From 21efdd4eeff1adb48701f7c86614d67fe80c87d2 Mon Sep 17 00:00:00 2001
From: George Powell <geohpowell@gmail.com>
Date: Tue, 7 Jul 2026 17:02:24 -0400
Subject: [PATCH] New scheduling UI!

---
 spec.md                                       |    8 +-
 src/hooks.server.ts                           |    4 +-
 src/lib/components/Button.svelte              |    3 +
 src/lib/components/GamePrompt.svelte          |    2 -
 src/lib/components/SubmitVerse.svelte         | 1001 +++++++++++++++++
 src/lib/components/VerseDisplay.svelte        |   13 +-
 src/lib/components/WinScreen.svelte           |   11 +-
 src/lib/server/auth.test.ts                   |   10 +-
 src/lib/server/auth.ts                        |   10 +-
 src/lib/server/bible-api.ts                   |   19 +
 src/lib/server/daily-verse.ts                 |   33 +-
 src/lib/server/verse-submission.ts            |  293 +++++
 src/routes/+page.svelte                       |    1 +
 src/routes/api/submit-verse/+server.ts        |   89 ++
 src/routes/api/submit-verse/status/+server.ts |   69 ++
 src/routes/auth/apple/callback/+server.ts     |    2 +-
 src/routes/auth/google/callback/+server.ts    |    2 +-
 src/routes/scheduled-verses/+page.svelte      |   83 +-
 tests/verse-submission.test.ts                |  513 +++++++++
 19 files changed, 2127 insertions(+), 39 deletions(-)
 create mode 100644 src/lib/components/SubmitVerse.svelte
 create mode 100644 src/lib/server/verse-submission.ts
 create mode 100644 src/routes/api/submit-verse/+server.ts
 create mode 100644 src/routes/api/submit-verse/status/+server.ts
 create mode 100644 tests/verse-submission.test.ts

diff --git a/spec.md b/spec.md
index 3745953..5ed71ba 100644
--- a/spec.md
+++ b/spec.md
@@ -5,10 +5,10 @@
 - [x] **Step 1 — Schema & migration:** add `verse_submissions` table to `src/lib/server/db/schema.ts` (nullable `user_id` FK → `user.id` ON DELETE SET NULL, unique `scheduled_date`, index on `user_id`), pushed to dev.db.
 - [x] **Step 2 — Bible structure + windowing helpers:** export `getChapterCount`/`getVerseCount` from `xml-bible.ts`; add `composeVerseWindow()` (fall-forward 3-verse window, never crosses book, crosses chapter within book) and `formatWindowReference()` (hyphen same-chapter, en-dash cross-chapter). Tests in `tests/verse-window.test.ts` (17 pass).
 - [x] **Step 3 — Public APIs:** `GET /api/bible/structure` (66-book verse counts for cascading dropdowns) and `GET /api/verse-window` (live 3-verse preview).
-- [ ] **Step 4 — Admin module + `/scheduled-verses` page:** `src/lib/server/admin.ts` (`ADMIN_EMAIL`), auth-walled admin view joining `verse_submissions` → `daily_verses` → `user`.
-- [ ] **Step 5 — Submit backend + lazy gap-fill:** `POST /api/submit-verse` (solved-today gate, 7-day cooldown, structural validation, scheduling scan with empty/no-back-to-back/60-day-repeat rules, transaction + retry), `GET /api/submit-verse/status`, modified `getVerseForDate` neighbor avoidance.
-- [ ] **Step 6 — Frontend `SubmitVerse.svelte`:** three states (logged-out sign-in dropdown, cooldown + countdown, cascading selects + preview + submit), wired into `WinScreen.svelte`.
-- [ ] **Step 7 — Tests:** scheduling validity, cooldown arithmetic, concurrency.
+- [x] **Step 4 — Admin module + `/scheduled-verses` page:** `src/lib/server/admin.ts` (`ADMIN_EMAIL`), auth-walled admin view joining `verse_submissions` → `daily_verses` → `user`.
+- [x] **Step 5 — Submit backend + lazy gap-fill:** `POST /api/submit-verse` (solved-today gate, 7-day cooldown, structural validation, scheduling scan with empty/no-back-to-back/60-day-repeat rules, transaction + retry), `GET /api/submit-verse/status`, modified `getVerseForDate` neighbor avoidance.
+- [x] **Step 6 — Frontend `SubmitVerse.svelte`:** three states (logged-out sign-in dropdown, cooldown + countdown, cascading selects + preview + submit), wired into `WinScreen.svelte`.
+- [x] **Step 7 — Tests:** scheduling validity, cooldown arithmetic, concurrency.
 - [ ] **Step 8 — Docs:** update README schema + routes/API tables.
 
 ---
diff --git a/src/hooks.server.ts b/src/hooks.server.ts
index 5209e6e..66a24c7 100644
--- a/src/hooks.server.ts
+++ b/src/hooks.server.ts
@@ -17,9 +17,9 @@ const handleAuth: Handle = async ({ event, resolve }) => {
 	const { session, user } = await auth.validateSessionToken(sessionToken);
 
 	if (session) {
-		auth.setSessionTokenCookie(event, sessionToken, session.expiresAt);
+		auth.setSessionTokenCookie({ cookies: event.cookies }, sessionToken, session.expiresAt);
 	} else {
-		auth.deleteSessionTokenCookie(event);
+		auth.deleteSessionTokenCookie({ cookies: event.cookies });
 	}
 
 	event.locals.user = user;
diff --git a/src/lib/components/Button.svelte b/src/lib/components/Button.svelte
index 9bb58aa..1e32aeb 100644
--- a/src/lib/components/Button.svelte
+++ b/src/lib/components/Button.svelte
@@ -7,6 +7,7 @@
 		onclick?: () => void;
 		class?: string;
 		type?: "button" | "submit" | "reset";
+		disabled?: boolean;
 	}
 
 	let {
@@ -15,6 +16,7 @@
 		onclick,
 		class: className = "",
 		type = "button",
+		disabled = false,
 	}: Props = $props();
 
 	const variantClasses = {
@@ -31,6 +33,7 @@
 <button
 	{type}
 	{onclick}
+	{disabled}
 	class="inline-flex items-center justify-center px-4 py-2 rounded-lg border-2 font-bold text-sm transition-all duration-200 {variantClasses[
 		variant
 	]} {className}"
diff --git a/src/lib/components/GamePrompt.svelte b/src/lib/components/GamePrompt.svelte
index 237c331..6d53424 100644
--- a/src/lib/components/GamePrompt.svelte
+++ b/src/lib/components/GamePrompt.svelte
@@ -6,7 +6,6 @@
 
 	$effect(() => {
 		let fadeOutId: ReturnType<typeof setTimeout>;
-		let fadeInId: ReturnType<typeof setTimeout>;
 		let changeId: ReturnType<typeof setTimeout>;
 
