
+import 'package:my_app/features/todos/data/todo_repository_impl.dart';
+
+class MockTodosRemoteDataSource extends Mock implements TodosRemoteDataSource {}
+
+void main() {
+  late AppDatabase db;
+  late TodosDao dao;
+  late MockTodosRemoteDataSource mockRemote;
+  late TodoRepositoryImpl repo;
+
+  setUp(() {
+    db = AppDatabase.forTesting(NativeDatabase.memory());
+    dao = db.todosDao;
+    mockRemote = MockTodosRemoteDataSource();
+    repo = TodoRepositoryImpl(dao: dao, remote: mockRemote);
+  });
+
+  tearDown(() => db.close());
+
+  test('watchAll emits cached rows immediately then revalidates', () async {
+    final now = DateTime.now();
+    // Pre-populate the cache with a stale entry.
+    await dao.upsertAll([
+      TodosTableCompanion.insert(
+        id: const Value(1),
+        title: const Value('Cached todo'),
+        completed: const Value(false),
+        cachedAt: Value(now.subtract(const Duration(hours: 1))),  // older than TTL
+      ),
+    ]);
+
+    final freshDtos = [
+      TodoDto(id: 1, title: 'Fresh todo', completed: false),
+    ];
+    when(() => mockRemote.fetchAll()).thenAnswer((_) async => freshDtos);
+
+    final emissions = <int>[];
+    await for (final todos in repo.watchAll().take(2)) {
+      emissions.add(todos.length);
+    }
+
+    // First emission: cached row; second: after revalidation.
+    expect(emissions, [1, 1]);
+    verify(() => mockRemote.fetchAll()).called(1);
+  });
+
+  test('create upserts into Drift and stream emits new item', () async {
+    when(() => mockRemote.create(any()))
+        .thenAnswer((_) async => TodoDto(id: 99, title: 'New', completed: false));
+
+    await repo.create('New');
+
+    final rows = await dao.watchAll().first;
+    expect(rows.any((r) => r.id == 99), isTrue);
+  });
+
+  test('delete removes row from Drift after remote success', () async {
+    final now = DateTime.now();
+    await dao.upsertAll([
+      TodosTableCompanion.insert(
+        id: const Value(5),
+        title: const Value('To delete'),
+        completed: const Value(false),
+        cachedAt: Value(now),
+      ),
+    ]);
+    when(() => mockRemote.delete(5)).thenAnswer((_) async {});
+
+    await repo.delete(5);
+
+    final rows = await dao.watchAll().first;
+    expect(rows.any((r) => r.id == 5), isFalse);
+  });
+}
+```
+
+---
+
+## §10. Cache Rules Recap
+
+> These rules are mandatory. Violating any of them is a defect, not a style choice.
+
+1. **Repository layer, not transport.** Cache decoded `Todo` domain entities inside `TodoRepositoryImpl`. Do NOT use a Dio interceptor (e.g. `dio_http_cache`, `dio_cache_interceptor`) as the system of record for domain reads — interceptors operate on raw bytes and are invisible to the domain and its tests.
+2. **Stale-while-revalidate.** `watchAll()` emits the locally-cached Drift rows immediately (zero latency for the user), then silently revalidates from the network and re-emits via the Drift stream. No loading spinner on cache hits.
+3. **Explicit TTL.** Every cache row stores `cachedAt`. The Repository compares it against `_kCacheTtl` to decide whether to revalidate. Never use an implicit or infinite TTL.
+4. **Key = operation + params, never URLs.** The Drift table primary key (`id`) and the DAO operation name (e.g., `watchAll`, `findById`) are the effective cache keys. Changing the backend URL does not invalidate the cache; only writing new data or deleting rows does.
+5. **Invalidate on write.** `create` → upsert new row. `toggle` → upsert updated row. `delete` → delete row. After each mutation the Drift stream emits the new state to all active subscribers without any explicit refresh call in the UI.
+6. **Boundaries.** The Drift cache table is for transient server-owned data. Durable user-authored data (drafts, settings) → separate Drift table with its own retention policy. Secrets (tokens) → `flutter_secure_storage`. Do not use the cache table as a system of record.
diff --git a/.agents/skills/oma-mobile/variants/flutter/stack.yaml b/.agents/skills/oma-mobile/variants/flutter/stack.yaml
new file mode 100644
index 0000000..2dce963
--- /dev/null
+++ b/.agents/skills/oma-mobile/variants/flutter/stack.yaml
@@ -0,0 +1,21 @@
+# yaml-language-server: $schema=../stack.schema.json
+language: flutter
+framework: flutter
+ui: material3
+state: riverpod
+navigation: gorouter
+http_client: dio
+local_storage: drift
+response_cache: drift-offline-repo
+structure: lib/core/features/shared
+source: variant
+
+verify:
+  detect: pubspec.yaml
+  syntax:
+    cmd: "dart analyze"
+    skip_if_missing: dart
+  tests:
+    cmd: "flutter test"
+    pass_signal: "All tests passed"
+    skip_if_missing: flutter
diff --git a/.agents/skills/oma-mobile/variants/flutter/tech-stack.md b/.agents/skills/oma-mobile/variants/flutter/tech-stack.md
new file mode 100644
index 0000000..fef72ba
--- /dev/null
+++ b/.agents/skills/oma-mobile/variants/flutter/tech-stack.md
@@ -0,0 +1,193 @@
+# Mobile Agent - Tech Stack Reference (Flutter)
+
+## Framework + State Management
+
+- **Language**: Dart 3.3+
+- **UI Framework**: Flutter 3.19+
+- **UI Toolkit**: Material Design 3 (Android) + iOS HIG adaptations via `CupertinoAdaptiveTheme` or `Platform.isIOS` guards
+- **State Management**: Riverpod 2.x with `@riverpod` code generation (`AsyncNotifier`, `Notifier`, `StreamNotifier`)
+- **Concurrency**: Dart async/await, `Stream`, `StreamController`, structured cancellation via `ref.onDispose`
+- **Minimum SDK**: Flutter 3.19 / Dart 3.3 / Android API 24 / iOS 16
+
+Riverpod 2.x with `@riverpod` codegen replaces manual `StateNotifierProvider` and hand-written provider constants. The code generator emits typed, cancellation-safe `AsyncNotifier` subclasses at build time. Provider state is disposed automatically when the last listener is removed; side-effectful providers use `ref.onDispose` to cancel in-flight requests.
+
+## HTTP / API Client: Dio with Interceptors
+
+| Component | Package |
+|-----------|---------|
+| HTTP transport | `dio` |
+| Auth interceptor | custom `AuthInterceptor` (injects Bearer token) |
+| Retry interceptor | custom `RetryInterceptor` (exponential back-off) |
+| Logging interceptor | `pretty_dio_logger` (debug builds only) |
+
+Dio is the **transport layer only**. Interceptors handle cross-cutting concerns (auth injection, retry, logging) — they must never cache or interpret domain objects. All Dio interceptors operate on raw `RequestOptions` / `Response` bytes. Domain-level caching belongs exclusively at the Repository layer (see below).
+
+```
+Presentation (Riverpod provider)
+  |  calls
+  v
+Repository (data layer)  ──reads/writes──►  Local Cache (Drift table)
+  |  on miss / revalidate
+  v
+RemoteDataSource  (Dio)  ──HTTP──►  Backend REST API
+```
+
+## Response Cache: Offline-First Repository (Drift)
+
+Read-through caching of API responses is **mandatory at the Repository (data) layer**, using a Drift database table as the local cache. The cache stores **decoded domain entities** — never raw HTTP bytes or JSON strings. The Dio client and its interceptors are never cache-aware.
+
+**Placement rule — Repository layer, not transport.** Do **not** add a Dio cache interceptor (e.g. `dio_http_cache`, `dio_cache_interceptor`) as the system of record for domain reads. Such interceptors operate on raw bytes, making them invisible to the domain and untestable at the business-logic level. Cache the typed result *after* decoding instead.
+
+```
+View (Flutter Widget)
+  |  watches
+  v
+Riverpod AsyncNotifier  (features/<feature>/presentation/)
+  |  calls
+  v
+Repository interface    (features/<feature>/domain/)
+  |  reads/writes (stale-while-revalidate)
+  +──────────────────►  Drift table (local cache of decoded entities)
+  |  on miss / revalidate
+  v
+RemoteDataSource / Dio  (features/<feature>/data/)
+  |  HTTP
+  v
+Backend REST API
+```
+
+**Mandatory rules:**
+
+1. Every read operation goes through the Repository, which queries Drift first and returns a `Stream` (or `Future`) of cached entities. The Repository then triggers a background network revalidation and upserts the result back into Drift — the stream re-emits automatically.
+2. Cache **key** = logical operation ID + a stable hash of its parameters (e.g., `"todos"`, `"todo:$id"`). Never key on URLs or raw path strings.
+3. Apply a **stale-while-revalidate** policy: emit the locally-cached rows immediately (instant render), then fetch from the network, upsert into Drift, and let the stream re-emit the fresh rows. Store an explicit `cachedAt` timestamp column; check it against a per-resource TTL before deciding to revalidate.
+4. Any **write** (create / update / delete) must upsert or delete the affected Drift rows after a successful network response, so the next stream emission reflects the change immediately without a separate read round-trip.
+5. Drift is for transient **server-owned** data caches (and optionally durable user-owned data). **Secrets** (tokens, credentials) still belong in `flutter_secure_storage`. Do not use the cache table as a system of record for user-authored drafts — use a separate Drift table with a different retention policy.
+
+See `snippets.md §3` for the canonical offline-first repository and `snippets.md §4` for the Riverpod `AsyncNotifier` consuming it.
+
+## Local Storage
+
+| Library | Purpose |
+|---------|---------|
+| `drift` | Durable structured persistence (system-of-record user data **and** the offline response cache table) |
+| `flutter_secure_storage` | Tokens, credentials, and secrets |
+| `shared_preferences` | Lightweight key-value preferences (theme, locale, flags) |
+| `hive` / `hive_flutter` | Lightweight alternative to Drift for simple caches where SQL is unnecessary |
+
+**Drift vs Hive for the cache table:** Drift is the default because it provides SQL queries, type-safe DAOs, and Dart `Stream`s that auto-emit on row changes — exactly what the stale-while-revalidate pattern needs. Use Hive when the cached type is a simple flat object and you want to avoid the Drift codegen dependency. Either way, the Repository interface is unchanged; only the impl swaps out. This stack uses Drift (`response_cache: drift-offline-repo`).
+
+## Testing
+
+| Layer | Framework |
+|-------|-----------|
+| Unit (domain + repository) | `flutter_test` + `mocktail` |
+| Widget | `flutter_test` (`WidgetTester`) |
+| Integration | `integration_test` package |
+| E2E | Maestro (`maestro test`) |
+
+Mock the `Repository` **interface** (abstract class), not the concrete implementation or Dio. `mocktail` stubs are preferred over hand-written fakes for brevity, but both are acceptable. Never mock Drift internals — test the real Drift DB in-memory (`NativeDatabase.memory()`) for repository-layer tests.
+
+Run tests with `flutter test` (unit + widget) and `flutter test integration_test/` (integration). Maestro `.yaml` flow files live in `maestro/` at the project root.
+
+## Project Layout
+
+```
+my_app/
+  pubspec.yaml                            # deps + build_runner config
+  pubspec.lock
+  build.yaml                              # build_runner options (riverpod_generator, drift)
+  maestro/                                # Maestro E2E flow files
+    todos_flow.yaml
+  lib/
+    main.dart                             # runApp entry; ProviderScope at root
+    core/
+      di/
+        providers.dart                    # App-wide singleton providers (Dio, DB, SecureStorage)
+      network/
+        dio_client.dart                   # Dio factory + interceptor wiring
+        auth_interceptor.dart             # Injects Bearer token
+        retry_interceptor.dart            # Exponential back-off
+      database/
+        app_database.dart                 # Drift @DriftDatabase definition
+        app_database.g.dart               # generated
+      router/
+        app_router.dart                   # GoRouter typed routes
+        app_router.g.dart                 # generated (go_router_builder)
+      theme/
+        app_theme.dart
+    features/
+      todos/
+        domain/
+          todo.dart                       # Domain entity (freezed or plain Dart)
+          todo_repository.dart            # Abstract repository interface
+          usecases/
+            create_todo_usecase.dart
+        data/
+          dtos/
+            todo_dto.dart                 # JSON <-> entity mapping
+          local/
+            todos_dao.dart                # Drift DAO for todos cache table
+            todos_dao.g.dart              # generated
+          remote/
+            todos_remote_data_source.dart # Dio calls
+          todo_repository_impl.dart       # Offline-first impl; cache + remote
+        presentation/
+          providers/
+            todos_provider.dart           # @riverpod AsyncNotifier
+            todos_provider.g.dart         # generated
+          screens/
+            todos_screen.dart
+            todo_detail_screen.dart
+          widgets/
+            todo_list_item.dart
+    shared/
+      widgets/
+        loading_indicator.dart
+        empty_state.dart
+        error_view.dart
+      extensions/
+        async_value_ext.dart
+  test/
+    features/
+      todos/
+        todo_repository_impl_test.dart    # in-memory Drift DB
+        todos_provider_test.dart          # mocked repository interface
+        todos_screen_test.dart            # WidgetTester
+  integration_test/
+    todos_integration_test.dart
+```
+
+## Architecture Pattern
+
+```
+todos_screen.dart  (ConsumerWidget)
+  |  ref.watch(todosProvider)
+  v
+todosProvider  (@riverpod AsyncNotifier<List<Todo>>)
+  |  ref.watch(todoRepositoryProvider)
+  v
+TodoRepository  (abstract interface in domain/)
+  |  implemented by TodoRepositoryImpl (data/)
+  |
+  +──── TodosDao (Drift)  ◄──────── local cache of decoded Todo entities
+  |       Stream<List<TodoEntry>> watchAll()
+  |       Future<void> upsertAll(List<TodoEntry>)
+  |       Future<void> deleteById(int id)
+  |
+  +──── TodosRemoteDataSource (Dio)
+          Future<List<TodoDto>> fetchAll()
+          Future<TodoDto> create(String title)
+          Future<TodoDto> toggle(int id)
+          Future<void> delete(int id)
+```
+
+Each `features/<name>/` folder is a vertical slice owning its domain, data, and presentation sub-layers. `shared/` holds stateless reusable widgets with no feature knowledge. `core/` holds app-wide infrastructure (Dio, Drift DB, GoRouter, DI providers).
+
+## Navigation: GoRouter with Typed Routes
+
+`go_router` with `go_router_builder` (typed route classes generated at build time via `build_runner`) is the navigation layer. Define route classes annotated with `@TypedGoRoute`; the generator emits `.g.dart` files with `push()` / `go()` helpers.
+
+Route guards (auth checks, onboarding redirects) are handled by `GoRouter.redirect` callbacks, not inside screens. Deep links are declared in `GoRoute.path` and handled by the platform-level `AndroidManifest.xml` / `Info.plist` intent filters.
+
+See `snippets.md §2` for the typed GoRouter setup.
diff --git a/.agents/skills/oma-mobile/variants/react-native/api-template.ts b/.agents/skills/oma-mobile/variants/react-native/api-template.ts
new file mode 100644
index 0000000..c950ac5
--- /dev/null
+++ b/.agents/skills/oma-mobile/variants/react-native/api-template.ts
@@ -0,0 +1,332 @@
+/**
+ * API Data Layer Template for Mobile Agent (React Native)
+ *
+ * This file is the complete todos data layer — the ONLY place that touches
+ * the axios transport for the /todos resource. Screens and components never
+ * import from this file directly; they consume the TanStack Query hooks in
+ * src/features/todos/queries.ts and mutations.ts, which call these functions.
+ *
+ * Layout (split into separate files in production):
+ *   src/api/
+ *     client.ts          ← singleton axios instance + interceptors (auth, retry)
+ *     queryClient.ts     ← QueryClient + MMKV persister (offline-first cache)
+ *     todos.ts           ← THIS FILE: typed axios functions for /todos
+ *   src/features/todos/
+ *     queries.ts         ← useQuery hooks (useTodosQuery, useTodoDetailQuery)
+ *     mutations.ts       ← useMutation hooks (useCreateTodo, useToggleTodo, useDeleteTodo)
+ *
+ * Caching contract (TanStack Query — the RN parallel to swift's ResponseCache actor):
+ *   - Reads: useQuery caches DECODED JS objects (not AxiosResponse bytes).
+ *     staleTime / gcTime are explicit on every query — no implicit infinite TTL.
+ *     Query keys = [operation, ...params], never URLs.
+ *     Stale-while-revalidate: the cache entry renders immediately; a background
+ *     fetch updates it when the entry is older than staleTime.
+ *   - Writes: useMutation calls queryClient.invalidateQueries() for all affected
+ *     keys on onSuccess so the next read repopulates from the server.
+ *   - Offline persistence: @tanstack/query-persist-client-core + MMKV persister
+ *     (react-native-mmkv) serialises the cache to disk so it survives app restarts.
+ *   - Secrets / durable user data: expo-secure-store or react-native-keychain.
+ *     Never use TanStack Query as a system of record.
+ */
+
+// ============================================================================
+// src/api/client.ts
+// ============================================================================
+
+import axios, {
+  type AxiosInstance,
+  type InternalAxiosRequestConfig,
+  type AxiosResponse,
+  type AxiosError,
+} from 'axios';
+import axiosRetry from 'axios-retry';
+import { MMKV } from 'react-native-mmkv';
+
+/** Shared MMKV instance. Re-export so other modules (store, utils) can reuse it. */
+export const storage = new MMKV({ id: 'app-storage' });
+
+const BASE_URL =
+  process.env.EXPO_PUBLIC_API_BASE_URL ?? 'https://api.example.com';
+
+/**
+ * Singleton axios instance — the ONLY axios instance in the codebase.
+ * All src/api/*.ts data functions import from this module.
+ * React components and screens NEVER import this directly.
+ */
+export const apiClient: AxiosInstance = axios.create({
+  baseURL: BASE_URL,
+  timeout: 15_000,
+  headers: { 'Content-Type': 'application/json' },
+});
+
+// --- Request interceptor: inject bearer token from MMKV ---
+apiClient.interceptors.request.use((config: InternalAxiosRequestConfig) => {
+  const token = storage.getString('accessToken');
+  if (token) {
+    config.headers.set('Authorization', `Bearer ${token}`);
+  }
+  return config;
+});
+
+// --- Response interceptor: handle 401 centrally ---
+apiClient.interceptors.response.use(
+  (response: AxiosResponse) => response,
+  async (error: AxiosError) => {
+    if (error.response?.status === 401) {
+      // Purge the stale token — the auth store / navigation will redirect
+      // the user to the login screen.
+      storage.delete('accessToken');
+    }
+    return Promise.reject(error);
+  },
+);
+
+// --- Retry: 3 attempts, exponential back-off, idempotent methods only ---
+axiosRetry(apiClient, {
+  retries: 3,
+  retryCondition: (error) =>
+    axiosRetry.isNetworkOrIdempotentRequestError(error) &&
+    error.response?.status !== 401,
+  retryDelay: axiosRetry.exponentialDelay,
+});
+
+// ============================================================================
+// src/api/queryClient.ts
+// ============================================================================
+
+import { QueryClient } from '@tanstack/react-query';
+import { createSyncStoragePersister } from '@tanstack/query-persist-client-core';
+
+/** Separate MMKV instance namespaced for the query cache to avoid key collisions. */
+const queryStorage = new MMKV({ id: 'query-cache' });
+
+/**
+ * MMKV-backed persister for TanStack Query.
+ * Serialises the entire query cache to disk under a single key so the cache
+ * survives app restarts — this is the offline-first persistence tier, mirroring
+ * the disk-tier of swift's hyperoslo/Cache Storage.
+ */
+export const mmkvPersister = createSyncStoragePersister({
+  storage: {
+    getItem: (key) => queryStorage.getString(key) ?? null,
+    setItem: (key, value) => queryStorage.set(key, value),
+    removeItem: (key) => queryStorage.delete(key),
+  },
+});
+
+/**
+ * Application-wide QueryClient. Created once; provided via
+ * <PersistQueryClientProvider> in App.tsx. Never instantiate per-component.
+ *
+ * Default staleTime (60 s) and gcTime (5 min) apply to all queries unless
+ * a query overrides them explicitly. Overriding is encouraged for resources
+ * with different freshness requirements.
+ */
+export const queryClient = new QueryClient({
+  defaultOptions: {
+    queries: {
+      staleTime: 60_000,        // 1 minute — triggers background revalidation
+      gcTime: 5 * 60_000,       // 5 minutes idle before memory GC
+      retry: 3,
+      refetchOnWindowFocus: false, // Irrelevant on mobile; disabling avoids surprises
+    },
+    mutations: {
+      retry: 0,
+    },
+  },
+});
+
+// ============================================================================
+// src/api/todos.ts
+// ============================================================================
+// Typed axios functions for the /todos REST resource.
+// Pure data functions: accept inputs, call apiClient, return decoded objects.
+// They are the transport seam — no React, no hooks, no cache knowledge.
+
+// --- Domain types ---
+
+/** A single todo item returned by the API. */
+export interface Todo {
+  id: string;
+  title: string;
+  completed: boolean;
+  createdAt: string;
+}
+
+/** Request body for creating a new todo. */
+export interface CreateTodoInput {
+  title: string;
+}
+
+// --- Data functions ---
+
+/**
+ * Fetch all todos for the authenticated user.
