From 83ecc650b0fe0b34eed502643a54161327bc333a Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Mon, 13 Jul 2026 03:37:23 +0000
Subject: [PATCH 1/2] Fix mobile resume blanking and viewport/scroll layout
 bugs
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Three iOS WKWebView issues across both Tauri apps (Obsign + admin):

1. Blank viewport after backgrounding — iOS terminates the WebContent
   process while the app is suspended; on resume the webview rendered
   blank with no JS context. Fixed upstream in Tauri 2.11.0, where
   tauri-runtime-wry installs a default webViewWebContentProcessDidTerminate
   handler that reloads the webview. Bump the tauri family 2.10.3 -> 2.11.0
   so both apps inherit the auto-reload (lockfile only; no server crate
   depends on tauri).

2. Content hidden under the status bar / Dynamic Island / home indicator —
   the WKWebView is edge-to-edge but nothing opted into it. Add
   viewport-fit=cover to both app.html and pad the root shells by
   env(safe-area-inset-*), exposed as --safe-* vars and max()-blended with
   the base spacing so non-notched targets are unaffected.

3. Janky scroll / tall screens partly unreachable — identity-wallet's frame
   used fixed 100vh with no overscroll containment (whole-page rubber-band),
   and OnboardingShell centered with justify-content:center, which traps
   overflow above the scroll origin. Switch to a 100dvh overflow:hidden frame
   with overscroll-behavior:none, and use `justify-content: safe center` so
   tall content scrolls into reach instead of clipping.

Frontend type-check (svelte-check) and unit tests pass for both apps. The
iOS Rust/build side is exercised by CI's macOS lane (both apps are excluded
from the Linux gate by design).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_016WvVP5PDvqbSQd7HxnrMPH
---
 Cargo.lock                                    | 190 +++++++++++-------
 apps/admin-companion/src/app.html             |   5 +-
 .../src/lib/components/ui/ScreenShell.svelte  |   5 +-
 apps/admin-companion/src/lib/styles/base.css  |  13 ++
 apps/identity-wallet/src/app.html             |   5 +-
 .../lib/components/ui/OnboardingShell.svelte  |   7 +-
 apps/identity-wallet/src/lib/styles/base.css  |  13 ++
 apps/identity-wallet/src/routes/+page.svelte  |  10 +-
 8 files changed, 174 insertions(+), 74 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 90940b620..fe57f5f35 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1353,14 +1353,20 @@ dependencies = [
 
 [[package]]
 name = "ctor"
-version = "0.2.9"
+version = "0.8.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32a2785755761f3ddc1492979ce1e48d2c00d09311c39e4466429188f3dd6501"
+checksum = "352d39c2f7bef1d6ad73db6f5160efcaed66d94ef8c6c573a8410c00bf909a98"
 dependencies = [
- "quote",
- "syn 2.0.117",
+ "ctor-proc-macro",
+ "dtor",
 ]
 
+[[package]]
+name = "ctor-proc-macro"
+version = "0.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52560adf09603e58c9a7ee1fe1dcb95a16927b17c127f0ac02d6e768a0e25bc1"
+
 [[package]]
 name = "ctr"
 version = "0.9.2"
@@ -1517,6 +1523,17 @@ dependencies = [
  "syn 2.0.117",
 ]
 
+[[package]]
+name = "dbus"
+version = "0.9.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3ab69f03cc8c4340c9c8e315114e1658e6775a9b16a04357973aa21cec22b32e"
+dependencies = [
+ "libc",
+ "libdbus-sys",
+ "windows-sys 0.61.2",
+]
+
 [[package]]
 name = "deadpool"
 version = "0.12.3"
@@ -1731,17 +1748,17 @@ dependencies = [
 
 [[package]]
 name = "dom_query"
-version = "0.25.1"
+version = "0.27.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4d9c2e7f1d22d0f2ce07626d259b8a55f4a47cb0938d4006dd8ae037f17d585e"
+checksum = "521e380c0c8afb8d9a1e83a1822ee03556fc3e3e7dbc1fd30be14e37f9cb3f89"
 dependencies = [
  "bit-set",
  "cssparser 0.36.0",
  "foldhash 0.2.0",
- "html5ever 0.36.1",
+ "html5ever 0.38.0",
  "precomputed-hash",
- "selectors 0.35.0",
- "tendril",
+ "selectors 0.36.1",
+ "tendril 0.5.1",
 ]
 