 		function animateTo(newText: string, delay = 0) {
@@ -27,7 +26,6 @@
 
 		return () => {
 			clearTimeout(fadeOutId);
-			clearTimeout(fadeInId);
 			clearTimeout(changeId);
 		};
 	});
diff --git a/src/lib/components/SubmitVerse.svelte b/src/lib/components/SubmitVerse.svelte
new file mode 100644
index 0000000..1c4855e
--- /dev/null
+++ b/src/lib/components/SubmitVerse.svelte
@@ -0,0 +1,1001 @@
+<script lang="ts">
+	import { onMount, onDestroy } from "svelte";
+	import { fly } from "svelte/transition";
+	import { bibleBooks } from "$lib/types/bible";
+
+	let {
+		isLoggedIn = false,
+		anonymousId = "",
+		localDate = "",
+	}: {
+		isLoggedIn?: boolean;
+		anonymousId?: string;
+		localDate?: string;
+	} = $props();
+
+	// ── Status (logged-in state) ───────────────────────────────────────────
+	type Status = {
+		canSubmit: boolean;
+		cooldownEndsAt: number | null;
+		lastSubmission: { scheduledDate: string; reference: string } | null;
+		upcoming: { scheduledDate: string; reference: string }[];
+	};
+	let status = $state<Status | null>(null);
+	let statusError = $state<string | null>(null);
+
+	// ── Bible structure (Book → chapters → verse counts) ──────────────────
+	type Structure = { bookId: string; chapters: number[] }[];
+	let structure = $state<Structure | null>(null);
+
+	// ── Selector state ─────────────────────────────────────────────────────
+	let selectedBookId = $state<string>("");
+	let selectedChapter = $state<number>(0);
+	let selectedVerse = $state<number>(0);
+
+	// ── Preview state ──────────────────────────────────────────────────────
+	type Preview = {
+		windowVerses: string[];
+		reference: string;
+		bookId: string;
+		selectedVerse: number;
+	};
+	let preview = $state<Preview | null>(null);
+	let previewLoading = $state(false);
+
+	// ── Submission state ───────────────────────────────────────────────────
+	let submitting = $state(false);
+	let submitError = $state<string | null>(null);
+	let submitResult = $state<{ scheduledDate: string; reference: string } | null>(
+		null,
+	);
+
+	// ── UI state ───────────────────────────────────────────────────────────
+	let expanded = $state(false);
+	let countdownText = $state("");
+	let countdownId: number | null = null;
+
+	// Book list grouped by Testament for the <select> optgroups.
+	const oldBooks = $derived(bibleBooks.filter((b) => b.testament === "old"));
+	const newBooks = $derived(bibleBooks.filter((b) => b.testament === "new"));
+
+	// Chapter list for the currently selected book (1..N).
+	const chapterCount = $derived(
+		structure && selectedBookId
+			? structure.find((b) => b.bookId === selectedBookId)?.chapters.length ??
+				0
+			: 0,
+	);
+	// Verse count for the currently selected chapter.
+	const verseCount = $derived(
+		structure && selectedBookId && selectedChapter
+			? structure.find((b) => b.bookId === selectedBookId)?.chapters[
+					selectedChapter - 1
+				] ?? 0
+			: 0,
+	);
+
+	// Whether the user is currently on cooldown (only meaningful when logged in).
+	const onCooldown = $derived(
+		!!status && !status.canSubmit && status.cooldownEndsAt !== null,
+	);
+
+	// Debounce handle for the live preview fetch.
+	let previewTimer: ReturnType<typeof setTimeout> | null = null;
+
+	function trackEvent(name: string) {
+		try {
+			(window as any).rybbit?.event?.(name);
+		} catch {
+			/* noop */
+		}
+	}
+
+	function fmtDateLong(dateStr: string): string {
+		// dateStr is YYYY-MM-DD; format as "August 24, 2026" in UTC to avoid drift.
+		const d = new Date(dateStr + "T00:00:00Z");
+		return d.toLocaleDateString("en-US", {
+			weekday: "long",
+			year: "numeric",
+			month: "long",
+			day: "numeric",
+			timeZone: "UTC",
+		});
+	}
+
+	function fmtDateVague(dateStr: string): string {
+		// dateStr is YYYY-MM-DD. Return a deliberately vague timeframe instead of
+		// revealing the exact scheduled date.
+		const scheduled = new Date(dateStr + "T00:00:00Z");
+		const now = new Date();
+		const today = new Date(
+			Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate()),
+		);
+		const diffDays = Math.round(
+			(scheduled.getTime() - today.getTime()) / (1000 * 60 * 60 * 24),
+		);
+		if (diffDays <= 14) return "a few days from now";
+		if (diffDays <= 60) return "a few weeks from now";
+		return "within the next few months";
+	}
+
+	async function loadStatus() {
+		if (!isLoggedIn || !localDate) return;
+		try {
+			const res = await fetch(
+				`/api/submit-verse/status?localDate=${encodeURIComponent(localDate)}`,
+			);
+			if (res.status === 401) {
+				status = null;
+				return;
+			}
+			if (!res.ok) {
+				statusError = "Couldn't load submission status.";
+				return;
+			}
+			status = await res.json();
+		} catch {
+			statusError = "Couldn't load submission status.";
+		}
+	}
+
+	async function loadStructure() {
+		if (structure) return;
+		try {
+			const res = await fetch("/api/bible/structure");
+			if (!res.ok) return;
+			const data = await res.json();
+			structure = data;
+			// Default selection: first book, chapter 1, verse 1.
+			if (data.length > 0 && !selectedBookId) {
+				selectedBookId = data[0].bookId;
+				selectedChapter = 1;
+				selectedVerse = 1;
+			}
+		} catch {
+			/* noop */
+		}
+	}
+
+	function fetchPreview() {
+		if (previewTimer) clearTimeout(previewTimer);
+		previewTimer = setTimeout(async () => {
+			if (!selectedBookId || !selectedChapter || !selectedVerse) {
+				preview = null;
+				return;
+			}
+			previewLoading = true;
+			try {
+				const res = await fetch(
+					`/api/verse-window?bookId=${encodeURIComponent(
+						selectedBookId,
+					)}&chapter=${selectedChapter}&verse=${selectedVerse}`,
+				);
+				if (res.ok) {
+					preview = await res.json();
+				}
+			} catch {
+				/* noop */
+			} finally {
+				previewLoading = false;
+			}
+		}, 250);
+	}
+
+	function onBookChange() {
+		selectedChapter = 1;
+		selectedVerse = 1;
+		submitError = null;
+		fetchPreview();
+	}
+
+	function onChapterChange() {
+		selectedVerse = 1;
+		submitError = null;
+		fetchPreview();
+	}
+
+	function onVerseChange() {
+		submitError = null;
+		fetchPreview();
+	}
+
+	async function handleSubmit() {
+		if (!isLoggedIn) return;
+		submitting = true;
+		submitError = null;
+		try {
+			const res = await fetch("/api/submit-verse", {
+				method: "POST",
+				headers: { "Content-Type": "application/json" },
+				body: JSON.stringify({
+					bookId: selectedBookId,
+					chapter: selectedChapter,
+					verse: selectedVerse,
+					localDate,
+				}),
+			});
+			const data = await res.json();
+			if (!res.ok) {
+				if (res.status === 429 && data?.cooldownEndsAt) {
+					// Refresh status so the cooldown UI kicks in.
+					await loadStatus();
+					submitError = "You're on cooldown — try again later.";
+				} else {
+					submitError = data?.error ?? "Submission failed.";
+				}
+				return;
+			}
+			submitResult = {
+				scheduledDate: data.scheduledDate,
+				reference: data.reference,
+			};
+			trackEvent("Submit a verse");
+			// Refresh status so the cooldown reflects the new submission.
+			await loadStatus();
+		} catch {
+			submitError = "Network error — please try again.";
+		} finally {
+			submitting = false;
+		}
+	}
+
+	function updateCountdown() {
+		if (!status?.cooldownEndsAt) {
+			countdownText = "";
+			return;
+		}
+		const diff = status.cooldownEndsAt - Date.now();
+		if (diff <= 0) {
+			countdownText = "";
+			// Cooldown elapsed — refresh status once.
+			loadStatus();
+			if (countdownId) {
+				clearInterval(countdownId);
+				countdownId = null;
+			}
+			return;
+		}
+		const days = Math.floor(diff / (1000 * 60 * 60 * 24));
+		const hours = Math.floor((diff % (1000 * 60 * 60 * 24)) / (1000 * 60 * 60));
+		const minutes = Math.floor((diff % (1000 * 60 * 60)) / (1000 * 60));
+		const seconds = Math.floor((diff % (1000 * 60)) / 1000);
+		countdownText =
+			(days > 0 ? `${days}d ` : "") +
+			`${hours.toString().padStart(2, "0")}h ${minutes
+				.toString()
+				.padStart(2, "0")}m ${seconds.toString().padStart(2, "0")}s`;
+	}
+
+	onMount(() => {
+		if (isLoggedIn) {
+			loadStatus();
+			loadStructure();
+		}
+	});
+
+	// Start/stop the countdown timer as cooldown state changes.
+	$effect(() => {
+		if (onCooldown && status?.cooldownEndsAt && !countdownId) {
+			updateCountdown();
+			countdownId = window.setInterval(updateCountdown, 1000);
+		} else if (!onCooldown && countdownId) {
+			clearInterval(countdownId);
+			countdownId = null;
+			countdownText = "";
+		}
+	});
+
+	// (Re)load status + structure when the user logs in.
+	$effect(() => {
+		if (isLoggedIn) {
+			loadStatus();
+			loadStructure();
+		} else {
+			status = null;
+			structure = null;
+			expanded = false;
+			submitResult = null;
+		}
+	});
+
+	onDestroy(() => {
+		if (countdownId) clearInterval(countdownId);
+		if (previewTimer) clearTimeout(previewTimer);
+	});
+</script>
+
+<div class="signin-prompt submit-verse-wrap">
+	{#if submitResult}
+		<!-- ── Confirmation state (replaces the panel after success) ──────── -->
+		<div class="confirm-card" in:fly={{ y: -8, duration: 220 }}>
+			<p class="confirm-title">
+				✅ Your verse is scheduled for
+				<strong>{fmtDateVague(submitResult.scheduledDate)}</strong>
+			</p>
+			<p class="confirm-ref">{submitResult.reference}</p>
+			<button
+				type="button"
+				class="submit-another-btn"
+				onclick={() => {
+					submitResult = null;
+					expanded = false;
+				}}
+			>
+				Done
+			</button>
+		</div>
+	{:else if !isLoggedIn}
+		<!-- ── State 1: logged out — sign-in dropdown ─────────────────────── -->
+		<button
+			type="button"
+			class="progress-btn w-full"
+			aria-expanded={expanded}
+			onclick={() => (expanded = !expanded)}
+			data-umami-event="Submit a verse (logged out)"
+		>
+			<span>✨ Submit a verse</span>
+			<svg
+				class="progress-chev"
+				class:open={expanded}
+				viewBox="0 0 24 24"
+				fill="none"
+				stroke="currentColor"
+				stroke-width="2.5"
+				stroke-linecap="round"
+				stroke-linejoin="round"
+				aria-hidden="true"
+			>
+				<path d="m6 9 6 6 6-6" />
+			</svg>
+		</button>
+		{#if expanded}
+			<p class="signin-text text-gray-800 dark:text-gray-300">
+				Sign in to submit a verse for a future day
+			</p>
+			<form method="POST" action="/auth/apple" class="w-full">
+				<input type="hidden" name="anonymousId" value={anonymousId} />
+				<button
+					type="submit"
+					class="apple-signin-btn"
+					data-umami-event="Sign in with Apple"
+				>
+					<svg class="apple-icon" viewBox="0 0 24 24" fill="currentColor">
+						<path
+							d="M17.05 20.28c-.98.95-2.05.88-3.08.4-1.09-.5-2.08-.48-3.24 0-1.44.62-2.2.44-3.06-.4C2.79 15.25 3.51 7.59 9.05 7.31c1.35.07 2.29.74 3.08.8 1.18-.24 2.31-.93 3.57-.84 1.51.12 2.65.72 3.4 1.8-3.12 1.87-2.38 5.98.48 7.13-.57 1.5-1.31 2.99-2.54 4.09zM12.03 7.25c-.15-2.23 1.66-4.07 3.74-4.25.29 2.58-2.34 4.5-3.74 4.25z"
+						/>
+					</svg>
+					Sign in with Apple
+				</button>
+			</form>
+			<form method="POST" action="/auth/google" class="w-full">
+				<input type="hidden" name="anonymousId" value={anonymousId} />
+				<button
+					type="submit"
+					class="google-signin-btn"
+					data-umami-event="Sign in with Google"
+				>
+					<svg
+						class="google-icon"
+						viewBox="0 0 24 24"
+						xmlns="http://www.w3.org/2000/svg"
+					>
+						<path
+							fill="#4285F4"
+							d="M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92c-.26 1.37-1.04 2.53-2.21 3.31v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.09z"
+						/>
+						<path
+							fill="#34A853"
+							d="M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z"
+						/>
+						<path
+							fill="#FBBC05"
+							d="M5.84 14.09c-.22-.66-.35-1.36-.35-2.09s.13-1.43.35-2.09V7.07H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.93l3.66-2.84z"
+						/>
+						<path
+							fill="#EA4335"
+							d="M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.07l3.66 2.84c.87-2.6 3.3-4.53 6.16-4.53z"
+						/>
+					</svg>
+					Sign in with Google
+				</button>
+			</form>
+		{/if}
+	{:else if onCooldown}
+		<!-- ── State 2: logged in, cooldown active — disabled + countdown ─── -->
+		<button
+			type="button"
+			class="progress-btn w-full progress-btn-disabled"
+			disabled
+			aria-disabled="true"
+		>
+			<span>✨ Submit a verse</span>
+			<span class="lock-icon" aria-hidden="true">⏳</span>
+		</button>
+		{#if countdownText}
+			<p class="countdown-text">Next submission in {countdownText}</p>
+		{/if}
+	{:else}
+		<!-- ── State 3: logged in, can submit — selector + preview ────────── -->
+		<button
+			type="button"
+			class="progress-btn w-full"
+			aria-expanded={expanded}
+			onclick={() => (expanded = !expanded)}
+			data-umami-event="Submit a verse (logged in)"
+		>
+			<span>✨ Submit a verse</span>
+			<svg
+				class="progress-chev"
+				class:open={expanded}
+				viewBox="0 0 24 24"
+				fill="none"
+				stroke="currentColor"
+				stroke-width="2.5"
+				stroke-linecap="round"
+				stroke-linejoin="round"
+				aria-hidden="true"
+			>
+				<path d="m6 9 6 6 6-6" />
+			</svg>
+		</button>
+		{#if expanded}
+			<div class="submit-panel" in:fly={{ y: -8, duration: 220 }}>
+				{#if statusError}
+					<p class="panel-error">{statusError}</p>
+				{/if}
+
+				{#if !structure}
