Summary

Item #6 round-9 follow-up. The web-side StorageReader adapter in apps/web/src/shared/lib/storage/weeklyDigestStorage.ts was the last remaining higher-level wrapper still calling localStorage.getItem inside its own inline try/catch. Replace that with a delegation to the shared safeReadStringLS helper from ./storage so the file no longer needs to live in the sergeant-design/no-raw-local-storage allowlist.

• apps/web/src/shared/lib/storage/weeklyDigestStorage.ts — webStorageReader.getItem now calls safeReadStringLS(key). Same try/catch contract (returns null on failure), one fewer file with raw localStorage access.
• eslint.config.js — drop weeklyDigestStorage.ts from the web no-raw-local-storage allowlist; extend the round-9 migration comment.
• .tech-debt/localstorage-allowlist-budget.json — production budget 14 → 13 (headroom 0). Updated rationale.
• apps/web/src/shared/lib/storage/weeklyDigestStorage.test.ts — keep the existing 3 happy-path scenarios and add 2 hardening cases that mock Storage.prototype.getItem to throw (Safari Private Mode / disabled storage), asserting loadDigest and hasLiveWeeklyDigest collapse to null/false instead of throwing.

Roadmap: docs/diagnostics/2026-05-03-web-deep-dive/00-overview.md Item #6 follow-up (round 9). Burndown plan: docs/diagnostics/2026-05-03-web-deep-dive/02-architecture-and-state.md §2.2 + docs/tech-debt/frontend.md §2.

Governing Skill

• Primary skill: sergeant-web-ui
• Secondary skill (if truly needed): n/a

Playbook

• Primary playbook: n/a (rolling Item Claude/review project structure l2 ke1 #6 burndown — no dedicated playbook)
• Why this playbook: n/a
• If no playbook matched, why: Item Claude/review project structure l2 ke1 #6 burndown is a single-file localStorage migration that consistently follows the safeRead*LS/safeWriteLS pattern documented in docs/tech-debt/frontend.md §2 and the diagnostic; previous rounds (5–8) shipped without a dedicated playbook for the same reason.

Verification

pnpm --filter @sergeant/db-schema build
pnpm --filter @sergeant/web exec eslint apps/web/src/shared/lib/storage/weeklyDigestStorage.ts
pnpm --filter @sergeant/web exec tsc -p tsconfig.json --noEmit
pnpm --filter @sergeant/web exec vitest run src/shared/lib/storage/weeklyDigestStorage.test.ts
pnpm lint:localstorage-allowlist

Result:

• ESLint: 0 errors / 0 warnings.
• tsc --noEmit: clean.
• Vitest: Test Files 1 passed (1) | Tests 5 passed (5).
• lint:localstorage-allowlist: 13/13 (headroom 0).

Additional checks:

• Local smoke / manual validation completed
• Surface-specific checks completed

Docs and Governance

• I updated docs that changed with the behavior, contract, workflow, or rollout.
• I checked whether AGENTS.md needed an update.
• I checked whether a playbook or skill needed an update.
• I checked whether governance docs or review docs needed an update.

Updated docs:

• The diagnostic overview round-9 summary entry will be added in a follow-up docs PR alongside the other three round-9 items (Storybook expansion, finyk-domain noUncheckedIndexedAccess, WaitlistForm useApiForm migration), to keep that single roadmap-touching commit isolated.

Risk and Rollout

• User-visible risk: zero. The new webStorageReader.getItem returns the exact same shape (string | null) and silently catches failures the same way the previous implementation did; @sergeant/shared loadDigest/hasLiveWeeklyDigest are unchanged.
• Rollout / deploy order: Vercel auto-deploys on merge; no migration / env change.
• Backout plan: revert this single commit. The allowlist entry can be re-added if needed without server-side coordination.

Hard Rule #15

• I read AGENTS.md before coding.
• Internal docs I touched are in Ukrainian.
• I did not use --no-verify.

Reviewer Notes

The two new tests stub Storage.prototype.getItem directly via Object.defineProperty and restore the descriptor in afterEach; this matches the pattern used elsewhere in the repo for Safari Private Mode coverage and keeps the existing happy-path tests untouched.

Summary by cubic

Migrated the web weeklyDigestStorage adapter off raw localStorage to use safeReadStringLS, keeping the same null-on-failure behavior and improving resilience. Removed the file from the sergeant-design/no-raw-local-storage allowlist and lowered the production budget to 13.

• Refactors
  • apps/web/src/shared/lib/storage/weeklyDigestStorage.ts: webStorageReader.getItem now calls safeReadStringLS(key); same string | null contract.
  • apps/web/src/shared/lib/storage/weeklyDigestStorage.test.ts: added two resilience tests where Storage.getItem throws; loadDigest returns null, hasLiveWeeklyDigest returns false.
  • eslint.config.js: dropped weeklyDigestStorage.ts from the allowlist and documented the round-9 change.
  • .tech-debt/localstorage-allowlist-budget.json: updated rationale; production count 14 → 13.

^{Written for commit abce050. Summary will update on new commits.}

Summary by CodeRabbit

• Bug Fixes

  • Enhanced resilience of weekly digest functionality with improved error handling for scenarios where local storage is unavailable or inaccessible, including Safari Private Mode and disabled storage configurations.

• Chores

  • Reduced technical debt through migration of storage access patterns and corresponding configuration updates.