+ * Called by: useTodosQuery (src/features/todos/queries.ts)
+ */
+export async function fetchTodos(): Promise<Todo[]> {
+  const { data } = await apiClient.get<Todo[]>('/todos');
+  return data;
+}
+
+/**
+ * Fetch a single todo by ID.
+ * Called by: useTodoDetailQuery (src/features/todos/queries.ts)
+ */
+export async function fetchTodo(id: string): Promise<Todo> {
+  const { data } = await apiClient.get<Todo>(`/todos/${id}`);
+  return data;
+}
+
+/**
+ * Create a new todo with the given title.
+ * Called by: useCreateTodo (src/features/todos/mutations.ts)
+ * Cache effect: mutations.ts invalidates todoKeys.lists() on success.
+ */
+export async function createTodo(input: CreateTodoInput): Promise<Todo> {
+  const { data } = await apiClient.post<Todo>('/todos', input);
+  return data;
+}
+
+/**
+ * Toggle the completed flag on a todo.
+ * Called by: useToggleTodo (src/features/todos/mutations.ts)
+ * Cache effect: mutations.ts invalidates todoKeys.lists() + todoKeys.detail(id) on success.
+ */
+export async function toggleTodo(id: string): Promise<Todo> {
+  const { data } = await apiClient.patch<Todo>(`/todos/${id}/toggle`);
+  return data;
+}
+
+/**
+ * Permanently delete a todo.
+ * Called by: useDeleteTodo (src/features/todos/mutations.ts)
+ * Cache effect: mutations.ts invalidates todoKeys.lists() and removes todoKeys.detail(id).
+ */
+export async function deleteTodo(id: string): Promise<void> {
+  await apiClient.delete(`/todos/${id}`);
+}
+
+// ============================================================================
+// src/features/todos/queries.ts
+// ============================================================================
+// Read hooks — server-state cache layer built on TanStack Query.
+// These hooks are what screens import. They never expose axios internals.
+
+import { useQuery } from '@tanstack/react-query';
+
+/**
+ * Centralised query key factory.
+ * Shape: [operation, ...params] — never a URL.
+ * Shared with mutations.ts so invalidation references the exact same keys.
+ */
+export const todoKeys = {
+  all: ['todos'] as const,
+  lists: () => [...todoKeys.all, 'list'] as const,
+  detail: (id: string) => [...todoKeys.all, 'detail', id] as const,
+};
+
+/**
+ * Fetch and cache the full todo list.
+ *
+ * Behaviour:
+ *   - On mount: returns cached data immediately (zero-latency render), then
+ *     triggers a background fetch when data is older than staleTime (SWR).
+ *   - On cache miss: fetches and caches, then returns.
+ *   - After app restart: MMKV persister restores the cache; stale check runs.
+ */
+export function useTodosQuery() {
+  return useQuery({
+    queryKey: todoKeys.lists(),
+    queryFn: fetchTodos,
+    staleTime: 60_000,   // 1 minute
+    gcTime: 5 * 60_000,  // 5 minutes
+  });
+}
+
+/**
+ * Fetch and cache a single todo by ID.
+ * Disabled when `id` is falsy to avoid spurious requests during navigation setup.
+ */
+export function useTodoDetailQuery(id: string) {
+  return useQuery({
+    queryKey: todoKeys.detail(id),
+    queryFn: () => fetchTodo(id),
+    staleTime: 60_000,
+    gcTime: 5 * 60_000,
+    enabled: Boolean(id),
+  });
+}
+
+// ============================================================================
+// src/features/todos/mutations.ts
+// ============================================================================
+// Write hooks — useMutation wrappers that call api functions and invalidate cache.
+// Rule: EVERY mutation invalidates all affected query keys in onSuccess.
+
+import { useMutation, useQueryClient } from '@tanstack/react-query';
+
+/** Create a new todo, then invalidate the list cache. */
+export function useCreateTodo() {
+  const qc = useQueryClient();
+
+  return useMutation({
+    mutationFn: (input: CreateTodoInput) => createTodo(input),
+    onSuccess: () => {
+      // Force the list to refetch on next mount — the new todo must appear.
+      qc.invalidateQueries({ queryKey: todoKeys.lists() });
+    },
+  });
+}
+
+/**
+ * Toggle a todo's completed state.
+ * Uses an optimistic update for instant visual feedback; rolls back on error.
+ */
+export function useToggleTodo() {
+  const qc = useQueryClient();
+
+  return useMutation({
+    mutationFn: (id: string) => toggleTodo(id),
+    // Optimistic: flip the completed flag in-cache before the network call.
+    onMutate: async (id) => {
+      // Cancel any in-flight list queries to avoid overwriting our optimistic update.
+      await qc.cancelQueries({ queryKey: todoKeys.lists() });
+      const previousList = qc.getQueryData<Todo[]>(todoKeys.lists());
+
+      qc.setQueryData<Todo[]>(todoKeys.lists(), (old) =>
+        old?.map((todo) =>
+          todo.id === id ? { ...todo, completed: !todo.completed } : todo,
+        ) ?? [],
+      );
+
+      // Return snapshot for rollback.
+      return { previousList };
+    },
+    onError: (_err, _id, context) => {
+      // Roll back the optimistic update on failure.
+      if (context?.previousList !== undefined) {
+        qc.setQueryData(todoKeys.lists(), context.previousList);
+      }
+    },
+    onSuccess: (_data, id) => {
+      // Invalidate both list and detail to ensure server truth after success.
+      qc.invalidateQueries({ queryKey: todoKeys.lists() });
+      qc.invalidateQueries({ queryKey: todoKeys.detail(id) });
+    },
+  });
+}
+
+/** Delete a todo, then invalidate the list and remove the detail entry. */
+export function useDeleteTodo() {
+  const qc = useQueryClient();
+
+  return useMutation({
+    mutationFn: (id: string) => deleteTodo(id),
+    onSuccess: (_data, id) => {
+      qc.invalidateQueries({ queryKey: todoKeys.lists() });
+      // The detail entry is permanently invalid — remove it rather than refetch.
+      qc.removeQueries({ queryKey: todoKeys.detail(id) });
+    },
+  });
+}
diff --git a/.agents/skills/oma-mobile/variants/react-native/snippets.md b/.agents/skills/oma-mobile/variants/react-native/snippets.md
new file mode 100644
index 0000000..6b19b2d
--- /dev/null
+++ b/.agents/skills/oma-mobile/variants/react-native/snippets.md
@@ -0,0 +1,682 @@
+# Mobile Agent - Code Snippets (React Native)
+
+Copy-paste ready patterns. Use these as starting points; adapt to the specific task.
+Screens and components **never** call axios directly — they consume hooks built on TanStack Query.
+
+---
+
+## 1. Package Dependencies
+
+```json
+// package.json (relevant dependencies)
+{
+  "dependencies": {
+    // Core
+    "react": "18.3.1",
+    "react-native": "0.75.x",
+
+    // Navigation
+    "@react-navigation/native": "^6.1.18",
+    "@react-navigation/native-stack": "^6.11.0",
+    "@react-navigation/bottom-tabs": "^6.6.1",
+    "react-native-screens": "^3.34.0",
+    "react-native-safe-area-context": "^4.10.0",
+
+    // HTTP transport
+    "axios": "^1.7.7",
+    "axios-retry": "^4.5.0",
+
+    // Server-state cache
+    "@tanstack/react-query": "^5.56.2",
+    "@tanstack/query-persist-client-core": "^5.56.2",
+
+    // Local storage
+    "react-native-mmkv": "^3.1.0",
+
+    // Secrets (choose one)
+    "expo-secure-store": "^13.0.0",
+    // -- OR (bare RN) --
+    "react-native-keychain": "^8.2.0",
+
+    // Client-state
+    "zustand": "^5.0.0"
+  },
+  "devDependencies": {
+    "typescript": "^5.5.4",
+    "@types/react": "^18.3.5",
+    "@types/react-native": "^0.73.0",
+    "jest": "^29.7.0",
+    "@testing-library/react-native": "^12.7.2",
+    "@testing-library/jest-native": "^5.4.3",
+    "babel-jest": "^29.7.0"
+  }
+}
+```
+
+```json
+// tsconfig.json (strict baseline)
+{
+  "compilerOptions": {
+    "strict": true,
+    "target": "ES2022",
+    "lib": ["ES2022"],
+    "jsx": "react-native",
+    "moduleResolution": "bundler",
+    "baseUrl": ".",
+    "paths": {
+      "@api/*": ["src/api/*"],
+      "@features/*": ["src/features/*"],
+      "@shared/*": ["src/shared/*"],
+      "@navigation/*": ["src/navigation/*"],
+      "@store/*": ["src/store/*"]
+    },
+    "skipLibCheck": true
+  }
+}
+```
+
+---
+
+## 2. QueryClient + MMKV Persister Setup
+
+```typescript
+// src/api/queryClient.ts
+// Creates the single QueryClient and wires MMKV offline persistence.
+// Import this module once in App.tsx — never create per-component QueryClients.
+
+import { QueryClient } from '@tanstack/react-query';
+import { createSyncStoragePersister } from '@tanstack/query-persist-client-core';
+import { MMKV } from 'react-native-mmkv';
+
+// Shared MMKV instance — re-export so other modules (store, utils) can reuse it.
+export const storage = new MMKV({ id: 'app-storage' });
+
+// Separate MMKV instance namespaced for the query cache to avoid key collisions.
+const queryStorage = new MMKV({ id: 'query-cache' });
+
+// Persister adapter: TanStack Query serialises/deserialises its cache as a
+// single JSON string under the key below. MMKV provides synchronous access so
+// the cache hydrates before the first render, enabling true offline-first UX.
+export const mmkvPersister = createSyncStoragePersister({
+  storage: {
+    getItem: (key) => queryStorage.getString(key) ?? null,
+    setItem: (key, value) => queryStorage.set(key, value),
+    removeItem: (key) => queryStorage.delete(key),
+  },
+});
+
+export const queryClient = new QueryClient({
+  defaultOptions: {
+    queries: {
+      // Data older than 60 s triggers a background revalidation on next mount.
+      staleTime: 60_000,
+      // Remove unused cache entries from memory after 5 minutes.
+      gcTime: 5 * 60_000,
+      // Retry failed queries up to 3 times with exponential back-off.
+      retry: 3,
+      // Do not refetch when the window regains focus (mobile has no browser focus).
+      refetchOnWindowFocus: false,
+    },
+    mutations: {
+      retry: 0,
+    },
+  },
+});
+```
+
+```typescript
+// src/App.tsx  (provider wiring — abridged)
+import React from 'react';
+import { PersistQueryClientProvider } from '@tanstack/react-query/persist-client';
+import { NavigationContainer } from '@react-navigation/native';
+import { queryClient, mmkvPersister } from '@api/queryClient';
+import { RootNavigator } from '@navigation/RootNavigator';
+
+export default function App() {
+  return (
+    // PersistQueryClientProvider restores the MMKV-persisted cache before
+    // the first render, so screens show stale data instantly while revalidating.
+    <PersistQueryClientProvider
+      client={queryClient}
+      persistOptions={{ persister: mmkvPersister }}
+    >
+      <NavigationContainer>
+        <RootNavigator />
+      </NavigationContainer>
+    </PersistQueryClientProvider>
+  );
+}
+```
+
+---
+
+## 3. Axios Instance with Auth Interceptor
+
+```typescript
+// src/api/client.ts
+// Singleton axios instance — the ONLY place in the codebase that creates an
+// axios instance. All src/api/*.ts functions import from here.
+
+import axios, {
+  type AxiosInstance,
+  type InternalAxiosRequestConfig,
+  type AxiosResponse,
+  type AxiosError,
+} from 'axios';
+import axiosRetry from 'axios-retry';
+import { storage } from './queryClient';
+
+const BASE_URL = process.env.EXPO_PUBLIC_API_BASE_URL ?? 'https://api.example.com';
+
+export const apiClient: AxiosInstance = axios.create({
+  baseURL: BASE_URL,
+  timeout: 15_000,
+  headers: { 'Content-Type': 'application/json' },
+});
+
+// --- Request interceptor: inject bearer token ---
+apiClient.interceptors.request.use((config: InternalAxiosRequestConfig) => {
+  const token = storage.getString('accessToken');
+  if (token) {
+    config.headers.set('Authorization', `Bearer ${token}`);
+  }
+  return config;
+});
+
+// --- Response interceptor: surface typed API errors ---
+apiClient.interceptors.response.use(
+  (response: AxiosResponse) => response,
+  async (error: AxiosError) => {
+    if (error.response?.status === 401) {
+      // Clear stale token — auth store / navigation will redirect to login.
+      storage.delete('accessToken');
+    }
+    return Promise.reject(error);
+  },
+);
+
+// --- Retry: idempotent requests only, 3 attempts, exponential back-off ---
+axiosRetry(apiClient, {
+  retries: 3,
+  retryCondition: (error) =>
+    axiosRetry.isNetworkOrIdempotentRequestError(error) &&
+    error.response?.status !== 401,
+  retryDelay: axiosRetry.exponentialDelay,
+});
+```
+
+---
+
+## 4. Typed API Data Module (src/api/todos.ts)
+
+```typescript
+// src/api/todos.ts
+// Typed axios functions for the /todos resource.
+// These are PURE DATA FUNCTIONS — they return decoded TypeScript objects and
+// know nothing about React, hooks, or the query cache. They are the transport
+// seam: screens never import from this file directly, only through query/mutation
+// hooks (src/features/todos/queries.ts and mutations.ts).
+
+import { apiClient } from './client';
+
+// ---------------------------------------------------------------------------
+// Domain types
+// ---------------------------------------------------------------------------
+
+export interface Todo {
+  id: string;
+  title: string;
+  completed: boolean;
+  createdAt: string;
+}
+
+export interface CreateTodoInput {
+  title: string;
+}
+
+// ---------------------------------------------------------------------------
+// API functions
+// ---------------------------------------------------------------------------
+
+/** Fetch all todos for the authenticated user. */
+export async function fetchTodos(): Promise<Todo[]> {
+  const { data } = await apiClient.get<Todo[]>('/todos');
+  return data;
+}
+
+/** Fetch a single todo by ID. */
+export async function fetchTodo(id: string): Promise<Todo> {
+  const { data } = await apiClient.get<Todo>(`/todos/${id}`);
+  return data;
+}
+
+/** Create a new todo. */
+export async function createTodo(input: CreateTodoInput): Promise<Todo> {
+  const { data } = await apiClient.post<Todo>('/todos', input);
+  return data;
+}
+
+/** Toggle the completed flag on a todo. */
+export async function toggleTodo(id: string): Promise<Todo> {
+  const { data } = await apiClient.patch<Todo>(`/todos/${id}/toggle`);
+  return data;
+}
+
+/** Permanently delete a todo. */
+export async function deleteTodo(id: string): Promise<void> {
+  await apiClient.delete(`/todos/${id}`);
+}
+```
+
+---
+
+## 5. Feature Query and Mutation Hooks
+
+```typescript
+// src/features/todos/queries.ts
+// Read hooks — wrap src/api/todos.ts functions with TanStack Query.
+// Explicit staleTime / gcTime on every query; never rely on defaults alone.
+
+import { useQuery, useQueryClient } from '@tanstack/react-query';
+import { fetchTodos, fetchTodo } from '@api/todos';
+
+// Centralise query key definitions so mutations can reference them without
+// string duplication. Key shape: [operation, ...params].
+export const todoKeys = {
+  all: ['todos'] as const,
+  lists: () => [...todoKeys.all, 'list'] as const,
+  detail: (id: string) => [...todoKeys.all, 'detail', id] as const,
+};
+
+/** Fetch and cache the todo list. Returns stale data instantly, revalidates in
+ *  the background when data is older than staleTime. */
+export function useTodosQuery() {
+  return useQuery({
+    queryKey: todoKeys.lists(),
+    queryFn: fetchTodos,
+    staleTime: 60_000,   // 1 minute — adjust per resource freshness requirement
+    gcTime: 5 * 60_000,  // 5 minutes idle before memory GC
+  });
+}
+
+/** Fetch and cache a single todo. */
+export function useTodoDetailQuery(id: string) {
+  return useQuery({
+    queryKey: todoKeys.detail(id),
+    queryFn: () => fetchTodo(id),
+    staleTime: 60_000,
+    gcTime: 5 * 60_000,
+    enabled: Boolean(id),
+  });
+}
+```
+
+```typescript
+// src/features/todos/mutations.ts
+// Write hooks — wrap src/api/todos.ts functions with useMutation.
+// Every mutation MUST call invalidateQueries for affected keys on onSuccess
+// so the cache repopulates from the server on the next read.
+
+import { useMutation, useQueryClient } from '@tanstack/react-query';
+import { createTodo, toggleTodo, deleteTodo, type CreateTodoInput } from '@api/todos';
+import { todoKeys } from './queries';
+
+/** Create a new todo then invalidate the list cache. */
+export function useCreateTodo() {
+  const queryClient = useQueryClient();
+
+  return useMutation({
+    mutationFn: (input: CreateTodoInput) => createTodo(input),
+    onSuccess: () => {
+      // Invalidate the list so the next useTodosQuery fetches fresh data.
+      queryClient.invalidateQueries({ queryKey: todoKeys.lists() });
+    },
+  });
+}
+
+/** Toggle a todo's completed flag then invalidate list + detail caches. */
+export function useToggleTodo() {
+  const queryClient = useQueryClient();
+
+  return useMutation({
+    mutationFn: (id: string) => toggleTodo(id),
+    // Optimistic update: flip the flag in the cache immediately for instant UI
+    // feedback; roll back if the mutation fails.
+    onMutate: async (id) => {
+      await queryClient.cancelQueries({ queryKey: todoKeys.lists() });
+      const previous = queryClient.getQueryData(todoKeys.lists());
+      queryClient.setQueryData(todoKeys.lists(), (old: any[] | undefined) =>
+        old?.map((todo) =>
+          todo.id === id ? { ...todo, completed: !todo.completed } : todo,
+        ) ?? [],
+      );
+      return { previous };
+    },
+    onError: (_err, _id, context) => {
+      // Roll back on error.
+      if (context?.previous) {
+        queryClient.setQueryData(todoKeys.lists(), context.previous);
+      }
+    },
+    onSuccess: (_data, id) => {
+      // Invalidate both list and detail to ensure consistency.
+      queryClient.invalidateQueries({ queryKey: todoKeys.lists() });
+      queryClient.invalidateQueries({ queryKey: todoKeys.detail(id) });
+    },
+  });
+}
+
+/** Delete a todo then invalidate the list cache. */
+export function useDeleteTodo() {
+  const queryClient = useQueryClient();
+
+  return useMutation({
+    mutationFn: (id: string) => deleteTodo(id),
+    onSuccess: (_data, id) => {
+      queryClient.invalidateQueries({ queryKey: todoKeys.lists() });
+      // Remove the detail cache entry immediately — it is no longer valid.
+      queryClient.removeQueries({ queryKey: todoKeys.detail(id) });
+    },
+  });
+}
+```
+
+---
+
+## 6. Screen Consuming the Hooks
+
+```typescript
+// src/features/todos/ui/TodosScreen.tsx
+// Consumes useTodosQuery and useDeleteTodo. Note: no axios import here.
+
+import React from 'react';
+import {
+  View,
+  Text,
+  FlatList,
+  ActivityIndicator,
+  TouchableOpacity,
+  RefreshControl,
+  StyleSheet,
+} from 'react-native';
+import type { NativeStackScreenProps } from '@react-navigation/native-stack';
+import type { RootStackParamList } from '@navigation/types';
+import { useTodosQuery } from '../queries';
+import { useDeleteTodo, useToggleTodo } from '../mutations';
+
+type Props = NativeStackScreenProps<RootStackParamList, 'TodoList'>;
+
+export function TodosScreen({ navigation }: Props) {
+  const { data: todos, isLoading, isError, error, refetch, isRefetching } = useTodosQuery();
+  const toggleMutation = useToggleTodo();
+  const deleteMutation = useDeleteTodo();
+
+  // --- Loading state ---
+  if (isLoading) {
+    return (
+      <View style={styles.center}>
+        <ActivityIndicator size="large" accessibilityLabel="Loading todos" />
+      </View>
+    );
+  }
+
+  // --- Error state ---
+  if (isError) {
+    return (
+      <View style={styles.center}>
+        <Text style={styles.errorText}>
+          {error instanceof Error ? error.message : 'Something went wrong.'}
+        </Text>
+        <TouchableOpacity style={styles.retryButton} onPress={() => refetch()}>
+          <Text style={styles.retryText}>Retry</Text>
+        </TouchableOpacity>
+      </View>
+    );
+  }
+
+  // --- Empty state ---
+  if (!todos || todos.length === 0) {
+    return (
+      <View style={styles.center}>
+        <Text style={styles.emptyText}>No todos yet. Add your first one!</Text>
+      </View>
+    );
+  }
+
+  // --- Data state ---
+  return (
+    <FlatList
+      data={todos}
+      keyExtractor={(item) => item.id}
+      refreshControl={
+        <RefreshControl refreshing={isRefetching} onRefresh={refetch} />
+      }
+      renderItem={({ item }) => (
+        <View style={styles.row}>
+          <TouchableOpacity
+            style={styles.checkbox}
+            onPress={() => toggleMutation.mutate(item.id)}
+            accessibilityRole="checkbox"
+            accessibilityState={{ checked: item.completed }}
+          >
+            <Text>{item.completed ? '☑' : '☐'}</Text>
+          </TouchableOpacity>
+
+          <TouchableOpacity
+            style={styles.titleContainer}
+            onPress={() => navigation.navigate('TodoDetail', { id: item.id })}
+          >
+            <Text style={[styles.title, item.completed && styles.completed]}>
+              {item.title}
+            </Text>
+          </TouchableOpacity>
+
+          <TouchableOpacity
+            onPress={() => deleteMutation.mutate(item.id)}
+            accessibilityLabel={`Delete ${item.title}`}
+          >
+            <Text style={styles.deleteIcon}>✕</Text>
+          </TouchableOpacity>
+        </View>
+      )}
+    />
+  );
+}
+
+const styles = StyleSheet.create({
+  center: { flex: 1, justifyContent: 'center', alignItems: 'center', padding: 24 },
+  errorText: { color: '#d32f2f', textAlign: 'center', marginBottom: 12 },
+  emptyText: { color: '#757575', textAlign: 'center' },
+  retryButton: { backgroundColor: '#1976d2', borderRadius: 8, paddingHorizontal: 20, paddingVertical: 10 },
+  retryText: { color: '#fff', fontWeight: '600' },
+  row: { flexDirection: 'row', alignItems: 'center', paddingHorizontal: 16, paddingVertical: 12, borderBottomWidth: StyleSheet.hairlineWidth, borderBottomColor: '#e0e0e0' },
