anhedral 0.3.0 → 0.4.0

package/docs/master-stack-map.md

@@ -0,0 +1,192 @@
+# Anhedral master stack map
+
+This is the canonical whole-stack map for Anhedral. It shows the ordered flow
+from skill-led planning through deterministic generation, source layout,
+connected capabilities, cloud provisioning, command-driven operations, agent
+experience, and production verification.
+
+Read top to bottom. Arrows represent lifecycle order, not runtime network calls.
+Runtime and provider connections are stated explicitly inside each stage.
+
+```text
++==========================================================================================================================+
+|                                                ANHEDRAL MASTER STACK MAP                                                 |
++--------------------------------------------------------------------------------------------------------------------------+
+|OUTCOME One readable TypeScript codebase and one command surface connecting every application, cloud resource, release    |
+|path, runbook, and coding agent.                                                                                          |
+|PRINCIPLE Ordinary framework code, source ownership, and generated integration boundaries. Anhedral assembles the stack;  |
+|it is not the application runtime.                                                                                        |
++==========================================================================================================================+
+                                                             |
+                                                             v
++==========================================================================================================================+
+|                                                     1  SELECT + PLAN                                                     |
++--------------------------------------------------------------------------------------------------------------------------+
+|SKILL FIRST Install and invoke $anhedral-init. Ask for project name and custom-domain status before generating or         |
+|provisioning.                                                                                                             |
+|CREATE anhedral new <directory> | anhedral init EXTEND anhedral add <modules> | anhedral ui add <components>              |
+|INSPECT anhedral doctor AUTOMATE --dry-run | --json | --verbose | --skip-install                                          |
+|SURFACES web | mobile | api | desktop | extension                                                                         |
+|FEATURES db | auth | billing | storage | native-subscriptions | electron-updater                                          |
+|UI shadcn/ui for DOM clients | React Native Reusables for Expo | NativeWind or Uniwind                                    |
+|CLOSURE auth -> api + db | billing -> auth | storage -> auth | native-subscriptions -> mobile + billing |                 |
+|electron-updater -> desktop                                                                                               |
++==========================================================================================================================+
+                                                             |
+                                                             v
++==========================================================================================================================+
+|                                                    2  GENERATE SAFELY                                                    |
++--------------------------------------------------------------------------------------------------------------------------+
+|PIPELINE Resolve modules -> select immutable templates -> verify SHA-256 catalog -> stage files -> compose typed          |
+|contributions.                                                                                                            |
+|PIPELINE Run pinned UI providers only in staging -> record provenance and ownership -> atomic commit -> one root pnpm     |
+|install.                                                                                                                  |
+|REFUSES traversal | symlinks | nested repositories/workspaces | caches | oversized files | unowned collisions | managed   |
+|drift.                                                                                                                    |
+|OWNERSHIP Product source plus README/PRODUCTION are user-owned | root configuration is mergeable | integration substrate  |
+|is managed.                                                                                                               |
+|STATE anhedral.json records modules, versions, template/UI provenance, styling, file hashes, modes, and ownership.        |
+|WHY Deterministic, inspectable generation and safe incremental adds without replacing user work.                          |
++==========================================================================================================================+
+                                                             |
+                                                             v
++==========================================================================================================================+
+|                                       3  ONE PNPM + TURBOREPO TYPESCRIPT WORKSPACE                                       |
++--------------------------------------------------------------------------------------------------------------------------+
+|apps/web Next.js App Router + React + shadcn/ui. WHY: SSR, routing, server-first web, and source-owned UI.                |
+|apps/mobile Expo Router + React Native Reusables. WHY: one native TypeScript product for iOS and Android.                 |
+|apps/api Fastify + validation/security plugins. WHY: thin routes, services, structured logs, and explicit boundaries.     |
+|apps/desktop Electron + Vite + sandboxed React renderer. WHY: cross-platform desktop with a narrow privileged bridge.     |
+|apps/extension WXT + React + MV3 entrypoints. WHY: browser permissions, side panel/background, builds, and packaging.     |
+|apps/assets-private-proxy Cloudflare Worker + private R2 binding. WHY: controlled GET/HEAD media delivery without bucket  |
