---
id: TASK-003
title: Follow-ups in Dots repo from v1 review
status: "\U0001F7E6 Backlog"
assignee: []
created_date: '2026-07-30 01:23'
labels:
  - chore
dependencies: []
priority: low
ordinal: 3000
---

## Description

<!-- SECTION:DESCRIPTION:BEGIN -->
Tracked here because Dots repo has no backlog: (1) settings components (ScriptableWidgetSettings + CliTokenSettings) swallow fetch/generate/revoke errors, no error UI; (2) copy-feedback setTimeout not cleaned on unmount (both components); (3) resolveSubscribedUserId session branch duplicates getSubscribedUserId (drift risk); (4) route tests for both auth kinds per spec (repo has no test runner); (5) narrow middleware /api/days/(.*) matcher to blocks+notes if tightening.
<!-- SECTION:DESCRIPTION:END -->