+  checkbox: { marginRight: 12 },
+  titleContainer: { flex: 1 },
+  title: { fontSize: 16, color: '#212121' },
+  completed: { textDecorationLine: 'line-through', color: '#9e9e9e' },
+  deleteIcon: { color: '#9e9e9e', fontSize: 16, paddingLeft: 12 },
+});
+```
+
+---
+
+## 7. Navigation Setup with Typed Param List
+
+```typescript
+// src/navigation/types.ts
+export type RootStackParamList = {
+  TodoList: undefined;
+  TodoDetail: { id: string };
+  Login: undefined;
+};
+```
+
+```typescript
+// src/navigation/RootNavigator.tsx
+import React from 'react';
+import { createNativeStackNavigator } from '@react-navigation/native-stack';
+import type { RootStackParamList } from './types';
+import { TodosScreen } from '@features/todos/ui/TodosScreen';
+import { TodoDetailScreen } from '@features/todos/ui/TodoDetailScreen';
+import { LoginScreen } from '@features/auth/ui/LoginScreen';
+import { useAuthStore } from '@store/authStore';
+
+const Stack = createNativeStackNavigator<RootStackParamList>();
+
+export function RootNavigator() {
+  const isAuthenticated = useAuthStore((s) => s.isAuthenticated);
+
+  return (
+    <Stack.Navigator>
+      {isAuthenticated ? (
+        <>
+          <Stack.Screen
+            name="TodoList"
+            component={TodosScreen}
+            options={{ title: 'My Todos' }}
+          />
+          <Stack.Screen
+            name="TodoDetail"
+            component={TodoDetailScreen}
+            options={{ title: 'Todo Detail' }}
+          />
+        </>
+      ) : (
+        <Stack.Screen
+          name="Login"
+          component={LoginScreen}
+          options={{ headerShown: false }}
+        />
+      )}
+    </Stack.Navigator>
+  );
+}
+```
+
+---
+
+## 8. Jest Test: Component with QueryClientProvider
+
+```typescript
+// src/features/todos/__tests__/TodosScreen.test.tsx
+// Wraps the component in a QueryClientProvider with a no-retry, zero-staleTime
+// QueryClient. The api module is mocked at the Jest boundary — tests assert on
+// component output, not axios internals.
+
+import React from 'react';
+import { render, screen, fireEvent, waitFor } from '@testing-library/react-native';
+import { QueryClient, QueryClientProvider } from '@tanstack/react-query';
+import { NavigationContainer } from '@react-navigation/native';
+import { TodosScreen } from '../ui/TodosScreen';
+
+// Mock the entire api/todos module — the seam between hooks and transport.
+jest.mock('@api/todos', () => ({
+  fetchTodos: jest.fn(),
+  toggleTodo: jest.fn(),
+  deleteTodo: jest.fn(),
+}));
+
+import * as todosApi from '@api/todos';
+
+// Helper: create a fresh QueryClient per test to avoid state bleed.
+function createTestQueryClient() {
+  return new QueryClient({
+    defaultOptions: {
+      queries: {
+        retry: false,      // Surface errors immediately in tests
+        staleTime: 0,      // Always fetch in tests; no stale cache reads
+        gcTime: Infinity,  // Keep data for the test duration
+      },
+      mutations: { retry: false },
+    },
+  });
+}
+
+// Helper: wrap the component with required providers.
+function renderWithProviders(ui: React.ReactElement) {
+  const testQueryClient = createTestQueryClient();
+  return render(
+    <QueryClientProvider client={testQueryClient}>
+      <NavigationContainer>
+        {ui}
+      </NavigationContainer>
+    </QueryClientProvider>,
+  );
+}
+
+const mockNavigation = { navigate: jest.fn() } as any;
+
+describe('TodosScreen', () => {
+  afterEach(() => {
+    jest.clearAllMocks();
+  });
+
+  it('shows a loading indicator while fetching', async () => {
+    // Delay resolution so we can catch the loading state.
+    (todosApi.fetchTodos as jest.Mock).mockReturnValue(new Promise(() => {}));
+    renderWithProviders(<TodosScreen navigation={mockNavigation} route={{} as any} />);
+
+    expect(screen.getByLabelText('Loading todos')).toBeTruthy();
+  });
+
+  it('renders todo titles after successful fetch', async () => {
+    (todosApi.fetchTodos as jest.Mock).mockResolvedValue([
+      { id: '1', title: 'Buy milk', completed: false, createdAt: '' },
+      { id: '2', title: 'Walk the dog', completed: true, createdAt: '' },
+    ]);
+
+    renderWithProviders(<TodosScreen navigation={mockNavigation} route={{} as any} />);
+
+    expect(await screen.findByText('Buy milk')).toBeTruthy();
+    expect(screen.getByText('Walk the dog')).toBeTruthy();
+  });
+
+  it('shows empty state when the list is empty', async () => {
+    (todosApi.fetchTodos as jest.Mock).mockResolvedValue([]);
+
+    renderWithProviders(<TodosScreen navigation={mockNavigation} route={{} as any} />);
+
+    expect(await screen.findByText(/No todos yet/i)).toBeTruthy();
+  });
+
+  it('shows an error message and retry button on fetch failure', async () => {
+    (todosApi.fetchTodos as jest.Mock).mockRejectedValue(new Error('Network error'));
+
+    renderWithProviders(<TodosScreen navigation={mockNavigation} route={{} as any} />);
+
+    expect(await screen.findByText('Network error')).toBeTruthy();
+    expect(screen.getByText('Retry')).toBeTruthy();
+  });
+
+  it('calls deleteTodo when the delete button is pressed', async () => {
+    (todosApi.fetchTodos as jest.Mock).mockResolvedValue([
+      { id: '42', title: 'Delete me', completed: false, createdAt: '' },
+    ]);
+    (todosApi.deleteTodo as jest.Mock).mockResolvedValue(undefined);
+
+    renderWithProviders(<TodosScreen navigation={mockNavigation} route={{} as any} />);
+
+    const deleteButton = await screen.findByLabelText('Delete Delete me');
+    fireEvent.press(deleteButton);
+
+    await waitFor(() => {
+      expect(todosApi.deleteTodo).toHaveBeenCalledWith('42');
+    });
+  });
+});
+```
+
+---
+
+## 9. Cache Rules Recap
+
+> These rules apply to every `useQuery` and `useMutation` in the codebase.
+> They mirror the swift-ios `hyperoslo/Cache` mandatory contract, adapted for TanStack Query.
+
+1. **Cache decoded objects, not bytes.** TanStack Query stores the return value of `queryFn` — a decoded TypeScript object. Never cache raw `AxiosResponse` or `ArrayBuffer`.
+2. **Explicit `staleTime` and `gcTime` on every `useQuery`.** No implicit infinite TTL. `staleTime` governs background revalidation; `gcTime` governs memory reclamation.
+3. **Query keys = `[operation, ...params]`.** Never key on URLs. Centralise key definitions in a `todoKeys` (or `<resource>Keys`) object so mutations and queries share the same reference.
+4. **Invalidate on write.** Every `useMutation` calls `queryClient.invalidateQueries({ queryKey })` for all affected list and detail keys in `onSuccess`. Optimistic updates (optional) must pair a rollback in `onError`.
+5. **MMKV persistence for offline-first.** The `PersistQueryClientProvider` + MMKV persister hydrates the cache before the first render. Stale data renders immediately; revalidation runs in the background.
+6. **Repository seam.** `src/api/*.ts` functions are the only axis callers. Screens and components never import from `axios` or from `src/api/` directly — they consume query/mutation hooks.
+7. **Query cache = transient server-owned data.** Durable user data belongs in MMKV; secrets belong in `expo-secure-store` / `react-native-keychain`. Never use TanStack Query as a system of record.
diff --git a/.agents/skills/oma-mobile/variants/react-native/stack.yaml b/.agents/skills/oma-mobile/variants/react-native/stack.yaml
new file mode 100644
index 0000000..7a4260d
--- /dev/null
+++ b/.agents/skills/oma-mobile/variants/react-native/stack.yaml
@@ -0,0 +1,22 @@
+# yaml-language-server: $schema=../stack.schema.json
+language: react-native
+framework: react-native
+ui: react-native
+state: zustand
+navigation: react-navigation
+http_client: axios
+data_fetching: tanstack-query
+local_storage: mmkv
+response_cache: tanstack-query
+structure: src/api,src/features/<feature>/{model,ui},src/shared,src/navigation,src/store
+source: variant
+
+verify:
+  detect: package.json
+  syntax:
+    cmd: "npx tsc --noEmit"
+    skip_if_missing: npx
+  tests:
+    cmd: "npx jest --ci"
+    pass_signal: "Tests:"
+    skip_if_missing: npx
diff --git a/.agents/skills/oma-mobile/variants/react-native/tech-stack.md b/.agents/skills/oma-mobile/variants/react-native/tech-stack.md
new file mode 100644
index 0000000..8182bb1
--- /dev/null
+++ b/.agents/skills/oma-mobile/variants/react-native/tech-stack.md
@@ -0,0 +1,179 @@
+# Mobile Agent - Tech Stack Reference (React Native)
+
+## Framework: React Native + TypeScript
+
+- **Language**: TypeScript (strict mode; `"strict": true` in `tsconfig.json`)
+- **UI Framework**: React Native (core components); Expo is the recommended toolchain for new projects (managed or bare workflow)
+- **Minimum OS**: iOS 16.0 / Android API 26 (Oreo)
+- **Tooling**: Metro bundler, Expo CLI or React Native CLI, Flipper for dev debugging
+
+React Native renders to native UI components — not a WebView or canvas. Expo adds a curated native module layer, OTA updates, and a first-class build service (EAS Build), which removes native toolchain friction for most projects. Bare workflow gives full native access when Expo modules do not cover a capability.
+
+## State Management: Zustand
+
+Client/UI state is managed with **Zustand**. Zustand is a minimal, hook-first store with no boilerplate and no context wrapping required. Redux Toolkit (RTK) is the heavier alternative for teams that need time-travel debugging, a stricter action/reducer discipline, or RTK Query integration.
+
+| Concern | Tool |
+|---------|------|
+| Client / UI state | Zustand |
+| Server state + caching | TanStack Query (see Response Cache section) |
+| Heavy team state / RTK Query | Redux Toolkit (alternative) |
+
+Zustand stores live in `src/store/`. Keep stores small and feature-scoped — one store per feature domain is preferred over a single monolithic store.
+
+## HTTP Transport: Axios
+
+Network calls are made through a **singleton Axios instance** configured in `src/api/client.ts`. The instance wires request interceptors for bearer-token injection and response interceptors for 401 handling / token refresh. Retry logic (exponential back-off) is attached via `axios-retry`.
+
+**Transport vs. server-state distinction.** Axios is a transport concern only — it sends and receives bytes. It knows nothing about caching, stale data, or background revalidation. TanStack Query (below) owns those concerns. React components never import the Axios instance directly; they consume typed hooks built on TanStack Query.
+
+```
+axios instance (transport)
+  └── used by: src/api/*.ts  (typed data functions)
+        └── consumed by: TanStack Query hooks (useQuery / useMutation)
+              └── consumed by: Screens / components
+```
+
+See `snippets.md §3` for the canonical Axios instance and auth interceptor.
+
+## Response Cache: TanStack Query (@tanstack/react-query)
+
+**Read-through caching at the data-fetching layer is mandatory.** TanStack Query is the direct RN parallel to the swift `ResponseCache` actor — it caches **decoded JavaScript objects** (not raw response bytes), provides stale-while-revalidate out of the box, and centralizes invalidation.
+
+```
+Screen / Component
+  |  renders from
+  v
+useQuery / useMutation hook    (src/features/<feature>/queries.ts / mutations.ts)
+  |  on miss / revalidate
+  +──────────────────────►  QueryClient in-memory cache  (decoded JS objects)
+  |                          + MMKV persister (survives restarts)
+  |  on cache miss
+  v
+src/api/<resource>.ts          (typed axios functions — transport only)
+  |  HTTP via axios instance
+  v
+Backend REST API
+```
+
+**Mandatory rules:**
+
+1. Every read is wrapped in a `useQuery` call with **explicit `staleTime` and `gcTime`** — no implicit infinite TTL. `staleTime` controls when a cached entry is considered stale and triggers a background revalidation; `gcTime` (formerly `cacheTime`) controls when an unused entry is garbage-collected from memory.
+2. Query keys follow the pattern `[operation, ...params]` — for example `['todos', 'list']` or `['todos', 'detail', id]`. **Never key on URLs** (they conflate transport with cache identity and break under proxy/versioning changes).
+3. Every mutation (`useMutation`) **must call `queryClient.invalidateQueries({ queryKey })`** for all affected query keys on `onSuccess`. Optimistic updates are optional but, when used, must pair a `rollback` in `onError`.
+4. Offline persistence: `@tanstack/query-persist-client-core` + a custom MMKV persister (`react-native-mmkv`) so the query cache survives app restarts. This mirrors the swift disk-cache tier.
+5. The `QueryClient` is created once at app startup (`src/api/queryClient.ts`) and provided via `<QueryClientProvider>` in the root component. Never create per-component `QueryClient` instances.
+6. Network calls are isolated in `src/api/` typed functions (axios). **Screens and components never call axios directly** — this is the repository seam. Components consume hooks; hooks consume the api layer.
+7. The query cache is for **transient, server-owned data**. Durable user-owned data belongs in MMKV; secrets belong in `expo-secure-store` / `react-native-keychain`. TanStack Query is never a system of record.
+
+See `snippets.md §2` for QueryClient + MMKV persister setup, `snippets.md §5` for `queries.ts` / `mutations.ts`, and `snippets.md §9` for the cache rules recap.
+
+## Local Storage
+
+| Layer | Library | Purpose |
+|-------|---------|---------|
+| Fast KV (non-secret) | `react-native-mmkv` | User preferences, offline flags, TanStack Query persistence |
+| Secrets / tokens | `expo-secure-store` or `react-native-keychain` | Auth tokens, API keys |
+| Query cache persistence | MMKV persister (`@tanstack/query-persist-client-core`) | Offline-first server-state survival across restarts |
+
+**MMKV** is a C++-backed key-value store (the same one WeChat uses) that is 30× faster than `AsyncStorage` on both platforms. Use it for all non-secret durable state. Use `expo-secure-store` (Expo projects) or `react-native-keychain` (bare RN) for anything that must live in the platform secure enclave (iOS Keychain / Android Keystore).
+
+Never store secrets in MMKV — it is not encrypted by default.
+
+## Testing
+
+| Layer | Framework |
+|-------|-----------|
+| Unit (domain logic, stores) | Jest |
+| Component / screen | `@testing-library/react-native` |
+| E2E / critical flows | Maestro |
+
+Components under test are wrapped in a `QueryClientProvider` with a fresh `QueryClient` (no retries, zero stale time) so tests do not make real network calls. The `src/api/` module is mocked at the Jest module boundary — tests assert on hook behavior, not axios internals.
+
+Run tests with `npx jest --ci`. Maestro flow files live in `e2e/` and exercise critical user journeys (login, create-todo, toggle, delete) via `maestro test e2e/`.
+
+## Project Layout
+
+Feature-sliced structure with a clean api / feature / shared separation:
+
+```
+src/
+  api/
+    client.ts               # Axios singleton instance + interceptors
+    queryClient.ts          # QueryClient creation + MMKV persister setup
+    todos.ts                # Typed axios functions for /todos resource
+    auth.ts                 # Typed axios functions for /auth resource
+  features/
+    todos/
+      model/
+        todo.ts             # TypeScript types / interfaces for the domain
+      ui/
+        TodosScreen.tsx     # Screen consuming useQuery / useMutation hooks
+        TodoItem.tsx        # Presentational component
+      queries.ts            # useTodosQuery, useTodoDetailQuery (useQuery wrappers)
+      mutations.ts          # useCreateTodo, useToggleTodo, useDeleteTodo (useMutation)
+    auth/
+      model/
+        auth.ts
+      ui/
+        LoginScreen.tsx
+      queries.ts
+      mutations.ts
+  navigation/
+    RootNavigator.tsx       # Stack + Tab navigator composition
+    types.ts                # Typed RootStackParamList, TabParamList
+  shared/
+    components/
+      LoadingView.tsx
+      ErrorView.tsx
+      EmptyStateView.tsx
+    hooks/
+      useNetworkStatus.ts   # NetInfo wrapper for offline detection
+    utils/
+      storage.ts            # MMKV instance export
+  store/
+    authStore.ts            # Zustand store for auth session (token, user)
+    uiStore.ts              # Zustand store for global UI flags
+  App.tsx                   # Root component — providers, NavigationContainer
+e2e/
+  todos.yaml                # Maestro E2E flow for todos feature
+  auth.yaml                 # Maestro E2E flow for login
+```
+
+## Architecture Pattern
+
+```
+Screen / Component  (src/features/<feature>/ui/)
+  |  calls (React hook)
+  v
+useQuery / useMutation hook  (src/features/<feature>/queries.ts, mutations.ts)
+  |  reads from in-memory + MMKV-persisted cache (stale-while-revalidate)
+  +──────────────────────────────────►  QueryClient cache  (decoded JS objects)
+  |  on cache miss or revalidation
+  v
+src/api/<resource>.ts  (typed axios functions — transport only)
+  |  HTTP via singleton axios instance with auth interceptor
+  v
+Backend REST API
+```
+
+Each `features/<name>/` folder is a vertical slice owning its types, UI components, and data hooks. `shared/` contains stateless, reusable components and utilities with no feature knowledge. The `api/` layer is the only place that touches axios and the network.
+
+## Navigation: React Navigation v6 (native-stack)
+
+Use **`@react-navigation/native-stack`** (backed by `react-native-screens` native primitives) for push navigation — it is measurably faster than the JS-animated `@react-navigation/stack`. Tab navigation uses `@react-navigation/bottom-tabs`.
+
+Route param lists are **fully typed** in `src/navigation/types.ts` with a `RootStackParamList`. Screen components receive `NativeStackScreenProps<RootStackParamList, 'ScreenName'>` as props, giving compile-time checked navigation calls.
+
+```typescript
+// src/navigation/types.ts
+export type RootStackParamList = {
+  TodoList: undefined;
+  TodoDetail: { id: string };
+  Login: undefined;
+};
+```
+
+Pass `<NavigationContainer>` and navigator composition to `src/navigation/RootNavigator.tsx`; never embed navigation logic inside screen components.
+
+See `snippets.md §7` for the typed navigator setup and `snippets.md §6` for a screen consuming typed route params.
diff --git a/.agents/skills/oma-mobile/variants/stack.schema.json b/.agents/skills/oma-mobile/variants/stack.schema.json
index 1f77954..04a85cb 100644
--- a/.agents/skills/oma-mobile/variants/stack.schema.json
+++ b/.agents/skills/oma-mobile/variants/stack.schema.json
@@ -13,11 +13,31 @@
     },
     "framework": {
       "type": "string",
-      "description": "Primary UI framework (e.g., swiftui, uikit)."
+      "description": "Primary UI framework (e.g., swiftui, flutter, react-native)."
     },
     "ui": {
       "type": "string",
-      "description": "UI toolkit or paradigm (e.g., swiftui, uikit)."
+      "description": "UI toolkit or paradigm (e.g., swiftui, material3, react-native)."
+    },
+    "state": {
+      "type": "string",
+      "description": "State-management approach (e.g., observation, riverpod, zustand)."
+    },
+    "navigation": {
+      "type": "string",
+      "description": "Navigation/router library (e.g., navigationstack, gorouter, react-navigation)."
+    },
+    "http_client": {
+      "type": "string",
+      "description": "HTTP transport client (e.g., urlsession, dio, axios)."
+    },
+    "data_fetching": {
+      "type": "string",
+      "description": "Server-state / data-fetching layer where distinct from the raw HTTP client (e.g., tanstack-query)."
+    },
+    "local_storage": {
+      "type": "string",
+      "description": "Durable on-device persistence (e.g., swiftdata, drift, mmkv)."
     },
     "api_generator": {
       "type": "string",
@@ -27,6 +47,10 @@
       "type": "string",
       "description": "Relative path to the OpenAPI document consumed by the generator (e.g., Core/Networking/openapi.yaml)."
     },
+    "response_cache": {
+      "type": "string",
+      "description": "Repository-layer response cache library used to memoize decoded API models (e.g., hyperoslo-cache)."
+    },
     "structure": {
       "type": "string",
       "description": "Top-level module layout (e.g., App/Core/Features/Shared)."
diff --git a/.agents/skills/oma-mobile/variants/swift-ios/api-template.swift b/.agents/skills/oma-mobile/variants/swift-ios/api-template.swift
index 9ba22a2..91a2145 100644
--- a/.agents/skills/oma-mobile/variants/swift-ios/api-template.swift
+++ b/.agents/skills/oma-mobile/variants/swift-ios/api-template.swift
@@ -11,12 +11,19 @@
  *   - `Operations`   — one namespace per operation (e.g., `Operations.listTodos`)
  *   - `Components`   — shared schema types (e.g., `Components.Schemas.Todo`)
  *
+ * Caching: read-through is MANDATORY at this Repository layer via a
+ * `ResponseCache` actor over `hyperoslo/Cache` (see Core/Cache/ResponseCache.swift
+ * and snippets.md §10). It caches DECODED models — never `HTTPBody`. Reads use
+ * stale-while-revalidate; writes invalidate the affected keys.
+ *
  * File layout (split into real files in production):
  *   Core/Networking/
  *     openapi.yaml                      <- vendored OpenAPI spec (source of truth)
  *     openapi-generator-config.yaml     <- generator config (types + client, public)
  *     APIClient.swift                   <- URLSession transport + auth middleware wiring
  *     TodoService.swift                 <- this file
+ *   Core/Cache/
+ *     ResponseCache.swift               <- actor wrapping hyperoslo/Cache Storage
  */
 