+|listing.                                                                                                                  |
+|apps/desktop-updater-worker Cloudflare Worker + private R2 binding. WHY: custom-domain Electron metadata, ranges, and     |
+|downloads.                                                                                                                |
+|packages/contracts Zod schemas. WHY: one validated network contract shared across every boundary.                         |
+|packages/api-client Typed client-safe HTTP. WHY: one request path for web, mobile, desktop, and extension.                |
+|packages/db Drizzle schema + reviewed SQL migrations. WHY: readable TypeScript schema and explicit release artifacts.     |
+|packages/realtime Ably client. WHY: scoped invalidation events while clients refetch authoritative state.                 |
++==========================================================================================================================+
+                                                             |
+                                                             v
++==========================================================================================================================+
+|                                            4  CONNECTED PRODUCT CAPABILITIES                                             |
++--------------------------------------------------------------------------------------------------------------------------+
+|REQUESTS Zod contract -> service/Drizzle query -> Fastify route -> typed API client -> every selected client.             |
+|IDENTITY Clerk sessions in clients -> verified server identity; never trust a client-supplied user ID.                    |
+|DATABASE Fastify -> Drizzle -> managed Neon Postgres with isolated dev/preview/production; no generated local Postgres.   |
+|STORAGE API presigns R2 PUT -> client uploads -> API confirms -> Worker streams confirmed assets or owner-authorized      |
+|reads.                                                                                                                    |
+|BILLING Expo purchase -> RevenueCat -> signed webhook -> Neon entitlement + transactional outbox.                         |
+|REALTIME Outbox -> scoped Ably event -> every client refetches the authoritative entitlement.                             |
+|DESKTOP UPDATE Signed native build -> artifacts then latest metadata -> private R2 -> updates.<domain> Worker ->          |
+|electron-updater.                                                                                                         |
+|SECURITY Server-only secrets | exact CORS | rate limits/headers | Electron isolation | least privilege | private buckets. |
++==========================================================================================================================+
+                                                             |
+                                                             v
++==========================================================================================================================+
+|                                            5  PROVISION + CONFIGURE THE CLOUD                                            |
++--------------------------------------------------------------------------------------------------------------------------+
+|DOMAIN Buy/confirm domain -> add Cloudflare zone -> preserve mail records -> delegate nameservers -> activate DNSSEC.     |
+|GITHUB + CI Organization repository, protected environments, pinned Actions, PR checks, branches, and release artifacts.  |
+|NEON Projects/branches per environment, pooled DATABASE_URL, backups, reviewed migrations, and controlled deploy gates.   |
+|CLERK Development/production instances, publishable/secret keys, domains, OAuth, redirects, webhooks, native and CRX IDs. |
+|CLOUDFLARE Authoritative DNS, private R2 buckets, scoped tokens, CORS/lifecycle, Worker bindings, logs, and custom        |
+|domains.                                                                                                                  |
+|VERCEL Services deployment for web/API, rewrites, environment scopes, preview/production, cron endpoints, domains, and    |
+|TLS.                                                                                                                      |
+|REVENUECAT + ABLY Products, offerings, entitlements, store credentials, signed webhook, scoped realtime, and retry cron.  |
+|EAS + STORES Expo project, credentials, internal builds, TestFlight/Play testing, metadata, privacy, review, and rollout. |
+|BROWSER STORE Stable extension ID, least host permissions, OAuth sync, privacy disclosure, trusted testing, and review.   |
+|DESKTOP Native-OS signing/notarization, electron-builder installers, private update channel, upgrade tests, and rollback. |
+|DNS app.<domain> points from Cloudflare DNS to Vercel and stays DNS-only; assets/updates are Cloudflare Worker Custom     |
+|Domains.                                                                                                                  |
+|AGENT STOPS User handles sign-in/MFA, purchases, secret generation/reveal, destructive confirmations, and final           |
+|submissions.                                                                                                              |
++==========================================================================================================================+
+                                                             |
+                                                             v
++==========================================================================================================================+
+|                                        6  GENERATED package.json COMMAND SURFACE                                         |
++--------------------------------------------------------------------------------------------------------------------------+
+|WORKSPACE dev | build | typecheck | verify WHY: run and validate exactly the selected monorepo.                           |
+|APP LOOPS dev:web | dev:mobile | dev:api | dev:desktop | dev:extension                                                    |
+|APP CHECKS verify:web | verify:mobile | verify:api | verify:desktop | verify:extension                                    |
