DL-274

Tour “seen”/resume state is per account on the server (account_tour_state, tenant RLS; GetTourState/ClaimTourStart/SetTourState keyed on the authenticated caller, never a client-supplied id). Auto-start is a claim (ClaimTourStart, insert-if-absent): the tour opens only when this call created the started row, so a failed claim or a lost race between windows or devices arms nothing

Status: Active (Matt, 2026-10-04)

Record: ../../ui/compass-first-run-tour/design.md#a5–first-run-detection–persistence-per-account-server-state