+					<p class="panel-hint">Loading Bible structure…</p>
+				{:else}
+					<div class="select-row">
+						<label class="select-label">
+							<span class="select-cap">Book</span>
+							<select
+								class="cascading-select"
+								value={selectedBookId}
+								onchange={(e) => {
+									selectedBookId = e.currentTarget.value;
+									onBookChange();
+								}}
+							>
+								<optgroup label="Old Testament">
+									{#each oldBooks as book (book.id)}
+										<option value={book.id}>{book.name}</option>
+									{/each}
+								</optgroup>
+								<optgroup label="New Testament">
+									{#each newBooks as book (book.id)}
+										<option value={book.id}>{book.name}</option>
+									{/each}
+								</optgroup>
+							</select>
+						</label>
+
+						<label class="select-label">
+							<span class="select-cap">Chapter</span>
+							<select
+								class="cascading-select"
+								value={selectedChapter}
+								onchange={(e) => {
+									selectedChapter = Number(e.currentTarget.value);
+									onChapterChange();
+								}}
+							>
+								{#if chapterCount === 0}
+									<option value={0}>—</option>
+								{:else}
+									{#each Array(chapterCount) as _, i (i)}
+										<option value={i + 1}>{i + 1}</option>
+									{/each}
+								{/if}
+							</select>
+						</label>
+
+						<label class="select-label">
+							<span class="select-cap">Verse</span>
+							<select
+								class="cascading-select"
+								value={selectedVerse}
+								onchange={(e) => {
+									selectedVerse = Number(e.currentTarget.value);
+									onVerseChange();
+								}}
+							>
+								{#if verseCount === 0}
+									<option value={0}>—</option>
+								{:else}
+									{#each Array(verseCount) as _, i (i)}
+										<option value={i + 1}>{i + 1}</option>
+									{/each}
+								{/if}
+							</select>
+						</label>
+					</div>
+
+					<!-- Live 3-verse preview -->
+					<div class="preview-card">
+						{#if previewLoading}
+							<p class="preview-hint">Loading preview…</p>
+						{:else if preview}
+							<p class="preview-ref">{preview.reference}</p>
+							<div class="preview-verses">
+								{#each preview.windowVerses as verseText, i (i)}
+									<p class="preview-verse">{verseText}</p>
+								{/each}
+							</div>
+						{:else}
+							<p class="preview-hint">Select a verse to preview.</p>
+						{/if}
+					</div>
+
+					{#if submitError}
+						<p class="panel-error">{submitError}</p>
+					{/if}
+
+					<button
+						type="button"
+						class="submit-btn"
+						disabled={submitting ||
+							!selectedBookId ||
+							!selectedChapter ||
+							!selectedVerse ||
+							!preview}
+						onclick={handleSubmit}
+					>
+						{submitting ? "Scheduling…" : "Submit verse"}
+					</button>
+					{#if status?.upcoming && status.upcoming.length > 0}
+						<p class="upcoming-text">
+							Your upcoming verse{status.upcoming.length > 1
+								? "s"
+								: ""}:
+							{#each status.upcoming as u, i (i)}
+								{#if i > 0}<span class="upcoming-sep">·</span>{/if}
+								<span class="upcoming-item"
+									>{u.reference} ({fmtDateVague(u.scheduledDate)})</span
+								>
+							{/each}
+						</p>
+					{/if}
+				{/if}
+			</div>
+		{/if}
+	{/if}
+</div>
+
+<style>
+	.submit-verse-wrap {
+		gap: 0.75rem;
+	}
+
+	/* Reuse WinScreen's neobrutalist .progress-btn base (scoped here too). */
+	:global(.submit-verse-wrap .progress-btn) {
+		display: flex;
+		align-items: center;
+		justify-content: center;
+		gap: 0.5rem;
+		padding: 0.85rem 1.25rem;
+		background: #fff;
+		color: #111;
+		border: 2px solid #000;
+		border-radius: 0.75rem;
+		font-size: 1rem;
+		font-weight: 700;
+		text-decoration: none;
+		cursor: pointer;
+		box-shadow: 6px 6px 0 0 #000;
+		transition:
+			transform 80ms ease,
+			box-shadow 80ms ease;
+	}
+	:global(.submit-verse-wrap .progress-btn:hover) {
+		transform: translate(-2px, -2px);
+		box-shadow: 8px 8px 0 0 #000;
+	}
+	:global(.submit-verse-wrap .progress-btn:active) {
+		transform: translate(2px, 2px);
+		box-shadow: 2px 2px 0 0 #000;
+	}
+	:global(.submit-verse-wrap .progress-chev) {
+		width: 1.25rem;
+		height: 1.25rem;
+		transition: transform 200ms ease;
+	}
+	:global(.submit-verse-wrap .progress-chev.open) {
+		transform: rotate(180deg);
+	}
+	@media (prefers-color-scheme: dark) {
+		:global(.submit-verse-wrap .progress-btn) {
+			background: #111827;
+			color: #f9fafb;
+			border-color: #fff;
+			box-shadow: 6px 6px 0 0 #fff;
+		}
+		:global(.submit-verse-wrap .progress-btn:hover) {
+			box-shadow: 8px 8px 0 0 #fff;
+		}
+		:global(.submit-verse-wrap .progress-btn:active) {
+			box-shadow: 2px 2px 0 0 #fff;
+		}
+	}
+
+	/* Disabled (cooldown) variant. */
+	:global(.submit-verse-wrap .progress-btn-disabled) {
+		opacity: 0.55;
+		cursor: not-allowed;
+		box-shadow: 4px 4px 0 0 #000;
+	}
+	:global(.submit-verse-wrap .progress-btn-disabled:hover),
+	:global(.submit-verse-wrap .progress-btn-disabled:active) {
+		transform: none;
+		box-shadow: 4px 4px 0 0 #000;
+	}
+	@media (prefers-color-scheme: dark) {
+		:global(.submit-verse-wrap .progress-btn-disabled) {
+			box-shadow: 4px 4px 0 0 #fff;
+		}
+		:global(.submit-verse-wrap .progress-btn-disabled:hover),
+		:global(.submit-verse-wrap .progress-btn-disabled:active) {
+			box-shadow: 4px 4px 0 0 #fff;
+		}
+	}
+
+	.lock-icon {
+		font-size: 1rem;
+	}
+
+	.countdown-text {
+		padding-top: 12px;
+		font-size: 0.8rem;
+		font-weight: 600;
+		color: #6b7280;
+		letter-spacing: 0.01em;
+		font-variant-numeric: tabular-nums;
+		text-align: center;
+		width: 100%;
+	}
+	@media (prefers-color-scheme: dark) {
+		.countdown-text {
+			color: #9ca3af;
+		}
+	}
+
+	.signin-text {
+		font-size: 0.85rem;
+		text-align: center;
+		font-weight: 500;
+	}
+
+	/* ── Apple / Google sign-in buttons (mirror WinScreen) ── */
+	:global(.submit-verse-wrap .apple-signin-btn),
+	:global(.submit-verse-wrap .google-signin-btn) {
+		display: flex;
+		align-items: center;
+		justify-content: center;
+		gap: 0.5rem;
+		padding: 0.6rem 1rem;
+		width: 100%;
+		background: #000;
+		color: #fff;
+		border-radius: 0.5rem;
+		font-size: 0.95rem;
+		font-weight: 600;
+		border: none;
+		cursor: pointer;
+		transition:
+			background 150ms ease,
+			transform 80ms ease;
+	}
+	:global(.submit-verse-wrap .apple-signin-btn) {
+		margin-bottom: 0.6rem;
+	}
+	:global(.submit-verse-wrap .apple-signin-btn:hover),
+	:global(.submit-verse-wrap .google-signin-btn:hover) {
+		background: #222;
+		transform: translateY(-1px);
+	}
+	:global(.submit-verse-wrap .apple-signin-btn:active),
+	:global(.submit-verse-wrap .google-signin-btn:active) {
+		background: #111;
+		transform: scale(0.98);
+	}
+	@media (prefers-color-scheme: dark) {
+		:global(.submit-verse-wrap .apple-signin-btn),
+		:global(.submit-verse-wrap .google-signin-btn) {
+			background: #fff;
+			color: #000;
+		}
+		:global(.submit-verse-wrap .apple-signin-btn:hover),
+		:global(.submit-verse-wrap .google-signin-btn:hover) {
+			background: #e5e5e5;
+		}
+		:global(.submit-verse-wrap .apple-signin-btn:active),
+		:global(.submit-verse-wrap .google-signin-btn:active) {
+			background: #ccc;
+		}
+	}
+	:global(.submit-verse-wrap .apple-icon),
+	:global(.submit-verse-wrap .google-icon) {
+		width: 1.1rem;
+		height: 1.1rem;
+		flex-shrink: 0;
+	}
+
+	/* ── Submit panel ── */
+	.submit-panel {
+		display: flex;
+		flex-direction: column;
+		gap: 0.85rem;
+		width: 100%;
+		padding: 1rem;
+		background: oklch(94% 0.028 298.626);
+		border: 2px solid #000;
+		border-radius: 0.75rem;
+		box-shadow: 6px 6px 0 0 #000;
+	}
+	@media (prefers-color-scheme: dark) {
+		.submit-panel {
+			background: oklch(22% 0.025 298.626);
+			border-color: #fff;
+			box-shadow: 6px 6px 0 0 #fff;
+		}
+	}
+
+	.panel-hint,
+	.preview-hint {
+		font-size: 0.85rem;
+		color: #6b7280;
+		text-align: center;
+	}
+	@media (prefers-color-scheme: dark) {
+		.panel-hint,
+		.preview-hint {
+			color: #9ca3af;
+		}
+	}
+
+	.panel-error {
+		font-size: 0.85rem;
+		color: #b91c1c;
+		text-align: center;
+		font-weight: 600;
+	}
+	@media (prefers-color-scheme: dark) {
+		.panel-error {
+			color: #f87171;
+		}
+	}
+
+	.select-row {
+		display: flex;
+		gap: 0.5rem;
+		flex-wrap: wrap;
+	}
+
+	.select-label {
+		display: flex;
+		flex-direction: column;
+		gap: 0.25rem;
+		flex: 1;
+		min-width: 5rem;
+	}
+
+	.select-cap {
+		font-size: 0.7rem;
+		font-weight: 700;
+		text-transform: uppercase;
+		letter-spacing: 0.08em;
+		color: #6b7280;
+	}
+	@media (prefers-color-scheme: dark) {
+		.select-cap {
+			color: #9ca3af;
+		}
+	}
+
+	.cascading-select {
+		width: 100%;
+		padding: 0.5rem 0.6rem;
+		border: 2px solid #000;
+		border-radius: 0.5rem;
+		background: #fff;
+		color: #111;
+		font-size: 0.9rem;
+		font-weight: 600;
+		cursor: pointer;
+	}
+	@media (prefers-color-scheme: dark) {
+		.cascading-select {
+			background: #111827;
+			color: #f9fafb;
+			border-color: #fff;
+		}
+	}
+
+	/* ── Preview card ── */
+	.preview-card {
+		padding: 0.75rem;
+		border: 1px solid rgba(0, 0, 0, 0.15);
+		border-radius: 0.5rem;
+		background: rgba(255, 255, 255, 0.5);
+	}
+	@media (prefers-color-scheme: dark) {
+		.preview-card {
+			border-color: rgba(255, 255, 255, 0.15);
+			background: rgba(0, 0, 0, 0.25);
+		}
+	}
+
+	.preview-ref {
+		font-size: 0.8rem;
+		font-weight: 700;
+		color: #374151;
+		margin-bottom: 0.4rem;
+	}
+	@media (prefers-color-scheme: dark) {
+		.preview-ref {
+			color: #d1d5db;
+		}
+	}
+
+	.preview-verses {
+		display: flex;
+		flex-direction: column;
+		gap: 0.35rem;
+	}
+
+	.preview-verse {
+		font-size: 0.82rem;
+		line-height: 1.45;
+		color: #4b5563;
+		font-style: italic;
+	}
+	@media (prefers-color-scheme: dark) {
+		.preview-verse {
+			color: #9ca3af;
+		}
+	}
+
+	/* ── Submit button (neobrutalist) ── */
+	.submit-btn {
+		padding: 0.7rem 1rem;
+		background: #16a34a;
+		color: #fff;
+		border: 2px solid #000;
+		border-radius: 0.6rem;
+		font-size: 0.95rem;
+		font-weight: 700;
+		cursor: pointer;
+		box-shadow: 4px 4px 0 0 #000;
+		transition:
+			transform 80ms ease,
+			box-shadow 80ms ease,
+			background-color 120ms ease;
+	}
+	.submit-btn:hover:not(:disabled) {
+		transform: translate(-2px, -2px);
+		box-shadow: 6px 6px 0 0 #000;
+		background: #15803d;
+	}
+	.submit-btn:active:not(:disabled) {
+		transform: translate(2px, 2px);
+		box-shadow: 2px 2px 0 0 #000;
+	}
+	.submit-btn:disabled {
+		opacity: 0.55;
+		cursor: not-allowed;
+	}
+	@media (prefers-color-scheme: dark) {
+		.submit-btn {
+			border-color: #fff;
+			box-shadow: 4px 4px 0 0 #fff;
+		}
+		.submit-btn:hover:not(:disabled) {
+			box-shadow: 6px 6px 0 0 #fff;
+		}
+		.submit-btn:active:not(:disabled) {
+			box-shadow: 2px 2px 0 0 #fff;
+		}
+	}
+
+	/* ── Upcoming list ── */
+	.upcoming-text {
+		font-size: 0.72rem;
+		color: #6b7280;
+		text-align: center;
+		line-height: 1.5;
+	}
+	@media (prefers-color-scheme: dark) {
+		.upcoming-text {
+			color: #9ca3af;
+		}
+	}
+	.upcoming-item {
+		font-weight: 600;
+	}
+	.upcoming-sep {
+		margin: 0 0.25rem;
+		opacity: 0.6;
+	}
+
+	/* ── Confirmation card ── */
+	.confirm-card {
+		display: flex;
+		flex-direction: column;
+		gap: 0.5rem;
+		align-items: center;
+		width: 100%;
+		padding: 1.1rem;
+		background: oklch(94% 0.028 298.626);
+		border: 2px solid #000;
+		border-radius: 0.75rem;
+		box-shadow: 6px 6px 0 0 #000;
+		text-align: center;
+	}
+	@media (prefers-color-scheme: dark) {
+		.confirm-card {
+			background: oklch(22% 0.025 298.626);
+			border-color: #fff;
+			box-shadow: 6px 6px 0 0 #fff;
+		}
+	}
+
+	.confirm-title {
+		font-size: 1rem;
+		font-weight: 700;
+		color: #111;
+	}
+	@media (prefers-color-scheme: dark) {
+		.confirm-title {
+			color: #f9fafb;
+		}
+	}
+
+	.confirm-ref {
+		font-size: 0.85rem;
+		font-weight: 600;
+		color: #374151;
+	}
+	@media (prefers-color-scheme: dark) {
+		.confirm-ref {
+			color: #d1d5db;
+		}
+	}
+
+	.submit-another-btn {
+		padding: 0.5rem 1.1rem;
+		background: #fff;
+		color: #111;
+		border: 2px solid #000;
+		border-radius: 0.5rem;
+		font-size: 0.85rem;
+		font-weight: 700;
+		cursor: pointer;
+		box-shadow: 3px 3px 0 0 #000;
+		transition:
+			transform 80ms ease,
+			box-shadow 80ms ease;
+	}
+	.submit-another-btn:hover {
+		transform: translate(-1px, -1px);
+		box-shadow: 4px 4px 0 0 #000;
+	}
+	.submit-another-btn:active {
+		transform: translate(1px, 1px);
+		box-shadow: 2px 2px 0 0 #000;
+	}
+	@media (prefers-color-scheme: dark) {
+		.submit-another-btn {
+			background: #111827;
+			color: #f9fafb;
+			border-color: #fff;
+			box-shadow: 3px 3px 0 0 #fff;
+		}
+		.submit-another-btn:hover {
+			box-shadow: 4px 4px 0 0 #fff;
+		}
+		.submit-another-btn:active {
+			box-shadow: 2px 2px 0 0 #fff;
+		}
+	}
+</style>
diff --git a/src/lib/components/VerseDisplay.svelte b/src/lib/components/VerseDisplay.svelte
index bc81a69..a954f98 100644
--- a/src/lib/components/VerseDisplay.svelte
+++ b/src/lib/components/VerseDisplay.svelte
@@ -1,14 +1,21 @@
 <script lang="ts">
 	import { browser } from "$app/environment";
 	import { fade } from "svelte/transition";
-	import type { PageData } from "../../routes/$types.js"; // Approximate type; adjust if needed
 	import Container from "./Container.svelte";
 