 [[package]]
@@ -1774,6 +1791,21 @@ dependencies = [
  "dtoa",
 ]
 
+[[package]]
+name = "dtor"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f1057d6c64987086ff8ed0fd3fbf377a6b7d205cc7715868cd401705f715cbe4"
+dependencies = [
+ "dtor-proc-macro",
+]
+
+[[package]]
+name = "dtor-proc-macro"
+version = "0.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f678cf4a922c215c63e0de95eb1ff08a958a81d47e485cf9da1e27bf6305cfa5"
+
 [[package]]
 name = "dunce"
 version = "1.0.5"
@@ -2901,12 +2933,12 @@ dependencies = [
 
 [[package]]
 name = "html5ever"
-version = "0.36.1"
+version = "0.38.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6452c4751a24e1b99c3260d505eaeee76a050573e61f30ac2c924ddc7236f01e"
+checksum = "1054432bae2f14e0061e33d23402fbaa67a921d319d56adc6bcf887ddad1cbc2"
 dependencies = [
  "log",
- "markup5ever 0.36.1",
+ "markup5ever 0.38.0",
 ]
 
 [[package]]
@@ -3066,7 +3098,7 @@ dependencies = [
  "libc",
  "percent-encoding",
  "pin-project-lite",
- "socket2 0.6.3",
+ "socket2 0.5.10",
  "tokio",
  "tower-service",
  "tracing",
@@ -3103,7 +3135,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "3e795dff5605e0f04bff85ca41b51a96b83e80b281e96231bcaaf1ac35103371"
 dependencies = [
  "byteorder",
- "png",
+ "png 0.17.16",
 ]
 
 [[package]]
@@ -3820,6 +3852,15 @@ version = "0.2.183"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b5b646652bf6661599e1da8901b3b9522896f01e736bad5f723fe7a3a27f899d"
 
+[[package]]
+name = "libdbus-sys"
+version = "0.2.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "328c4789d42200f1eeec05bd86c9c13c7f091d2ba9a6ea35acdf51f31bc0f043"
+dependencies = [
+ "pkg-config",
+]
+
 [[package]]
 name = "libloading"
 version = "0.7.4"
@@ -3949,17 +3990,17 @@ dependencies = [
  "phf_codegen 0.11.3",
  "string_cache 0.8.9",
  "string_cache_codegen 0.5.4",
- "tendril",
+ "tendril 0.4.3",
 ]
 
 [[package]]
 name = "markup5ever"
-version = "0.36.1"
+version = "0.38.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6c3294c4d74d0742910f8c7b466f44dda9eb2d5742c1e430138df290a1e8451c"
+checksum = "8983d30f2915feeaaab2d6babdd6bc7e9ed1a00b66b5e6d74df19aa9c0e91862"
 dependencies = [
  "log",
- "tendril",
+ "tendril 0.5.1",
  "web_atoms",
 ]
 
@@ -4080,9 +4121,9 @@ dependencies = [
 
 [[package]]
 name = "muda"
-version = "0.17.1"
+version = "0.19.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "01c1738382f66ed56b3b9c8119e794a2e23148ac8ea214eda86622d4cb9d415a"
+checksum = "1dd04e60bc0b07438a6771710ee1698f98f6ebbc7f89b61264af1563b8aeb878"
 dependencies = [
  "crossbeam-channel",
  "dpi",
@@ -4093,10 +4134,10 @@ dependencies = [
  "objc2-core-foundation",
  "objc2-foundation",
  "once_cell",
- "png",
+ "png 0.18.1",
  "serde",
  "thiserror 2.0.18",
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -4363,7 +4404,7 @@ dependencies = [
  "pin-project-lite",
  "rustc-hash",
  "rustls",
- "socket2 0.6.3",
+ "socket2 0.5.10",
  "thiserror 2.0.18",
  "tokio",
  "tokio-stream",
@@ -4406,7 +4447,7 @@ checksum = "cd5a37756f168cf350d68a97c4f0158bdf3c76f10175123941569b09ab51f011"
 dependencies = [
  "cfg_aliases",
  "libc",
- "socket2 0.6.3",
+ "socket2 0.5.10",
  "tracing",
  "windows-sys 0.61.2",
 ]
@@ -5159,7 +5200,6 @@ version = "0.11.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1fd6780a80ae0c52cc120a26a1a42c1ae51b247a253e4e06113d23d2c2edd078"
 dependencies = [
- "phf_macros 0.11.3",
  "phf_shared 0.11.3",
 ]
 