 // ---------------------------------------------------------------------------
@@ -41,21 +48,62 @@ public enum TodoServiceError: Error, LocalizedError {
     }
 }
 
+/// Protocol seam the view models depend on, so the cached `TodoService` is
+/// swappable for a protocol-based mock in tests (no third-party mock lib).
+public protocol TodoProviding: Sendable {
+    func todosStream() -> AsyncThrowingStream<[Components.Schemas.Todo], Error>
+    func createTodo(title: String) async throws -> Components.Schemas.Todo
+    func toggleTodo(id: String) async throws -> Components.Schemas.Todo
+    func deleteTodo(id: String) async throws
+}
+
 /// CRUD service for the `/todos` resource.
 ///
-/// Depends on `Client` (generated from `Core/Networking/openapi.yaml`).
+/// Depends on `Client` (generated from `Core/Networking/openapi.yaml`) and a
+/// `ResponseCache` (Core/Cache/ResponseCache.swift, an actor over `hyperoslo/Cache`).
 /// Inject via `AppDependencies` at app startup; never instantiate directly in views.
-public final class TodoService {
+///
+/// Caching contract:
+///   - Reads cache DECODED models (never `HTTPBody`) and serve stale-while-revalidate.
+///   - Writes invalidate the affected cache keys so the next read repopulates.
+public final class TodoService: TodoProviding {
     private let client: Client
+    private let cache: ResponseCache<[Components.Schemas.Todo]>
 
