diff --git a/.gitignore b/.gitignore
index 3995e6c..e5c7dc0 100644
--- a/.gitignore
+++ b/.gitignore
@@ -7,11 +7,3 @@ node_modules/
 *.p12
 .DS_Store
 media/teaser/out/
-
-# desktop app (apps/desktop): build output, compiled sidecars, Tauri generated schemas
-apps/desktop/dist/
-apps/desktop/src-tauri/target/
-apps/desktop/src-tauri/binaries/
-apps/desktop/src-tauri/gen/
-apps/desktop/.screens/
-.scratch/
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6d47dfb..f206e63 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,40 +1,5 @@
 # Changelog
 
-## Unreleased
-
-- **Desktop machine interface** (`serve --stdio`): JSON-RPC session for the coming desktop app, built on the MCP core.
-  Typed methods with argument schemas, structured results, progress notifications, cancellation, `project.inspect`
-  and `portfolio.status`: apps across iOS and Android with identity, config check, release trains (current and next
-  version on both stores) and catalog parity (`live` reads App Store and Play status). `system.tools` reports ffmpeg,
-  Chrome, Xcode tools, simctl, adb and git with versions; `STOREBOUND_TOOL_PATH` / `STOREBOUND_CHROME` point the CLI
-  at app-managed copies. Writes are dry runs unless the host
-  sends a single-use confirm token bound to the method, arguments and a short expiry (HMAC with a per-session secret
-  handed over on stdin). No submit / release / publish method exists. Under `serve`, terminal confirmations always
-  answer no.
-- `--json` on `check` (and `check --aso`), `apple testflight status`, `apple ppo status`, `apple next-build`,
-  `play next-version-code`, `analytics compare` and `prices import` (read-only diff); new `inspect` command.
-- **Desktop app shell** (`apps/desktop`, not released yet): Tauri 2 + React 19, app-centric (Portfolio, App with
-  Releases / Catalog / Listings / Health / Reviews / TestFlight, App folders, Accounts, Dependencies, Settings), store
-  keys in the OS keychain, native confirm dialogs with the dry run before any write. See `docs/desktop.md`.
-- `--json` on `catalog diff` goes through the same machine-readable result line.
-- **`storebound doctor`** (`--json`): ffmpeg, ffprobe, Chrome, playwright, Xcode tools, simctl, adb and git with
-  versions (the same detection as the desktop Dependencies screen) and the install commands for this OS. It runs none.
-- `playwright` is an optional peer dependency (it was only documented before). The compiled desktop sidecar bundles
-  `playwright-core` and renders with the app's Chrome for Testing (`STOREBOUND_CHROME`), so desktop users need neither.
-- `inspect --icon` / `inspect --listings` (listing completeness per language on both stores, rendered screenshots),
-  `reviews drafts [--json]` (local reply drafts with the send checks), `reviews approve <draft> [--undo] [--dry]`,
-  `init --dry`; templates are embedded so `init` works from a single-file binary.
-- `apple status --json` includes the phased release of the newest live versions; release trains now count a staged
-  rollout or iOS phased release (also halted / paused) as the current train.
-- **Desktop D2** (`apps/desktop`): redesigned shell (command palette, toasts with progress and cancel, skeletons,
-  illustrated empty states, first-run guide), release timeline per app, catalog parity matrix, listing completeness,
-  health sparklines against the Play thresholds, reviews inbox with star distribution and draft approval, TestFlight
-  groups and builds, store readiness with fix hints; offline cache of the last reads (SQLite, "last read" stamps);
-  one-click ffmpeg (pinned SHA-256) and Chrome for Testing (Google's code signature) downloads into app data;
-  English and Turkish with an i18n check, 7:1 text contrast checked in both themes.
-- `tools/build-sidecars.ts`: single-file executables for macOS (arm64, x64), Linux (x64, arm64) and Windows (x64),
-  re-signed ad hoc on macOS and checked for build-machine paths. The MCP server now also runs from such a binary.
-
 ## 0.5.0 · 2026-10-11
 
 Apps and games: storebound is for every mobile app, not only games, and the in-app catalog is complete on both stores.
diff --git a/README.md b/README.md
index a632148..1c6d164 100644
--- a/README.md
+++ b/README.md
@@ -175,15 +175,12 @@ run in the background with a log (`storebound shots render > .storebound/render.
 | `init [--profile app\|game\|subscription-app]` | local | copy the templates of a profile (default app), gitignore `.storebound/` |
 | `install --agent <tool>` | local | skills + MCP entry for an AI tool |
 | `mcp` | local | stdio MCP server wrapping the commands |
-| `serve --stdio` | local | JSON-RPC session for the storebound desktop app (see [Desktop machine interface](#desktop-machine-interface)) |
-| `inspect [--json]` | local | offline summary of the config: name, store ids, languages, products |
 | `check` | local | config, copy limits, data safety, products, subscriptions, profile (delete-account URL, demo account, terms URL), files; warns on untranslated release notes |
 | `catalog diff [--store] [--threshold 10]` | API, read-only | one catalog vs both stores: missing / extra / mismatched products and subscriptions, US and override prices, locales, offers, per-region price differences between the stores; exit 1 on mismatches |
 | `check --aso` | local | keyword audit: App Store keyword field rules, Play stuffing / claims |
 | `validate [--apple] [--play]` | API, read-only | readiness report with ordered blockers plus the local renders checks (`--no-local` skips); exit 1 while any blocker is left |
 | `whats-new [--since <tag>]` | local | draft player-facing release notes from git log into both listing files |
 | `privacy-manifest --ios <path>` | local | PrivacyInfo.xcprivacy, required-reason APIs, SDKs without manifests |
-| `doctor [--json]` | local | which local tools are here (ffmpeg, Chrome, playwright, Xcode, adb, git) and how to install the missing ones |
 | `icons` | local | App Store 1024 (no alpha), Play 512, web, Capacitor sources, Android legacy launcher icons |
 
 </details>
@@ -380,19 +377,6 @@ per-request `_meta`, `resultType`, cacheable `tools/list`) and, on the same proc
 Manual config for a tool that `install` does not know: command `bunx` with args `["storebound", "mcp"]` (or the
 absolute path of `bin/storebound` plus `mcp`).
 
-### Desktop machine interface
-
-`storebound serve --stdio` is what the desktop app (`apps/desktop`, in progress) runs as its sidecar: newline-delimited
-JSON-RPC on the same core as the MCP server (tool list, validation, forbidden flags, child-process runner), with typed
-methods (`check`, `validate`, `apple.status`, `play.listing`, ... plus `project.inspect` and `portfolio.status` over
-many project folders), structured results (the commands' `--json` output), progress notifications and cancellation.
-The first request is `session.hello` with a per-session secret only the host knows. Write methods are dry runs unless
-the call carries a single-use confirm token (HMAC over method, arguments and expiry) that the host mints after the
-owner confirmed a native dialog showing that dry run. There is no method that submits, releases or publishes; Play
-testing releases and phased release changes stay out of the desktop profile too. Types: `cli/lib/desktop-protocol.ts`.
-`bun tools/build-sidecars.ts` compiles the CLI for macOS, Linux and Windows (`bun build --compile`). Design, safety
-model and the Dependencies screen (tool sources and licenses): [docs/desktop.md](docs/desktop.md).
-
 ## Safety model
 
 - **Credentials** live in env vars or the gitignored `.storebound/credentials.json`, never in the config or the repo.
diff --git a/apps/desktop/index.html b/apps/desktop/index.html
deleted file mode 100644
index 3036910..0000000
--- a/apps/desktop/index.html
+++ /dev/null
@@ -1,14 +0,0 @@
-<!doctype html>
-<html lang="en">
-  <head>
-    <meta charset="UTF-8" />
-    <meta name="viewport" content="width=device-width, initial-scale=1" />
-    <meta name="color-scheme" content="light dark" />
-    <link rel="icon" href="data:," />
-    <title>storebound</title>
-  </head>
-  <body>
-    <div id="root"></div>
-    <script type="module" src="/src/main.tsx"></script>
-  </body>
-</html>
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
deleted file mode 100644
index 3255438..0000000
--- a/apps/desktop/package.json
+++ /dev/null
@@ -1,31 +0,0 @@
-{
-  "name": "@storebound/desktop",
-  "version": "0.1.0",
-  "private": true,
-  "license": "MIT",
-  "type": "module",
-  "description": "storebound desktop: every game's releases on both stores in one window (Tauri shell around the storebound CLI sidecar).",
-  "scripts": {
-    "dev": "vite --host 127.0.0.1 --port 1420 --strictPort",
-    "build": "tsc --noEmit && vite build",
-    "typecheck": "tsc --noEmit",
-    "test": "bun test tests",
-    "sidecar": "bun ../../tools/build-sidecars.ts --host",
-    "tauri": "tauri",
-    "app:dev": "bun run sidecar && tauri dev",
-    "app:build:debug": "bun run sidecar && tauri build --debug --no-bundle"
-  },
-  "dependencies": {
-    "@tauri-apps/api": "^2.12.0",
-    "react": "^19.2.0",
-    "react-dom": "^19.2.0"
-  },
-  "devDependencies": {
-    "@tauri-apps/cli": "^2.12.1",
-    "@types/react": "^19.2.0",
-    "@types/react-dom": "^19.2.0",
-    "@vitejs/plugin-react": "^4.7.0",
-    "typescript": "5.9.3",
-    "vite": "^6.3.0"
-  }
-}
diff --git a/apps/desktop/scripts/screens.ts b/apps/desktop/scripts/screens.ts
deleted file mode 100644
index 157489b..0000000
--- a/apps/desktop/scripts/screens.ts
+++ /dev/null
@@ -1,62 +0,0 @@
-#!/usr/bin/env bun
-// Screenshots of every desktop screen in light and dark, from the Vite dev server in fixture mode (no Tauri, no store
-// accounts), plus a few interaction checks (command palette, toast progress, keyboard focus). Dev tool only.
-//   cd apps/desktop && VITE_FIXTURES=1 bunx vite --port 1431 &
-//   bun scripts/screens.ts --base http://127.0.0.1:1431 --out <dir> [--only portfolio,app:health] [--themes light,dark]
-// Uses playwright (root devDependency) with the installed Google Chrome (channel "chrome").
-import { mkdirSync } from 'node:fs';
-import { join } from 'node:path';
-import { chromium, type Page } from 'playwright';
-
-const arg = (k: string, d: string) => { const i = process.argv.indexOf(`--${k}`); return i >= 0 ? process.argv[i + 1] ?? d : d; };
-const base = arg('base', 'http://127.0.0.1:1431');
-const out = arg('out', join(import.meta.dir, '..', '.screens'));
-const only = arg('only', '').split(',').filter(Boolean);
-const themes = arg('themes', 'light,dark').split(',');
-const lang = arg('lang', 'en');
-const suffix = arg('suffix', '');
-
-export const SCREENS: [string, string][] = [
-  ['portfolio', 'portfolio'], ['releases', 'app:releases'], ['releases-2', 'app:releases:2'], ['catalog', 'app:catalog'], ['listings', 'app:listings'],
-  ['health', 'app:health'], ['reviews', 'app:reviews'], ['testflight', 'app:testflight'], ['checks', 'app:checks'],
-  ['apps', 'apps'], ['accounts', 'accounts'], ['dependencies', 'dependencies'], ['settings', 'settings'],
-  ['palette', 'palette'], ['welcome-1', 'welcome:1'], ['welcome-2', 'welcome:2'], ['welcome-3', 'welcome:3'], ['welcome-4', 'welcome:4'], ['welcome-5', 'welcome:5'],
-];
-
-async function settle(page: Page) {
-  await page.waitForLoadState('networkidle');
-  await page.waitForTimeout(900);
-}
-
-mkdirSync(out, { recursive: true });
-const browser = await chromium.launch({ channel: 'chrome', headless: true });
-const files: string[] = [];
-for (const theme of themes) {
-  const ctx = await browser.newContext({ viewport: { width: 1440, height: 900 }, deviceScaleFactor: 1, colorScheme: theme === 'dark' ? 'dark' : 'light', reducedMotion: 'reduce' });
-  const page = await ctx.newPage();
-  const errors: string[] = [];
-  page.on('pageerror', e => errors.push(String(e)));
-  page.on('console', m => { if (m.type() === 'error') errors.push(m.text()); });
-  for (const [name, start] of SCREENS) {
-    if (only.length && !only.includes(name)) continue;
-    await page.goto(`${base}/?start=${encodeURIComponent(start)}&theme=${theme}&lang=${lang}`);
-    await settle(page);
-    const f = join(out, `d2-${name}${suffix}-${theme}${lang === 'en' ? '' : `-${lang}`}.png`);
-    await page.screenshot({ path: f });
-    files.push(f);
-  }
-  if (!only.length || only.includes('toast')) {
-    // a background job: Read the stores, caught mid-way with its progress toast
-    await page.goto(`${base}/?start=portfolio&theme=${theme}&lang=${lang}`);
-    await settle(page);
-    await page.getByRole('button', { name: /Read the stores|Mağazaları oku/ }).first().click();
-    await page.waitForTimeout(900);
-    const f = join(out, `d2-toast${suffix}-${theme}${lang === 'en' ? '' : `-${lang}`}.png`);
-    await page.screenshot({ path: f });
-    files.push(f);
-  }
-  if (errors.length) console.error(`${theme}: page errors:\n  ${[...new Set(errors)].join('\n  ')}`);
-  await ctx.close();
-}
-await browser.close();
-console.log(files.join('\n'));
diff --git a/apps/desktop/src-tauri/Cargo.lock b/apps/desktop/src-tauri/Cargo.lock
deleted file mode 100644
index d262f3f..0000000
--- a/apps/desktop/src-tauri/Cargo.lock
+++ /dev/null
@@ -1,6262 +0,0 @@
-# This file is automatically @generated by Cargo.
-# It is not intended for manual editing.
-version = 4
-
-[[package]]
-name = "adler2"
-version = "2.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "320119579fcad9c21884f5c4861d16174d0e06250625266f50fe6898340abefa"
-
-[[package]]
-name = "aes"
-version = "0.8.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b169f7a6d4742236a0a00c541b845991d0ac43e546831af1249753ab4c3aa3a0"
-dependencies = [
- "cfg-if",
- "cipher",
- "cpufeatures",
-]
-
-[[package]]
-name = "aho-corasick"
-version = "1.1.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c982642fa9e8606056828ee9a8505737230110bb1099153c79efe865c59d12ba"
-dependencies = [
- "memchr",
-]
-
-[[package]]
-name = "alloc-no-stdlib"
-version = "3.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c2fb6cfd47bf496ff64095c20eaba0c201404ee38714d4142fcfa1dc334fcc7a"
-
-[[package]]
-name = "alloc-stdlib"
-version = "0.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0b5c1865780388bfa186411ab5f247819487fc4864c6e9c3106611fa347586e1"
-dependencies = [
- "alloc-no-stdlib",
-]
-
-[[package]]
-name = "android_system_properties"
-version = "0.1.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ae221649c9976a6f6c56ae1facf410f3ddb33cc661c4b7b61020a912d4237fbc"
-dependencies = [
- "libc",
-]
-
-[[package]]
-name = "anyhow"
-version = "1.0.104"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "330a5ed07fa54e4702c9d6c4174f74427fc0ef6e214bbd677ae50a5099946470"
-
-[[package]]
-name = "arbitrary"
-version = "1.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3bc62ac97cc33321f50863d514c3bc38a453947a8f9e781137e47c7401020aed"
-dependencies = [
- "derive_arbitrary",
-]
-
-[[package]]
-name = "async-broadcast"
-version = "0.7.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "435a87a52755b8f27fcf321ac4f04b2802e337c8c4872923137471ec39c37532"
-dependencies = [
- "event-listener",
- "event-listener-strategy",
- "futures-core",
- "pin-project-lite",
-]
-
-[[package]]
-name = "async-channel"
-version = "2.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "924ed96dd52d1b75e9c1a3e6275715fd320f5f9439fb5a4a11fa51f4221158d2"
-dependencies = [
- "concurrent-queue",
- "event-listener-strategy",
- "futures-core",
- "pin-project-lite",
-]
-
-[[package]]
-name = "async-executor"
-version = "1.14.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c96bf972d85afc50bf5ab8fe2d54d1586b4e0b46c97c50a0c9e71e2f7bcd812a"
-dependencies = [
- "async-task",
- "concurrent-queue",
- "fastrand",
- "futures-lite",
- "pin-project-lite",
- "slab",
-]
-
-[[package]]
-name = "async-io"
-version = "2.6.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "456b8a8feb6f42d237746d4b3e9a178494627745c3c56c6ea55d92ba50d026fc"
-dependencies = [
- "autocfg",
- "cfg-if",
- "concurrent-queue",
- "futures-io",
- "futures-lite",
- "parking",
- "polling",
- "rustix",
- "slab",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "async-lock"
-version = "3.4.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "290f7f2596bd5b78a9fec8088ccd89180d7f9f55b94b0576823bbbdc72ee8311"
-dependencies = [
- "event-listener",
- "event-listener-strategy",
- "pin-project-lite",
-]
-
-[[package]]
-name = "async-process"
-version = "2.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fc50921ec0055cdd8a16de48773bfeec5c972598674347252c0399676be7da75"
-dependencies = [
- "async-channel",
- "async-io",
- "async-lock",
- "async-signal",
- "async-task",
- "blocking",
- "cfg-if",
- "event-listener",
- "futures-lite",
- "rustix",
-]
-
-[[package]]
-name = "async-recursion"
-version = "1.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4f8abc12baad266b1c8cec146854c195b5864b4221d4b2ca7296a7ae82d9e451"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 3.0.7",
-]
-
-[[package]]
-name = "async-signal"
-version = "0.2.14"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "52b5aaafa020cf5053a01f2a60e8ff5dccf550f0f77ec54a4e47285ac2bab485"
-dependencies = [
- "async-io",
- "async-lock",
- "atomic-waker",
- "cfg-if",
- "futures-core",
- "futures-io",
- "rustix",
- "signal-hook-registry",
- "slab",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "async-task"
-version = "4.7.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8b75356056920673b02621b35afd0f7dda9306d03c79a30f5c56c44cf256e3de"
-
-[[package]]
-name = "async-trait"
-version = "0.1.92"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "82f6aeea286b8eb4dd3431a1be1b59d290ace00f5bfd8e2a159bc2a05e2c1667"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 3.0.7",
-]
-
-[[package]]
-name = "atk"
-version = "0.18.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "241b621213072e993be4f6f3a9e4b45f65b7e6faad43001be957184b7bb1824b"
-dependencies = [
- "atk-sys",
- "glib",
- "libc",
-]
-
-[[package]]
-name = "atk-sys"
-version = "0.18.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c5e48b684b0ca77d2bbadeef17424c2ea3c897d44d566a1617e7e8f30614d086"
-dependencies = [
- "glib-sys",
- "gobject-sys",
- "libc",
- "system-deps",
-]
-
-[[package]]
-name = "atomic-waker"
-version = "1.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1505bd5d3d116872e7271a6d4e16d81d0c8570876c8de68093a09ac269d8aac0"
-
-[[package]]
-name = "autocfg"
-version = "1.5.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f2032f911046de80f0a198e0901378627c33f59ea0ac00e363d481118bd70a53"
-
-[[package]]
-name = "base64"
-version = "0.21.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9d297deb1925b89f2ccc13d7635fa0714f12c87adce1c75356b39ca9b7178567"
-
-[[package]]
-name = "base64"
-version = "0.22.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
-
-[[package]]
-name = "base64"
-version = "0.23.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ac07cdecf99051d9a5238b80f35af32cdeba5b336e55d957b318b50137e18da5"
-
-[[package]]
-name = "bit-set"
-version = "0.8.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "08807e080ed7f9d5433fa9b275196cfc35414f66a0c79d864dc51a0d825231a3"
-dependencies = [
- "bit-vec",
-]
-
-[[package]]
-name = "bit-vec"
-version = "0.8.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5e764a1d40d510daf35e07be9eb06e75770908c27d411ee6c92109c9840eaaf7"
-
-[[package]]
-name = "bitflags"
-version = "1.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a"
-
-[[package]]
-name = "bitflags"
-version = "2.13.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3ded4057c258ba199e2d26386d3af3780957ecaee6c4ef4041c6b4b8b97c0b06"
-dependencies = [
- "serde_core",
-]
-
-[[package]]
-name = "block-buffer"
-version = "0.10.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71"
-dependencies = [
- "generic-array",
-]
-
-[[package]]
-name = "block-padding"
-version = "0.3.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a8894febbff9f758034a5b8e12d87918f56dfc64a8e1fe757d65e29041538d93"
-dependencies = [
- "generic-array",
-]
-
-[[package]]
-name = "block2"
-version = "0.6.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cdeb9d870516001442e364c5220d3574d2da8dc765554b4a617230d33fa58ef5"
-dependencies = [
- "objc2",
-]
-
-[[package]]
-name = "blocking"
-version = "1.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a70e4329df6cb94385eed412ec92375c3cdd8a6e502493d1229b6414e4036dfa"
-dependencies = [
- "async-channel",
- "async-task",
- "futures-io",
- "futures-lite",
- "piper",
-]
-
-[[package]]
-name = "brotli"
-version = "9.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f8b851b75c23ca7873623d612fe49bd1989aeb03d08fb9432187eb253d3d4c6b"
-dependencies = [
- "alloc-no-stdlib",
- "alloc-stdlib",
- "brotli-decompressor",
-]
-
-[[package]]
-name = "brotli-decompressor"
-version = "6.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "941cd9bd4ddab83cb46fa5a2d428f1c857b24ac78cb876cf7beb710840934bd7"
-dependencies = [
- "alloc-no-stdlib",
- "alloc-stdlib",
-]
-
-[[package]]
-name = "bs58"
-version = "0.5.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bf88ba1141d185c399bee5288d850d63b8369520c1eafc32a0430b5b6c287bf4"
-dependencies = [
- "tinyvec",
-]
-
-[[package]]
-name = "bumpalo"
-version = "3.20.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "72f5acc6cb2ba439de613abc23857ec3d78374d8ed5ac84e9d11336e87da8649"
-
-[[package]]
-name = "bytemuck"
-version = "1.25.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "95832e849adfb21180ccb6826a99da14e5d266ae5c2e668e1602cf234f153797"
-
-[[package]]
-name = "byteorder"
-version = "1.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b"
-
-[[package]]
-name = "bytes"
-version = "1.12.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fc652a48c352aef3ea3aed32080501cf3ef6ed5da78602a020c991775b0aff04"
-dependencies = [
- "serde",
-]
-
-[[package]]
-name = "cairo-rs"
-version = "0.18.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8ca26ef0159422fb77631dc9d17b102f253b876fe1586b03b803e63a309b4ee2"
-dependencies = [
- "bitflags 2.13.2",
- "cairo-sys-rs",
- "glib",
- "libc",
- "once_cell",
- "thiserror 1.0.69",
-]
-
-[[package]]
-name = "cairo-sys-rs"
-version = "0.18.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "685c9fa8e590b8b3d678873528d83411db17242a73fccaed827770ea0fedda51"
-dependencies = [
- "glib-sys",
- "libc",
- "system-deps",
-]
-
-[[package]]
-name = "camino"
-version = "1.2.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bbbad30e4b4c14a39e3cc8aed085a12a327257c316619c93581e017bc52be591"
-dependencies = [
- "serde_core",
-]
-
-[[package]]
-name = "cargo-platform"
-version = "0.1.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e35af189006b9c0f00a064685c727031e3ed2d8020f7ba284d78cc2671bd36ea"
-dependencies = [
- "serde",
-]
-
-[[package]]
-name = "cargo_metadata"
-version = "0.19.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dd5eb614ed4c27c5d706420e4320fbe3216ab31fa1c33cd8246ac36dae4479ba"
-dependencies = [
- "camino",
- "cargo-platform",
- "semver",
- "serde",
- "serde_json",
- "thiserror 2.0.21",
-]
-
-[[package]]
-name = "cargo_toml"
-version = "1.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "82f4b26e751e711a5302649417f2da046dce6391b2ea30a4820f37462314f0b9"
-dependencies = [
- "semver",
- "serde",
- "toml 1.1.8+spec-1.1.0",
-]
-
-[[package]]
-name = "cbc"
-version = "0.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "26b52a9543ae338f279b96b0b9fed9c8093744685043739079ce85cd58f289a6"
-dependencies = [
- "cipher",
-]
-
-[[package]]
-name = "cc"
-version = "1.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "50a649af8a827553c29fb0cb4bd4a6f1a0dd695bd3232b9bc98bd9c8a3ffbb8b"
-dependencies = [
- "find-msvc-tools",
- "shlex",
-]
-
-[[package]]
-name = "cesu8"
-version = "1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6d43a04d8753f35258c91f8ec639f792891f748a1edbd759cf1dcea3382ad83c"
-
-[[package]]
-name = "cfb"
-version = "0.14.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a347dcabdae9c31b0825fd6a8bed285ec9c2acb89c47827126d52fa4f59cece3"
-dependencies = [
- "fnv",
- "uuid",
- "web-time",
-]
-
-[[package]]
-name = "cfg-expr"
-version = "0.15.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d067ad48b8650848b989a59a86c6c36a995d02d2bf778d45c3c5d57bc2718f02"
-dependencies = [
- "smallvec",
- "target-lexicon",
-]
-
-[[package]]
-name = "cfg-if"
-version = "1.0.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600"
-
-[[package]]
-name = "cfg_aliases"
-version = "0.2.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f079e83a288787bcd14a6aea84cee5c87a67c5a3e660c30f557a3d24761b3527"
-
-[[package]]
-name = "chrono"
-version = "0.4.45"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1aa79e62e7697b8e29b513a68abacf485adcd1fe8284a4316c5ae868e6633327"
-dependencies = [
- "iana-time-zone",
- "num-traits",
- "serde",
- "windows-link",
-]
-
-[[package]]
-name = "cipher"
-version = "0.4.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "773f3b9af64447d2ce9850330c473515014aa235e6a783b02db81ff39e4a3dad"
-dependencies = [
- "crypto-common",
- "inout",
-]
-
-[[package]]
-name = "combine"
-version = "4.6.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cfc320937d09e6de266b31b9afb480f197d7a861be86be7cb2ea7e5d1bfffc5e"
-dependencies = [
- "bytes",
- "memchr",
-]
-
-[[package]]
-name = "concurrent-queue"
-version = "2.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4ca0197aee26d1ae37445ee532fefce43251d24cc7c166799f4d46817f1d3973"
-dependencies = [
- "crossbeam-utils",
-]
-
-[[package]]
-name = "const-random"
-version = "0.1.18"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "87e00182fe74b066627d63b85fd550ac2998d4b0bd86bfed477a0ae4c7c71359"
-dependencies = [
- "const-random-macro",
-]
-
-[[package]]
-name = "const-random-macro"
-version = "0.1.16"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f9d839f2a20b0aee515dc581a6172f2321f96cab76c1a38a4c584a194955390e"
-dependencies = [
- "getrandom 0.2.17",
- "once_cell",
- "tiny-keccak",
-]
-
-[[package]]
-name = "cookie"
-version = "0.18.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1a373e3602691c3cdea496d2f0ee5935151e6168fe87739483c463db1b2f2f87"
-dependencies = [
- "time",
- "version_check",
-]
-
-[[package]]
-name = "core-foundation"
-version = "0.9.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "91e195e091a93c46f7102ec7818a2aa394e1e1771c3ab4825963fa03e45afb8f"
-dependencies = [
- "core-foundation-sys",
- "libc",
-]
-
-[[package]]
-name = "core-foundation"
-version = "0.10.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b2a6cd9ae233e7f62ba4e9353e81a88df7fc8a5987b8d445b4d90c879bd156f6"
-dependencies = [
- "core-foundation-sys",
- "libc",
-]
-
-[[package]]
-name = "core-foundation-sys"
-version = "0.8.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"
-
-[[package]]
-name = "core-graphics"
-version = "0.25.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "064badf302c3194842cf2c5d61f56cc88e54a759313879cdf03abdd27d0c3b97"
-dependencies = [
- "bitflags 2.13.2",
- "core-foundation 0.10.1",
- "core-graphics-types",
- "foreign-types",
- "libc",
-]
-
-[[package]]
-name = "core-graphics-types"
-version = "0.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3d44a101f213f6c4cdc1853d4b78aef6db6bdfa3468798cc1d9912f4735013eb"
-dependencies = [
- "bitflags 2.13.2",
- "core-foundation 0.10.1",
- "libc",
-]
-
-[[package]]
-name = "core_detect"
-version = "1.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7f8f80099a98041a3d1622845c271458a2d73e688351bf3cb999266764b81d48"
-
-[[package]]
-name = "cpufeatures"
-version = "0.2.17"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280"
-dependencies = [
- "libc",
-]
-
-[[package]]
-name = "crc32fast"
-version = "1.5.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "01a7799fd6b852db0e61728dde9a204c423b44d689dbd432522543614b490e78"
-dependencies = [
- "cfg-if",
-]
-
-[[package]]
-name = "crossbeam-channel"
-version = "0.5.17"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "98b0cc327b5bc766e7fda9c9260cc0fa81b43a8e240440422dff70788e3f9ef1"
-dependencies = [
- "crossbeam-utils",
-]
-
-[[package]]
-name = "crossbeam-utils"
-version = "0.8.23"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a31eee39dddec8330830986fcd7625edb5a24ec90ea038215273bbc3adb08ac6"
-
-[[package]]
-name = "crunchy"
-version = "0.2.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "460fbee9c2c2f33933d720630a6a0bac33ba7053db5344fac858d4b8952d77d5"
-
-[[package]]
-name = "crypto-common"
-version = "0.1.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a"
-dependencies = [
- "generic-array",
- "typenum",
-]
-
-[[package]]
-name = "cssparser"
-version = "0.37.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8c9cdaae01d5ed7882b04d795e7f752f46ff52d2fa3b50a20d28c464510bba98"
-dependencies = [
- "cssparser-macros",
- "dtoa-short",
- "itoa",
- "phf",
- "smallvec",
-]
-
-[[package]]
-name = "cssparser-macros"
-version = "0.7.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d045de693cb712d0b22c6a64be5b953f67b3ce00ab5ad3dd5d8b441886ab8e1a"
-dependencies = [
- "quote",
- "syn 3.0.7",
-]
-
-[[package]]
-name = "ctor"
-version = "1.0.13"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "914a755b7c2d4af2bdcff7ce1739e2db9a1b81a9b07123d8015786ae03c0980d"
-
-[[package]]
-name = "darling"
-version = "0.24.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ed17f5901b6630b993ca003def43f2f8ef4014fc13b047b57aad617ff32bc2ec"
-dependencies = [
- "darling_core",
- "darling_macro",
-]
-
-[[package]]
-name = "darling_core"
-version = "0.24.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6837e2cf7485aaae18f86181d2f0e9a7ed297a025e220aeabf63fdebd3a2ddff"
-dependencies = [
- "ident_case",
- "proc-macro2",
- "quote",
- "strsim",
- "syn 3.0.7",
-]
-
-[[package]]
-name = "darling_macro"
-version = "0.24.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2ac7135c3ef02b2f7833bbeb1be5ba7f966dcde8a87c6b87f65a778d71a02785"
-dependencies = [
- "darling_core",
- "quote",
- "syn 3.0.7",
-]
-
-[[package]]
-name = "dbus"
-version = "0.9.12"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3ab69f03cc8c4340c9c8e315114e1658e6775a9b16a04357973aa21cec22b32e"
-dependencies = [
- "libc",
- "libdbus-sys",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "dbus-secret-service"
-version = "4.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "708b509edf7889e53d7efb0ffadd994cc6c2345ccb62f55cfd6b0682165e4fa6"
-dependencies = [
- "aes",
- "block-padding",
- "cbc",
- "dbus",
- "fastrand",
- "hkdf",
- "num",
- "once_cell",
- "sha2",
- "zeroize",
-]
-
-[[package]]
-name = "defmt"
-version = "1.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e2953bfe4f93bbd20cc71198842756f77d161884c99ebbabc41d80231ded88d1"
-dependencies = [
- "bitflags 1.3.2",
- "defmt-macros",
-]
-
-[[package]]
-name = "defmt-macros"
-version = "1.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bad9c72e7ca2137e0dc3813245a0d282fd6daad32fd800af018306a9169b5fe8"
-dependencies = [
- "defmt-parser",
- "proc-macro2",
- "quote",
- "syn 2.0.119",
-]
-
-[[package]]
-name = "defmt-parser"
-version = "1.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "10d60334b3b2e7c9d91ef8150abfb6fa4c1c39ebbcf4a81c2e346aad939fee3e"
-dependencies = [
- "thiserror 2.0.21",
-]
-
-[[package]]
-name = "deranged"
-version = "0.5.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7cd812cc2bc1d69d4764bd80df88b4317eaef9e773c75226407d9bc0876b211c"
-dependencies = [
- "serde_core",
-]
-
-[[package]]
-name = "derive_arbitrary"
-version = "1.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1b034bd7d5f032402a2479444dcc6f74e36a03f31854d41680fb240ef682a1ac"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 3.0.7",
-]
-
-[[package]]
-name = "derive_more"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d751e9e49156b02b44f9c1815bcb94b984cdcc4396ecc32521c739452808b134"
-dependencies = [
- "derive_more-impl",
-]
-
-[[package]]
-name = "derive_more-impl"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "799a97264921d8623a957f6c3b9011f3b5492f557bbb7a5a19b7fa6d06ba8dcb"
-dependencies = [
- "proc-macro2",
- "quote",
- "rustc_version",
- "syn 2.0.119",
-]
-
-[[package]]
-name = "digest"
-version = "0.10.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
-dependencies = [
- "block-buffer",
- "crypto-common",
- "subtle",
-]
-
-[[package]]
-name = "dirs"
-version = "7.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8d57d423b3c82e89b9a24ca3091fee61f456a26edbd28d26c65906f4bc1dcd8f"
-dependencies = [
- "dirs-sys",
-]
-
-[[package]]
-name = "dirs-sys"
-version = "0.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e01a3366d27ee9890022452ee61b2b63a67e6f13f58900b651ff5665f0bb1fab"
-dependencies = [
- "libc",
- "option-ext",
- "redox_users",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "dispatch2"
-version = "0.3.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e0e367e4e7da84520dedcac1901e4da967309406d1e51017ae1abfb97adbd38"
-dependencies = [
- "bitflags 2.13.2",
- "block2",
- "libc",
- "objc2",
-]
-
-[[package]]
-name = "displaydoc"
-version = "0.2.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c6232dd377dcc64799954cbd3a9bb882e9cdc1308ccd87b1c098f1fb2eaf82a8"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 3.0.7",
-]
-
-[[package]]
-name = "dlopen2"
-version = "0.8.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5e2c5bd4158e66d1e215c49b837e11d62f3267b30c92f1d171c4d3105e3dc4d4"
-dependencies = [
- "dlopen2_derive",
- "libc",
- "once_cell",
- "winapi",
-]
-
-[[package]]
-name = "dlopen2_derive"
-version = "0.4.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0fbbb781877580993a8707ec48672673ec7b81eeba04cfd2310bd28c08e47c8f"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 2.0.119",
-]
-
-[[package]]
-name = "dlv-list"
-version = "0.5.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "442039f5147480ba31067cb00ada1adae6892028e40e45fc5de7b7df6dcc1b5f"
-dependencies = [
- "const-random",
-]
-
-[[package]]
-name = "dom_query"
-version = "0.28.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fac5fca71e65e94cc718a6e2af65d6e0f9c6027751c2aa562fbb5087fda639bc"
-dependencies = [
- "bit-set",
- "cssparser",
- "foldhash",
- "html5ever",
- "precomputed-hash",
- "selectors",
- "tendril",
-]
-
-[[package]]
-name = "dpi"
-version = "0.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d8b14ccef22fc6f5a8f4d7d768562a182c04ce9a3b3157b91390b52ddfdf1a76"
-dependencies = [
- "serde",
-]
-
-[[package]]
-name = "dtoa"
-version = "1.0.11"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4c3cf4824e2d5f025c7b531afcb2325364084a16806f6d47fbc1f5fbd9960590"
-
-[[package]]
-name = "dtoa-short"
-version = "0.3.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cd1511a7b6a56299bd043a9c167a6d2bfb37bf84a6dfceaba651168adfb43c87"
-dependencies = [
- "dtoa",
-]
-
-[[package]]
-name = "dunce"
-version = "1.0.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "92773504d58c093f6de2459af4af33faa518c13451eb8f2b5698ed3d36e7c813"
-
-[[package]]
-name = "dyn-clone"
-version = "1.0.20"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d0881ea181b1df73ff77ffaaf9c7544ecc11e82fba9b5f27b262a3c73a332555"
-
-[[package]]
-name = "embed-resource"
-version = "3.0.12"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6168487b5e7eb2673e6efe1200b1848016e436a6ca0b8031bf04bd9d493a249f"
-dependencies = [
- "cc",
- "memchr",
- "rustc_version",
- "toml 1.1.8+spec-1.1.0",
- "vswhom",
- "winreg",
-]
-
-[[package]]
-name = "embed_plist"
-version = "1.2.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4ef6b89e5b37196644d8796de5268852ff179b44e96276cf4290264843743bb7"
-
-[[package]]
-name = "encoding_rs"
-version = "0.8.42"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8e985e0451871ad22fb8d2b6b076e2028a502a0d3950998c2c5c0a4f9b5d9679"
-dependencies = [
- "cfg-if",
- "core_detect",
- "multiversion_no_op",
- "rustversion",
- "scopeguard",
- "simdutf8",
-]
-
-[[package]]
-name = "endi"
-version = "1.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "66b7e2430c6dff6a955451e2cfc438f09cea1965a9d6f87f7e3b90decc014099"
-
-[[package]]
-name = "enumflags2"
-version = "0.7.12"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1027f7680c853e056ebcec683615fb6fbbc07dbaa13b4d5d9442b146ded4ecef"
-dependencies = [
- "enumflags2_derive",
- "serde",
-]
-
-[[package]]
-name = "enumflags2_derive"
-version = "0.7.12"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "67c78a4d8fdf9953a5c9d458f9efe940fd97a0cab0941c075a813ac594733827"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 2.0.119",
-]
-
-[[package]]
-name = "equivalent"
-version = "1.0.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f"
-
-[[package]]
-name = "erased-serde"
-version = "0.4.10"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d2add8a07dd6a8d93ff627029c51de145e12686fbc36ecb298ac22e74cf02dec"
-dependencies = [
- "serde",
- "serde_core",
- "typeid",
-]
-
-[[package]]
-name = "errno"
-version = "0.3.14"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
-dependencies = [
- "libc",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "event-listener"
-version = "5.4.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5a23add41df1562121a9393cb065eab5146a1242410f23a644851e90cfd669d2"
-dependencies = [
- "parking",
- "pin-project-lite",
-]
-
-[[package]]
-name = "event-listener-strategy"
-version = "0.5.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8be9f3dfaaffdae2972880079a491a1a8bb7cbed0b8dd7a347f668b4150a3b93"
-dependencies = [
- "event-listener",
- "pin-project-lite",
-]
-
-[[package]]
-name = "fallible-iterator"
-version = "0.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2acce4a10f12dc2fb14a218589d4f1f62ef011b2d0cc4b3cb1bba8e94da14649"
-
-[[package]]
-name = "fallible-streaming-iterator"
-version = "0.1.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7360491ce676a36bf9bb3c56c1aa791658183a54d2744120f27285738d90465a"
-
-[[package]]
-name = "fastrand"
-version = "2.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223"
-
-[[package]]
-name = "fdeflate"
-version = "0.3.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e6853b52649d4ac5c0bd02320cddc5ba956bdb407c4b75a2c6b75bf51500f8c"
-dependencies = [
- "simd-adler32",
-]
-
-[[package]]
-name = "field-offset"
-version = "0.3.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "38e2275cc4e4fc009b0669731a1e5ab7ebf11f469eaede2bab9309a5b4d6057f"
-dependencies = [
- "memoffset",
- "rustc_version",
-]
-
-[[package]]
-name = "filetime"
-version = "0.2.29"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5c287a33c7f0a620c38e641e7f60827713987b3c0f26e8ddc9462cc69cf75759"
-dependencies = [
- "cfg-if",
- "libc",
-]
-
-[[package]]
-name = "find-msvc-tools"
-version = "0.1.14"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "aedcfb3409746eddb02b9e19ebda1c3394f759a152e48ee875a0844d1b955484"
-
-[[package]]
-name = "flate2"
-version = "1.1.10"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6e634e2e0ebac1ee034020da1ca582e17ffe4e0f5e985823721e168928136dcb"
-dependencies = [
- "crc32fast",
- "miniz_oxide 0.9.1",
- "zlib-rs",
-]
-
-[[package]]
-name = "fnv"
-version = "1.0.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1"
-
-[[package]]
-name = "foldhash"
-version = "0.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "77ce24cb58228fbb8aa041425bb1050850ac19177686ea6e0f41a70416f56fdb"
-
-[[package]]
-name = "foreign-types"
-version = "0.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d737d9aa519fb7b749cbc3b962edcf310a8dd1f4b67c91c4f83975dbdd17d965"
-dependencies = [
- "foreign-types-macros",
- "foreign-types-shared",
-]
-
-[[package]]
-name = "foreign-types-macros"
-version = "0.2.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ea5190182e6915eb873ddbc16e23b711b6eb1f9c00a0d0a3a91b5f6228475225"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 3.0.7",
-]
-
-[[package]]
-name = "foreign-types-shared"
-version = "0.3.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "aa9a19cbb55df58761df49b23516a86d432839add4af60fc256da840f66ed35b"
-
-[[package]]
-name = "form_urlencoded"
-version = "1.2.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cb4cb245038516f5f85277875cdaa4f7d2c9a0fa0468de06ed190163b1581fcf"
-dependencies = [
- "percent-encoding",
-]
-
-[[package]]
-name = "futures-channel"
-version = "0.3.34"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b1f9e3d69d39e4862ffed03ed071a76f9a13ba1d9109d355b0f0aa6b15e393c4"
-dependencies = [
- "futures-core",
-]
-
-[[package]]
-name = "futures-core"
-version = "0.3.34"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "92d699e522242e69e3003b94ecc1f960f3a5e015aa7c5d7486e65ad01dd94f5e"
-
-[[package]]
-name = "futures-executor"
-version = "0.3.34"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "031b47cf1a3c6cc8bc2fc76cd437f521619387907d469316e7c0bc278f1f5432"
-dependencies = [
- "futures-core",
- "futures-task",
- "futures-util",
-]
-
-[[package]]
-name = "futures-io"
-version = "0.3.34"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "53c0fa8157de1303bfffdaa1cc2a673bfffb60102f76b0ef4441659124373fed"
-
-[[package]]
-name = "futures-lite"
-version = "2.6.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f78e10609fe0e0b3f4157ffab1876319b5b0db102a2c60dc4626306dc46b44ad"
-dependencies = [
- "fastrand",
- "futures-core",
- "futures-io",
- "parking",
- "pin-project-lite",
-]
-
-[[package]]
-name = "futures-macro"
-version = "0.3.34"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9fb9654ba8355388abeb8dcb4fc62f511300867002afc858860463bdd9fe0c44"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 3.0.7",
-]
-
-[[package]]
-name = "futures-sink"
-version = "0.3.34"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1944426bf7d03f1d14f708785e4b33efd750b36d48a157b836b3efc15ede8e1d"
-
-[[package]]
-name = "futures-task"
-version = "0.3.34"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cd417de3d1d015fc3bfd2b1ea46dfc7bab72ef86f1cc7cc9c78e728b34a6d1fd"
-
-[[package]]
-name = "futures-util"
-version = "0.3.34"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0d50a92467f8ba5dd6e3ee5d4bd04d73ab2e4e1c44474a0674821dfce14b79bc"
-dependencies = [
- "futures-core",
- "futures-io",
- "futures-macro",
- "futures-sink",
- "futures-task",
- "memchr",
- "pin-project-lite",
- "slab",
-]
-
-[[package]]
-name = "gdk"
-version = "0.18.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d9f245958c627ac99d8e529166f9823fb3b838d1d41fd2b297af3075093c2691"
-dependencies = [
- "cairo-rs",
- "gdk-pixbuf",
- "gdk-sys",
- "gio",
- "glib",
- "libc",
- "pango",
-]
-
-[[package]]
-name = "gdk-pixbuf"
-version = "0.18.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "50e1f5f1b0bfb830d6ccc8066d18db35c487b1b2b1e8589b5dfe9f07e8defaec"
-dependencies = [
- "gdk-pixbuf-sys",
- "gio",
- "glib",
- "libc",
- "once_cell",
-]
-
-[[package]]
-name = "gdk-pixbuf-sys"
-version = "0.18.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3f9839ea644ed9c97a34d129ad56d38a25e6756f99f3a88e15cd39c20629caf7"
-dependencies = [
- "gio-sys",
- "glib-sys",
- "gobject-sys",
- "libc",
- "system-deps",
-]
-
-[[package]]
-name = "gdk-sys"
-version = "0.18.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5c2d13f38594ac1e66619e188c6d5a1adb98d11b2fcf7894fc416ad76aa2f3f7"
-dependencies = [
- "cairo-sys-rs",
- "gdk-pixbuf-sys",
- "gio-sys",
- "glib-sys",
- "gobject-sys",
- "libc",
- "pango-sys",
- "pkg-config",
- "system-deps",
-]
-
-[[package]]
-name = "gdkwayland-sys"
-version = "0.18.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "140071d506d223f7572b9f09b5e155afbd77428cd5cc7af8f2694c41d98dfe69"
-dependencies = [
- "gdk-sys",
- "glib-sys",
- "gobject-sys",
- "libc",
- "pkg-config",
- "system-deps",
-]
-
-[[package]]
-name = "gdkx11"
-version = "0.18.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3caa00e14351bebbc8183b3c36690327eb77c49abc2268dd4bd36b856db3fbfe"
-dependencies = [
- "gdk",
- "gdkx11-sys",
- "gio",
- "glib",
- "libc",
- "x11",
-]
-
-[[package]]
-name = "gdkx11-sys"
-version = "0.18.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6e2e7445fe01ac26f11601db260dd8608fe172514eb63b3b5e261ea6b0f4428d"
-dependencies = [
- "gdk-sys",
- "glib-sys",
- "libc",
- "system-deps",
- "x11",
-]
-
-[[package]]
-name = "generic-array"