@@ -5258,19 +5298,6 @@ dependencies = [
  "syn 1.0.109",
 ]
 
-[[package]]
-name = "phf_macros"
-version = "0.11.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f84ac04429c13a7ff43785d75ad27569f2951ce0ffd30a3321230db2fc727216"
-dependencies = [
- "phf_generator 0.11.3",
- "phf_shared 0.11.3",
- "proc-macro2",
- "quote",
- "syn 2.0.117",
-]
-
 [[package]]
 name = "phf_macros"
 version = "0.13.1"
@@ -5421,6 +5448,19 @@ dependencies = [
  "miniz_oxide",
 ]
 
+[[package]]
+name = "png"
+version = "0.18.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "60769b8b31b2a9f263dae2776c37b1b28ae246943cf719eb6946a1db05128a61"
+dependencies = [
+ "bitflags 2.11.0",
+ "crc32fast",
+ "fdeflate",
+ "flate2",
+ "miniz_oxide",
+]
+
 [[package]]
 name = "polyval"
 version = "0.6.2"
@@ -5710,7 +5750,7 @@ dependencies = [
  "quinn-udp",
  "rustc-hash",
  "rustls",
- "socket2 0.6.3",
+ "socket2 0.5.10",
  "thiserror 2.0.18",
  "tokio",
  "tracing",
@@ -5748,7 +5788,7 @@ dependencies = [
  "cfg_aliases",
  "libc",
  "once_cell",
- "socket2 0.6.3",
+ "socket2 0.5.10",
  "tracing",
  "windows-sys 0.60.2",
 ]
@@ -6443,9 +6483,9 @@ dependencies = [
 
 [[package]]
 name = "selectors"
-version = "0.35.0"
+version = "0.36.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "93fdfed56cd634f04fe8b9ddf947ae3dc493483e819593d2ba17df9ad05db8b2"
+checksum = "c5d9c0c92a92d33f08817311cf3f2c29a3538a8240e94a6a3c622ce652d7e00c"
 dependencies = [
  "bitflags 2.11.0",
  "cssparser 0.36.0",
@@ -7392,15 +7432,16 @@ checksum = "7b2093cf4c8eb1e67749a6762251bc9cd836b6fc171623bd0a9d324d37af2417"
 
 [[package]]
 name = "tao"
-version = "0.34.6"
+version = "0.35.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6e06d52c379e63da659a483a958110bbde891695a0ecb53e48cc7786d5eda7bb"
+checksum = "d1c93047acf68669466a34690ac58cca7010bd1b201e1ec86f1fd0a75d3dd4a9"
 dependencies = [
  "bitflags 2.11.0",
  "block2",
  "core-foundation 0.10.1",
  "core-graphics",
  "crossbeam-channel",
+ "dbus",
  "dispatch2",
  "dlopen2",
  "dpi",
@@ -7411,13 +7452,14 @@ dependencies = [
  "libc",
  "log",
  "ndk",
- "ndk-context",
  "ndk-sys",
  "objc2",
  "objc2-app-kit",
  "objc2-foundation",
+ "objc2-ui-kit",
  "once_cell",
  "parking_lot",
+ "percent-encoding",
  "raw-window-handle",
  "tao-macros",
  "unicode-segmentation",
@@ -7453,9 +7495,9 @@ checksum = "61c41af27dd6d1e27b1b16b489db798443478cef1f06a660c96db617ba5de3b1"
 
 [[package]]
 name = "tauri"
-version = "2.10.3"
+version = "2.11.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "da77cc00fb9028caf5b5d4650f75e31f1ef3693459dfca7f7e506d1ecef0ba2d"
+checksum = "d059f2527558d9dba6f186dec4772610e1aecfd3f94002397613e7e648752b66"
 dependencies = [
  "anyhow",
  "bytes",
@@ -7504,9 +7546,9 @@ dependencies = [
 