-    public init(client: Client) {
+    /// Cache key for the list endpoint. Key on `operationID` + params, never URLs.
+    private static let listKey = "listTodos"
+
+    public init(client: Client, cache: ResponseCache<[Components.Schemas.Todo]>) {
         self.client = client
+        self.cache = cache
     }
 
-    // MARK: - List
+    // MARK: - List (stale-while-revalidate)
+
+    /// Yields the cached list first (if present), then the freshly-fetched list.
+    /// The view model iterates with `for try await` and updates state per yield.
+    /// On a network failure with a warm cache, the stale value stands and the
+    /// error is swallowed; with no cache, the error surfaces to the caller.
+    public func todosStream() -> AsyncThrowingStream<[Components.Schemas.Todo], Error> {
+        AsyncThrowingStream { continuation in
+            let task = Task {
+                let cached = await cache.value(forKey: Self.listKey)
+                if let cached { continuation.yield(cached) }
+                do {
+                    let fresh = try await fetchTodos()
+                    await cache.store(fresh, forKey: Self.listKey)
+                    continuation.yield(fresh)
+                    continuation.finish()
+                } catch {
+                    cached == nil ? continuation.finish(throwing: error)
+                                  : continuation.finish()
+                }
+            }
+            continuation.onTermination = { _ in task.cancel() }
+        }
+    }
 
-    /// Returns all todos for the authenticated user.
-    public func listTodos() async throws -> [Components.Schemas.Todo] {
+    private func fetchTodos() async throws -> [Components.Schemas.Todo] {
         let response = try await client.listTodos(.init())
         switch response {
         case .ok(let ok):
@@ -67,12 +115,13 @@ public final class TodoService {
 
     // MARK: - Create
 
-    /// Creates a new todo with the given title.
+    /// Creates a new todo with the given title, then invalidates the list cache.
     public func createTodo(title: String) async throws -> Components.Schemas.Todo {
         let body = Components.Schemas.CreateTodoRequest(title: title)
         let response = try await client.createTodo(.init(body: .json(body)))
         switch response {
         case .created(let created):
+            await cache.invalidate(Self.listKey)
             return try created.body.json
         case .conflict:
             throw TodoServiceError.conflict
@@ -83,11 +132,13 @@ public final class TodoService {
 
     // MARK: - Toggle
 
-    /// Toggles the `completed` flag on the todo with the given ID.
+    /// Toggles the `completed` flag on the todo with the given ID, then invalidates
+    /// the list cache.
     public func toggleTodo(id: String) async throws -> Components.Schemas.Todo {
         let response = try await client.toggleTodo(.init(path: .init(id: id)))
         switch response {
         case .ok(let ok):
+            await cache.invalidate(Self.listKey)
             return try ok.body.json
         case .notFound:
             throw TodoServiceError.notFound
@@ -98,11 +149,12 @@ public final class TodoService {
 
     // MARK: - Delete
 
-    /// Permanently deletes the todo with the given ID.
+    /// Permanently deletes the todo with the given ID, then invalidates the list cache.
     public func deleteTodo(id: String) async throws {
         let response = try await client.deleteTodo(.init(path: .init(id: id)))
         switch response {
         case .noContent:
+            await cache.invalidate(Self.listKey)
             return
         case .notFound:
             throw TodoServiceError.notFound
diff --git a/.agents/skills/oma-mobile/variants/swift-ios/snippets.md b/.agents/skills/oma-mobile/variants/swift-ios/snippets.md
index 21e08b3..83fba02 100644
--- a/.agents/skills/oma-mobile/variants/swift-ios/snippets.md
+++ b/.agents/skills/oma-mobile/variants/swift-ios/snippets.md
@@ -30,6 +30,11 @@ let package = Package(
             url: "https://github.com/apple/swift-openapi-urlsession",
             from: "1.0.2"
         ),
+        // Repository-layer response cache (hybrid memory + disk)
+        .package(
+            url: "https://github.com/hyperoslo/Cache",
+            from: "7.4.0"
+        ),
     ],
     targets: [
         .target(
@@ -37,6 +42,7 @@ let package = Package(
             dependencies: [
                 .product(name: "OpenAPIRuntime",  package: "swift-openapi-runtime"),
                 .product(name: "OpenAPIURLSession", package: "swift-openapi-urlsession"),
+                .product(name: "Cache",            package: "Cache"),
             ],
             // The generator discovers openapi.yaml + openapi-generator-config.yaml
             // inside this target's source directory and runs at every `swift build`.
@@ -89,10 +95,12 @@ final class TodosViewModel {
     var viewState: TodosViewState = .idle
 
     // MARK: - Private
-    private let service: TodoService
+    // Depend on the protocol seam, not the concrete service — enables protocol-based
+    // mocking in tests without a third-party mock lib (see §8).
+    private let service: any TodoProviding
     private var loadTask: Task<Void, Never>?
 
-    init(service: TodoService) {
+    init(service: any TodoProviding) {
         self.service = service
     }
 
@@ -106,9 +114,12 @@ final class TodosViewModel {
         loadTask = Task { [weak self] in
             guard let self else { return }
             do {
-                let todos = try await self.service.listTodos()
-                guard !Task.isCancelled else { return }
-                self.viewState = todos.isEmpty ? .empty : .loaded(todos)
+                // Stale-while-revalidate: the stream yields the cached list first
+                // (instant render), then the revalidated list. State updates per yield.
+                for try await todos in self.service.todosStream() {
+                    guard !Task.isCancelled else { return }
+                    self.viewState = todos.isEmpty ? .empty : .loaded(todos)
+                }
             } catch is CancellationError {
                 // Silently ignore — another load will follow.
             } catch {
@@ -136,7 +147,7 @@ struct TodosView: View {
     // @State owns the view model; the View is the allocation site.
     @State private var viewModel: TodosViewModel
 
-    init(service: TodoService) {
+    init(service: any TodoProviding) {
         _viewModel = State(wrappedValue: TodosViewModel(service: service))
     }
 
@@ -265,6 +276,10 @@ public struct BearerAuthMiddleware: ClientMiddleware {
 
 ## 6. Generated-Client Call Pattern
 
+> Isolates the raw generated-`Client` call + response mapping. The **production**
+> `TodoService` wraps this with a `ResponseCache` (read-through + invalidation) —
+> see §10. Use the cached form for real features; this excerpt is the inner call only.
+
 ```swift
 // Core/Networking/TodoService.swift  (excerpt showing call + response handling)
 import OpenAPIRuntime
@@ -334,7 +349,9 @@ final class AppDependencies {
             // TODO: replace with real keychain / token store lookup
             UserDefaults.standard.string(forKey: "accessToken")
         })
-        self.todoService = TodoService(client: apiClient.client)
+        // Repository-layer response cache (hyperoslo/Cache) — see snippets §10.
+        let todoCache = try! ResponseCache<[Components.Schemas.Todo]>(name: "Todos")
+        self.todoService = TodoService(client: apiClient.client, cache: todoCache)
     }
 }
 ```
@@ -348,15 +365,33 @@ final class AppDependencies {
 import XCTest
 @testable import MyApp
 
-// MARK: - Mock
+// MARK: - Mock (protocol-based — no subclassing, no third-party mock lib)
 
-final class MockTodoService: TodoService {
+final class MockTodoService: TodoProviding, @unchecked Sendable {
     var stubbedTodos: [Components.Schemas.Todo] = []
     var shouldThrow: Error?
 
-    override func listTodos() async throws -> [Components.Schemas.Todo] {
-        if let error = shouldThrow { throw error }
-        return stubbedTodos
+    func todosStream() -> AsyncThrowingStream<[Components.Schemas.Todo], Error> {
+        AsyncThrowingStream { continuation in
+            if let error = shouldThrow {
+                continuation.finish(throwing: error)
+            } else {
+                continuation.yield(stubbedTodos)
+                continuation.finish()
+            }
+        }
+    }
+
+    func createTodo(title: String) async throws -> Components.Schemas.Todo {
+        if let shouldThrow { throw shouldThrow }
+        return .init(id: "new", title: title, completed: false)
+    }
+    func toggleTodo(id: String) async throws -> Components.Schemas.Todo {
+        if let shouldThrow { throw shouldThrow }
+        return .init(id: id, title: "", completed: true)
+    }
+    func deleteTodo(id: String) async throws {
+        if let shouldThrow { throw shouldThrow }
     }
 }
 
@@ -365,7 +400,7 @@ final class MockTodoService: TodoService {
 final class TodosViewModelTests: XCTestCase {
     // Test that a successful response transitions to .loaded.
     func testLoad_success_transitionsToLoaded() async {
-        let mock = MockTodoService(client: .mock)
+        let mock = MockTodoService()
         mock.stubbedTodos = [
             .init(id: "1", title: "Buy milk", completed: false),
         ]
@@ -384,7 +419,7 @@ final class TodosViewModelTests: XCTestCase {
 
     // Test that an empty response transitions to .empty.
     func testLoad_emptyResponse_transitionsToEmpty() async {
-        let mock = MockTodoService(client: .mock)
+        let mock = MockTodoService()
         mock.stubbedTodos = []
         let sut = TodosViewModel(service: mock)
 
@@ -398,7 +433,7 @@ final class TodosViewModelTests: XCTestCase {
 
     // Test that a thrown error transitions to .error.
     func testLoad_networkError_transitionsToError() async {
-        let mock = MockTodoService(client: .mock)
+        let mock = MockTodoService()
         mock.shouldThrow = URLError(.notConnectedToInternet)
         let sut = TodosViewModel(service: mock)
 