+	interface VerseDisplayData {
+		dailyVerse: {
+			date: string;
+			reference: string;
+			verseText: string;
+		};
+	}
+
 	let {
 		data,
 		isWon,
 		blurChapter = false,
-	}: { data: PageData; isWon: boolean; blurChapter?: boolean } = $props();
+	}: { data: VerseDisplayData; isWon: boolean; blurChapter?: boolean } = $props();
 	let dailyVerse = $derived(data.dailyVerse);
 	let displayReference = $derived(
 		blurChapter
@@ -19,7 +26,7 @@
 	);
 	let displayVerseText = $derived(
 		dailyVerse.verseText
-			.replace(/^([a-z])/, (c) => c.toUpperCase())
+			.replace(/^([a-z])/, (c: string) => c.toUpperCase())
 			.replace(/[,:;-—]$/, "..."),
 	);
 
diff --git a/src/lib/components/WinScreen.svelte b/src/lib/components/WinScreen.svelte
index 733d4e7..608f9ff 100644
--- a/src/lib/components/WinScreen.svelte
+++ b/src/lib/components/WinScreen.svelte
@@ -10,6 +10,7 @@
 	import CountdownTimer from "./CountdownTimer.svelte";
 	import StreakCounter from "./StreakCounter.svelte";
 	import ChapterGuess from "./ChapterGuess.svelte";
+	import SubmitVerse from "./SubmitVerse.svelte";
 
 	interface StatsData {
 		solveRank: number;
@@ -41,6 +42,7 @@
 		streakPercentile = null,
 		isLoggedIn = false,
 		anonymousId = "",
+		localDate = "",
 	}: {
 		statsData: StatsData | null;
 		correctBookId: string;
@@ -57,6 +59,7 @@
 		streakPercentile?: number | null;
 		isLoggedIn?: boolean;
 		anonymousId?: string;
+		localDate?: string;
 	} = $props();
 
 	let bookName = $derived(getBookById(correctBookId)?.name ?? "");
@@ -408,11 +411,17 @@
 					</svg>
 					Sign in with Google
 				</button>
-			</form>
+		</form>
 			{/if}
 		</div>
 	{/if}
 
+	<SubmitVerse
+		{isLoggedIn}
+		{anonymousId}
+		{localDate}
+	/>
+
 	<div class="signin-prompt">
 		<a
 			href="https://discord.gg/yWQXbGK8SD"
diff --git a/src/lib/server/auth.test.ts b/src/lib/server/auth.test.ts
index e4359f3..77d4634 100644
--- a/src/lib/server/auth.test.ts
+++ b/src/lib/server/auth.test.ts
@@ -1,4 +1,4 @@
-import type { RequestEvent } from '@sveltejs/kit';
+import type { Cookies } from '@sveltejs/kit';
 import { eq } from 'drizzle-orm';
 import { testDb as db } from '$lib/server/db/test';
 import * as table from '$lib/server/db/schema';
@@ -64,15 +64,15 @@ export async function invalidateSession(sessionId: string) {
 	await db.delete(table.session).where(eq(table.session.id, sessionId));
 }
 
-export function setSessionTokenCookie(event: RequestEvent, token: string, expiresAt: Date) {
-	event.cookies.set(sessionCookieName, token, {
+export function setSessionTokenCookie({ cookies }: { cookies: Cookies }, token: string, expiresAt: Date) {
+	cookies.set(sessionCookieName, token, {
 		expires: expiresAt,
 		path: '/'
 	});
 }
 
-export function deleteSessionTokenCookie(event: RequestEvent) {
-	event.cookies.delete(sessionCookieName, {
+export function deleteSessionTokenCookie({ cookies }: { cookies: Cookies }) {
+	cookies.delete(sessionCookieName, {
 		path: '/'
 	});
 }
diff --git a/src/lib/server/auth.ts b/src/lib/server/auth.ts
index 01cead9..724f398 100644
--- a/src/lib/server/auth.ts
+++ b/src/lib/server/auth.ts
@@ -1,4 +1,4 @@
-import type { RequestEvent } from '@sveltejs/kit';
+import type { Cookies, RequestEvent } from '@sveltejs/kit';
 import { eq } from 'drizzle-orm';
 import { db } from '$lib/server/db';
 import * as table from '$lib/server/db/schema';
@@ -64,15 +64,15 @@ export async function invalidateSession(sessionId: string) {
 	await db.delete(table.session).where(eq(table.session.id, sessionId));
 }
 
-export function setSessionTokenCookie(event: RequestEvent, token: string, expiresAt: Date) {
-	event.cookies.set(sessionCookieName, token, {
+export function setSessionTokenCookie({ cookies }: { cookies: Cookies }, token: string, expiresAt: Date) {
+	cookies.set(sessionCookieName, token, {
 		expires: expiresAt,
 		path: '/'
 	});
 }
 
-export function deleteSessionTokenCookie(event: RequestEvent) {
-	event.cookies.delete(sessionCookieName, {
+export function deleteSessionTokenCookie({ cookies }: { cookies: Cookies }) {
+	cookies.delete(sessionCookieName, {
 		path: '/'
 	});
 }
diff --git a/src/lib/server/bible-api.ts b/src/lib/server/bible-api.ts
index aa1986d..f54ed74 100644
--- a/src/lib/server/bible-api.ts
+++ b/src/lib/server/bible-api.ts
@@ -31,3 +31,22 @@ export async function fetchRandomVerse(): Promise<ApiVerse> {
 		verseText
 	};
 }
+
+/**
+ * Like fetchRandomVerse, but re-rolls until the picked book is not in
+ * `avoidBookIds` (the no-back-to-back neighbors for lazy gap-fill).
+ * 66 books with ≤2 excluded gives ~97% success per try; capped at 20 tries
+ * before accepting whatever was last drawn (spec: "Lazy Gap-Fill").
+ */
+export async function fetchRandomVerseAvoiding(
+	avoidBookIds: string[] = []
+): Promise<ApiVerse> {
+	const avoid = new Set(avoidBookIds.filter(Boolean));
+	let last: ApiVerse | null = null;
+	for (let i = 0; i < 20; i++) {
+		const v = await fetchRandomVerse();
+		last = v;
+		if (!avoid.has(v.bookId)) return v;
+	}
+	return last as ApiVerse;
+}
diff --git a/src/lib/server/daily-verse.ts b/src/lib/server/daily-verse.ts
index 5ea7ce4..258b59b 100644
--- a/src/lib/server/daily-verse.ts
+++ b/src/lib/server/daily-verse.ts
@@ -1,9 +1,16 @@
 import { db } from '$lib/server/db';
 import { dailyVerses } from '$lib/server/db/schema';
 import { eq, sql } from 'drizzle-orm';
-import { fetchRandomVerse } from '$lib/server/bible-api';
+import { fetchRandomVerse, fetchRandomVerseAvoiding } from '$lib/server/bible-api';
 import type { DailyVerse } from '$lib/server/db/schema';
 