-version = "0.14.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a"
-dependencies = [
- "typenum",
- "version_check",
-]
-
-[[package]]
-name = "getrandom"
-version = "0.2.17"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0"
-dependencies = [
- "cfg-if",
- "libc",
- "wasi",
-]
-
-[[package]]
-name = "getrandom"
-version = "0.3.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
-dependencies = [
- "cfg-if",
- "libc",
- "r-efi 5.3.0",
- "wasip2",
-]
-
-[[package]]
-name = "getrandom"
-version = "0.4.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099"
-dependencies = [
- "cfg-if",
- "libc",
- "r-efi 6.0.0",
-]
-
-[[package]]
-name = "gio"
-version = "0.18.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d4fc8f532f87b79cbc51a79748f16a6828fb784be93145a322fa14d06d354c73"
-dependencies = [
- "futures-channel",
- "futures-core",
- "futures-io",
- "futures-util",
- "gio-sys",
- "glib",
- "libc",
- "once_cell",
- "pin-project-lite",
- "smallvec",
- "thiserror 1.0.69",
-]
-
-[[package]]
-name = "gio-sys"
-version = "0.18.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "37566df850baf5e4cb0dfb78af2e4b9898d817ed9263d1090a2df958c64737d2"
-dependencies = [
- "glib-sys",
- "gobject-sys",
- "libc",
- "system-deps",
- "winapi",
-]
-
-[[package]]
-name = "glib"
-version = "0.18.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "233daaf6e83ae6a12a52055f568f9d7cf4671dabb78ff9560ab6da230ce00ee5"
-dependencies = [
- "bitflags 2.13.2",
- "futures-channel",
- "futures-core",
- "futures-executor",
- "futures-task",
- "futures-util",
- "gio-sys",
- "glib-macros",
- "glib-sys",
- "gobject-sys",
- "libc",
- "memchr",
- "once_cell",
- "smallvec",
- "thiserror 1.0.69",
-]
-
-[[package]]
-name = "glib-macros"
-version = "0.18.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0bb0228f477c0900c880fd78c8759b95c7636dbd7842707f49e132378aa2acdc"
-dependencies = [
- "heck 0.4.1",
- "proc-macro-crate 2.0.2",
- "proc-macro-error",
- "proc-macro2",
- "quote",
- "syn 2.0.119",
-]
-
-[[package]]
-name = "glib-sys"
-version = "0.18.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "063ce2eb6a8d0ea93d2bf8ba1957e78dbab6be1c2220dd3daca57d5a9d869898"
-dependencies = [
- "libc",
- "system-deps",
-]
-
-[[package]]
-name = "glob"
-version = "0.3.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e4eba85ea1d0a966a983acd07deee566e67395d2d96b6fb39e62b5a833f1eb0b"
-
-[[package]]
-name = "gobject-sys"
-version = "0.18.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0850127b514d1c4a4654ead6dedadb18198999985908e6ffe4436f53c785ce44"
-dependencies = [
- "glib-sys",
- "libc",
- "system-deps",
-]
-
-[[package]]
-name = "gtk"
-version = "0.18.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fd56fb197bfc42bd5d2751f4f017d44ff59fbb58140c6b49f9b3b2bdab08506a"
-dependencies = [
- "atk",
- "cairo-rs",
- "field-offset",
- "futures-channel",
- "gdk",
- "gdk-pixbuf",
- "gio",
- "glib",
- "gtk-sys",
- "gtk3-macros",
- "libc",
- "pango",
- "pkg-config",
-]
-
-[[package]]
-name = "gtk-sys"
-version = "0.18.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8f29a1c21c59553eb7dd40e918be54dccd60c52b049b75119d5d96ce6b624414"
-dependencies = [
- "atk-sys",
- "cairo-sys-rs",
- "gdk-pixbuf-sys",
- "gdk-sys",
- "gio-sys",
- "glib-sys",
- "gobject-sys",
- "libc",
- "pango-sys",
- "system-deps",
-]
-
-[[package]]
-name = "gtk3-macros"
-version = "0.18.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "52ff3c5b21f14f0736fed6dcfc0bfb4225ebf5725f3c0209edeec181e4d73e9d"
-dependencies = [
- "proc-macro-crate 1.3.1",
- "proc-macro-error",
- "proc-macro2",
- "quote",
- "syn 2.0.119",
-]
-
-[[package]]
-name = "hashbrown"
-version = "0.12.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8a9ee70c43aaf417c914396645a0fa852624801b24ebb7ae78fe8272889ac888"
-
-[[package]]
-name = "hashbrown"
-version = "0.14.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e5274423e17b7c9fc20b6e7e208532f9b19825d82dfd615708b70edd83df41f1"
-
-[[package]]
-name = "hashbrown"
-version = "0.16.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "841d1cc9bed7f9236f321df977030373f4a4163ae1a7dbfe1a51a2c1a51d9100"
-dependencies = [
- "foldhash",
-]
-
-[[package]]
-name = "hashbrown"
-version = "0.17.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ed5909b6e89a2db4456e54cd5f673791d7eca6732202bbf2a9cc504fe2f9b84a"
-
-[[package]]
-name = "hashlink"
-version = "0.11.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "824e001ac4f3012dd16a264bec811403a67ca9deb6c102fc5049b32c4574b35f"
-dependencies = [
- "hashbrown 0.16.1",
-]
-
-[[package]]
-name = "heck"
-version = "0.4.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "95505c38b4572b2d910cecb0281560f54b440a19336cbbcb27bf6ce6adc6f5a8"
-
-[[package]]
-name = "heck"
-version = "0.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea"
-
-[[package]]
-name = "hermit-abi"
-version = "0.5.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e17592d60ebacc7d5e169f4663c5f84f9161cc90328abcfe8456f41e4dfcb284"
-
-[[package]]
-name = "hex"
-version = "0.4.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
-
-[[package]]
-name = "hkdf"
-version = "0.12.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7b5f8eb2ad728638ea2c7d47a21db23b7b58a72ed6a38256b8a1849f15fbbdf7"
-dependencies = [
- "hmac",
-]
-
-[[package]]
-name = "hmac"
-version = "0.12.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6c49c37c09c17a53d937dfbb742eb3a961d65a994e6bcdcf37e7399d0cc8ab5e"
-dependencies = [
- "digest",
-]
-
-[[package]]
-name = "html5ever"
-version = "0.39.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "46a1761807faccc9a19e86944bbf40610014066306f96edcdedc2fb714bcb7b8"
-dependencies = [
- "log",
- "markup5ever",
-]
-
-[[package]]
-name = "http"
-version = "1.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "918d3568bebf352712bc2ef3d46a8bcf1a75b373be6539de198e9105cbbf9ce0"
-dependencies = [
- "bytes",
- "itoa",
-]
-
-[[package]]
-name = "http-body"
-version = "1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ca2a8f2913ee65f60facd6a5905613afaa448497a0230cc41ce022d93290bc2c"
-dependencies = [
- "bytes",
- "http",
-]
-
-[[package]]
-name = "http-body-util"
-version = "0.1.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "23169fe34a5fbcdd3f3862e78fb9b6fccd5f02a6dc6f732547005d45631ce71c"
-dependencies = [
- "bytes",
- "futures-core",
- "http",
- "http-body",
- "pin-project-lite",
-]
-
-[[package]]
-name = "httparse"
-version = "1.10.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6dbf3de79e51f3d586ab4cb9d5c3e2c14aa28ed23d180cf89b4df0454a69cc87"
-
-[[package]]
-name = "hyper"
-version = "1.12.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2c3e324da4c95177d6291d4c8730197c0d1822f8a9766814a4a44fa5ab797c9c"
-dependencies = [
- "atomic-waker",
- "bytes",
- "futures-core",
- "http",
- "http-body",
- "httparse",
- "itoa",
- "pin-project-lite",
- "smallvec",
- "tokio",
- "want",
-]
-
-[[package]]
-name = "hyper-rustls"
-version = "0.27.10"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dfa8e654703247911e29c23fbeaa261834bd9bb74efba2f9acddc37bfb127f53"
-dependencies = [
- "http",
- "hyper",
- "hyper-util",
- "rustls",
- "tokio",
- "tokio-rustls",
- "tower-service",
-]
-
-[[package]]
-name = "hyper-util"
-version = "0.1.21"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ddc03d96684f9226b8a787cdb71488417b53ab5ea8fdb1dac946cb9431cc8bff"
-dependencies = [
- "base64 0.23.1",
- "bytes",
- "futures-channel",
- "futures-util",
- "http",
- "http-body",
- "httparse",
- "hyper",
- "ipnet",
- "libc",
- "percent-encoding",
- "pin-project-lite",
- "socket2",
- "system-configuration",
- "tokio",
- "tower-service",
- "tracing",
- "windows-registry",
-]
-
-[[package]]
-name = "iana-time-zone"
-version = "0.1.65"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e31bc9ad994ba00e440a8aa5c9ef0ec67d5cb5e5cb0cc7f8b744a35b389cc470"
-dependencies = [
- "android_system_properties",
- "core-foundation-sys",
- "iana-time-zone-haiku",
- "js-sys",
- "log",
- "wasm-bindgen",
- "windows-core",
-]
-
-[[package]]
-name = "iana-time-zone-haiku"
-version = "0.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f31827a206f56af32e590ba56d5d2d085f558508192593743f16b2306495269f"
-dependencies = [
- "cc",
-]
-
-[[package]]
-name = "ico"
-version = "0.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3e795dff5605e0f04bff85ca41b51a96b83e80b281e96231bcaaf1ac35103371"
-dependencies = [
- "byteorder",
- "png 0.17.16",
-]
-
-[[package]]
-name = "icu_collections"
-version = "2.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fa68d21081c4a05d5a901a1c62add574c77048b6a1c67be3b50ce0b60d4ca513"
-dependencies = [
- "displaydoc",
- "potential_utf",
- "utf8_iter",
- "yoke",
- "zerofrom",
- "zerovec",
-]
-
-[[package]]
-name = "icu_locale_core"
-version = "2.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d56e28588da92eee5c3201a6eff33fabdd49b62269c8938d4ff050ce4d900deb"
-dependencies = [
- "displaydoc",
- "litemap",
- "tinystr",
- "writeable",
- "zerovec",
-]
-
-[[package]]
-name = "icu_normalizer"
-version = "2.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "12f9cf5f235641ed274641dd81c3f28d870e276763d0797aeeab72317b1c646f"
-dependencies = [
- "icu_collections",
- "icu_normalizer_data",
- "icu_properties",
- "icu_provider",
- "smallvec",
- "zerovec",
-]
-
-[[package]]
-name = "icu_normalizer_data"
-version = "2.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1563da1ed3e0b3bf3d74c9b85917ac9c56464d2f57242270c09c9e752f8021a0"
-
-[[package]]
-name = "icu_properties"
-version = "2.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7e7ca276ad3145661a65914e6daf131ca5120cd3dcee8f8f3214b8875184a148"
-dependencies = [
- "displaydoc",
- "icu_collections",
- "icu_locale_core",
- "icu_properties_data",
- "icu_provider",
- "zerotrie",
- "zerovec",
-]
-
-[[package]]
-name = "icu_properties_data"
-version = "2.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e590f038c1464a96894fd6d10127e90a8be4509f56ff7ecef851b15cee0b7caa"
-
-[[package]]
-name = "icu_provider"
-version = "2.3.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d27bbb9d3abbefac45d55f647c9de1d44aafcd1186eb91879afef17c396c3e73"
-dependencies = [
- "displaydoc",
- "icu_locale_core",
- "writeable",
- "yoke",
- "zerofrom",
- "zerotrie",
- "zerovec",
-]
-
-[[package]]
-name = "ident_case"
-version = "1.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b9e0384b61958566e926dc50660321d12159025e767c18e043daf26b70104c39"
-
-[[package]]
-name = "idna"
-version = "1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3b0875f23caa03898994f6ddc501886a45c7d3d62d04d2d90788d47be1b1e4de"
-dependencies = [
- "idna_adapter",
- "smallvec",
- "utf8_iter",
-]
-
-[[package]]
-name = "idna_adapter"
-version = "1.2.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cb68373c0d6620ef8105e855e7745e18b0d00d3bdb07fb532e434244cdb9a714"
-dependencies = [
- "icu_normalizer",
- "icu_properties",
-]
-
-[[package]]
-name = "indexmap"
-version = "1.9.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bd070e393353796e801d209ad339e89596eb4c8d430d18ede6a1cced8fafbd99"
-dependencies = [
- "autocfg",
- "hashbrown 0.12.3",
- "serde",
-]
-
-[[package]]
-name = "indexmap"
-version = "2.14.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cc4e190f5d26ca7051642629da2c52fc03bde85a03197c99408dcd291734c855"
-dependencies = [
- "equivalent",
- "hashbrown 0.17.1",
- "serde",
- "serde_core",
-]
-
-[[package]]
-name = "infer"
-version = "0.22.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f4200d433cbd5178df7797c9c2e75b348b728e39631cf14520d1e2fc424201f4"
-dependencies = [
- "cfb",
-]
-
-[[package]]
-name = "inout"
-version = "0.1.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "879f10e63c20629ecabbb64a8010319738c66a5cd0c29b02d63d272b03751d01"
-dependencies = [
- "block-padding",
- "generic-array",
-]
-
-[[package]]
-name = "ipnet"
-version = "2.12.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "791930b43c0d5973160d90a8f3894509f2b273430f5c5c73b668636d0287c5c0"
-
-[[package]]
-name = "is-docker"
-version = "0.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "928bae27f42bc99b60d9ac7334e3a21d10ad8f1835a4e12ec3ec0464765ed1b3"
-dependencies = [
- "once_cell",
-]
-
-[[package]]
-name = "is-wsl"
-version = "0.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "173609498df190136aa7dea1a91db051746d339e18476eed5ca40521f02d7aa5"
-dependencies = [
- "is-docker",
- "once_cell",
-]
-
-[[package]]
-name = "itoa"
-version = "1.0.18"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"
-
-[[package]]
-name = "javascriptcore-rs"
-version = "1.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ca5671e9ffce8ffba57afc24070e906da7fc4b1ba66f2cabebf61bf2ea257fcc"
-dependencies = [
- "bitflags 1.3.2",
- "glib",
- "javascriptcore-rs-sys",
-]
-
-[[package]]
-name = "javascriptcore-rs-sys"
-version = "1.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "af1be78d14ffa4b75b66df31840478fef72b51f8c2465d4ca7c194da9f7a5124"
-dependencies = [
- "glib-sys",
- "gobject-sys",
- "libc",
- "system-deps",
-]
-
-[[package]]
-name = "jiff"
-version = "0.2.38"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b2b005715dcbeb0089a3c0dab99f2ff1cc3b2525323552703d648585d342a383"
-dependencies = [
- "defmt",
- "jiff-core",
- "jiff-static",
- "jiff-tzdb-platform",
- "log",
- "portable-atomic",
- "portable-atomic-util",
- "serde_core",
- "windows-link",
-]
-
-[[package]]
-name = "jiff-core"
-version = "0.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5e52fe76043ccecc9005d2305ebaadf7d7fc0cc89ca6baa10a94d6bc68c7128c"
-dependencies = [
- "defmt",
- "log",
-]
-
-[[package]]
-name = "jiff-static"
-version = "0.2.38"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2cc9817253cf7c7ee4684451bd327e88d6f3658014e54a29198625590650695c"
-dependencies = [
- "jiff-core",
- "proc-macro2",
- "quote",
- "syn 2.0.119",
-]
-
-[[package]]
-name = "jiff-tzdb"
-version = "0.1.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fa8377070c6bae868759445e5a77f66d84f0b72f3a054bfb00e6d038b8282da7"
-
-[[package]]
-name = "jiff-tzdb-platform"
-version = "0.1.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "875a5a69ac2bab1a891711cf5eccbec1ce0341ea805560dcd90b7a2e925132e8"
-dependencies = [
- "jiff-tzdb",
-]
-
-[[package]]
-name = "jni"
-version = "0.21.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1a87aa2bb7d2af34197c04845522473242e1aa17c12f4935d5856491a7fb8c97"
-dependencies = [
- "cesu8",
- "cfg-if",
- "combine",
- "jni-sys 0.3.1",
- "log",
- "thiserror 1.0.69",
- "walkdir",
- "windows-sys 0.45.0",
-]
-
-[[package]]
-name = "jni"
-version = "0.22.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5efd9a482cf3a427f00d6b35f14332adc7902ce91efb778580e180ff90fa3498"
-dependencies = [
- "cfg-if",
- "combine",
- "jni-macros",
- "jni-sys 0.4.1",
- "log",
- "simd_cesu8",
- "thiserror 2.0.21",
- "walkdir",
- "windows-link",
-]
-
-[[package]]
-name = "jni-macros"
-version = "0.22.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a00109accc170f0bdb141fed3e393c565b6f5e072365c3bd58f5b062591560a3"
-dependencies = [
- "proc-macro2",
- "quote",
- "rustc_version",
- "simd_cesu8",
- "syn 2.0.119",
-]
-
-[[package]]
-name = "jni-sys"
-version = "0.3.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "41a652e1f9b6e0275df1f15b32661cf0d4b78d4d87ddec5e0c3c20f097433258"
-dependencies = [
- "jni-sys 0.4.1",
-]
-
-[[package]]
-name = "jni-sys"
-version = "0.4.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c6377a88cb3910bee9b0fa88d4f42e1d2da8e79915598f65fb0c7ee14c878af2"
-dependencies = [
- "jni-sys-macros",
-]
-
-[[package]]
-name = "jni-sys-macros"
-version = "0.4.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "38c0b942f458fe50cdac086d2f946512305e5631e720728f2a61aabcd47a6264"
-dependencies = [
- "quote",
- "syn 2.0.119",
-]
-
-[[package]]
-name = "js-sys"
-version = "0.3.106"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7883d941dae510fb2d978fc3fe018c71c9e2892fd38854de3e8b92c2e5ad9cc5"
-dependencies = [
- "cfg-if",
- "futures-util",
- "wasm-bindgen",
-]
-
-[[package]]
-name = "json-patch"
-version = "4.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7421438de105a0827e44fadd05377727847d717c80ce29a229f85fd04c427b72"
-dependencies = [
- "jsonptr",
- "serde",
- "serde_json",
- "thiserror 2.0.21",
-]
-
-[[package]]
-name = "jsonptr"
-version = "0.7.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a5a3cc660ba5d72bce0b3bb295bf20847ccbb40fd423f3f05b61273672e561fe"
-dependencies = [
- "serde",
- "serde_json",
-]
-
-[[package]]
-name = "keyboard-types"
-version = "0.8.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0fbe853b403ae61a04233030ae8a79d94975281ed9770a1f9e246732b534b28d"
-dependencies = [
- "bitflags 2.13.2",
- "serde",
-]
-
-[[package]]
-name = "keyring"
-version = "3.6.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "eebcc3aff044e5944a8fbaf69eb277d11986064cba30c468730e8b9909fb551c"
-dependencies = [
- "byteorder",
- "dbus-secret-service",
- "log",
- "secret-service",
- "security-framework 2.11.1",
- "security-framework 3.7.0",
- "windows-sys 0.60.2",
- "zeroize",
-]
-
-[[package]]
-name = "libappindicator"
-version = "0.9.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "03589b9607c868cc7ae54c0b2a22c8dc03dd41692d48f2d7df73615c6a95dc0a"
-dependencies = [
- "glib",
- "gtk",
- "gtk-sys",
- "libappindicator-sys",
- "log",
-]
-
-[[package]]
-name = "libappindicator-sys"
-version = "0.9.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6e9ec52138abedcc58dc17a7c6c0c00a2bdb4f3427c7f63fa97fd0d859155caf"
-dependencies = [
- "gtk-sys",
- "libloading",
- "once_cell",
-]
-
-[[package]]
-name = "libc"
-version = "0.2.190"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ce5d3ddc6d3fa000eb1536d85e147bfe31aacaba692ed6a876f95cb7c855be78"
-
-[[package]]
-name = "libdbus-sys"
-version = "0.2.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "328c4789d42200f1eeec05bd86c9c13c7f091d2ba9a6ea35acdf51f31bc0f043"
-dependencies = [
- "pkg-config",
-]
-
-[[package]]
-name = "libloading"
-version = "0.7.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b67380fd3b2fbe7527a606e18729d21c6f3951633d0500574c4dc22d2d638b9f"
-dependencies = [
- "cfg-if",
- "winapi",
-]
-
-[[package]]
-name = "libredox"
-version = "0.1.25"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "61ff90caf6077a803a240f62fdbe88645a890bbca49ef8174c3cb0404362171d"
-dependencies = [
- "libc",
-]
-
-[[package]]
-name = "libsqlite3-sys"
-version = "0.36.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "95b4103cffefa72eb8428cb6b47d6627161e51c2739fc5e3b734584157bc642a"
-dependencies = [
- "cc",
- "pkg-config",
- "vcpkg",
-]
-
-[[package]]
-name = "linux-raw-sys"
-version = "0.12.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53"
-
-[[package]]
-name = "litemap"
-version = "0.8.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "47d9d19d1d6efa0109d2f65ff4c85cddd50bd572e5a00127ab10987290bcefae"
-
-[[package]]
-name = "lock_api"
-version = "0.4.14"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "224399e74b87b5f3557511d98dff8b14089b3dadafcab6bb93eab67d3aace965"
-dependencies = [
- "scopeguard",
-]
-
-[[package]]
-name = "log"
-version = "0.4.34"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f9f8bd3e56ce4dfc153cf470fffbfa98c7620958b312ca5c3a4b8d5181fd13c6"
-
-[[package]]
-name = "mac-notification-sys"
-version = "0.6.15"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fd604973958ddcc11b561193c0fb96ba146506ef2f231ef2e7c35fd2cbc9beca"
-dependencies = [
- "cc",
- "log",
- "objc2",
- "objc2-foundation",
- "time",
- "uuid",
-]
-
-[[package]]
-name = "markup5ever"
-version = "0.39.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7122d987ec5f704ee56f6e5b41a7d93722e9aae27ae07cafa4036c4d3f9757de"
-dependencies = [
- "log",
- "tendril",
- "web_atoms",
-]
-
-[[package]]
-name = "memchr"
-version = "2.8.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98"
-
-[[package]]
-name = "memoffset"
-version = "0.9.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "488016bfae457b036d996092f6cb448677611ce4449e970ceaf42695203f218a"
-dependencies = [
- "autocfg",
-]
-
-[[package]]
-name = "mime"
-version = "0.3.17"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6877bb514081ee2a7ff5ef9de3281f14a4dd4bceac4c09388074a6b5df8a139a"
-
-[[package]]
-name = "minisign-verify"
-version = "0.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "871285dc19d8d0ebe0eef3d0e99a205f2a71363b122632cbbfa4a6c370a960ce"
-
-[[package]]
-name = "miniz_oxide"
-version = "0.8.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1fa76a2c86f704bdb222d66965fb3d63269ce38518b83cb0575fca855ebb6316"
-dependencies = [
- "adler2",
- "simd-adler32",
-]
-
-[[package]]
-name = "miniz_oxide"
-version = "0.9.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b63fbc4a50860e98e7b2aa7804ded1db5cbc3aff9193adaff57a6931bf7c4b4c"
-dependencies = [
- "adler2",
- "simd-adler32",
-]
-
-[[package]]
-name = "mio"
-version = "1.2.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1788edb87fdc09c7e26304471e2f5be8cdefb1b6930d6e3985fc02ff53bf86ee"
-dependencies = [
- "libc",
- "wasi",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "muda"
-version = "0.20.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cca139e57da4383727f189e43e66e84fa372347027fc996f9f1a007ec0a37996"
-dependencies = [
- "crossbeam-channel",
- "dpi",
- "gtk",
- "keyboard-types",
- "objc2",
- "objc2-app-kit",
- "objc2-core-foundation",
- "objc2-foundation",
- "once_cell",
- "png 0.18.1",
- "serde",
- "thiserror 2.0.21",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "multiversion_no_op"
-version = "1.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "743fb55ba31b18fb1ecef6bdc9aa2743314978ac084044301a7eee33fb99a20d"
-
-[[package]]
-name = "ndk"
-version = "0.9.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c3f42e7bbe13d351b6bead8286a43aac9534b82bd3cc43e47037f012ebfd62d4"
-dependencies = [
- "bitflags 2.13.2",
- "jni-sys 0.3.1",
- "log",
- "ndk-sys",
- "num_enum",
- "raw-window-handle",
- "thiserror 1.0.69",
-]
-
-[[package]]
-name = "ndk-context"
-version = "0.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "27b02d87554356db9e9a873add8782d4ea6e3e58ea071a9adb9a2e8ddb884a8b"
-
-[[package]]
-name = "ndk-sys"
-version = "0.6.0+11769913"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ee6cda3051665f1fb8d9e08fc35c96d5a244fb1be711a03b71118828afc9a873"
-dependencies = [
- "jni-sys 0.3.1",
-]
-
-[[package]]
-name = "new_debug_unreachable"
-version = "1.0.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "650eef8c711430f1a879fdd01d4745a7deea475becfb90269c06775983bbf086"
-
-[[package]]
-name = "nix"
-version = "0.29.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "71e2746dc3a24dd78b3cfcb7be93368c6de9963d30f43a6a73998a9cf4b17b46"
-dependencies = [
- "bitflags 2.13.2",
- "cfg-if",
- "cfg_aliases",
- "libc",
- "memoffset",
-]
-
-[[package]]
-name = "notify-rust"
-version = "4.18.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4587364a9a0074333429b3df75a30a205340c56a536ca3eb6ca0e59b87bbf8af"
-dependencies = [
- "futures-lite",
- "log",
- "mac-notification-sys",
- "serde",
- "tauri-winrt-notification",
- "zbus 5.19.0",
-]
-
-[[package]]
-name = "num"
-version = "0.4.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "35bd024e8b2ff75562e5f34e7f4905839deb4b22955ef5e73d2fea1b9813cb23"
-dependencies = [
- "num-bigint",
- "num-complex",
- "num-integer",
- "num-iter",
- "num-rational",
- "num-traits",
-]
-
-[[package]]
-name = "num-bigint"
-version = "0.4.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c89e69e7e0f03bea5ef08013795c25018e101932225a656383bd384495ecc367"
-dependencies = [
- "num-integer",
- "num-traits",
-]
-
-[[package]]
-name = "num-complex"
-version = "0.4.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "73f88a1307638156682bada9d7604135552957b7818057dcef22705b4d509495"
-dependencies = [
- "num-traits",
-]
-
-[[package]]
-name = "num-conv"
-version = "0.2.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "521739c6d2bac4aa25192232afe6841231376b2b26d4d9fae5ecf8ca5772e441"
-
-[[package]]
-name = "num-integer"
-version = "0.1.47"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7ce2d95d4b3734dc35aa2f45e1aa22cd416814592a4f9d9205e11affd5b8e10b"
-dependencies = [
- "num-traits",
-]
-
-[[package]]
-name = "num-iter"
-version = "0.1.46"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c92800bd69a1eac91786bcfe9da64a897eb72911b8dc3095decbd07429e8048b"
-dependencies = [
- "num-integer",
- "num-traits",
-]
-
-[[package]]
-name = "num-rational"
-version = "0.4.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f83d14da390562dca69fc84082e73e548e1ad308d24accdedd2720017cb37824"
-dependencies = [
- "num-bigint",
- "num-integer",
- "num-traits",
-]
-
-[[package]]
-name = "num-traits"
-version = "0.2.19"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841"
-dependencies = [
- "autocfg",
-]
-
-[[package]]
-name = "num_enum"
-version = "0.7.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5d0bca838442ec211fa11de3a8b0e0e8f3a4522575b5c4c06ed722e005036f26"
-dependencies = [
- "num_enum_derive",
- "rustversion",
-]
-
-[[package]]
-name = "num_enum_derive"
-version = "0.7.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "680998035259dcfcafe653688bf2aa6d3e2dc05e98be6ab46afb089dc84f1df8"
-dependencies = [
- "proc-macro-crate 3.5.0",
- "proc-macro2",
- "quote",
- "syn 2.0.119",
-]
-
-[[package]]
-name = "objc2"
-version = "0.6.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "08849bbd4767dfae9457696856ae1c84fe4e0281bbe4a7abff2d0e06fb7981f8"
-dependencies = [
- "objc2-encode",
- "objc2-exception-helper",
-]
-
-[[package]]
-name = "objc2-app-kit"
-version = "0.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d49e936b501e5c5bf01fda3a9452ff86dc3ea98ad5f283e1455153142d97518c"
-dependencies = [
- "bitflags 2.13.2",
- "block2",
- "objc2",
- "objc2-core-foundation",
- "objc2-foundation",
- "objc2-quartz-core",
-]
-
-[[package]]
-name = "objc2-cloud-kit"
-version = "0.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "73ad74d880bb43877038da939b7427bba67e9dd42004a18b809ba7d87cee241c"
-dependencies = [
- "bitflags 2.13.2",
- "objc2",
- "objc2-foundation",
-]
-
-[[package]]
-name = "objc2-core-data"
-version = "0.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0b402a653efbb5e82ce4df10683b6b28027616a2715e90009947d50b8dd298fa"
-dependencies = [
- "objc2",
- "objc2-foundation",
-]
-
-[[package]]
-name = "objc2-core-foundation"
-version = "0.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2a180dd8642fa45cdb7dd721cd4c11b1cadd4929ce112ebd8b9f5803cc79d536"
-dependencies = [
- "bitflags 2.13.2",
- "dispatch2",
- "objc2",
-]
-
-[[package]]
-name = "objc2-core-graphics"
-version = "0.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e022c9d066895efa1345f8e33e584b9f958da2fd4cd116792e15e07e4720a807"
-dependencies = [
- "bitflags 2.13.2",
- "dispatch2",
- "objc2",
- "objc2-core-foundation",
- "objc2-io-surface",
-]
-
-[[package]]
-name = "objc2-core-image"
-version = "0.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e5d563b38d2b97209f8e861173de434bd0214cf020e3423a52624cd1d989f006"
-dependencies = [
- "objc2",
- "objc2-foundation",
-]
-
-[[package]]
-name = "objc2-core-location"
-version = "0.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ca347214e24bc973fc025fd0d36ebb179ff30536ed1f80252706db19ee452009"
-dependencies = [
- "objc2",
- "objc2-foundation",
-]
-
-[[package]]
-name = "objc2-core-text"
-version = "0.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0cde0dfb48d25d2b4862161a4d5fcc0e3c24367869ad306b0c9ec0073bfed92d"
-dependencies = [
- "bitflags 2.13.2",
- "objc2",
- "objc2-core-foundation",
- "objc2-core-graphics",
-]
-
-[[package]]
-name = "objc2-encode"
-version = "4.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ef25abbcd74fb2609453eb695bd2f860d389e457f67dc17cafc8b8cbc89d0c33"
-
-[[package]]
-name = "objc2-exception-helper"
-version = "0.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c7a1c5fbb72d7735b076bb47b578523aedc40f3c439bea6dfd595c089d79d98a"
-dependencies = [
- "cc",
-]
-
-[[package]]
-name = "objc2-foundation"
-version = "0.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e3e0adef53c21f888deb4fa59fc59f7eb17404926ee8a6f59f5df0fd7f9f3272"
-dependencies = [
- "bitflags 2.13.2",
- "block2",
- "libc",
- "objc2",
- "objc2-core-foundation",
-]
-
-[[package]]
-name = "objc2-io-surface"
-version = "0.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "180788110936d59bab6bd83b6060ffdfffb3b922ba1396b312ae795e1de9d81d"
-dependencies = [
- "bitflags 2.13.2",
- "objc2",
- "objc2-core-foundation",
-]
-
-[[package]]
-name = "objc2-osa-kit"
-version = "0.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f112d1746737b0da274ef79a23aac283376f335f4095a083a267a082f21db0c0"
-dependencies = [
- "bitflags 2.13.2",
- "objc2",
- "objc2-app-kit",
- "objc2-foundation",
-]
-
-[[package]]
-name = "objc2-quartz-core"
-version = "0.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "96c1358452b371bf9f104e21ec536d37a650eb10f7ee379fff67d2e08d537f1f"
-dependencies = [
- "bitflags 2.13.2",
- "objc2",
- "objc2-core-foundation",
- "objc2-foundation",
-]
-
-[[package]]
-name = "objc2-ui-kit"
-version = "0.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d87d638e33c06f577498cbcc50491496a3ed4246998a7fbba7ccb98b1e7eab22"
-dependencies = [
- "bitflags 2.13.2",
- "block2",
- "objc2",
- "objc2-cloud-kit",
- "objc2-core-data",
- "objc2-core-foundation",
- "objc2-core-graphics",
- "objc2-core-image",
- "objc2-core-location",
- "objc2-core-text",
- "objc2-foundation",
- "objc2-quartz-core",
- "objc2-user-notifications",
-]
-
-[[package]]
-name = "objc2-user-notifications"
-version = "0.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9df9128cbbfef73cda168416ccf7f837b62737d748333bfe9ab71c245d76613e"
-dependencies = [
- "objc2",
- "objc2-foundation",
-]
-
-[[package]]
-name = "objc2-web-kit"
-version = "0.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b2e5aaab980c433cf470df9d7af96a7b46a9d892d521a2cbbb2f8a4c16751e7f"
-dependencies = [
- "bitflags 2.13.2",
- "block2",
- "objc2",
- "objc2-app-kit",
- "objc2-core-foundation",
- "objc2-foundation",
-]
-
-[[package]]
-name = "once_cell"
-version = "1.21.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50"
-
-[[package]]
-name = "open"
-version = "5.4.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "aa576c76302b7b808eecc68061e67336c47833ef9d22caa74dda10fa9675eebc"
-dependencies = [
- "dunce",
- "is-wsl",
- "libc",
-]
-
-[[package]]
-name = "openssl-probe"
-version = "0.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7c87def4c32ab89d880effc9e097653c8da5d6ef28e6b539d313baaacfbafcbe"
-
-[[package]]
-name = "option-ext"
-version = "0.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "04744f49eae99ab78e0d5c0b603ab218f515ea8cfe5a456d7629ad883a3b6e7d"
-
-[[package]]
-name = "ordered-multimap"
-version = "0.7.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "49203cdcae0030493bad186b28da2fa25645fa276a51b6fec8010d281e02ef79"
-dependencies = [
- "dlv-list",
- "hashbrown 0.14.5",
-]
-
-[[package]]
-name = "ordered-stream"
-version = "0.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9aa2b01e1d916879f73a53d01d1d6cee68adbb31d6d9177a8cfce093cced1d50"
-dependencies = [
- "futures-core",
- "pin-project-lite",
-]
-
-[[package]]
-name = "os_pipe"
-version = "1.2.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7d8fae84b431384b68627d0f9b3b1245fcf9f46f6c0e3dc902e9dce64edd1967"
-dependencies = [
- "libc",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "osakit"
-version = "0.3.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "732c71caeaa72c065bb69d7ea08717bd3f4863a4f451402fc9513e29dbd5261b"
-dependencies = [
- "objc2",
- "objc2-foundation",
- "objc2-osa-kit",
- "serde",
- "serde_json",
- "thiserror 2.0.21",
-]
-
-[[package]]
-name = "pango"
-version = "0.18.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7ca27ec1eb0457ab26f3036ea52229edbdb74dee1edd29063f5b9b010e7ebee4"
-dependencies = [
- "gio",
- "glib",
- "libc",
- "once_cell",
- "pango-sys",
-]
-
-[[package]]
-name = "pango-sys"
-version = "0.18.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "436737e391a843e5933d6d9aa102cb126d501e815b83601365a948a518555dc5"
-dependencies = [
- "glib-sys",
- "gobject-sys",
- "libc",
- "system-deps",
-]
-
-[[package]]
-name = "parking"
-version = "2.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f38d5652c16fde515bb1ecef450ab0f6a219d619a7274976324d5e377f7dceba"
-
-[[package]]
-name = "parking_lot"
-version = "0.12.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "93857453250e3077bd71ff98b6a65ea6621a19bb0f559a85248955ac12c45a1a"
-dependencies = [
- "lock_api",
- "parking_lot_core",
-]
-
-[[package]]
-name = "parking_lot_core"
-version = "0.9.12"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2621685985a2ebf1c516881c026032ac7deafcda1a2c9b7850dc81e3dfcb64c1"
-dependencies = [
- "cfg-if",
- "libc",
- "redox_syscall",
- "smallvec",
- "windows-link",
-]
-
-[[package]]
-name = "percent-encoding"
-version = "2.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9b4f627cb1b25917193a259e49bdad08f671f8d9708acfd5fe0a8c1455d87220"
-
-[[package]]
-name = "phf"
-version = "0.13.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c1562dc717473dbaa4c1f85a36410e03c047b2e7df7f45ee938fbef64ae7fadf"
-dependencies = [
- "phf_macros",
- "phf_shared",
- "serde",
-]
-
-[[package]]
-name = "phf_codegen"
-version = "0.13.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "49aa7f9d80421bca176ca8dbfebe668cc7a2684708594ec9f3c0db0805d5d6e1"
-dependencies = [
- "phf_generator",
- "phf_shared",
-]
-
-[[package]]
-name = "phf_generator"
-version = "0.13.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "135ace3a761e564ec88c03a77317a7c6b80bb7f7135ef2544dbe054243b89737"
-dependencies = [
- "fastrand",
- "phf_shared",
-]
-
-[[package]]
-name = "phf_macros"
-version = "0.13.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "812f032b54b1e759ccd5f8b6677695d5268c588701effba24601f6932f8269ef"
-dependencies = [
- "phf_generator",
- "phf_shared",
- "proc-macro2",
- "quote",
- "syn 2.0.119",
-]
-
-[[package]]
-name = "phf_shared"
-version = "0.13.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e57fef6bc5981e38c2ce2d63bfa546861309f875b8a75f092d1d54ae2d64f266"
-dependencies = [
- "siphasher",
-]
-
-[[package]]
-name = "pin-project-lite"
-version = "0.2.17"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a89322df9ebe1c1578d689c92318e070967d1042b512afbe49518723f4e6d5cd"
-
-[[package]]
-name = "piper"
-version = "0.2.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c835479a4443ded371d6c535cbfd8d31ad92c5d23ae9770a61bc155e4992a3c1"
-dependencies = [
- "atomic-waker",
- "fastrand",
- "futures-io",
-]
-
-[[package]]
-name = "pkg-config"
-version = "0.3.34"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f6b464fbc74e149a392436b17d523f769e057cb6877f6a5c4618bc6f11800548"
-
-[[package]]
-name = "plist"
-version = "1.10.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2896bade328c13f7042a297ea5ac5b0951f6cf989dea5f32c2fd98da398195cb"
-dependencies = [
- "base64 0.23.1",
- "indexmap 2.14.2",
- "quick-xml",
- "serde",
- "time",
-]
-
-[[package]]
-name = "png"
-version = "0.17.16"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "82151a2fc869e011c153adc57cf2789ccb8d9906ce52c0b39a6b5697749d7526"
-dependencies = [
- "bitflags 1.3.2",
- "crc32fast",
- "fdeflate",
- "flate2",
- "miniz_oxide 0.8.9",
-]
-
-[[package]]
-name = "png"
-version = "0.18.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "60769b8b31b2a9f263dae2776c37b1b28ae246943cf719eb6946a1db05128a61"
-dependencies = [
- "bitflags 2.13.2",
- "crc32fast",
- "fdeflate",
- "flate2",
- "miniz_oxide 0.8.9",
-]
-
-[[package]]
-name = "polling"
-version = "3.11.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5d0e4f59085d47d8241c88ead0f274e8a0cb551f3625263c05eb8dd897c34218"
-dependencies = [
- "cfg-if",
- "concurrent-queue",
- "hermit-abi",
- "pin-project-lite",
- "rustix",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "portable-atomic"
-version = "1.15.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "05c8b63e8d9609db387f0324918f81d68fe27748f084ef092fb35954d0539a85"
-
-[[package]]
-name = "portable-atomic-util"
-version = "0.2.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "10ab3eb7f3becc3a1cbc4f2c6f20267996cfc1a6467a873763411b136a122715"
-dependencies = [
- "portable-atomic",
-]
-
-[[package]]
-name = "potential_utf"
-version = "0.1.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d83eb9bc6d8e5cf568e7a1101d60ee05e81ed50ea106026f3d18deeb046d7661"
-dependencies = [
- "zerovec",
-]
-
-[[package]]
-name = "powerfmt"
-version = "0.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4a6394b9e965e73d0a289ee54f589087e2c676aedf60885baf52c76b771e4958"
-
-[[package]]
-name = "ppv-lite86"
-version = "0.2.21"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9"
-dependencies = [
- "zerocopy",
-]
-
-[[package]]
-name = "precomputed-hash"
-version = "0.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "925383efa346730478fb4838dbe9137d2a47675ad789c546d150a6e1dd4ab31c"
-
-[[package]]
-name = "proc-macro-crate"
-version = "1.3.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7f4c021e1093a56626774e81216a4ce732a735e5bad4868a03f3ed65ca0c3919"
-dependencies = [
- "once_cell",
- "toml_edit 0.19.15",
-]
-
-[[package]]
-name = "proc-macro-crate"
-version = "2.0.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b00f26d3400549137f92511a46ac1cd8ce37cb5598a96d382381458b992a5d24"
-dependencies = [
- "toml_datetime 0.6.3",
- "toml_edit 0.20.2",
-]
-
-[[package]]
-name = "proc-macro-crate"
-version = "3.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e67ba7e9b2b56446f1d419b1d807906278ffa1a658a8a5d8a39dcb1f5a78614f"
-dependencies = [
- "toml_edit 0.25.17+spec-1.1.0",
-]
-
-[[package]]
-name = "proc-macro-error"
-version = "1.0.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "da25490ff9892aab3fcf7c36f08cfb902dd3e71ca0f9f9517bea02a73a5ce38c"
-dependencies = [
- "proc-macro-error-attr",
- "proc-macro2",
- "quote",
- "syn 1.0.109",
- "version_check",
-]
-
-[[package]]
-name = "proc-macro-error-attr"
-version = "1.0.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a1be40180e52ecc98ad80b184934baf3d0d29f979574e439af5a55274b35f869"
-dependencies = [
- "proc-macro2",
- "quote",
- "version_check",
-]
-
-[[package]]
-name = "proc-macro2"
-version = "1.0.107"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9"
-dependencies = [
- "unicode-ident",
-]
-
-[[package]]
-name = "quick-xml"
-version = "0.42.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "41b1177fdf999d2321d3fb46ff47159d9c1fb9ad66a4879f8c50a0b504615e9b"
-dependencies = [
- "memchr",
-]
-
-[[package]]
-name = "quote"
-version = "1.0.47"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001"
-dependencies = [
- "proc-macro2",
-]
-
-[[package]]
-name = "r-efi"
-version = "5.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
-
-[[package]]
-name = "r-efi"
-version = "6.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf"
-
-[[package]]
-name = "rand"
-version = "0.8.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e058c7de0b26af77780c769414d6257830bb240f3c38477dbc2c16e5f54d6d4c"
-dependencies = [
- "libc",
- "rand_chacha 0.3.1",
- "rand_core 0.6.4",
-]
-
-[[package]]
-name = "rand"
-version = "0.9.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b9ef1d0d795eb7d84685bca4f72f3649f064e6641543d3a8c415898726a57b41"
-dependencies = [
- "rand_chacha 0.9.0",
- "rand_core 0.9.5",
-]
-
-[[package]]
-name = "rand_chacha"
-version = "0.3.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88"
-dependencies = [
- "ppv-lite86",
- "rand_core 0.6.4",
-]
-
-[[package]]
-name = "rand_chacha"
-version = "0.9.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d3022b5f1df60f26e1ffddd6c66e8aa15de382ae63b3a0c1bfc0e4d3e3f325cb"
-dependencies = [
- "ppv-lite86",
- "rand_core 0.9.5",
-]
-
-[[package]]
-name = "rand_core"
-version = "0.6.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c"
-dependencies = [
- "getrandom 0.2.17",
-]
-
-[[package]]
-name = "rand_core"
-version = "0.9.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "76afc826de14238e6e8c374ddcc1fa19e374fd8dd986b0d2af0d02377261d83c"
-dependencies = [
- "getrandom 0.3.4",
-]
-
-[[package]]
-name = "raw-window-handle"
-version = "0.6.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "20675572f6f24e9e76ef639bc5552774ed45f1c30e2951e1e99c59888861c539"
-
-[[package]]
-name = "redox_syscall"
-version = "0.5.18"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ed2bf2547551a7053d6fdfafda3f938979645c44812fbfcda098faae3f1a362d"
-dependencies = [
- "bitflags 2.13.2",
-]
-
-[[package]]
-name = "redox_users"
-version = "0.5.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "60dc65c0ff1a7ae1294b0c67b9f14baf70b644404010370171787bfac1038fc0"
-dependencies = [
- "libredox",
- "thiserror 2.0.21",
-]
-
-[[package]]
-name = "ref-cast"
-version = "1.0.27"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7e440fb4e4b4147295338efb76001ab9e4efc0e5839df2c47fc5ac2381d365c3"
-dependencies = [
- "ref-cast-impl",
-]
-
-[[package]]
-name = "ref-cast-impl"
-version = "1.0.27"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "92ecd8964f8453721699a1ed72037b0db49ce2f5a5138486ee89bed6f67cdf3a"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 3.0.7",
-]
-
-[[package]]
-name = "regex"
-version = "1.13.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f020237b6c8eed93db2e2cb53c00c60a8e1bc73da7d073199a1180401450218d"
-dependencies = [
- "aho-corasick",
- "memchr",
- "regex-automata",
- "regex-syntax",
-]
-
-[[package]]
-name = "regex-automata"
-version = "0.4.18"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ad8553b9b26413251cbf30e620595c7a41b3887f03da04579c0e6b0d6a06b4b2"
-dependencies = [
- "aho-corasick",
- "memchr",
- "regex-syntax",
-]
-
-[[package]]
-name = "regex-syntax"
-version = "0.8.11"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d6f6ff9a378485b298a5286656da665ba74413d36db0979633275d2e708145d4"
-
-[[package]]
-name = "reqwest"
-version = "0.13.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "16a1cfa75cc186dd73d5818e510e042e40927bccc9c236b061cea97e1eb08029"
-dependencies = [
- "base64 0.23.1",
- "bytes",
- "futures-core",
- "futures-util",
- "http",
- "http-body",
- "http-body-util",
- "hyper",
- "hyper-rustls",
- "hyper-util",
- "js-sys",
- "log",
- "percent-encoding",
- "pin-project-lite",
- "rustls",
- "rustls-pki-types",
- "rustls-platform-verifier",
- "serde",
- "serde_json",
- "sync_wrapper",
- "tokio",
- "tokio-rustls",
- "tokio-util",
- "tower",
- "tower-http",
- "tower-service",
- "url",
- "wasm-bindgen",
- "wasm-bindgen-futures",
- "wasm-streams",
- "web-sys",
-]
-
-[[package]]
-name = "rfd"
-version = "0.16.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a15ad77d9e70a92437d8f74c35d99b4e4691128df018833e99f90bcd36152672"
-dependencies = [
- "block2",
- "dispatch2",
- "glib-sys",
- "gobject-sys",
- "gtk-sys",
- "js-sys",
- "log",
- "objc2",
- "objc2-app-kit",
- "objc2-core-foundation",
- "objc2-foundation",
- "raw-window-handle",
- "wasm-bindgen",
- "wasm-bindgen-futures",
- "web-sys",
- "windows-sys 0.60.2",
-]
-
-[[package]]
-name = "ring"
-version = "0.17.14"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a4689e6c2294d81e88dc6261c768b63bc4fcdb852be6d1352498b114f61383b7"
-dependencies = [
- "cc",
- "cfg-if",
- "getrandom 0.2.17",
- "libc",
- "untrusted",
- "windows-sys 0.52.0",
-]
-
-[[package]]
-name = "rsqlite-vfs"
-version = "0.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c51c9ae4df8a7fba42103df5c621fa3c37eccf3a3c650879e90fc48b11cc192c"
-dependencies = [
- "hashbrown 0.16.1",
- "thiserror 2.0.21",
-]
-
-[[package]]
-name = "rusqlite"
-version = "0.38.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f1c93dd1c9683b438c392c492109cb702b8090b2bfc8fed6f6e4eb4523f17af3"
-dependencies = [
- "bitflags 2.13.2",
- "fallible-iterator",
- "fallible-streaming-iterator",
- "hashlink",
- "libsqlite3-sys",
- "smallvec",
- "sqlite-wasm-rs",
-]
-
-[[package]]
-name = "rust-ini"
-version = "0.21.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "796e8d2b6696392a43bea58116b667fb4c29727dc5abd27d6acf338bb4f688c7"
-dependencies = [
- "cfg-if",
- "ordered-multimap",