@@ -411,3 +446,247 @@ final class TodosViewModelTests: XCTestCase {
     }
 }
 ```
+
+## 9. Navigation: interactive swipe-back on nav-bar-hidden routes
+
+**Root cause.** `NavigationStack` is backed by UIKit's `UINavigationController`, and
+the edge swipe-back is its `interactivePopGestureRecognizer`. UIKit ties that
+recognizer to the system back button, so any screen that hides the nav bar
+(`.toolbar(.hidden, for: .navigationBar)` — common with custom headers) loses the
+swipe gesture, and UIKit re-disables it every time such a screen becomes top.
+
+**Standard.** Swipe-back restoration is a navigation-layer concern, so restore it
+once at the **route-registration layer** (`navigationDestination`), not per screen.
+Pushed destinations always have something to pop to; tab roots aren't
+`navigationDestination`s, so they're correctly excluded for free.
+
+```swift
+// Shared/InteractiveSwipeBack.swift
+import SwiftUI
+import UIKit
+
+/// Reaches the enclosing UINavigationController, takes over the pop recognizer's
+/// delegate, and re-enables the edge swipe — scoped to the screen that asks for
+/// it (re-runs on every appear because UIKit re-disables it on nav-bar-hidden
+/// transitions). `canPop`/`onBlocked` guard the pop (e.g. confirm unsaved edits).
+private struct InteractiveSwipeBack: UIViewControllerRepresentable {
+    var canPop: () -> Bool
+    var onBlocked: () -> Void
+
+    func makeUIViewController(context: Context) -> UIViewController {
+        Controller(canPop: canPop, onBlocked: onBlocked)
+    }
+    func updateUIViewController(_ vc: UIViewController, context: Context) {
+        guard let c = vc as? Controller else { return }
+        c.canPop = canPop; c.onBlocked = onBlocked
+    }
+
+    final class Controller: UIViewController, UIGestureRecognizerDelegate {
+        var canPop: () -> Bool
+        var onBlocked: () -> Void
+        init(canPop: @escaping () -> Bool, onBlocked: @escaping () -> Void) {
+            self.canPop = canPop; self.onBlocked = onBlocked
+            super.init(nibName: nil, bundle: nil)
+        }
+        @available(*, unavailable) required init?(coder: NSCoder) { fatalError() }
+
+        override func didMove(toParent parent: UIViewController?) {
+            super.didMove(toParent: parent)
+            guard let r = navigationController?.interactivePopGestureRecognizer else { return }
+            r.delegate = self
+            r.isEnabled = true
+        }
+        func gestureRecognizerShouldBegin(_ g: UIGestureRecognizer) -> Bool {
+            guard (navigationController?.viewControllers.count ?? 0) > 1 else { return false }
+            if canPop() { return true }
+            onBlocked(); return false
+        }
+    }
+}
+
+extension View {
+    /// Restore edge swipe-back on a nav-bar-hidden screen.
+    func enableInteractiveSwipeBack() -> some View {
+        background(InteractiveSwipeBack(canPop: { true }, onBlocked: {}).frame(width: 0, height: 0))
+    }
+    /// Guarded variant: swallow the swipe and run `onBlocked` when `canPop` is false.
+    func interactiveSwipeBack(
+        canPop: @escaping () -> Bool,
+        onBlocked: @escaping () -> Void
+    ) -> some View {
+        background(InteractiveSwipeBack(canPop: canPop, onBlocked: onBlocked).frame(width: 0, height: 0))
+    }
+
+    /// PREFERRED registration: every pushed route gets swipe-back automatically.
+    /// Use this instead of bare `navigationDestination(for:)` for push routes.
+    func swipeBackDestination<D: Hashable, C: View>(
+        for type: D.Type,
+        @ViewBuilder destination: @escaping (D) -> C
+    ) -> some View {
+        navigationDestination(for: type) { value in
+            destination(value).enableInteractiveSwipeBack()
+        }
+    }
+}
+```
+
+```swift
+// Usage — register routes through the wrapper, not bare navigationDestination:
+NavigationStack(path: $router.path) {
+    RootView()
+        .swipeBackDestination(for: ProgramID.self) { ProgramDetailView(id: $0) }
+        .swipeBackDestination(for: SettingsRoute.self) { _ in SettingsView() }
+}
+
+// Only screens with a custom pop policy override explicitly:
+NewPostView()
+    .interactiveSwipeBack(canPop: { viewModel.isSaved }, onBlocked: { showDiscardConfirm = true })
+```
+
+> Anti-pattern: sprinkling `.enableInteractiveSwipeBack()` on each `View` body. It
+> compiles even when forgotten, so nav-bar-hidden routes silently lose the gesture.
+> Enforce at the route layer; optionally add a SwiftLint rule that flags
+> `.toolbar(.hidden, for: .navigationBar)` without a swipe-back modifier.
+
+---
+
+## 10. Repository-layer response cache (hyperoslo/Cache)
+
+Read-through caching is **mandatory at the Repository (Service) layer**. Cache the
+**decoded** `Components.Schemas.*` models returned by the generated `Client` — never
+intercept `HTTPBody` in a middleware (it is a single-consumption stream). `hyperoslo/Cache`'s
+`Storage` is not `Sendable`, so it is always owned by an `actor`.
+
+```swift
+// Core/Cache/ResponseCache.swift
+import Foundation
+import Cache
+
+/// Actor wrapper over hyperoslo/Cache. One instance per cached value type.
+/// Owns a non-Sendable `Storage`, so all access is actor-isolated → Swift 6 clean.
+actor ResponseCache<Value: Codable & Sendable> {
+    private let storage: Storage<String, Value>
+
+    /// - Parameters:
+    ///   - name: disk namespace (one folder per cache, e.g. "Todos").
+    ///   - memoryExpiry: in-memory TTL — fast path, lost on app relaunch.
+    ///   - diskExpiry: on-disk TTL — survives relaunch. Never use `.never`.
+    init(
+        name: String,
+        memoryExpiry: Expiry = .seconds(120),
+        diskExpiry: Expiry = .seconds(60 * 60)
+    ) throws {
+        self.storage = try Storage<String, Value>(
+            diskConfig: DiskConfig(name: name, expiry: diskExpiry),
+            memoryConfig: MemoryConfig(expiry: memoryExpiry, countLimit: 200, totalCostLimit: 0),
+            transformer: TransformerFactory.forCodable(ofType: Value.self)
+        )
+    }
+
+    /// Non-expired cached value, or nil on miss/expiry. Read errors degrade to nil.
+    func value(forKey key: String) -> Value? {
+        try? storage.object(forKey: key)
+    }
+
+    func store(_ value: Value, forKey key: String) {
+        try? storage.setObject(value, forKey: key)
+    }
+
+    /// Drop affected keys after a write so the next read repopulates.
+    func invalidate(_ key: String) { try? storage.removeObject(forKey: key) }
+    func invalidateAll() { try? storage.removeAll() }
+}
+```
+
+```swift
+// Core/Networking/TodoProviding.swift
+import Foundation
+
+/// Protocol seam the view models depend on. Keeps the cached `TodoService`
+/// swappable for a protocol-based mock in tests (no third-party mock lib).
+public protocol TodoProviding: Sendable {
+    func todosStream() -> AsyncThrowingStream<[Components.Schemas.Todo], Error>
+    func createTodo(title: String) async throws -> Components.Schemas.Todo
+    func toggleTodo(id: String) async throws -> Components.Schemas.Todo
+    func deleteTodo(id: String) async throws
+}
+```
+
+```swift
+// Core/Networking/TodoService.swift  (cached repository)
+import Foundation
+
+public final class TodoService: TodoProviding {
+    private let client: Client
+    private let cache: ResponseCache<[Components.Schemas.Todo]>
+
+    public init(client: Client, cache: ResponseCache<[Components.Schemas.Todo]>) {
+        self.client = client
+        self.cache = cache
+    }
+
+    private static let listKey = "listTodos"
+
+    // MARK: - Read (stale-while-revalidate)
+
+    /// Yields the cached list first (if any), then the freshly-fetched list.
+    /// The View model iterates with `for try await` and updates state on each yield.
+    /// If the network fails but a cached value exists, the stale value stands and
+    /// the error is swallowed; with no cache, the error surfaces.
+    public func todosStream() -> AsyncThrowingStream<[Components.Schemas.Todo], Error> {
+        AsyncThrowingStream { continuation in
+            let task = Task {
+                let cached = await cache.value(forKey: Self.listKey)
+                if let cached { continuation.yield(cached) }     // serve stale immediately
+                do {
+                    let fresh = try await fetchTodos()
+                    await cache.store(fresh, forKey: Self.listKey)
+                    continuation.yield(fresh)                     // then revalidate
+                    continuation.finish()
+                } catch {
+                    cached == nil ? continuation.finish(throwing: error)
+                                  : continuation.finish()
+                }
+            }
+            continuation.onTermination = { _ in task.cancel() }
+        }
+    }
+
+    private func fetchTodos() async throws -> [Components.Schemas.Todo] {
+        let response = try await client.listTodos(.init())
+        switch response {
+        case .ok(let ok):
+            return try ok.body.json
+        case .undocumented(let statusCode, _):
+            throw TodoServiceError.undocumented(statusCode: statusCode)
+        }
+    }
+
+    // MARK: - Write (invalidate after success)
+
+    public func createTodo(title: String) async throws -> Components.Schemas.Todo {
+        let body = Components.Schemas.CreateTodoRequest(title: title)
+        let response = try await client.createTodo(.init(body: .json(body)))
+        switch response {
+        case .created(let created):
+            await cache.invalidate(Self.listKey)   // next read repopulates
+            return try created.body.json
+        case .conflict:
+            throw TodoServiceError.conflict
+        case .undocumented(let statusCode, _):
+            throw TodoServiceError.undocumented(statusCode: statusCode)
+        }
+    }
+}
+```
+
+The view model consumes the stream with `for try await` — see §3 `TodosViewModel.load()`
+for the cancellation-safe consumer.
+
+Wire the cache into the service at the composition root — see §7 `AppDependencies`:
+`TodoService(client: apiClient.client, cache: try! ResponseCache(name: "Todos"))`.
+
+> Rules recap: cache **decoded models** at the Repository layer (not `HTTPBody`);
+> key on `operationID` + params; explicit memory/disk TTLs (never `.never`);
+> invalidate affected keys after every write. Durable user-owned data → SwiftData;
+> secrets → Keychain. `hyperoslo/Cache` is never a system of record.
diff --git a/.agents/skills/oma-mobile/variants/swift-ios/stack.yaml b/.agents/skills/oma-mobile/variants/swift-ios/stack.yaml
index 9f8e512..a625ce3 100644
--- a/.agents/skills/oma-mobile/variants/swift-ios/stack.yaml
+++ b/.agents/skills/oma-mobile/variants/swift-ios/stack.yaml
@@ -4,6 +4,7 @@ framework: swiftui
 ui: swiftui
 api_generator: swift-openapi-generator
 api_spec: Core/Networking/openapi.yaml
+response_cache: hyperoslo-cache
 structure: App/Core/Features/Shared
 source: variant
 
diff --git a/.agents/skills/oma-mobile/variants/swift-ios/tech-stack.md b/.agents/skills/oma-mobile/variants/swift-ios/tech-stack.md
index 6e673f2..dc2392c 100644
--- a/.agents/skills/oma-mobile/variants/swift-ios/tech-stack.md
+++ b/.agents/skills/oma-mobile/variants/swift-ios/tech-stack.md
@@ -32,9 +32,40 @@ The OpenAPI document is **vendored** at `Core/Networking/openapi.yaml`. Its sour
 
 The iOS project is purely a **consumer** of the spec. It never modifies `openapi.yaml` directly. If the spec is missing, `swift build` fails with a generator error — ensure the sync step is complete before building.
 
+## Response Cache: hyperoslo/Cache
+
+| Component | Package |
+|-----------|---------|
+| Hybrid (memory + disk) cache | `hyperoslo/Cache` |
+
+Read-through caching of API responses is **mandatory at the Repository (Service) layer**, backed by `hyperoslo/Cache`. The generated `Components.Schemas.*` types are `Codable`, so they are cached directly through `Cache`'s `Storage<Key, Value>` with `TransformerFactory.forCodable`. This memoizes **decoded models**, not raw bytes — the cache sits between the `@Observable` view model and the generated `Client`, never inside a `ClientMiddleware`.
+
+**Placement rule — Repository layer, not transport.** Do **not** intercept `HTTPBody` in a `ClientMiddleware` to cache responses: `HTTPBody` is a single-consumption async stream, so capturing it for replay corrupts the request/response lifecycle. Cache the typed result *after* the generated `Client` call returns instead.
+
+```
+@Observable ViewModel
+  |  calls
+  v
+Core Service (Repository)  ──reads/writes──►  ResponseCache (hyperoslo/Cache)
+  |  on miss / revalidate
+  v
+Generated Client → URLSession → Backend
+```
+
+**Mandatory rules:**
+
+1. Every read endpoint (`GET`-shaped operation) goes through a `ResponseCache` actor that wraps `hyperoslo/Cache`'s `Storage`. The `Storage` type is not `Sendable`, so it is **always** owned by an `actor` to stay Swift 6 strict-concurrency clean.
+2. Cache **key** = `operationID` + a stable encoding of its path/query params (e.g. `"listTodos"`, `"getTodo:\(id)"`). Never key on URLs.
+3. Apply a **stale-while-revalidate** policy: return the cached value immediately when present, then refresh in the background and update state. Memory expiry and disk expiry are set explicitly per resource via `MemoryConfig` / `DiskConfig` — no implicit infinite TTL.
+4. Any **write** endpoint (`POST`/`PATCH`/`DELETE`) must `removeObject`/`removeAll` the affected keys after success so the next read repopulates.
+5. `Cache` is for transient/server-owned data. **Durable, user-owned** state (drafts, offline records) still belongs in **SwiftData**; **secrets** still belong in **Keychain**. Do not use `hyperoslo/Cache` as a system of record.
+
+See `snippets.md` §10 for the canonical `ResponseCache` actor and cached `TodoService`.
+
 ## Local Storage
 
-- **SwiftData** (iOS 17+) — Swift-native ORM built on Core Data; preferred for structured persistence.
+- **hyperoslo/Cache** — hybrid memory+disk cache for **API response memoization** at the Repository layer (see above). Transient, server-owned data only.
+- **SwiftData** (iOS 17+) — Swift-native ORM built on Core Data; preferred for **durable, user-owned** structured persistence (system of record).
 - **UserDefaults / `@AppStorage`** — lightweight key-value preferences.
 - **Keychain** (`Security` framework) — tokens and credentials.
 
@@ -63,6 +94,9 @@ MyApp/
         openapi-generator-config.yaml
         APIClient.swift             # Wraps the generated Client; adds URLSession transport + auth
         BearerAuthMiddleware.swift  # ClientMiddleware for bearer token injection
+        TodoService.swift           # Repository: generated Client + ResponseCache read-through
+      Cache/
+        ResponseCache.swift         # actor wrapping hyperoslo/Cache Storage<String, Value>
       Services/
         AuthService.swift
         TokenStore.swift
@@ -98,8 +132,10 @@ View (SwiftUI)
 @Observable ViewModel  (Features/<Feature>/FeatureViewModel.swift)
   |  calls
   v
-Core Service           (Core/Networking/APIClient.swift or Core/Services/…)
-  |  calls
+Core Service           (Core/Networking/TodoService.swift)
+  |  reads/writes (stale-while-revalidate)
+  +────────────────►  ResponseCache (Core/Cache/, actor over hyperoslo/Cache)
+  |  on miss / revalidate
   v
 Generated Client       (auto-generated from Core/Networking/openapi.yaml)
   |  HTTP via URLSession transport
@@ -108,3 +144,17 @@ Backend REST API
 ```
 
 Each `Features/<Name>/` folder is a vertical slice: it owns its own `View` + `ViewModel` and depends only on `Core` services injected at app startup. `Shared/` contains stateless, reusable UI components and Swift extensions with no feature knowledge.
+
+## Navigation: NavigationStack + swipe-back
+
+Path-based `NavigationStack(path:)` with typed routes registered via
+`navigationDestination`. Swipe-back is a **navigation-layer** concern, not a
+per-screen one.
+
+Apps that hide the nav bar for custom headers (`.toolbar(.hidden, for: .navigationBar)`)
+lose the system edge swipe-back, because UIKit ties `interactivePopGestureRecognizer`
+to the system back button and re-disables it on every nav-bar-hidden transition.
+Restore it at the **route-registration layer** with a `swipeBackDestination`
+wrapper (see `snippets.md` §9) so every pushed route keeps the gesture and tab
+roots are excluded for free. Never restore it ad-hoc per `View` body — that drifts
+silently because forgetting it still compiles.
diff --git a/.agents/skills/oma-refactor/SKILL.md b/.agents/skills/oma-refactor/SKILL.md
index 8c52d28..1165a98 100644
--- a/.agents/skills/oma-refactor/SKILL.md
+++ b/.agents/skills/oma-refactor/SKILL.md
@@ -117,7 +117,7 @@ outputs:
 ### Tools and instruments
 - Serena MCP: `find_symbol`, `find_referencing_symbols`, `search_for_pattern` for impact analysis
 - Deterministic transformers: IDE refactoring actions, codemods (jscodeshift / OpenRewrite / ast-grep / comby)
-- Metrics: lizard / radon (complexity), per-language linters with `max-lines` gates
+- Metrics: lizard / radon (complexity) — both are PyPI packages, run via `uvx lizard` / `uvx radon` so no pre-install is required; per-language linters with `max-lines` gates
 - Test stack per registry: vitest + StrykerJS / pytest + mutmut / flutter_test (see `resources/governance.md`)
 - Git forensics one-liners (see `resources/measurement.md`)
 
diff --git a/.agents/skills/oma-refactor/resources/measurement.md b/.agents/skills/oma-refactor/resources/measurement.md
index 8b437cd..5d1c3ce 100644
--- a/.agents/skills/oma-refactor/resources/measurement.md
+++ b/.agents/skills/oma-refactor/resources/measurement.md
@@ -12,11 +12,12 @@
 | Duplication % | Token/AST clone ratio | Duplicate Code smell, quantified |
 
 ```bash
+# radon and lizard are PyPI packages — run via uvx (no install needed).
 # Python
-radon cc -s -a <path>          # cyclomatic
-lizard <path>                  # multi-language CC + NLOC + params
+uvx radon cc -s -a <path>      # cyclomatic
+uvx lizard <path>              # multi-language CC + NLOC + params
 # Any language with lizard support
-lizard -l <lang> --CCN 10 <path>
+uvx lizard -l <lang> --CCN 10 <path>
 ```
 