+/** Add `n` days to a YYYY-MM-DD string using pure UTC arithmetic. */
+function addDays(dateStr: string, n: number): string {
+	const d = new Date(dateStr + 'T00:00:00Z');
+	d.setUTCDate(d.getUTCDate() + n);
+	return d.toISOString().slice(0, 10);
+}
+
 export async function getVerseForDate(dateStr: string): Promise<DailyVerse> {
 	// Validate date format (YYYY-MM-DD)
 	if (!/^\d{4}-\d{2}-\d{2}$/.test(dateStr)) {
@@ -16,8 +23,28 @@ export async function getVerseForDate(dateStr: string): Promise<DailyVerse> {
 		return existing[0];
 	}
 
-	// Otherwise get a new random verse for this date
-	const apiVerse = await fetchRandomVerse();
+	// Otherwise get a new random verse for this date. Gap-fill is extended to
+	// respect the no-back-to-back rule: the random verse's book must differ from
+	// any committed neighbor (D-1 / D+1). This preserves the global invariant
+	// that no two consecutive calendar days ever feature the same book
+	// (spec: "Lazy Gap-Fill").
+	const [prev] = await db
+		.select({ bookId: dailyVerses.bookId })
+		.from(dailyVerses)
+		.where(eq(dailyVerses.date, addDays(dateStr, -1)))
+		.limit(1);
+	const [next] = await db
+		.select({ bookId: dailyVerses.bookId })
+		.from(dailyVerses)
+		.where(eq(dailyVerses.date, addDays(dateStr, 1)))
+		.limit(1);
+
+	const avoid = [prev?.bookId, next?.bookId].filter((b): b is string => !!b);
+	const apiVerse =
+		avoid.length > 0
+			? await fetchRandomVerseAvoiding(avoid)
+			: await fetchRandomVerse();
+
 	const createdAt = sql`${Math.floor(Date.now() / 1000)}`;
 
 	const newVerse: Omit<DailyVerse, 'createdAt'> = {
diff --git a/src/lib/server/verse-submission.ts b/src/lib/server/verse-submission.ts
new file mode 100644
index 0000000..0bbe18f
--- /dev/null
+++ b/src/lib/server/verse-submission.ts
@@ -0,0 +1,293 @@
+import { db as defaultDb } from '$lib/server/db';
+import { dailyVerses, verseSubmissions } from '$lib/server/db/schema';
+import { eq, desc, sql } from 'drizzle-orm';
+import { getBookById } from '$lib/server/bible';
+
+// Drizzle instance type alias (the production db or the test db).
+export type Db = typeof defaultDb;
+import {
+	composeVerseWindow,
+	formatWindowReference,
+	getChapterCount,
+	getVerseCount
+} from '$lib/server/xml-bible';
+
+// Server-side constants for the community-verse-submission feature
+// (spec: "Rate Limiting & Cooldown", "Scheduling Algorithm").
+const DAY_MS = 1000 * 60 * 60 * 24;
+export const COOLDOWN_MS = 7 * DAY_MS;
+export const REPEAT_WINDOW_DAYS = 60;
+const MAX_SCHEDULE_RETRIES = 5;
+// Safety cap on the day-by-day forward scan. 10k days (~27 years) is well
+// beyond any realistic calendar density; prevents an accidental infinite loop.
+const MAX_SCAN_DAYS = 10_000;
+
+export interface SubmissionInput {
+	bookId: string;
+	chapter: number;
+	verse: number;
+}
+
+export interface ScheduleResult {
+	scheduledDate: string;
+	reference: string;
+	windowText: string;
+	bookId: string;
+}
+
+/** Add `n` days to a YYYY-MM-DD string using pure UTC arithmetic. */
+export function addDays(dateStr: string, n: number): string {
+	const d = new Date(dateStr + 'T00:00:00Z');
+	d.setUTCDate(d.getUTCDate() + n);
+	return d.toISOString().slice(0, 10);
+}
+
+/** Whole-day difference (b - a) between two YYYY-MM-DD strings, UTC. */
+export function dayDiff(a: string, b: string): number {
+	const ta = new Date(a + 'T00:00:00Z').getTime();
+	const tb = new Date(b + 'T00:00:00Z').getTime();
+	return Math.round((tb - ta) / DAY_MS);
+}
+
+/** Current server UTC date as YYYY-MM-DD. */
+export function todayUtcStr(): string {
+	return new Date().toISOString().slice(0, 10);
+}
+
+/**
+ * The canonical identity of a 3-verse window, used by the 60-day repeat rule.
+ * Combines bookId + formatted reference so identical windows collide regardless
+ * of how the underlying row was produced (submission vs. random gap-fill).
+ */
+function windowRef(bookId: string, reference: string): string {
+	return `${bookId}|${reference}`;
+}
+
+/** Is this a SQLite unique-constraint violation (used for retry-on-conflict)? */
+export function isUniqueConstraintError(err: unknown): boolean {
+	const e = err as { code?: string; message?: string } | null;
+	return !!e && (
+		e.code === 'SQLITE_CONSTRAINT_UNIQUE' ||
+		e.code === 'SQLITE_CONSTRAINT' ||
+		!!(e.message && /UNIQUE/i.test(e.message))
+	);
+}
+
+export interface CooldownState {
+	/** True if the user submitted within the last 7 days. */
+	onCooldown: boolean;
+	/** Server UTC millis when the cooldown expires, or null. */
+	cooldownEndsAt: number | null;
+}
+
+/** Compute the rolling 7-day cooldown state for a user (server UTC). */
+export async function getCooldownState(
+	db: Db,
+	userId: string,
+	now: number = Date.now()
+): Promise<CooldownState> {
+	const [last] = await db
+		.select({ submittedAt: verseSubmissions.submittedAt })
+		.from(verseSubmissions)
+		.where(eq(verseSubmissions.userId, userId))
+		.orderBy(desc(verseSubmissions.submittedAt))
+		.limit(1);
+
+	if (!last) {
+		return { onCooldown: false, cooldownEndsAt: null };
+	}
+
+	const cooldownEndsAt = last.submittedAt + COOLDOWN_MS;
+	if (now < cooldownEndsAt) {
+		return { onCooldown: true, cooldownEndsAt };
+	}
+	return { onCooldown: false, cooldownEndsAt: null };
+}
+
+/** Structural validation of a user-supplied (bookId, chapter, verse) selection. */
+export function validateSelection(input: SubmissionInput): string | null {
+	const book = getBookById(input.bookId);
+	if (!book) return 'Unknown bookId';
+
+	if (!Number.isInteger(input.chapter) || input.chapter < 1) {
+		return 'chapter must be a positive integer';
+	}
+	const chapterCount = getChapterCount(book.order);
+	if (input.chapter > chapterCount) {
+		return `chapter out of range (1-${chapterCount})`;
+	}
+
+	if (!Number.isInteger(input.verse) || input.verse < 1) {
+		return 'verse must be a positive integer';
+	}
+	const verseCount = getVerseCount(book.order, input.chapter);
+	if (input.verse > verseCount) {
+		return `verse out of range (1-${verseCount})`;
+	}
+
+	return null;
+}
+
+interface LoadedCalendar {
+	byDate: Map<string, { bookId: string; windowRef: string }>;
+	datesByWindowRef: Map<string, string[]>;
+}
+
+/** Load every committed daily_verses row into in-memory indexes for the scan. */
+async function loadCalendar(db: Db): Promise<LoadedCalendar> {
+	const rows = await db
+		.select({
+			date: dailyVerses.date,
+			bookId: dailyVerses.bookId,
+			reference: dailyVerses.reference
+		})
+		.from(dailyVerses);
+
+	const byDate = new Map<string, { bookId: string; windowRef: string }>();
+	const datesByWindowRef = new Map<string, string[]>();
+
+	for (const r of rows) {
+		const wr = windowRef(r.bookId, r.reference);
+		byDate.set(r.date, { bookId: r.bookId, windowRef: wr });
+		const arr = datesByWindowRef.get(wr);
+		if (arr) arr.push(r.date);
+		else datesByWindowRef.set(wr, [r.date]);
+	}
+
+	return { byDate, datesByWindowRef };
+}
+
+/**
+ * Find the earliest valid candidate date `D` (scanning forward from tomorrow,
+ * server UTC) for a submission with the given book + window identity.
+ *
+ * Validity (spec "Scheduling Algorithm"):
+ *  1. Empty:            no daily_verses row at D.
+ *  2. No back-to-back:  D-1 (if committed) has a different book.
+ *  3. No back-to-back:  D+1 (if committed) has a different book.
+ *  4. 60-day repeat:    no identical window within [D-60, D+60] inclusive.
+ */
+async function findCandidateDate(
+	db: Db,
+	bookId: string,
+	submissionWindowRef: string,
+	opts?: { startFrom?: string; today?: string }
+): Promise<string | null> {
+	const { byDate, datesByWindowRef } = await loadCalendar(db);
+
+	let cursor = opts?.startFrom ?? addDays(opts?.today ?? todayUtcStr(), 1);
+	for (let i = 0; i < MAX_SCAN_DAYS; i++) {
+		// Rule 1: must be empty.
+		if (!byDate.has(cursor)) {
+			// Rules 2 & 3: no back-to-back with committed neighbors.
+			const prev = byDate.get(addDays(cursor, -1));
+			const next = byDate.get(addDays(cursor, 1));
+			const backToBack =
+				(!!prev && prev.bookId === bookId) ||
+				(!!next && next.bookId === bookId);
+
+			if (!backToBack) {
+				// Rule 4: 60-day repeat distance for the identical window.
+				const sameWindowDates = datesByWindowRef.get(submissionWindowRef) ?? [];
+				const tooClose = sameWindowDates.some(
+					(d) => Math.abs(dayDiff(d, cursor)) <= REPEAT_WINDOW_DAYS
+				);
+				if (!tooClose) {
+					return cursor;
+				}
+			}
+		}
+		cursor = addDays(cursor, 1);
+	}
+
+	return null;
+}
+
+/**
+ * Run the scheduling scan and write the daily_verses + verse_submissions rows
+ * in a transaction. On a unique-constraint conflict (concurrent submission
+ * picked the same date), re-run the scan from the next day; retry up to a
+ * small bound.
+ */
+export async function scheduleSubmission(
+	db: Db,
+	input: SubmissionInput,
+	userId: string,
+	now: number = Date.now(),
+	opts?: { today?: string }
+): Promise<ScheduleResult> {
+	const book = getBookById(input.bookId);
+	if (!book) throw new Error('Invalid bookId');
+
+	const window = composeVerseWindow(book.order, input.chapter, input.verse);
+	if (!window) throw new Error('Invalid chapter/verse for this book');
+
+	const reference = formatWindowReference(
+		window.bookName,
+		window.startChapter,
+		window.startVerse,
+		window.endChapter,
+		window.endVerse
+	);
+	const windowText = window.verses.join(' ');
+	const submissionWindowRef = windowRef(book.id, reference);
+	let lastCandidate = '';
+
+	for (let attempt = 0; attempt < MAX_SCHEDULE_RETRIES; attempt++) {
+		// Re-compute the candidate each attempt — a concurrent submission may
+		// have claimed the previous candidate between scan and insert. After a
+		// conflict, re-scan from the day *after* the contested candidate.
+		const candidate = await findCandidateDate(
+			db,
+			book.id,
+			submissionWindowRef,
+			attempt === 0
+				? { today: opts?.today }
+				: { startFrom: addDays(lastCandidate, 1) }
+		);
+		if (!candidate) {
+			throw new Error('No valid candidate date found within the scan window');
+		}
+		lastCandidate = candidate;
+
+		try {
+			db.transaction((tx) => {
+				tx.insert(dailyVerses)
+					.values({
+						id: Bun.randomUUIDv7(),
+						date: candidate,
+						bookId: book.id,
+						verseText: windowText,
+						reference,
+						createdAt: sql`${Math.floor(now / 1000)}`
+					})
+					.run();
+				tx.insert(verseSubmissions)
+					.values({
+						id: Bun.randomUUIDv7(),
+						userId,
+						scheduledDate: candidate,
+						selectedBookId: input.bookId,
+						selectedChapter: input.chapter,
+						selectedVerse: input.verse,
+						submittedAt: now
+					})
+					.run();
+			});
+
+			return {
+				scheduledDate: candidate,
+				reference,
+				windowText,
+				bookId: book.id
+			};
+		} catch (err) {
+			if (isUniqueConstraintError(err)) {
+				continue; // retry — re-scan from tomorrow
+			}
+			throw err;
+		}
+	}
+
+	throw new Error('Failed to schedule submission after retries');
+}
diff --git a/src/routes/+page.svelte b/src/routes/+page.svelte
index ebe36cb..730c2e1 100644
--- a/src/routes/+page.svelte
+++ b/src/routes/+page.svelte
@@ -432,6 +432,7 @@
 						{streakPercentile}
 						isLoggedIn={!!user}
 						anonymousId={persistence.anonymousId}
+						localDate={new Date().toLocaleDateString("en-CA")}
 					/>
 				</div>
 			{/if}
diff --git a/src/routes/api/submit-verse/+server.ts b/src/routes/api/submit-verse/+server.ts
new file mode 100644
index 0000000..72028c5
--- /dev/null
+++ b/src/routes/api/submit-verse/+server.ts
@@ -0,0 +1,89 @@
+import { json } from '@sveltejs/kit';
+import type { RequestHandler } from './$types';
+import { db } from '$lib/server/db';
+import { dailyCompletions } from '$lib/server/db/schema';
+import { eq, and } from 'drizzle-orm';
+import {
+	scheduleSubmission,
+	validateSelection,
+	getCooldownState
+} from '$lib/server/verse-submission';
+
+/**
+ * POST /api/submit-verse
+ *
+ * Accepts a user-chosen verse (bookId/chapter/verse) and reserves a concrete
+ * future date for it via the scheduling scan. Auth required, solved-today gate,
+ * 7-day rolling cooldown, and structural validation all enforced here.
+ *
+ * Body: { bookId, chapter, verse, localDate }
+ */
+export const POST: RequestHandler = async ({ request, locals }) => {
+	// 1. Auth.
+	if (!locals.user) {
+		return json({ error: 'Unauthorized' }, { status: 401 });
+	}
+	const userId = locals.user.id;
+
+	let body: any;
+	try {
+		body = await request.json();
+	} catch {
+		return json({ error: 'Invalid JSON body' }, { status: 400 });
+	}
+
+	const { bookId, chapter, verse, localDate } = body ?? {};
+
+	// 2. Solved-today gate (engagement gate, not security).
+	if (typeof localDate !== 'string' || !/^\d{4}-\d{2}-\d{2}$/.test(localDate)) {
+		return json({ error: 'A valid localDate (YYYY-MM-DD) is required' }, { status: 400 });
+	}
+	const [completion] = await db
+		.select({ id: dailyCompletions.id })
+		.from(dailyCompletions)
+		.where(
+			and(
+				eq(dailyCompletions.anonymousId, userId),
+				eq(dailyCompletions.date, localDate)
+			)
+		)
+		.limit(1);
+	if (!completion) {
+		return json({ error: "Solve today's puzzle first" }, { status: 403 });
+	}
+
+	// 3. Cooldown (rolling 7×24h, server UTC).
+	const cooldown = await getCooldownState(db, userId);
+	if (cooldown.onCooldown) {
+		return json(
+			{ error: 'Cooldown active', cooldownEndsAt: cooldown.cooldownEndsAt },
+			{ status: 429 }
+		);
+	}
+
+	// 4. Structural validation.
+	const validationError = validateSelection({ bookId, chapter, verse });
+	if (validationError) {
+		return json({ error: validationError }, { status: 400 });
+	}
+
+	// 5–7. Compute window + scheduling scan + transactional insert (with retry).
+	try {
+		const result = await scheduleSubmission(
+			db,
+			{ bookId, chapter, verse },
+			userId
+		);
+		return json(
+			{
+				scheduledDate: result.scheduledDate,
+				reference: result.reference,
+				windowText: result.windowText
+			},
+			{ status: 201 }
+		);
+	} catch (err) {
+		console.error('submit-verse failed:', err);
+		return json({ error: 'Failed to schedule submission' }, { status: 500 });
+	}
+};
diff --git a/src/routes/api/submit-verse/status/+server.ts b/src/routes/api/submit-verse/status/+server.ts
new file mode 100644
index 0000000..c820579
--- /dev/null
+++ b/src/routes/api/submit-verse/status/+server.ts
@@ -0,0 +1,69 @@
+import { json } from '@sveltejs/kit';
+import type { RequestHandler } from './$types';
+import { db } from '$lib/server/db';
+import { verseSubmissions, dailyVerses } from '$lib/server/db/schema';
+import { eq, desc, asc } from 'drizzle-orm';
+import { getCooldownState, todayUtcStr } from '$lib/server/verse-submission';
+
+/**
+ * GET /api/submit-verse/status?localDate=YYYY-MM-DD
+ *
+ * Returns the state needed to render the win-screen submit button:
+ * whether the user can submit, the active cooldown (if any), their most
+ * recent submission, and their not-yet-reached upcoming submissions.
+ */
+export const GET: RequestHandler = async ({ locals }) => {
+	if (!locals.user) {
+		return json({ error: 'Unauthorized' }, { status: 401 });
+	}
+	const userId = locals.user.id;
+
+	const cooldown = await getCooldownState(db, userId);
+
+	// Most recent submission (by submitted_at) — joined to daily_verses for the
+	// canonical reference/window text that will actually play on its day.
+	const [lastRow] = await db
+		.select({
+			scheduledDate: verseSubmissions.scheduledDate,
+			reference: dailyVerses.reference
+		})
+		.from(verseSubmissions)
+		.leftJoin(dailyVerses, eq(verseSubmissions.scheduledDate, dailyVerses.date))
+		.where(eq(verseSubmissions.userId, userId))
+		.orderBy(desc(verseSubmissions.submittedAt))
+		.limit(1);
+
+	const lastSubmission = lastRow
+		? {
+				scheduledDate: lastRow.scheduledDate,
+				reference: lastRow.reference
+			}
+		: null;
+
+	// Upcoming = this user's submissions whose scheduled date hasn't been
+	// reached yet (server UTC today).
+	const today = todayUtcStr();
+	const upcomingRows = await db
+		.select({
+			scheduledDate: verseSubmissions.scheduledDate,
+			reference: dailyVerses.reference
+		})
+		.from(verseSubmissions)
+		.leftJoin(dailyVerses, eq(verseSubmissions.scheduledDate, dailyVerses.date))
+		.where(eq(verseSubmissions.userId, userId))
+		.orderBy(asc(verseSubmissions.scheduledDate));
+
+	const upcoming = upcomingRows
+		.filter((r) => r.scheduledDate > today)
+		.map((r) => ({
+			scheduledDate: r.scheduledDate,
+			reference: r.reference
+		}));
+
+	return json({
+		canSubmit: !cooldown.onCooldown,
+		cooldownEndsAt: cooldown.cooldownEndsAt,
+		lastSubmission,
+		upcoming
+	});
+};
diff --git a/src/routes/auth/apple/callback/+server.ts b/src/routes/auth/apple/callback/+server.ts
index a7c7f94..102108f 100644
--- a/src/routes/auth/apple/callback/+server.ts
+++ b/src/routes/auth/apple/callback/+server.ts
@@ -131,7 +131,7 @@ export const POST: RequestHandler = async ({ request, cookies }) => {
 	// Create session
 	const sessionToken = auth.generateSessionToken();
 	const session = await auth.createSession(sessionToken, userId);
-	auth.setSessionTokenCookie({ cookies } as any, sessionToken, session.expiresAt);
+	auth.setSessionTokenCookie({ cookies }, sessionToken, session.expiresAt);
 