-]
-
-[[package]]
-name = "rustc-hash"
-version = "2.1.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6b1e7f9a428571be2dc5bc0505c13fb6bf936822b894ec87abf8a08a4e51742d"
-
-[[package]]
-name = "rustc_version"
-version = "0.4.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92"
-dependencies = [
- "semver",
-]
-
-[[package]]
-name = "rustix"
-version = "1.1.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "891efababe418670775f199f0d233d84843c227a0949a883ce15b37c78d6629d"
-dependencies = [
- "bitflags 2.13.2",
- "errno",
- "libc",
- "linux-raw-sys",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "rustls"
-version = "0.23.45"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0d41d731c7d2f962d1ccc364cec258de3c0e93b38c2fb3ba97ac74513048d634"
-dependencies = [
- "once_cell",
- "ring",
- "rustls-pki-types",
- "rustls-webpki",
- "subtle",
- "zeroize",
-]
-
-[[package]]
-name = "rustls-native-certs"
-version = "0.8.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dab5152771c58876a2146916e53e35057e1a4dfa2b9df0f0305b07f611fdea4d"
-dependencies = [
- "openssl-probe",
- "rustls-pki-types",
- "schannel",
- "security-framework 3.7.0",
-]
-
-[[package]]
-name = "rustls-pki-types"
-version = "1.15.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2f4925028c7eb5d1fcdaf196971378ed9d2c1c4efc7dc5d011256f76c99c0a96"
-dependencies = [
- "zeroize",
-]
-
-[[package]]
-name = "rustls-platform-verifier"
-version = "0.7.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1167586491e2b18b8bfbb293e8180ec17c201c4f076d7cb3070ca964e7598f98"
-dependencies = [
- "core-foundation 0.10.1",
- "core-foundation-sys",
- "jni 0.22.4",
- "log",
- "once_cell",
- "rustls",
- "rustls-native-certs",
- "rustls-platform-verifier-android",
- "rustls-webpki",
- "security-framework 3.7.0",
- "security-framework-sys",
- "webpki-root-certs",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "rustls-platform-verifier-android"
-version = "0.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "eec689c0bc40ff2458a5977b6619cb718087084a18e02a131c599b62d05e1a5f"
-
-[[package]]
-name = "rustls-webpki"
-version = "0.103.15"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f3c3cf1d8b1e7d4927e2d154c3fcb02979afb9939629c62cd9048d4f07b60ac2"
-dependencies = [
- "ring",
- "rustls-pki-types",
- "untrusted",
-]
-
-[[package]]
-name = "rustversion"
-version = "1.0.23"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cf54715a573b99ac80df0bc206da022bcd442c974952c7b9720069370852e21f"
-
-[[package]]
-name = "same-file"
-version = "1.0.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "93fc1dc3aaa9bfed95e02e6eadabb4baf7e3078b0bd1b4d7b6b0b68378900502"
-dependencies = [
- "winapi-util",
-]
-
-[[package]]
-name = "schannel"
-version = "0.1.29"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "91c1b7e4904c873ef0710c1f407dde2e6287de2bebc1bbbf7d430bb7cbffd939"
-dependencies = [
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "schemars"
-version = "0.8.22"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3fbf2ae1b8bc8e02df939598064d22402220cd5bbcca1c76f7d6a310974d5615"
-dependencies = [
- "dyn-clone",
- "indexmap 1.9.3",
- "schemars_derive",
- "serde",
- "serde_json",
- "url",
- "uuid",
-]
-
-[[package]]
-name = "schemars"
-version = "0.9.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4cd191f9397d57d581cddd31014772520aa448f65ef991055d7f61582c65165f"
-dependencies = [
- "dyn-clone",
- "ref-cast",
- "serde",
- "serde_json",
-]
-
-[[package]]
-name = "schemars"
-version = "1.2.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "687274d293b6cdc6e73e0fee520bf2049650090d7164f87672d212a3c530cf4a"
-dependencies = [
- "dyn-clone",
- "ref-cast",
- "serde",
- "serde_json",
-]
-
-[[package]]
-name = "schemars_derive"
-version = "0.8.22"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32e265784ad618884abaea0600a9adf15393368d840e0222d101a072f3f7534d"
-dependencies = [
- "proc-macro2",
- "quote",
- "serde_derive_internals",
- "syn 2.0.119",
-]
-
-[[package]]
-name = "scopeguard"
-version = "1.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49"
-
-[[package]]
-name = "secret-service"
-version = "4.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e4d35ad99a181be0a60ffcbe85d680d98f87bdc4d7644ade319b87076b9dbfd4"
-dependencies = [
- "aes",
- "cbc",
- "futures-util",
- "generic-array",
- "hkdf",
- "num",
- "once_cell",
- "rand 0.8.8",
- "serde",
- "sha2",
- "zbus 4.4.0",
-]
-
-[[package]]
-name = "security-framework"
-version = "2.11.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "897b2245f0b511c87893af39b033e5ca9cce68824c4d7e7630b5a1d339658d02"
-dependencies = [
- "bitflags 2.13.2",
- "core-foundation 0.9.4",
- "core-foundation-sys",
- "libc",
- "security-framework-sys",
-]
-
-[[package]]
-name = "security-framework"
-version = "3.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b7f4bc775c73d9a02cde8bf7b2ec4c9d12743edf609006c7facc23998404cd1d"
-dependencies = [
- "bitflags 2.13.2",
- "core-foundation 0.10.1",
- "core-foundation-sys",
- "libc",
- "security-framework-sys",
-]
-
-[[package]]
-name = "security-framework-sys"
-version = "2.17.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6ce2691df843ecc5d231c0b14ece2acc3efb62c0a398c7e1d875f3983ce020e3"
-dependencies = [
- "core-foundation-sys",
- "libc",
-]
-
-[[package]]
-name = "selectors"
-version = "0.38.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8adfa1c298912827b8a28b223b3b874357397ae706e6190acd9bf28cee99114d"
-dependencies = [
- "bitflags 2.13.2",
- "cssparser",
- "derive_more",
- "log",
- "new_debug_unreachable",
- "phf",
- "phf_codegen",
- "precomputed-hash",
- "rustc-hash",
- "servo_arc",
- "smallvec",
-]
-
-[[package]]
-name = "semver"
-version = "1.0.28"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8a7852d02fc848982e0c167ef163aaff9cd91dc640ba85e263cb1ce46fae51cd"
-dependencies = [
- "serde",
- "serde_core",
-]
-
-[[package]]
-name = "serde"
-version = "1.0.229"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba"
-dependencies = [
- "serde_core",
- "serde_derive",
-]
-
-[[package]]
-name = "serde-untagged"
-version = "0.1.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f9faf48a4a2d2693be24c6289dbe26552776eb7737074e6722891fadbe6c5058"
-dependencies = [
- "erased-serde",
- "serde",
- "serde_core",
- "typeid",
-]
-
-[[package]]
-name = "serde_core"
-version = "1.0.229"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48"
-dependencies = [
- "serde_derive",
-]
-
-[[package]]
-name = "serde_derive"
-version = "1.0.229"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 3.0.7",
-]
-
-[[package]]
-name = "serde_derive_internals"
-version = "0.29.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "18d26a20a969b9e3fdf2fc2d9f21eda6c40e2de84c9408bb5d3b05d499aae711"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 2.0.119",
-]
-
-[[package]]
-name = "serde_json"
-version = "1.0.152"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1741ab7a6cc54a03a89b5d563ed60075c277d9e3cfa73ad0c1f23f23974703c6"
-dependencies = [
- "itoa",
- "memchr",
- "serde",
- "serde_core",
- "zmij",
-]
-
-[[package]]
-name = "serde_repr"
-version = "0.1.21"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8d3b1629de253c70a0508c3899572da79ca359fdab27c7920ff00406df418906"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 3.0.7",
-]
-
-[[package]]
-name = "serde_spanned"
-version = "0.6.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bf41e0cfaf7226dca15e8197172c295a782857fcb97fad1808a166870dee75a3"
-dependencies = [
- "serde",
-]
-
-[[package]]
-name = "serde_spanned"
-version = "1.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4e7523beb55eece201a2356bee0bbca0d1ab466c14c07703b2e0ee6d42cb0c2c"
-dependencies = [
- "serde_core",
-]
-
-[[package]]
-name = "serde_with"
-version = "3.24.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "df9adc193c780ef8f159aee8b61e2d5801aaa555e6eb0947fe45530ec506296f"
-dependencies = [
- "base64 0.23.1",
- "bs58",
- "chrono",
- "hex",
- "indexmap 1.9.3",
- "indexmap 2.14.2",
- "jiff",
- "schemars 0.9.0",
- "schemars 1.2.2",
- "serde_core",
- "serde_json",
- "serde_with_macros",
- "time",
-]
-
-[[package]]
-name = "serde_with_macros"
-version = "3.24.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3e17bbc68e28663bbbb90df47e058aa7eda4fb445b89fe70457bb94fbccf6e49"
-dependencies = [
- "darling",
- "proc-macro2",
- "quote",
- "syn 3.0.7",
-]
-
-[[package]]
-name = "serialize-to-javascript"
-version = "0.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "04f3666a07a197cdb77cdf306c32be9b7f598d7060d50cfd4d5aa04bfd92f6c5"
-dependencies = [
- "serde",
- "serde_json",
- "serialize-to-javascript-impl",
-]
-
-[[package]]
-name = "serialize-to-javascript-impl"
-version = "0.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "772ee033c0916d670af7860b6e1ef7d658a4629a6d0b4c8c3e67f09b3765b75d"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 2.0.119",
-]
-
-[[package]]
-name = "servo_arc"
-version = "0.4.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "170fb83ab34de17dc69aa7c67482b22218ddb85da56546f9bd6b929e32a05930"
-dependencies = [
- "stable_deref_trait",
-]
-
-[[package]]
-name = "sha1"
-version = "0.10.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a978451301f4db1d02937a4ab3ccce137717b81826e79b7d49ffe3244a13c3b8"
-dependencies = [
- "cfg-if",
- "cpufeatures",
- "digest",
-]
-
-[[package]]
-name = "sha2"
-version = "0.10.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283"
-dependencies = [
- "cfg-if",
- "cpufeatures",
- "digest",
-]
-
-[[package]]
-name = "shared_child"
-version = "1.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "607549934f6cc26b89cfecfdc46fa90f1e5d1536a68349b0c3a4f9d1c0d37959"
-dependencies = [
- "libc",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "shlex"
-version = "2.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f8fadd59c855ef2080decdef8ff161eb6661b86933c9d82e5ba29dc602a55aba"
-
-[[package]]
-name = "signal-hook-registry"
-version = "1.4.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c4db69cba1110affc0e9f7bcd48bbf87b3f4fc7c61fc9155afd4c469eb3d6c1b"
-dependencies = [
- "errno",
- "libc",
-]
-
-[[package]]
-name = "simd-adler32"
-version = "0.3.10"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3a219298ac11a56ea9a6d2120044824d6f01aeb034955e7af7bc16858527deea"
-
-[[package]]
-name = "simd_cesu8"
-version = "1.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "11031e251abf8611c80f460e19dbdeb54a66db918e49c65a7065b46ac7aec520"
-dependencies = [
- "rustc_version",
- "simdutf8",
-]
-
-[[package]]
-name = "simdutf8"
-version = "0.1.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e3a9fe34e3e7a50316060351f37187a3f546bce95496156754b601a5fa71b76e"
-
-[[package]]
-name = "siphasher"
-version = "1.0.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "33f4fe9184a62d842c9ef383018f3306d8ba224fd9d836f56d7288308847c256"
-
-[[package]]
-name = "slab"
-version = "0.4.12"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5"
-
-[[package]]
-name = "smallvec"
-version = "1.16.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5b3dc8af474f516a851ff4bd12db780f948b9250ad37211e4eec0bccea54e01b"
-
-[[package]]
-name = "socket2"
-version = "0.6.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c3d1e2c7f27f8d4cb10542a02c49005dbd6e93095799d6f3be745fae9f8fedd4"
-dependencies = [
- "libc",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "softbuffer"
-version = "0.4.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "aac18da81ebbf05109ab275b157c22a653bb3c12cf884450179942f81bcbf6c3"
-dependencies = [
- "bytemuck",
- "js-sys",
- "ndk",
- "objc2",
- "objc2-core-foundation",
- "objc2-core-graphics",
- "objc2-foundation",
- "objc2-quartz-core",
- "raw-window-handle",
- "redox_syscall",
- "tracing",
- "wasm-bindgen",
- "web-sys",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "soup3"
-version = "0.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "471f924a40f31251afc77450e781cb26d55c0b650842efafc9c6cbd2f7cc4f9f"
-dependencies = [
- "futures-channel",
- "gio",
- "glib",
- "libc",
- "soup3-sys",
-]
-
-[[package]]
-name = "soup3-sys"
-version = "0.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7ebe8950a680a12f24f15ebe1bf70db7af98ad242d9db43596ad3108aab86c27"
-dependencies = [
- "gio-sys",
- "glib-sys",
- "gobject-sys",
- "libc",
- "system-deps",
-]
-
-[[package]]
-name = "sqlite-wasm-rs"
-version = "0.5.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dc3efc0da82635d7e1ced0053bbbfa8c7ab9645d0bf36ceb4f7127bb85315d75"
-dependencies = [
- "cc",
- "js-sys",
- "rsqlite-vfs",
- "wasm-bindgen",
-]
-
-[[package]]
-name = "stable_deref_trait"
-version = "1.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596"
-
-[[package]]
-name = "static_assertions"
-version = "1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
-
-[[package]]
-name = "storebound-desktop"
-version = "0.1.0"
-dependencies = [
- "base64 0.22.1",
- "getrandom 0.3.4",
- "hmac",
- "keyring",
- "reqwest",
- "rusqlite",
- "rustls",
- "serde",
- "serde_json",
- "sha2",
- "tauri",
- "tauri-build",
- "tauri-plugin-deep-link",
- "tauri-plugin-dialog",
- "tauri-plugin-notification",
- "tauri-plugin-opener",
- "tauri-plugin-process",
- "tauri-plugin-shell",
- "tauri-plugin-single-instance",
- "tauri-plugin-updater",
- "tauri-plugin-window-state",
- "tempfile",
- "tokio",
- "url",
- "zip",
-]
-
-[[package]]
-name = "string_cache"
-version = "0.9.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a18596f8c785a729f2819c0f6a7eae6ebeebdfffbfe4214ae6b087f690e31901"
-dependencies = [
- "new_debug_unreachable",
- "parking_lot",
- "phf_shared",
- "precomputed-hash",
-]
-
-[[package]]
-name = "string_cache_codegen"
-version = "0.6.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "585635e46db231059f76c5849798146164652513eb9e8ab2685939dd90f29b69"
-dependencies = [
- "phf_generator",
- "phf_shared",
- "proc-macro2",
- "quote",
-]
-
-[[package]]
-name = "strsim"
-version = "0.11.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"
-
-[[package]]
-name = "subtle"
-version = "2.6.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292"
-
-[[package]]
-name = "swift-rs"
-version = "1.0.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cefd87076fd385308ee4aff597256c902f1fbb4d031de1558efc12f8ffefadd9"
-dependencies = [
- "base64 0.21.7",
- "serde",
- "serde_json",
-]
-
-[[package]]
-name = "syn"
-version = "1.0.109"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "72b64191b275b66ffe2469e8af2c1cfe3bafa67b529ead792a6d0160888b4237"
-dependencies = [
- "proc-macro2",
- "unicode-ident",
-]
-
-[[package]]
-name = "syn"
-version = "2.0.119"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297"
-dependencies = [
- "proc-macro2",
- "quote",
- "unicode-ident",
-]
-
-[[package]]
-name = "syn"
-version = "3.0.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d62a2e0561533f2ca2561d0cf27fd9fedb640a1bf2616ff5d5c80d99017faadc"
-dependencies = [
- "proc-macro2",
- "quote",
- "unicode-ident",
-]
-
-[[package]]
-name = "sync_wrapper"
-version = "1.0.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0bf256ce5efdfa370213c1dabab5935a12e49f2c58d15e9eac2870d3b4f27263"
-dependencies = [
- "futures-core",
-]
-
-[[package]]
-name = "synstructure"
-version = "0.14.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "901704edd0dfe137f1987838ee4f259e4e063c31371bdb423f7ae38ec6f77f02"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 3.0.7",
-]
-
-[[package]]
-name = "system-configuration"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a13f3d0daba03132c0aa9767f98351b3488edc2c100cda2d2ec2b04f3d8d3c8b"
-dependencies = [
- "bitflags 2.13.2",
- "core-foundation 0.9.4",
- "system-configuration-sys",
-]
-
-[[package]]
-name = "system-configuration-sys"
-version = "0.6.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8e1d1b10ced5ca923a1fcb8d03e96b8d3268065d724548c0211415ff6ac6bac4"
-dependencies = [
- "core-foundation-sys",
- "libc",
-]
-
-[[package]]
-name = "system-deps"
-version = "6.2.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a3e535eb8dded36d55ec13eddacd30dec501792ff23a0b1682c38601b8cf2349"
-dependencies = [
- "cfg-expr",
- "heck 0.5.0",
- "pkg-config",
- "toml 0.8.2",
- "version-compare",
-]
-
-[[package]]
-name = "tao"
-version = "0.37.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f37f381f4e048e6cdf038b5705f8cf14ad108279d46eb968140a7b291aba9400"
-dependencies = [
- "bitflags 2.13.2",
- "block2",
- "core-foundation 0.10.1",
- "core-graphics",
- "crossbeam-channel",
- "dbus",
- "dispatch2",
- "dlopen2",
- "dpi",
- "gdkwayland-sys",
- "gdkx11-sys",
- "gtk",
- "jni 0.21.1",
- "libc",
- "log",
- "ndk",
- "ndk-context",
- "ndk-sys",
- "objc2",
- "objc2-app-kit",
- "objc2-foundation",
- "objc2-ui-kit",
- "parking_lot",
- "percent-encoding",
- "raw-window-handle",
- "tao-macros",
- "unicode-segmentation",
- "url",
- "windows",
- "windows-core",
- "windows-version",
- "x11-dl",
-]
-
-[[package]]
-name = "tao-macros"
-version = "0.1.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5f7eeb6d99155545da6150a1795945f16ac9c178deb2a5f2e74d776107bd5849"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 2.0.119",
-]
-
-[[package]]
-name = "tar"
-version = "0.4.46"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3f6221d9a6003c78398e3b239969f352578258df48c8eb051caadae0015bc840"
-dependencies = [
- "filetime",
- "libc",
- "xattr",
-]
-
-[[package]]
-name = "target-lexicon"
-version = "0.12.16"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "61c41af27dd6d1e27b1b16b489db798443478cef1f06a660c96db617ba5de3b1"
-
-[[package]]
-name = "tauri"
-version = "2.12.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d061d042ccd2df9c9f1508c1e63d835278c0a4c8801eb41764080e51f2eaaf34"
-dependencies = [
- "anyhow",
- "bytes",
- "cookie",
- "dirs",
- "dunce",
- "embed_plist",
- "getrandom 0.3.4",
- "glob",
- "gtk",
- "heck 0.5.0",
- "http",
- "jni 0.21.1",
- "libc",
- "log",
- "mime",
- "muda",
- "objc2",
- "objc2-app-kit",
- "objc2-foundation",
- "objc2-ui-kit",
- "objc2-web-kit",
- "percent-encoding",
- "plist",
- "raw-window-handle",
- "reqwest",
- "serde",
- "serde_json",
- "serde_repr",
- "serialize-to-javascript",
- "swift-rs",
- "tauri-build",
- "tauri-macros",
- "tauri-runtime",
- "tauri-runtime-wry",
- "tauri-utils",
- "thiserror 2.0.21",
- "tokio",
- "tray-icon",
- "url",
- "webkit2gtk",
- "webview2-com",
- "window-vibrancy",
- "windows",
-]
-
-[[package]]
-name = "tauri-build"
-version = "2.7.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "59563ca5b331fd97f27ee9672ec8d36d33bb3c9e2c9f6710a1a5687256052e45"
-dependencies = [
- "anyhow",
- "cargo_toml",
- "dirs",
- "glob",
- "heck 0.5.0",
- "json-patch",
- "schemars 0.8.22",
- "semver",
- "serde",
- "serde_json",
- "tauri-utils",
- "tauri-winres",
- "walkdir",
-]
-
-[[package]]
-name = "tauri-codegen"
-version = "2.7.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e50213e463086ecc283d7e9f51c30cc0fd304ad457425158018be26dbf0d0a80"
-dependencies = [
- "base64 0.22.1",
- "brotli",
- "ico",
- "json-patch",
- "plist",
- "png 0.18.1",
- "proc-macro2",
- "quote",
- "semver",
- "serde",
- "serde_json",
- "sha2",
- "syn 2.0.119",
- "tauri-utils",
- "thiserror 2.0.21",
- "time",
- "url",
- "uuid",
- "walkdir",
-]
-
-[[package]]
-name = "tauri-macros"
-version = "2.7.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8129fb43bb6e0d6b73ad3315cd172beaab17cd28899c594b1b32c80edbbfd99c"
-dependencies = [
- "heck 0.5.0",
- "proc-macro2",
- "quote",
- "syn 2.0.119",
- "tauri-codegen",
- "tauri-utils",
-]
-
-[[package]]
-name = "tauri-plugin"
-version = "2.7.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1140cf34a3b3b836a13103dcab17f18831d5cc3534cbd435dc01a5c6daa65aa2"
-dependencies = [
- "anyhow",
- "glob",
- "plist",
- "schemars 0.8.22",
- "serde",
- "serde_json",
- "tauri-utils",
- "walkdir",
-]
-
-[[package]]
-name = "tauri-plugin-deep-link"
-version = "2.6.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4ac7a92a46ab5c88f44532ca50906d6e448a948d4ddf8c5376ab125e3260f736"
-dependencies = [
- "dunce",
- "plist",
- "rust-ini",
- "serde",
- "serde_json",
- "tauri",
- "tauri-plugin",
- "tauri-utils",
- "thiserror 2.0.21",
- "tracing",
- "url",
- "windows-registry",
- "windows-result",
-]
-
-[[package]]
-name = "tauri-plugin-dialog"
-version = "2.8.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3dca325d6e66e9170f2e1b9631722e4e544bcbc51781575d266abdaba697bd51"
-dependencies = [
- "log",
- "raw-window-handle",
- "rfd",
- "serde",
- "serde_json",
- "tauri",
- "tauri-plugin",
- "tauri-plugin-fs",
- "thiserror 2.0.21",
- "url",
-]
-
-[[package]]
-name = "tauri-plugin-fs"
-version = "2.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "213fae2d85d4b76b06de5915d1862db9fa74541171f9d2c15da6ac9bd6e788c6"
-dependencies = [
- "anyhow",
- "dunce",
- "glob",
- "log",
- "objc2-foundation",
- "percent-encoding",
- "schemars 0.8.22",
- "serde",
- "serde_json",
- "serde_repr",
- "tauri",
- "tauri-plugin",
- "tauri-utils",
- "thiserror 2.0.21",
- "toml 1.1.8+spec-1.1.0",
- "url",
-]
-
-[[package]]
-name = "tauri-plugin-notification"
-version = "2.6.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8cf3cce3ea492b3a8a7f431a4e5dd5d31dc41b2a4a243faa660cbe8095a577bd"
-dependencies = [
- "log",
- "notify-rust",
- "rand 0.9.5",
- "serde",
- "serde_json",
- "serde_repr",
- "tauri",
- "tauri-plugin",
- "thiserror 2.0.21",
- "time",
- "url",
- "zbus 5.19.0",
-]
-
-[[package]]
-name = "tauri-plugin-opener"
-version = "2.7.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "85dead674ee41937d042ee855d785f07ee67206f19402200c12b9255964d5ac8"
-dependencies = [
- "dunce",
- "glob",
- "objc2-app-kit",
- "objc2-foundation",
- "open",
- "schemars 0.8.22",
- "serde",
- "serde_json",
- "tauri",
- "tauri-plugin",
- "thiserror 2.0.21",
- "url",
- "windows",
- "zbus 5.19.0",
-]
-
-[[package]]
-name = "tauri-plugin-process"
-version = "2.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "74ae3d8549ae564c0397377373e262f340908eb23a5b9fbe03f2a00007dc0038"
-dependencies = [
- "tauri",
- "tauri-plugin",
-]
-
-[[package]]
-name = "tauri-plugin-shell"
-version = "2.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8567d42b2c7264355daa1df415ec77f52aa42e885924c86a969be2e920e05521"
-dependencies = [
- "encoding_rs",
- "libc",
- "log",
- "open",
- "os_pipe",
- "regex",
- "schemars 0.8.22",
- "serde",
- "serde_json",
- "shared_child",
- "tauri",
- "tauri-plugin",
- "thiserror 2.0.21",
- "tokio",
- "windows-sys 0.60.2",
-]
-
-[[package]]
-name = "tauri-plugin-single-instance"
-version = "2.5.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3c142ed88deee222bd2d979269d35c73b6c1c0f6ebd5b79b4ff80066fcad6af1"
-dependencies = [
- "serde",
- "serde_json",
- "tauri",
- "tauri-plugin-deep-link",
- "thiserror 2.0.21",
- "tokio",
- "tracing",
- "windows-sys 0.61.2",
- "zbus 5.19.0",
-]
-
-[[package]]
-name = "tauri-plugin-updater"
-version = "2.13.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "855a336eb389d2c1502244fd48fa2d8cb487a430f691bbaed025195f99a04489"
-dependencies = [
- "base64 0.22.1",
- "dirs",
- "flate2",
- "futures-util",
- "http",
- "infer",
- "libc",
- "log",
- "minisign-verify",
- "osakit",
- "percent-encoding",
- "reqwest",
- "rustls",
- "semver",
- "serde",
- "serde_json",
- "tar",
- "tauri",
- "tauri-plugin",
- "tempfile",
- "thiserror 2.0.21",
- "time",
- "tokio",
- "url",
- "windows-sys 0.61.2",
- "zip",
-]
-
-[[package]]
-name = "tauri-plugin-window-state"
-version = "2.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5d6815cab7b212f9cfe16a9d79d8d22f9e14159e4a9460f7dec1467167a008e3"
-dependencies = [
- "bitflags 2.13.2",
- "log",
- "serde",
- "serde_json",
- "tauri",
- "tauri-plugin",
- "thiserror 2.0.21",
-]
-
-[[package]]
-name = "tauri-runtime"
-version = "2.12.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c2a57a2a9b8c8b7fc00d35b510fe808ded7f9f1b44fc1cdda6aee38632ea5413"
-dependencies = [
- "cookie",
- "dpi",
- "gtk",
- "http",
- "jni 0.21.1",
- "objc2",
- "objc2-ui-kit",
- "objc2-web-kit",
- "raw-window-handle",
- "serde",
- "serde_json",
- "tauri-utils",
- "thiserror 2.0.21",
- "url",
- "webkit2gtk",
- "webview2-com",
- "windows",
-]
-
-[[package]]
-name = "tauri-runtime-wry"
-version = "2.12.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7f9e7e0c9f80a5130773cfabb6df4dc924518fb1b2c923726966804634b57d22"
-dependencies = [
- "gtk",
- "http",
- "jni 0.21.1",
- "log",
- "objc2",
- "objc2-app-kit",
- "once_cell",
- "percent-encoding",
- "raw-window-handle",
- "softbuffer",
- "tao",
- "tauri-runtime",
- "tauri-utils",
- "url",
- "webkit2gtk",
- "webview2-com",
- "windows",
- "wry",
-]
-
-[[package]]
-name = "tauri-utils"
-version = "2.10.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2ff55a614843b9a3f010f211df637c94df2607175b8d0f6e0f4a7c19e18621ee"
-dependencies = [
- "anyhow",
- "brotli",
- "cargo_metadata",
- "ctor",
- "dom_query",
- "dunce",
- "glob",
- "http",
- "infer",
- "json-patch",
- "log",
- "memchr",
- "phf",
- "plist",
- "proc-macro2",
- "quote",
- "regex",
- "schemars 0.8.22",
- "semver",
- "serde",
- "serde-untagged",
- "serde_json",
- "serde_with",
- "swift-rs",
- "thiserror 2.0.21",
- "toml 1.1.8+spec-1.1.0",
- "url",
- "urlpattern",
- "uuid",
- "walkdir",
-]
-
-[[package]]
-name = "tauri-winres"
-version = "0.3.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cc65d45c68858bfe420dd29e834b5d15dbecf8a07a8a16cf4d532c7b1f69d4b6"
-dependencies = [
- "dunce",
- "embed-resource",
- "toml 1.1.8+spec-1.1.0",
-]
-
-[[package]]
-name = "tauri-winrt-notification"
-version = "0.8.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f37a6c354fd28fc9e322ed9bd47e3959576dad28c9d58ea1cf888cce1c7ccb36"
-dependencies = [
- "thiserror 2.0.21",
- "windows",
- "windows-version",
-]
-
-[[package]]
-name = "tempfile"
-version = "3.27.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd"
-dependencies = [
- "fastrand",
- "getrandom 0.4.3",
- "once_cell",
- "rustix",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "tendril"
-version = "0.5.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5fed54709c5b3a53d09bb1c113ea4f5ceafd1e772ddcb0030a82e1d56c087b08"
-dependencies = [
- "new_debug_unreachable",
-]
-
-[[package]]
-name = "thiserror"
-version = "1.0.69"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b6aaf5339b578ea85b50e080feb250a3e8ae8cfcdff9a461c9ec2904bc923f52"
-dependencies = [
- "thiserror-impl 1.0.69",
-]
-
-[[package]]
-name = "thiserror"
-version = "2.0.21"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "09e52cb86a36cede5cb101bf8908837b3e4c6e5e59fe7fd85c23fb56200d189e"
-dependencies = [
- "thiserror-impl 2.0.21",
-]
-
-[[package]]
-name = "thiserror-impl"
-version = "1.0.69"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4fee6c4efc90059e10f81e6d42c60a18f76588c3d74cb83a0b242a2b6c7504c1"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 2.0.119",
-]
-
-[[package]]
-name = "thiserror-impl"
-version = "2.0.21"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fe5197923287db20a58125f0bc85c062f7f2c892de97b18c356f9efb14b28524"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 3.0.7",
-]
-
-[[package]]
-name = "time"
-version = "0.3.55"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cdb87b95ec50ddfa440816d227a17b2ccbdda963a316a727fda0fc4334f7d134"
-dependencies = [
- "deranged",
- "num-conv",
- "powerfmt",
- "serde_core",
- "time-core",
- "time-macros",
-]
-
-[[package]]
-name = "time-core"
-version = "0.1.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9e1c906769ad99c88eaa54e728060edef082f8e358ff32030cb7c7d315e81109"
-
-[[package]]
-name = "time-macros"
-version = "0.2.32"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7e689342a48d2ea927c87ea50cabf8594854bf940e9310208848d680d668ed85"
-dependencies = [
- "num-conv",
- "time-core",
-]
-
-[[package]]
-name = "tiny-keccak"
-version = "2.0.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2c9d3793400a45f954c52e73d068316d76b6f4e36977e3fcebb13a2721e80237"
-dependencies = [
- "crunchy",
-]
-
-[[package]]
-name = "tinystr"
-version = "0.8.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b1e27c91459209c2986af3dcf603a5a74a4368754ce37414f59acc971167f643"
-dependencies = [
- "displaydoc",
- "zerovec",
-]
-
-[[package]]
-name = "tinyvec"
-version = "1.13.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fd3ca314f692efd6c868f8408f53fe444634a845f96c028b97d35f6a1f79f0ee"
-
-[[package]]
-name = "tokio"
-version = "1.53.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e95f91fcc7a621e8b030f6aa23c71fe9838ae2fb4d8118b75602a328f5144044"
-dependencies = [
- "bytes",
- "libc",
- "mio",
- "pin-project-lite",
- "socket2",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "tokio-rustls"
-version = "0.26.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c9cc2678c2cdd569ef8215e2afd7954ada2ae20b4fdd2c5fe6139a3b02d105db"
-dependencies = [
- "rustls",
- "tokio",
-]
-
-[[package]]
-name = "tokio-util"
-version = "0.7.20"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e464cf451ba96ebfc6f9b6542f17ee8b8956e33f1e40d9690624e59d7a7f8a4b"
-dependencies = [
- "bytes",
- "futures-core",
- "futures-sink",
- "pin-project-lite",
- "tokio",
-]
-
-[[package]]
-name = "toml"
-version = "0.8.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "185d8ab0dfbb35cf1399a6344d8484209c088f75f8f68230da55d48d95d43e3d"
-dependencies = [
- "serde",
- "serde_spanned 0.6.9",
- "toml_datetime 0.6.3",
- "toml_edit 0.20.2",
-]
-
-[[package]]
-name = "toml"
-version = "1.1.8+spec-1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "20489e00e4d8741d6be680764cc12e270655e375a20d1011e844a9c3379e678d"
-dependencies = [
- "indexmap 2.14.2",
- "serde_core",
- "serde_spanned 1.1.2",
- "toml_datetime 1.1.2+spec-1.1.0",
- "toml_parser",
- "toml_writer",
- "winnow 1.0.4",
-]
-
-[[package]]
-name = "toml_datetime"
-version = "0.6.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7cda73e2f1397b1262d6dfdcef8aafae14d1de7748d66822d3bfeeb6d03e5e4b"
-dependencies = [
- "serde",
-]
-
-[[package]]
-name = "toml_datetime"
-version = "1.1.2+spec-1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2b86d767906c6c42421dcba507eb9d203e779497710a47782a224bb871653053"
-dependencies = [
- "serde_core",
-]
-
-[[package]]
-name = "toml_edit"
-version = "0.19.15"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1b5bb770da30e5cbfde35a2d7b9b8a2c4b8ef89548a7a6aeab5c9a576e3e7421"
-dependencies = [
- "indexmap 2.14.2",
- "toml_datetime 0.6.3",
- "winnow 0.5.40",
-]
-
-[[package]]
-name = "toml_edit"
-version = "0.20.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "396e4d48bbb2b7554c944bde63101b5ae446cff6ec4a24227428f15eb72ef338"
-dependencies = [
- "indexmap 2.14.2",
- "serde",
- "serde_spanned 0.6.9",
- "toml_datetime 0.6.3",
- "winnow 0.5.40",
-]
-
-[[package]]
-name = "toml_edit"
-version = "0.25.17+spec-1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e3641d5bbb5349a79e1020a242d251efbc546ad8048d133958323ce9c40a9c9c"
-dependencies = [
- "indexmap 2.14.2",
- "toml_datetime 1.1.2+spec-1.1.0",
- "toml_parser",
- "winnow 1.0.4",
-]
-
-[[package]]
-name = "toml_parser"
-version = "1.1.5+spec-1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "baa693a8032d7e1cada7d0041e96126df243179ff061456783ac7f12bda4744c"
-dependencies = [
- "winnow 1.0.4",
-]
-
-[[package]]
-name = "toml_writer"
-version = "1.1.3+spec-1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "06bdbd8cfc056b8d2e2e85f29b56a3bdbecb527cef81eb39e3e7b98af4652770"
-
-[[package]]
-name = "tower"
-version = "0.5.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ebe5ef63511595f1344e2d5cfa636d973292adc0eec1f0ad45fae9f0851ab1d4"
-dependencies = [
- "futures-core",
- "futures-util",
- "pin-project-lite",
- "sync_wrapper",
- "tokio",
- "tower-layer",
- "tower-service",
-]
-
-[[package]]
-name = "tower-http"
-version = "0.6.11"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4cfcf7e2740e6fc6d4d688b4ef00650406bb94adf4731e43c096c3a19fe40840"
-dependencies = [
- "bitflags 2.13.2",
- "bytes",
- "futures-util",
- "http",
- "http-body",
- "pin-project-lite",
- "tower",
- "tower-layer",
- "tower-service",
- "url",
-]
-
-[[package]]
-name = "tower-layer"
-version = "0.3.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "121c2a6cda46980bb0fcd1647ffaf6cd3fc79a013de288782836f6df9c48780e"
-
-[[package]]
-name = "tower-service"
-version = "0.3.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8df9b6e13f2d32c91b9bd719c00d1958837bc7dec474d94952798cc8e69eeec3"
-
-[[package]]
-name = "tracing"
-version = "0.1.44"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "63e71662fa4b2a2c3a26f570f037eb95bb1f85397f3cd8076caed2f026a6d100"
-dependencies = [
- "pin-project-lite",
- "tracing-attributes",
- "tracing-core",
-]
-
-[[package]]
-name = "tracing-attributes"
-version = "0.1.31"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7490cfa5ec963746568740651ac6781f701c9c5ea257c58e057f3ba8cf69e8da"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 2.0.119",
-]
-
-[[package]]
-name = "tracing-core"
-version = "0.1.36"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "db97caf9d906fbde555dd62fa95ddba9eecfd14cb388e4f491a66d74cd5fb79a"
-dependencies = [
- "once_cell",
-]
-
-[[package]]
-name = "tray-icon"
-version = "0.25.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b2b9c52859a94554803ccd4a24b98f74148ebc73b90676d783f3490b1bff9d72"
-dependencies = [
- "crossbeam-channel",
- "dirs",
- "libappindicator",
- "muda",
- "objc2",
- "objc2-app-kit",
- "objc2-core-foundation",
- "objc2-core-graphics",
- "objc2-foundation",
- "once_cell",
- "png 0.18.1",
- "serde",
- "thiserror 2.0.21",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "try-lock"
-version = "0.2.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e421abadd41a4225275504ea4d6566923418b7f05506fbc9c0fe86ba7396114b"
-
-[[package]]
-name = "typeid"
-version = "1.0.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bc7d623258602320d5c55d1bc22793b57daff0ec7efc270ea7d55ce1d5f5471c"
-
-[[package]]
-name = "typenum"
-version = "1.20.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b6f5e870be6c3b371b77fe0ee0bafb859fa4964b4404c27de1d380043c4dda20"
-
-[[package]]
-name = "uds_windows"
-version = "1.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f2f6fb2847f6742cd76af783a2a2c49e9375d0a111c7bef6f71cd9e738c72d6e"
-dependencies = [
- "memoffset",
- "tempfile",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "unicode-ident"
-version = "1.0.26"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d245f478577f809a851594d02313b640fb437e0bb33866753cff937863096954"
-
-[[package]]
-name = "unicode-segmentation"
-version = "1.13.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c6f5d3c3b1bf09027a88a6bc961fc00497d651009560b5463668dc81b0fa87a8"
-
-[[package]]
-name = "untrusted"
-version = "0.9.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1"
-
-[[package]]
-name = "url"
-version = "2.5.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ff67a8a4397373c3ef660812acab3268222035010ab8680ec4215f38ba3d0eed"
-dependencies = [
- "form_urlencoded",
- "idna",
- "percent-encoding",
- "serde",
- "serde_derive",
-]
-
-[[package]]
-name = "urlpattern"
-version = "0.6.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "df16f50ef4cc145211879a3867ba757076b25dfee812040dcb0658bd9ae7904b"
-dependencies = [
- "icu_properties",
- "regex",
- "serde",
- "url",
-]
-
-[[package]]
-name = "utf8_iter"
-version = "1.0.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be"
-
-[[package]]
-name = "uuid"
-version = "1.28.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7cc1186384beb7dd8eedea376413fd654937285ea6c9cfbb928dc3043ea4b606"
-dependencies = [
- "getrandom 0.4.3",
- "js-sys",
- "serde_core",
- "wasm-bindgen",
-]
-
-[[package]]
-name = "vcpkg"
-version = "0.2.15"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "accd4ea62f7bb7a82fe23066fb0957d48ef677f6eeb8215f372f52e48bb32426"
-
-[[package]]
-name = "version-compare"
-version = "0.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "03c2856837ef78f57382f06b2b8563a2f512f7185d732608fd9176cb3b8edf0e"
-
-[[package]]
-name = "version_check"
-version = "0.9.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a"
-
-[[package]]
-name = "vswhom"
-version = "0.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "be979b7f07507105799e854203b470ff7c78a1639e330a58f183b5fea574608b"
-dependencies = [
- "libc",
- "vswhom-sys",
-]
-
-[[package]]
-name = "vswhom-sys"
-version = "0.1.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fb067e4cbd1ff067d1df46c9194b5de0e98efd2810bbc95c5d5e5f25a3231150"
-dependencies = [
- "cc",
- "libc",
-]
-
-[[package]]
-name = "walkdir"
-version = "2.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "29790946404f91d9c5d06f9874efddea1dc06c5efe94541a7d6863108e3a5e4b"
-dependencies = [
- "same-file",
- "winapi-util",
-]
-
-[[package]]
-name = "want"
-version = "0.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ec4cdd0dd910afe868b7ef477227d8d538b46b3075031afee8a9f2acb0a2ed0b"
-dependencies = [
- "try-lock",
-]
-
-[[package]]
-name = "wasi"
-version = "0.11.1+wasi-snapshot-preview1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"
-
-[[package]]
-name = "wasip2"
-version = "1.0.4+wasi-0.2.12"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b67efb37e106e55ce722a510d6b5f9c17f083e5fc79afc2badeb12cc313d9487"
-dependencies = [
- "wit-bindgen",
-]
-
-[[package]]
-name = "wasm-bindgen"
-version = "0.2.129"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9bb54f33acc68fd454578d9820b0bde1a1a3d17aa17bb7b6595806d02886d409"
-dependencies = [
- "cfg-if",
- "once_cell",
- "rustversion",
- "wasm-bindgen-macro",
- "wasm-bindgen-shared",
-]
-
-[[package]]
-name = "wasm-bindgen-futures"
-version = "0.4.79"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3cbab34de2d982e9b48e18d216d04c4a6f641066ff19ffb699980f591ee3610e"
-dependencies = [
- "js-sys",
- "tokio",
- "wasm-bindgen",
-]
-
-[[package]]
-name = "wasm-bindgen-macro"
-version = "0.2.129"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2e29d0c35b16e224a7eeb5cd2d25e3e1968fbd65604117b44d3b789d00ee8535"
-dependencies = [
- "quote",
- "wasm-bindgen-macro-support",
-]
-
-[[package]]
-name = "wasm-bindgen-macro-support"
-version = "0.2.129"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6f501a8bc3719dba86ef8ae4728879c08001bea749eb1333ac5b91e040e2a6b7"
-dependencies = [
- "bumpalo",
- "proc-macro2",
- "quote",
- "syn 3.0.7",
- "wasm-bindgen-shared",
-]
-
-[[package]]
-name = "wasm-bindgen-shared"
-version = "0.2.129"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "23f0c9c52aa7cd7d77769a4cfe2a9adb1b331f489a41d912ce14513d5ab995c6"
-dependencies = [
- "unicode-ident",
-]
-
-[[package]]
-name = "wasm-streams"
-version = "0.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9d1ec4f6517c9e11ae630e200b2b65d193279042e28edd4a2cda233e46670bbb"
-dependencies = [
- "futures-util",
- "js-sys",
- "wasm-bindgen",
- "wasm-bindgen-futures",
- "web-sys",
-]
-
-[[package]]
-name = "web-sys"
-version = "0.3.106"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "88261b9deccee56594c11a3460c462c41f58d148598fe70ad77070126a68aba4"
-dependencies = [
- "js-sys",
- "wasm-bindgen",
-]
-
-[[package]]
-name = "web-time"
-version = "1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5a6580f308b1fad9207618087a65c04e7a10bc77e02c8e84e9b00dd4b12fa0bb"
-dependencies = [
- "js-sys",
- "wasm-bindgen",
-]
-
-[[package]]
-name = "web_atoms"
-version = "0.2.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ba8b815c1b593dc0baf78dd0f4fc8fdb2de53198fb1163738093e9a311c33fb3"
-dependencies = [
- "phf",
- "phf_codegen",
- "string_cache",
- "string_cache_codegen",
-]
-
-[[package]]
-name = "webkit2gtk"
-version = "2.0.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a1027150013530fb2eaf806408df88461ae4815a45c541c8975e61d6f2fc4793"
-dependencies = [
- "bitflags 1.3.2",
- "cairo-rs",
- "gdk",
- "gdk-sys",
- "gio",
- "gio-sys",
- "glib",
- "glib-sys",
- "gobject-sys",
- "gtk",
- "gtk-sys",
- "javascriptcore-rs",
- "libc",
- "once_cell",
- "soup3",
- "webkit2gtk-sys",
-]
-
-[[package]]
-name = "webkit2gtk-sys"
-version = "2.0.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "916a5f65c2ef0dfe12fff695960a2ec3d4565359fdbb2e9943c974e06c734ea5"
-dependencies = [
- "bitflags 1.3.2",
- "cairo-sys-rs",
- "gdk-sys",
- "gio-sys",
- "glib-sys",
- "gobject-sys",
- "gtk-sys",
- "javascriptcore-rs-sys",
- "libc",
- "pkg-config",
- "soup3-sys",
- "system-deps",
-]
-
-[[package]]
-name = "webpki-root-certs"
-version = "1.0.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b96554aa2acc8ccdb7e1c9a58a7a68dd5d13bccc69cd124cb09406db612a1c9b"
-dependencies = [
- "rustls-pki-types",
-]
-
-[[package]]
-name = "webview2-com"
-version = "0.39.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3f89fca7a704cee10dcb3654c1dbb8941d1783132f1917358af75bec37a7d7e6"
-dependencies = [
- "webview2-com-macros",
- "webview2-com-sys",
- "windows",
- "windows-core",
-]
-
-[[package]]
-name = "webview2-com-macros"
-version = "0.8.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "67a921c1b6914c367b2b823cd4cde6f96beec77d30a939c8199bb377cf9b9b54"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 2.0.119",
-]
-
-[[package]]
-name = "webview2-com-sys"
-version = "0.39.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b3a07132775117d6065853d9d1178157b8c90e228de47129d6bce2c7edebedfb"
-dependencies = [
- "thiserror 2.0.21",
- "windows",
- "windows-core",
-]
-
-[[package]]
-name = "winapi"
-version = "0.3.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419"
-dependencies = [
- "winapi-i686-pc-windows-gnu",
- "winapi-x86_64-pc-windows-gnu",
-]
-
-[[package]]
-name = "winapi-i686-pc-windows-gnu"
-version = "0.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6"
-
-[[package]]
-name = "winapi-util"
-version = "0.1.11"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
-dependencies = [
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "winapi-x86_64-pc-windows-gnu"
-version = "0.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"
-
-[[package]]
-name = "window-vibrancy"
-version = "0.8.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "111e51caca442cafd9bab396628ac4d814880eaea4e63dfd76a12e9f342b5580"
-dependencies = [
- "objc2",
- "objc2-app-kit",
- "objc2-core-foundation",
- "objc2-foundation",
- "objc2-quartz-core",
- "raw-window-handle",
- "windows-sys 0.61.2",
- "windows-version",
-]
-
-[[package]]
-name = "windows"
-version = "0.62.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "527fadee13e0c05939a6a05d5bd6eec6cd2e3dbd648b9f8e447c6518133d8580"
-dependencies = [
- "windows-collections",
- "windows-core",
- "windows-future",
- "windows-numerics",
-]
-
-[[package]]
-name = "windows-collections"
-version = "0.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "23b2d95af1a8a14a3c7367e1ed4fc9c20e0a26e79551b1454d72583c97cc6610"
-dependencies = [
- "windows-core",
-]
-
-[[package]]
-name = "windows-core"
-version = "0.62.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b8e83a14d34d0623b51dce9581199302a221863196a1dde71a7663a4c2be9deb"
-dependencies = [
- "windows-implement",
- "windows-interface",
- "windows-link",
- "windows-result",
- "windows-strings",
-]
-
-[[package]]
-name = "windows-future"
-version = "0.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e1d6f90251fe18a279739e78025bd6ddc52a7e22f921070ccdc67dde84c605cb"
-dependencies = [
- "windows-core",
- "windows-link",
- "windows-threading",
-]
-
-[[package]]
-name = "windows-implement"
-version = "0.60.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "053e2e040ab57b9dc951b72c264860db7eb3b0200ba345b4e4c3b14f67855ddf"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 2.0.119",
-]
-
-[[package]]
-name = "windows-interface"
-version = "0.59.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3f316c4a2570ba26bbec722032c4099d8c8bc095efccdc15688708623367e358"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 2.0.119",
-]
-
-[[package]]
-name = "windows-link"
-version = "0.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
-
-[[package]]
-name = "windows-numerics"
-version = "0.3.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6e2e40844ac143cdb44aead537bbf727de9b044e107a0f1220392177d15b0f26"
-dependencies = [
- "windows-core",
- "windows-link",
-]
-
-[[package]]
-name = "windows-registry"