 ## Layer 2 - Git forensics: "where change actually happens"
@@ -56,7 +57,7 @@ rg -c 'TODO|FIXME|HACK|XXX' --type-add 'src:*.{ts,tsx,py,dart,go,java,kt}' -t sr
 # Recipe: top-churn files joined with complexity
 git log --format=format: --name-only --since="1 year ago" | grep -vE '(^$|lock)' \
   | sort | uniq -c | sort -nr | head -30 | awk '{print $2}' \
-  | xargs -I{} sh -c 'echo "$(lizard -C 999 {} 2>/dev/null | tail -1) {}"'
+  | xargs -I{} sh -c 'echo "$(uvx lizard -C 999 {} 2>/dev/null | tail -1) {}"'
 # Or use code-maat / CodeScene for the full join
 ```
 
diff --git a/.claude/hooks/oma-hook.sh b/.claude/hooks/oma-hook.sh
index 50bcbff..8c86839 100755
--- a/.claude/hooks/oma-hook.sh
+++ b/.claude/hooks/oma-hook.sh
@@ -11,8 +11,8 @@ if [ -f "$__oma_dedup_lock" ]; then
 fi
 echo "$$" > "$__oma_dedup_lock"
 __oma_bin=""
-if [ -x "/Users/gracefullight/.bun/bin/oma" ]; then
-  __oma_bin="/Users/gracefullight/.bun/bin/oma"
+if [ -x "/home/runner/.bun/bin/oma" ]; then
+  __oma_bin="/home/runner/.bun/bin/oma"
 elif command -v oma >/dev/null 2>&1; then
   __oma_bin="$(command -v oma)"
 fi
diff --git a/.claude/rules/i18n-arb.md b/.claude/rules/i18n-arb.md
new file mode 100644
index 0000000..af3faf2
--- /dev/null
+++ b/.claude/rules/i18n-arb.md
@@ -0,0 +1,19 @@
+---
+description: ARB-based localization standards — ARB as the single cross-platform
+  source of truth for UI strings
+paths: "**/*.arb"
+---
+
+
+# ARB-Based Localization
+
+When ARB files exist in the project, they are the **single source of truth** for all user-facing strings — regardless of target platform. A build step generates the platform-specific artifacts from ARB (e.g. JSON for web, generated Dart for Flutter).
+
+1. **Never hardcode UI strings** — all user-visible text must come from ARB files (`*.arb`)
+2. **Edit ARB first** — when adding or changing UI text, update the ARB file, then run the i18n build
+3. **Build after changes** — run the project's i18n build task (e.g. `mise i18n:build`, or `dart run build_runner build` in a Flutter package) to regenerate localized output (JSON for web, generated Dart, etc.). Prefer the `mise` task when one exists.
+4. **Generated output is never hand-edited** — change the ARB and rebuild; treat the emitted JSON/Dart as derived artifacts
+5. **Base locale** — the primary ARB file (e.g., `app_en.arb`) is the reference; other locales derive from it
+6. **Key naming** — use `camelCase` keys describing the purpose, not the content: `loginButton` not `clickHere`
+7. **Placeholders** — use ICU message syntax for interpolation: `"greeting": "Hello, {name}!"`
+8. **Do not translate keys** — ARB keys are identifiers, always in English
diff --git a/.claude/rules/i18n-guide.md b/.claude/rules/i18n-guide.md
index 2e28312..9b052ea 100644
--- a/.claude/rules/i18n-guide.md
+++ b/.claude/rules/i18n-guide.md
@@ -73,17 +73,9 @@ All workflows follow these rules. The following line in existing workflows refer
 - **Response language follows `language` setting in `.agents/oma-config.yaml` if configured.**
 ```
 
-## ARB-Based Localization (`packages/i18n/`)
-
-If `packages/i18n/` exists in the project, ARB files are the **single source of truth** for all user-facing strings.
-
-1. **Never hardcode UI strings** — all user-visible text must come from ARB files (`*.arb`)
-2. **Edit ARB first** — when adding or changing UI text, update the ARB file, then run the build in `packages/i18n/`
-3. **Build after changes** — run `dart run build_runner build` (or equivalent) inside `packages/i18n/` to regenerate localization code
-4. **Base locale** — the primary ARB file (e.g., `app_en.arb`) is the reference; other locales derive from it
-5. **Key naming** — use `camelCase` keys describing the purpose, not the content: `loginButton` not `clickHere`
-6. **Placeholders** — use ICU message syntax for interpolation: `"greeting": "Hello, {name}!"`
-7. **Do not translate keys** — ARB keys are identifiers, always in English
+> ARB-based localization (ARB as the single cross-platform source of truth for
+> UI strings) is a path-scoped rule — see `i18n-arb.md`, which loads only when
+> `*.arb` files are in context.
 