 	redirect(302, '/');
 };
diff --git a/src/routes/auth/google/callback/+server.ts b/src/routes/auth/google/callback/+server.ts
index 85cb64f..b25e8b2 100644
--- a/src/routes/auth/google/callback/+server.ts
+++ b/src/routes/auth/google/callback/+server.ts
@@ -125,7 +125,7 @@ export const GET: RequestHandler = async ({ url, cookies }) => {
 	// Create session
 	const sessionToken = auth.generateSessionToken();
 	const session = await auth.createSession(sessionToken, userId);
-	auth.setSessionTokenCookie({ cookies } as any, sessionToken, session.expiresAt);
+	auth.setSessionTokenCookie({ cookies }, sessionToken, session.expiresAt);
 
 	redirect(302, '/');
 };
diff --git a/src/routes/scheduled-verses/+page.svelte b/src/routes/scheduled-verses/+page.svelte
index eea960f..98e30d6 100644
--- a/src/routes/scheduled-verses/+page.svelte
+++ b/src/routes/scheduled-verses/+page.svelte
@@ -1,6 +1,7 @@
 <script lang="ts">
 	import { browser } from '$app/environment';
 	import { onMount } from 'svelte';
+	import { invalidateAll } from '$app/navigation';
 	import AuthModal from '$lib/components/AuthModal.svelte';
 	import Container from '$lib/components/Container.svelte';
 	import { bibleBooks } from '$lib/types/bible';
@@ -35,6 +36,41 @@
 	let filter = $state<'all' | 'upcoming' | 'past'>('all');
 	const filters = ['all', 'upcoming', 'past'] as const;
 