 [[package]]
 name = "tauri-build"
-version = "2.5.6"
+version = "2.6.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4bbc990d1dbf57a8e1c7fa2327f2a614d8b757805603c1b9ba5c81bade09fd4d"
+checksum = "bc9ce40b16101cb6ea63d3e221567affd1c3a9205f95d7bc574941a10636b632"
 dependencies = [
  "anyhow",
  "cargo_toml",
@@ -7520,22 +7562,21 @@ dependencies = [
  "serde_json",
  "tauri-utils",
  "tauri-winres",
- "toml 0.9.12+spec-1.1.0",
  "walkdir",
 ]
 
 [[package]]
 name = "tauri-codegen"
-version = "2.5.5"
+version = "2.6.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d4a24476afd977c5d5d169f72425868613d82747916dd29e0a357c84c4bd6d29"
+checksum = "08279169ff42f8fc45a1dbc9dcae888893ba95288142e5880c59b93a26d2cfc5"
 dependencies = [
  "base64 0.22.1",
  "brotli",
  "ico",
  "json-patch",
  "plist",
- "png",
+ "png 0.17.16",
  "proc-macro2",
  "quote",
  "semver",
@@ -7553,9 +7594,9 @@ dependencies = [
 
 [[package]]
 name = "tauri-macros"
-version = "2.5.5"
+version = "2.6.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d39b349a98dadaffebb73f0a40dcd1f23c999211e5a2e744403db384d0c33de7"
+checksum = "e8b394794f399a421811d06966343e7933fcae92d59f5180b9388d1174497a45"
 dependencies = [
  "heck 0.5.0",
  "proc-macro2",
@@ -7665,9 +7706,9 @@ dependencies = [
 
 [[package]]
 name = "tauri-runtime"
-version = "2.10.1"
+version = "2.11.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2826d79a3297ed08cd6ea7f412644ef58e32969504bc4fbd8d7dbeabc4445ea2"
+checksum = "b0b4bc95aed361b0019067d189a1174a603d460d0f6c72606512d59fc9c12ec8"
 dependencies = [
  "cookie",
  "dpi",
@@ -7690,9 +7731,9 @@ dependencies = [
 
 [[package]]
 name = "tauri-runtime-wry"
-version = "2.10.1"
+version = "2.11.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e11ea2e6f801d275fdd890d6c9603736012742a1c33b96d0db788c9cdebf7f9e"
+checksum = "4e6fac707727b7a2f48e4ded90976324267371073edbb415ffb73bb0458d203f"
 dependencies = [
  "gtk",
  "http",
@@ -7716,14 +7757,15 @@ dependencies = [
 
 [[package]]
 name = "tauri-utils"
-version = "2.8.3"
+version = "2.9.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "219a1f983a2af3653f75b5747f76733b0da7ff03069c7a41901a5eb3ace4557d"
+checksum = "3e176a18e67764923c4f1ce66f25ae4abe5f688384d5eb1a0fa6c77f3d90f887"
 dependencies = [
  "anyhow",
  "brotli",
  "cargo_metadata",
  "ctor",
+ "dom_query",
  "dunce",
  "glob",
  "html5ever 0.29.1",
@@ -7733,7 +7775,8 @@ dependencies = [
  "kuchikiki",
  "log",
  "memchr",
- "phf 0.11.3",
+ "phf 0.13.1",
+ "plist",
  "proc-macro2",
  "quote",
  "regex",
@@ -7787,6 +7830,15 @@ dependencies = [
  "utf-8",
 ]
 
+[[package]]
+name = "tendril"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5fed54709c5b3a53d09bb1c113ea4f5ceafd1e772ddcb0030a82e1d56c087b08"
+dependencies = [
+ "new_debug_unreachable",
+]
+
 [[package]]
 name = "thiserror"
 version = "1.0.69"
@@ -8332,9 +8384,9 @@ dependencies = [
 