+|VERCEL deploy:vercel:{link,preview,production,inspect,domain:inspect} WHY: connect, release, diagnose, and configure DNS. |
+|MOBILE mobile:eas:{login,init} | mobile:build:{internal,production}:{ios,android} | mobile:submit:{ios,android}           |
+|DATABASE neon:{login,project:create} | db:{generate,migrate,check,studio} | verify:db                                     |
+|STORAGE r2:{login,bucket:create,cors:list,cors:set} | assets:proxy:{check,dev,deploy} | verify:assets-proxy               |
+|UPDATES desktop:updates:{cloudflare:login,bucket:create,provision,publish}                                                |
+|UPDATES desktop:updates:worker:{check,dev,deploy,types} | desktop:updates:build:{mac,win,linux} | verify:desktop-updates  |
+|DESKTOP desktop:build | verify:desktop EXTENSION extension:zip | verify:extension                                         |
+|STRUCTURE anhedral doctor | add/ui --dry-run WHY: detect drift and preview safe structural changes.                       |
++==========================================================================================================================+
+                                                             |
+                                                             v
++==========================================================================================================================+
+|                                      7  DEVELOPER, AGENT + COMPUTER-USE EXPERIENCE                                       |
++--------------------------------------------------------------------------------------------------------------------------+
+|DOCS README.md first run/source map | docs/DEVELOPMENT.md recipes | docs/STACK.md tool map | PRODUCTION.md cloud runbook. |
+|CONTROL SKILL.md agent workflow | ANHEDRAL.md ownership notes | anhedral.json source of truth | .env.example inventories. |
+|CODING AGENT Ask name/domain -> resolve modules -> generate -> read docs/manifest -> doctor -> provision -> verify ->     |
+|hand off.                                                                                                                 |
+|SUBAGENTS Lead owns mutations; delegate docs/env inventory, read-only DNS checks, and final verification without secrets. |
+|COMPUTER USE Drive provider consoles after user authentication; configure accounts, domains, OAuth, DNS, stores, and      |
+|rollout.                                                                                                                  |
+|SECRET HANDOFF Stop before Generate/Reveal/Create; name the variable/file; user pastes directly into uncommitted          |
+|env/provider UI.                                                                                                          |
+|UI DX Source-owned components, target routing, accessibility, ordinary framework APIs, and no hidden proprietary runtime. |
+|OPERATIONS DX Exact root commands, selection-aware docs/scripts, machine-readable plans, provider ledger, and explicit    |
+|stop gates.                                                                                                               |
++==========================================================================================================================+
+                                                             |
+                                                             v
++==========================================================================================================================+
+|                                               8  VERIFY, RELEASE + OPERATE                                               |
++--------------------------------------------------------------------------------------------------------------------------+
+|LOCAL Smallest package check -> typecheck -> full verify -> build -> doctor; never weaken a failing gate.                 |
+|DATABASE Generate -> review/commit SQL -> drift gate -> controlled migrate -> health/readiness checks.                    |
+|RUNTIME API coverage, auth/CORS, billing replay/order, Ably reconnect, R2 upload/read/range/cache, Worker method/host     |
+|security.                                                                                                                 |
+|CLIENTS Next build | Expo compatibility/device checks | packaged Electron smoke/upgrade | live WXT MV3 worker in Chrome.  |
+|INFRA Confirm provider team/resource names, protected env presence, DNS answers, TLS, Vercel health, Worker bindings, and |
+|logs.                                                                                                                     |
+|CI Pinned toolchain, strict pnpm policy, allowed build scripts, OSV audit, secret scan, deterministic outputs, and        |
+|release checks.                                                                                                           |
+|RELEASES Vercel preview/prod | TestFlight/Play tracks | browser-store trusted/review | signed desktop staged update       |
+|channel.                                                                                                                  |
+|RECOVERY Transaction rollback, provider backups, database rollback plan, staged/phased rollout, telemetry, and documented |
+|owners.                                                                                                                   |
++==========================================================================================================================+
+```
+
+## Runtime connection summary
+
+```text
+web / mobile / desktop / extension
+                |
+                v
+       packages/api-client
+                |
+                v
+       Fastify API + Zod contracts
+          |         |          |
+          v         v          v
+   Clerk identity  Neon     private R2
+                    |
+                    v
+          RevenueCat entitlement
+                    |
+                    v
+               Ably event
+                    |
+                    v
+           clients refetch state
+
+signed desktop release -> private update R2 -> updates.<domain> Worker -> electron-updater
+```
+
+The runtime summary is intentionally smaller than the lifecycle map. It shows
+only application data flow; DNS, provisioning, release gates, and agent actions
+remain in the master map above.