+	// Dev-only seed button (calls POST /api/dev/seed-submission, which is
+	// host-gated to localhost:5173 / test.bibdle.com). Hidden in prod.
+	const isDevHost = $derived(
+		browser &&
+			['localhost:5173', 'test.bibdle.com'].includes(window.location.host)
+	);
+	let seeding = $state(false);
+	let seedMessage = $state<{ ok: boolean; text: string } | null>(null);
+
+	async function seedSubmission() {
+		seeding = true;
+		seedMessage = null;
+		try {
+			const res = await fetch('/api/dev/seed-submission', { method: 'POST' });
+			const body = await res.json().catch(() => ({}));
+			if (!res.ok) {
+				seedMessage = {
+					ok: false,
+					text: body?.error ?? `Failed (${res.status})`
+				};
+			} else {
+				seedMessage = {
+					ok: true,
+					text: `Seeded ${body?.scheduledDate ?? ''} — ${body?.reference ?? ''}`
+				};
+				// Reload server load data so the new row appears in the table.
+				await invalidateAll();
+			}
+		} catch (err) {
+			seedMessage = { ok: false, text: String(err) };
+		} finally {
+			seeding = false;
+		}
+	}
+
 	function getOrCreateAnonymousId(): string {
 		if (!browser) return '';
 		const key = 'bibdle-anonymous-id';
@@ -148,22 +184,45 @@
 		{:else}
 			<!-- Filter toggle -->
 			<div class="flex items-center justify-between gap-2 mb-4 flex-wrap">
-				<div class="flex gap-1 bg-white/5 rounded-lg p-1 border border-white/10">
-					{#each filters as f}
+				<div class="flex items-center gap-2 flex-wrap">
+					<div class="flex gap-1 bg-white/5 rounded-lg p-1 border border-white/10">
+						{#each filters as f}
+							<button
+								onclick={() => (filter = f)}
+								class="px-3 py-1.5 rounded-md text-xs font-medium transition-colors {filter ===
+								f
+									? 'bg-blue-600 text-white'
+									: 'text-gray-300 hover:bg-white/5'}"
+							>
+								{f.charAt(0).toUpperCase() + f.slice(1)}
+							</button>
+						{/each}
+					</div>
+
+					{#if isDevHost}
 						<button
-							onclick={() => (filter = f)}
-							class="px-3 py-1.5 rounded-md text-xs font-medium transition-colors {filter ===
-							f
-								? 'bg-blue-600 text-white'
-								: 'text-gray-300 hover:bg-white/5'}"
+							onclick={seedSubmission}
+							disabled={seeding}
+							class="px-3 py-1.5 rounded-md text-xs font-medium border border-white/10 bg-white/5 text-gray-200 hover:bg-white/10 transition-colors disabled:opacity-50 disabled:cursor-not-allowed"
 						>
-							{f.charAt(0).toUpperCase() + f.slice(1)}
+							{seeding ? 'Seeding…' : '+ Seed test submission'}
 						</button>
-					{/each}
+					{/if}
+				</div>
+				<div class="flex items-center gap-3">
+					{#if seedMessage}
+						<span
+							class="text-xs {seedMessage.ok
+								? 'text-emerald-400'
+								: 'text-red-400'}"
+						>
+							{seedMessage.text}
+						</span>
+					{/if}
+					<span class="text-xs text-gray-500">
+						{filteredRows.length} {filteredRows.length === 1 ? 'row' : 'rows'}
+					</span>
 				</div>
-				<span class="text-xs text-gray-500">
-					{filteredRows.length} {filteredRows.length === 1 ? 'row' : 'rows'}
-				</span>
 			</div>
 