-version = "0.6.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "02752bf7fbdcce7f2a27a742f798510f3e5ad88dbe84871e5168e2120c3d5720"
-dependencies = [
- "windows-link",
- "windows-result",
- "windows-strings",
-]
-
-[[package]]
-name = "windows-result"
-version = "0.4.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7781fa89eaf60850ac3d2da7af8e5242a5ea78d1a11c49bf2910bb5a73853eb5"
-dependencies = [
- "windows-link",
-]
-
-[[package]]
-name = "windows-strings"
-version = "0.5.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7837d08f69c77cf6b07689544538e017c1bfcf57e34b4c0ff58e6c2cd3b37091"
-dependencies = [
- "windows-link",
-]
-
-[[package]]
-name = "windows-sys"
-version = "0.45.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "75283be5efb2831d37ea142365f009c02ec203cd29a3ebecbc093d52315b66d0"
-dependencies = [
- "windows-targets 0.42.2",
-]
-
-[[package]]
-name = "windows-sys"
-version = "0.52.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d"
-dependencies = [
- "windows-targets 0.52.6",
-]
-
-[[package]]
-name = "windows-sys"
-version = "0.59.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b"
-dependencies = [
- "windows-targets 0.52.6",
-]
-
-[[package]]
-name = "windows-sys"
-version = "0.60.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f2f500e4d28234f72040990ec9d39e3a6b950f9f22d3dba18416c35882612bcb"
-dependencies = [
- "windows-targets 0.53.5",
-]
-
-[[package]]
-name = "windows-sys"
-version = "0.61.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"
-dependencies = [
- "windows-link",
-]
-
-[[package]]
-name = "windows-targets"
-version = "0.42.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8e5180c00cd44c9b1c88adb3693291f1cd93605ded80c250a75d472756b4d071"
-dependencies = [
- "windows_aarch64_gnullvm 0.42.2",
- "windows_aarch64_msvc 0.42.2",
- "windows_i686_gnu 0.42.2",
- "windows_i686_msvc 0.42.2",
- "windows_x86_64_gnu 0.42.2",
- "windows_x86_64_gnullvm 0.42.2",
- "windows_x86_64_msvc 0.42.2",
-]
-
-[[package]]
-name = "windows-targets"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973"
-dependencies = [
- "windows_aarch64_gnullvm 0.52.6",
- "windows_aarch64_msvc 0.52.6",
- "windows_i686_gnu 0.52.6",
- "windows_i686_gnullvm 0.52.6",
- "windows_i686_msvc 0.52.6",
- "windows_x86_64_gnu 0.52.6",
- "windows_x86_64_gnullvm 0.52.6",
- "windows_x86_64_msvc 0.52.6",
-]
-
-[[package]]
-name = "windows-targets"
-version = "0.53.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4945f9f551b88e0d65f3db0bc25c33b8acea4d9e41163edf90dcd0b19f9069f3"
-dependencies = [
- "windows-link",
- "windows_aarch64_gnullvm 0.53.1",
- "windows_aarch64_msvc 0.53.1",
- "windows_i686_gnu 0.53.1",
- "windows_i686_gnullvm 0.53.1",
- "windows_i686_msvc 0.53.1",
- "windows_x86_64_gnu 0.53.1",
- "windows_x86_64_gnullvm 0.53.1",
- "windows_x86_64_msvc 0.53.1",
-]
-
-[[package]]
-name = "windows-threading"
-version = "0.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3949bd5b99cafdf1c7ca86b43ca564028dfe27d66958f2470940f73d86d75b37"
-dependencies = [
- "windows-link",
-]
-
-[[package]]
-name = "windows-version"
-version = "0.1.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e4060a1da109b9d0326b7262c8e12c84df67cc0dbc9e33cf49e01ccc2eb63631"
-dependencies = [
- "windows-link",
-]
-
-[[package]]
-name = "windows_aarch64_gnullvm"
-version = "0.42.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "597a5118570b68bc08d8d59125332c54f1ba9d9adeedeef5b99b02ba2b0698f8"
-
-[[package]]
-name = "windows_aarch64_gnullvm"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3"
-
-[[package]]
-name = "windows_aarch64_gnullvm"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a9d8416fa8b42f5c947f8482c43e7d89e73a173cead56d044f6a56104a6d1b53"
-
-[[package]]
-name = "windows_aarch64_msvc"
-version = "0.42.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e08e8864a60f06ef0d0ff4ba04124db8b0fb3be5776a5cd47641e942e58c4d43"
-
-[[package]]
-name = "windows_aarch64_msvc"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469"
-
-[[package]]
-name = "windows_aarch64_msvc"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b9d782e804c2f632e395708e99a94275910eb9100b2114651e04744e9b125006"
-
-[[package]]
-name = "windows_i686_gnu"
-version = "0.42.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c61d927d8da41da96a81f029489353e68739737d3beca43145c8afec9a31a84f"
-
-[[package]]
-name = "windows_i686_gnu"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b"
-
-[[package]]
-name = "windows_i686_gnu"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "960e6da069d81e09becb0ca57a65220ddff016ff2d6af6a223cf372a506593a3"
-
-[[package]]
-name = "windows_i686_gnullvm"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66"
-
-[[package]]
-name = "windows_i686_gnullvm"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fa7359d10048f68ab8b09fa71c3daccfb0e9b559aed648a8f95469c27057180c"
-
-[[package]]
-name = "windows_i686_msvc"
-version = "0.42.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "44d840b6ec649f480a41c8d80f9c65108b92d89345dd94027bfe06ac444d1060"
-
-[[package]]
-name = "windows_i686_msvc"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66"
-
-[[package]]
-name = "windows_i686_msvc"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e7ac75179f18232fe9c285163565a57ef8d3c89254a30685b57d83a38d326c2"
-
-[[package]]
-name = "windows_x86_64_gnu"
-version = "0.42.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8de912b8b8feb55c064867cf047dda097f92d51efad5b491dfb98f6bbb70cb36"
-
-[[package]]
-name = "windows_x86_64_gnu"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78"
-
-[[package]]
-name = "windows_x86_64_gnu"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9c3842cdd74a865a8066ab39c8a7a473c0778a3f29370b5fd6b4b9aa7df4a499"
-
-[[package]]
-name = "windows_x86_64_gnullvm"
-version = "0.42.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "26d41b46a36d453748aedef1486d5c7a85db22e56aff34643984ea85514e94a3"
-
-[[package]]
-name = "windows_x86_64_gnullvm"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d"
-
-[[package]]
-name = "windows_x86_64_gnullvm"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0ffa179e2d07eee8ad8f57493436566c7cc30ac536a3379fdf008f47f6bb7ae1"
-
-[[package]]
-name = "windows_x86_64_msvc"
-version = "0.42.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9aec5da331524158c6d1a4ac0ab1541149c0b9505fde06423b02f5ef0106b9f0"
-
-[[package]]
-name = "windows_x86_64_msvc"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
-
-[[package]]
-name = "windows_x86_64_msvc"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d6bbff5f0aada427a1e5a6da5f1f98158182f26556f345ac9e04d36d0ebed650"
-
-[[package]]
-name = "winnow"
-version = "0.5.40"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f593a95398737aeed53e489c785df13f3618e41dbcd6718c6addbf1395aa6876"
-dependencies = [
- "memchr",
-]
-
-[[package]]
-name = "winnow"
-version = "1.0.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "23b97319f7b8343df12cc98938e5c3eb436064524c8d2b4e30a1d3a36eecdf81"
-dependencies = [
- "memchr",
-]
-
-[[package]]
-name = "winreg"
-version = "0.56.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7d6f32a0ff4a9f6f01231eb2059cc85479330739333e0e58cadf03b6af2cca10"
-dependencies = [
- "cfg-if",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "wit-bindgen"
-version = "0.57.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1ebf944e87a7c253233ad6766e082e3cd714b5d03812acc24c318f549614536e"
-
-[[package]]
-name = "writeable"
-version = "0.6.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3ad82d2a33cdc9674dc7465672f271e096168fcdbe0f799d9e6db8c5892679dc"
-
-[[package]]
-name = "wry"
-version = "0.57.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a819957a01b3119af85e638a38d242af76dbc87d130dca67bfd0441072e21ff0"
-dependencies = [
- "base64 0.22.1",
- "block2",
- "cookie",
- "crossbeam-channel",
- "dirs",
- "dom_query",
- "dpi",
- "dunce",
- "gdkx11",
- "gtk",
- "http",
- "javascriptcore-rs",
- "jni 0.21.1",
- "libc",
- "ndk",
- "objc2",
- "objc2-app-kit",
- "objc2-core-foundation",
- "objc2-foundation",
- "objc2-ui-kit",
- "objc2-web-kit",
- "once_cell",
- "percent-encoding",
- "raw-window-handle",
- "sha2",
- "soup3",
- "tao-macros",
- "thiserror 2.0.21",
- "url",
- "webkit2gtk",
- "webkit2gtk-sys",
- "webview2-com",
- "windows",
- "windows-core",
- "windows-version",
- "x11-dl",
-]
-
-[[package]]
-name = "x11"
-version = "2.21.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "502da5464ccd04011667b11c435cb992822c2c0dbde1770c988480d312a0db2e"
-dependencies = [
- "libc",
- "pkg-config",
-]
-
-[[package]]
-name = "x11-dl"
-version = "2.21.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "38735924fedd5314a6e548792904ed8c6de6636285cb9fec04d5b1db85c1516f"
-dependencies = [
- "libc",
- "once_cell",
- "pkg-config",
-]
-
-[[package]]
-name = "xattr"
-version = "1.6.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32e45ad4206f6d2479085147f02bc2ef834ac85886624a23575ae137c8aa8156"
-dependencies = [
- "libc",
- "rustix",
-]
-
-[[package]]
-name = "xdg-home"
-version = "1.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ec1cdab258fb55c0da61328dc52c8764709b249011b2cad0454c72f0bf10a1f6"
-dependencies = [
- "libc",
- "windows-sys 0.59.0",
-]
-
-[[package]]
-name = "yoke"
-version = "0.8.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "709fe23a0424b6a435d82152b1bd3fdfb0833487d5fa90d05d42762a9891fef5"
-dependencies = [
- "stable_deref_trait",
- "yoke-derive",
- "zerofrom",
-]
-
-[[package]]
-name = "yoke-derive"
-version = "0.8.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ec8ebde2db3681e8c9980cc27822030e68752690ddfa9473e739aeb4dbde6d71"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 3.0.7",
- "synstructure",
-]
-
-[[package]]
-name = "zbus"
-version = "4.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bb97012beadd29e654708a0fdb4c84bc046f537aecfde2c3ee0a9e4b4d48c725"
-dependencies = [
- "async-broadcast",
- "async-process",
- "async-recursion",
- "async-trait",
- "enumflags2",
- "event-listener",
- "futures-core",
- "futures-sink",
- "futures-util",
- "hex",
- "nix",
- "ordered-stream",
- "rand 0.8.8",
- "serde",
- "serde_repr",
- "sha1",
- "static_assertions",
- "tracing",
- "uds_windows",
- "windows-sys 0.52.0",
- "xdg-home",
- "zbus_macros 4.4.0",
- "zbus_names 3.0.0",
- "zvariant 4.2.0",
-]
-
-[[package]]
-name = "zbus"
-version = "5.19.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5db4be7c075cb421e4b7ee645541604239bd243ba7c357511f4ff3a74b555907"
-dependencies = [
- "async-broadcast",
- "async-executor",
- "async-io",
- "async-lock",
- "async-process",
- "async-recursion",
- "async-task",
- "async-trait",
- "blocking",
- "enumflags2",
- "event-listener",
- "futures-core",
- "futures-lite",
- "hex",
- "libc",
- "ordered-stream",
- "rustix",
- "serde",
- "serde_repr",
- "tracing",
- "uds_windows",
- "uuid",
- "windows-sys 0.61.2",
- "winnow 1.0.4",
- "zbus_macros 5.19.0",
- "zbus_names 4.3.4",
- "zvariant 5.15.0",
-]
-
-[[package]]
-name = "zbus_macros"
-version = "4.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "267db9407081e90bbfa46d841d3cbc60f59c0351838c4bc65199ecd79ab1983e"
-dependencies = [
- "proc-macro-crate 3.5.0",
- "proc-macro2",
- "quote",
- "syn 2.0.119",
- "zvariant_utils 2.1.0",
-]
-
-[[package]]
-name = "zbus_macros"
-version = "5.19.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2990635d09ade6df1868f72f8cac69a876a90981e8bd3c40b1be413f8dc88f40"
-dependencies = [
- "proc-macro-crate 3.5.0",
- "proc-macro2",
- "quote",
- "syn 3.0.7",
- "zbus_names 4.3.4",
- "zvariant 5.15.0",
- "zvariant_utils 4.2.0",
-]
-
-[[package]]
-name = "zbus_names"
-version = "3.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4b9b1fef7d021261cc16cba64c351d291b715febe0fa10dc3a443ac5a5022e6c"
-dependencies = [
- "serde",
- "static_assertions",
- "zvariant 4.2.0",
-]
-
-[[package]]
-name = "zbus_names"
-version = "4.3.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d8bf88b4a3ff53e883001e0e0115b297a9d53c31b9c1edd2bfdd853e3428624e"
-dependencies = [
- "serde",
- "winnow 1.0.4",
- "zvariant 5.15.0",
-]
-
-[[package]]
-name = "zcheapstr"
-version = "1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d1afec51604565183aeb5c54c20aeab286120d4e4460f7f76e3e8bb8c0d99473"
-dependencies = [
- "serde",
-]
-
-[[package]]
-name = "zerocopy"
-version = "0.8.62"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "86502bf56ac7c77571a32e2647bb2a15894565e981fb2a48d7bde2d91c965a9d"
-dependencies = [
- "zerocopy-derive",
-]
-
-[[package]]
-name = "zerocopy-derive"
-version = "0.8.62"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5457206954b06561e2608c7e19cf58b1926586d999c246eebe4502f7e2039d1a"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 2.0.119",
-]
-
-[[package]]
-name = "zerofrom"
-version = "0.1.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0ec05a11813ea801ff6d75110ad09cd0824ddba17dfe17128ea0d5f68e6c5272"
-dependencies = [
- "zerofrom-derive",
-]
-
-[[package]]
-name = "zerofrom-derive"
-version = "0.1.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f75b4683f6c7f45248d4d64056a24298c6281e0993356d7d1b4a1a962ef10d4a"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 3.0.7",
- "synstructure",
-]
-
-[[package]]
-name = "zeroize"
-version = "1.9.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e13084392c5e4bc371903e2935a5eaeed24905a7511356b883835e18a78f6879"
-dependencies = [
- "zeroize_derive",
-]
-
-[[package]]
-name = "zeroize_derive"
-version = "1.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3c50655cbb0fe3fc43170059e702f1ce5e19b84cec58dc87b037a09935c2f328"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 2.0.119",
-]
-
-[[package]]
-name = "zerotrie"
-version = "0.2.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4ea269c3bd32f0a32c321907a2ae912ba6f4649bb0fc764a15627e99a7095a3f"
-dependencies = [
- "displaydoc",
- "yoke",
- "zerofrom",
-]
-
-[[package]]
-name = "zerovec"
-version = "0.11.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bb0464e17806c1d976d5cba29399c7f08e516e279e2ba493f63123b5fca67dd8"
-dependencies = [
- "yoke",
- "zerofrom",
- "zerovec-derive",
-]
-
-[[package]]
-name = "zerovec-derive"
-version = "0.11.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "34df6fc39dbd26ddc9c10e6a2984476e13acce22e64e4487636ef494369225da"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 3.0.7",
-]
-
-[[package]]
-name = "zip"
-version = "4.6.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "caa8cd6af31c3b31c6631b8f483848b91589021b28fffe50adada48d4f4d2ed1"
-dependencies = [
- "arbitrary",
- "crc32fast",
- "flate2",
- "indexmap 2.14.2",
- "memchr",
-]
-
-[[package]]
-name = "zlib-rs"
-version = "0.6.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b268e58e7c693d7c271f93ffc4ba3b380412554231c85bf61ca7af91042a4112"
-
-[[package]]
-name = "zmij"
-version = "1.0.23"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b"
-
-[[package]]
-name = "zvariant"
-version = "4.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2084290ab9a1c471c38fc524945837734fbf124487e105daec2bb57fd48c81fe"
-dependencies = [
- "endi",
- "enumflags2",
- "serde",
- "static_assertions",
- "zvariant_derive 4.2.0",
-]
-
-[[package]]
-name = "zvariant"
-version = "5.15.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c1d34c27cc6cdd1f458427519dd6b8612f7b7e3f7b9a0b2355d041dda9869147"
-dependencies = [
- "endi",
- "enumflags2",
- "serde",
- "winnow 1.0.4",
- "zcheapstr",
- "zvariant_derive 5.15.0",
- "zvariant_utils 4.2.0",
-]
-
-[[package]]
-name = "zvariant_derive"
-version = "4.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "73e2ba546bda683a90652bac4a279bc146adad1386f25379cf73200d2002c449"
-dependencies = [
- "proc-macro-crate 3.5.0",
- "proc-macro2",
- "quote",
- "syn 2.0.119",
- "zvariant_utils 2.1.0",
-]
-
-[[package]]
-name = "zvariant_derive"
-version = "5.15.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "864155e69b4352db0c7f374917bf45d1e0c8d17659c8b3dbf9795f3673f8c497"
-dependencies = [
- "proc-macro-crate 3.5.0",
- "proc-macro2",
- "quote",
- "syn 3.0.7",
- "zvariant_utils 4.2.0",
-]
-
-[[package]]
-name = "zvariant_utils"
-version = "2.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c51bcff7cc3dbb5055396bcf774748c3dab426b4b8659046963523cee4808340"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 2.0.119",
-]
-
-[[package]]
-name = "zvariant_utils"
-version = "4.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bad0294361a320b694a328460dc73add56c306150f5cb6bfafc44446120008a3"
-dependencies = [
- "proc-macro2",
- "quote",
- "serde",
- "syn 3.0.7",
- "winnow 1.0.4",
-]
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
deleted file mode 100644
index 301fe2e..0000000
--- a/apps/desktop/src-tauri/Cargo.toml
+++ /dev/null
@@ -1,59 +0,0 @@
-[package]
-name = "storebound-desktop"
-version = "0.1.0"
-description = "storebound desktop: every game's releases on both stores in one window"
-license = "MIT"
-edition = "2021"
-rust-version = "1.85"
-publish = false
-
-[lib]
-name = "storebound_desktop"
-path = "src/lib.rs"
-
-[[bin]]
-name = "storebound-desktop"
-path = "src/main.rs"
-
-[build-dependencies]
-tauri-build = { version = "2", features = [] }
-
-[dependencies]
-tauri = { version = "2.12", features = [] }
-# Spawns the storebound sidecar from Rust only; no capability grants the plugin's JS API.
-tauri-plugin-shell = "2"
-tauri-plugin-single-instance = { version = "2", features = ["deep-link"] }
-tauri-plugin-deep-link = "2"
-tauri-plugin-window-state = "2"
-# Opener, dialog, notification, updater and process are driven from Rust only (no JS permissions).
-tauri-plugin-opener = "2"
-tauri-plugin-dialog = "2"
-tauri-plugin-notification = "2"
-tauri-plugin-updater = "2"
-tauri-plugin-process = "2"
-# Store credentials: macOS Keychain, Windows Credential Manager, Secret Service on Linux.
-keyring = { version = "3", features = ["apple-native", "windows-native", "sync-secret-service", "crypto-rust"] }
-serde = { version = "1", features = ["derive"] }
-serde_json = "1"
-hmac = "0.12"
-sha2 = "0.10"
-base64 = "0.22"
-getrandom = "0.3"
-url = "2"
-tokio = { version = "1", features = ["sync", "time"] }
-# Offline cache of the last store reads (app data cache.sqlite); SQLite compiled in, nothing system-wide.
-rusqlite = { version = "0.38", features = ["bundled"] }
-# Dependencies screen downloads (ffmpeg, Chrome for Testing): the same HTTP stack the updater already brings.
-reqwest = { version = "0.13", default-features = false, features = ["rustls-no-provider", "system-proxy"] }
-rustls = { version = "0.23", default-features = false, features = ["ring", "std", "tls12"] }
-zip = { version = "4", default-features = false, features = ["deflate-flate2-zlib-rs"] }
-
-[dev-dependencies]
-tempfile = "3"
-
-[profile.release]
-codegen-units = 1
-lto = true
-opt-level = "s"
-panic = "abort"
-strip = true
diff --git a/apps/desktop/src-tauri/build.rs b/apps/desktop/src-tauri/build.rs
deleted file mode 100644
index a76dc9d..0000000
--- a/apps/desktop/src-tauri/build.rs
+++ /dev/null
@@ -1,11 +0,0 @@
-// App command manifest: every #[tauri::command] gets an `allow-<name>` permission, and a command no capability lists
-// is denied. The list lives in src/commands_list.rs so tests/security.rs can compare it with the capability files.
-include!("src/commands_list.rs");
-
-fn main() {
-    tauri_build::try_build(
-        tauri_build::Attributes::new()
-            .app_manifest(tauri_build::AppManifest::new().commands(COMMANDS)),
-    )
-    .expect("tauri build script failed");
-}
diff --git a/apps/desktop/src-tauri/capabilities/main.json b/apps/desktop/src-tauri/capabilities/main.json
deleted file mode 100644
index 2ef3bf4..0000000
--- a/apps/desktop/src-tauri/capabilities/main.json
+++ /dev/null
@@ -1,34 +0,0 @@
-{
-  "$schema": "../gen/schemas/desktop-schema.json",
-  "identifier": "main-window",
-  "description": "The main window with the app's own bundled pages only (no remote content). It may listen to app events (sidecar progress, tool downloads, deep links) and call the storebound app commands; every command re-checks the window label and page origin in Rust. No plugin API is granted to the webview: the sidecar is spawned from Rust with fixed arguments, dialogs, the opener, notifications, the updater and process control are driven from Rust only, and credentials never reach the page.",
-  "windows": [
-    "main"
-  ],
-  "local": true,
-  "permissions": [
-    "core:event:allow-listen",
-    "core:event:allow-unlisten",
-    "allow-app-info",
-    "allow-sidecar-status",
-    "allow-sidecar-call",
-    "allow-cache-get",
-    "allow-cache-clear",
-    "allow-job-cancel",
-    "allow-write-with-confirm",
-    "allow-projects-list",
-    "allow-project-add",
-    "allow-project-init",
-    "allow-project-remove",
-    "allow-project-set-accounts",
-    "allow-accounts-list",
-    "allow-account-add-play",
-    "allow-account-add-apple",
-    "allow-account-remove",
-    "allow-portfolio-status",
-    "allow-open-external",
-    "allow-tools-info",
-    "allow-tools-install",
-    "allow-tools-uninstall"
-  ]
-}
diff --git a/apps/desktop/src-tauri/icons/128x128.png b/apps/desktop/src-tauri/icons/128x128.png
deleted file mode 100644
index 92ac645..0000000
Binary files a/apps/desktop/src-tauri/icons/128x128.png and /dev/null differ
diff --git a/apps/desktop/src-tauri/icons/128x128@2x.png b/apps/desktop/src-tauri/icons/128x128@2x.png
deleted file mode 100644
index ab8b36b..0000000
Binary files a/apps/desktop/src-tauri/icons/128x128@2x.png and /dev/null differ
diff --git a/apps/desktop/src-tauri/icons/32x32.png b/apps/desktop/src-tauri/icons/32x32.png
deleted file mode 100644
index 7f2ebdc..0000000
Binary files a/apps/desktop/src-tauri/icons/32x32.png and /dev/null differ
diff --git a/apps/desktop/src-tauri/icons/icon.icns b/apps/desktop/src-tauri/icons/icon.icns
deleted file mode 100644
index 7708163..0000000
Binary files a/apps/desktop/src-tauri/icons/icon.icns and /dev/null differ
diff --git a/apps/desktop/src-tauri/icons/icon.ico b/apps/desktop/src-tauri/icons/icon.ico
deleted file mode 100644
index 27bd503..0000000
Binary files a/apps/desktop/src-tauri/icons/icon.ico and /dev/null differ
diff --git a/apps/desktop/src-tauri/icons/icon.png b/apps/desktop/src-tauri/icons/icon.png
deleted file mode 100644
index b0979b2..0000000
Binary files a/apps/desktop/src-tauri/icons/icon.png and /dev/null differ
diff --git a/apps/desktop/src-tauri/icons/icon.svg b/apps/desktop/src-tauri/icons/icon.svg
deleted file mode 100644
index 7980110..0000000
--- a/apps/desktop/src-tauri/icons/icon.svg
+++ /dev/null
@@ -1 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1024 1024"><defs><linearGradient id="g" x1="0" y1="0" x2="0" y2="1"><stop offset="0" stop-color="#6366f1"/><stop offset="1" stop-color="#4338ca"/></linearGradient></defs><rect x="100" y="100" width="824" height="824" rx="185" fill="url(#g)"/><path d="M512 288v384M336 464 512 288l176 176M256 640v176h512V640" fill="none" stroke="#fff" stroke-width="88" stroke-linecap="round" stroke-linejoin="round"/></svg>
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/account_add_apple.toml b/apps/desktop/src-tauri/permissions/autogenerated/account_add_apple.toml
deleted file mode 100644
index 898ea53..0000000
--- a/apps/desktop/src-tauri/permissions/autogenerated/account_add_apple.toml
+++ /dev/null
@@ -1,11 +0,0 @@
-# Automatically generated - DO NOT EDIT!
-
-[[permission]]
-identifier = "allow-account-add-apple"
-description = "Enables the account_add_apple command without any pre-configured scope."
-commands.allow = ["account_add_apple"]
-
-[[permission]]
-identifier = "deny-account-add-apple"
-description = "Denies the account_add_apple command without any pre-configured scope."
-commands.deny = ["account_add_apple"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/account_add_play.toml b/apps/desktop/src-tauri/permissions/autogenerated/account_add_play.toml
deleted file mode 100644
index fc4044e..0000000
--- a/apps/desktop/src-tauri/permissions/autogenerated/account_add_play.toml
+++ /dev/null
@@ -1,11 +0,0 @@
-# Automatically generated - DO NOT EDIT!
-
-[[permission]]
-identifier = "allow-account-add-play"
-description = "Enables the account_add_play command without any pre-configured scope."
-commands.allow = ["account_add_play"]
-
-[[permission]]
-identifier = "deny-account-add-play"
-description = "Denies the account_add_play command without any pre-configured scope."
-commands.deny = ["account_add_play"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/account_remove.toml b/apps/desktop/src-tauri/permissions/autogenerated/account_remove.toml
deleted file mode 100644
index 1bd8a73..0000000
--- a/apps/desktop/src-tauri/permissions/autogenerated/account_remove.toml
+++ /dev/null
@@ -1,11 +0,0 @@
-# Automatically generated - DO NOT EDIT!
-
-[[permission]]
-identifier = "allow-account-remove"
-description = "Enables the account_remove command without any pre-configured scope."
-commands.allow = ["account_remove"]
-
-[[permission]]
-identifier = "deny-account-remove"
-description = "Denies the account_remove command without any pre-configured scope."
-commands.deny = ["account_remove"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/accounts_list.toml b/apps/desktop/src-tauri/permissions/autogenerated/accounts_list.toml
deleted file mode 100644
index 54a88f0..0000000
--- a/apps/desktop/src-tauri/permissions/autogenerated/accounts_list.toml
+++ /dev/null
@@ -1,11 +0,0 @@
-# Automatically generated - DO NOT EDIT!
-
-[[permission]]
-identifier = "allow-accounts-list"
-description = "Enables the accounts_list command without any pre-configured scope."
-commands.allow = ["accounts_list"]
-
-[[permission]]
-identifier = "deny-accounts-list"
-description = "Denies the accounts_list command without any pre-configured scope."
-commands.deny = ["accounts_list"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/app_info.toml b/apps/desktop/src-tauri/permissions/autogenerated/app_info.toml
deleted file mode 100644
index 6ef3c4a..0000000
--- a/apps/desktop/src-tauri/permissions/autogenerated/app_info.toml
+++ /dev/null
@@ -1,11 +0,0 @@
-# Automatically generated - DO NOT EDIT!
-
-[[permission]]
-identifier = "allow-app-info"
-description = "Enables the app_info command without any pre-configured scope."
-commands.allow = ["app_info"]
-
-[[permission]]
-identifier = "deny-app-info"
-description = "Denies the app_info command without any pre-configured scope."
-commands.deny = ["app_info"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/cache_clear.toml b/apps/desktop/src-tauri/permissions/autogenerated/cache_clear.toml
deleted file mode 100644
index 935428c..0000000
--- a/apps/desktop/src-tauri/permissions/autogenerated/cache_clear.toml
+++ /dev/null
@@ -1,11 +0,0 @@
-# Automatically generated - DO NOT EDIT!
-
-[[permission]]
-identifier = "allow-cache-clear"
-description = "Enables the cache_clear command without any pre-configured scope."
-commands.allow = ["cache_clear"]
-
-[[permission]]
-identifier = "deny-cache-clear"
-description = "Denies the cache_clear command without any pre-configured scope."
-commands.deny = ["cache_clear"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/cache_get.toml b/apps/desktop/src-tauri/permissions/autogenerated/cache_get.toml
deleted file mode 100644
index c6b73dc..0000000
--- a/apps/desktop/src-tauri/permissions/autogenerated/cache_get.toml
+++ /dev/null
@@ -1,11 +0,0 @@
-# Automatically generated - DO NOT EDIT!
-
-[[permission]]
-identifier = "allow-cache-get"
-description = "Enables the cache_get command without any pre-configured scope."
-commands.allow = ["cache_get"]
-
-[[permission]]
-identifier = "deny-cache-get"
-description = "Denies the cache_get command without any pre-configured scope."
-commands.deny = ["cache_get"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/job_cancel.toml b/apps/desktop/src-tauri/permissions/autogenerated/job_cancel.toml
deleted file mode 100644
index 4ff0353..0000000
--- a/apps/desktop/src-tauri/permissions/autogenerated/job_cancel.toml
+++ /dev/null
@@ -1,11 +0,0 @@
-# Automatically generated - DO NOT EDIT!
-
-[[permission]]
-identifier = "allow-job-cancel"
-description = "Enables the job_cancel command without any pre-configured scope."
-commands.allow = ["job_cancel"]
-
-[[permission]]
-identifier = "deny-job-cancel"
-description = "Denies the job_cancel command without any pre-configured scope."
-commands.deny = ["job_cancel"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/open_external.toml b/apps/desktop/src-tauri/permissions/autogenerated/open_external.toml
deleted file mode 100644
index c9f4753..0000000
--- a/apps/desktop/src-tauri/permissions/autogenerated/open_external.toml
+++ /dev/null
@@ -1,11 +0,0 @@
-# Automatically generated - DO NOT EDIT!
-
-[[permission]]
-identifier = "allow-open-external"
-description = "Enables the open_external command without any pre-configured scope."
-commands.allow = ["open_external"]
-
-[[permission]]
-identifier = "deny-open-external"
-description = "Denies the open_external command without any pre-configured scope."
-commands.deny = ["open_external"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/portfolio_status.toml b/apps/desktop/src-tauri/permissions/autogenerated/portfolio_status.toml
deleted file mode 100644
index 16aff36..0000000
--- a/apps/desktop/src-tauri/permissions/autogenerated/portfolio_status.toml
+++ /dev/null
@@ -1,11 +0,0 @@
-# Automatically generated - DO NOT EDIT!
-
-[[permission]]
-identifier = "allow-portfolio-status"
-description = "Enables the portfolio_status command without any pre-configured scope."
-commands.allow = ["portfolio_status"]
-
-[[permission]]
-identifier = "deny-portfolio-status"
-description = "Denies the portfolio_status command without any pre-configured scope."
-commands.deny = ["portfolio_status"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/project_add.toml b/apps/desktop/src-tauri/permissions/autogenerated/project_add.toml
deleted file mode 100644
index af9c7d4..0000000
--- a/apps/desktop/src-tauri/permissions/autogenerated/project_add.toml
+++ /dev/null
@@ -1,11 +0,0 @@
-# Automatically generated - DO NOT EDIT!
-
-[[permission]]
-identifier = "allow-project-add"
-description = "Enables the project_add command without any pre-configured scope."
-commands.allow = ["project_add"]
-
-[[permission]]
-identifier = "deny-project-add"
-description = "Denies the project_add command without any pre-configured scope."
-commands.deny = ["project_add"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/project_init.toml b/apps/desktop/src-tauri/permissions/autogenerated/project_init.toml
deleted file mode 100644
index f042840..0000000
--- a/apps/desktop/src-tauri/permissions/autogenerated/project_init.toml
+++ /dev/null
@@ -1,11 +0,0 @@
-# Automatically generated - DO NOT EDIT!
-
-[[permission]]
-identifier = "allow-project-init"
-description = "Enables the project_init command without any pre-configured scope."
-commands.allow = ["project_init"]
-
-[[permission]]
-identifier = "deny-project-init"
-description = "Denies the project_init command without any pre-configured scope."
-commands.deny = ["project_init"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/project_remove.toml b/apps/desktop/src-tauri/permissions/autogenerated/project_remove.toml
deleted file mode 100644
index 758b2ba..0000000
--- a/apps/desktop/src-tauri/permissions/autogenerated/project_remove.toml
+++ /dev/null
@@ -1,11 +0,0 @@
-# Automatically generated - DO NOT EDIT!
-
-[[permission]]
-identifier = "allow-project-remove"
-description = "Enables the project_remove command without any pre-configured scope."
-commands.allow = ["project_remove"]
-
-[[permission]]
-identifier = "deny-project-remove"
-description = "Denies the project_remove command without any pre-configured scope."
-commands.deny = ["project_remove"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/project_set_accounts.toml b/apps/desktop/src-tauri/permissions/autogenerated/project_set_accounts.toml
deleted file mode 100644
index e17a6c7..0000000
--- a/apps/desktop/src-tauri/permissions/autogenerated/project_set_accounts.toml
+++ /dev/null
@@ -1,11 +0,0 @@
-# Automatically generated - DO NOT EDIT!
-
-[[permission]]
-identifier = "allow-project-set-accounts"
-description = "Enables the project_set_accounts command without any pre-configured scope."
-commands.allow = ["project_set_accounts"]
-
-[[permission]]
-identifier = "deny-project-set-accounts"
-description = "Denies the project_set_accounts command without any pre-configured scope."
-commands.deny = ["project_set_accounts"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/projects_list.toml b/apps/desktop/src-tauri/permissions/autogenerated/projects_list.toml
deleted file mode 100644
index deaa39c..0000000
--- a/apps/desktop/src-tauri/permissions/autogenerated/projects_list.toml
+++ /dev/null
@@ -1,11 +0,0 @@
-# Automatically generated - DO NOT EDIT!
-
-[[permission]]
-identifier = "allow-projects-list"
-description = "Enables the projects_list command without any pre-configured scope."
-commands.allow = ["projects_list"]
-
-[[permission]]
-identifier = "deny-projects-list"
-description = "Denies the projects_list command without any pre-configured scope."
-commands.deny = ["projects_list"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/sidecar_call.toml b/apps/desktop/src-tauri/permissions/autogenerated/sidecar_call.toml
deleted file mode 100644
index 556e1a3..0000000
--- a/apps/desktop/src-tauri/permissions/autogenerated/sidecar_call.toml
+++ /dev/null
@@ -1,11 +0,0 @@
-# Automatically generated - DO NOT EDIT!
-
-[[permission]]
-identifier = "allow-sidecar-call"
-description = "Enables the sidecar_call command without any pre-configured scope."
-commands.allow = ["sidecar_call"]
-
-[[permission]]
-identifier = "deny-sidecar-call"
-description = "Denies the sidecar_call command without any pre-configured scope."
-commands.deny = ["sidecar_call"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/sidecar_status.toml b/apps/desktop/src-tauri/permissions/autogenerated/sidecar_status.toml
deleted file mode 100644
index 9c06486..0000000
--- a/apps/desktop/src-tauri/permissions/autogenerated/sidecar_status.toml
+++ /dev/null
@@ -1,11 +0,0 @@
-# Automatically generated - DO NOT EDIT!
-
-[[permission]]
-identifier = "allow-sidecar-status"
-description = "Enables the sidecar_status command without any pre-configured scope."
-commands.allow = ["sidecar_status"]
-
-[[permission]]
-identifier = "deny-sidecar-status"
-description = "Denies the sidecar_status command without any pre-configured scope."
-commands.deny = ["sidecar_status"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/tools_info.toml b/apps/desktop/src-tauri/permissions/autogenerated/tools_info.toml
deleted file mode 100644
index 789f7f4..0000000
--- a/apps/desktop/src-tauri/permissions/autogenerated/tools_info.toml
+++ /dev/null
@@ -1,11 +0,0 @@
-# Automatically generated - DO NOT EDIT!
-
-[[permission]]
-identifier = "allow-tools-info"
-description = "Enables the tools_info command without any pre-configured scope."
-commands.allow = ["tools_info"]
-
-[[permission]]
-identifier = "deny-tools-info"
-description = "Denies the tools_info command without any pre-configured scope."
-commands.deny = ["tools_info"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/tools_install.toml b/apps/desktop/src-tauri/permissions/autogenerated/tools_install.toml
deleted file mode 100644
index 39e7086..0000000
--- a/apps/desktop/src-tauri/permissions/autogenerated/tools_install.toml
+++ /dev/null
@@ -1,11 +0,0 @@
-# Automatically generated - DO NOT EDIT!
-
-[[permission]]
-identifier = "allow-tools-install"
-description = "Enables the tools_install command without any pre-configured scope."
-commands.allow = ["tools_install"]
-
-[[permission]]
-identifier = "deny-tools-install"
-description = "Denies the tools_install command without any pre-configured scope."
-commands.deny = ["tools_install"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/tools_uninstall.toml b/apps/desktop/src-tauri/permissions/autogenerated/tools_uninstall.toml
deleted file mode 100644
index 3d8fe2a..0000000
--- a/apps/desktop/src-tauri/permissions/autogenerated/tools_uninstall.toml
+++ /dev/null
@@ -1,11 +0,0 @@
-# Automatically generated - DO NOT EDIT!
-
-[[permission]]
-identifier = "allow-tools-uninstall"
-description = "Enables the tools_uninstall command without any pre-configured scope."
-commands.allow = ["tools_uninstall"]
-
-[[permission]]
-identifier = "deny-tools-uninstall"
-description = "Denies the tools_uninstall command without any pre-configured scope."
-commands.deny = ["tools_uninstall"]
diff --git a/apps/desktop/src-tauri/permissions/autogenerated/write_with_confirm.toml b/apps/desktop/src-tauri/permissions/autogenerated/write_with_confirm.toml
deleted file mode 100644
index 0a642da..0000000
--- a/apps/desktop/src-tauri/permissions/autogenerated/write_with_confirm.toml
+++ /dev/null
@@ -1,11 +0,0 @@
-# Automatically generated - DO NOT EDIT!
-
-[[permission]]
-identifier = "allow-write-with-confirm"
-description = "Enables the write_with_confirm command without any pre-configured scope."
-commands.allow = ["write_with_confirm"]
-
-[[permission]]
-identifier = "deny-write-with-confirm"
-description = "Denies the write_with_confirm command without any pre-configured scope."
-commands.deny = ["write_with_confirm"]
diff --git a/apps/desktop/src-tauri/src/accounts.rs b/apps/desktop/src-tauri/src/accounts.rs
deleted file mode 100644
index 06f6b10..0000000
--- a/apps/desktop/src-tauri/src/accounts.rs
+++ /dev/null
@@ -1,134 +0,0 @@
-//! Store accounts. The secret part (Play service account JSON, App Store Connect .p8 key with its key id and issuer)
-//! goes into the OS credential store under the service `dev.storebound.desktop`; only a label, the kind and the
-//! creation time are kept in the app data folder. Secrets are never sent to the webview: they are read from the
-//! keychain right before a sidecar call and handed to it in that call's params (memory only), which passes them to
-//! the storebound command as environment variables.
-use serde::{Deserialize, Serialize};
-use serde_json::{Map, Value};
-
-pub const KEYRING_SERVICE: &str = "dev.storebound.desktop";
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize)]
-#[serde(rename_all = "lowercase")]
-pub enum AccountKind {
-    Play,
-    Apple,
-}
-
-/// What the app keeps on disk and shows: no secret, no key id, no email.
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub struct Account {
-    pub id: String,
-    pub label: String,
-    pub kind: AccountKind,
-    pub created: String,
-}
-
-/// The keychain entry of one account (JSON).
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-#[serde(tag = "kind", rename_all = "lowercase")]
-pub enum Secret {
-    Play { service_account: String },
-    Apple { key_id: String, issuer_id: String, p8: String },
-}
-
-impl Secret {
-    pub fn kind(&self) -> AccountKind {
-        match self {
-            Secret::Play { .. } => AccountKind::Play,
-            Secret::Apple { .. } => AccountKind::Apple,
-        }
-    }
-
-    /// The env names storebound reads (cli/lib/credentials.ts), as a sidecar `credentials` object.
-    pub fn to_credentials(&self, into: &mut Map<String, Value>) {
-        match self {
-            Secret::Play { service_account } => {
-                into.insert("PLAY_SERVICE_ACCOUNT".into(), Value::String(service_account.clone()));
-            }
-            Secret::Apple { key_id, issuer_id, p8 } => {
-                into.insert("ASC_KEY_ID".into(), Value::String(key_id.clone()));
-                into.insert("ASC_ISSUER_ID".into(), Value::String(issuer_id.clone()));
-                into.insert("ASC_P8".into(), Value::String(p8.clone()));
-            }
-        }
-    }
-}
-
-/// A Google service account JSON key: client_email and a PEM private key.
-pub fn check_service_account(text: &str) -> Result<String, String> {
-    let v: Value = serde_json::from_str(text).map_err(|_| "not a JSON file".to_string())?;
-    let email = v.get("client_email").and_then(Value::as_str).unwrap_or_default();
-    let key = v.get("private_key").and_then(Value::as_str).unwrap_or_default();
-    if email.is_empty() || !key.contains("PRIVATE KEY") {
-        return Err("not a Google service account key (client_email / private_key missing)".into());
-    }
-    // Store the compact form: no file path, nothing else from the disk.
-    serde_json::to_string(&v).map_err(|e| e.to_string())
-}
-
-/// App Store Connect key id: 10 upper-case letters or digits.
-pub fn check_key_id(s: &str) -> Result<String, String> {
-    let s = s.trim();
-    if s.len() == 10 && s.chars().all(|c| c.is_ascii_uppercase() || c.is_ascii_digit()) {
-        Ok(s.to_string())
-    } else {
-        Err("key id: 10 letters or digits, as shown in App Store Connect > Users and Access > Integrations".into())
-    }
-}
-
-/// App Store Connect issuer id: a UUID.
-pub fn check_issuer_id(s: &str) -> Result<String, String> {
-    let s = s.trim().to_ascii_lowercase();
-    let parts: Vec<&str> = s.split('-').collect();
-    let lens = [8, 4, 4, 4, 12];
-    let ok = parts.len() == 5
-        && parts.iter().zip(lens).all(|(p, n)| p.len() == n && p.chars().all(|c| c.is_ascii_hexdigit()));
-    if ok {
-        Ok(s)
-    } else {
-        Err("issuer id: the UUID shown above the keys in App Store Connect".into())
-    }
-}
-
-pub fn check_p8(text: &str) -> Result<String, String> {
-    if text.contains("-----BEGIN PRIVATE KEY-----") && text.contains("-----END PRIVATE KEY-----") {
-        Ok(text.trim().to_string() + "\n")
-    } else {
-        Err("not an App Store Connect .p8 key (BEGIN PRIVATE KEY missing)".into())
-    }
-}
-
-pub fn check_label(s: &str) -> Result<String, String> {
-    let s = s.trim();
-    if s.is_empty() || s.chars().count() > 60 || s.chars().any(char::is_control) {
-        return Err("name: 1 to 60 characters".into());
-    }
-    Ok(s.to_string())
-}
-
-/// Where secrets live. The OS keychain in the app; a map in tests.
-pub trait SecretStore: Send + Sync {
-    fn set(&self, id: &str, secret: &Secret) -> Result<(), String>;
-    fn get(&self, id: &str) -> Result<Secret, String>;
-    fn delete(&self, id: &str) -> Result<(), String>;
-}
-
-pub struct Keychain;
-
-impl SecretStore for Keychain {
-    fn set(&self, id: &str, secret: &Secret) -> Result<(), String> {
-        let json = serde_json::to_string(secret).map_err(|e| e.to_string())?;
-        keyring::Entry::new(KEYRING_SERVICE, id).and_then(|e| e.set_password(&json)).map_err(|e| format!("keychain: {e}"))
-    }
-    fn get(&self, id: &str) -> Result<Secret, String> {
-        let json = keyring::Entry::new(KEYRING_SERVICE, id).and_then(|e| e.get_password()).map_err(|e| format!("keychain: {e}"))?;
-        serde_json::from_str(&json).map_err(|_| "keychain: unreadable entry".to_string())
-    }
-    fn delete(&self, id: &str) -> Result<(), String> {
-        match keyring::Entry::new(KEYRING_SERVICE, id).and_then(|e| e.delete_credential()) {
-            Ok(()) | Err(keyring::Error::NoEntry) => Ok(()),
-            Err(e) => Err(format!("keychain: {e}")),
-        }
-    }
-}
diff --git a/apps/desktop/src-tauri/src/cache.rs b/apps/desktop/src-tauri/src/cache.rs
deleted file mode 100644
index 3bafb86..0000000
--- a/apps/desktop/src-tauri/src/cache.rs
+++ /dev/null
@@ -1,102 +0,0 @@
-//! Offline cache of the last successful reads (app data `cache.sqlite`): store status, health, reviews, TestFlight,
-//! catalog parity, listings, icons. The window shows a cached value with its "last read" time while nothing newer is
-//! there, and says "unknown" when there is none; a cached value is never shown as fresh. Secrets are never cached
-//! (results only, never params), and a project's rows go when the project is removed.
-use std::path::Path;
-use std::sync::Mutex;
-
-use rusqlite::{params, Connection, OptionalExtension};
-use serde::Serialize;
-use serde_json::Value;
-
-pub const FILE: &str = "cache.sqlite";
-/// Results above this size are not kept (logs of a long render, say); the window reads them live.