package/docs/output-tree-contract.md

@@ -21,10 +21,10 @@ node tests/update-output-tree-contracts.js
 
 | Scenario | Apps | Features | Contract | Entries | Tree SHA-256 |
 | --- | --- | --- | --- | ---: | --- |
-| `expo-extension` | web, mobile, api, desktop, extension | database, auth, billing, storage, nativeSubscriptions | deterministic golden | 130 | `997fff94b7a61b48b063634523e88146d9b454013285f233ddf44afa12b22693` |
-| `web-api-minimal` | web, api | database, auth | deterministic golden | 58 | `5e178bce3710dfbbbdd78acb7021f18c213d4ad80a93ac345c436e1372549f99` |
-| `api-only` | api |  | deterministic golden | 29 | `f067a459375b49d53e9c031b917851e30dc0c4c67a583018ba4972cd480467fc` |
-| `add-desktop-flow` | api, desktop | database, auth | deterministic golden | 59 | `7955805e03d0ee3cb1efadfffe2886f27335e29e1c0f22408b5df637f7c31a74` |
+| `expo-extension` | web, mobile, api, desktop, extension | database, auth, billing, storage, nativeSubscriptions, electronUpdater | deterministic golden | 145 | `ffe0feed203c4cdfaeeadba03dd2acc93855296699570d81f856b989f45cde23` |
+| `web-api-minimal` | web, api | database, auth | deterministic golden | 65 | `25303118c1ee766afbfd9a707b5b16c25ad587021a62a68238696dda7cbc4385` |
+| `api-only` | api |  | deterministic golden | 32 | `a405e93cea274273bf46605e934e4a9be21018513b04c47c83ed1b1b8c9f187e` |
+| `add-desktop-flow` | api, desktop | database, auth | deterministic golden | 67 | `d6804478404c2bb62945f6a7dbb9d1184ebe75d3594b83347cab76e785b21051` |
 
