feat: authorize iOS Hermes accounts and secure session isolation

UITests/VoiceUITests.swift

@@ -11,6 +11,24 @@ final class VoiceUITests: XCTestCase {
         app.launchArguments = ["--ui-testing", "--reset-ui-testing"]
     }
 
+    func testLogoutDoesNotLeakPriorAccountTranscriptOrTasks() {
+        app.launchArguments.append("--ui-fixtures")
+        app.launch()
+        XCTAssertTrue(app.staticTexts["Help me plan a quiet weekend."].waitForExistence(timeout: 10))
+        app.buttons["Sign out"].tap()
+        XCTAssertTrue(app.secureTextFields["Password"].waitForExistence(timeout: 10))
+        let username = app.textFields["Username"]
+        username.tap()
+        username.typeText("second-user")
+        app.secureTextFields["Password"].tap()
+        app.secureTextFields["Password"].typeText("offline-only")
+        app.buttons["Sign in"].tap()
+        XCTAssertTrue(app.buttons["Start chatting"].waitForExistence(timeout: 10))
+        XCTAssertFalse(app.staticTexts["Help me plan a quiet weekend."].exists)
+        app.tabBars.buttons["Activity"].tap()
+        XCTAssertFalse(app.staticTexts["Search backend timed out after 30s"].exists)
+    }
+
     func testWelcomeNavigationAndOfflineRecovery() {
         app.launch()
         XCTAssertTrue(app.buttons["Start chatting"].waitForExistence(timeout: 10))
@@ -45,8 +63,8 @@ final class VoiceUITests: XCTestCase {
         server.tap()
         server.typeText(String(repeating: XCUIKeyboardKey.delete.rawValue, count: invalid.count) + "  https://127.0.0.1:1  ")
         app.buttons["Save server address"].tap()
-        XCTAssertEqual(server.value as? String, "https://127.0.0.1:1")
         XCTAssertTrue(app.staticTexts["Server address saved."].waitForExistence(timeout: 5))
+        XCTAssertEqual(server.value as? String, "https://127.0.0.1:1")
 
         let unchanged = server.value as? String ?? ""
         server.tap()
@@ -108,7 +126,7 @@ final class VoiceUITests: XCTestCase {
         XCTAssertTrue(app.buttons["Start chatting"].waitForExistence(timeout: 10))
         XCTAssertTrue(app.buttons["Start chatting"].isHittable)
         app.tabBars.buttons["Activity"].tap()
-        XCTAssertTrue(app.staticTexts["No tasks yet"].waitForExistence(timeout: 5))
+        XCTAssertTrue(app.staticTexts["No tasks yet"].waitForExistence(timeout: 15))
         app.buttons["Settings"].tap()
         XCTAssertTrue(app.navigationBars["Settings"].exists)
         capture("Accessibility text size")