-pub const MAX_VALUE_BYTES: usize = 4 * 1024 * 1024;
-
-pub struct Cache {
-    db: Mutex<Connection>,
-}
-
-#[derive(Debug, Clone, PartialEq, Serialize)]
-pub struct Entry {
-    pub value: Value,
-    /// When it was read (RFC 3339 UTC).
-    pub at: String,
-}
-
-/// Cache key: project id, method and the canonical arguments (the same canonical JSON as confirm tokens).
-pub fn key(project: &str, method: &str, args: &Value) -> String {
-    let a = crate::confirm::canonical(args).unwrap_or_else(|_| args.to_string());
-    format!("{project}\u{1f}{method}\u{1f}{a}")
-}
-
-impl Cache {
-    pub fn open(dir: &Path) -> Result<Cache, String> {
-        std::fs::create_dir_all(dir).map_err(|e| e.to_string())?;
-        Cache::with(Connection::open(dir.join(FILE)).map_err(|e| e.to_string())?)
-    }
-
-    pub fn in_memory() -> Result<Cache, String> {
-        Cache::with(Connection::open_in_memory().map_err(|e| e.to_string())?)
-    }
-
-    fn with(db: Connection) -> Result<Cache, String> {
-        db.execute_batch(
-            "PRAGMA journal_mode=WAL;
-             CREATE TABLE IF NOT EXISTS reads (
-               key TEXT PRIMARY KEY,
-               project TEXT NOT NULL,
-               method TEXT NOT NULL,
-               value TEXT NOT NULL,
-               at TEXT NOT NULL
-             );
-             CREATE INDEX IF NOT EXISTS reads_project ON reads(project);",
-        )
-        .map_err(|e| e.to_string())?;
-        Ok(Cache { db: Mutex::new(db) })
-    }
-
-    pub fn put(&self, project: &str, method: &str, args: &Value, value: &Value, at: &str) -> Result<(), String> {
-        let text = value.to_string();
-        if text.len() > MAX_VALUE_BYTES {
-            return Ok(());
-        }
-        let db = self.db.lock().map_err(|_| "cache poisoned")?;
-        db.execute(
-            "INSERT INTO reads(key, project, method, value, at) VALUES (?1, ?2, ?3, ?4, ?5)
-             ON CONFLICT(key) DO UPDATE SET value = excluded.value, at = excluded.at",
-            params![key(project, method, args), project, method, text, at],
-        )
-        .map_err(|e| e.to_string())?;
-        Ok(())
-    }
-
-    pub fn get(&self, project: &str, method: &str, args: &Value) -> Result<Option<Entry>, String> {
-        let db = self.db.lock().map_err(|_| "cache poisoned")?;
-        let row: Option<(String, String)> = db
-            .query_row("SELECT value, at FROM reads WHERE key = ?1", params![key(project, method, args)], |r| Ok((r.get(0)?, r.get(1)?)))
-            .optional()
-            .map_err(|e| e.to_string())?;
-        Ok(row.and_then(|(v, at)| serde_json::from_str(&v).ok().map(|value| Entry { value, at })))
-    }
-
-    /// Every cached method of a project with its time (for the "last read" stamps).
-    pub fn stamps(&self, project: &str) -> Result<Vec<(String, String)>, String> {
-        let db = self.db.lock().map_err(|_| "cache poisoned")?;
-        let mut st = db.prepare("SELECT method, MAX(at) FROM reads WHERE project = ?1 GROUP BY method ORDER BY method").map_err(|e| e.to_string())?;
-        let rows = st.query_map(params![project], |r| Ok((r.get::<_, String>(0)?, r.get::<_, String>(1)?))).map_err(|e| e.to_string())?;
-        rows.collect::<Result<Vec<_>, _>>().map_err(|e| e.to_string())
-    }
-
-    pub fn forget_project(&self, project: &str) -> Result<(), String> {
-        let db = self.db.lock().map_err(|_| "cache poisoned")?;
-        db.execute("DELETE FROM reads WHERE project = ?1", params![project]).map_err(|e| e.to_string())?;
-        Ok(())
-    }
-
-    pub fn clear(&self) -> Result<(), String> {
-        let db = self.db.lock().map_err(|_| "cache poisoned")?;
-        db.execute("DELETE FROM reads", []).map_err(|e| e.to_string())?;
-        Ok(())
-    }
-}
diff --git a/apps/desktop/src-tauri/src/commands.rs b/apps/desktop/src-tauri/src/commands.rs
deleted file mode 100644
index aaca49b..0000000
--- a/apps/desktop/src-tauri/src/commands.rs
+++ /dev/null
@@ -1,543 +0,0 @@
-//! App commands. Each one first checks the calling window and page (policy::require_main). Secrets never cross into
-//! the webview: account files are picked in native dialogs and read here, and credentials go from the keychain
-//! straight into the sidecar call.
-use std::path::{Path, PathBuf};
-use std::sync::Arc;
-use std::sync::Mutex;
-
-use serde::Serialize;
-use serde_json::{json, Map, Value};
-use tauri::{AppHandle, Emitter, Manager, State, WebviewWindow};
-use tauri_plugin_dialog::{DialogExt, MessageDialogButtons, MessageDialogKind};
-use tauri_plugin_opener::OpenerExt;
-
-use crate::accounts::{self, Account, AccountKind, Secret, SecretStore};
-use crate::cache::{Cache, Entry};
-use crate::downloads;
-use crate::policy::{self, Kind};
-use crate::sidecar::{valid_job, Fail, Progress, Sidecar};
-use crate::store::{self, Project, State as Saved};
-
-pub struct AppState {
-    pub sidecar: Sidecar,
-    pub data_dir: PathBuf,
-    pub saved: Mutex<Saved>,
-    pub secrets: Box<dyn SecretStore>,
-    pub cache: Cache,
-    pub downloads: downloads::Jobs,
-}
-
-type Res<T> = Result<T, Fail>;
-
-fn guard(w: &WebviewWindow) -> Res<()> {
-    let url = w.url().map_err(|e| Fail::host(e.to_string()))?;
-    policy::require_main(w.label(), &url, cfg!(debug_assertions)).map_err(Fail::host)
-}
-
-fn saved(s: &AppState) -> Res<std::sync::MutexGuard<'_, Saved>> {
-    s.saved.lock().map_err(|_| Fail::host("state poisoned"))
-}
-
-fn persist(s: &AppState, st: &Saved) -> Res<()> {
-    store::save(&s.data_dir, st).map_err(Fail::host)
-}
-
-fn job_of(job: Option<String>) -> Res<Option<String>> {
-    match job {
-        Some(j) if !valid_job(&j) => Err(Fail::host("bad job id")),
-        j => Ok(j),
-    }
-}
-
-/// Project folder + credentials of its mapped accounts, as sidecar params.
-fn project_params(s: &AppState, project_id: &str) -> Res<(Project, Map<String, Value>)> {
-    let p = saved(s)?.projects.iter().find(|p| p.id == project_id).cloned().ok_or_else(|| Fail::host("unknown project"))?;
-    let mut creds = Map::new();
-    for id in [&p.play_account, &p.apple_account].into_iter().flatten() {
-        // A missing keychain entry is not fatal: the command says which credential it lacks.
-        if let Ok(secret) = s.secrets.get(id) {
-            secret.to_credentials(&mut creds);
-        }
-    }
-    Ok((p, creds))
-}
-
-#[derive(Serialize)]
-pub struct AppInfo {
-    version: &'static str,
-    identifier: String,
-    platform: &'static str,
-    debug: bool,
-    /// Shown as "~" in paths, so screenshots do not carry the account name.
-    home: Option<String>,
-}
-
-#[tauri::command]
-pub fn app_info(window: WebviewWindow, app: AppHandle) -> Res<AppInfo> {
-    guard(&window)?;
-    Ok(AppInfo {
-        version: env!("CARGO_PKG_VERSION"),
-        identifier: app.config().identifier.clone(),
-        platform: std::env::consts::OS,
-        debug: cfg!(debug_assertions),
-        home: app.path().home_dir().ok().map(|h| h.to_string_lossy().to_string()),
-    })
-}
-
-#[tauri::command]
-pub async fn sidecar_status(window: WebviewWindow, app: AppHandle, state: State<'_, AppState>) -> Res<Value> {
-    guard(&window)?;
-    let r = state.sidecar.get(&app).await?;
-    let tools = r.call("system.tools", json!({})).await.unwrap_or(Value::Null);
-    Ok(json!({ "running": r.alive(), "version": r.version, "protocol": r.protocol, "methods": r.methods, "tools": tools }))
-}
-
-/// A read (or dry-run write) through the sidecar. Writes from here are always dry runs (policy::sanitize_js_call).
-/// Successful reads of a project are kept in the offline cache (results only, never the credentials).
-#[tauri::command]
-pub async fn sidecar_call(window: WebviewWindow, app: AppHandle, state: State<'_, AppState>, method: String, project_id: Option<String>, params: Option<Value>, job: Option<String>) -> Res<Value> {
-    guard(&window)?;
-    let job = job_of(job)?;
-    let r = state.sidecar.get(&app).await?;
-    let kind = r.kind(&method);
-    let mut p = policy::sanitize_js_call(&method, kind, &params.unwrap_or(Value::Null)).map_err(Fail::host)?;
-    let args = p.get("args").cloned().unwrap_or_else(|| json!({}));
-    let mut cache_project = None;
-    if matches!(kind, Some(Kind::Read | Kind::Write)) {
-        let id = project_id.ok_or_else(|| Fail::host(format!("{method} needs a project")))?;
-        let (proj, creds) = project_params(&state, &id)?;
-        let o = p.as_object_mut().ok_or_else(|| Fail::host("params"))?;
-        o.insert("project".into(), Value::String(proj.path));
-        if !creds.is_empty() && method != "project.inspect" {
-            o.insert("credentials".into(), Value::Object(creds));
-        }
-        if kind == Some(Kind::Read) {
-            cache_project = Some(id);
-        }
-    }
-    let res = r.call_job(&method, p, job.as_deref()).await?;
-    if let Some(id) = cache_project {
-        // only results that read something: a failed store read must not hide the last good one
-        if res["ok"] == Value::Bool(true) && !res["data"].is_null() {
-            let _ = state.cache.put(&id, &method, &args, &res, &store::now_iso());
-        }
-    }
-    Ok(res)
-}
-
-/// The last cached result of a read (`project_id` "*" for the portfolio), with its time; null when never read.
-#[tauri::command]
-pub fn cache_get(window: WebviewWindow, state: State<'_, AppState>, method: String, project_id: String, args: Option<Value>) -> Res<Option<Entry>> {
-    guard(&window)?;
-    state.cache.get(&project_id, &method, &args.unwrap_or_else(|| json!({}))).map_err(Fail::host)
-}
-
-#[tauri::command]
-pub fn cache_clear(window: WebviewWindow, state: State<'_, AppState>) -> Res<()> {
-    guard(&window)?;
-    state.cache.clear().map_err(Fail::host)
-}
-
-/// Stops a running job: its sidecar requests (`$/cancelRequest`) and a running download.
-#[tauri::command]
-pub async fn job_cancel(window: WebviewWindow, state: State<'_, AppState>, job: String) -> Res<bool> {
-    guard(&window)?;
-    if !valid_job(&job) {
-        return Err(Fail::host("bad job id"));
-    }
-    let mut hit = state.downloads.cancel(&job);
-    if let Some(r) = state.sidecar.current().await {
-        hit |= r.cancel_job(&job) > 0;
-        hit |= r.cancel_job(&format!("{job}:p")) > 0;
-    }
-    Ok(hit)
-}
-
-const DIALOG_LINES: usize = 28;
-const DIALOG_CHARS: usize = 2_400;
-
-/// Last lines of a dry run for the dialog (native alerts do not scroll well).
-pub fn dialog_excerpt(output: &str) -> String {
-    let lines: Vec<&str> = output.lines().filter(|l| !l.trim().is_empty()).collect();
-    let start = lines.len().saturating_sub(DIALOG_LINES);
-    let mut s = lines[start..].join("\n");
-    if s.chars().count() > DIALOG_CHARS {
-        s = s.chars().rev().take(DIALOG_CHARS).collect::<Vec<_>>().into_iter().rev().collect();
-        s = format!("...{s}");
-    }
-    if start > 0 {
-        s = format!("({start} earlier lines in the app log)\n{s}");
-    }
-    s
-}
-
-/// The home folder as "~" in dialog text, so a screenshot or screen share does not carry the account name.
-pub fn tilde(text: &str, home: Option<&str>) -> String {
-    match home.map(|h| h.trim_end_matches(['/', '\\'])) {
-        Some(h) if h.len() > 1 => text.replace(h, "~"),
-        _ => text.to_string(),
-    }
-}
-
-/// Human summary shown above the dry run in the confirm dialog.
-pub fn dialog_summary(title: &str, description: &str, project: &str, network: bool, destructive: bool) -> String {
-    let mut s = format!("{title} · {project}\n\n{description}\n\n");
-    s.push_str(if network { "This changes your store records (not public until you submit or release in the console)." } else { "This changes local files only." });
-    if destructive {
-        s.push_str("\nIt replaces what is there now.");
-    }
-    s
-}
-
-/// Native Apply / Cancel dialog; true on Apply.
-async fn confirm_dialog(window: &WebviewWindow, title: String, text: String) -> Res<bool> {
-    let w = window.clone();
-    tauri::async_runtime::spawn_blocking(move || {
-        w.app_handle()
-            .dialog()
-            .message(text)
-            .title(title)
-            .kind(MessageDialogKind::Warning)
-            .buttons(MessageDialogButtons::OkCancelCustom("Apply".into(), "Cancel".into()))
-            .parent(&w)
-            .blocking_show()
-    })
-    .await
-    .map_err(|e| Fail::host(e.to_string()))
-}
-
-/// Dry run, then a native dialog with the summary and the dry run, then (only on Apply) the real run with a confirm
-/// token minted here for exactly this method, project and arguments.
-#[tauri::command]
-pub async fn write_with_confirm(window: WebviewWindow, app: AppHandle, state: State<'_, AppState>, method: String, project_id: String, args: Option<Value>, job: Option<String>) -> Res<Value> {
-    guard(&window)?;
-    let job = job_of(job)?;
-    let r = state.sidecar.get(&app).await?;
-    if r.kind(&method) != Some(Kind::Write) || method == "project.init" {
-        return Err(Fail::host(format!("{method} is not a write method of an app folder")));
-    }
-    let d = r.descriptor(&method).cloned().ok_or_else(|| Fail::host("unknown method"))?;
-    let args = match args.unwrap_or(json!({})) {
-        Value::Object(o) => Value::Object(o),
-        _ => return Err(Fail::host("args must be an object")),
-    };
-    let (proj, creds) = project_params(&state, &project_id)?;
-    let mut dry_params = json!({ "project": proj.path, "args": args, "dryRun": true });
-    if !creds.is_empty() {
-        dry_params["credentials"] = Value::Object(creds.clone());
-    }
-    let dry = r.call_job(&method, dry_params, job.as_deref()).await?;
-    if dry["ok"] != Value::Bool(true) {
-        return Ok(json!({ "confirmed": false, "stage": "dry-run", "dryRun": dry }));
-    }
-    let text = format!(
-        "{}\n\nDry run ({}):\n{}",
-        dialog_summary(&d.title, &d.description, &proj.name, d.network, d.destructive),
-        dry["command"].as_str().unwrap_or_default(),
-        dialog_excerpt(dry["output"].as_str().unwrap_or_default())
-    );
-    let home = app.path().home_dir().ok().map(|h| h.to_string_lossy().to_string());
-    if !confirm_dialog(&window, format!("Apply: {}", d.title), tilde(&text, home.as_deref())).await? {
-        return Ok(json!({ "confirmed": false, "stage": "dialog", "dryRun": dry }));
-    }
-    let bound = json!({ "project": proj.path, "args": args });
-    let token = r.mint(&method, &bound).map_err(Fail::host)?;
-    let mut real = json!({ "project": proj.path, "args": args, "dryRun": false, "confirmToken": token });
-    if !creds.is_empty() {
-        real["credentials"] = Value::Object(creds);
-    }
-    let result = r.call_job(&method, real, job.as_deref()).await?;
-    Ok(json!({ "confirmed": true, "stage": "done", "dryRun": dry, "result": result }))
-}
-
-#[tauri::command]
-pub fn projects_list(window: WebviewWindow, state: State<'_, AppState>) -> Res<Vec<Project>> {
-    guard(&window)?;
-    Ok(saved(&state)?.projects.clone())
-}
-
-const CONFIG_NAMES: [&str; 3] = ["storebound.config.ts", "storebound.config.js", "storebound.config.json"];
-
-pub fn has_config(dir: &Path) -> bool {
-    CONFIG_NAMES.iter().any(|n| dir.join(n).is_file())
-}
-
-async fn pick_folder(window: &WebviewWindow, title: &'static str) -> Res<Option<PathBuf>> {
-    let w = window.clone();
-    let picked = tauri::async_runtime::spawn_blocking(move || w.app_handle().dialog().file().set_title(title).set_parent(&w).blocking_pick_folder())
-        .await
-        .map_err(|e| Fail::host(e.to_string()))?;
-    let Some(picked) = picked else { return Ok(None) };
-    let dir = picked.into_path().map_err(|e| Fail::host(e.to_string()))?;
-    Ok(Some(std::fs::canonicalize(&dir).unwrap_or(dir)))
-}
-
-/// Adds a folder that has a config (inspected by the sidecar) to the list.
-async fn add_folder(app: &AppHandle, state: &AppState, dir: &Path) -> Res<Project> {
-    let path = dir.to_string_lossy().to_string();
-    if saved(state)?.projects.iter().any(|p| p.path == path) {
-        return Err(Fail::host("this folder is already in the list"));
-    }
-    let r = state.sidecar.get(app).await?;
-    let summary = r.call("project.inspect", json!({ "project": path })).await?;
-    let project = Project {
-        id: store::new_id()?,
-        path,
-        name: summary["name"].as_str().unwrap_or("?").to_string(),
-        play_account: None,
-        apple_account: None,
-        added: store::now_iso(),
-    };
-    let mut st = saved(state)?;
-    st.projects.push(project.clone());
-    persist(state, &st)?;
-    Ok(project)
-}
-
-/// Native folder picker; the folder must contain storebound.config.ts and load (project.inspect). None = cancelled.
-#[tauri::command]
-pub async fn project_add(window: WebviewWindow, app: AppHandle, state: State<'_, AppState>) -> Res<Option<Project>> {
-    guard(&window)?;
-    let Some(dir) = pick_folder(&window, "Add an app folder (with storebound.config.ts)").await? else { return Ok(None) };
-    if !has_config(&dir) {
-        return Err(Fail::host(format!("no storebound.config.ts in {}", dir.display())));
-    }
-    add_folder(&app, &state, &dir).await.map(Some)
-}
-
-pub const PROFILES: [&str; 3] = ["app", "game", "subscription-app"];
-
-/// `storebound init` for a new app folder: native folder picker, the dry run in a native dialog, then the templates
-/// for `profile` are written (existing files kept) and the folder is added. None = cancelled at any step.
-#[tauri::command]
-pub async fn project_init(window: WebviewWindow, app: AppHandle, state: State<'_, AppState>, profile: String) -> Res<Option<Project>> {
-    guard(&window)?;
-    if !PROFILES.contains(&profile.as_str()) {
-        return Err(Fail::host("profile: app, game or subscription-app"));
-    }
-    let Some(dir) = pick_folder(&window, "Choose the app's folder (storebound files go into it)").await? else { return Ok(None) };
-    if has_config(&dir) {
-        return Err(Fail::host("this folder already has a storebound config: add it instead"));
-    }
-    let path = dir.to_string_lossy().to_string();
-    let args = json!({ "profile": profile });
-    let r = state.sidecar.get(&app).await?;
-    let dry = r.call("project.init", json!({ "project": path, "args": args, "dryRun": true })).await?;
-    if dry["ok"] != Value::Bool(true) {
-        return Err(Fail::host(format!("init dry run failed: {}", dialog_excerpt(dry["output"].as_str().unwrap_or_default()))));
-    }
-    let home = app.path().home_dir().ok().map(|h| h.to_string_lossy().to_string());
-    let text = format!(
-        "Start an app folder · {profile} profile\n\n{path}\n\nCopies the storebound templates into this folder; existing files are kept. Every answer in them is a starting point to edit.\n\n{}",
-        dialog_excerpt(dry["output"].as_str().unwrap_or_default())
-    );
-    if !confirm_dialog(&window, "Apply: Start an app folder".into(), tilde(&text, home.as_deref())).await? {
-        return Ok(None);
-    }
-    let token = r.mint("project.init", &json!({ "project": path, "args": args })).map_err(Fail::host)?;
-    let res = r.call("project.init", json!({ "project": path, "args": args, "dryRun": false, "confirmToken": token })).await?;
-    if res["ok"] != Value::Bool(true) {
-        return Err(Fail::host(format!("init failed: {}", dialog_excerpt(res["output"].as_str().unwrap_or_default()))));
-    }
-    add_folder(&app, &state, &dir).await.map(Some)
-}
-
-#[tauri::command]
-pub fn project_remove(window: WebviewWindow, state: State<'_, AppState>, id: String) -> Res<()> {
-    guard(&window)?;
-    let mut st = saved(&state)?;
-    st.projects.retain(|p| p.id != id);
-    let _ = state.cache.forget_project(&id);
-    persist(&state, &st)
-}
-
-#[tauri::command]
-pub fn project_set_accounts(window: WebviewWindow, state: State<'_, AppState>, id: String, play: Option<String>, apple: Option<String>) -> Res<Project> {
-    guard(&window)?;
-    let mut st = saved(&state)?;
-    let kind_of = |acc: &Option<String>| acc.as_ref().map(|a| st.accounts.iter().find(|x| &x.id == a).map(|x| x.kind));
-    if let Some(k) = kind_of(&play) {
-        if k != Some(AccountKind::Play) {
-            return Err(Fail::host("not a Google Play account"));
-        }
-    }
-    if let Some(k) = kind_of(&apple) {
-        if k != Some(AccountKind::Apple) {
-            return Err(Fail::host("not an App Store Connect account"));
-        }
-    }
-    let p = st.projects.iter_mut().find(|p| p.id == id).ok_or_else(|| Fail::host("unknown project"))?;
-    p.play_account = play;
-    p.apple_account = apple;
-    let out = p.clone();
-    persist(&state, &st)?;
-    Ok(out)
-}
-
-#[tauri::command]
-pub fn accounts_list(window: WebviewWindow, state: State<'_, AppState>) -> Res<Vec<Account>> {
-    guard(&window)?;
-    Ok(saved(&state)?.accounts.clone())
-}
-
-fn add_account(state: &AppState, label: &str, secret: Secret) -> Res<Account> {
-    let label = accounts::check_label(label).map_err(Fail::host)?;
-    let acc = Account { id: store::new_id()?, label, kind: secret.kind(), created: store::now_iso() };
-    state.secrets.set(&acc.id, &secret).map_err(Fail::host)?;
-    let mut st = saved(state)?;
-    st.accounts.push(acc.clone());
-    if let Err(e) = persist(state, &st) {
-        let _ = state.secrets.delete(&acc.id);
-        return Err(e);
-    }
-    Ok(acc)
-}
-
-async fn pick_file(window: &WebviewWindow, title: &'static str, filter: (&'static str, &'static [&'static str])) -> Res<Option<String>> {
-    let w = window.clone();
-    let picked = tauri::async_runtime::spawn_blocking(move || w.app_handle().dialog().file().set_title(title).add_filter(filter.0, filter.1).set_parent(&w).blocking_pick_file())
-        .await
-        .map_err(|e| Fail::host(e.to_string()))?;
-    let Some(p) = picked else { return Ok(None) };
-    let path = p.into_path().map_err(|e| Fail::host(e.to_string()))?;
-    let meta = std::fs::metadata(&path).map_err(|e| Fail::host(e.to_string()))?;
-    if meta.len() > 64 * 1024 {
-        return Err(Fail::host("file too large for a key"));
-    }
-    std::fs::read_to_string(&path).map(Some).map_err(|e| Fail::host(e.to_string()))
-}
-
-/// Google Play: pick the service account JSON key in a native dialog; it goes to the keychain only.
-#[tauri::command]
-pub async fn account_add_play(window: WebviewWindow, state: State<'_, AppState>, label: String) -> Res<Option<Account>> {
-    guard(&window)?;
-    accounts::check_label(&label).map_err(Fail::host)?;
-    let Some(text) = pick_file(&window, "Google Play service account key (JSON)", ("JSON key", &["json"])).await? else { return Ok(None) };
-    let sa = accounts::check_service_account(&text).map_err(Fail::host)?;
-    add_account(&state, &label, Secret::Play { service_account: sa }).map(Some)
-}
-
-/// App Store Connect: key id + issuer id typed in the app, the .p8 picked in a native dialog; all to the keychain.
-#[tauri::command]
-pub async fn account_add_apple(window: WebviewWindow, state: State<'_, AppState>, label: String, key_id: String, issuer_id: String) -> Res<Option<Account>> {
-    guard(&window)?;
-    accounts::check_label(&label).map_err(Fail::host)?;
-    let key_id = accounts::check_key_id(&key_id).map_err(Fail::host)?;
-    let issuer_id = accounts::check_issuer_id(&issuer_id).map_err(Fail::host)?;
-    let Some(text) = pick_file(&window, "App Store Connect API key (.p8)", ("API key", &["p8"])).await? else { return Ok(None) };
-    let p8 = accounts::check_p8(&text).map_err(Fail::host)?;
-    add_account(&state, &label, Secret::Apple { key_id, issuer_id, p8 }).map(Some)
-}
-
-#[tauri::command]
-pub fn account_remove(window: WebviewWindow, state: State<'_, AppState>, id: String) -> Res<()> {
-    guard(&window)?;
-    state.secrets.delete(&id).map_err(Fail::host)?;
-    let mut st = saved(&state)?;
-    st.accounts.retain(|a| a.id != id);
-    for p in st.projects.iter_mut() {
-        if p.play_account.as_deref() == Some(id.as_str()) {
-            p.play_account = None;
-        }
-        if p.apple_account.as_deref() == Some(id.as_str()) {
-            p.apple_account = None;
-        }
-    }
-    persist(&state, &st)
-}
-
-/// Store reads run at most this many apps at once (each is two status reads).
-const LIVE_PARALLEL: usize = 4;
-
-/// `portfolio.status` over every project. Offline unless `live`; live reads every app with its own accounts, several
-/// at once, and sends one progress line per finished app (job progress n / total). Each live app result is cached;
-/// the whole live result too (project "*"), so the portfolio shows the last read when offline.
-#[tauri::command]
-pub async fn portfolio_status(window: WebviewWindow, app: AppHandle, state: State<'_, AppState>, live: Option<bool>, job: Option<String>) -> Res<Value> {
-    guard(&window)?;
-    let job = job_of(job)?;
-    let projects = saved(&state)?.projects.clone();
-    if projects.is_empty() {
-        return Ok(json!({ "apps": [], "at": store::now_iso() }));
-    }
-    let r = state.sidecar.get(&app).await?;
-    if live != Some(true) {
-        let paths: Vec<&str> = projects.iter().map(|p| p.path.as_str()).collect();
-        return r.call_job("portfolio.status", json!({ "projects": paths }), job.as_deref()).await;
-    }
-    let total = projects.len();
-    let sem = Arc::new(tokio::sync::Semaphore::new(LIVE_PARALLEL));
-    let done = Arc::new(std::sync::atomic::AtomicUsize::new(0));
-    let mut handles = Vec::new();
-    for p in &projects {
-        let (_, creds) = project_params(&state, &p.id)?;
-        let (r, sem, done, app, job, path, id) = (r.clone(), sem.clone(), done.clone(), app.clone(), job.clone(), p.path.clone(), p.id.clone());
-        handles.push(tauri::async_runtime::spawn(async move {
-            let _permit = sem.acquire_owned().await.ok();
-            let sub = job.as_ref().map(|j| format!("{j}:p"));
-            let res = r.call_job("portfolio.status", json!({ "projects": [path], "live": true, "credentials": creds }), sub.as_deref()).await;
-            let n = done.fetch_add(1, std::sync::atomic::Ordering::SeqCst) + 1;
-            let _ = app.emit_to(policy::MAIN, "sidecar-progress", Progress { params: json!({ "requestId": 0, "n": n, "total": total, "project": path }), job: job.clone() });
-            (id, res)
-        }));
-    }
-    let mut all = Vec::new();
-    let at = store::now_iso();
-    for h in handles {
-        let (id, res) = h.await.map_err(|e| Fail::host(e.to_string()))?;
-        let res = res?;
-        for a in res["apps"].as_array().cloned().unwrap_or_default() {
-            let _ = state.cache.put(&id, "portfolio.app", &json!({}), &a, &at);
-            all.push(a);
-        }
-    }
-    let out = json!({ "apps": all, "at": at });
-    let _ = state.cache.put("*", "portfolio.status", &json!({ "live": true }), &out, &at);
-    Ok(out)
-}
-
-#[tauri::command]
-pub fn open_external(window: WebviewWindow, app: AppHandle, url: String) -> Res<()> {
-    guard(&window)?;
-    let u = url::Url::parse(&url).map_err(|_| Fail::host("not a URL"))?;
-    if !policy::external_allowed(&u) {
-        return Err(Fail::host("only the store consoles and storebound.dev open from here"));
-    }
-    app.opener().open_url(u.as_str(), None::<&str>).map_err(|e| Fail::host(e.to_string()))
-}
-
-/// What the Dependencies screen can download on this platform, and what is installed.
-#[tauri::command]
-pub fn tools_info(window: WebviewWindow, state: State<'_, AppState>) -> Res<Vec<downloads::DownloadInfo>> {
-    guard(&window)?;
-    downloads::info(&state.data_dir).map_err(Fail::host)
-}
-
-/// Downloads, verifies and installs ffmpeg or Chrome for Testing into the app data folder (progress: `tool-download`
-/// events with the job id; job_cancel stops it). The sidecar restarts afterwards so it sees the new tool.
-#[tauri::command]
-pub async fn tools_install(window: WebviewWindow, app: AppHandle, state: State<'_, AppState>, tool: String, job: String) -> Res<String> {
-    guard(&window)?;
-    if !valid_job(&job) || !matches!(tool.as_str(), "ffmpeg" | "chrome") {
-        return Err(Fail::host("bad tool or job"));
-    }
-    let flag = state.downloads.start(&job).map_err(Fail::host)?;
-    let handle = app.clone();
-    let res = downloads::install(&state.data_dir, &tool, &job, flag, move |e| {
-        let _ = handle.emit_to(policy::MAIN, "tool-download", e);
-    })
-    .await;
-    state.downloads.finish(&job);
-    if res.is_ok() {
-        state.sidecar.shutdown().await;
-    }
-    res.map_err(Fail::host)
-}
-
-#[tauri::command]
-pub async fn tools_uninstall(window: WebviewWindow, state: State<'_, AppState>, tool: String) -> Res<()> {
-    guard(&window)?;
-    downloads::uninstall(&state.data_dir, &tool).map_err(Fail::host)?;
-    state.sidecar.shutdown().await;
-    Ok(())
-}
diff --git a/apps/desktop/src-tauri/src/commands_list.rs b/apps/desktop/src-tauri/src/commands_list.rs
deleted file mode 100644
index ce2e1fc..0000000
--- a/apps/desktop/src-tauri/src/commands_list.rs
+++ /dev/null
@@ -1,25 +0,0 @@
-/// Every app command the webview can call. build.rs turns each into an `allow-<name>` permission (underscores become
-/// dashes); capabilities/main.json grants them to the `main` window only; tests/security.rs checks both lists match.
-pub const COMMANDS: &[&str] = &[
-    "app_info",
-    "sidecar_status",
-    "sidecar_call",
-    "cache_get",
-    "cache_clear",
-    "job_cancel",
-    "write_with_confirm",
-    "projects_list",
-    "project_add",
-    "project_init",
-    "project_remove",
-    "project_set_accounts",
-    "accounts_list",
-    "account_add_play",
-    "account_add_apple",
-    "account_remove",
-    "portfolio_status",
-    "open_external",
-    "tools_info",
-    "tools_install",
-    "tools_uninstall",
-];
diff --git a/apps/desktop/src-tauri/src/confirm.rs b/apps/desktop/src-tauri/src/confirm.rs
deleted file mode 100644
index fca5cc8..0000000
--- a/apps/desktop/src-tauri/src/confirm.rs
+++ /dev/null
@@ -1,100 +0,0 @@
-//! Confirm tokens, host side. The same scheme as cli/lib/confirm-token.ts (the sidecar verifies):
-//!
-//!   token   = "sbt1." + expiry_ms + "." + nonce + "." + base64url(HMAC-SHA256(secret, payload))
-//!   payload = "storebound-confirm-v1\n" + method + "\n" + canonical(params) + "\n" + expiry_ms + "\n" + nonce
-//!
-//! The secret is 32 random bytes made per sidecar start and handed over in `session.hello` on the sidecar's stdin; it
-//! never leaves this process otherwise. Tokens are minted only by `commands::write_with_confirm`, right after the owner
-//! pressed the confirm button of the native dialog that showed the dry run.
-use base64::{engine::general_purpose::URL_SAFE_NO_PAD, Engine};
-use hmac::{Hmac, Mac};
-use serde_json::Value;
-use sha2::Sha256;
-
-pub const PREFIX: &str = "sbt1";
-pub const DOMAIN: &str = "storebound-confirm-v1";
-/// Lifetime of a minted token: the real call follows the dialog right away.
-pub const TTL_MS: u64 = 60_000;
-const MAX_SAFE_INTEGER: i64 = 9_007_199_254_740_991;
-
-/// Canonical JSON, byte for byte what the TypeScript side builds: keys sorted by UTF-16 code units, no whitespace,
-/// JSON string escaping, numbers only as safe integers, null members kept (JSON has no undefined).
-pub fn canonical(v: &Value) -> Result<String, String> {
-    let mut out = String::new();
-    write_canonical(v, &mut out)?;
-    Ok(out)
-}
-
-fn write_canonical(v: &Value, out: &mut String) -> Result<(), String> {
-    match v {
-        Value::Null => out.push_str("null"),
-        Value::Bool(b) => out.push_str(if *b { "true" } else { "false" }),
-        Value::Number(n) => {
-            let i = n
-                .as_i64()
-                .filter(|i| (-MAX_SAFE_INTEGER..=MAX_SAFE_INTEGER).contains(i))
-                .ok_or("canonical: only safe integers are allowed as numbers")?;
-            out.push_str(&i.to_string());
-        }
-        Value::String(s) => out.push_str(&serde_json::to_string(s).map_err(|e| e.to_string())?),
-        Value::Array(a) => {
-            out.push('[');
-            for (i, x) in a.iter().enumerate() {
-                if i > 0 {
-                    out.push(',');
-                }
-                write_canonical(x, out)?;
-            }
-            out.push(']');
-        }
-        Value::Object(o) => {
-            let mut keys: Vec<&String> = o.keys().collect();
-            keys.sort_by(|a, b| a.encode_utf16().cmp(b.encode_utf16()));
-            out.push('{');
-            for (i, k) in keys.iter().enumerate() {
-                if i > 0 {
-                    out.push(',');
-                }
-                out.push_str(&serde_json::to_string(k).map_err(|e| e.to_string())?);
-                out.push(':');
-                write_canonical(&o[k.as_str()], out)?;
-            }
-            out.push('}');
-        }
-    }
-    Ok(())
-}
-
-pub fn payload(method: &str, params: &Value, expiry: u64, nonce: &str) -> Result<String, String> {
-    Ok(format!("{DOMAIN}\n{method}\n{}\n{expiry}\n{nonce}", canonical(params)?))
-}
-
-pub fn mac(secret: &[u8], method: &str, params: &Value, expiry: u64, nonce: &str) -> Result<String, String> {
-    let mut m = Hmac::<Sha256>::new_from_slice(secret).map_err(|e| e.to_string())?;
-    m.update(payload(method, params, expiry, nonce)?.as_bytes());
-    Ok(URL_SAFE_NO_PAD.encode(m.finalize().into_bytes()))
-}
-
-/// A token for exactly (method, params), valid for TTL_MS from `now_ms`.
-pub fn mint(secret: &[u8], method: &str, params: &Value, now_ms: u64, nonce: &str) -> Result<String, String> {
-    let expiry = now_ms + TTL_MS;
-    Ok(format!("{PREFIX}.{expiry}.{nonce}.{}", mac(secret, method, params, expiry, nonce)?))
-}
-
-/// 16 random bytes, base64url (22 characters).
-pub fn new_nonce() -> Result<String, String> {
-    let mut b = [0u8; 16];
-    getrandom::fill(&mut b).map_err(|e| e.to_string())?;
-    Ok(URL_SAFE_NO_PAD.encode(b))
-}
-
-/// The per-session secret.
-pub fn new_secret() -> Result<[u8; 32], String> {
-    let mut b = [0u8; 32];
-    getrandom::fill(&mut b).map_err(|e| e.to_string())?;
-    Ok(b)
-}
-
-pub fn hex(b: &[u8]) -> String {
-    b.iter().map(|x| format!("{x:02x}")).collect()
-}
diff --git a/apps/desktop/src-tauri/src/downloads.rs b/apps/desktop/src-tauri/src/downloads.rs
deleted file mode 100644
index c640af4..0000000
--- a/apps/desktop/src-tauri/src/downloads.rs
+++ /dev/null
@@ -1,454 +0,0 @@
-//! One-click downloads of the optional local tools (Dependencies screen) into the app data folder, never system-wide
-//! and never bundled with the installer (docs/desktop.md):
-//!
-//! - **ffmpeg + ffprobe**: the exact archives of `tools-manifest.json` (URL, SHA-256, size; written by
-//!   tools/tools-manifest.ts per desktop release). The SHA-256 is checked while downloading; a mismatch deletes the file.
-//! - **Chrome for Testing**: Google's official JSON endpoint (Stable channel), archive from storage.googleapis.com. No
-//!   hashes are published, so the unpacked browser must carry Google's code signature (macOS team EQHXZ8M8AV,
-//!   Windows Authenticode by Google LLC); on Linux the version banner is checked.
-//!
-//! Everything happens in a staging folder; only a verified result replaces the installed copy. Progress goes to the
-//! window as `tool-download` events with the job id; cancel removes the staging folder. Redirects may only lead to
-//! the hosts in DOWNLOAD_HOSTS, over HTTPS.
-use std::collections::HashMap;
-use std::fs;
-use std::io::Write;
-use std::path::{Path, PathBuf};
-use std::sync::atomic::{AtomicBool, Ordering};
-use std::sync::{Arc, Mutex};
-
-use serde::{Deserialize, Serialize};
-use sha2::{Digest, Sha256};
-use url::Url;
-
-pub const MANIFEST_JSON: &str = include_str!("../tools-manifest.json");
-
-/// Hosts a download (or one of its redirects) may touch.
-pub const DOWNLOAD_HOSTS: &[&str] = &[
-    "ffmpeg.martin-riedl.de",
-    "github.com",
-    "objects.githubusercontent.com",
-    "release-assets.githubusercontent.com",
-    "googlechromelabs.github.io",
-    "storage.googleapis.com",
-];
-
-#[derive(Debug, Clone, Deserialize, Serialize)]
-pub struct FileMap {
-    pub from: String,
-    pub to: String,
-}
-
-#[derive(Debug, Clone, Deserialize, Serialize)]
-pub struct Archive {
-    pub url: String,
-    pub sha256: String,
-    pub size: u64,
-    pub kind: String,
-    pub files: Vec<FileMap>,
-}
-
-#[derive(Debug, Clone, Deserialize, Serialize)]
-#[serde(rename_all = "camelCase")]
-pub struct Ffmpeg {
-    pub version: String,
-    pub license: String,
-    pub license_url: String,
-    pub sources: HashMap<String, String>,
-    pub targets: HashMap<String, Vec<Archive>>,
-}
-
-#[derive(Debug, Clone, Deserialize, Serialize)]
-#[serde(rename_all = "camelCase")]
-pub struct Chrome {
-    pub endpoint: String,
-    pub channel: String,
-    pub platforms: HashMap<String, String>,
-    pub mac_team_id: String,
-    pub windows_signer: String,
-    pub license: String,
-    pub license_url: String,
-}
-
-#[derive(Debug, Clone, Deserialize, Serialize)]
-pub struct Manifest {
-    pub generated: String,
-    pub ffmpeg: Ffmpeg,
-    pub chrome: Chrome,
-}
-
-pub fn manifest() -> Result<Manifest, String> {
-    serde_json::from_str(MANIFEST_JSON).map_err(|e| format!("tools manifest: {e}"))
-}
-
-/// Rust target triple of this build (the manifest's keys).
-pub fn target_triple() -> &'static str {
-    if cfg!(all(target_os = "macos", target_arch = "aarch64")) {
-        "aarch64-apple-darwin"
-    } else if cfg!(target_os = "macos") {
-        "x86_64-apple-darwin"
-    } else if cfg!(all(target_os = "linux", target_arch = "aarch64")) {
-        "aarch64-unknown-linux-gnu"
-    } else if cfg!(target_os = "linux") {
-        "x86_64-unknown-linux-gnu"
-    } else {
-        "x86_64-pc-windows-msvc"
-    }
-}
-
-pub fn download_allowed(u: &Url) -> bool {
-    u.scheme() == "https" && u.username().is_empty() && u.password().is_none() && u.port().is_none() && u.host_str().is_some_and(|h| DOWNLOAD_HOSTS.contains(&h))
-}
-
-pub fn hex(b: &[u8]) -> String {
-    crate::confirm::hex(b)
-}
-
-/// What the Dependencies screen shows next to the Download buttons.
-#[derive(Debug, Clone, Serialize)]
-#[serde(rename_all = "camelCase")]
-pub struct DownloadInfo {
-    pub tool: &'static str,
-    pub available: bool,
-    pub version: Option<String>,
-    pub size: Option<u64>,
-    pub license: String,
-    pub license_url: String,
-    pub source: String,
-    pub installed: bool,
-    pub folder: String,
-}
-
-pub fn info(data_dir: &Path) -> Result<Vec<DownloadInfo>, String> {
-    let m = manifest()?;
-    let t = target_triple();
-    let ff = m.ffmpeg.targets.get(t);
-    let os = if t.contains("apple") { "macos" } else if t.contains("windows") { "windows" } else { "linux" };
-    let exe = if cfg!(windows) { ".exe" } else { "" };
-    Ok(vec![
-        DownloadInfo {
-            tool: "ffmpeg",
-            available: ff.is_some(),
-            version: Some(m.ffmpeg.version.clone()),
-            size: ff.map(|a| a.iter().map(|x| x.size).sum()),
-            license: m.ffmpeg.license.clone(),
-            license_url: m.ffmpeg.license_url.clone(),
-            source: m.ffmpeg.sources.get(os).cloned().unwrap_or_default(),
-            installed: data_dir.join("tools").join("bin").join(format!("ffmpeg{exe}")).is_file(),
-            folder: "tools/bin".into(),
-        },
-        DownloadInfo {
-            tool: "chrome",
-            available: m.chrome.platforms.contains_key(t),
-            version: None,
-            size: None,
-            license: m.chrome.license.clone(),
-            license_url: m.chrome.license_url.clone(),
-            source: "https://googlechromelabs.github.io/chrome-for-testing/".into(),
-            installed: data_dir.join("tools").join("chrome").join(crate::policy::chrome_executable()).is_file(),
-            folder: "tools/chrome".into(),
-        },
-    ])
-}
-
-/// Progress of a download job, sent to the window as `tool-download`.
-#[derive(Debug, Clone, Serialize)]
-pub struct Event {
-    pub job: String,
-    pub tool: String,
-    /// resolve, download, verify, unpack, install, done, error, cancelled
-    pub stage: &'static str,
-    pub received: u64,
-    pub total: Option<u64>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub message: Option<String>,
-}
-
-/// Running download jobs and their cancel flags.
-#[derive(Default)]
-pub struct Jobs {
-    flags: Mutex<HashMap<String, Arc<AtomicBool>>>,
-}
-
-impl Jobs {
-    pub fn start(&self, job: &str) -> Result<Arc<AtomicBool>, String> {
-        let mut m = self.flags.lock().map_err(|_| "jobs poisoned")?;
-        if m.contains_key(job) {
-            return Err("this download is already running".into());
-        }
-        let f = Arc::new(AtomicBool::new(false));
-        m.insert(job.to_string(), f.clone());
-        Ok(f)
-    }
-    pub fn finish(&self, job: &str) {
-        if let Ok(mut m) = self.flags.lock() {
-            m.remove(job);
-        }
-    }
-    pub fn cancel(&self, job: &str) -> bool {
-        self.flags.lock().ok().and_then(|m| m.get(job).map(|f| f.store(true, Ordering::SeqCst))).is_some()
-    }
-}
-
-/// The Chrome for Testing download of a platform from the endpoint JSON: (version, url).
-pub fn chrome_download(endpoint_json: &serde_json::Value, channel: &str, platform: &str) -> Result<(String, Url), String> {
-    let ch = &endpoint_json["channels"][channel];
-    let version = ch["version"].as_str().ok_or("Chrome for Testing: no version in the endpoint answer")?.to_string();
-    let url = ch["downloads"]["chrome"]
-        .as_array()
-        .and_then(|a| a.iter().find(|d| d["platform"].as_str() == Some(platform)))
-        .and_then(|d| d["url"].as_str())
-        .ok_or_else(|| format!("Chrome for Testing: no download for {platform}"))?;
-    let u = Url::parse(url).map_err(|e| e.to_string())?;
-    if !download_allowed(&u) {
-        return Err(format!("Chrome for Testing: unexpected download host {}", u.host_str().unwrap_or("?")));
-    }
-    Ok((version, u))
-}
-
-fn client() -> Result<reqwest::Client, String> {
-    let _ = rustls::crypto::ring::default_provider().install_default();
-    reqwest::Client::builder()
-        .user_agent(concat!("storebound-desktop/", env!("CARGO_PKG_VERSION")))
-        .redirect(reqwest::redirect::Policy::custom(|a| {
-            if a.previous().len() > 8 {
-                a.error("too many redirects")
-            } else if download_allowed(a.url()) {
-                a.follow()
-            } else {
-                a.error("redirect to a host outside the download list")
-            }
-        }))
-        .connect_timeout(std::time::Duration::from_secs(20))
-        .build()
-        .map_err(|e| e.to_string())
-}
-
-/// Streams `url` into `dest`, returning its SHA-256 (hex). `progress(received_in_this_file)` after each chunk.
-async fn fetch(c: &reqwest::Client, url: &Url, dest: &Path, cancel: &AtomicBool, mut progress: impl FnMut(u64)) -> Result<String, String> {
-    if !download_allowed(url) {
-        return Err(format!("not an allowed download host: {}", url.host_str().unwrap_or("?")));
-    }
-    let mut resp = c.get(url.clone()).send().await.map_err(|e| format!("download: {e}"))?;
-    if !resp.status().is_success() {
-        return Err(format!("download: {} answered {}", url.host_str().unwrap_or("?"), resp.status()));
-    }
-    let mut f = fs::File::create(dest).map_err(|e| e.to_string())?;
-    let mut h = Sha256::new();
-    let mut got: u64 = 0;
-    while let Some(chunk) = resp.chunk().await.map_err(|e| format!("download: {e}"))? {
-        if cancel.load(Ordering::SeqCst) {
-            return Err("cancelled".into());
-        }
-        h.update(&chunk);
-        f.write_all(&chunk).map_err(|e| e.to_string())?;
-        got += chunk.len() as u64;
-        progress(got);
-    }
-    f.flush().map_err(|e| e.to_string())?;
-    Ok(hex(&h.finalize()))
-}
-
-/// Unpacks an archive into `dir`. macOS: ditto (keeps the app bundles' symlinks and signatures intact); tar.xz: the
-/// system tar; other zips: the zip crate, which refuses entries outside `dir`.