 [[package]]
 name = "tray-icon"
-version = "0.21.3"
+version = "0.23.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a5e85aa143ceb072062fc4d6356c1b520a51d636e7bc8e77ec94be3608e5e80c"
+checksum = "15edbb0d80583e85ee8df283410038e17314df5cba30da2087a54a85216c0773"
 dependencies = [
  "crossbeam-channel",
  "dirs",
@@ -8346,10 +8398,10 @@ dependencies = [
  "objc2-core-graphics",
  "objc2-foundation",
  "once_cell",
- "png",
+ "png 0.18.1",
  "serde",
  "thiserror 2.0.18",
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -8999,7 +9051,7 @@ version = "0.1.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
 dependencies = [
- "windows-sys 0.61.2",
+ "windows-sys 0.48.0",
 ]
 
 [[package]]
@@ -9700,9 +9752,9 @@ checksum = "9edde0db4769d2dc68579893f2306b26c6ecfbe0ef499b013d731b7b9247e0b9"
 
 [[package]]
 name = "wry"
-version = "0.54.3"
+version = "0.55.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a24eda84b5d488f99344e54b807138896cee8df0b2d16c793f1f6b80e6d8df1f"
+checksum = "186f9871daa55fd9c016578b810d149de58367113db7fb72b462d2323ce19514"
 dependencies = [
  "base64 0.22.1",
  "block2",
diff --git a/apps/admin-companion/src/app.html b/apps/admin-companion/src/app.html
index ac63580b6..9e82bbb31 100644
--- a/apps/admin-companion/src/app.html
+++ b/apps/admin-companion/src/app.html
@@ -2,7 +2,10 @@
 <html lang="en">
 	<head>
 		<meta charset="utf-8" />
-		<meta name="viewport" content="width=device-width, initial-scale=1" />
+		<meta
+			name="viewport"
+			content="width=device-width, initial-scale=1, viewport-fit=cover"
+		/>
 		<title>Admin Companion</title>
 		%sveltekit.head%
 	</head>
diff --git a/apps/admin-companion/src/lib/components/ui/ScreenShell.svelte b/apps/admin-companion/src/lib/components/ui/ScreenShell.svelte
index 403d034f0..f7f049f5f 100644
--- a/apps/admin-companion/src/lib/components/ui/ScreenShell.svelte
+++ b/apps/admin-companion/src/lib/components/ui/ScreenShell.svelte
@@ -73,7 +73,10 @@
     display: flex;
     flex-direction: column;
     min-height: 100dvh;
-    padding: var(--space-xl) var(--space-lg) var(--space-lg);
+    /* Pad clear of the OS chrome (status bar / Dynamic Island / home indicator),
+       falling back to the base spacing off a notched device. */
+    padding: max(var(--space-xl), var(--safe-top)) max(var(--space-lg), var(--safe-right))
+      max(var(--space-lg), var(--safe-bottom)) max(var(--space-lg), var(--safe-left));
     gap: var(--space-lg);
   }
   .head {
diff --git a/apps/admin-companion/src/lib/styles/base.css b/apps/admin-companion/src/lib/styles/base.css
index d5c4aad18..4fa95e3c3 100644
--- a/apps/admin-companion/src/lib/styles/base.css
+++ b/apps/admin-companion/src/lib/styles/base.css
@@ -10,6 +10,16 @@
 
 :root {
   color-scheme: dark; /* the console is dark-first by design — cool slate under low light */
+
+  /* Safe-area insets (status bar / Dynamic Island / home indicator). These read
+     the real device insets only because app.html opts in with viewport-fit=cover;
+     off a notched device they fall back to 0px, so every `max(--space-*, --safe-*)`
+     collapses to the base spacing. ScreenShell pads by these so content never
+     renders under the OS chrome. */
+  --safe-top: env(safe-area-inset-top, 0px);
+  --safe-right: env(safe-area-inset-right, 0px);
+  --safe-bottom: env(safe-area-inset-bottom, 0px);
+  --safe-left: env(safe-area-inset-left, 0px);
 }
 
