docs: record history import undo deployment

agent_docs/latest_session_work.md

@@ -1,5 +1,12 @@
 # Latest Session Work
 
+## Exact import undo and Spotify video exclusion — 2026-08-20
+
+- Revision `e6e7a2dc59843732753af801ecf956fda63007c8` is pushed and deployed to both Allstarr stacks on `192.168.1.116`; both containers are healthy on image `sha256:d5603bf21c67fdfeab4c788952f0343a7448ec0b89dcf6a0b5f03964775ea030`.
+- Completed imports now expose a confirmed **Undo import** action. Removal is scoped by tenant, user, backend, library, and exact import provenance, and deletes only that import's stored listens, delivery checkpoints, durable import record, and temporary artifact. Active imports must be cancelled first.
+- Spotify `Streaming_History_Video_*` files are rejected before staging with guidance to choose `Streaming_History_Audio` JSON files.
+- Verification: focused .NET/PostgreSQL 8/8, Svelte diagnostics clean, unit 46/46, production build and budgets green, and focused browser interaction 1/1. The disposable local PostgreSQL container was removed. Both live readiness endpoints are green, deployed UI assets contain the undo action, and startup logs contain no failure-level entries.
+
 ## Unlimited listening history and truthful imports — 2026-08-19
 
 - Revision `9336e6c7c9e62d2cb10312a20c2b2587b127d243` is pushed and deployed to both Allstarr stacks on `192.168.1.116`; both containers are healthy on image `sha256:2b7a5d3a827acd0ccaffd6291497457c4f0e87c8070230868fe410331863a20a`.

agent_docs/project_progress.md

@@ -10,10 +10,11 @@ This is a replacement and consolidation package. Do not create parallel matching
 
 ### Verified delivery state
 
-- Application revision `9336e6c7c9e62d2cb10312a20c2b2587b127d243` is pushed and deployed to both Jellyfin and Subsonic stacks.
-- Both server checkouts are clean at that revision. Both app containers use image `sha256:2b7a5d3a827acd0ccaffd6291497457c4f0e87c8070230868fe410331863a20a` and are healthy.
+- Application revision `e6e7a2dc59843732753af801ecf956fda63007c8` is pushed and deployed to both Jellyfin and Subsonic stacks.
+- Both server checkouts are clean at that revision. Both app containers use image `sha256:d5603bf21c67fdfeab4c788952f0343a7448ec0b89dcf6a0b5f03964775ea030` and are healthy.
 - GitHub Actions run `32323295754` is green across build/test, release-critical, Apple, WebUI, format, Compose, and release-manifest jobs.
 - Current WebUI baseline is 47.3 KiB initial JavaScript and 23.8 KiB CSS; unit is 46/46. The import, retention, disclosure, audio-quality, and extension-permission browser slice is 5/5.
+- Completed listening-history imports can be undone by exact import provenance; this removes only their stored listens, checkpoints, saved record, and temporary artifact. Spotify `Streaming_History_Video_*` exports are rejected before staging.
 - Canvas UI remains blocked by MIT plus Commons Clause redistribution terms. A focused replacement review found no permissive renderer that would delete more code than it adds, so use Svelte 5, shadcn-svelte, Bits UI, Lucide, CSS, SVG, and native Web Animations.
 - Koito `a079fa693569d21e03c00df163f20ac5e137c490`, Explo `4fc75874de691ff1e26b10d88b859cfac8ee2992`, and Multi-Scrobbler `bc28de66b14db1c99eb79ad75d1cdf4c9dfff7cc` are MIT reference inputs. Adapt useful behavior and presentation into existing owners; do not import their application architectures.
 - LAN/VPN access was enabled only after the local release gates passed, then used for exact-revision deployment and qualification.