Self-healing agent (supervisor, recovery, login fixes, operator mail) and Portal sage redesign

Snapshot of D:\Ecw Process a11c9ff (2026-10-30).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tests/test_login_username_step.py

@@ -79,6 +79,34 @@ def a_password_box_that_stays_disabled_is_an_error_with_a_screenshot(page):
     assert {p.suffix for p in shots} == {".png", ".html"}, shots
 
 
+# The security image page with its own Continue: clicking it is what lets
+# eCW enable the password box (operator, 2026-10-30: no manual click).
+_IMAGE_PAGE = """
+<input id="doctorID" value="someone">
+<input disabled type="password" id="passwordField">
+<div id="img">VERIFY YOUR SECURITY IMAGE
+  <input type="button" value="%s" onclick="document.getElementById('img')
+    .style.display = 'none'; document.getElementById('passwordField')
+    .disabled = false;">
+</div>
+"""
+
+
+@case
+def continue_on_the_security_image_page_is_clicked_by_the_bot(page):
+    page.set_content(_IMAGE_PAGE % "Continue")
+    assert login.wait_after_username(page, 5_000) == "image"
+    assert login.continue_security_image(page) is True
+    assert login.wait_after_username(page, 5_000, image=False) == "password"
+
+
+@case
+def no_continue_button_is_left_to_a_person(page):
+    page.set_content(_IMAGE_PAGE % "Not me")
+    assert login.continue_security_image(page) is False
+    assert page.locator("#passwordField").is_disabled()
+
+
 def main() -> int:
     from playwright.sync_api import sync_playwright