fix: harden automation reconciliation and pause lifecycle

Keep full folder scans recoverable under duplicate protection and classify every discovered file once before automatic admission.

Separate manual previews from automatic capacity limits, serialize renderer intake, normalize automation counters and intervals, and make Main authoritative for runtime timestamps.

Enforce persistent pause across startup, import, close recovery, resume failures, and reconciliation while preserving read-only paused scans and exactly one activation reconciliation.

Restore failed asynchronous rotation chunks, complete automation localization and unlimited queue accessibility, and tighten hidden integration cleanup coverage.

tests/upload-audit.test.js

@@ -7,6 +7,7 @@ const path = require('path');
 const {
   createInternalLogPathResolver,
   createInternalLogWriter,
+  createBufferedInternalLogFlusher,
   createUploadAuditWriter,
   getLogOpenDirectory
 } = require('../lib/upload-audit');
@@ -128,10 +129,46 @@ test('synchronous rotation flush falls back completely and retains buffered line
 test('quit flush delegates the rotation buffer to the synchronous internal writer', () => {
   const mainSource = fs.readFileSync(path.join(__dirname, '..', 'main.js'), 'utf8');
 
-  assert.match(mainSource, /_rotLogWriter\.flushSync\(_rotLogBuffer, 'rot-log'\);/);
+  assert.match(mainSource, /_rotLogFlusher\.flushSync\('rot-log'\);/);
   assert.doesNotMatch(mainSource, /appendFileSync\(getRotLogPath\(\), _rotLogBuffer\.join\(''\)/);
 });
 
+test('asynchronous rotation flush restores a failed chunk ahead of newer lines without a retry loop', async () => {
+  const buffer = ['first\n', 'second\n'];
+  const scheduled = [];
+  let resolveAppend;
+  const appendCalls = [];
+  const syncCalls = [];
+  const writer = {
+    append(value) {
+      appendCalls.push(value);
+      return new Promise(resolve => { resolveAppend = resolve; });
+    },
+    flushSync(lines) {
+      syncCalls.push([...lines]);
+      lines.length = 0;
+      return true;
+    }
+  };
+  const flusher = createBufferedInternalLogFlusher({
+    buffer,
+    writer,
+    schedule: callback => scheduled.push(callback)
+  });
+
+  const failed = flusher.flush('rot-log');
+  assert.deepEqual(buffer, []);
+  buffer.push('third\n');
+  resolveAppend(false);
+  assert.equal(await failed, false);
+  assert.deepEqual(buffer, ['first\n', 'second\n', 'third\n']);
+  assert.deepEqual(appendCalls, ['first\nsecond\n']);
+  assert.deepEqual(scheduled, []);
+  assert.equal(flusher.flushSync('rot-log'), true);
+  assert.deepEqual(syncCalls, [['first\n', 'second\n', 'third\n']]);
+  assert.deepEqual(buffer, []);
+});
+
 test('upload audit writer leaves the configured fileuploader log contract unchanged', async (t) => {
   const directory = createTempDirectory(t, 'mhu-upload-log-contract-');
   const userDataPath = path.join(directory, 'user-data');