Add auth session flow and sign-in UX

docs/progress.md

@@ -2,6 +2,33 @@
 
 Updated: 2026-02-15
 
+## Latest Milestone (2026-02-15): Auth Session UX
+
+Implemented app-level authentication/session flow so navigation is now session-aware:
+
+- Added session lifecycle controller:
+  - `lib/features/auth/session_controller.dart`
+  - bootstraps from token store on app startup
+  - supports sign-in, sign-out, and profile refresh
+  - enforces offline-safe sign-out (always clears local session)
+- Added sign-in experience:
+  - `lib/features/auth/sign_in_view.dart`
+  - supports Password / Magic Link / OIDC request shapes
+  - shows mode status (Fake/REST)
+- Updated app bootstrap:
+  - `lib/main.dart` now gates between `SignInView` and `AppShell` based on session state
+- Updated settings with session actions:
+  - `lib/features/settings/settings_view.dart`
+  - shows current identity and provides `Sign Out` + `Refresh Profile`
+- Added auth tests:
+  - `test/features/auth/session_controller_test.dart`
+  - updated `test/widget_test.dart` for sign-in default route
+
+Validation for this milestone:
+
+- `flutter analyze` -> pass
+- `flutter test` -> pass
+
 ## Latest Milestone (2026-02-15): Ideas + Reminders Phase
 
 Implemented the next Phase 2 slice by introducing Ideas and Reminder Rules as first-class local features.