Report queued tasks the scheduling pass never considers

A task in retry backoff was filtered out before the candidate loop, so it
recorded no rejection at all: queued, apparently assignable, and silent. That is
the exact shape that made F5 take a live session to diagnose. It now reports
"retry backoff until <time>".

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

web/src/api/client.test.ts

@@ -17,9 +17,20 @@ describe('UI API client',()=>{
     expect(fetch).toHaveBeenCalledWith('/v1/artifacts',expect.objectContaining({method:'POST',body:'report'}))
   })
   it('submits username and password to the browser login endpoint',async()=>{
-    const fetch=vi.fn().mockResolvedValue(new Response(null,{status:204}))
+		const fetch=vi.fn().mockResolvedValue(new Response(JSON.stringify({username:'operator'}),{status:200}))
     vi.stubGlobal('fetch',fetch)
-    await api.login('operator','not stored in the browser')
+		await expect(api.login('operator','not stored in the browser')).resolves.toEqual({username:'operator'})
     expect(fetch).toHaveBeenCalledWith('/v1/ui/session',expect.objectContaining({method:'POST',body:JSON.stringify({username:'operator',password:'not stored in the browser'})}))
   })
+	it('treats a missing browser session as a normal signed-out state',async()=>{
+		const fetch=vi.fn().mockResolvedValue(new Response('unauthorized',{status:401}))
+		vi.stubGlobal('fetch',fetch)
+		await expect(api.session()).resolves.toBeUndefined()
+	})
+	it('updates account credentials through the session-gated account endpoint',async()=>{
+		const fetch=vi.fn().mockResolvedValue(new Response(JSON.stringify({username:'kami'}),{status:200}))
+		vi.stubGlobal('fetch',fetch)
+		await api.updateAccount({current_password:'old password',username:'kami',new_password:'new password'})
+		expect(fetch).toHaveBeenCalledWith('/v1/ui/account',expect.objectContaining({method:'PUT'}))
+	})
 })