 ## expo-extension
 
@@ -55,6 +55,8 @@ expo-extension-sample/
 │   │   │   ├── env.ts
 │   │   │   ├── index.ts
 │   │   │   ├── realtime.ts
+│   │   │   ├── routes/
+│   │   │   │   └── app.ts
 │   │   │   ├── routes.ts
 │   │   │   └── storage.ts
 │   │   ├── tests/
@@ -72,13 +74,16 @@ expo-extension-sample/
 │   ├── desktop/
 │   │   ├── .env.example
 │   │   ├── components.json
+│   │   ├── electron-builder.env.example
 │   │   ├── index.html
 │   │   ├── package.json
 │   │   ├── postcss.config.mjs
 │   │   ├── scripts/
-│   │   │   └── dev.mjs
+│   │   │   ├── dev.mjs
+│   │   │   └── publish-updates.mjs
 │   │   ├── src/
 │   │   │   ├── main/
+│   │   │   │   ├── app-window.ts
 │   │   │   │   ├── main.ts
 │   │   │   │   └── preload.cts
 │   │   │   └── renderer/
@@ -96,6 +101,13 @@ expo-extension-sample/
 │   │   ├── tsconfig.json
 │   │   ├── tsconfig.main.json
 │   │   └── vite.config.ts
+│   ├── desktop-updater-worker/
+│   │   ├── package.json
+│   │   ├── src/
+│   │   │   └── index.js
+│   │   ├── tests/
+│   │   │   └── worker.test.js
+│   │   └── wrangler.jsonc
 │   ├── extension/
 │   │   ├── .env.example
 │   │   ├── README.md
@@ -176,6 +188,7 @@ expo-extension-sample/
 │       └── tsconfig.json
 ├── cloudflare/
 │   ├── README.md
+│   ├── desktop-updates.md
 │   └── r2-cors.template.json
 ├── docs/
 │   ├── DEVELOPMENT.md
@@ -185,11 +198,15 @@ expo-extension-sample/
 │   ├── api-client/
 │   │   ├── package.json
 │   │   ├── src/
+│   │   │   ├── app.ts
+│   │   │   ├── generated.ts
 │   │   │   └── index.ts
 │   │   └── tsconfig.json
 │   ├── contracts/
 │   │   ├── package.json
 │   │   ├── src/
+│   │   │   ├── app.ts
+│   │   │   ├── generated.ts
 │   │   │   └── index.ts
 │   │   └── tsconfig.json
 │   ├── db/
@@ -199,6 +216,8 @@ expo-extension-sample/
 │   │   │   └── .gitkeep
 │   │   ├── package.json
 │   │   ├── src/
+│   │   │   ├── app-schema.ts
+│   │   │   ├── generated-schema.ts
 │   │   │   ├── index.ts
 │   │   │   ├── migrate.ts
 │   │   │   └── schema.ts
@@ -242,6 +261,8 @@ web-api-minimal/
 │   │   │   ├── auth.ts
 │   │   │   ├── env.ts
 │   │   │   ├── index.ts
+│   │   │   ├── routes/
+│   │   │   │   └── app.ts
 │   │   │   └── routes.ts
 │   │   ├── tests/
 │   │   │   ├── env.test.ts
@@ -278,11 +299,15 @@ web-api-minimal/
 │   ├── api-client/
 │   │   ├── package.json
 │   │   ├── src/
+│   │   │   ├── app.ts
+│   │   │   ├── generated.ts
 │   │   │   └── index.ts
 │   │   └── tsconfig.json
 │   ├── contracts/
 │   │   ├── package.json
 │   │   ├── src/
+│   │   │   ├── app.ts
+│   │   │   ├── generated.ts
 │   │   │   └── index.ts
 │   │   └── tsconfig.json
 │   └── db/
@@ -292,6 +317,8 @@ web-api-minimal/
 │       │   └── .gitkeep
 │       ├── package.json
 │       ├── src/
+│       │   ├── app-schema.ts
+│       │   ├── generated-schema.ts
 │       │   ├── index.ts
 │       │   ├── migrate.ts
 │       │   └── schema.ts
@@ -329,6 +356,8 @@ api-only/
 │       │   ├── application.ts
 │       │   ├── env.ts
 │       │   ├── index.ts
+│       │   ├── routes/
+│       │   │   └── app.ts
 │       │   └── routes.ts
 │       ├── tests/
 │       │   ├── env.test.ts
@@ -343,6 +372,8 @@ api-only/
 │   └── contracts/
 │       ├── package.json
 │       ├── src/
+│       │   ├── app.ts
+│       │   ├── generated.ts
 │       │   └── index.ts
 │       └── tsconfig.json
 ├── pnpm-workspace.yaml
@@ -377,6 +408,8 @@ add-desktop-flow/
 │   │   │   ├── auth.ts
 │   │   │   ├── env.ts
 │   │   │   ├── index.ts
+│   │   │   ├── routes/
+│   │   │   │   └── app.ts
 │   │   │   └── routes.ts
 │   │   ├── tests/
 │   │   │   ├── env.test.ts
@@ -393,6 +426,7 @@ add-desktop-flow/
 │       │   └── dev.mjs
 │       ├── src/
 │       │   ├── main/
+│       │   │   ├── app-window.ts
 │       │   │   ├── main.ts
 │       │   │   └── preload.cts
 │       │   └── renderer/
@@ -416,11 +450,15 @@ add-desktop-flow/
 │   ├── api-client/
 │   │   ├── package.json
 │   │   ├── src/
+│   │   │   ├── app.ts
+│   │   │   ├── generated.ts
 │   │   │   └── index.ts
 │   │   └── tsconfig.json
 │   ├── contracts/
 │   │   ├── package.json
 │   │   ├── src/
+│   │   │   ├── app.ts
+│   │   │   ├── generated.ts
 │   │   │   └── index.ts
 │   │   └── tsconfig.json
 │   └── db/
@@ -430,6 +468,8 @@ add-desktop-flow/
 │       │   └── .gitkeep
 │       ├── package.json
 │       ├── src/
+│       │   ├── app-schema.ts
+│       │   ├── generated-schema.ts
 │       │   ├── index.ts
 │       │   ├── migrate.ts
 │       │   └── schema.ts

