[42lizard]

Summary

Long-pressing a book during refresh could open the library context menu behind the operation display. Operation and decision surfaces now share a modal input shield, so background handlers cannot receive taps or long presses through their backdrops.

ModalSurface
├── dimmed backdrop + pointer shield
└── operation or decision controls (above the shield)

Existing Back/Close behavior and controller checks remain in place.

Evidence

• Before: The real-input Qt UI test failed because contextOpen became true after a long press during refresh.
  After: The same regression passes. Tap/long-press checks cover operation, conflict and blocking states; real taps also verify Cancel and exit, both reading-position choices, Cancel and Acknowledge. Long pressing the library works again after dismissing the modal surface.
• qt-ui, simulator and simulator-real tests passed.
• PocketBook ARM build and loader/resource/ABI checks passed.
• Standards and spec reviews: no findings.
• The user approved the device test after installing commit 1487c77 on PB743G. Installed app SHA-256: c1f13ad4f9ca2c002eb54f314faa1bc461bdeaea958015065cfcfecb98eb97ed. The installer verified native databases remained unchanged. Decision-dialog controls were also covered by the automated UI test.

Merge Danger

Door: two-way

Revertible QML change; no stored-data changes.

Blast Radius: input

Pointer handling inside operation and decision surfaces. Header, keyboard routing and action authorization are unchanged.