-pub fn unpack(archive: &Path, kind: &str, dir: &Path) -> Result<(), String> {
-    fs::create_dir_all(dir).map_err(|e| e.to_string())?;
-    let run = |cmd: &mut std::process::Command| -> Result<(), String> {
-        let out = cmd.output().map_err(|e| e.to_string())?;
-        if out.status.success() {
-            Ok(())
-        } else {
-            Err(String::from_utf8_lossy(&out.stderr).trim().chars().take(300).collect())
-        }
-    };
-    match kind {
-        "tar.xz" => run(std::process::Command::new("tar").arg("-xJf").arg(archive).arg("-C").arg(dir)),
-        "zip" if cfg!(target_os = "macos") => run(std::process::Command::new("/usr/bin/ditto").arg("-x").arg("-k").arg(archive).arg(dir)),
-        "zip" => {
-            let f = fs::File::open(archive).map_err(|e| e.to_string())?;
-            let mut z = zip::ZipArchive::new(f).map_err(|e| e.to_string())?;
-            z.extract(dir).map_err(|e| e.to_string())
-        }
-        k => Err(format!("unknown archive kind {k}")),
-    }
-}
-
-/// `rel` inside `base`, refusing absolute paths and `..`.
-pub fn inside(base: &Path, rel: &str) -> Result<PathBuf, String> {
-    let p = Path::new(rel);
-    if p.is_absolute() || p.components().any(|c| !matches!(c, std::path::Component::Normal(_))) {
-        return Err(format!("unsafe path in the manifest: {rel}"));
-    }
-    Ok(base.join(p))
-}
-
-fn first_line(exe: &Path, arg: &str) -> Option<String> {
-    let out = std::process::Command::new(exe).arg(arg).output().ok()?;
-    let text = if out.stdout.is_empty() { out.stderr } else { out.stdout };
-    String::from_utf8_lossy(&text).lines().next().map(|s| s.trim().to_string())
-}
-
-#[cfg(unix)]
-fn make_executable(p: &Path) -> Result<(), String> {
-    use std::os::unix::fs::PermissionsExt;
-    fs::set_permissions(p, fs::Permissions::from_mode(0o755)).map_err(|e| e.to_string())
-}
-#[cfg(not(unix))]
-fn make_executable(_: &Path) -> Result<(), String> {
-    Ok(())
-}
-
-/// Google's code signature on the unpacked Chrome for Testing.
-fn verify_chrome(root: &Path, exe: &Path, c: &Chrome) -> Result<(), String> {
-    if cfg!(target_os = "macos") {
-        let app = root.join("Google Chrome for Testing.app");
-        let v = std::process::Command::new("/usr/bin/codesign").args(["--verify", "--deep", "--strict"]).arg(&app).output().map_err(|e| e.to_string())?;
-        if !v.status.success() {
-            return Err(format!("code signature invalid: {}", String::from_utf8_lossy(&v.stderr).trim()));
-        }
-        let d = std::process::Command::new("/usr/bin/codesign").args(["-dv", "--verbose=2"]).arg(&app).output().map_err(|e| e.to_string())?;
-        let text = String::from_utf8_lossy(&d.stderr);
-        if !text.lines().any(|l| l.trim() == format!("TeamIdentifier={}", c.mac_team_id)) {
-            return Err("not signed by Google (team identifier differs)".into());
-        }
-        Ok(())
-    } else if cfg!(windows) {
-        let script = format!(
-            "$s = Get-AuthenticodeSignature -LiteralPath '{}'; if ($s.Status -eq 'Valid' -and $s.SignerCertificate.Subject -like '*O={}*') {{ exit 0 }} else {{ exit 1 }}",
-            exe.display().to_string().replace('\'', "''"),
-            c.windows_signer
-        );
-        let st = std::process::Command::new("powershell").args(["-NoProfile", "-NonInteractive", "-Command", &script]).status().map_err(|e| e.to_string())?;
-        if st.success() {
-            Ok(())
-        } else {
-            Err(format!("Authenticode signature by {} not found", c.windows_signer))
-        }
-    } else {
-        match first_line(exe, "--version") {
-            Some(l) if l.starts_with("Google Chrome for Testing") => Ok(()),
-            other => Err(format!("unexpected version banner: {}", other.unwrap_or_default())),
-        }
-    }
-}
-
-/// Installs `tool` ("ffmpeg" or "chrome") into `<data_dir>/tools`. `emit` gets every progress event.
-pub async fn install(data_dir: &Path, tool: &str, job: &str, cancel: Arc<AtomicBool>, emit: impl Fn(Event) + Send + Sync) -> Result<String, String> {
-    let m = manifest()?;
-    let tools = data_dir.join("tools");
-    let staging = tools.join(format!(".staging-{job}"));
-    let _ = fs::remove_dir_all(&staging);
-    fs::create_dir_all(&staging).map_err(|e| e.to_string())?;
-    let ev = |stage: &'static str, received: u64, total: Option<u64>, message: Option<String>| emit(Event { job: job.into(), tool: tool.into(), stage, received, total, message });
-    let res = async {
-        let c = client()?;
-        match tool {
-            "ffmpeg" => {
-                let archives = m.ffmpeg.targets.get(target_triple()).ok_or("no ffmpeg build for this platform in the manifest")?;
-                let total: u64 = archives.iter().map(|a| a.size).sum();
-                let mut done: u64 = 0;
-                let bin = staging.join("bin");
-                fs::create_dir_all(&bin).map_err(|e| e.to_string())?;
-                for (i, a) in archives.iter().enumerate() {
-                    let url = Url::parse(&a.url).map_err(|e| e.to_string())?;
-                    let file = staging.join(format!("a{i}.{}", a.kind));
-                    let sum = fetch(&c, &url, &file, &cancel, |n| ev("download", done + n, Some(total), None)).await?;
-                    ev("verify", done + a.size, Some(total), None);
-                    if !sum.eq_ignore_ascii_case(&a.sha256) {
-                        let _ = fs::remove_file(&file);
-                        return Err(format!("checksum mismatch for {} (deleted)", url.path()));
-                    }
-                    done += a.size;
-                    ev("unpack", done, Some(total), None);
-                    let out = staging.join(format!("u{i}"));
-                    unpack(&file, &a.kind, &out)?;
-                    for f in &a.files {
-                        let src = inside(&out, &f.from)?;
-                        let dst = inside(&bin, &f.to)?;
-                        if !src.is_file() {
-                            return Err(format!("{} missing in the archive", f.from));
-                        }
-                        fs::rename(&src, &dst).or_else(|_| fs::copy(&src, &dst).map(|_| ())).map_err(|e| e.to_string())?;
-                        make_executable(&dst)?;
-                    }
-                    let _ = fs::remove_file(&file);
-                }
-                let exe = if cfg!(windows) { "ffmpeg.exe" } else { "ffmpeg" };
-                let banner = first_line(&bin.join(exe), "-version").unwrap_or_default();
-                if !banner.starts_with("ffmpeg version") {
-                    return Err(format!("the downloaded ffmpeg does not run: {banner}"));
-                }
-                ev("install", total, Some(total), None);
-                let dest = tools.join("bin");
-                fs::create_dir_all(&dest).map_err(|e| e.to_string())?;
-                for e in fs::read_dir(&bin).map_err(|e| e.to_string())? {
-                    let e = e.map_err(|e| e.to_string())?;
-                    let target = dest.join(e.file_name());
-                    let _ = fs::remove_file(&target);
-                    fs::rename(e.path(), &target).map_err(|e| e.to_string())?;
-                }
-                Ok(banner)
-            }
-            "chrome" => {
-                let platform = m.chrome.platforms.get(target_triple()).ok_or("Chrome for Testing has no build for this platform")?;
-                ev("resolve", 0, None, None);
-                let endpoint = Url::parse(&m.chrome.endpoint).map_err(|e| e.to_string())?;
-                if !download_allowed(&endpoint) {
-                    return Err("endpoint host not allowed".into());
-                }
-                let json: serde_json::Value = c.get(endpoint).send().await.map_err(|e| e.to_string())?.json().await.map_err(|e| e.to_string())?;
-                let (version, url) = chrome_download(&json, &m.chrome.channel, platform)?;
-                let head = c.head(url.clone()).send().await.ok();
-                let total = head.and_then(|h| h.content_length());
-                let file = staging.join("chrome.zip");
-                fetch(&c, &url, &file, &cancel, |n| ev("download", n, total, Some(version.clone()))).await?;
-                ev("unpack", total.unwrap_or(0), total, None);
-                let out = staging.join("u");
-                unpack(&file, "zip", &out)?;
-                let _ = fs::remove_file(&file);
-                let root = out.join(format!("chrome-{platform}"));
-                let exe = root.join(crate::policy::chrome_executable());
-                if !exe.is_file() {
-                    return Err("Chrome for Testing archive has an unexpected layout".into());
-                }
-                ev("verify", total.unwrap_or(0), total, None);
-                verify_chrome(&root, &exe, &m.chrome)?;
-                ev("install", total.unwrap_or(0), total, None);
-                let dest = tools.join("chrome");
-                let _ = fs::remove_dir_all(&dest);
-                fs::rename(&root, &dest).map_err(|e| e.to_string())?;
-                Ok(format!("Chrome for Testing {version}"))
-            }
-            other => Err(format!("unknown tool {other}")),
-        }
-    }
-    .await;
-    let _ = fs::remove_dir_all(&staging);
-    match &res {
-        Ok(v) => ev("done", 0, None, Some(v.clone())),
-        Err(e) if e == "cancelled" => ev("cancelled", 0, None, None),
-        Err(e) => ev("error", 0, None, Some(e.clone())),
-    }
-    res
-}
-
-/// Removes an app-managed tool.
-pub fn uninstall(data_dir: &Path, tool: &str) -> Result<(), String> {
-    let tools = data_dir.join("tools");
-    match tool {
-        "ffmpeg" => {
-            for n in ["ffmpeg", "ffprobe", "ffmpeg.exe", "ffprobe.exe"] {
-                let _ = fs::remove_file(tools.join("bin").join(n));
-            }
-            Ok(())
-        }
-        "chrome" => {
-            let p = tools.join("chrome");
-            if p.exists() {
-                fs::remove_dir_all(p).map_err(|e| e.to_string())?;
-            }
-            Ok(())
-        }
-        other => Err(format!("unknown tool {other}")),
-    }
-}
diff --git a/apps/desktop/src-tauri/src/lib.rs b/apps/desktop/src-tauri/src/lib.rs
deleted file mode 100644
index 23d79ce..0000000
--- a/apps/desktop/src-tauri/src/lib.rs
+++ /dev/null
@@ -1,211 +0,0 @@
-//! storebound desktop: a Tauri shell around the storebound CLI, which runs as a sidecar (`storebound serve --stdio`).
-//! The GUI never talks to a store itself; every store call is a storebound command.
-pub mod accounts;
-pub mod cache;
-pub mod commands;
-pub mod confirm;
-pub mod downloads;
-pub mod policy;
-pub mod sidecar;
-pub mod store;
-
-include!("commands_list.rs");
-
-use std::sync::Mutex;
-
-use tauri::menu::{Menu, MenuItem, PredefinedMenuItem, Submenu, WINDOW_SUBMENU_ID};
-use tauri::{AppHandle, Emitter, Manager, RunEvent, Runtime, WindowEvent};
-use tauri_plugin_deep_link::DeepLinkExt;
-
-/// WebKitGTK's DMABUF renderer leaves the window blank on some Linux GPU / driver / VM combinations. Turn it off unless
-/// the user set the variable (WEBKIT_DISABLE_DMABUF_RENDERER=0 keeps DMABUF). Must run before any webview exists.
-pub fn linux_webkit_env() {
-    #[cfg(target_os = "linux")]
-    if std::env::var_os("WEBKIT_DISABLE_DMABUF_RENDERER").is_none() {
-        // SAFETY: called first thing in main, before any thread is started.
-        unsafe { std::env::set_var("WEBKIT_DISABLE_DMABUF_RENDERER", "1") };
-    }
-}
-
-fn show_main<R: Runtime>(app: &AppHandle<R>) {
-    if let Some(w) = app.get_webview_window(policy::MAIN) {
-        let _ = w.unminimize();
-        let _ = w.show();
-        let _ = w.set_focus();
-    }
-}
-
-/// macOS menu: app menu with Quit (Cmd+Q really quits), Edit (copy / paste in text fields), and a Window menu that
-/// keeps a permanent entry for the main window, since the automatic list drops a hidden window.
-fn menu<R: Runtime>(app: &AppHandle<R>) -> tauri::Result<Menu<R>> {
-    let name = "storebound";
-    let app_menu = Submenu::with_items(
-        app,
-        name,
-        true,
-        &[
-            &PredefinedMenuItem::about(app, Some("About storebound"), None)?,
-            &PredefinedMenuItem::separator(app)?,
-            &PredefinedMenuItem::services(app, None)?,
-            &PredefinedMenuItem::separator(app)?,
-            &PredefinedMenuItem::hide(app, None)?,
-            &PredefinedMenuItem::hide_others(app, None)?,
-            &PredefinedMenuItem::show_all(app, None)?,
-            &PredefinedMenuItem::separator(app)?,
-            &PredefinedMenuItem::quit(app, Some("Quit storebound"))?,
-        ],
-    )?;
-    let edit = Submenu::with_items(
-        app,
-        "Edit",
-        true,
-        &[
-            &PredefinedMenuItem::undo(app, None)?,
-            &PredefinedMenuItem::redo(app, None)?,
-            &PredefinedMenuItem::separator(app)?,
-            &PredefinedMenuItem::cut(app, None)?,
-            &PredefinedMenuItem::copy(app, None)?,
-            &PredefinedMenuItem::paste(app, None)?,
-            &PredefinedMenuItem::select_all(app, None)?,
-        ],
-    )?;
-    let window = Submenu::with_id_and_items(
-        app,
-        WINDOW_SUBMENU_ID,
-        "Window",
-        true,
-        &[
-            &PredefinedMenuItem::minimize(app, None)?,
-            &PredefinedMenuItem::maximize(app, Some("Zoom"))?,
-            &PredefinedMenuItem::separator(app)?,
-            &MenuItem::with_id(app, "show-main", "storebound", true, Some("CmdOrCtrl+0"))?,
-            &PredefinedMenuItem::separator(app)?,
-            &PredefinedMenuItem::close_window(app, None)?,
-        ],
-    )?;
-    Menu::with_items(app, &[&app_menu, &edit, &window])
-}
-
-fn handle_deep_link<R: Runtime>(app: &AppHandle<R>, urls: &[url::Url]) {
-    if let Some(screen) = urls.iter().find_map(policy::deep_link_screen) {
-        show_main(app);
-        let _ = app.emit_to(policy::MAIN, "deep-link", screen);
-    }
-}
-
-/// Debug builds only: STOREBOUND_DEV_PROJECTS (folders separated by the OS path separator) seeds the app folder list
-/// once, for screenshots and manual checks with the demo apps. Release builds ignore it.
-fn dev_seed(data_dir: &std::path::Path) {
-    if !cfg!(debug_assertions) {
-        return;
-    }
-    let Some(v) = std::env::var_os("STOREBOUND_DEV_PROJECTS") else { return };
-    let mut st = store::load(data_dir);
-    let mut changed = false;
-    for dir in std::env::split_paths(&v) {
-        let dir = std::fs::canonicalize(&dir).unwrap_or(dir);
-        let path = dir.to_string_lossy().to_string();
-        if !commands::has_config(&dir) || st.projects.iter().any(|p| p.path == path) {
-            continue;
-        }
-        let name = dir.file_name().map(|n| n.to_string_lossy().to_string()).unwrap_or_default();
-        if let Ok(id) = store::new_id() {
-            st.projects.push(store::Project { id, path, name, play_account: None, apple_account: None, added: store::now_iso() });
-            changed = true;
-        }
-    }
-    if changed {
-        let _ = store::save(data_dir, &st);
-    }
-}
-
-pub fn run() {
-    linux_webkit_env();
-    let app = tauri::Builder::default()
-        // single-instance first: a second start (or a storebound:// link) focuses the running app instead
-        .plugin(tauri_plugin_single_instance::init(|app, _argv, _cwd| show_main(app)))
-        .plugin(tauri_plugin_deep_link::init())
-        .plugin(tauri_plugin_window_state::Builder::new().build())
-        .plugin(tauri_plugin_shell::init())
-        .plugin(tauri_plugin_opener::init())
-        .plugin(tauri_plugin_dialog::init())
-        .plugin(tauri_plugin_notification::init())
-        .plugin(tauri_plugin_updater::Builder::new().build())
-        .plugin(tauri_plugin_process::init())
-        .setup(|app| {
-            let data_dir = app.path().app_data_dir()?;
-            dev_seed(&data_dir);
-            let cache = cache::Cache::open(&data_dir).or_else(|_| cache::Cache::in_memory()).map_err(std::io::Error::other)?;
-            app.manage(commands::AppState {
-                sidecar: sidecar::Sidecar::default(),
-                saved: Mutex::new(store::load(&data_dir)),
-                data_dir,
-                secrets: Box::new(accounts::Keychain),
-                cache,
-                downloads: downloads::Jobs::default(),
-            });
-            #[cfg(target_os = "macos")]
-            app.set_menu(menu(app.handle())?)?;
-            #[cfg(not(target_os = "macos"))]
-            let _ = menu::<tauri::Wry>;
-            app.on_menu_event(|app, e| {
-                if e.id() == "show-main" {
-                    show_main(app);
-                }
-            });
-            #[cfg(any(target_os = "linux", all(debug_assertions, windows)))]
-            app.deep_link().register_all()?;
-            let handle = app.handle().clone();
-            app.deep_link().on_open_url(move |e| handle_deep_link(&handle, &e.urls()));
-            if let Ok(Some(urls)) = app.deep_link().get_current() {
-                handle_deep_link(app.handle(), &urls);
-            }
-            Ok(())
-        })
-        .on_window_event(|w, e| {
-            // macOS: the close button hides the window (the app stays in the Dock and the Window menu);
-            // Cmd+Q and the app menu's Quit still quit. Elsewhere closing the window quits.
-            if cfg!(target_os = "macos") && w.label() == policy::MAIN {
-                if let WindowEvent::CloseRequested { api, .. } = e {
-                    api.prevent_close();
-                    let _ = w.hide();
-                }
-            }
-        })
-        .invoke_handler(tauri::generate_handler![
-            commands::app_info,
-            commands::sidecar_status,
-            commands::sidecar_call,
-            commands::cache_get,
-            commands::cache_clear,
-            commands::job_cancel,
-            commands::write_with_confirm,
-            commands::projects_list,
-            commands::project_add,
-            commands::project_init,
-            commands::project_remove,
-            commands::project_set_accounts,
-            commands::accounts_list,
-            commands::account_add_play,
-            commands::account_add_apple,
-            commands::account_remove,
-            commands::portfolio_status,
-            commands::open_external,
-            commands::tools_info,
-            commands::tools_install,
-            commands::tools_uninstall,
-        ])
-        .build(tauri::generate_context!())
-        .expect("storebound desktop failed to start");
-
-    app.run(|app, e| match e {
-        #[cfg(target_os = "macos")]
-        RunEvent::Reopen { .. } => show_main(app),
-        RunEvent::Exit => {
-            if let Some(s) = app.try_state::<commands::AppState>() {
-                s.sidecar.shutdown_now();
-            }
-        }
-        _ => {}
-    });
-}
diff --git a/apps/desktop/src-tauri/src/main.rs b/apps/desktop/src-tauri/src/main.rs
deleted file mode 100644
index cdf4943..0000000
--- a/apps/desktop/src-tauri/src/main.rs
+++ /dev/null
@@ -1,6 +0,0 @@
-// No console window on Windows release builds.
-#![cfg_attr(not(debug_assertions), windows_subsystem = "windows")]
-
-fn main() {
-    storebound_desktop::run();
-}
diff --git a/apps/desktop/src-tauri/src/policy.rs b/apps/desktop/src-tauri/src/policy.rs
deleted file mode 100644
index 7ed2c71..0000000
--- a/apps/desktop/src-tauri/src/policy.rs
+++ /dev/null
@@ -1,142 +0,0 @@
-//! Who may call what. Pure functions, so tests/security.rs can pin every rule.
-//!
-//! The capability file already limits the app commands to the `main` window with local content; every command checks
-//! again here (window label and the exact origin of the page that called), so a future second window, a stray
-//! navigation or a remote page can never reach them, whatever the capability files say.
-use serde_json::{Map, Value};
-use url::Url;
-
-/// The one window that may call app commands.
-pub const MAIN: &str = "main";
-
-/// The only arguments the sidecar is ever started with.
-pub const SIDECAR_ARGS: [&str; 2] = ["serve", "--stdio"];
-/// Name of the sidecar binary (`bundle.externalBin` = binaries/storebound).
-pub const SIDECAR: &str = "storebound";
-
-/// Dev server origin (`build.devUrl`); accepted only in debug builds.
-pub const DEV_HOST: &str = "127.0.0.1";
-pub const DEV_PORT: u16 = 1420;
-
-/// The app's own bundled pages: `tauri://localhost` (macOS, Linux) or `http(s)://tauri.localhost` (Windows).
-/// No port, no user info, nothing that only looks similar. In debug builds also the Vite dev server.
-pub fn is_local_origin(url: &Url, dev: bool) -> bool {
-    if !url.username().is_empty() || url.password().is_some() {
-        return false;
-    }
-    let host = url.host_str().unwrap_or_default();
-    match url.scheme() {
-        "tauri" => host == "localhost" && url.port().is_none(),
-        "http" | "https" if host == "tauri.localhost" => url.port().is_none(),
-        "http" if dev => host == DEV_HOST && url.port() == Some(DEV_PORT),
-        _ => false,
-    }
-}
-
-pub fn require_main(label: &str, url: &Url, dev: bool) -> Result<(), String> {
-    if label != MAIN {
-        return Err(format!("not allowed from window '{label}'"));
-    }
-    if !is_local_origin(url, dev) {
-        return Err("not allowed from this page".into());
-    }
-    Ok(())
-}
-
-/// Method kinds the sidecar announces in its `session.hello` descriptors.
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum Kind {
-    Read,
-    Write,
-    System,
-    Portfolio,
-    Session,
-}
-
-impl Kind {
-    pub fn parse(s: &str) -> Option<Kind> {
-        Some(match s {
-            "read" => Kind::Read,
-            "write" => Kind::Write,
-            "system" => Kind::System,
-            "portfolio" => Kind::Portfolio,
-            "session" => Kind::Session,
-            _ => return None,
-        })
-    }
-}
-
-/// Params keys the webview may send for a sidecar method. The project folder comes from the host's project list (the
-/// webview names a project id), and `confirmToken`, `credentials` and `dryRun` are the host's: tokens are minted only
-/// after the native dialog, credentials come from the keychain.
-const JS_PARAM_KEYS: &[&str] = &["args", "live"];
-
-/// Checks a webview call to the sidecar and returns the params to send. Writes from the webview are always dry runs;
-/// the real run goes through `write_with_confirm` (native dialog, then a host-minted token).
-pub fn sanitize_js_call(method: &str, kind: Option<Kind>, params: &Value) -> Result<Value, String> {
-    let kind = kind.ok_or_else(|| format!("unknown method: {method}"))?;
-    match kind {
-        Kind::Session => return Err(format!("{method} is the host's")),
-        Kind::Portfolio => return Err(format!("{method}: use portfolio_status")),
-        _ => {}
-    }
-    let empty = Map::new();
-    let obj = match params {
-        Value::Object(o) => o,
-        Value::Null => &empty,
-        _ => return Err("params must be an object".into()),
-    };
-    for k in obj.keys() {
-        if !JS_PARAM_KEYS.contains(&k.as_str()) {
-            return Err(format!("param '{k}' is not allowed from the window"));
-        }
-    }
-    let mut out = obj.clone();
-    if kind == Kind::Write {
-        out.insert("dryRun".into(), Value::Bool(true));
-    }
-    Ok(Value::Object(out))
-}
-
-/// Hosts `open_external` may open in the browser: the two store consoles and storebound's own site.
-pub const EXTERNAL_HOSTS: &[&str] = &[
-    "play.google.com",
-    "appstoreconnect.apple.com",
-    "developer.apple.com",
-    "storebound.dev",
-    // Dependencies screen link-outs
-    "developer.android.com",
-    "ffmpeg.org",
-    "googlechromelabs.github.io",
-    "git-scm.com",
-];
-
-/// Executable of a Chrome for Testing download, relative to its unpacked folder (app data `tools/chrome/`).
-pub fn chrome_executable() -> &'static str {
-    if cfg!(target_os = "macos") {
-        "Google Chrome for Testing.app/Contents/MacOS/Google Chrome for Testing"
-    } else if cfg!(windows) {
-        "chrome.exe"
-    } else {
-        "chrome"
-    }
-}
-
-pub fn external_allowed(url: &Url) -> bool {
-    url.scheme() == "https"
-        && url.username().is_empty()
-        && url.password().is_none()
-        && url.port().is_none()
-        && url.host_str().is_some_and(|h| EXTERNAL_HOSTS.contains(&h))
-}
-
-/// Deep links the app reacts to: `storebound://<screen>` for a known screen, nothing else.
-pub const DEEP_LINK_SCREENS: &[&str] = &["portfolio", "apps", "accounts", "dependencies", "settings"];
-
-pub fn deep_link_screen(url: &Url) -> Option<&'static str> {
-    if url.scheme() != "storebound" {
-        return None;
-    }
-    let host = url.host_str().unwrap_or_default();
-    DEEP_LINK_SCREENS.iter().copied().find(|s| *s == host)
-}
diff --git a/apps/desktop/src-tauri/src/sidecar.rs b/apps/desktop/src-tauri/src/sidecar.rs
deleted file mode 100644
index ae3c93f..0000000
--- a/apps/desktop/src-tauri/src/sidecar.rs
+++ /dev/null
@@ -1,344 +0,0 @@
-//! The storebound sidecar: `storebound serve --stdio`, started from Rust only (no capability grants the shell
-//! plugin to the webview), with the fixed arguments in policy::SIDECAR_ARGS. One process per app run, started on
-//! first use and again after it stops. Its first request is `session.hello` with a fresh 32-byte secret, so only this
-//! process can mint the confirm tokens the sidecar accepts for real writes.
-//!
-//! Jobs: the webview may tag a call with a short job id. Progress notifications of that request then carry the job id
-//! (so the right toast or screen shows them), and `cancel_job` sends `$/cancelRequest` for every request of the job.
-use std::collections::HashMap;
-use std::sync::atomic::{AtomicBool, AtomicU64, Ordering};
-use std::sync::{Arc, Mutex};
-use std::time::Duration;
-
-use serde::Serialize;
-use serde_json::{json, Value};
-use tauri::{AppHandle, Emitter, Manager, Runtime};
-use tauri_plugin_shell::process::{CommandChild, CommandEvent};
-use tauri_plugin_shell::ShellExt;
-use tokio::sync::oneshot;
-
-use crate::confirm;
-use crate::policy::{self, Kind};
-
-/// A failed call, as the webview sees it.
-#[derive(Debug, Clone, Serialize)]
-pub struct Fail {
-    pub code: i64,
-    pub message: String,
-    #[serde(skip_serializing_if = "Value::is_null")]
-    pub data: Value,
-}
-
-impl Fail {
-    pub fn new(code: i64, message: impl Into<String>) -> Fail {
-        Fail { code, message: message.into(), data: Value::Null }
-    }
-    /// The host refused (window, origin, params, state).
-    pub fn host(message: impl Into<String>) -> Fail {
-        Fail::new(-1, message)
-    }
-}
-
-impl From<String> for Fail {
-    fn from(s: String) -> Fail {
-        Fail::host(s)
-    }
-}
-
-#[derive(Debug, Clone, Serialize)]
-pub struct Descriptor {
-    pub method: String,
-    pub title: String,
-    pub description: String,
-    pub kind: String,
-    pub network: bool,
-    pub destructive: bool,
-    pub json: bool,
-}
-
-type Pending = Arc<Mutex<HashMap<u64, oneshot::Sender<Result<Value, Fail>>>>>;
-/// Request id -> the webview's job id.
-type Jobs = Arc<Mutex<HashMap<u64, String>>>;
-
-/// Job ids come from the webview and are echoed back in events: short and plain only.
-pub fn valid_job(job: &str) -> bool {
-    !job.is_empty() && job.len() <= 64 && job.bytes().all(|b| b.is_ascii_alphanumeric() || matches!(b, b'-' | b'_' | b':' | b'.'))
-}
-
-pub struct Running {
-    child: Mutex<Option<CommandChild>>,
-    secret: [u8; 32],
-    pending: Pending,
-    jobs: Jobs,
-    next: AtomicU64,
-    alive: Arc<AtomicBool>,
-    pub version: String,
-    pub protocol: String,
-    pub methods: Vec<Descriptor>,
-}
-
-impl Running {
-    pub fn kind(&self, method: &str) -> Option<Kind> {
-        self.methods.iter().find(|d| d.method == method).and_then(|d| Kind::parse(&d.kind))
-    }
-    pub fn descriptor(&self, method: &str) -> Option<&Descriptor> {
-        self.methods.iter().find(|d| d.method == method)
-    }
-    pub fn mint(&self, method: &str, params: &Value) -> Result<String, String> {
-        let now = std::time::SystemTime::now().duration_since(std::time::UNIX_EPOCH).map_err(|e| e.to_string())?.as_millis() as u64;
-        confirm::mint(&self.secret, method, params, now, &confirm::new_nonce()?)
-    }
-
-    fn send(&self, id: u64, method: &str, params: &Value) -> Result<oneshot::Receiver<Result<Value, Fail>>, Fail> {
-        if !self.alive.load(Ordering::SeqCst) {
-            return Err(Fail::host("the storebound sidecar stopped"));
-        }
-        let (tx, rx) = oneshot::channel();
-        self.pending.lock().map_err(|_| Fail::host("sidecar state poisoned"))?.insert(id, tx);
-        let mut line = serde_json::to_vec(&json!({ "jsonrpc": "2.0", "id": id, "method": method, "params": params })).map_err(|e| Fail::host(e.to_string()))?;
-        line.push(b'\n');
-        let mut child = self.child.lock().map_err(|_| Fail::host("sidecar state poisoned"))?;
-        match child.as_mut() {
-            Some(c) => c.write(&line).map_err(|e| Fail::host(format!("sidecar write: {e}")))?,
-            None => return Err(Fail::host("the storebound sidecar stopped")),
-        }
-        Ok(rx)
-    }
-
-    pub async fn call(&self, method: &str, params: Value) -> Result<Value, Fail> {
-        self.call_job(method, params, None).await
-    }
-
-    /// A call whose progress events carry `job`, and which `cancel_job` can stop.
-    pub async fn call_job(&self, method: &str, params: Value, job: Option<&str>) -> Result<Value, Fail> {
-        let id = self.next.fetch_add(1, Ordering::SeqCst);
-        if let Some(j) = job {
-            if let Ok(mut m) = self.jobs.lock() {
-                m.insert(id, j.to_string());
-            }
-        }
-        let res = match self.send(id, method, &params) {
-            Ok(rx) => rx.await.map_err(|_| Fail::host("the storebound sidecar stopped")).and_then(|r| r),
-            Err(e) => Err(e),
-        };
-        if job.is_some() {
-            if let Ok(mut m) = self.jobs.lock() {
-                m.remove(&id);
-            }
-        }
-        res
-    }
-
-    /// Cancels every running request of a job (`$/cancelRequest`; they answer -32800). Returns how many.
-    pub fn cancel_job(&self, job: &str) -> usize {
-        let ids: Vec<u64> = self.jobs.lock().map(|m| m.iter().filter(|(_, j)| j.as_str() == job).map(|(id, _)| *id).collect()).unwrap_or_default();
-        for id in &ids {
-            self.notify("$/cancelRequest", json!({ "id": id }));
-        }
-        ids.len()
-    }
-
-    pub fn notify(&self, method: &str, params: Value) {
-        let mut line = match serde_json::to_vec(&json!({ "jsonrpc": "2.0", "method": method, "params": params })) {
-            Ok(l) => l,
-            Err(_) => return,
-        };
-        line.push(b'\n');
-        if let Ok(mut c) = self.child.lock() {
-            if let Some(c) = c.as_mut() {
-                let _ = c.write(&line);
-            }
-        }
-    }
-
-    pub fn alive(&self) -> bool {
-        self.alive.load(Ordering::SeqCst)
-    }
-
-    pub fn kill(&self) {
-        self.alive.store(false, Ordering::SeqCst);
-        if let Ok(mut c) = self.child.lock() {
-            if let Some(c) = c.take() {
-                let _ = c.kill();
-            }
-        }
-    }
-}
-
-#[derive(Default)]
-pub struct Sidecar {
-    current: tokio::sync::Mutex<Option<Arc<Running>>>,
-}
-
-/// Progress of a running request, forwarded to the main window as `sidecar-progress`.
-#[derive(Clone, Serialize)]
-pub struct Progress {
-    pub params: Value,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub job: Option<String>,
-}
-
-impl Sidecar {
-    /// The running sidecar, started (and greeted) if needed.
-    pub async fn get<R: Runtime>(&self, app: &AppHandle<R>) -> Result<Arc<Running>, Fail> {
-        let mut cur = self.current.lock().await;
-        if let Some(r) = cur.as_ref() {
-            if r.alive() {
-                return Ok(r.clone());
-            }
-        }
-        let r = Arc::new(start(app).await?);
-        *cur = Some(r.clone());
-        Ok(r)
-    }
-
-    /// The running sidecar, if there is one (never starts it).
-    pub async fn current(&self) -> Option<Arc<Running>> {
-        self.current.lock().await.as_ref().filter(|r| r.alive()).cloned()
-    }
-
-    /// Stops the sidecar; the next call starts a fresh one (after a tool install, so it sees the new tool paths).
-    pub async fn shutdown(&self) {
-        if let Some(r) = self.current.lock().await.take() {
-            r.kill();
-        }
-    }
-
-    /// Non-async variant for the exit path (the event loop is ending).
-    pub fn shutdown_now(&self) {
-        if let Ok(mut cur) = self.current.try_lock() {
-            if let Some(r) = cur.take() {
-                r.kill();
-            }
-        }
-    }
-}
-
-/// Tools the app manages in its data folder (Dependencies screen): `tools/bin` (ffmpeg, ffprobe) goes in front of
-/// PATH for every storebound command, `tools/chrome/<executable>` is the Chrome for Testing it renders with. Only
-/// paths that exist are passed.
-pub fn managed_tool_env(data_dir: &std::path::Path) -> Vec<(String, String)> {
-    let mut env = Vec::new();
-    let bin = data_dir.join("tools").join("bin");
-    if bin.is_dir() {
-        env.push(("STOREBOUND_TOOL_PATH".to_string(), bin.to_string_lossy().to_string()));
-    }
-    let chrome = data_dir.join("tools").join("chrome").join(policy::chrome_executable());
-    if chrome.is_file() {
-        env.push(("STOREBOUND_CHROME".to_string(), chrome.to_string_lossy().to_string()));
-    }
-    env
-}
-
-async fn start<R: Runtime>(app: &AppHandle<R>) -> Result<Running, Fail> {
-    let tool_env = app.path().app_data_dir().map(|d| managed_tool_env(&d)).unwrap_or_default();
-    let cmd = app
-        .shell()
-        .sidecar(policy::SIDECAR)
-        .map_err(|e| Fail::host(format!("sidecar missing: {e} (bun tools/build-sidecars.ts --host)")))?
-        .args(policy::SIDECAR_ARGS)
-        .envs(tool_env)
-        .set_raw_out(true)
-        .set_process_group(true);
-    let (mut rx, child) = cmd.spawn().map_err(|e| Fail::host(format!("sidecar did not start: {e}")))?;
-    let pending: Pending = Arc::new(Mutex::new(HashMap::new()));
-    let jobs: Jobs = Arc::new(Mutex::new(HashMap::new()));
-    let alive = Arc::new(AtomicBool::new(true));
-
-    let (p, a, handle, jb) = (pending.clone(), alive.clone(), app.clone(), jobs.clone());
-    tauri::async_runtime::spawn(async move {
-        let mut out: Vec<u8> = Vec::new();
-        let mut err: Vec<u8> = Vec::new();
-        while let Some(ev) = rx.recv().await {
-            match ev {
-                CommandEvent::Stdout(bytes) => {
-                    out.extend_from_slice(&bytes);
-                    while let Some(nl) = out.iter().position(|b| *b == b'\n') {
-                        let line: Vec<u8> = out.drain(..=nl).collect();
-                        route(&handle, &p, &jb, &line);
-                    }
-                }
-                CommandEvent::Stderr(bytes) => {
-                    err.extend_from_slice(&bytes);
-                    while let Some(nl) = err.iter().position(|b| *b == b'\n') {
-                        let line: Vec<u8> = err.drain(..=nl).collect();
-                        if cfg!(debug_assertions) {
-                            eprint!("[sidecar] {}", String::from_utf8_lossy(&line));
-                        }
-                    }
-                }
-                CommandEvent::Terminated(_) | CommandEvent::Error(_) => break,
-                _ => {}
-            }
-        }
-        a.store(false, Ordering::SeqCst);
-        if let Ok(mut map) = p.lock() {
-            for (_, tx) in map.drain() {
-                let _ = tx.send(Err(Fail::host("the storebound sidecar stopped")));
-            }
-        }
-    });
-
-    let secret = confirm::new_secret()?;
-    let mut running = Running {
-        child: Mutex::new(Some(child)),
-        secret,
-        pending,
-        jobs,
-        next: AtomicU64::new(1),
-        alive,
-        version: String::new(),
-        protocol: String::new(),
-        methods: Vec::new(),
-    };
-    let hello = tokio::time::timeout(
-        Duration::from_secs(20),
-        running.call("session.hello", json!({ "secret": confirm::hex(&secret), "client": { "name": "storebound-desktop", "version": env!("CARGO_PKG_VERSION") } })),
-    )
-    .await
-    .map_err(|_| Fail::host("the storebound sidecar did not answer session.hello"))??;
-    running.protocol = hello["protocol"].as_str().unwrap_or_default().to_string();
-    running.version = hello["server"]["version"].as_str().unwrap_or_default().to_string();
-    if running.protocol != "storebound-desktop/1" {
-        running.kill();
-        return Err(Fail::host(format!("unsupported sidecar protocol '{}'", running.protocol)));
-    }
-    running.methods = hello["methods"]
-        .as_array()
-        .map(|a| {
-            a.iter()
-                .map(|m| Descriptor {
-                    method: m["method"].as_str().unwrap_or_default().into(),
-                    title: m["title"].as_str().unwrap_or_default().into(),
-                    description: m["description"].as_str().unwrap_or_default().into(),
-                    kind: m["kind"].as_str().unwrap_or_default().into(),
-                    network: m["network"].as_bool().unwrap_or(true),
-                    destructive: m["destructive"].as_bool().unwrap_or(true),
-                    json: m["json"].as_bool().unwrap_or(false),
-                })
-                .collect()
-        })
-        .unwrap_or_default();
-    Ok(running)
-}
-
-fn route<R: Runtime>(app: &AppHandle<R>, pending: &Pending, jobs: &Jobs, line: &[u8]) {
-    let Ok(msg) = serde_json::from_slice::<Value>(line) else { return };
-    if let Some(id) = msg.get("id").and_then(Value::as_u64) {
-        let tx = pending.lock().ok().and_then(|mut m| m.remove(&id));
-        if let Some(tx) = tx {
-            let res = match msg.get("error") {
-                Some(e) => Err(Fail {
-                    code: e["code"].as_i64().unwrap_or(-32603),
-                    message: e["message"].as_str().unwrap_or("error").to_string(),
-                    data: e.get("data").cloned().unwrap_or(Value::Null),
-                }),
-                None => Ok(msg.get("result").cloned().unwrap_or(Value::Null)),
-            };
-            let _ = tx.send(res);
-        }
-    } else if msg.get("method").and_then(Value::as_str) == Some("progress") {
-        let job = msg["params"]["requestId"].as_u64().and_then(|id| jobs.lock().ok().and_then(|m| m.get(&id).cloned()));
-        let _ = app.emit_to(policy::MAIN, "sidecar-progress", Progress { params: msg["params"].clone(), job });
-    }
-}
diff --git a/apps/desktop/src-tauri/src/store.rs b/apps/desktop/src-tauri/src/store.rs
deleted file mode 100644
index be386b0..0000000
--- a/apps/desktop/src-tauri/src/store.rs
+++ /dev/null
@@ -1,74 +0,0 @@
-//! The app's own small state in its data folder: the project list and account labels (never secrets). Written
-//! atomically (temp file, then rename) so a crash never leaves half a file.
-use std::fs;
-use std::path::{Path, PathBuf};
-
-use serde::{Deserialize, Serialize};
-
-use crate::accounts::Account;
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-#[serde(rename_all = "camelCase")]
-pub struct Project {
-    pub id: String,
-    /// Absolute folder that holds storebound.config.ts.
-    pub path: String,
-    pub name: String,
-    #[serde(default)]
-    pub play_account: Option<String>,
-    #[serde(default)]
-    pub apple_account: Option<String>,
-    pub added: String,
-}
-
-#[derive(Debug, Clone, Default, PartialEq, Eq, Serialize, Deserialize)]
-pub struct State {
-    #[serde(default)]
-    pub projects: Vec<Project>,
-    #[serde(default)]
-    pub accounts: Vec<Account>,
-}
-
-pub const FILE: &str = "state.json";
-
-pub fn load(dir: &Path) -> State {
-    fs::read_to_string(dir.join(FILE)).ok().and_then(|s| serde_json::from_str(&s).ok()).unwrap_or_default()
-}
-
-pub fn save(dir: &Path, state: &State) -> Result<(), String> {
-    fs::create_dir_all(dir).map_err(|e| e.to_string())?;
-    let tmp: PathBuf = dir.join(format!("{FILE}.tmp"));
-    let json = serde_json::to_string_pretty(state).map_err(|e| e.to_string())?;
-    fs::write(&tmp, json + "\n").map_err(|e| e.to_string())?;
-    fs::rename(&tmp, dir.join(FILE)).map_err(|e| e.to_string())
-}
-
-/// Random id (hex) for projects and accounts.
-pub fn new_id() -> Result<String, String> {
-    let mut b = [0u8; 8];
-    getrandom::fill(&mut b).map_err(|e| e.to_string())?;
-    Ok(crate::confirm::hex(&b))
-}
-
-/// Current time as an RFC 3339 UTC string, without a date crate.
-pub fn now_iso() -> String {
-    let secs = std::time::SystemTime::now().duration_since(std::time::UNIX_EPOCH).map(|d| d.as_secs()).unwrap_or(0);
-    iso_from_unix(secs)
-}
-
-pub fn iso_from_unix(secs: u64) -> String {
-    let days = (secs / 86_400) as i64;
-    let rem = secs % 86_400;
-    // civil-from-days (Howard Hinnant)
-    let z = days + 719_468;
-    let era = z.div_euclid(146_097);
-    let doe = z - era * 146_097;
-    let yoe = (doe - doe / 1460 + doe / 36_524 - doe / 146_096) / 365;
-    let y = yoe + era * 400;
-    let doy = doe - (365 * yoe + yoe / 4 - yoe / 100);
-    let mp = (5 * doy + 2) / 153;
-    let d = doy - (153 * mp + 2) / 5 + 1;
-    let m = if mp < 10 { mp + 3 } else { mp - 9 };
-    let y = if m <= 2 { y + 1 } else { y };
-    format!("{y:04}-{m:02}-{d:02}T{:02}:{:02}:{:02}Z", rem / 3600, rem % 3600 / 60, rem % 60)
-}
diff --git a/apps/desktop/src-tauri/tauri.conf.json b/apps/desktop/src-tauri/tauri.conf.json
deleted file mode 100644
index aaf7859..0000000
--- a/apps/desktop/src-tauri/tauri.conf.json
+++ /dev/null
@@ -1,85 +0,0 @@
-{
-  "$schema": "https://schema.tauri.app/config/2",
-  "productName": "storebound",
-  "mainBinaryName": "storebound-desktop",
-  "version": "../package.json",
-  "identifier": "dev.storebound.desktop",
-  "build": {
-    "frontendDist": "../dist",
-    "devUrl": "http://127.0.0.1:1420",
-    "beforeDevCommand": "bun run dev",
-    "beforeBuildCommand": "bun run build"
-  },
-  "app": {
-    "windows": [
-      {
-        "label": "main",
-        "title": "storebound",
-        "width": 1200,
-        "height": 780,
-        "minWidth": 880,
-        "minHeight": 560,
-        "resizable": true,
-        "center": true
-      }
-    ],
-    "security": {
-      "csp": {
-        "default-src": "'self'",
-        "script-src": "'self'",
-        "style-src": "'self'",
-        "img-src": "'self' data:",
-        "font-src": "'self'",
-        "connect-src": "ipc: http://ipc.localhost",
-        "object-src": "'none'",
-        "base-uri": "'none'",
-        "frame-src": "'none'",
-        "form-action": "'none'"
-      },
-      "devCsp": {
-        "default-src": "'self'",
-        "script-src": "'self'",
-        "style-src": "'self' 'unsafe-inline'",
-        "img-src": "'self' data:",
-        "font-src": "'self'",
-        "connect-src": "ipc: http://ipc.localhost ws://127.0.0.1:1420 http://127.0.0.1:1420",
-        "object-src": "'none'",
-        "base-uri": "'none'",
-        "frame-src": "'none'",
-        "form-action": "'none'"
-      },
-      "freezePrototype": true,
-      "capabilities": ["main-window"]
-    }
-  },
-  "bundle": {
-    "active": true,
-    "targets": "all",
-    "category": "DeveloperTool",
-    "shortDescription": "Every game's releases on both stores in one window",
-    "copyright": "MIT license, storebound contributors",
-    "externalBin": ["binaries/storebound"],
-    "createUpdaterArtifacts": false,
-    "icon": [
-      "icons/32x32.png",
-      "icons/128x128.png",
-      "icons/128x128@2x.png",
-      "icons/icon.icns",
-      "icons/icon.ico"
-    ],
-    "macOS": {
-      "minimumSystemVersion": "11.0"
-    }
-  },
-  "plugins": {
-    "deep-link": {
-      "desktop": {
-        "schemes": ["storebound"]
-      }
-    },
-    "updater": {
-      "endpoints": ["https://storebound.dev/desktop/latest.json"],
-      "pubkey": "PLACEHOLDER-minisign-public-key-set-in-D5"
-    }
-  }
-}
diff --git a/apps/desktop/src-tauri/tests/accounts.rs b/apps/desktop/src-tauri/tests/accounts.rs
deleted file mode 100644
index 1e8d1e4..0000000
--- a/apps/desktop/src-tauri/tests/accounts.rs
+++ /dev/null
@@ -1,98 +0,0 @@
-//! Account handling: what is stored where, what is shown, and the key checks. No real keys anywhere.
