Tasks, alerts, clients, reports, and settings are easier to navigate

Task settings now live inside **Tasks**, and alert settings now live inside
**Alerts**. Each workspace has its own search, plain-language Studio Manager
handoff, and exact links to the setting an administrator searched for.

The new pages show only controls that affect real platform behavior. Task rules
are grouped as **Classes only**, **Shared: Classes & Appointments**, and
**Appointments only**. Alert rules use the same language, so a venue can see
which choices apply to its way of working. Source-specific activity remains in
the source workspace; Tasks owns task creation and routing, while Alerts owns
which supported signals appear in the internal inbox.

Turning Tasks off preserves existing tasks for review and cleanup while pausing
new manual tasks and supported automatic rules. Turning venue alert checks off
preserves alert history and keeps security, reliability, privacy, and
compliance evidence visible. Settings and saved rule choices are retained for
later reactivation.

Only staff with the matching operational access see mutation controls. Report
export remains separately permissioned. Older Task Rules and Alert Rules URLs
continue to work and permanently redirect to the new owner pages.

The operational workspaces now follow the same truth as those settings. Task
and alert filters, result counts, bulk-selection eligibility, and CSV exports
refer to the same visible records. Exact task links keep their target selected,
and alert read/dismiss history keeps its authenticated actor and time. Exported
lifecycle timestamps are labeled as UTC.

The main sidebar is shorter. **All Clients** is no longer duplicated in Quick
Access and inside a Clients accordion. A single **Clients** link opens the first
client destination that the signed-in staff member may use. The Clients
workspace then presents the available destinations as tabs: **Client list**,
**Bookings**, **Inbox**, **Private Sessions**, **Invoices**, and **Client
Settings**. A tab that is unavailable because of access or an uninstalled
module is not sent to the browser.

Reports now open on a compact **For you** tab with practical starting
shortcuts. Staff can star the reports they use most, remove every favorite if
they prefer an empty personal list, and search all reports they may access by
name, topic, or goal. Financial, Clients, Classes, Staff, Operations, and
Multi-venue tabs keep the full directory nearby without a second scrolling
side panel. Existing report addresses do not change.

The Settings home follows the same design, with clear ownership names:
**General Settings**, **Client Settings**, **Operations Settings**, **Team
Settings**, **Catalog Settings**, **Marketing Settings**, **Growth Settings**,
**Money Settings**, and **Reports Settings**. It starts with useful shortcuts,
learns starred and recently opened destinations in the current venue/browser,
and searches across every setting the staff member may access. Advanced and
technical controls stay behind one separate doorway.

All three owner-tab workspaces support keyboard tab navigation, `/` to focus
search, Escape to clear it, and mobile-sized controls. Tabs and cards are built
from the request-bound permission/capability projection, so simplifying the
navigation does not advertise destinations that the route would reject.

## Release boundary

Migration `20261019000682` provisions the supported Task/Alert rules and
hardens their database workflow contract, but it is still file-only and has not
been applied. The direct-producer audit also found 24 Task writers that must be
converged separately; the map is recorded in
`docs/audits/TASK_CREATION_PRODUCER_CONVERGENCE_AUDIT_2026-08-10.md`.

Support impersonation remains unavailable by default. This work does not relax
the target-data/RLS rollout boundary or enable the unscoped compatibility
escape hatch.

Focused verification covers 59 files and 410 passing tests across the command
center and the Clients/Reports/Settings navigation. The final full suite also
passes 2,262 files and 19,021 tests after rebasing onto the contextual Reports
release, full TypeScript and repository hygiene gates are green, and the locked
production build completes all 622 pages. An
unauthenticated browser smoke confirms the protected Reports redirect, rendered
login surface, and absence of a framework error overlay. Authenticated
browser/device QA and database application are not claimed by this note.