feat: dealer flow, mirror portfolio (M21), options convexity, FINRA short interest, alert producers, vendor gate

Snapshot of in-progress module work across multiple slices:

- Dealer Flow: dealerExposureEngine, dealerMapService, dealerMapExplain,
  dealerMapIntegrity, dealerMapReplay, dealerStudyEngine, hanStyleLevels
- Mirror Portfolio (M21): fundRepository, captureIngest, mirrorAlertProducers,
  fund holdings strip, live book, position capture ingest
- Options: BSM, NormalizedOptionSurface types, OptionsChainRouter,
  ConvexityGate, option legs panel
- Alert producers: vixLevel, rotation, thesis, unlock, portfolioRisk,
  mirror (fund_capture, fund_13f, mirror_diff)
- FINRA short interest adapter + queue integration
- SEC company tickers adapter + ingest (symbol search index seed)
- Vendor gate (rate-limit-first data plane, ADR-0009)
- CUSIP registry, reverse 13F refresh, stock float service
- LRU cache, portfolio backtest engine
- Frontend: dealer-flow, funds, journal, lab, monitor, plan, portfolio,
  reports, screener, strategies, theses, guided-start, exits, more pages
- Volume profile, workspace profile, visibility-aware poll
- ADRs 0010 (mirror math not advice), 0011 (symbol search index)
- VENDOR_INTEGRATIONS.md, END_USER_TEST.md
- .gitignore: exclude DBs, .DS_Store, local config, agent scratch

docs/FUNCTIONAL_DESIGN.md

@@ -2,7 +2,7 @@
 
 **Audit date:** 2026-07-23  
 **Source of truth for status:** this file + code under `app/`. Older slice SPECs and HANDOFF.md are historical.  
-**Product intent:** Beginner-first multi-tenant educational research terminal for conviction investing (not day trading). Legal posture: educational publisher (ADR-0007).
+**Product intent:** Multi-tenant **investment management** workbench (portfolio, risk, monitor, research context) that helps users become better at market awareness and risk management *while managing*. Not a course app. Legal posture for copy/outputs: educational publisher (ADR-0007) - process and math, never buy/sell advice.
 
 ---
 
@@ -28,7 +28,8 @@
 | Login + session cookie | **Live** | Non-active users rejected at login and `protectedProcedure` |
 | TOTP 2FA + backup codes | **Live** | Settings page |
 | GitHub / Google OAuth | **Backend-ready** | Router complete; env-dependent; OAuth users default `active` |
-| Onboarding wizard | **Live** | Complexity, risk, drawdown, starter watchlist, optional portfolio; queues SEC fetch |
+| Onboarding wizard | **Live** | Workspace interview (experience, goal, horizon, jargon) → density + risk defaults + starter pack; optional portfolio; queues SEC fetch |
+| Workspace density | **Live** | `focused` \| `standard` \| `full` filters nav, symbol Overview panels, strategy templates; editable in Settings |
 | Admin approve/reject | **Live** | `/admin/users` |
 | Settings / profile | **Live** | `/settings` |
 
@@ -38,10 +39,13 @@
 |---------|-------|--------|-----------|
 | Symbol overview | `/` | **Live** | `market.snapshot`, company meta, X feed, collapsible filings + options |
 | Multiple watchlists | sidebar | **Live** | Create/delete/rename/reorder, dropdown selector in sidebar, per-watchlist symbols |
-| Charts | `/chart-lab` | **Live** | candles, indicators, institutional buy markers |
+| Charts | `/chart-lab` | **Live** | candles, indicators, institutional buy markers; equity volume-by-price profile (visible range, from OHLC bars) |
 | Institutional dashboard | `/institutional` | **Live** | dashboard rollup, flow, insider stream, filings; Q-o-Q / M-o-M |
 | Filings | `/filings` | **Live** | EDGAR index + 13F + Form 4 detail |
 | Options DD | `/options-dd` | **Live** | chain + greeks (read-only teaching surface) |
+| Dealer Flow | `/dealer-flow` | **Live (MVP)** | GEX/VEX/OI metric modes + strike profile; delayed Yahoo OK; **integrity gates** (incomplete vs degraded vs complete); IV hygiene; keep last good map; as-of ET; `dealer-map-replay` CLI + Admin → Queue **Dealer map integrity** buttons; Layer-0 + optional L1 |
+| Study Desk | (on `/dealer-flow`) | **Live** | Educational setups from map; hist rank; log; auto-grade; scorecard; promote to journal draft; CSV export |
+| Mentor ledger | (Study Desk tab) | **Live (MVP)** | Local import from harvest → confirm drafts → path-match grade + mentor scorecard (not buy signals) |
 | Market outlook | `/market-outlook` | **Live (Phase 1–3 core)** | Beginner language. Condition strip; stronger/weaker-vs-market map; seasonality + calendar; rank snapshots; auto leadership check; truck/factory; macro notes. True ETF flow/COT still later. |
 | Social / X feed | on overview | **Live** | DB-backed 30d history + admin X credentials/accounts |
 | Command palette + nav | shell | **Live** | ⌘K, g-key shortcuts, theme presets |
@@ -50,11 +54,14 @@
 