 html {
@@ -18,6 +28,9 @@ html {
 
 body {
   margin: 0;
+  /* No whole-page rubber-band past the content — the operator screens scroll the
+     document, and bouncing past it would only reveal blank slate ground. */
+  overscroll-behavior: none;
   background: var(--color-bg);
   color: var(--color-ink);
   font-family: var(--font-sans);
diff --git a/apps/identity-wallet/src/app.html b/apps/identity-wallet/src/app.html
index 366e1c395..5a9bcd48d 100644
--- a/apps/identity-wallet/src/app.html
+++ b/apps/identity-wallet/src/app.html
@@ -2,7 +2,10 @@
 <html lang="en">
 	<head>
 		<meta charset="utf-8" />
-		<meta name="viewport" content="width=device-width, initial-scale=1" />
+		<meta
+			name="viewport"
+			content="width=device-width, initial-scale=1, viewport-fit=cover"
+		/>
 		<script>
 			// Pre-paint appearance restore. The Keychain-backed preference is
 			// mirrored in localStorage (key + reconcile logic in $lib/appearance)
diff --git a/apps/identity-wallet/src/lib/components/ui/OnboardingShell.svelte b/apps/identity-wallet/src/lib/components/ui/OnboardingShell.svelte
index 96b25cd73..ca8dbc9c5 100644
--- a/apps/identity-wallet/src/lib/components/ui/OnboardingShell.svelte
+++ b/apps/identity-wallet/src/lib/components/ui/OnboardingShell.svelte
@@ -42,6 +42,9 @@
     flex-direction: column;
     height: 100%;
     padding: var(--space-xl) var(--space-lg);
+    /* Scroll when the content is taller than the frame (small devices, long
+       error copy) instead of trapping it off-screen. */
+    overflow-y: auto;
   }
 
   .back {
@@ -65,7 +68,9 @@
     display: flex;
     flex-direction: column;
     align-items: center;
-    justify-content: center;
+    /* `safe` centering: centered when it fits, top-aligned when it overflows, so
+       the top of tall content is never pushed above the scroll origin (unreachable). */
+    justify-content: safe center;
     gap: var(--space-md);
     text-align: center;
     width: 100%;
diff --git a/apps/identity-wallet/src/lib/styles/base.css b/apps/identity-wallet/src/lib/styles/base.css
index b44df97f8..86ce89bee 100644
--- a/apps/identity-wallet/src/lib/styles/base.css
+++ b/apps/identity-wallet/src/lib/styles/base.css
@@ -16,6 +16,16 @@
      appearance control overrides it via an inline style on <html>
      ($lib/appearance + the pre-paint script in app.html). */
   color-scheme: light dark;
+
+  /* Safe-area insets (status bar / Dynamic Island / home indicator). These read
+     the real device insets only because app.html opts in with viewport-fit=cover;
+     off a notched device (desktop, older iOS) they fall back to 0px, so every
+     `max(--space-*, --safe-*)` collapses to the base spacing. Screens pad by these
+     so content never renders under the OS chrome. */
+  --safe-top: env(safe-area-inset-top, 0px);
+  --safe-right: env(safe-area-inset-right, 0px);
+  --safe-bottom: env(safe-area-inset-bottom, 0px);
+  --safe-left: env(safe-area-inset-left, 0px);
 }
 
 html {
@@ -27,6 +37,9 @@ html {
 
 body {
   margin: 0;
+  /* No whole-page rubber-band: the app frame is a fixed viewport and each screen
+     scrolls internally, so bouncing the document would only reveal blank ground. */
+  overscroll-behavior: none;
   background: var(--color-bg);
   color: var(--color-ink);
   font-family: var(--font-sans);
diff --git a/apps/identity-wallet/src/routes/+page.svelte b/apps/identity-wallet/src/routes/+page.svelte
index 10087996d..ef0a01f1a 100644
--- a/apps/identity-wallet/src/routes/+page.svelte
+++ b/apps/identity-wallet/src/routes/+page.svelte
@@ -530,9 +530,17 @@
 
 <style>
   .app {
-    height: 100vh;
+    /* A fixed viewport frame padded clear of the OS chrome. dvh (not vh) tracks the
+       real visible height on iOS; overflow:hidden keeps the frame itself from
+       scrolling — each screen owns its own scroll within the safe area. */
+    height: 100dvh;
     display: flex;
     flex-direction: column;
+    overflow: hidden;
+    padding-top: var(--safe-top);
+    padding-right: var(--safe-right);
+    padding-bottom: var(--safe-bottom);
+    padding-left: var(--safe-left);
   }
 