 			{#if filteredRows.length === 0}
diff --git a/tests/verse-submission.test.ts b/tests/verse-submission.test.ts
new file mode 100644
index 0000000..e51c049
--- /dev/null
+++ b/tests/verse-submission.test.ts
@@ -0,0 +1,513 @@
+import { describe, test, expect, beforeEach, afterEach } from "bun:test";
+import { eq } from "drizzle-orm";
+import { testDb as db } from "../src/lib/server/db/test";
+import { dailyVerses, verseSubmissions, user } from "../src/lib/server/db/schema";
+import {
+	addDays,
+	dayDiff,
+	getCooldownState,
+	isUniqueConstraintError,
+	scheduleSubmission,
+	validateSelection,
+	COOLDOWN_MS,
+	type Db
+} from "../src/lib/server/verse-submission";
+import { bookIdToNumber } from "../src/lib/server/bible";
+
+// ---- helpers --------------------------------------------------------------
+
+const TODAY = "2026-07-01"; // frozen "today" for deterministic scheduling tests
+const DAY_MS = 1000 * 60 * 60 * 24;
+
+function uuid() {
+	return Bun.randomUUIDv7();
+}
+
+/** Insert a committed daily_verses row (simulating an existing scheduled verse). */
+async function seedDailyVerse(
+	date: string,
+	bookId: string,
+	reference: string,
+	verseText = "verse text"
+) {
+	await db
+		.insert(dailyVerses)
+		.values({
+			id: uuid(),
+			date,
+			bookId,
+			verseText,
+			reference,
+			createdAt: new Date(0)
+		})
+		.run();
+}
+
+async function seedUser(id: string) {
+	await db
+		.insert(user)
+		.values({
+			id,
+			firstName: "Test",
+			email: `${id}@example.com`,
+			isPrivate: false
+		})
+		.run();
+}
+
+async function seedSubmission(
+	userId: string,
+	scheduledDate: string,
+	submittedAt: number,
+	bookId = "GEN",
+	chapter = 1,
+	verse = 3
+) {
+	await db
+		.insert(verseSubmissions)
+		.values({
+			id: uuid(),
+			userId,
+			scheduledDate,
+			selectedBookId: bookId,
+			selectedChapter: chapter,
+			selectedVerse: verse,
+			submittedAt
+		})
+		.run();
+}
+
+async function clearAll() {
+	await db.delete(verseSubmissions).run();
+	await db.delete(dailyVerses).run();
+	await db.delete(user).run();
+}
+
+// ===========================================================================
+// Pure date arithmetic
+// ===========================================================================
+
+describe("addDays / dayDiff (UTC arithmetic)", () => {
+	test("addDays moves forward across month/year boundaries", () => {
+		expect(addDays("2026-01-31", 1)).toBe("2026-02-01");
+		expect(addDays("2026-12-31", 1)).toBe("2027-01-01");
+		expect(addDays("2026-02-28", 7)).toBe("2026-03-07");
+	});
+
+	test("addDays is negative-safe", () => {
+		expect(addDays("2026-03-01", -1)).toBe("2026-02-28");
+		expect(addDays("2026-01-01", -1)).toBe("2025-12-31");
+	});
+
+	test("addDays is its own inverse with dayDiff", () => {
+		const start = "2026-07-01";
+		for (const n of [0, 1, 7, 30, 365, -1, -60]) {
+			const shifted = addDays(start, n);
+			expect(dayDiff(start, shifted)).toBe(n);
+		}
+	});
+
+	test("dayDiff handles DST-free UTC whole days exactly", () => {
+		expect(dayDiff("2026-07-01", "2026-07-02")).toBe(1);
+		expect(dayDiff("2026-07-01", "2026-06-30")).toBe(-1);
+		expect(dayDiff("2026-01-01", "2026-12-31")).toBe(364);
+	});
+});
+
+// ===========================================================================
+// validateSelection (structural validation, no DB)
+// ===========================================================================
+
+describe("validateSelection", () => {
+	test("accepts a valid book/chapter/verse", () => {
+		expect(validateSelection({ bookId: "GEN", chapter: 1, verse: 1 })).toBeNull();
+		expect(validateSelection({ bookId: "JHN", chapter: 3, verse: 16 })).toBeNull();
+	});
+
+	test("rejects unknown bookId", () => {
+		expect(validateSelection({ bookId: "ZZZ", chapter: 1, verse: 1 })).toBe(
+			"Unknown bookId"
+		);
+	});
+
+	test("rejects chapter out of range", () => {
+		const gen = bookIdToNumber["GEN"];
+		expect(validateSelection({ bookId: "GEN", chapter: 999, verse: 1 })).toContain(
+			"chapter out of range"
+		);
+	});
+
+	test("rejects verse out of range", () => {
+		expect(validateSelection({ bookId: "GEN", chapter: 1, verse: 9999 })).toContain(
+			"verse out of range"
+		);
+	});
+
+	test("rejects non-positive / non-integer chapter & verse", () => {
+		expect(validateSelection({ bookId: "GEN", chapter: 0, verse: 1 })).toContain(
+			"positive integer"
+		);
+		expect(validateSelection({ bookId: "GEN", chapter: 1, verse: 0 })).toContain(
+			"positive integer"
+		);
+		expect(
+			validateSelection({ bookId: "GEN", chapter: 1.5, verse: 1 })
+		).toContain("positive integer");
+	});
+});
+
+// ===========================================================================
+// isUniqueConstraintError
+// ===========================================================================
+
+describe("isUniqueConstraintError", () => {
+	test("matches SQLITE_CONSTRAINT_UNIQUE code", () => {
+		expect(isUniqueConstraintError({ code: "SQLITE_CONSTRAINT_UNIQUE" })).toBe(true);
+	});
+
+	test("matches SQLITE_CONSTRAINT code", () => {
+		expect(isUniqueConstraintError({ code: "SQLITE_CONSTRAINT" })).toBe(true);
+	});
+
+	test("matches by message containing UNIQUE", () => {
+		expect(
+			isUniqueConstraintError(
+				new Error("SQLITE_CONSTRAINT: UNIQUE constraint failed: daily_verses.date")
+			)
+		).toBe(true);
+	});
+
+	test("returns false for unrelated errors", () => {
+		expect(isUniqueConstraintError(new Error("something else"))).toBe(false);
+		expect(isUniqueConstraintError(null)).toBe(false);
+		expect(isUniqueConstraintError(undefined)).toBe(false);
+	});
+});
+
+// ===========================================================================
+// Cooldown arithmetic (DB)
+// ===========================================================================
+
+describe("getCooldownState", () => {
+	const userId = "user-cooldown";
+
+	beforeEach(async () => {
+		await clearAll();
+		await seedUser(userId);
+	});
+
+	afterEach(async () => {
+		await clearAll();
+	});
+
+	test("no submissions → not on cooldown, null end", async () => {
+		const state = await getCooldownState(db, userId);
+		expect(state.onCooldown).toBe(false);
+		expect(state.cooldownEndsAt).toBeNull();
+	});
+
+	test("recent submission → on cooldown, ends at submittedAt + 7d", async () => {
+		const now = Date.now();
+		const submittedAt = now - 1000; // 1s ago
+		await seedSubmission(userId, "2026-08-15", submittedAt);
+
+		const state = await getCooldownState(db, userId, now);
+		expect(state.onCooldown).toBe(true);
+		expect(state.cooldownEndsAt).toBe(submittedAt + COOLDOWN_MS);
+	});
+
+	test("submission exactly 7 days ago → cooldown just expired (boundary)", async () => {
+		const now = 1_700_000_000_000;
+		const submittedAt = now - COOLDOWN_MS; // exactly 7d ago
+		await seedSubmission(userId, "2026-08-15", submittedAt);
+
+		// now == cooldownEndsAt → no longer on cooldown
+		const state = await getCooldownState(db, userId, now);
+		expect(state.onCooldown).toBe(false);
+	});
+
+	test("submission 6d23h ago → still on cooldown", async () => {
+		const now = 1_700_000_000_000;
+		const submittedAt = now - (COOLDOWN_MS - 1000);
+		await seedSubmission(userId, "2026-08-15", submittedAt);
+
+		const state = await getCooldownState(db, userId, now);
+		expect(state.onCooldown).toBe(true);
+		expect(state.cooldownEndsAt).toBe(submittedAt + COOLDOWN_MS);
+	});
+
+	test("uses the most recent of multiple submissions", async () => {
+		const now = Date.now();
+		await seedSubmission(userId, "2026-08-15", now - 20 * DAY_MS); // older
+		await seedSubmission(userId, "2026-08-22", now - 2 * DAY_MS); // recent
+
+		const state = await getCooldownState(db, userId, now);
+		expect(state.onCooldown).toBe(true);
+		// The recent one (2d ago) drives the cooldown, not the 20d-old one.
+		expect(state.cooldownEndsAt).toBe(now - 2 * DAY_MS + COOLDOWN_MS);
+	});
+});
+
+// ===========================================================================
+// Scheduling validity (DB)
+// ===========================================================================
+
+describe("scheduleSubmission — validity rules", () => {
+	const userId = "user-sched";
+	const now = Date.now();
+
+	beforeEach(async () => {
+		await clearAll();
+		await seedUser(userId);
+	});
+
+	afterEach(async () => {
+		await clearAll();
+	});
+
+	test("empty calendar → schedules tomorrow (server UTC)", async () => {
+		const result = await scheduleSubmission(
+			db,
+			{ bookId: "GEN", chapter: 1, verse: 3 },
+			userId,
+			now,
+			{ today: TODAY }
+		);
+		expect(result.scheduledDate).toBe(addDays(TODAY, 1));
+		expect(result.bookId).toBe("GEN");
+		expect(result.reference).toBe("Genesis 1:1-3");
+
+		// Both rows written.
+		const [dv] = await db
+			.select()
+			.from(dailyVerses)
+			.where(eq(dailyVerses.date, result.scheduledDate));
+		expect(dv).toBeDefined();
+		expect(dv.bookId).toBe("GEN");
+
+		const [vs] = await db
+			.select()
+			.from(verseSubmissions)
+			.where(eq(verseSubmissions.scheduledDate, result.scheduledDate));
+		expect(vs).toBeDefined();
+		expect(vs.userId).toBe(userId);
+		expect(vs.selectedBookId).toBe("GEN");
+		expect(vs.selectedChapter).toBe(1);
+		expect(vs.selectedVerse).toBe(3);
+		expect(vs.submittedAt).toBe(now);
+	});
+
+	test("skips a date whose D-1 neighbor is the same book (no back-to-back)", async () => {
+		// Committed row at tomorrow with GEN → tomorrow is back-to-blocked for GEN
+		// (its D-1 = today, but today is empty so no conflict; instead block via
+		// seeding GEN at day+2, which makes day+3's D-1 a GEN).
+		const d2 = addDays(TODAY, 2);
+		await seedDailyVerse(d2, "GEN", "Genesis 1:10-12");
+
+		const result = await scheduleSubmission(
+			db,
+			{ bookId: "GEN", chapter: 1, verse: 3 },
+			userId,
+			now,
+			{ today: TODAY }
+		);
+		// tomorrow (d1) is empty, d-1=today empty, d+1=d2=GEN → back-to-back → skip.
+		// d2 is occupied. d3's d-1=d2=GEN → back-to-back → skip. d4 is earliest valid
+		// (different window ref, so the 60-day repeat rule does not apply).
+		expect(result.scheduledDate).toBe(addDays(TODAY, 4));
+	});
+
+	test("skips a date whose D+1 neighbor is the same book", async () => {
+		// Seed GEN at day+3. Then day+2 (empty) has D+1 = GEN → back-to-back.
+		// day+1: D+1 = day+2 empty, ok; D-1=today empty → valid → schedules day+1.
+		// To force the D+1 rule, seed GEN at day+1 so day+1 is occupied and
+		// the next empty candidate (day+2) has D+1=day+3 ... need day+3 to be GEN.
+		const d1 = addDays(TODAY, 1);
+		const d3 = addDays(TODAY, 3);
+		await seedDailyVerse(d1, "EXO", "Exodus 1:1-3"); // occupy day+1 (different book)
+		await seedDailyVerse(d3, "GEN", "Genesis 1:10-12"); // day+3 = GEN
+
+		const result = await scheduleSubmission(
+			db,
+			{ bookId: "GEN", chapter: 1, verse: 3 },
+			userId,
+			now,
+			{ today: TODAY }
+		);
+		// day+2 is empty but D+1 = day+3 = GEN → back-to-back → skip.
+		// day+3 occupied. day+4: D-1=day+3=GEN → back-to-back → skip.
+		// day+5: D-1=day+4 empty, D+1=day+6 empty → valid (different window ref).
+		expect(result.scheduledDate).toBe(addDays(TODAY, 5));
+	});
+
+	test("back-to-back with a different book is allowed", async () => {
+		// Seed EXO at tomorrow. A GEN submission at day+2 has D-1=day+1=EXO (diff) → ok.
+		await seedDailyVerse(addDays(TODAY, 1), "EXO", "Exodus 1:1-3");
+
+		const result = await scheduleSubmission(
+			db,
+			{ bookId: "GEN", chapter: 1, verse: 3 },
+			userId,
+			now,
+			{ today: TODAY }
+		);
+		expect(result.scheduledDate).toBe(addDays(TODAY, 2));
+	});
+
+	test("60-day repeat: identical window within ±60d pushes the date out", async () => {
+		// Seed an identical GEN 1:1-3 window at day+10.
+		const d10 = addDays(TODAY, 10);
+		await seedDailyVerse(d10, "GEN", "Genesis 1:1-3");
+
+		const result = await scheduleSubmission(
+			db,
+			{ bookId: "GEN", chapter: 1, verse: 3 }, // same window: Genesis 1:1-3
+			userId,
+			now,
+			{ today: TODAY }
+		);
+		// The earliest empty, non-back-to-back candidate whose distance from d10
+		// is > 60 days. day+1..day+9: within 60d of d10 (and day+9 D+1=d10=GEN
+		// back-to-back anyway). day+11: D-1=d10=GEN → back-to-back + within 60.
+		// ... all dates within [d10-60, d10+60] are repeat-blocked. The first
+		// valid date is d10+61.
+		expect(result.scheduledDate).toBe(addDays(d10, 61));
+		// Sanity: distance is just over 60 days.
+		expect(Math.abs(dayDiff(d10, result.scheduledDate))).toBeGreaterThan(60);
+	});
+
+	test("different-window repeat at the same book is NOT blocked by rule 4", async () => {
+		// Seed GEN 1:1-3 at day+1. A GEN 1:4-6 submission shares the book but
+		// not the window identity, so rule 4 (60-day repeat) does not apply —
+		// only back-to-back matters.
+		const d1 = addDays(TODAY, 1);
+		await seedDailyVerse(d1, "GEN", "Genesis 1:1-3");
+
+		const result = await scheduleSubmission(
+			db,
+			{ bookId: "GEN", chapter: 1, verse: 6 }, // window Genesis 1:4-6
+			userId,
+			now,
+			{ today: TODAY }
+		);
+		// day+1 occupied. day+2: D-1=day+1=GEN → back-to-back → skip.
+		// day+3: D-1=day+2 empty → valid (window differs, so no 60-day block).
+		expect(result.scheduledDate).toBe(addDays(TODAY, 3));
+		expect(result.reference).toBe("Genesis 1:4-6");
+	});
+
+	test("fall-forward window (Gen 1:1) schedules and stores Gen 1:1-3", async () => {
+		const result = await scheduleSubmission(
+			db,
+			{ bookId: "GEN", chapter: 1, verse: 1 },
+			userId,
+			now,
+			{ today: TODAY }
+		);
+		expect(result.reference).toBe("Genesis 1:1-3");
+	});
+});
+
+// ===========================================================================
+// Concurrency (DB)
+// ===========================================================================
+
+describe("scheduleSubmission — concurrency", () => {
+	const now = Date.now();
+
+	beforeEach(async () => {
+		await clearAll();
+	});
+
+	afterEach(async () => {
+		await clearAll();
+	});
+
+	test("two concurrent submissions with the same book land on distinct dates", async () => {
+		const u1 = "user-conc-1";
+		const u2 = "user-conc-2";
+		await seedUser(u1);
+		await seedUser(u2);
+
+		const [r1, r2] = await Promise.all([
+			scheduleSubmission(db, { bookId: "GEN", chapter: 1, verse: 3 }, u1, now, {
+				today: TODAY
+			}),
+			scheduleSubmission(db, { bookId: "GEN", chapter: 1, verse: 4 }, u2, now, {
+				today: TODAY
+			})
+		]);
+
+		// Both must succeed and never share a scheduled date.
+		expect(r1.scheduledDate).not.toBe(r2.scheduledDate);
+
+		// And they must not be back-to-back (same book).
+		const diff = Math.abs(dayDiff(r1.scheduledDate, r2.scheduledDate));
+		expect(diff).toBeGreaterThan(1);
+
+		// Both rows exist in verse_submissions with their own user.
+		const all = await db.select().from(verseSubmissions).all();
+		expect(all).toHaveLength(2);
+		const userIds = all.map((r) => r.userId).sort();
+		expect(userIds).toEqual([u1, u2].sort());
+
+		// And two distinct daily_verses rows.
+		const dv = await db.select().from(dailyVerses).all();
+		expect(dv).toHaveLength(2);
+		expect(new Set(dv.map((r) => r.date)).size).toBe(2);
+	});
+
+	test("retry recovers when a concurrent insert claims the candidate first", async () => {
+		// Simulate a "lost race" by pre-occupying tomorrow (the first candidate)
+		// right before the call — the scan already ran against a stale calendar
+		// only if we insert between scan and insert. Instead, verify the simpler
+		// guarantee: an existing row on the candidate date is detected on retry
+		// because loadCalendar is re-read each attempt.
+		const u1 = "user-conc-race";
+		await seedUser(u1);
+
+		// Seed GEN at every day from tomorrow..tomorrow+3 so the first valid
+		// empty slot for GEN (respecting back-to-back) is pushed well out. This
+		// exercises the scan walking past occupied + back-to-back dates.
+		for (let i = 1; i <= 3; i++) {
+			await seedDailyVerse(addDays(TODAY, i), "GEN", `Genesis 1:10-12`);
+		}
+
+		const result = await scheduleSubmission(
+			db,
+			{ bookId: "GEN", chapter: 1, verse: 3 },
+			u1,
+			now,
+			{ today: TODAY }
+		);
+		// Days 1..3 occupied with GEN (different window ref, so rule 4 is silent).
+		// day+4: D-1=day+3=GEN → back-to-back → skip.
+		// day+5: D-1=day+4 empty, D+1=day+6 empty → valid.
+		expect(result.scheduledDate).toBe(addDays(TODAY, 5));
+	});
+
+	test("two concurrent submissions for different books can be adjacent", async () => {
+		const u1 = "user-conc-diff-1";
+		const u2 = "user-conc-diff-2";
+		await seedUser(u1);
+		await seedUser(u2);
+
+		const [r1, r2] = await Promise.all([
+			scheduleSubmission(db, { bookId: "GEN", chapter: 1, verse: 3 }, u1, now, {
+				today: TODAY
+			}),
+			scheduleSubmission(db, { bookId: "EXO", chapter: 1, verse: 3 }, u2, now, {
+				today: TODAY
+			})
+		]);
+
+		expect(r1.bookId).toBe("GEN");
+		expect(r2.bookId).toBe("EXO");
+		expect(r1.scheduledDate).not.toBe(r2.scheduledDate);
+
+		// Different books may legitimately be adjacent (diff == 1) — just assert
+		// both are distinct future dates.
+		const diff = Math.abs(dayDiff(r1.scheduledDate, r2.scheduledDate));
+		expect(diff).toBeGreaterThanOrEqual(1);
+	});
+});