package/{references → docs/references}/manual-scaffolding.md

@@ -23,7 +23,7 @@ Record these values before editing:
 - `projectName`: a valid npm package name; use it for the root package and child package prefixes.
 - `displayName`: human-readable product name; escape it for every JSON, JavaScript, HTML, and Markdown context.
 - requested app surfaces: `web`, `mobile`, `api`, `desktop`, `extension`.
-- requested features: `db`, `auth`, `billing`, `storage`, `native-subscriptions`.
+- requested features: `db`, `auth`, `billing`, `storage`, `native-subscriptions`, `electron-updater`.
 - toolchain policy: exact tested versions for reproducibility, or current compatible versions when the user explicitly wants upgrades.
 
 Resolve the transitive closure before writing files:
@@ -33,9 +33,10 @@ auth                 -> api + db
 billing              -> auth -> api + db
 storage              -> auth -> api + db
 native-subscriptions -> mobile + billing -> auth + api + db
+electron-updater     -> desktop
 ```
 
-If no modules were specified, select all five surfaces and all five features. Never create a feature without its prerequisites. Keep normalized order `web, mobile, api, desktop, extension, db, auth, billing, storage, native-subscriptions` when displaying or recording a plan.
+If no modules were specified, select all five surfaces and all six features. Never create a feature without its prerequisites. Keep normalized order `web, mobile, api, desktop, extension, db, auth, billing, storage, native-subscriptions, electron-updater` when displaying or recording a plan.
 
 Choose Node `^20.19.0 || >=22.12.0` unless mobile is selected. Expo mobile requires `^22.13.0 || ^24.3.0 || >=25`. Use one root pnpm workspace and one root lockfile; never leave nested lockfiles, workspaces, `.git` directories, or `node_modules` inside apps.
 
@@ -50,13 +51,14 @@ api: fastify 5.8.5, @fastify/cors 11.1.0, @fastify/compress 8.3.0,
      @fastify/helmet 13.0.2, @fastify/rate-limit 10.3.0,
      @clerk/fastify 3.1.51, @aws-sdk/client-s3 3.1047.0,
      @aws-sdk/s3-request-presigner 3.1047.0, ably 2.24.0, vitest 4.1.0
-web: next 16.2.10, react/react-dom 19.2.3, @clerk/nextjs 7.5.18,
+web: next 16.2.11, react/react-dom 19.2.3, @clerk/nextjs 7.5.18,
      @clerk/ui 1.25.3, tailwindcss and @tailwindcss/postcss 4.1.18
 mobile: expo 56.0.16, expo-router 56.2.15, react-native 0.85.3,
         @clerk/expo 3.7.5, expo-secure-store 56.0.4,
         react-native-purchases/react-native-purchases-ui 10.4.2
 desktop: electron 43.1.1, electron-builder 26.15.3, vite 7.3.6,
-         @vitejs/plugin-react 5.2.0, @clerk/clerk-js 6.25.3
+         @vitejs/plugin-react 5.2.0, @clerk/clerk-js 6.25.3,
+         electron-updater 6.8.9 when electron-updater is selected
 extension: wxt 0.20.27, @wxt-dev/module-react 1.2.2,
            @clerk/chrome-extension 3.1.52, tailwindcss 3.4.19
 shared UI: clsx 2.1.1, tailwind-merge 3.4.0
@@ -120,6 +122,11 @@ Create only selected branches of this tree. A bracketed condition makes the file
   apps/desktop/src/renderer/lib/api.ts                       [desktop + api]
   apps/desktop/src/renderer/lib/auth.ts                      [desktop + auth]
   apps/desktop/src/renderer/hooks/use-entitlement.ts        [desktop + billing]
+  apps/desktop/electron-builder.env.example                 [electron-updater]
+  apps/desktop/scripts/publish-updates.mjs                  [electron-updater]
+  apps/desktop-updater-worker/{package.json,wrangler.jsonc} [electron-updater]
+  apps/desktop-updater-worker/src/index.js                  [electron-updater]
+  cloudflare/desktop-updates.md                             [electron-updater]
   apps/extension/{package.json,tsconfig.json,wxt.config.ts,postcss.config.cjs,tailwind.config.cjs,components.json,.env.example,README.md} [extension]
   apps/extension/src/{styles/main.css,lib/utils.ts}          [extension]
   apps/extension/src/components/ui/button.tsx               [extension]
@@ -129,7 +136,7 @@ Create only selected branches of this tree. A bracketed condition makes the file
   apps/extension/src/hooks/use-entitlement.ts               [extension + billing]
 ```
 