-use serde_json::{json, Map};
-use storebound_desktop::accounts::*;
-use storebound_desktop::commands::{dialog_excerpt, dialog_summary, has_config, tilde};
-use storebound_desktop::sidecar::managed_tool_env;
-use storebound_desktop::store::{self, Project, State};
-
-const FAKE_PEM: &str = "-----BEGIN PRIVATE KEY-----\nnot-a-real-key\n-----END PRIVATE KEY-----";
-
-#[test]
-fn shown_metadata_carries_no_secret() {
-    let a = Account { id: "abc".into(), label: "Studio Play".into(), kind: AccountKind::Play, created: "2026-10-10T00:00:00Z".into() };
-    let v = serde_json::to_value(&a).unwrap();
-    assert_eq!(v.as_object().unwrap().keys().cloned().collect::<Vec<_>>(), vec!["created", "id", "kind", "label"]);
-    assert_eq!(v["kind"], "play");
-}
-
-#[test]
-fn secrets_map_to_the_cli_env_names() {
-    let mut m = Map::new();
-    Secret::Apple { key_id: "ABCDEFGH12".into(), issuer_id: "00000000-0000-0000-0000-000000000000".into(), p8: FAKE_PEM.into() }.to_credentials(&mut m);
-    Secret::Play { service_account: "{}".into() }.to_credentials(&mut m);
-    assert_eq!(m.keys().cloned().collect::<Vec<_>>(), vec!["ASC_ISSUER_ID", "ASC_KEY_ID", "ASC_P8", "PLAY_SERVICE_ACCOUNT"]);
-    let s = Secret::Play { service_account: "{}".into() };
-    let back: Secret = serde_json::from_str(&serde_json::to_string(&s).unwrap()).unwrap();
-    assert_eq!(back, s);
-}
-
-#[test]
-fn key_checks() {
-    let sa = json!({ "type": "service_account", "client_email": "bot@example.com", "private_key": FAKE_PEM }).to_string();
-    assert!(check_service_account(&sa).is_ok());
-    assert!(check_service_account("{\"client_email\":\"x@example.com\"}").is_err());
-    assert!(check_service_account("not json").is_err());
-    assert_eq!(check_key_id(" ABCDEFGH12 ").unwrap(), "ABCDEFGH12");
-    assert!(check_key_id("abc").is_err());
-    assert!(check_key_id("abcdefgh12").is_err());
-    let upper = "00000000-0000-0000-0000-00000000000A";
-    assert_eq!(check_issuer_id(upper).unwrap(), upper.to_ascii_lowercase());
-    assert!(check_issuer_id("0000-0000").is_err());
-    assert!(check_p8(FAKE_PEM).is_ok());
-    assert!(check_p8("hello").is_err());
-    assert!(check_label("").is_err());
-    assert!(check_label("a\u{7}").is_err());
-    assert!(check_label(&"x".repeat(61)).is_err());
-    assert_eq!(check_label("  Studio  ").unwrap(), "Studio");
-}
-
-#[test]
-fn state_file_round_trip_is_atomic_and_tolerant() {
-    let dir = tempfile::tempdir().unwrap();
-    assert_eq!(store::load(dir.path()), State::default());
-    let st = State {
-        projects: vec![Project { id: "1".into(), path: "/games/a".into(), name: "A".into(), play_account: Some("p".into()), apple_account: None, added: "2026-10-10T00:00:00Z".into() }],
-        accounts: vec![],
-    };
-    store::save(dir.path(), &st).unwrap();
-    assert_eq!(store::load(dir.path()), st);
-    assert!(!dir.path().join("state.json.tmp").exists());
-    let text = std::fs::read_to_string(dir.path().join("state.json")).unwrap();
-    assert!(text.contains("\"playAccount\": \"p\""));
-    std::fs::write(dir.path().join("state.json"), "{broken").unwrap();
-    assert_eq!(store::load(dir.path()), State::default());
-    assert_eq!(store::iso_from_unix(0), "1970-01-01T00:00:00Z");
-    assert_eq!(store::iso_from_unix(1_700_000_000), "2023-11-14T22:13:20Z");
-    assert_eq!(store::new_id().unwrap().len(), 16);
-}
-
-#[test]
-fn managed_tools_are_passed_only_when_present() {
-    let dir = tempfile::tempdir().unwrap();
-    assert!(managed_tool_env(dir.path()).is_empty());
-    std::fs::create_dir_all(dir.path().join("tools/bin")).unwrap();
-    let env = managed_tool_env(dir.path());
-    assert_eq!(env.len(), 1);
-    assert_eq!(env[0].0, "STOREBOUND_TOOL_PATH");
-    assert!(env[0].1.ends_with("bin"));
-}
-
-#[test]
-fn confirm_dialog_text() {
-    let s = dialog_summary("Push Play listing text", "Title and descriptions.", "Prism Puddle", true, true);
-    assert!(s.starts_with("Push Play listing text · Prism Puddle"));
-    assert!(s.contains("not public until you submit"));
-    assert!(s.contains("replaces"));
-    let out: String = (1..=40).map(|i| format!("line {i}\n")).collect();
-    let ex = dialog_excerpt(&out);
-    assert!(ex.starts_with("(12 earlier lines"));
-    assert!(ex.ends_with("line 40"));
-    assert!(dialog_excerpt(&"x".repeat(5000)).chars().count() < 2_500);
-    assert_eq!(tilde("would write /home/you/a/index.html", Some("/home/you/")), "would write ~/a/index.html");
-    assert_eq!(tilde("/x", None), "/x");
-    assert_eq!(tilde("/x", Some("/")), "/x");
-    let dir = tempfile::tempdir().unwrap();
-    assert!(!has_config(dir.path()));
-    std::fs::write(dir.path().join("storebound.config.ts"), "export default {}").unwrap();
-    assert!(has_config(dir.path()));
-}
diff --git a/apps/desktop/src-tauri/tests/confirm.rs b/apps/desktop/src-tauri/tests/confirm.rs
deleted file mode 100644
index c26c06b..0000000
--- a/apps/desktop/src-tauri/tests/confirm.rs
+++ /dev/null
@@ -1,43 +0,0 @@
-//! The host mints exactly the tokens the sidecar verifies: same canonical JSON, same HMAC, same shape as
-//! cli/lib/confirm-token.ts. The vector is shared with tests/serve.test.ts in the repository root.
-use serde_json::json;
-use storebound_desktop::confirm::*;
-
-fn secret() -> Vec<u8> {
-    (0u8..32).collect()
-}
-
-#[test]
-fn shared_vector() {
-    let p = json!({ "project": "/tmp/game", "args": { "only": "en-US,tr", "b": [1, true, null, "ü\"\n"] } });
-    assert_eq!(canonical(&p).unwrap(), "{\"args\":{\"b\":[1,true,null,\"ü\\\"\\n\"],\"only\":\"en-US,tr\"},\"project\":\"/tmp/game\"}");
-    assert_eq!(mac(&secret(), "play.listing", &p, 1_700_000_060_000, "AAAAAAAAAAAAAAAAAAAAAA").unwrap(), "JhSxUL2ej4cm4yrmlcA23rTCPq3YMKJthbB7n6aixxw");
-}
-
-#[test]
-fn canonical_rules() {
-    assert_eq!(canonical(&json!({ "b": 1, "a": [true, null, "x"], "c": { "z": "" } })).unwrap(), "{\"a\":[true,null,\"x\"],\"b\":1,\"c\":{\"z\":\"\"}}");
-    assert!(canonical(&json!({ "f": 0.5 })).is_err());
-    assert!(canonical(&json!({ "f": 9_007_199_254_740_992u64 })).is_err());
-    assert_eq!(canonical(&json!(-9_007_199_254_740_991i64)).unwrap(), "-9007199254740991");
-    // keys sort by UTF-16 code units like JavaScript: "\u{e9}" (U+00E9) after "z", astral after BMP private use
-    assert_eq!(canonical(&json!({ "é": 1, "z": 2, "A": 3 })).unwrap(), "{\"A\":3,\"z\":2,\"é\":1}");
-    assert_eq!(canonical(&json!("\u{1}\t</")).unwrap(), "\"\\u0001\\t</\"");
-}
-
-#[test]
-fn minted_tokens_have_the_sidecar_shape() {
-    let p = json!({ "project": "/p", "args": {} });
-    let t = mint(&secret(), "play.listing", &p, 1_000, "AAAAAAAAAAAAAAAAAAAAAA").unwrap();
-    let parts: Vec<&str> = t.split('.').collect();
-    assert_eq!(parts.len(), 4);
-    assert_eq!(parts[0], "sbt1");
-    assert_eq!(parts[1], (1_000 + TTL_MS).to_string());
-    assert_eq!(parts[3].len(), 43);
-    assert_eq!(parts[3], mac(&secret(), "play.listing", &p, 1_000 + TTL_MS, "AAAAAAAAAAAAAAAAAAAAAA").unwrap());
-    let n = new_nonce().unwrap();
-    assert_eq!(n.len(), 22);
-    assert_ne!(n, new_nonce().unwrap());
-    assert_ne!(new_secret().unwrap(), new_secret().unwrap());
-    assert_eq!(hex(&[0, 15, 255]), "000fff");
-}
diff --git a/apps/desktop/src-tauri/tests/d2.rs b/apps/desktop/src-tauri/tests/d2.rs
deleted file mode 100644
index c5b886f..0000000
--- a/apps/desktop/src-tauri/tests/d2.rs
+++ /dev/null
@@ -1,137 +0,0 @@
-//! Desktop D2: offline cache, tool download manifest and rules, job ids.
-use std::io::Write;
-
-use serde_json::json;
-use storebound_desktop::cache::{key, Cache};
-use storebound_desktop::downloads::{self, chrome_download, download_allowed, inside, manifest, unpack};
-use storebound_desktop::sidecar::valid_job;
-use url::Url;
-
-#[test]
-fn cache_keeps_the_last_read_per_project_method_and_args() {
-    let c = Cache::in_memory().unwrap();
-    assert_eq!(c.get("p1", "health", &json!({})).unwrap(), None);
-    c.put("p1", "health", &json!({}), &json!({ "ok": true, "n": 1 }), "2026-10-10T10:00:00Z").unwrap();
-    c.put("p1", "health", &json!({}), &json!({ "ok": true, "n": 2 }), "2026-10-10T11:00:00Z").unwrap();
-    c.put("p1", "reviews.list", &json!({ "days": 14, "store": "play" }), &json!([1]), "2026-10-10T09:00:00Z").unwrap();
-    c.put("p2", "health", &json!({}), &json!({ "n": 9 }), "2026-10-10T08:00:00Z").unwrap();
-    let e = c.get("p1", "health", &json!({})).unwrap().unwrap();
-    assert_eq!((e.value["n"].clone(), e.at.as_str()), (json!(2), "2026-10-10T11:00:00Z"));
-    // argument order does not matter (canonical JSON), values do
-    assert!(c.get("p1", "reviews.list", &json!({ "store": "play", "days": 14 })).unwrap().is_some());
-    assert!(c.get("p1", "reviews.list", &json!({ "store": "apple", "days": 14 })).unwrap().is_none());
-    assert_eq!(key("a", "m", &json!({ "b": 1, "a": 2 })), key("a", "m", &json!({ "a": 2, "b": 1 })));
-    assert_eq!(c.stamps("p1").unwrap().len(), 2);
-    c.forget_project("p1").unwrap();
-    assert!(c.get("p1", "health", &json!({})).unwrap().is_none());
-    assert!(c.get("p2", "health", &json!({})).unwrap().is_some());
-    c.clear().unwrap();
-    assert!(c.get("p2", "health", &json!({})).unwrap().is_none());
-}
-
-#[test]
-fn cache_survives_a_reopen() {
-    let dir = tempfile::tempdir().unwrap();
-    Cache::open(dir.path()).unwrap().put("p", "m", &json!({}), &json!({ "x": 1 }), "t").unwrap();
-    assert_eq!(Cache::open(dir.path()).unwrap().get("p", "m", &json!({})).unwrap().unwrap().value, json!({ "x": 1 }));
-}
-
-#[test]
-fn manifest_pins_every_desktop_target_with_hashes() {
-    let m = manifest().unwrap();
-    for t in ["aarch64-apple-darwin", "x86_64-apple-darwin", "x86_64-unknown-linux-gnu", "aarch64-unknown-linux-gnu", "x86_64-pc-windows-msvc"] {
-        let list = m.ffmpeg.targets.get(t).unwrap_or_else(|| panic!("no ffmpeg for {t}"));
-        let mut outs = vec![];
-        for a in list {
-            let u = Url::parse(&a.url).unwrap();
-            assert!(download_allowed(&u), "{}", a.url);
-            assert!(!a.url.contains("/latest/"), "pinned URLs only: {}", a.url);
-            assert_eq!(a.sha256.len(), 64);
-            assert!(a.sha256.chars().all(|c| c.is_ascii_hexdigit()));
-            assert!(a.size > 1_000_000);
-            assert!(a.kind == "zip" || a.kind == "tar.xz");
-            for f in &a.files {
-                inside(std::path::Path::new("/x"), &f.from).unwrap();
-                outs.push(f.to.clone());
-            }
-        }
-        outs.sort();
-        let exe = if t.contains("windows") { ".exe" } else { "" };
-        assert_eq!(outs, vec![format!("ffmpeg{exe}"), format!("ffprobe{exe}")], "{t}");
-    }
-    assert!(download_allowed(&Url::parse(&m.chrome.endpoint).unwrap()));
-    assert_eq!(m.chrome.mac_team_id, "EQHXZ8M8AV");
-    assert!(m.ffmpeg.license.contains("GPL"));
-}
-
-#[test]
-fn downloads_only_over_https_from_the_listed_hosts() {
-    for ok in ["https://ffmpeg.martin-riedl.de/download/x.zip", "https://github.com/BtbN/FFmpeg-Builds/releases/download/a/b.zip", "https://storage.googleapis.com/chrome-for-testing-public/1/mac-arm64/chrome-mac-arm64.zip"] {
-        assert!(download_allowed(&Url::parse(ok).unwrap()), "{ok}");
-    }
-    for bad in ["http://ffmpeg.martin-riedl.de/x.zip", "https://evil.test/x.zip", "https://github.com.evil.test/x", "https://storage.googleapis.com:8443/x", "file:///tmp/x.zip"] {
-        assert!(!download_allowed(&Url::parse(bad).unwrap()), "{bad}");
-    }
-    assert!(!download_allowed(&Url::parse(&format!("https://{}@github.com/x", "u")).unwrap()));
-}
-
-#[test]
-fn chrome_for_testing_endpoint_answer() {
-    let j = json!({ "channels": { "Stable": { "version": "141.0.7390.54", "downloads": { "chrome": [
-        { "platform": "linux64", "url": "https://storage.googleapis.com/chrome-for-testing-public/141.0.7390.54/linux64/chrome-linux64.zip" },
-        { "platform": "mac-arm64", "url": "https://storage.googleapis.com/chrome-for-testing-public/141.0.7390.54/mac-arm64/chrome-mac-arm64.zip" }
-    ] } } } });
-    let (v, u) = chrome_download(&j, "Stable", "mac-arm64").unwrap();
-    assert_eq!(v, "141.0.7390.54");
-    assert!(u.as_str().ends_with("chrome-mac-arm64.zip"));
-    assert!(chrome_download(&j, "Stable", "win64").is_err());
-    let evil = json!({ "channels": { "Stable": { "version": "1", "downloads": { "chrome": [{ "platform": "win64", "url": "https://evil.test/chrome.zip" }] } } } });
-    assert!(chrome_download(&evil, "Stable", "win64").is_err());
-}
-
-#[test]
-fn archive_paths_stay_inside() {
-    let base = std::path::Path::new("/data/tools/.staging");
-    assert!(inside(base, "ffmpeg-n9/bin/ffmpeg").is_ok());
-    for bad in ["../ffmpeg", "/usr/bin/ffmpeg", "a/../../b", "./x"] {
-        assert!(inside(base, bad).is_err(), "{bad}");
-    }
-}
-
-#[test]
-fn zip_unpack_refuses_entries_outside_the_folder() {
-    if cfg!(target_os = "macos") {
-        return; // macOS unpacks with ditto, which never writes outside the target folder
-    }
-    let dir = tempfile::tempdir().unwrap();
-    let zip_path = dir.path().join("evil.zip");
-    {
-        let f = std::fs::File::create(&zip_path).unwrap();
-        let mut z = zip::ZipWriter::new(f);
-        z.start_file("../escape.txt", zip::write::SimpleFileOptions::default()).unwrap();
-        z.write_all(b"x").unwrap();
-        z.finish().unwrap();
-    }
-    let out = dir.path().join("out");
-    let _ = unpack(&zip_path, "zip", &out);
-    assert!(!dir.path().join("escape.txt").exists());
-}
-
-#[test]
-fn download_info_lists_both_tools() {
-    let dir = tempfile::tempdir().unwrap();
-    let info = downloads::info(dir.path()).unwrap();
-    assert_eq!(info.iter().map(|i| i.tool).collect::<Vec<_>>(), vec!["ffmpeg", "chrome"]);
-    assert!(info.iter().all(|i| !i.installed));
-    assert!(info[0].available && info[0].size.unwrap_or(0) > 0);
-}
-
-#[test]
-fn job_ids_are_short_and_plain() {
-    for ok in ["portfolio-1", "dl:ffmpeg:3", "a.b_c"] {
-        assert!(valid_job(ok), "{ok}");
-    }
-    for bad in ["", "a b", "x\"y", "<script>", &"x".repeat(65)] {
-        assert!(!valid_job(bad), "{bad}");
-    }
-}
diff --git a/apps/desktop/src-tauri/tests/security.rs b/apps/desktop/src-tauri/tests/security.rs
deleted file mode 100644
index 7254c2d..0000000
--- a/apps/desktop/src-tauri/tests/security.rs
+++ /dev/null
@@ -1,210 +0,0 @@
-//! Security invariants of the desktop shell: capability allow-lists, CSP, the command list, the window / origin
-//! checks every command runs, what the webview may send to the sidecar, and where links may go.
-use std::collections::BTreeSet;
-use std::fs;
-use std::path::{Path, PathBuf};
-
-use serde_json::{json, Value};
-use storebound_desktop::policy::*;
-use storebound_desktop::COMMANDS;
-use url::Url;
-
-fn root() -> PathBuf {
-    PathBuf::from(env!("CARGO_MANIFEST_DIR"))
-}
-
-fn read_json(p: &Path) -> Value {
-    serde_json::from_str(&fs::read_to_string(p).unwrap()).unwrap_or_else(|e| panic!("{}: {e}", p.display()))
-}
-
-fn u(s: &str) -> Url {
-    Url::parse(s).unwrap()
-}
-
-#[test]
-fn one_capability_for_the_main_window_with_exactly_the_app_commands() {
-    let dir = root().join("capabilities");
-    let files: Vec<PathBuf> = fs::read_dir(&dir).unwrap().map(|e| e.unwrap().path()).collect();
-    assert_eq!(files.len(), 1, "one capability file expected, found {files:?}");
-    let cap = read_json(&files[0]);
-    assert_eq!(cap["identifier"], "main-window");
-    assert_eq!(cap["windows"], json!(["main"]));
-    assert!(cap.get("webviews").is_none(), "no webview-scoped grants");
-    assert!(cap.get("remote").is_none(), "no remote origins");
-    assert_ne!(cap["local"], json!(false));
-    assert!(cap["description"].as_str().unwrap().len() > 80, "capabilities carry a real description");
-
-    let got: BTreeSet<String> = cap["permissions"].as_array().unwrap().iter().map(|p| p.as_str().expect("plain permission ids only").to_string()).collect();
-    let mut want: BTreeSet<String> = COMMANDS.iter().map(|c| format!("allow-{}", c.replace('_', "-"))).collect();
-    want.insert("core:event:allow-listen".into());
-    want.insert("core:event:allow-unlisten".into());
-    assert_eq!(got, want, "capability permissions must be exactly the app commands + event listen");
-    for p in &got {
-        for plugin in ["shell:", "fs:", "dialog:", "opener:", "updater:", "process:", "notification:", "deep-link:", "window-state:", "single-instance:", "http:", "core:webview", "core:window", "core:path", "core:default"] {
-            assert!(!p.starts_with(plugin), "{p}: no plugin or core API is granted to the webview");
-        }
-    }
-}
-
-#[test]
-fn every_registered_command_is_in_the_list_and_nothing_else() {
-    let lib = fs::read_to_string(root().join("src/lib.rs")).unwrap();
-    let start = lib.find("generate_handler![").unwrap() + "generate_handler![".len();
-    let end = start + lib[start..].find(']').unwrap();
-    let registered: Vec<String> = lib[start..end]
-        .split(',')
-        .map(|s| s.trim().trim_start_matches("commands::").to_string())
-        .filter(|s| !s.is_empty())
-        .collect();
-    assert_eq!(registered, COMMANDS.iter().map(|s| s.to_string()).collect::<Vec<_>>());
-    // every command checks the caller first
-    let cmds = fs::read_to_string(root().join("src/commands.rs")).unwrap();
-    for c in COMMANDS {
-        let at = cmds.find(&format!("pub fn {c}(")).or_else(|| cmds.find(&format!("pub async fn {c}("))).unwrap_or_else(|| panic!("{c} not in commands.rs"));
-        let body = &cmds[at..];
-        let open = body.find('{').unwrap();
-        let first = body[open + 1..].trim_start();
-        assert!(first.starts_with("guard(&window)?;"), "{c} must start with guard(&window)?");
-    }
-}
-
-#[test]
-fn csp_is_strict_and_the_config_has_no_backdoors() {
-    let conf = read_json(&root().join("tauri.conf.json"));
-    let csp = &conf["app"]["security"]["csp"];
-    assert_eq!(csp["default-src"], "'self'");
-    assert_eq!(csp["script-src"], "'self'");
-    assert_eq!(csp["style-src"], "'self'");
-    assert_eq!(csp["connect-src"], "ipc: http://ipc.localhost");
-    assert_eq!(csp["object-src"], "'none'");
-    assert_eq!(csp["frame-src"], "'none'");
-    assert_eq!(csp["base-uri"], "'none'");
-    for (k, v) in csp.as_object().unwrap() {
-        let v = v.as_str().unwrap();
-        assert!(!v.contains("unsafe-eval") && !v.contains("unsafe-inline") && !v.contains('*'), "{k}: {v}");
-        assert!(!v.contains("https:") && !v.contains("http://") || v == "ipc: http://ipc.localhost", "{k}: no remote sources: {v}");
-    }
-    assert_eq!(conf["app"]["security"]["capabilities"], json!(["main-window"]));
-    assert_eq!(conf["app"]["security"]["freezePrototype"], json!(true));
-    assert!(conf["app"].get("withGlobalTauri").is_none() || conf["app"]["withGlobalTauri"] == json!(false));
-    let windows = conf["app"]["windows"].as_array().unwrap();
-    assert_eq!(windows.len(), 1);
-    assert_eq!(windows[0]["label"], MAIN);
-    assert!(windows[0].get("url").is_none(), "the main window loads the bundled index only");
-    assert_eq!(conf["bundle"]["externalBin"], json!(["binaries/storebound"]));
-    assert_eq!(conf["plugins"]["deep-link"]["desktop"]["schemes"], json!(["storebound"]));
-    for e in conf["plugins"]["updater"]["endpoints"].as_array().unwrap() {
-        assert!(e.as_str().unwrap().starts_with("https://storebound.dev/"));
-    }
-    assert_eq!(conf["build"]["devUrl"], format!("http://{DEV_HOST}:{DEV_PORT}"));
-}
-
-#[test]
-fn platform_configs_never_replace_the_window_list() {
-    // Tauri merges a platform config's `app.windows` by replacing the whole array (the main window would lose its
-    // label, size or CSP-relevant settings). Keep windows in tauri.conf.json only.
-    for e in fs::read_dir(root()).unwrap() {
-        let p = e.unwrap().path();
-        let name = p.file_name().unwrap().to_string_lossy().to_string();
-        if name.starts_with("tauri.") && name.ends_with(".conf.json") && name != "tauri.conf.json" {
-            let c = read_json(&p);
-            assert!(c["app"].get("windows").is_none(), "{name} must not set app.windows");
-            assert!(c["app"]["security"].get("csp").is_none(), "{name} must not change the CSP");
-        }
-    }
-}
-
-#[test]
-fn only_main_with_local_pages_may_call() {
-    for ok in ["tauri://localhost/", "tauri://localhost/index.html", "http://tauri.localhost/", "https://tauri.localhost/index.html"] {
-        assert!(require_main("main", &u(ok), false).is_ok(), "{ok}");
-    }
-    assert!(require_main("main", &u("http://127.0.0.1:1420/"), true).is_ok());
-    for bad in [
-        "http://127.0.0.1:1420/",
-        "http://localhost:1420/",
-        "https://storebound.dev/",
-        "tauri://evil/",
-        "tauri://localhost:8080/",
-        "http://tauri.localhost:8080/",
-        "http://tauri.localhost.evil.test/",
-        &format!("http://{}@tauri.localhost/", "user"),
-        "file:///tmp/index.html",
-        "data:text/html,hi",
-    ] {
-        assert!(require_main("main", &u(bad), false).is_err(), "accepted {bad}");
-    }
-    assert!(require_main("main", &u("http://127.0.0.1:1421/"), true).is_err());
-    assert!(require_main("http://localhost", &u("tauri://localhost/"), false).is_err());
-    assert!(require_main("popup", &u("tauri://localhost/"), false).is_err());
-    assert!(require_main("", &u("tauri://localhost/"), false).is_err());
-}
-
-#[test]
-fn webview_calls_to_the_sidecar_are_reads_or_dry_runs() {
-    // a write from the webview always becomes a dry run
-    let p = sanitize_js_call("play.listing", Some(Kind::Write), &json!({ "args": { "only": "en-US" } })).unwrap();
-    assert_eq!(p, json!({ "args": { "only": "en-US" }, "dryRun": true }));
-    // the host's keys are refused, so is anything unknown
-    for key in ["confirmToken", "credentials", "dryRun", "project", "projects", "secret", "env"] {
-        let mut o = serde_json::Map::new();
-        o.insert(key.into(), json!(false));
-        assert!(sanitize_js_call("play.listing", Some(Kind::Write), &Value::Object(o.clone())).is_err(), "{key}");
-        assert!(sanitize_js_call("check", Some(Kind::Read), &Value::Object(o)).is_err(), "{key}");
-    }
-    assert!(sanitize_js_call("session.hello", Some(Kind::Session), &json!({})).is_err());
-    assert!(sanitize_js_call("portfolio.status", Some(Kind::Portfolio), &json!({})).is_err());
-    assert!(sanitize_js_call("apple.submit", None, &json!({})).is_err());
-    assert!(sanitize_js_call("check", Some(Kind::Read), &json!([1])).is_err());
-    assert_eq!(sanitize_js_call("system.version", Some(Kind::System), &Value::Null).unwrap(), json!({}));
-}
-
-#[test]
-fn sidecar_starts_with_fixed_arguments_from_one_place() {
-    assert_eq!(SIDECAR_ARGS, ["serve", "--stdio"]);
-    assert_eq!(SIDECAR, "storebound");
-    let mut sites = 0;
-    for e in fs::read_dir(root().join("src")).unwrap() {
-        let p = e.unwrap().path();
-        let src = fs::read_to_string(&p).unwrap();
-        let n = src.matches(".sidecar(").count();
-        if n > 0 {
-            assert!(p.ends_with("sidecar.rs"), "{} spawns the sidecar", p.display());
-            assert!(src.contains(".args(policy::SIDECAR_ARGS)"));
-        }
-        assert!(!src.contains(".command("), "{}: no other programs are started", p.display());
-        // other programs: only the download checks (unpack, signature, version banner), with fixed program names
-        if src.contains("Command::new(") {
-            assert!(p.ends_with("downloads.rs"), "{} starts a program", p.display());
-            for (i, _) in src.match_indices("Command::new(") {
-                let arg = &src[i + "Command::new(".len()..];
-                let ok = ["\"tar\")", "\"/usr/bin/ditto\")", "\"/usr/bin/codesign\")", "\"powershell\")", "exe)"];
-                assert!(ok.iter().any(|o| arg.starts_with(o)), "unexpected program: {}", &arg[..arg.find(')').unwrap_or(20).min(40)]);
-            }
-        }
-        sites += n;
-    }
-    assert_eq!(sites, 1);
-}
-
-#[test]
-fn links_open_only_for_the_consoles_and_the_site() {
-    for ok in ["https://play.google.com/console/", "https://appstoreconnect.apple.com/apps", "https://storebound.dev/docs"] {
-        assert!(external_allowed(&u(ok)), "{ok}");
-    }
-    for bad in [
-        "http://play.google.com/console",
-        "https://play.google.com.evil.test/",
-        &format!("https://{}@appstoreconnect.apple.com/", "user"),
-        "https://storebound.dev:8443/",
-        "file:///etc/passwd",
-        "javascript:alert(1)",
-        "https://evil.test/?https://storebound.dev",
-    ] {
-        assert!(!external_allowed(&u(bad)), "{bad}");
-    }
-    assert_eq!(deep_link_screen(&u("storebound://apps")), Some("apps"));
-    assert_eq!(deep_link_screen(&u("storebound://portfolio?x=1")), Some("portfolio"));
-    assert_eq!(deep_link_screen(&u("storebound://write")), None);
-    assert_eq!(deep_link_screen(&u("https://projects")), None);
-}
diff --git a/apps/desktop/src-tauri/tools-manifest.json b/apps/desktop/src-tauri/tools-manifest.json
deleted file mode 100644
index 322e857..0000000
--- a/apps/desktop/src-tauri/tools-manifest.json
+++ /dev/null
@@ -1,135 +0,0 @@
-{
-  "generated": "2026-10-10",
-  "ffmpeg": {
-    "version": "9.0.2",
-    "license": "GPL-3.0-or-later (ffmpeg built with GPL components)",
-    "licenseUrl": "https://ffmpeg.org/legal.html",
-    "sources": {
-      "macos": "https://ffmpeg.martin-riedl.de/",
-      "linux": "https://github.com/BtbN/FFmpeg-Builds",
-      "windows": "https://github.com/BtbN/FFmpeg-Builds"
-    },
-    "targets": {
-      "aarch64-apple-darwin": [
-        {
-          "url": "https://ffmpeg.martin-riedl.de/download/macos/arm64/1789931890_9.0.2/ffmpeg.zip",
-          "sha256": "c8ed4c4e6978a03c485edbfe4e0a5dc2380f8a30bba5150531b31b094492d924",
-          "size": 28395699,
-          "kind": "zip",
-          "files": [
-            {
-              "from": "ffmpeg",
-              "to": "ffmpeg"
-            }
-          ]
-        },
-        {
-          "url": "https://ffmpeg.martin-riedl.de/download/macos/arm64/1789931890_9.0.2/ffprobe.zip",
-          "sha256": "fcbe839537485eaee7a7a8bc5cbc0f90d53617e80943e8a5b2e31cb851197ea6",
-          "size": 28317701,
-          "kind": "zip",
-          "files": [
-            {
-              "from": "ffprobe",
-              "to": "ffprobe"
-            }
-          ]
-        }
-      ],
-      "x86_64-apple-darwin": [
-        {
-          "url": "https://ffmpeg.martin-riedl.de/download/macos/amd64/1789931006_9.0.2/ffmpeg.zip",
-          "sha256": "7c6b4125b191cbf773832dc51f424cf2b6bb7da43007d1e066f95909e47cacd4",
-          "size": 33816391,
-          "kind": "zip",
-          "files": [
-            {
-              "from": "ffmpeg",
-              "to": "ffmpeg"
-            }
-          ]
-        },
-        {
-          "url": "https://ffmpeg.martin-riedl.de/download/macos/amd64/1789931006_9.0.2/ffprobe.zip",
-          "sha256": "2322438ed2f6319a691291b247d09c69dcaa3a982460d1f269a7e1af335cfdfd",
-          "size": 33719233,
-          "kind": "zip",
-          "files": [
-            {
-              "from": "ffprobe",
-              "to": "ffprobe"
-            }
-          ]
-        }
-      ],
-      "x86_64-unknown-linux-gnu": [
-        {
-          "url": "https://github.com/BtbN/FFmpeg-Builds/releases/download/autobuild-2026-10-10-13-04/ffmpeg-n9.0.2-25-g67b60c310b-linux64-gpl-9.0.tar.xz",
-          "sha256": "7e898ca0a18e8620c0caa9af9a728bc01be006398dd5db5a99d53f14de010a9a",
-          "size": 151141436,
-          "kind": "tar.xz",
-          "files": [
-            {
-              "from": "ffmpeg-n9.0.2-25-g67b60c310b-linux64-gpl-9.0/bin/ffmpeg",
-              "to": "ffmpeg"
-            },
-            {
-              "from": "ffmpeg-n9.0.2-25-g67b60c310b-linux64-gpl-9.0/bin/ffprobe",
-              "to": "ffprobe"
-            }
-          ]
-        }
-      ],
-      "aarch64-unknown-linux-gnu": [
-        {
-          "url": "https://github.com/BtbN/FFmpeg-Builds/releases/download/autobuild-2026-10-10-13-04/ffmpeg-n9.0.2-25-g67b60c310b-linuxarm64-gpl-9.0.tar.xz",
-          "sha256": "8f897563d9a39eb5616ab043f29f9018358d1f8c15d4b0d30df0dba71f3a931f",
-          "size": 127540920,
-          "kind": "tar.xz",
-          "files": [
-            {
-              "from": "ffmpeg-n9.0.2-25-g67b60c310b-linuxarm64-gpl-9.0/bin/ffmpeg",
-              "to": "ffmpeg"
-            },
-            {
-              "from": "ffmpeg-n9.0.2-25-g67b60c310b-linuxarm64-gpl-9.0/bin/ffprobe",
-              "to": "ffprobe"
-            }
-          ]
-        }
-      ],
-      "x86_64-pc-windows-msvc": [
-        {
-          "url": "https://github.com/BtbN/FFmpeg-Builds/releases/download/autobuild-2026-10-10-13-04/ffmpeg-n9.0.2-25-g67b60c310b-win64-gpl-9.0.zip",
-          "sha256": "1b196e14bd13b76c0d33411f8ef4511f8708a459f682b58ca4c0285a793138cf",
-          "size": 193972697,
-          "kind": "zip",
-          "files": [
-            {
-              "from": "ffmpeg-n9.0.2-25-g67b60c310b-win64-gpl-9.0/bin/ffmpeg.exe",
-              "to": "ffmpeg.exe"
-            },
-            {
-              "from": "ffmpeg-n9.0.2-25-g67b60c310b-win64-gpl-9.0/bin/ffprobe.exe",
-              "to": "ffprobe.exe"
-            }
-          ]
-        }
-      ]
-    }
-  },
-  "chrome": {
-    "endpoint": "https://googlechromelabs.github.io/chrome-for-testing/last-known-good-versions-with-downloads.json",
-    "channel": "Stable",
-    "platforms": {
-      "aarch64-apple-darwin": "mac-arm64",
-      "x86_64-apple-darwin": "mac-x64",
-      "x86_64-unknown-linux-gnu": "linux64",
-      "x86_64-pc-windows-msvc": "win64"
-    },
-    "macTeamId": "EQHXZ8M8AV",
-    "windowsSigner": "Google LLC",
-    "license": "Chromium BSD-style license and third-party notices; Google Chrome for Testing terms",
-    "licenseUrl": "https://github.com/GoogleChromeLabs/chrome-for-testing#readme"
-  }
-}
diff --git a/apps/desktop/src/App.tsx b/apps/desktop/src/App.tsx
deleted file mode 100644
index f424edb..0000000
--- a/apps/desktop/src/App.tsx
+++ /dev/null
@@ -1,187 +0,0 @@
-// Shell: sidebar (apps with their icons, workspace), top bar (breadcrumbs, last read, refresh), the screen, the
-// command palette (Cmd/Ctrl+K), toasts and the first-run welcome guide.
-import { useCallback, useEffect, useMemo, useState } from 'react';
-import { FIXTURES, onDeepLink } from './api';
-import { devSwitch } from './dev/switches';
-import { type Key, t } from './i18n';
-import { ago } from './lib/format';
-import { APP_TABS, NavCtx, parseStart, type Route, sameRoute, TAB_ICON, TAB_KEY, WORKSPACE, type WorkspaceScreen } from './nav';
-import { usePrefs } from './prefs-ctx';
-import { Accounts } from './screens/Accounts';
-import { AppFolders } from './screens/AppFolders';
-import { AppView } from './screens/AppView';
-import { Dependencies } from './screens/Dependencies';
-import { Onboarding } from './screens/Onboarding';
-import { Portfolio } from './screens/Portfolio';
-import { Settings } from './screens/Settings';
-import { useData } from './store';
-import { Icon, type IconName, Mark } from './ui/icons';
-import { AppIcon, Kbd, MOD } from './ui/kit';
-import { type Command, Palette } from './ui/Palette';
-import { Toasts } from './ui/Toasts';
-
-const WS_ICON: Record<WorkspaceScreen, IconName> = { apps: 'folder', accounts: 'key', dependencies: 'package', settings: 'settings' };
-const WS_KEY: Record<WorkspaceScreen, Key> = { apps: 'nav.apps', accounts: 'nav.accounts', dependencies: 'nav.dependencies', settings: 'nav.settings' };
-
-export function App({ onTheme }: { onTheme: () => void }) {
-  const d = useData();
-  const { prefs, update } = usePrefs();
-  const [route, setRoute] = useState<Route>({ screen: 'portfolio' });
-  const [palette, setPalette] = useState(false);
-  const [welcome, setWelcome] = useState(false);
-  const [started, setStarted] = useState(false);
-
-  const go = useCallback((r: Route) => { setRoute(r); document.getElementById('content')?.scrollTo({ top: 0 }); }, []);
-
-  // first screen: dev switch (VITE_START), else the welcome guide on a first run
-  useEffect(() => {
-    if (!d.ready || started) return;
-    setStarted(true);
-    const v = devSwitch('start');
-    if (v === 'welcome' || v.startsWith('welcome:')) { setWelcome(true); return; }
-    if (v === 'palette') setPalette(true);
-    const r = parseStart(v, d.projects.map(p => p.id));
-    if (r) { go(r); return; }
-    if (!d.projects.length && !prefs.onboarded) setWelcome(true);
-  }, [d.ready, d.projects, started, go, prefs.onboarded]);
-
-  useEffect(() => {
-    const un = onDeepLink(s => { const r = parseStart(s, []); if (r) go(r); });
-    return () => { un.then(f => f()); };
-  }, [d.projects, go]);
-
-  // keyboard: Cmd/Ctrl+K palette, Cmd/Ctrl+1 portfolio, 2-5 workspace, Cmd/Ctrl+Shift+[ ] app tabs
-  useEffect(() => {
-    const onKey = (e: KeyboardEvent) => {
-      const mod = e.metaKey || e.ctrlKey;
-      if (mod && !e.shiftKey && !e.altKey && e.key.toLowerCase() === 'k') { e.preventDefault(); setPalette(p => !p); return; }
-      if (palette || welcome) return;
-      if (mod && !e.shiftKey && !e.altKey && /^[1-5]$/.test(e.key)) {
-        e.preventDefault();
-        const n = Number(e.key);
-        go(n === 1 ? { screen: 'portfolio' } : { screen: WORKSPACE[n - 2]! });
-        return;
-      }
-      if (mod && e.shiftKey && (e.key === '[' || e.key === ']' || e.key === '{' || e.key === '}') && route.screen === 'app') {
-        e.preventDefault();
-        const i = APP_TABS.indexOf(route.tab) + (e.key === ']' || e.key === '}' ? 1 : -1);
-        go({ ...route, tab: APP_TABS[(i + APP_TABS.length) % APP_TABS.length]! });
-      }
-    };
-    window.addEventListener('keydown', onKey);
-    return () => window.removeEventListener('keydown', onKey);
-  }, [palette, welcome, route, go]);
-
-  const closeWelcome = useCallback(() => {
-    setWelcome(false);
-    if (!prefs.onboarded) update({ ...prefs, onboarded: true });
-  }, [prefs, update]);
-
-  const app = route.screen === 'app' ? d.projects.find(p => p.id === route.appId) : undefined;
-  useEffect(() => { if (route.screen === 'app' && d.ready && !app) go({ screen: 'portfolio' }); }, [route, app, d.ready, go]);
-
-  const commands = useMemo<Command[]>(() => {
-    const c: Command[] = [];
-    const G = { apps: t('palette.gApps'), go: t('palette.gGo'), tabs: t('palette.gTabs'), act: t('palette.gActions') };
-    for (const p of d.projects) c.push({ id: `app-${p.id}`, group: G.apps, title: d.statusOf(p)?.app?.name ?? p.name, hint: t('palette.openApp'), app: { name: p.name, icon: d.icons[p.id] }, run: () => go({ screen: 'app', appId: p.id, tab: route.screen === 'app' ? route.tab : 'releases' }) });
-    c.push({ id: 'go-portfolio', group: G.go, title: t('nav.portfolio'), icon: 'portfolio', hint: `${MOD} 1`, run: () => go({ screen: 'portfolio' }) });
-    WORKSPACE.forEach((s, i) => c.push({ id: `go-${s}`, group: G.go, title: t(WS_KEY[s]), icon: WS_ICON[s], hint: `${MOD} ${i + 2}`, run: () => go({ screen: s }) }));
-    if (app) for (const tab of APP_TABS) c.push({ id: `tab-${tab}`, group: G.tabs, title: `${app.name} · ${t(TAB_KEY[tab])}`, icon: TAB_ICON[tab], run: () => go({ screen: 'app', appId: app.id, tab }) });
-    else if (d.projects[0]) for (const p of d.projects) for (const tab of APP_TABS) c.push({ id: `tab-${p.id}-${tab}`, group: G.tabs, title: `${p.name} · ${t(TAB_KEY[tab])}`, icon: TAB_ICON[tab], keywords: 'tab', run: () => go({ screen: 'app', appId: p.id, tab }) });
-    c.push({ id: 'act-live', group: G.act, title: t('action.readStores'), icon: 'refresh', keywords: 'refresh sync', run: () => { d.refreshPortfolio(true); } });
-    c.push({ id: 'act-check', group: G.act, title: t('action.checkConfigs'), icon: 'shield', run: () => { d.refreshPortfolio(false); } });
-    c.push({ id: 'act-add', group: G.act, title: t('action.addFolder'), icon: 'folderPlus', run: () => go({ screen: 'apps' }) });
-    c.push({ id: 'act-account', group: G.act, title: t('action.addAccount'), icon: 'key', run: () => go({ screen: 'accounts' }) });
-    c.push({ id: 'act-theme', group: G.act, title: t('action.toggleTheme'), icon: 'moon', keywords: 'dark light', run: onTheme });
-    c.push({ id: 'act-welcome', group: G.act, title: t('action.welcome'), icon: 'sparkle', keywords: 'onboarding start guide', run: () => setWelcome(true) });
-    return c;
-  }, [d, app, route, go, onTheme]);
-
-  const crumbs: { label: string; to?: Route }[] = route.screen === 'portfolio' ? [{ label: t('nav.portfolio') }]
-    : route.screen === 'app' ? [{ label: t('nav.portfolio'), to: { screen: 'portfolio' } }, { label: app?.name ?? '', to: app ? { screen: 'app', appId: app.id, tab: 'releases' } : undefined }, { label: t(TAB_KEY[route.tab]) }]
-    : [{ label: t('nav.workspace') }, { label: t(WS_KEY[route.screen]) }];
-  const lastRead = d.live?.at ?? null;
-  const nav = useMemo(() => ({ route, go, openPalette: () => setPalette(true), openWelcome: () => setWelcome(true) }), [route, go]);
-  const current = (r: Route) => (sameRoute(r, route) || (r.screen === 'app' && route.screen === 'app' && r.appId === route.appId) ? 'page' : undefined);
-
-  return (
-    <NavCtx.Provider value={nav}>
-      <a className="skip" href="#content">{t('a11y.skip')}</a>
-      <div className="shell">
-        <nav className="side" aria-label={t('nav.sections')}>
-          <div className="side-top">
-            <div className="brand"><Mark className="brand-mark" /><span>storebound</span>{d.info?.debug && <small>DEV</small>}</div>
-            <button className="search-btn" onClick={() => setPalette(true)} aria-keyshortcuts="Meta+K Control+K">
-              <Icon name="search" /><span className="lbl">{t('palette.button')}</span><Kbd keys={[MOD, 'K']} />
-            </button>
-          </div>
-          <div className="side-scroll">
-            <button className="nav" aria-current={current({ screen: 'portfolio' })} onClick={() => go({ screen: 'portfolio' })}>
-              <Icon name="portfolio" /><span className="grow">{t('nav.portfolio')}</span>
-            </button>
-            <div className="side-label" id="apps-label"><span>{t('nav.appsLabel')}</span>
-              <button onClick={() => go({ screen: 'apps' })} aria-label={t('action.addFolder')} title={t('action.addFolder')}><Icon name="plus" /></button>
-            </div>
-            <div role="list" aria-labelledby="apps-label">
-              {d.projects.map(p => {
-                const e = d.statusOf(p);
-                const bad = (e?.errors.length ?? 0) + (e?.check?.problems.length ?? 0);
-                return (
-                  <div role="listitem" key={p.id}>
-                    <button className="nav nav-app" aria-current={current({ screen: 'app', appId: p.id, tab: 'releases' })} onClick={() => go({ screen: 'app', appId: p.id, tab: route.screen === 'app' ? route.tab : 'releases' })}>
-                      <AppIcon name={p.name} src={d.icons[p.id]} />
-                      <span className="grow">{e?.app?.name ?? p.name}</span>
-                      {bad > 0 && <span className="tag-count bad" aria-label={t('nav.problems', { count: bad })}>{bad}</span>}
-                    </button>
-                  </div>
-                );
-              })}
-              {!d.projects.length && <p className="side-empty">{t('nav.noApps')}</p>}
-            </div>
-            <div className="side-label"><span>{t('nav.workspace')}</span></div>
-            {WORKSPACE.map((s, i) => (
-              <button key={s} className="nav" aria-current={current({ screen: s })} onClick={() => go({ screen: s })} title={`${t(WS_KEY[s])} (${MOD} ${i + 2})`}>
-                <Icon name={WS_ICON[s]} /><span className="grow">{t(WS_KEY[s])}</span>
-                {s === 'accounts' && <span className="count">{d.accounts.length}</span>}
-              </button>
-            ))}
-          </div>
-          <div className="side-foot" aria-live="polite">
-            <div className="row"><i className={`dot ${d.sidecar?.running ? 'ok' : d.sidecarError ? 'bad' : ''}`} />
-              <span>{d.sidecar?.running ? t('foot.cli', { version: d.sidecar.version }) : d.sidecarError ? t('foot.cliDown') : t('foot.cliStarting')}</span></div>
-            <div className="row"><Icon name="clock" className="sr-icon" /><span>{lastRead ? t('foot.lastRead', { when: ago(lastRead) }) : t('foot.neverRead')}</span></div>
-          </div>
-        </nav>
-        <div className="main">
-          <header className="topbar">
-            <div className="crumbs" aria-label={t('a11y.breadcrumbs')}>
-              {crumbs.map((c, i) => (
-                <span key={i} className="row" style={{ gap: 6, minWidth: 0 }}>
-                  {i > 0 && <Icon name="chevronRight" />}
-                  {c.to && i < crumbs.length - 1 ? <button onClick={() => go(c.to!)}>{c.label}</button> : <span className={i === crumbs.length - 1 ? 'here' : ''}>{c.label}</span>}
-                </span>
-              ))}
-            </div>
-            <span className="spacer" />
-            {FIXTURES && <span className="dev-pill" title={t('dev.fixturesHint')}>{t('dev.fixtures')}</span>}
-            <span className="stamp"><Icon name="clock" />{lastRead ? t('top.storesRead', { when: ago(lastRead) }) : t('top.storesNotRead')}</span>
-            <button className="btn btn-sm" onClick={() => d.refreshPortfolio(true)} disabled={!!d.portfolioBusy || !d.projects.length} title={t('action.readStoresHint')}>
-              <Icon name="refresh" className={d.portfolioBusy === 'live' ? 'spin' : undefined} />{d.portfolioBusy === 'live' ? t('action.reading') : t('action.readStores')}
-            </button>
-          </header>
-          <main className="content" id="content" tabIndex={-1}>
-            {route.screen === 'portfolio' && <Portfolio />}
-            {route.screen === 'app' && app && <AppView key={app.id} project={app} tab={route.tab} />}
-            {route.screen === 'apps' && <AppFolders />}
-            {route.screen === 'accounts' && <Accounts />}
-            {route.screen === 'dependencies' && <Dependencies />}
-            {route.screen === 'settings' && <Settings onTheme={onTheme} />}
-          </main>
-        </div>
-      </div>
-      {palette && <Palette commands={commands} onClose={() => setPalette(false)} />}
-      {welcome && <Onboarding onClose={closeWelcome} />}
-      <Toasts />
-    </NavCtx.Provider>
-  );
-}
diff --git a/apps/desktop/src/api.ts b/apps/desktop/src/api.ts
deleted file mode 100644
index 881cc95..0000000
--- a/apps/desktop/src/api.ts
+++ /dev/null
@@ -1,94 +0,0 @@
-// The webview's only way out: the app commands of src-tauri/src/commands.rs. No plugin API is used from here.
