feat(merge_requests): display private pending review notes (#605)

* feat(merge_requests): display private pending review notes

Expose saved private notes with explicit paging and localized read-only recovery. Await fresh MR detail before draft dispatch on account changes, and preserve literal bodies and original nullable metadata.

Signed-off-by: sjungwon03 <sjungwon03@gmail.com>

* docs(parity): link pending review panel PR

Signed-off-by: sjungwon03 <sjungwon03@gmail.com>

---------

Signed-off-by: sjungwon03 <sjungwon03@gmail.com>

Author: sjungwon03

apps/labfox/lib/features/merge_requests/presentation/controllers/mr_pending_review_controller.dart

@@ -13,21 +13,27 @@ class MrPendingReviewQuery {
     required this.mergeRequest,
     required this.mergeRequestId,
     this.perPage = 20,
+    this.requireCurrentDetail = false,
   });
 
   final MergeRequestRef mergeRequest;
   final int mergeRequestId;
   final int perPage;
 
+  /// UI consumers recheck authoritative detail before every draft read.
+  final bool requireCurrentDetail;
+
   @override
   bool operator ==(Object other) =>
       other is MrPendingReviewQuery &&
       other.mergeRequest == mergeRequest &&
       other.mergeRequestId == mergeRequestId &&
-      other.perPage == perPage;
+      other.perPage == perPage &&
+      other.requireCurrentDetail == requireCurrentDetail;
 
   @override
-  int get hashCode => Object.hash(mergeRequest, mergeRequestId, perPage);
+  int get hashCode =>
+      Object.hash(mergeRequest, mergeRequestId, perPage, requireCurrentDetail);
 }
 
 /// Loaded private rows are a partial list until the server cursor ends.
@@ -83,12 +89,34 @@ class MrPendingReviewController
   ) {
     if (generation != _generation) return false;
     if (ref.read(currentAccountProvider) != account) return false;
+    if (arg.requireCurrentDetail) {
+      final detail = ref
+          .read(mergeRequestControllerProvider(arg.mergeRequest))
+          .unwrapPrevious();
+      final source = ref.read(mergeRequestsRepositoryProvider);
+      if (detail.isLoading ||
+          detail.hasError ||
+          !detail.hasValue ||
+          source.isLoading ||
+          source.hasError ||
+          source.valueOrNull == null ||
+          !_matchesDetail(detail.value!)) {
+        return false;
+      }
+    }
     final session = ref.read(mrDraftNotesRepositoryProvider);
     return !session.isLoading &&
         !session.hasError &&
         identical(session.valueOrNull, repository);
   }
 
+  bool _matchesDetail(MergeRequest detail) =>
+      detail.id == arg.mergeRequestId &&
+      detail.id > 0 &&
+      detail.iid == arg.mergeRequest.iid &&
+      (detail.projectId == null ||
+          detail.projectId == arg.mergeRequest.projectId);
+
   @override
   Future<MrPendingReviewDrafts> build(MrPendingReviewQuery arg) async {
     _end();
@@ -105,6 +133,25 @@ class MrPendingReviewController
     if (account == null) {
       throw const GitLabAuthException('No authenticated draft note session.');
     }
+    if (arg.requireCurrentDetail) {
+      final source = ref.watch(mergeRequestsRepositoryProvider.future);
+      final fresh = await ref.watch(
+        mergeRequestControllerProvider(arg.mergeRequest).future,
+      );
+      final detailRepository = await source;
+      if (generation != _generation) {
+        return MrPendingReviewDrafts._(
+          items: [],
+          account: null,
+          repository: null,
+        );
+      }
+      if (detailRepository == null || !_matchesDetail(fresh)) {
+        throw const GitLabServerException(
+          'Invalid pending review detail identity.',
+        );
+      }
+    }
     final repositorySession = ref.watch(mrDraftNotesRepositoryProvider.future);
     final repository = await repositorySession;
     if (!_current(generation, account, repository)) {

apps/labfox/lib/features/merge_requests/presentation/merge_request_detail_screen.dart

@@ -13,6 +13,7 @@ import 'controllers/merge_requests_controllers.dart';
 import 'controllers/mr_actions_controller.dart';
 import 'widgets/mr_actions.dart';
 import 'widgets/mr_discussion_thread.dart';
+import 'widgets/mr_pending_review_panel.dart';
 
 /// One merge request: an identity header, the description and discussion, with
 /// the approve / merge actions pinned to a sticky bar so they never scroll away.
@@ -96,6 +97,8 @@ class MergeRequestDetailScreen extends ConsumerWidget {
                 style: Theme.of(context).textTheme.bodySmall,
               ),
             const SizedBox(height: LabFoxSpacing.xl),
+            MrPendingReviewPanel(mergeRequest: mrRef),
+            const SizedBox(height: LabFoxSpacing.xl),
             MrDiscussionThread(projectId: projectId, iid: iid),
           ],
         ),