Integrate WizardDraftRepository persistence layer
epic-cognitive-accessibility-wizard-ui-task-003 — Wire WizardStateManager to the WizardDraftRepository (from the foundation epic) so that every pause event writes the draft to local storage and every resume event reads it back. Implement draft expiry logic (discard drafts older than 7 days). Handle the case where no saved draft exists on resume gracefully by starting from step 0.
Acceptance Criteria
Technical Requirements
Execution Context
Tier 2 - 518 tasks
Can start after Tier 1 completes
Implementation Notes
Use the flutter_secure_storage package (add to pubspec.yaml if not already present). Define WizardDraftRepositoryImpl in lib/features/wizard/data/wizard_draft_repository_impl.dart implementing the WizardDraftRepository abstract class. Use jsonEncode/jsonDecode for serialization. The WizardDraft.fromJson factory should wrap parsing in try/catch returning null on failure.
For the expiry check, encapsulate the logic in a private method _isExpired(WizardDraft) on the repository to keep it testable. Register WizardDraftRepositoryImpl in the dependency injection layer (Riverpod provider or BLoC provider tree) so WizardStateManager receives it via constructor injection. When the wizard is completed, call deleteDraft from the BLoC's on
Testing Requirements
Two levels of testing required. (1) Unit tests: mock flutter_secure_storage using a fake in-memory map; test saveDraft writes correct JSON; test loadDraft returns null for missing key; test expiry logic with a draft timestamped 8 days ago; test corrupt JSON returns null gracefully. (2) Integration test (flutter_test with real secure storage on device/emulator or using flutter_secure_storage fake): write a draft, recreate the repository instance, load the draft, assert fields match. Minimum 8 test cases total.
The WizardStateManager BLoC must guarantee that step transitions only occur on explicit user action, never automatically. Subtle reactive patterns in Bloc (e.g. stream listeners triggering add() calls) could inadvertently auto-advance the wizard, violating the core cognitive accessibility rule and creating a regression that is difficult to detect without dedicated tests.
Mitigation & Contingency
Mitigation: Write a dedicated unit test that subscribes to the BLoC stream and asserts no StepChanged event is emitted for 5 seconds after a state update, without an explicit user-sourced event being dispatched. Make this test part of the CI gate for the WizardStateManager.
Contingency: If an auto-advance regression is discovered post-integration, introduce a mandatory UserActionToken parameter on all step-transition events so the BLoC can structurally refuse transitions that do not originate from a user gesture handler.
The ConfirmBeforeSubmitScreen requires deep-linking back to specific wizard steps for corrections. Implementing bidirectional navigation within a multi-step wizard while preserving all previously entered state is architecturally non-trivial and may conflict with the existing StatefulShellRoute navigation setup described in the app architecture.
Mitigation & Contingency
Mitigation: Design the ConfirmBeforeSubmitScreen's back-navigation links to dispatch a GoToStep event on the WizardStateManager rather than using GoRouter's pop() chain. This keeps navigation state entirely in the BLoC and avoids coupling to the router's stack semantics.
Contingency: If BLoC-driven step navigation proves incompatible with the router, implement the correction flow as a dedicated sub-route that pre-populates its form from the WizardStateManager's current draft, then merges the edited field back into the draft on completion before returning to the confirm screen.
The CognitiveAccessibilityAudit utility must inspect live widget trees for violations such as icon-only buttons. Flutter's widget tree inspection APIs are available in test mode but have limitations in identifying semantic intent (e.g. distinguishing a decorative icon from a navigation button). False negatives could give a false sense of compliance.
Mitigation & Contingency
Mitigation: Augment the audit with a convention-based approach: require all navigation buttons to use a named wrapper widget (e.g. LabelledNavigationButton) that the audit can detect by type, rather than relying solely on widget-tree semantics analysis.
Contingency: If widget-tree detection proves insufficiently reliable, scope the CognitiveAccessibilityAudit to route-configuration analysis (verifying back navigation availability per route) and static analysis of wizard step count definitions via the CognitiveLoadRuleEngine, which provides deterministic results.
The InlineContextualHelpWidget sources content from a bundled JSON asset via the HelpContentRegistry. If help texts are missing for newly added screens or fields (a likely scenario as the 61-feature app grows), the widget silently shows nothing, degrading the accessibility experience without any visible failure.
Mitigation & Contingency
Mitigation: Integrate a CognitiveAccessibilityAudit check that verifies every registered (screenId, fieldId) pair that requests help has a corresponding entry in the HelpContentRegistry bundle. Run this check in CI as part of the audit report.
Contingency: Add a debug-mode overlay that highlights fields with missing help entries using a visible warning indicator, making coverage gaps immediately obvious to developers during local development before they reach CI.