-Do not create `anhedral.json` manually. Its schema-v4 hashes, modes, ownership classes, template provenance, module resolution, generator version, and toolchain channel form a trust boundary for `add` and `doctor`. Invented records are worse than no manifest. Also omit `ANHEDRAL.md`, whose CLI-management claims would be false for a manual workspace.
+Do not create `anhedral.json` manually. Its schema-v5 hashes, modes, ownership classes, template and UI-provider provenance, module resolution, generator version, and toolchain channel form a trust boundary for `add` and `doctor`. Invented records are worse than no manifest. Also omit `ANHEDRAL.md`, whose CLI-management claims would be false for a manual workspace.
 
 ## 3. Create root configuration
 
@@ -137,13 +144,23 @@ Do not create `anhedral.json` manually. Its schema-v4 hashes, modes, ownership c
 
 Create a private `package.json` with version `0.1.0`, the selected Node engine, the pnpm version being used, `turbo` as an exact dev dependency, and `workspaces` containing `apps/*` when any app exists and `packages/*` when API or database exists.
 
-Always add `build: turbo build` and `typecheck: turbo typecheck`. Set `dev` to `turbo dev --parallel` followed by one `--filter=./apps/<surface>` per selected surface. Add only selected scripts:
+Always add `build: turbo build` and `typecheck: turbo typecheck`. Set `dev` to
+the primary product loop: run the first selected client in canonical module
+order plus API when present, or API alone for a backend-only project. When the
+project has additional app surfaces, add `dev:all` to run every selected app in
+parallel. Each command uses `turbo dev --parallel` with explicit
+`--filter=./apps/<surface>` arguments. Add only selected scripts:
 
 ```text
 web:       dev:web, verify:web = typecheck + build
 mobile:    dev:mobile, verify:mobile = typecheck + build:web
 api:       dev:api, verify:api = test:coverage + build
 desktop:   dev:desktop, desktop:build, verify:desktop = typecheck + build
+electron-updater: desktop:updates:cloudflare:login,
+                  desktop:updates:bucket:create, desktop:updates:first-provision,
+                  desktop:updates:worker:{check,dev,deploy,types},
+                  desktop:updates:build:{mac,win,linux},
+                  desktop:updates:publish, verify:desktop-updates
 extension: dev:extension, extension:zip, verify:extension = typecheck + zip
 db:        db:generate, db:migrate, db:check, db:studio, verify:db
 storage:   r2:login, r2:bucket:create, r2:cors:list, r2:cors:set,
@@ -189,7 +206,7 @@ Create `turbo.json` using `https://turborepo.dev/schema.json` with:
 - `typecheck.dependsOn = ["^build"]`.
 - `dev.cache = false` and `dev.persistent = true`.
 
-Ignore `node_modules`, framework/build caches, coverage, release output, every `.env` variant except `.env.example`, and `*.tsbuildinfo`. Put extension output, mobile web export, desktop release output, and `apps/assets-private-proxy` in `.vercelignore`.
+Ignore `node_modules`, framework/build caches, coverage, release output, every `.env` variant except `.env.example`, and `*.tsbuildinfo`. Put extension output, mobile web export, desktop release output, `apps/assets-private-proxy`, and `apps/desktop-updater-worker` in `.vercelignore`.
 
 Create the single root `vercel.json` using `https://openapi.vercel.sh/vercel.json`. Add service `api` rooted at `apps/api` and service `web` rooted at `apps/web` as selected. Put the `/api/(.*)` rewrite before the web `/(.*)` catch-all. If billing is selected, add `*/5 * * * *` for `/api/internal/realtime/flush`; if storage is selected, add `0 3 * * *` for `/api/internal/storage/cleanup`. Protect both internal routes with the same high-entropy `CRON_SECRET` bearer token.