 ## Subagent Behavior
 
diff --git a/.claude/settings.json b/.claude/settings.json
index 651401d..21b72b0 100644
--- a/.claude/settings.json
+++ b/.claude/settings.json
@@ -7,7 +7,7 @@
             "name": "oma-hook-UserPromptSubmit",
             "type": "command",
             "command": "\"$CLAUDE_PROJECT_DIR/.claude/hooks/oma-hook.sh\" --vendor 'claude' --event 'UserPromptSubmit'",
-            "timeout": 21
+            "timeout": 15
           }
         ]
       }
@@ -51,9 +51,8 @@
     ]
   },
   "env": {
-    "cleanupPeriodDays": 180,
-    "CLAUDE_CODE_FILE_READ_MAX_OUTPUT_TOKENS": 100000,
-    "CLAUDE_AUTOCOMPACT_PCT_OVERRIDE": 80,
+    "CLAUDE_CODE_FILE_READ_MAX_OUTPUT_TOKENS": "100000",
+    "CLAUDE_AUTOCOMPACT_PCT_OVERRIDE": "80",
     "DISABLE_TELEMETRY": "1",
     "DISABLE_ERROR_REPORTING": "1",
     "CLAUDE_CODE_DISABLE_FEEDBACK_SURVEY": "1",
@@ -68,5 +67,6 @@
   },
   "skipDangerousModePermissionPrompt": true,
   "effortLevel": "xhigh",
-  "skillListingBudgetFraction": 0.02
+  "skillListingBudgetFraction": 0.02,
+  "cleanupPeriodDays": 180
 }
diff --git a/.claude/skills/backend-agent b/.claude/skills/backend-agent
deleted file mode 120000
index a708c71..0000000
--- a/.claude/skills/backend-agent
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/backend-agent
\ No newline at end of file
diff --git a/.claude/skills/competitor-alternatives b/.claude/skills/competitor-alternatives
deleted file mode 120000
index b7bfb25..0000000
--- a/.claude/skills/competitor-alternatives
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/competitor-alternatives
\ No newline at end of file
diff --git a/.claude/skills/component-refactoring b/.claude/skills/component-refactoring
deleted file mode 120000
index 53ae67e..0000000
--- a/.claude/skills/component-refactoring
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/component-refactoring
\ No newline at end of file
diff --git a/.claude/skills/content-strategy b/.claude/skills/content-strategy
deleted file mode 120000
index e9c0f64..0000000
--- a/.claude/skills/content-strategy
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/content-strategy
\ No newline at end of file
diff --git a/.claude/skills/copy-editing b/.claude/skills/copy-editing
deleted file mode 120000
index b204bdb..0000000
--- a/.claude/skills/copy-editing
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/copy-editing
\ No newline at end of file
diff --git a/.claude/skills/copywriting b/.claude/skills/copywriting
deleted file mode 120000
index 214f218..0000000
--- a/.claude/skills/copywriting
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/copywriting
\ No newline at end of file
diff --git a/.claude/skills/db-agent b/.claude/skills/db-agent
deleted file mode 120000
index 48a0e3d..0000000
--- a/.claude/skills/db-agent
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/db-agent
\ No newline at end of file
diff --git a/.claude/skills/debug-agent b/.claude/skills/debug-agent
deleted file mode 120000
index 10261eb..0000000
--- a/.claude/skills/debug-agent
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/debug-agent
\ No newline at end of file
diff --git a/.claude/skills/dev-workflow b/.claude/skills/dev-workflow
deleted file mode 120000
index 17e0135..0000000
--- a/.claude/skills/dev-workflow
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/dev-workflow
\ No newline at end of file
diff --git a/.claude/skills/fastapi-router-creator b/.claude/skills/fastapi-router-creator
deleted file mode 120000
index b398c10..0000000
--- a/.claude/skills/fastapi-router-creator
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/fastapi-router-creator
\ No newline at end of file
diff --git a/.claude/skills/fastapi-templates b/.claude/skills/fastapi-templates
deleted file mode 120000
index c4d10b2..0000000
--- a/.claude/skills/fastapi-templates
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/fastapi-templates
\ No newline at end of file
diff --git a/.claude/skills/free-tool-strategy b/.claude/skills/free-tool-strategy
deleted file mode 120000
index a68541e..0000000
--- a/.claude/skills/free-tool-strategy
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/free-tool-strategy
\ No newline at end of file
diff --git a/.claude/skills/frontend-agent b/.claude/skills/frontend-agent
deleted file mode 120000
index 04bd551..0000000
--- a/.claude/skills/frontend-agent
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/frontend-agent
\ No newline at end of file
diff --git a/.claude/skills/gcp-migration b/.claude/skills/gcp-migration
deleted file mode 120000
index e25bf8c..0000000
--- a/.claude/skills/gcp-migration
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/gcp-migration
\ No newline at end of file
diff --git a/.claude/skills/launch-strategy b/.claude/skills/launch-strategy
deleted file mode 120000
index d3d5bc1..0000000
--- a/.claude/skills/launch-strategy
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/launch-strategy
\ No newline at end of file
diff --git a/.claude/skills/marketing-ideas b/.claude/skills/marketing-ideas
deleted file mode 120000
index d80f4b4..0000000
--- a/.claude/skills/marketing-ideas
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/marketing-ideas
\ No newline at end of file
diff --git a/.claude/skills/marketing-psychology b/.claude/skills/marketing-psychology
deleted file mode 120000
index faa7ce6..0000000
--- a/.claude/skills/marketing-psychology
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/marketing-psychology
\ No newline at end of file
diff --git a/.claude/skills/mobile-agent b/.claude/skills/mobile-agent
deleted file mode 120000
index 2dce0ba..0000000
--- a/.claude/skills/mobile-agent
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/mobile-agent
\ No newline at end of file
diff --git a/.claude/skills/oma-commit b/.claude/skills/oma-commit
deleted file mode 120000
index 7d1c38d..0000000
--- a/.claude/skills/oma-commit
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/oma-commit
\ No newline at end of file
diff --git a/.claude/skills/orchestrator b/.claude/skills/orchestrator
deleted file mode 120000
index 5ce410e..0000000
--- a/.claude/skills/orchestrator
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/orchestrator
\ No newline at end of file
diff --git a/.claude/skills/pm-agent b/.claude/skills/pm-agent
deleted file mode 120000
index 052bc82..0000000
--- a/.claude/skills/pm-agent
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/pm-agent
\ No newline at end of file
diff --git a/.claude/skills/postgres-best-practices b/.claude/skills/postgres-best-practices
deleted file mode 120000
index 24b392e..0000000
--- a/.claude/skills/postgres-best-practices
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/postgres-best-practices
\ No newline at end of file
diff --git a/.claude/skills/pricing-strategy b/.claude/skills/pricing-strategy
deleted file mode 120000
index 2eb9ef8..0000000
--- a/.claude/skills/pricing-strategy
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/pricing-strategy
\ No newline at end of file
diff --git a/.claude/skills/product-marketing-context b/.claude/skills/product-marketing-context
deleted file mode 120000
index 87de50b..0000000
--- a/.claude/skills/product-marketing-context
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/product-marketing-context
\ No newline at end of file
diff --git a/.claude/skills/qa-agent b/.claude/skills/qa-agent
deleted file mode 120000
index 444d092..0000000
--- a/.claude/skills/qa-agent
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/qa-agent
\ No newline at end of file
diff --git a/.claude/skills/skill-creator b/.claude/skills/skill-creator
deleted file mode 120000
index b874554..0000000
--- a/.claude/skills/skill-creator
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/skill-creator
\ No newline at end of file
diff --git a/.claude/skills/skill-lookup b/.claude/skills/skill-lookup
deleted file mode 120000
index a42583f..0000000
--- a/.claude/skills/skill-lookup
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/skill-lookup
\ No newline at end of file
diff --git a/.claude/skills/social-content b/.claude/skills/social-content
deleted file mode 120000
index ea81ab0..0000000
--- a/.claude/skills/social-content
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/social-content
\ No newline at end of file
diff --git a/.claude/skills/tf-infra-agent b/.claude/skills/tf-infra-agent
deleted file mode 120000
index 1f01281..0000000
--- a/.claude/skills/tf-infra-agent
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/tf-infra-agent
\ No newline at end of file
diff --git a/.claude/skills/translator b/.claude/skills/translator
deleted file mode 120000
index 102b773..0000000
--- a/.claude/skills/translator
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/translator
\ No newline at end of file
diff --git a/.claude/skills/ui-ux-pro-max b/.claude/skills/ui-ux-pro-max
deleted file mode 120000
index ba0d349..0000000
--- a/.claude/skills/ui-ux-pro-max
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/ui-ux-pro-max
\ No newline at end of file
diff --git a/.claude/skills/webf-native-ui-dev b/.claude/skills/webf-native-ui-dev
deleted file mode 120000
index c442cbf..0000000
--- a/.claude/skills/webf-native-ui-dev
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/webf-native-ui-dev
\ No newline at end of file
diff --git a/.claude/skills/workflow-guide b/.claude/skills/workflow-guide
deleted file mode 120000
index 4f6b5c6..0000000
--- a/.claude/skills/workflow-guide
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/workflow-guide
\ No newline at end of file
diff --git a/.codex/hooks/oma-hook.sh b/.codex/hooks/oma-hook.sh
index 50bcbff..8c86839 100755
--- a/.codex/hooks/oma-hook.sh
+++ b/.codex/hooks/oma-hook.sh
@@ -11,8 +11,8 @@ if [ -f "$__oma_dedup_lock" ]; then
 fi
 echo "$$" > "$__oma_dedup_lock"
 __oma_bin=""
-if [ -x "/Users/gracefullight/.bun/bin/oma" ]; then
-  __oma_bin="/Users/gracefullight/.bun/bin/oma"
+if [ -x "/home/runner/.bun/bin/oma" ]; then
+  __oma_bin="/home/runner/.bun/bin/oma"
 elif command -v oma >/dev/null 2>&1; then
   __oma_bin="$(command -v oma)"
 fi
diff --git a/.cursor/hooks/oma-hook.sh b/.cursor/hooks/oma-hook.sh
index 50bcbff..8c86839 100755
--- a/.cursor/hooks/oma-hook.sh
+++ b/.cursor/hooks/oma-hook.sh
@@ -11,8 +11,8 @@ if [ -f "$__oma_dedup_lock" ]; then
 fi
 echo "$$" > "$__oma_dedup_lock"
 __oma_bin=""
-if [ -x "/Users/gracefullight/.bun/bin/oma" ]; then
-  __oma_bin="/Users/gracefullight/.bun/bin/oma"
+if [ -x "/home/runner/.bun/bin/oma" ]; then
+  __oma_bin="/home/runner/.bun/bin/oma"
 elif command -v oma >/dev/null 2>&1; then
   __oma_bin="$(command -v oma)"
 fi
diff --git a/.cursor/rules/i18n-arb.mdc b/.cursor/rules/i18n-arb.mdc
new file mode 100644
index 0000000..fd9f850
--- /dev/null
+++ b/.cursor/rules/i18n-arb.mdc
@@ -0,0 +1,20 @@
+---
+description: "ARB-based localization standards — ARB as the single cross-platform source of truth for UI strings"
+globs: "**/*.arb"
+alwaysApply: false
+---
+
+<!-- Generated by oh-my-agent. Source: .agents/rules/i18n-arb.md -->
+
+# ARB-Based Localization
+
+When ARB files exist in the project, they are the **single source of truth** for all user-facing strings — regardless of target platform. A build step generates the platform-specific artifacts from ARB (e.g. JSON for web, generated Dart for Flutter).
+
+1. **Never hardcode UI strings** — all user-visible text must come from ARB files (`*.arb`)
+2. **Edit ARB first** — when adding or changing UI text, update the ARB file, then run the i18n build
+3. **Build after changes** — run the project's i18n build task (e.g. `mise i18n:build`, or `dart run build_runner build` in a Flutter package) to regenerate localized output (JSON for web, generated Dart, etc.). Prefer the `mise` task when one exists.
+4. **Generated output is never hand-edited** — change the ARB and rebuild; treat the emitted JSON/Dart as derived artifacts
+5. **Base locale** — the primary ARB file (e.g., `app_en.arb`) is the reference; other locales derive from it
+6. **Key naming** — use `camelCase` keys describing the purpose, not the content: `loginButton` not `clickHere`
+7. **Placeholders** — use ICU message syntax for interpolation: `"greeting": "Hello, {name}!"`
+8. **Do not translate keys** — ARB keys are identifiers, always in English
diff --git a/.cursor/rules/i18n-guide.mdc b/.cursor/rules/i18n-guide.mdc
index 9797c84..9b503fc 100644
--- a/.cursor/rules/i18n-guide.mdc
+++ b/.cursor/rules/i18n-guide.mdc
@@ -76,17 +76,9 @@ All workflows follow these rules. The following line in existing workflows refer
 - **Response language follows `language` setting in `.agents/oma-config.yaml` if configured.**
 ```
 
-## ARB-Based Localization (`packages/i18n/`)
-
-If `packages/i18n/` exists in the project, ARB files are the **single source of truth** for all user-facing strings.
-
-1. **Never hardcode UI strings** — all user-visible text must come from ARB files (`*.arb`)
-2. **Edit ARB first** — when adding or changing UI text, update the ARB file, then run the build in `packages/i18n/`
-3. **Build after changes** — run `dart run build_runner build` (or equivalent) inside `packages/i18n/` to regenerate localization code
-4. **Base locale** — the primary ARB file (e.g., `app_en.arb`) is the reference; other locales derive from it
-5. **Key naming** — use `camelCase` keys describing the purpose, not the content: `loginButton` not `clickHere`
-6. **Placeholders** — use ICU message syntax for interpolation: `"greeting": "Hello, {name}!"`
-7. **Do not translate keys** — ARB keys are identifiers, always in English
+> ARB-based localization (ARB as the single cross-platform source of truth for
+> UI strings) is a path-scoped rule — see `i18n-arb.md`, which loads only when
+> `*.arb` files are in context.
 
 ## Subagent Behavior
 
diff --git a/.gemini/hooks/oma-hook.sh b/.gemini/hooks/oma-hook.sh
index 50bcbff..8c86839 100755
--- a/.gemini/hooks/oma-hook.sh
+++ b/.gemini/hooks/oma-hook.sh
@@ -11,8 +11,8 @@ if [ -f "$__oma_dedup_lock" ]; then
 fi
 echo "$$" > "$__oma_dedup_lock"
 __oma_bin=""
-if [ -x "/Users/gracefullight/.bun/bin/oma" ]; then
-  __oma_bin="/Users/gracefullight/.bun/bin/oma"
+if [ -x "/home/runner/.bun/bin/oma" ]; then
+  __oma_bin="/home/runner/.bun/bin/oma"
 elif command -v oma >/dev/null 2>&1; then
   __oma_bin="$(command -v oma)"
 fi
diff --git a/.github/skills/backend-agent b/.github/skills/backend-agent
deleted file mode 120000
index a708c71..0000000
--- a/.github/skills/backend-agent
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/backend-agent
\ No newline at end of file
diff --git a/.github/skills/commit b/.github/skills/commit
deleted file mode 120000
index c237c5b..0000000
--- a/.github/skills/commit
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/commit
\ No newline at end of file
diff --git a/.github/skills/competitor-alternatives b/.github/skills/competitor-alternatives
deleted file mode 120000
index b7bfb25..0000000
--- a/.github/skills/competitor-alternatives
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/competitor-alternatives
\ No newline at end of file
diff --git a/.github/skills/component-refactoring b/.github/skills/component-refactoring
deleted file mode 120000
index 53ae67e..0000000
--- a/.github/skills/component-refactoring
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/component-refactoring
\ No newline at end of file
diff --git a/.github/skills/content-strategy b/.github/skills/content-strategy
deleted file mode 120000
index e9c0f64..0000000
--- a/.github/skills/content-strategy
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/content-strategy
\ No newline at end of file
diff --git a/.github/skills/copy-editing b/.github/skills/copy-editing
deleted file mode 120000
index b204bdb..0000000
--- a/.github/skills/copy-editing
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/copy-editing
\ No newline at end of file
diff --git a/.github/skills/copywriting b/.github/skills/copywriting
deleted file mode 120000
index 214f218..0000000
--- a/.github/skills/copywriting
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/copywriting
\ No newline at end of file
diff --git a/.github/skills/db-agent b/.github/skills/db-agent
deleted file mode 120000
index 48a0e3d..0000000
--- a/.github/skills/db-agent
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/db-agent
\ No newline at end of file
diff --git a/.github/skills/debug-agent b/.github/skills/debug-agent
deleted file mode 120000
index 10261eb..0000000
--- a/.github/skills/debug-agent
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/debug-agent
\ No newline at end of file
diff --git a/.github/skills/dev-workflow b/.github/skills/dev-workflow
deleted file mode 120000
index 17e0135..0000000
--- a/.github/skills/dev-workflow
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/dev-workflow
\ No newline at end of file
diff --git a/.github/skills/fastapi-router-creator b/.github/skills/fastapi-router-creator
deleted file mode 120000
index b398c10..0000000
--- a/.github/skills/fastapi-router-creator
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/fastapi-router-creator
\ No newline at end of file
diff --git a/.github/skills/fastapi-templates b/.github/skills/fastapi-templates
deleted file mode 120000
index c4d10b2..0000000
--- a/.github/skills/fastapi-templates
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/fastapi-templates
\ No newline at end of file
diff --git a/.github/skills/free-tool-strategy b/.github/skills/free-tool-strategy
deleted file mode 120000
index a68541e..0000000
--- a/.github/skills/free-tool-strategy
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/free-tool-strategy
\ No newline at end of file
diff --git a/.github/skills/frontend-agent b/.github/skills/frontend-agent
deleted file mode 120000
index 04bd551..0000000
--- a/.github/skills/frontend-agent
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/frontend-agent
\ No newline at end of file
diff --git a/.github/skills/gcp-migration b/.github/skills/gcp-migration
deleted file mode 120000
index e25bf8c..0000000
--- a/.github/skills/gcp-migration
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/gcp-migration
\ No newline at end of file
diff --git a/.github/skills/launch-strategy b/.github/skills/launch-strategy
deleted file mode 120000
index d3d5bc1..0000000
--- a/.github/skills/launch-strategy
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/launch-strategy
\ No newline at end of file
diff --git a/.github/skills/marketing-ideas b/.github/skills/marketing-ideas
deleted file mode 120000
index d80f4b4..0000000
--- a/.github/skills/marketing-ideas
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/marketing-ideas
\ No newline at end of file
diff --git a/.github/skills/marketing-psychology b/.github/skills/marketing-psychology
deleted file mode 120000
index faa7ce6..0000000
--- a/.github/skills/marketing-psychology
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/marketing-psychology
\ No newline at end of file
diff --git a/.github/skills/mobile-agent b/.github/skills/mobile-agent
deleted file mode 120000
index 2dce0ba..0000000
--- a/.github/skills/mobile-agent
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/mobile-agent
\ No newline at end of file
diff --git a/.github/skills/oma-commit b/.github/skills/oma-commit
deleted file mode 120000
index 7d1c38d..0000000
--- a/.github/skills/oma-commit
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/oma-commit
\ No newline at end of file
diff --git a/.github/skills/orchestrator b/.github/skills/orchestrator
deleted file mode 120000
index 5ce410e..0000000
--- a/.github/skills/orchestrator
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/orchestrator
\ No newline at end of file
diff --git a/.github/skills/pm-agent b/.github/skills/pm-agent
deleted file mode 120000
index 052bc82..0000000
--- a/.github/skills/pm-agent
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/pm-agent
\ No newline at end of file
diff --git a/.github/skills/postgres-best-practices b/.github/skills/postgres-best-practices
deleted file mode 120000
index 24b392e..0000000
--- a/.github/skills/postgres-best-practices
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/postgres-best-practices
\ No newline at end of file
diff --git a/.github/skills/pricing-strategy b/.github/skills/pricing-strategy
deleted file mode 120000
index 2eb9ef8..0000000
--- a/.github/skills/pricing-strategy
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/pricing-strategy
\ No newline at end of file
diff --git a/.github/skills/product-marketing-context b/.github/skills/product-marketing-context
deleted file mode 120000
index 87de50b..0000000
--- a/.github/skills/product-marketing-context
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/product-marketing-context
\ No newline at end of file
diff --git a/.github/skills/qa-agent b/.github/skills/qa-agent
deleted file mode 120000
index 444d092..0000000
--- a/.github/skills/qa-agent
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/qa-agent
\ No newline at end of file
diff --git a/.github/skills/skill-creator b/.github/skills/skill-creator
deleted file mode 120000
index b874554..0000000
--- a/.github/skills/skill-creator
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/skill-creator
\ No newline at end of file
diff --git a/.github/skills/skill-lookup b/.github/skills/skill-lookup
deleted file mode 120000
index a42583f..0000000
--- a/.github/skills/skill-lookup
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/skill-lookup
\ No newline at end of file
diff --git a/.github/skills/social-content b/.github/skills/social-content
deleted file mode 120000
index ea81ab0..0000000
--- a/.github/skills/social-content
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/social-content
\ No newline at end of file
diff --git a/.github/skills/tf-infra-agent b/.github/skills/tf-infra-agent
deleted file mode 120000
index 1f01281..0000000
--- a/.github/skills/tf-infra-agent
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/tf-infra-agent
\ No newline at end of file
diff --git a/.github/skills/translator b/.github/skills/translator
deleted file mode 120000
index 102b773..0000000
--- a/.github/skills/translator
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/translator
\ No newline at end of file
diff --git a/.github/skills/ui-ux-pro-max b/.github/skills/ui-ux-pro-max
deleted file mode 120000
index ba0d349..0000000
--- a/.github/skills/ui-ux-pro-max
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/ui-ux-pro-max
\ No newline at end of file
diff --git a/.github/skills/webf-native-ui-dev b/.github/skills/webf-native-ui-dev
deleted file mode 120000
index c442cbf..0000000
--- a/.github/skills/webf-native-ui-dev
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/webf-native-ui-dev
\ No newline at end of file
diff --git a/.github/skills/workflow-guide b/.github/skills/workflow-guide
deleted file mode 120000
index 4f6b5c6..0000000
--- a/.github/skills/workflow-guide
+++ /dev/null
@@ -1 +0,0 @@
-../../.agents/skills/workflow-guide
\ No newline at end of file
diff --git a/.qwen/hooks/oma-hook.sh b/.qwen/hooks/oma-hook.sh
index 50bcbff..8c86839 100755
--- a/.qwen/hooks/oma-hook.sh
+++ b/.qwen/hooks/oma-hook.sh
@@ -11,8 +11,8 @@ if [ -f "$__oma_dedup_lock" ]; then
 fi
 echo "$$" > "$__oma_dedup_lock"
 __oma_bin=""
-if [ -x "/Users/gracefullight/.bun/bin/oma" ]; then
-  __oma_bin="/Users/gracefullight/.bun/bin/oma"
+if [ -x "/home/runner/.bun/bin/oma" ]; then
+  __oma_bin="/home/runner/.bun/bin/oma"
 elif command -v oma >/dev/null 2>&1; then
   __oma_bin="$(command -v oma)"
 fi
diff --git a/AGENTS.md b/AGENTS.md
index 00afa15..1127488 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -87,6 +87,7 @@ Read the relevant file from `.agents/rules/` when working on matching code.
 | design | `.agents/rules/design.md` | on request |
 | dev-workflow | `.agents/rules/dev-workflow.md` | on request |
 | frontend | `.agents/rules/frontend.md` | **/*.{tsx,jsx,css,scss} |
+| i18n-arb | `.agents/rules/i18n-arb.md` | **/*.arb |
 | i18n-guide | `.agents/rules/i18n-guide.md` | always |
 | infrastructure | `.agents/rules/infrastructure.md` | **/*.{tf,tfvars,hcl} |
 | lint-format-guide | `.agents/rules/lint-format-guide.md` | on request |
diff --git a/CLAUDE.md b/CLAUDE.md
index 2607e4e..f496d5c 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -87,6 +87,7 @@ Read the relevant file from `.agents/rules/` when working on matching code.
 | design | `.agents/rules/design.md` | on request |
 | dev-workflow | `.agents/rules/dev-workflow.md` | on request |
 | frontend | `.agents/rules/frontend.md` | **/*.{tsx,jsx,css,scss} |
+| i18n-arb | `.agents/rules/i18n-arb.md` | **/*.arb |
 | i18n-guide | `.agents/rules/i18n-guide.md` | always |
 | infrastructure | `.agents/rules/infrastructure.md` | **/*.{tf,tfvars,hcl} |
 | lint-format-guide | `.agents/rules/lint-format-guide.md` | on request |
diff --git a/GEMINI.md b/GEMINI.md
index 33b3bb0..0e4cdc8 100644
--- a/GEMINI.md
+++ b/GEMINI.md
@@ -87,6 +87,7 @@ Read the relevant file from `.agents/rules/` when working on matching code.
 | design | `.agents/rules/design.md` | on request |
 | dev-workflow | `.agents/rules/dev-workflow.md` | on request |
 | frontend | `.agents/rules/frontend.md` | **/*.{tsx,jsx,css,scss} |
+| i18n-arb | `.agents/rules/i18n-arb.md` | **/*.arb |
 | i18n-guide | `.agents/rules/i18n-guide.md` | always |
 | infrastructure | `.agents/rules/infrastructure.md` | **/*.{tf,tfvars,hcl} |
 | lint-format-guide | `.agents/rules/lint-format-guide.md` | on request |