   .code {

From c234ef8789b2afda3df59ee3692f99515679b7c2 Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Mon, 13 Jul 2026 12:21:06 +0000
Subject: [PATCH 2/2] Add vh / plain-center fallbacks for iOS < 16 WebViews
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The deployment floor is iOS 13 (cargo-mobile2 default; no minimumSystemVersion
override), but `dvh` needs iOS 16+ and the `safe` alignment keyword, while iOS
11+, is worth a defensive fallback. Declare the widely-supported value first so
older WebViews still get a working frame / centered content, then let the modern
value win where supported:

- identity-wallet .app: `height: 100vh` before `height: 100dvh` (without it, an
  iOS 13–15 WebView ignores dvh and the fixed frame has no height, collapsing the
  height:100% screens inside it).
- admin-companion ScreenShell: same `min-height: 100vh` -> `100dvh` fallback.
- OnboardingShell .content: `justify-content: center` before `safe center`, so a
  WebView that doesn't parse `safe` centers instead of reverting to top alignment.

Addresses CodeRabbit review nits on PR #225. svelte-check clean for both apps.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_016WvVP5PDvqbSQd7HxnrMPH
---
 .../admin-companion/src/lib/components/ui/ScreenShell.svelte | 3 +++
 .../src/lib/components/ui/OnboardingShell.svelte             | 5 ++++-
 apps/identity-wallet/src/routes/+page.svelte                 | 5 ++++-
 3 files changed, 11 insertions(+), 2 deletions(-)

diff --git a/apps/admin-companion/src/lib/components/ui/ScreenShell.svelte b/apps/admin-companion/src/lib/components/ui/ScreenShell.svelte
index f7f049f5f..2e177954c 100644
--- a/apps/admin-companion/src/lib/components/ui/ScreenShell.svelte
+++ b/apps/admin-companion/src/lib/components/ui/ScreenShell.svelte
@@ -72,6 +72,9 @@
   .screen {
     display: flex;
     flex-direction: column;
+    /* 100vh first is the fallback for iOS < 16 (deployment floor is iOS 13), where
+       dvh is unsupported; dvh then wins where available and tracks the real height. */
+    min-height: 100vh;
     min-height: 100dvh;
     /* Pad clear of the OS chrome (status bar / Dynamic Island / home indicator),
        falling back to the base spacing off a notched device. */
diff --git a/apps/identity-wallet/src/lib/components/ui/OnboardingShell.svelte b/apps/identity-wallet/src/lib/components/ui/OnboardingShell.svelte
index ca8dbc9c5..4bc63e2d1 100644
--- a/apps/identity-wallet/src/lib/components/ui/OnboardingShell.svelte
+++ b/apps/identity-wallet/src/lib/components/ui/OnboardingShell.svelte
@@ -69,7 +69,10 @@
     flex-direction: column;
     align-items: center;
     /* `safe` centering: centered when it fits, top-aligned when it overflows, so
-       the top of tall content is never pushed above the scroll origin (unreachable). */
+       the top of tall content is never pushed above the scroll origin (unreachable).
+       The plain `center` first is the fallback for any WebView that doesn't parse the
+       `safe` keyword — it keeps centering rather than reverting to top alignment. */
+    justify-content: center;
     justify-content: safe center;
     gap: var(--space-md);
     text-align: center;
diff --git a/apps/identity-wallet/src/routes/+page.svelte b/apps/identity-wallet/src/routes/+page.svelte
index ef0a01f1a..8b427a82a 100644
--- a/apps/identity-wallet/src/routes/+page.svelte
+++ b/apps/identity-wallet/src/routes/+page.svelte
@@ -532,7 +532,10 @@
   .app {
     /* A fixed viewport frame padded clear of the OS chrome. dvh (not vh) tracks the
        real visible height on iOS; overflow:hidden keeps the frame itself from
-       scrolling — each screen owns its own scroll within the safe area. */
+       scrolling — each screen owns its own scroll within the safe area. The 100vh
+       declared first is the fallback for iOS < 16 (deployment floor is iOS 13),
+       where dvh is unsupported and would otherwise leave the frame with no height. */
+    height: 100vh;
     height: 100dvh;
     display: flex;
     flex-direction: column;