 | Surface | Route | Status | Gap |
 |---------|-------|--------|-----|
-| Trade plan | `/trade-plan` | **UI-local** | Zustand only; not `theses` / `trades` / sizing APIs |
-| Execution | `/execution` | **UI-local** | Playbook + checklist local; not `trade_executions` |
-| Trade closure | `/trade-closure` | **UI-local** | localStorage |
+| Decision plan | `/plan` | **Live** | Server `trades.save`; optional thesis create |
+| Theses | `/theses` | **Live** | CRUD on `theses` table |
+| Journal / close | `/journal` | **Live** | `trades.list` / `close` + reflection |
+| Screener | `/screener` | **Live** | Filter + strategy screen over watchlist |
+| Strategy lab | `/lab` | **Live** | Backtest equity curve + evaluate latest |
+| Reports | `/reports` | **Live** | HTML research notes |
 | Daily focus / goals | `/daily-focus` | **UI-local** | localStorage goals |
-| Emotion logger | on execution | **Partial** | UI + `emotionLogger` API exist; UI still primarily local path |
+| Emotion logger | API | **Partial** | API live; journal reflection covers close notes |
 | Sizing math | `/risk` (calculator) | **Live** | `sizing.compute` + UI cascade (math only, ADR-0007) |
 | Risk posture (M20) | `/risk` | **Live** | `risk.posture` / `risk.haltStatus` + RiskPosturePanel; halt persisted on drawdown breach |
 | Derisking suggestions | (no screen) | **Backend-ready** | `derisking.suggest` |
@@ -64,10 +71,10 @@
 
 | Capability | Status | Notes |
 |------------|--------|-------|
-| Filter screener (M15a) | **Backend-ready** | `screener.filter` over watchlist quotes only; **no UI**; not in frontend `api` client |
-| Strategy screener (M15b) | **Backend-ready** | `screener.strategy`; thin universe; no UI |
-| Strategy authoring | **Backend-ready** | `strategies.list/create`; no Strategy Lab UI |
-| Backtest | **Backend-ready** | `backtest.run` / `evaluateLatest`; no equity-curve UI |
+| Filter screener (M15a) | **Live** | `/screener` + `screener.filter` over watchlist quotes |
+| Strategy screener (M15b) | **Live** | `/screener` strategy mode when density ≥ standard |
+| Strategy authoring | **Partial** | presets + fork; custom authoring still light |
+| Backtest | **Live** | `/lab` equity curve + evaluate latest |
 | Sector confirmation cross-link | **Stub** | `sectorCrosslink.confirm` with empty universe in practice |
 | Screener saved filters | **Schema only** | tables exist; incomplete product loop |
 
@@ -77,7 +84,7 @@
 |------------|--------|-------|
 | Options DD (read-only) | **Live** | M3 teaching panel |
 | Unlock ladder + payoff API | **Backend-ready** | `optionsConvexity.unlock` / `getPayoff` |
-| Option legs book + risk contribution | **Live (MVP)** | `portfolio.optionLegs` / add / remove; Risk posture premium-at-risk + CSP cash reserve |
+| Option legs book + risk contribution | **Live (MVP)** | `OptionLegsPanel` on `/portfolio` + `/risk`; `portfolio.optionLegs` / add / remove; posture folds premium-at-risk + CSP cash reserve into exposure/flags |
 | Portfolio sleeve workflow (M17 full) | **Missing** | Unlock UX + sleeve risk budget not enforced in product path |
 
 ### 1.6 Macro (M18)
@@ -102,7 +109,13 @@
 | Alert producers: 7 more types (rotation, regime, conviction, thesis, cluster, drawdown, asymmetry) | **Stub** | Engine types exist; producers not wired |
 | Email delivery (SMTP) | **Live** | Nodemailer, admin SMTP config page, rate limit 1/hr per type/symbol/user |
 | SSE push | **Missing** | Design called for SSE; poll/list only |
-| Mobile companion `/mobile` | **Live (thin)** | Auth, holdings glance, unacked alerts — not full M19 job A vision |
+| Mobile companion `/mobile` | **Redirect** | Redirects to Portfolio; main shell is phone-optimized companion (Job A) |
+| Mobile shell (iPhone Air) | **Live** | Fixed `dvh` chrome, safe-area insets, bottom tabs (Portfolio · Risk · Research · Alerts · More), slim header + search overlay; no desktop layout flash |
+| Mobile lists sheet | **Live** | Header list icon opens portfolio + watchlist bottom sheet for symbol switch |
+| Portfolio on phone | **Live** | Card list + 2×2 snapshot under `md`; wide table from `md` up |
+| Rotation / institutional on phone | **Live** | Card rows with key horizons; full tables from `md` up with sticky first column |
+| Mobile polling hygiene | **Live** | Snapshot / alerts / market condition pause while document is hidden |
+| Portfolio book | **Live** | Unified holdings + live marks + add/remove (`HoldingsBookView`). `/monitor` redirects here. |
 
 ### 1.8 Admin / operator
 
@@ -123,7 +136,7 @@
 
 | Capability | Status |
 |------------|--------|
-| HTML research note generator | **Backend-ready** | `reports.generate` scopes include symbol/watchlist/portfolio/rotation/sizing/risk — **no UI**, not in frontend client |
+| HTML research note generator | **Live** | `/reports` + `reports.generate` |
 
 ---
 
@@ -154,7 +167,8 @@ Unchanged from domain model / ADRs:
 
 1. **Primary Rule (ADR-0007)** — education, not advice; Primary-Rule lint test on curated strings.
 2. **Analyst Voice (ADR-0005)** — Alfred/Druckenmiller blend where LLM copy is used.
-3. **P6 plain English / P7 teach mechanics** — UI redesign token system supports this.
+3. **P6 plain English / P7 teach mechanics** — in-context cockpit labels (not a curriculum product).
+3b. **Adaptive workspace density** — experience interview sets focused/standard/full; user can change anytime.
 4. **Local-first multi-tenant (ADR-0001)** + shared cache dedupe (ADR-0004).
 5. **LLM data provenance (ADR-0006)** — sensitive data stays on local-class providers; full gateway module is thin/incomplete vs original design.
 6. **Anti-gamification** — no confetti / outcome celebration.