-// Dev builds can run on fixture data instead (VITE_FIXTURES=1, src/dev/fixtures.ts): import.meta.env.DEV is false in
-// release builds, so that branch and the fixture module are dropped from them (tests/webview.test.ts checks dist/).
-import { invoke as tauriInvoke } from '@tauri-apps/api/core';
-import { listen as tauriListen, type UnlistenFn } from '@tauri-apps/api/event';
-import type { DraftsResult, IconResult, ListingsResult, MethodDescriptor, PortfolioResult, ProgressParams, ToolResult } from '../../../cli/lib/desktop-protocol';
-
-export type {
-  AppIdentity, AppStatus, CatalogParity, DraftsResult, IconResult, ListingField, ListingLocale, ListingsResult, MethodDescriptor, PortfolioResult,
-  ProgressParams, ProjectSummary, ReleasePhase, ReleaseTrain, ReplyDraft, StoreRelease, ToolResult,
-} from '../../../cli/lib/desktop-protocol';
-
-export interface AppInfo { version: string; identifier: string; platform: string; debug: boolean; home: string | null }
-export type { ToolStatus } from '../../../cli/lib/tools';
-export interface LocalTools { tools: import('../../../cli/lib/tools').ToolStatus[] }
-export interface SidecarStatus { running: boolean; version: string; protocol: string; methods: Pick<MethodDescriptor, 'method' | 'title' | 'description' | 'kind' | 'network' | 'destructive' | 'json'>[]; tools: LocalTools | null }
-/** An app folder (one storebound.config.ts = one app on iOS and / or Android) and the accounts it uses. */
-export interface Project { id: string; path: string; name: string; playAccount: string | null; appleAccount: string | null; added: string }
-export type AccountKind = 'play' | 'apple';
-export interface Account { id: string; label: string; kind: AccountKind; created: string }
-export interface WriteOutcome { confirmed: boolean; stage: 'dry-run' | 'dialog' | 'done'; dryRun: ToolResult; result?: ToolResult }
-export interface CacheEntry<T = unknown> { value: T; at: string }
-export interface DownloadInfo { tool: 'ffmpeg' | 'chrome'; available: boolean; version: string | null; size: number | null; license: string; licenseUrl: string; source: string; installed: boolean; folder: string }
-export interface DownloadEvent { job: string; tool: string; stage: 'resolve' | 'download' | 'verify' | 'unpack' | 'install' | 'done' | 'error' | 'cancelled'; received: number; total: number | null; message?: string }
-export type { IconResult as Icon };
-
-/** What a failed command rejects with (sidecar.rs `Fail`). */
-export interface Fail { code: number; message: string; data?: unknown }
-
-export function errorText(e: unknown): string {
-  if (typeof e === 'string') return e;
-  if (e && typeof e === 'object' && 'message' in e && typeof (e as Fail).message === 'string') return (e as Fail).message;
-  return 'Something went wrong';
-}
-
-/** Dev-only fixture mode (VITE_FIXTURES=1): every command answered from src/dev/fixtures.ts. */
-export const FIXTURES: boolean = import.meta.env.DEV && !!import.meta.env.VITE_FIXTURES;
-
-async function invoke<T>(cmd: string, args?: Record<string, unknown>): Promise<T> {
-  if (import.meta.env.DEV && import.meta.env.VITE_FIXTURES) return (await import('./dev/fixtures')).mockInvoke<T>(cmd, args ?? {});
-  return tauriInvoke<T>(cmd, args);
-}
-
-async function listen<T>(event: string, cb: (payload: T) => void): Promise<UnlistenFn> {
-  if (import.meta.env.DEV && import.meta.env.VITE_FIXTURES) return (await import('./dev/fixtures')).mockListen(event, cb as (p: unknown) => void);
-  return tauriListen<T>(event, e => cb(e.payload));
-}
-
-let jobSeq = 0;
-/** A fresh job id for one background run (progress events and cancel refer to it). */
-export const newJob = (kind: string): string => `${kind.replace(/[^A-Za-z0-9_.-]/g, '-').slice(0, 40)}-${Date.now().toString(36)}-${++jobSeq}`;
-
-export const api = {
-  appInfo: () => invoke<AppInfo>('app_info'),
-  sidecarStatus: () => invoke<SidecarStatus>('sidecar_status'),
-  /** Reads, or dry runs of writes (the host forces dryRun for writes coming from here). */
-  call: <T = ToolResult>(method: string, projectId?: string, params?: { args?: Record<string, unknown> }, job?: string) =>
-    invoke<T>('sidecar_call', { method, projectId: projectId ?? null, params: params ?? null, job: job ?? null }),
-  /** Last cached read (projectId "*" = the whole live portfolio); null when never read. */
-  cached: <T = unknown>(method: string, projectId: string, args: Record<string, unknown> = {}) =>
-    invoke<CacheEntry<T> | null>('cache_get', { method, projectId, args }),
-  clearCache: () => invoke<void>('cache_clear'),
-  cancel: (job: string) => invoke<boolean>('job_cancel', { job }),
-  /** Dry run, native confirm dialog with that dry run, then the real run with a host-minted token. */
-  writeWithConfirm: (method: string, projectId: string, args: Record<string, unknown> = {}, job?: string) =>
-    invoke<WriteOutcome>('write_with_confirm', { method, projectId, args, job: job ?? null }),
-  projects: () => invoke<Project[]>('projects_list'),
-  addProject: () => invoke<Project | null>('project_add'),
-  initProject: (profile: 'app' | 'game' | 'subscription-app') => invoke<Project | null>('project_init', { profile }),
-  removeProject: (id: string) => invoke<void>('project_remove', { id }),
-  setProjectAccounts: (id: string, play: string | null, apple: string | null) => invoke<Project>('project_set_accounts', { id, play, apple }),
-  accounts: () => invoke<Account[]>('accounts_list'),
-  addPlayAccount: (label: string) => invoke<Account | null>('account_add_play', { label }),
-  addAppleAccount: (label: string, keyId: string, issuerId: string) => invoke<Account | null>('account_add_apple', { label, keyId, issuerId }),
-  removeAccount: (id: string) => invoke<void>('account_remove', { id }),
-  portfolio: (live = false, job?: string) => invoke<PortfolioResult>('portfolio_status', { live, job: job ?? null }),
-  openExternal: (url: string) => invoke<void>('open_external', { url }),
-  toolsInfo: () => invoke<DownloadInfo[]>('tools_info'),
-  installTool: (tool: 'ffmpeg' | 'chrome', job: string) => invoke<string>('tools_install', { tool, job }),
-  uninstallTool: (tool: 'ffmpeg' | 'chrome') => invoke<void>('tools_uninstall', { tool }),
-};
-
-/** Typed reads of the project files (offline) and the stores (network). */
-export const reads = {
-  icon: (projectId: string) => api.call<ToolResult & { data?: IconResult }>('project.icon', projectId),
-  listings: (projectId: string) => api.call<ToolResult & { data?: ListingsResult }>('project.listings', projectId),
-  drafts: (projectId: string) => api.call<ToolResult & { data?: DraftsResult }>('reviews.drafts', projectId),
-};
-
-export interface ProgressEvent extends ProgressParams { job?: string }
-export const onProgress = (cb: (p: ProgressEvent) => void): Promise<UnlistenFn> =>
-  listen<{ params: ProgressParams; job?: string }>('sidecar-progress', e => cb({ ...e.params, job: e.job }));
-export const onDownload = (cb: (e: DownloadEvent) => void): Promise<UnlistenFn> => listen<DownloadEvent>('tool-download', cb);
-export const onDeepLink = (cb: (screen: string) => void): Promise<UnlistenFn> => listen<string>('deep-link', cb);
diff --git a/apps/desktop/src/dev/fixtures.ts b/apps/desktop/src/dev/fixtures.ts
deleted file mode 100644
index 06c9226..0000000
--- a/apps/desktop/src/dev/fixtures.ts
+++ /dev/null
@@ -1,384 +0,0 @@
-// DEV-ONLY FIXTURE MODE (VITE_FIXTURES=1). Answers every app command with made-up data built around the two demo apps
-// of this repo (examples/demo-game "Prism Puddle", examples/demo-app "Tidy Lists"), so every screen can be shown and
-// screenshotted without store accounts, in a browser or in `tauri dev`. Nothing here is real store data; the window
-// shows a "DEV FIXTURES" badge. src/api.ts only imports this module behind import.meta.env.DEV, so release builds do
-// not contain it (tests/webview.test.ts checks the built files for FIXTURE_MARKER).
-import type { Account, AppStatus, CacheEntry, DownloadEvent, DraftsResult, ListingField, ListingsResult, PortfolioResult, Project, ProjectSummary, StoreRelease, ToolResult } from '../api';
-import type { CatalogDiff, HealthSnapshot, MetricRow, Review, TestFlightStatus, ValidateResult } from '../lib/model';
-
-export const FIXTURE_MARKER = 'storebound-dev-fixtures';
-
-const HOME = '/home/you';
-const NOW = Date.now();
-const iso = (minutesAgo: number) => new Date(NOW - minutesAgo * 60_000).toISOString();
-const day = (daysAgo: number) => new Date(NOW - daysAgo * 86_400_000).toISOString().slice(0, 10);
-const sleep = (ms: number) => new Promise(r => setTimeout(r, ms));
-
-// ---- events ----
-type Cb = (p: unknown) => void;
-const listeners = new Map<string, Set<Cb>>();
-export async function mockListen(event: string, cb: Cb): Promise<() => void> {
-  if (!listeners.has(event)) listeners.set(event, new Set());
-  listeners.get(event)!.add(cb);
-  return () => { listeners.get(event)?.delete(cb); };
-}
-const emit = (event: string, payload: unknown) => { for (const cb of listeners.get(event) ?? []) cb(payload); };
-const cancelled = new Set<string>();
-
-// ---- icons (fixture art, drawn for the demo apps) ----
-const svg = (s: string) => `data:image/svg+xml;base64,${btoa(s)}`;
-const ICONS: Record<string, string> = {
-  'p-prism': svg(`<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64"><defs><linearGradient id="g" x1="0" y1="0" x2="1" y2="1"><stop offset="0" stop-color="#7c5cff"/><stop offset="1" stop-color="#ff5fa2"/></linearGradient></defs><rect width="64" height="64" fill="url(#g)"/><path d="M32 12 50 44H14z" fill="#fff" fill-opacity=".92"/><path d="M32 12 41 44H32z" fill="#ffd36e"/><path d="M46 46c0 4-3 7-6 7s-6-3-6-7 6-10 6-10 6 6 6 10z" fill="#5ee0ff" stroke="#fff" stroke-width="2"/></svg>`),
-  'p-tidy': svg(`<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64"><defs><linearGradient id="g" x1="0" y1="0" x2="0" y2="1"><stop offset="0" stop-color="#2fd18b"/><stop offset="1" stop-color="#0f9d74"/></linearGradient></defs><rect width="64" height="64" fill="url(#g)"/><rect x="14" y="13" width="36" height="40" rx="7" fill="#fff"/><path d="M20 25l3 3 6-6M20 37l3 3 6-6" stroke="#0f9d74" stroke-width="3" fill="none" stroke-linecap="round" stroke-linejoin="round"/><path d="M33 26h11M33 38h11" stroke="#b6e8d4" stroke-width="3" stroke-linecap="round"/></svg>`),
-};
-
-// ---- workspace ----
-let projects: Project[] = [
-  { id: 'p-prism', path: `${HOME}/apps/prism-puddle`, name: 'Prism Puddle', playAccount: 'a-play', appleAccount: 'a-apple', added: iso(60 * 24 * 12) },
-  { id: 'p-tidy', path: `${HOME}/apps/tidy-lists`, name: 'Tidy Lists', playAccount: 'a-play', appleAccount: 'a-apple', added: iso(60 * 24 * 5) },
-];
-let accounts: Account[] = [
-  { id: 'a-play', label: 'Example Studio · Play', kind: 'play', created: iso(60 * 24 * 12) },
-  { id: 'a-apple', label: 'Example Studio · App Store', kind: 'apple', created: iso(60 * 24 * 12) },
-];
-if (import.meta.env.VITE_FIXTURES === 'empty') { projects = []; accounts = []; }
-
-const SUMMARY: Record<string, ProjectSummary> = {
-  'p-prism': {
-    dir: `${HOME}/apps/prism-puddle`, config: `${HOME}/apps/prism-puddle/storebound.config.ts`, name: 'Prism Puddle', languages: ['en', 'tr', 'ja', 'ar'],
-    play: { packageName: 'com.example.prismpuddle' }, apple: { bundleId: 'com.example.prismpuddle', appId: '6400000001' }, platforms: ['ios', 'android'],
-    products: 4, productIds: ['coins_small', 'coins_large', 'no_ads', 'starter_pack'], subscriptions: 1, subscriptionIds: ['vip_pass_monthly'],
-    catalog: { ios: ['coins_small', 'coins_large', 'no_ads', 'starter_pack', 'vip_pass_monthly'], android: ['coins_small', 'coins_large', 'no_ads', 'starter_pack', 'vip_pass_monthly'] },
-    shots: true, testflightGroups: 3, profile: 'game', icon: `${HOME}/apps/prism-puddle/store/icons/app-store-1024.png`,
-  },
-  'p-tidy': {
-    dir: `${HOME}/apps/tidy-lists`, config: `${HOME}/apps/tidy-lists/storebound.config.ts`, name: 'Tidy Lists', languages: ['en', 'tr'],
-    play: { packageName: 'com.example.tidylists' }, apple: { bundleId: 'com.example.tidylists', appId: '6400000002' }, platforms: ['ios', 'android'],
-    products: 1, productIds: ['tip_jar'], subscriptions: 2, subscriptionIds: ['pro_monthly', 'pro_yearly'],
-    catalog: { ios: ['tip_jar', 'pro_monthly', 'pro_yearly'], android: ['tip_jar', 'pro_monthly', 'pro_yearly'] },
-    shots: true, testflightGroups: 2, profile: 'app', icon: `${HOME}/apps/tidy-lists/store/icons/app-store-1024.png`,
-  },
-};
-
-const rel = (store: 'ios' | 'android', version: string, phase: StoreRelease['phase'], o: Partial<StoreRelease> = {}): StoreRelease =>
-  ({ store, version, build: null, state: phase.toUpperCase(), phase, fraction: null, track: store === 'android' ? 'production' : null, ...o });
-
-const RELEASES: Record<string, StoreRelease[]> = {
-  'p-prism': [
-    rel('ios', '2.4.0', 'review', { build: '52', state: 'WAITING_FOR_REVIEW', date: iso(60 * 26) }),
-    rel('ios', '2.3.0', 'rollout', { build: '48', state: 'READY_FOR_SALE', fraction: 0.2, phased: { state: 'ACTIVE', day: 5 }, date: iso(60 * 24 * 9) }),
-    rel('ios', '2.2.1', 'other', { build: '44', state: 'REPLACED_WITH_NEW_VERSION', date: iso(60 * 24 * 30) }),
-    rel('android', '2.4.0', 'testing', { build: '240', state: 'completed', track: 'internal' }),
-    rel('android', '2.3.0', 'rollout', { build: '231', state: 'inProgress', fraction: 0.2 }),
-    rel('android', '2.2.1', 'live', { build: '221', state: 'completed' }),
-  ],
-  'p-tidy': [
-    rel('ios', '1.5.0', 'draft', { build: '31', state: 'PREPARE_FOR_SUBMISSION', date: iso(60 * 20) }),
-    rel('ios', '1.4.2', 'live', { build: '29', state: 'READY_FOR_SALE', fraction: 1, phased: { state: 'COMPLETE', day: 7 }, date: iso(60 * 24 * 21) }),
-    rel('android', '1.5.0', 'testing', { build: '150', state: 'completed', track: 'beta' }),
-    rel('android', '1.4.2', 'live', { build: '142', state: 'completed' }),
-  ],
-};
-
-const train = (all: StoreRelease[], v: string) => ({ version: v, ios: all.find(r => r.store === 'ios' && r.version === v) ?? null, android: all.find(r => r.store === 'android' && r.version === v) ?? null });
-
-function status(id: string, live: boolean): AppStatus {
-  const s = SUMMARY[id]!;
-  const all = RELEASES[id]!;
-  const prism = id === 'p-prism';
-  return {
-    project: s.dir, ok: !prism, summary: s,
-    app: { id: s.dir, name: s.name, platforms: { ios: { bundleId: s.apple!.bundleId, ascAppId: s.apple!.appId }, android: { packageName: s.play!.packageName } } },
-    check: prism ? { ok: true, problems: [], warnings: ['store/listing.md: ja-JP "what\'s new" is empty', 'store/appstore.md: ar-SA subtitle is 31 characters (limit 30)'] } : { ok: true, problems: [], warnings: [] },
-    release: live ? (prism ? { source: 'live', current: train(all, '2.3.0'), next: train(all, '2.4.0'), all } : { source: 'live', current: train(all, '1.4.2'), next: train(all, '1.5.0'), all }) : { source: 'none', current: null, next: null },
-    catalog: live
-      ? (prism ? { checked: 'live', products: 4, subscriptions: 1, onlyIos: [], onlyAndroid: [], missingIos: [], missingAndroid: ['starter_pack'], ok: false }
-        : { checked: 'live', products: 1, subscriptions: 2, onlyIos: [], onlyAndroid: [], missingIos: [], missingAndroid: [], ok: true })
-      : { checked: 'config', products: s.products, subscriptions: s.subscriptions, onlyIos: [], onlyAndroid: [], missingIos: [], missingAndroid: [], ok: true },
-    storeErrors: {}, errors: [],
-  };
-}
-const portfolio = (live: boolean): PortfolioResult => ({ apps: projects.map(p => status(p.id, live)), at: live ? iso(14) : iso(0) });
-
-// ---- per-app store reads ----
-const series = (n: number, base: number, drift: number, seed: number): number[] =>
-  Array.from({ length: n }, (_, i) => Math.max(0.0001, base + drift * (i / n) + Math.sin(i * 1.7 + seed) * base * 0.09 + Math.cos(i * 0.6 + seed) * base * 0.05));
-function rows(metric: 'Crash' | 'Anr', vals: number[], w28: number): MetricRow[] {
-  return vals.map((v, i) => ({ date: day(vals.length - i), dims: {}, values: {
-    [`userPerceived${metric}Rate`]: v, [`${metric === 'Crash' ? 'crash' : 'anr'}Rate`]: v * 1.4, distinctUsers: 18_000 + i * 140,
-    ...(i === vals.length - 1 ? { [`userPerceived${metric}Rate28dUserWeighted`]: w28 } : {}),
-  } }));
-}
-const HEALTH: Record<string, HealthSnapshot> = {
-  'p-prism': {
-    date: day(0),
-    play: {
-      window: { start: day(28), end: day(1), days: 28 },
-      crash: rows('Crash', series(28, 0.0068, 0.0032, 1), 0.0091),
-      anr: rows('Anr', series(28, 0.0024, 0.0004, 2), 0.0027),
-      devices: [{ model: 'Galaxy A12', crash: 0.061, users: 1900 }, { model: 'Redmi 9A', crash: 0.042, users: 1400 }, { model: 'Moto G Power (2021)', crash: 0.019, users: 900 }, { model: 'Pixel 6a', crash: 0.008, users: 2100 }, { model: 'Galaxy S23', crash: 0.004, users: 2600 }],
-      issues: [
-        { type: 'CRASH', cause: 'java.lang.IllegalStateException', location: 'com.example.prismpuddle.combo.ComboMeter.update', reports: 412, users: 268, lastVersion: '231' },
-        { type: 'ANR', cause: 'Input dispatching timed out', location: 'com.example.prismpuddle.MainActivity', reports: 133, users: 120, lastVersion: '231' },
-        { type: 'CRASH', cause: 'java.lang.OutOfMemoryError', location: 'android.graphics.Bitmap.createBitmap', reports: 74, users: 61, lastVersion: '221' },
-      ],
-    },
-    apple: {
-      metrics: [
-        { category: 'Hangs', metric: 'Hang rate', unit: 's/h', version: '2.3.0', value: 1.9, goal: 'fair' },
-        { category: 'Launch', metric: 'Launch time', unit: 's', version: '2.3.0', value: 1.21, goal: 'good' },
-        { category: 'Memory', metric: 'Peak memory', unit: 'MB', version: '2.3.0', value: 412, goal: 'fair' },
-        { category: 'Disk', metric: 'Disk writes', unit: 'MB', version: '2.3.0', value: 38, goal: 'good' },
-        { category: 'Battery', metric: 'Foreground energy', unit: '%/h', version: '2.3.0', value: 9.4, goal: 'poor' },
-      ],
-      signatures: [
-        { build: '48', type: 'HANGS', signature: 'ComboMeter.update(delta:) + 212', weight: 0.31 },
-        { build: '48', type: 'DISK_WRITES', signature: 'SaveStore.flush() + 88', weight: 0.12 },
-        { build: '47', type: 'LAUNCHES', signature: 'AssetCache.warmUp() + 64', weight: 0.07 },
-      ],
-      betaCrashes: [{ build: '52', count: 3 }, { build: '51', count: 9 }, { build: '50', count: 5 }],
-    },
-  },
-  'p-tidy': {
-    date: day(0),
-    play: { window: { start: day(28), end: day(1), days: 28 }, crash: rows('Crash', series(28, 0.0021, -0.0004, 3), 0.0019), anr: rows('Anr', series(28, 0.0009, 0.0001, 4), 0.001), devices: [{ model: 'Pixel 7', crash: 0.004, users: 800 }, { model: 'Galaxy A54', crash: 0.003, users: 1100 }], issues: [{ type: 'CRASH', cause: 'kotlin.UninitializedPropertyAccessException', location: 'com.example.tidylists.share.ShareSheet', reports: 21, users: 19, lastVersion: '142' }] },
-    apple: { metrics: [{ category: 'Launch', metric: 'Launch time', unit: 's', version: '1.4.2', value: 0.62, goal: 'good' }, { category: 'Hangs', metric: 'Hang rate', unit: 's/h', version: '1.4.2', value: 0.2, goal: 'good' }], signatures: [], betaCrashes: [{ build: '31', count: 1 }] },
-  },
-};
-
-const R = (store: 'apple' | 'play', id: string, rating: number, title: string, body: string, where: string, daysAgo: number, reply?: string): Review =>
-  ({ store, id, rating, title: title || undefined, body, where, date: new Date(NOW - daysAgo * 86_400_000 - id.length * 3_600_000).toISOString(), appVersion: store === 'play' ? '2.3.0' : undefined, ...(reply ? { reply: { text: reply, date: new Date(NOW - (daysAgo - 1) * 86_400_000).toISOString() } } : {}) });
-const REVIEWS: Record<string, Review[]> = {
-  'p-prism': [
-    R('apple', 'r-a1', 5, 'Calm and clever', 'The color puzzles are so relaxing. Love that it works offline on the train.', 'USA', 1),
-    R('play', 'r-p1', 2, 'Crashes after combo', 'Game closes when I reach a 20x combo on level 31. Lost my streak twice.', 'en', 1),
-    R('apple', 'r-a2', 4, 'Great, but ads', 'Really pretty game. The ad after every level is a bit much, I bought no ads.', 'GBR', 2, 'Thank you! Remove Ads turns them off for good, and you can restore it on a new device from Settings.'),
-    R('play', 'r-p2', 5, '', 'Çok güzel bir oyun, renkler harika ve müzik çok sakin.', 'tr', 2),
-    R('apple', 'r-a3', 1, 'Lost progress', 'Updated and my map progress is gone. Please fix.', 'DEU', 3),
-    R('play', 'r-p3', 3, 'Okay', 'Nice idea, later levels get repetitive. More star challenges please.', 'en', 4),
-    R('apple', 'r-a4', 5, '最高', '色がきれいで、毎日少しずつ遊んでいます。', 'JPN', 5),
-    R('play', 'r-p4', 4, 'Fun', 'Good time killer. Would love a dark mode for night play.', 'en', 5),
-    R('apple', 'r-a5', 5, 'Perfect puzzle game', 'No timers, no pressure. Exactly what I wanted.', 'CAN', 8, 'Thank you for playing! More calm levels arrive in 2.4.'),
-    R('apple', 'r-a6', 2, 'Hard to read', 'Text on the star map is tiny on my iPad.', 'AUS', 11),
-    R('play', 'r-p5', 5, '', 'Beautiful and offline. Five stars from me.', 'en', 6),
-    R('apple', 'r-a7', 4, 'Very nice', 'I like the new combo meter. Starter pack price feels high in Turkey.', 'TUR', 13),
-  ],
-  'p-tidy': [
-    R('apple', 't-a1', 5, 'Finally simple', 'Shared groceries list with my partner in seconds. No clutter.', 'USA', 1),
-    R('play', 't-p1', 4, 'Good', 'Works well. Widgets would be great.', 'en', 2),
-    R('apple', 't-a2', 5, 'Harika', 'Ailecek ortak listeleri burada tutuyoruz, çok pratik.', 'TUR', 3, 'Teşekkürler! Widget\'lar 1.5 ile geliyor.'),
-    R('play', 't-p2', 3, 'Sync delay', 'Sometimes the shared list takes a minute to update.', 'en', 4),
-    R('apple', 't-a3', 5, 'Pro is worth it', 'Unlimited lists and themes. Happy to support a small studio.', 'GBR', 9),
-  ],
-};
-
-const draft = (store: 'apple' | 'play', reviewId: string, reply: string, approved: boolean, issues: DraftsResult['drafts'][number]['issues'] = []) =>
-  ({ file: `${HOME}/apps/prism-puddle/.storebound/replies/${store}-${reviewId}.md`, store, reviewId, approved, sent: null, reply, rating: null, title: null, body: null, date: null, issues });
-const DRAFTS: Record<string, DraftsResult> = {
-  'p-prism': {
-    dir: `${HOME}/apps/prism-puddle/.storebound/replies`, problems: [], drafts: [
-      draft('play', 'r-p1', 'Sorry about the lost streak! A fix for the crash at high combos is in 2.4.0, now in review. Thank you for the level number, it helped.', true),
-      draft('apple', 'r-a3', 'We are sorry! Your progress is saved in iCloud: open Settings > Restore progress. If it is still missing, write to support@example.com.', false,
-        [{ level: 'warn', msg: 'contains an email address: only your public support address, never a user\'s' }]),
-      draft('play', 'r-p3', '', false),
-      draft('apple', 'r-a6', 'Thanks! Change your rating to 5 stars and we will add bigger text with free coins.', false,
-        [{ level: 'error', msg: 'offers something for a rating or asks to change / give stars: not allowed (no incentives, no rating manipulation)' }]),
-    ],
-  },
-  'p-tidy': { dir: `${HOME}/apps/tidy-lists/.storebound/replies`, problems: [], drafts: [] },
-};
-
-const TF: Record<string, TestFlightStatus> = {
-  'p-prism': {
-    groups: [
-      { id: 'g1', name: 'Studio team', internal: true, testers: 6, builds: 'all', publicLink: false },
-      { id: 'g2', name: 'Friends and family', internal: false, testers: 42, builds: 3, publicLink: true },
-      { id: 'g3', name: 'Press', internal: false, testers: 8, builds: 1, publicLink: false },
-    ],
-    builds: [
-      { version: '2.4.0', build: '52', processing: 'VALID', internal: 'IN_BETA_TESTING', external: 'WAITING_FOR_BETA_REVIEW', uploaded: iso(60 * 28) },
-      { version: '2.4.0', build: '51', processing: 'VALID', internal: 'IN_BETA_TESTING', external: 'BETA_APPROVED', uploaded: iso(60 * 50) },
-      { version: '2.3.0', build: '48', processing: 'VALID', internal: 'IN_BETA_TESTING', external: 'BETA_APPROVED', uploaded: iso(60 * 24 * 10) },
-      { version: '2.3.0', build: '47', processing: 'VALID', internal: 'EXPIRED', external: 'EXPIRED', uploaded: iso(60 * 24 * 12) },
-      { version: '2.2.1', build: '44', processing: 'VALID', internal: 'EXPIRED', external: 'EXPIRED', uploaded: iso(60 * 24 * 31) },
-    ],
-    missingGroups: [],
-  },
-  'p-tidy': {
-    groups: [{ id: 'g4', name: 'Studio team', internal: true, testers: 4, builds: 'all', publicLink: false }, { id: 'g5', name: 'Beta club', internal: false, testers: 118, builds: 2, publicLink: true }],
-    builds: [{ version: '1.5.0', build: '31', processing: 'VALID', internal: 'IN_BETA_TESTING', external: 'IN_BETA_TESTING', uploaded: iso(60 * 22) }, { version: '1.4.2', build: '29', processing: 'VALID', internal: 'EXPIRED', external: 'EXPIRED', uploaded: iso(60 * 24 * 22) }],
-    missingGroups: ['Accessibility testers'],
-  },
-};
-
-const CATALOG: Record<string, CatalogDiff> = {
-  'p-prism': {
-    errors: 1,
-    rows: [
-      { id: 'starter_pack', store: 'play', level: 'error', code: 'missing', msg: 'not on Google Play (storebound play products)' },
-      { id: 'vip_pass_monthly', store: 'apple', level: 'warn', code: 'locale', msg: 'no localization for ar-SA' },
-      { id: 'coins_large', store: 'apple', level: 'warn', code: 'price', msg: 'no US price on the store' },
-      { id: 'coins_small', store: 'apple', level: 'ok', code: 'ok', msg: 'consumable, 175 region prices' },
-      { id: 'coins_small', store: 'play', level: 'ok', code: 'ok', msg: 'one_time, 173 region prices' },
-      { id: 'coins_large', store: 'play', level: 'ok', code: 'ok', msg: 'one_time, 173 region prices' },
-      { id: 'no_ads', store: 'apple', level: 'ok', code: 'ok', msg: 'non_consumable, 175 region prices' },
-      { id: 'no_ads', store: 'play', level: 'ok', code: 'ok', msg: 'one_time, 173 region prices' },
-      { id: 'starter_pack', store: 'apple', level: 'ok', code: 'ok', msg: 'consumable, 175 region prices' },
-      { id: 'vip_pass_monthly', store: 'play', level: 'ok', code: 'ok', msg: 'subscription P1M, 173 region prices' },
-      { id: 'legacy_hint_pack', store: 'apple', level: 'warn', code: 'extra', msg: 'on the store but not in the config (consumable, REMOVED_FROM_SALE)' },
-    ],
-    parity: [
-      { id: 'starter_pack', region: 'TR', currency: 'TRY', apple: 149.99, play: 99.99, diffPct: 33.3 },
-      { id: 'no_ads', region: 'BR', currency: 'BRL', apple: 24.9, play: 19.99, diffPct: 19.7 },
-      { id: 'coins_large', region: 'IN', currency: 'INR', apple: 899, play: 780, diffPct: 13.2 },
-    ],
-  },
-  'p-tidy': { errors: 0, rows: ['tip_jar', 'pro_monthly', 'pro_yearly'].flatMap(id => (['apple', 'play'] as const).map(store => ({ id, store, level: 'ok' as const, code: 'ok', msg: 'matches' }))), parity: [] },
-};
-
-const VALIDATE: Record<string, ValidateResult> = {
-  'p-prism': {
-    blockers: 1, findings: [
-      { store: 'play', level: 'blocker', code: 'product-missing', msg: 'starter_pack is in the config but not on Google Play', fix: 'storebound play products --only starter_pack (dry run first)' },
-      { store: 'apple', level: 'warn', code: 'screenshots-ipad', msg: 'ar-SA has no 13" iPad screenshots', fix: 'storebound shots render --lang ar, then storebound apple screenshots --only ar-SA' },
-      { store: 'apple', level: 'warn', code: 'whats-new', msg: '2.4.0 has no "What\'s New" for ja', fix: 'storebound whats-new --since v2.3.0' },
-    ],
-  },
-  'p-tidy': { blockers: 0, findings: [] },
-};
-
-function field(f: string, length: number, limit: number, required = true): ListingField {
-  return { field: f, length, limit, required, state: !length ? (required ? 'missing' : 'empty-optional') : length > limit ? 'over' : 'ok' };
-}
-const LISTINGS: Record<string, ListingsResult> = {
-  'p-prism': {
-    files: { play: `${HOME}/apps/prism-puddle/store/listing.md`, apple: `${HOME}/apps/prism-puddle/store/appstore.md` }, problems: [],
-    locales: [
-      { lang: 'en', rtl: false, screenshots: 24, complete: 1, play: { code: 'en-US', fields: [field('title', 12, 30), field('short', 74, 80), field('full', 2210, 4000), field('whatsNew', 182, 500, false)] }, apple: { code: 'en-US', fields: [field('name', 12, 30), field('subtitle', 28, 30), field('promotionalText', 141, 170), field('keywords', 97, 100), field('description', 2380, 4000), field('whatsNew', 210, 4000, false)] } },
-      { lang: 'tr', rtl: false, screenshots: 24, complete: 1, play: { code: 'tr-TR', fields: [field('title', 12, 30), field('short', 79, 80), field('full', 2390, 4000), field('whatsNew', 170, 500, false)] }, apple: { code: 'tr', fields: [field('name', 12, 30), field('subtitle', 26, 30), field('promotionalText', 150, 170), field('keywords', 99, 100), field('description', 2511, 4000), field('whatsNew', 190, 4000, false)] } },
-      { lang: 'ja', rtl: false, screenshots: 24, complete: 0.89, play: { code: 'ja-JP', fields: [field('title', 9, 30), field('short', 41, 80), field('full', 1310, 4000), field('whatsNew', 0, 500, false)] }, apple: { code: 'ja', fields: [field('name', 9, 30), field('subtitle', 16, 30), field('promotionalText', 0, 170), field('keywords', 88, 100), field('description', 1402, 4000), field('whatsNew', 0, 4000, false)] } },
-      { lang: 'ar', rtl: true, screenshots: 16, complete: 0.89, play: { code: 'ar', fields: [field('title', 11, 30), field('short', 66, 80), field('full', 1980, 4000), field('whatsNew', 150, 500, false)] }, apple: { code: 'ar-SA', fields: [field('name', 11, 30), field('subtitle', 31, 30), field('promotionalText', 120, 170), field('keywords', 93, 100), field('description', 2005, 4000), field('whatsNew', 160, 4000, false)] } },
-    ],
-  },
-  'p-tidy': {
-    files: { play: `${HOME}/apps/tidy-lists/store/listing.md`, apple: `${HOME}/apps/tidy-lists/store/appstore.md` }, problems: [],
-    locales: [
-      { lang: 'en', rtl: false, screenshots: 16, complete: 1, play: { code: 'en-US', fields: [field('title', 10, 30), field('short', 70, 80), field('full', 1500, 4000), field('whatsNew', 120, 500, false)] }, apple: { code: 'en-US', fields: [field('name', 10, 30), field('subtitle', 24, 30), field('promotionalText', 120, 170), field('keywords', 92, 100), field('description', 1610, 4000), field('whatsNew', 130, 4000, false)] } },
-      { lang: 'tr', rtl: false, screenshots: 16, complete: 1, play: { code: 'tr-TR', fields: [field('title', 11, 30), field('short', 77, 80), field('full', 1620, 4000), field('whatsNew', 118, 500, false)] }, apple: { code: 'tr', fields: [field('name', 11, 30), field('subtitle', 27, 30), field('promotionalText', 133, 170), field('keywords', 96, 100), field('description', 1700, 4000), field('whatsNew', 128, 4000, false)] } },
-    ],
-  },
-};
-
-const TOOLS = [
-  { id: 'ffmpeg', name: 'ffmpeg', found: true, path: `${HOME}/Library/Application Support/dev.storebound.desktop/tools/bin/ffmpeg`, version: '9.0.2', source: 'app', usedFor: 'icons, screenshot renders, app preview videos, frame crops', install: { kind: 'download', url: 'https://ffmpeg.org/download.html', note: '' } },
-  { id: 'ffprobe', name: 'ffprobe', found: true, path: `${HOME}/Library/Application Support/dev.storebound.desktop/tools/bin/ffprobe`, version: '9.0.2', source: 'app', usedFor: 'checks of app preview videos and clips', install: { kind: 'download', url: 'https://ffmpeg.org/download.html', note: '' } },
-  { id: 'chrome', name: 'Google Chrome', found: false, path: null, version: null, source: null, usedFor: 'screenshot renders, captions, web captures and recordings', install: { kind: 'download', url: 'https://googlechromelabs.github.io/chrome-for-testing/', note: '' } },
-  { id: 'xcode', name: 'Xcode command line tools', found: true, path: '/Applications/Xcode.app/Contents/Developer', version: '27.0', source: 'system', usedFor: 'iOS builds, the iOS Simulator (simctl)', install: { kind: 'link', url: 'https://developer.apple.com/xcode/', note: '' } },
-  { id: 'simctl', name: 'simctl (iOS Simulator)', found: true, path: '/Applications/Xcode.app/Contents/Developer/usr/bin/simctl', version: null, source: 'system', usedFor: 'iOS Simulator screenshots and recordings', install: { kind: 'link', url: 'https://developer.apple.com/xcode/', note: '' } },
-  { id: 'adb', name: 'adb (Android platform tools)', found: false, path: null, version: null, source: null, usedFor: 'Android emulator / device screenshots and recordings', install: { kind: 'link', url: 'https://developer.android.com/tools/releases/platform-tools', note: '' } },
-  { id: 'git', name: 'git', found: true, path: '/usr/bin/git', version: '2.55.0', source: 'system', usedFor: 'release notes from history, analytics compare', install: { kind: 'link', url: 'https://git-scm.com/downloads', note: '' } },
-];
-let chromeInstalled = false;
-
-const ok = (method: string, data: unknown): ToolResult => ({ method, ok: true, exitCode: 0, dryRun: false, command: `storebound ${method.replace('.', ' ')} --json`, output: '', data });
-
-function read(method: string, id: string): ToolResult {
-  switch (method) {
-    case 'project.icon': return ok(method, { path: SUMMARY[id]?.icon ?? null, dataUrl: ICONS[id] ?? null });
-    case 'project.listings': return ok(method, LISTINGS[id]);
-    case 'reviews.drafts': return ok(method, DRAFTS[id]);
-    case 'health': return ok(method, HEALTH[id]);
-    case 'reviews.list': return ok(method, REVIEWS[id]);
-    case 'apple.testflight_status': return ok(method, TF[id]);
-    case 'catalog.diff': return ok(method, CATALOG[id]);
-    case 'validate': return ok(method, VALIDATE[id]);
-    case 'check': return { method, ok: true, exitCode: 0, dryRun: false, command: 'storebound check', output: '12:00:01 [check] config ok: storebound.config.ts\n12:00:01 [check] listing: 4 languages\n12:00:01 [check] 0 problems, 2 warnings' };
-    default: return { method, ok: false, exitCode: 1, dryRun: false, command: `storebound ${method}`, output: `fixture: no data for ${method}` };
-  }
-}
-
-const CACHED_AGO: Record<string, number> = { health: 60 * 3, 'reviews.list': 45, 'apple.testflight_status': 60 * 5, 'catalog.diff': 60 * 26, validate: 60 * 2 };
-const NETWORK = new Set(['health', 'reviews.list', 'apple.testflight_status', 'catalog.diff', 'validate']);
-
-async function progressLines(job: string | null, lines: string[]) {
-  for (const line of lines) { await sleep(260); if (job) emit('sidecar-progress', { params: { requestId: 1, line, stream: 'stderr' }, job }); }
-}
-
-export async function mockInvoke<T>(cmd: string, a: Record<string, unknown>): Promise<T> {
-  const r = await answer(cmd, a);
-  return r as T;
-}
-
-async function answer(cmd: string, a: Record<string, unknown>): Promise<unknown> {
-  const job = (a.job as string | null) ?? null;
-  switch (cmd) {
-    case 'app_info': return { version: '0.1.0', identifier: 'dev.storebound.desktop', platform: 'macos', debug: true, home: HOME };
-    case 'sidecar_status': return { running: true, version: '0.5.0', protocol: 'storebound-desktop/1', methods: Array.from({ length: 64 }, (_, i) => ({ method: `m${i}` })), tools: { tools: TOOLS.map(x => (x.id === 'chrome' && chromeInstalled ? { ...x, found: true, name: 'Chrome for Testing', version: '141.0.7390.54', source: 'app' } : x)) } };
-    case 'projects_list': return projects;
-    case 'accounts_list': return accounts;
-    case 'portfolio_status': {
-      if (a.live) {
-        for (let n = 1; n <= projects.length; n++) {
-          await sleep(700);
-          if (job && cancelled.has(job)) throw { code: -32800, message: 'Request cancelled' };
-          emit('sidecar-progress', { params: { requestId: 0, n, total: projects.length, project: projects[n - 1]!.path }, job });
-        }
-        return portfolio(true);
-      }
-      await sleep(120);
-      return portfolio(false);
-    }
-    case 'cache_get': {
-      const method = a.method as string, id = a.projectId as string;
-      if (id === '*' && method === 'portfolio.status') return projects.length ? { value: portfolio(true), at: iso(14) } satisfies CacheEntry<PortfolioResult> : null;
-      if (method === 'project.icon') return ICONS[id] ? { value: read(method, id), at: iso(60) } : null;
-      if (CACHED_AGO[method] !== undefined && import.meta.env.VITE_FIXTURES !== 'cold') return { value: read(method, id), at: iso(CACHED_AGO[method]!) };
-      return null;
-    }
-    case 'cache_clear': return null;
-    case 'sidecar_call': {
-      const method = a.method as string;
-      if (method === 'system.tools') return { tools: (await answer('sidecar_status', {}) as { tools: { tools: unknown[] } }).tools.tools };
-      const id = a.projectId as string;
-      if (NETWORK.has(method)) await progressLines(job, [`[${method}] reading App Store Connect`, `[${method}] reading Google Play`, `[${method}] done`]);
-      else await sleep(150);
-      if (job && cancelled.has(job)) throw { code: -32800, message: 'Request cancelled' };
-      return read(method, id);
-    }
-    case 'job_cancel': cancelled.add(a.job as string); return true;
-    case 'write_with_confirm': {
-      await sleep(500);
-      const method = a.method as string, args = (a.args ?? {}) as Record<string, unknown>;
-      if (method === 'reviews.approve') {
-        const d = DRAFTS[a.projectId as string]?.drafts.find(x => x.file.endsWith(`/${String(args.file)}`));
-        if (d) d.approved = !args.undo;
-      }
-      const res: ToolResult = { method, ok: true, exitCode: 0, dryRun: false, command: `storebound ${method.replace('.', ' ')}`, output: `[${method}] done (fixture)` };
-      return { confirmed: true, stage: 'done', dryRun: { ...res, dryRun: true }, result: res };
-    }
-    case 'project_add': case 'project_init': await sleep(300); return null;
-    case 'project_remove': projects = projects.filter(p => p.id !== a.id); return null;
-    case 'project_set_accounts': { const p = projects.find(x => x.id === a.id)!; p.playAccount = (a.play as string | null) ?? null; p.appleAccount = (a.apple as string | null) ?? null; return p; }
-    case 'account_add_play': case 'account_add_apple': return null;
-    case 'account_remove': accounts = accounts.filter(x => x.id !== a.id); return null;
-    case 'open_external': return null;
-    case 'tools_info': return [
-      { tool: 'ffmpeg', available: true, version: '9.0.2', size: 56_713_400, license: 'GPL-3.0-or-later (ffmpeg built with GPL components)', licenseUrl: 'https://ffmpeg.org/legal.html', source: 'https://ffmpeg.martin-riedl.de/', installed: true, folder: 'tools/bin' },
-      { tool: 'chrome', available: true, version: null, size: null, license: 'Chromium BSD-style license and third-party notices; Google Chrome for Testing terms', licenseUrl: 'https://github.com/GoogleChromeLabs/chrome-for-testing#readme', source: 'https://googlechromelabs.github.io/chrome-for-testing/', installed: chromeInstalled, folder: 'tools/chrome' },
-    ];
-    case 'tools_install': {
-      const total = 168_000_000;
-      const ev = (stage: DownloadEvent['stage'], received: number) => emit('tool-download', { job: String(a.job), tool: String(a.tool), stage, received, total } satisfies DownloadEvent);
-      ev('resolve', 0); await sleep(400);
-      for (let i = 1; i <= 20; i++) {
-        if (cancelled.has(a.job as string)) { ev('cancelled', 0); throw 'cancelled'; }
-        ev('download', (total * i) / 20); await sleep(140);
-      }
-      ev('unpack', total); await sleep(400); ev('verify', total); await sleep(400); ev('install', total); await sleep(200);
-      if (a.tool === 'chrome') chromeInstalled = true;
-      return a.tool === 'chrome' ? 'Chrome for Testing 141.0.7390.54' : 'ffmpeg version 9.0.2';
-    }
-    case 'tools_uninstall': if (a.tool === 'chrome') chromeInstalled = false; return null;
-    default: throw { code: -1, message: `fixture: ${cmd} not mocked` };
-  }
-}
diff --git a/apps/desktop/src/dev/switches.ts b/apps/desktop/src/dev/switches.ts
deleted file mode 100644
index 6277b5e..0000000
--- a/apps/desktop/src/dev/switches.ts
+++ /dev/null
@@ -1,10 +0,0 @@
-// Dev-only switches for screenshots and manual checks: VITE_START / VITE_THEME / VITE_LANG / VITE_AUTORUN, or the same
-// names as URL query parameters (?start=app:health&theme=dark&lang=tr) in the Vite dev server. Release builds compile
-// import.meta.env.DEV to false, so this always answers "" there.
-export type Switch = 'start' | 'theme' | 'lang' | 'autorun';
-
-export function devSwitch(name: Switch): string {
-  if (!import.meta.env.DEV) return '';
-  const q = typeof location !== 'undefined' ? new URLSearchParams(location.search).get(name) : null;
-  return q ?? String((import.meta.env as Record<string, unknown>)[`VITE_${name.toUpperCase()}`] ?? '');
-}
diff --git a/apps/desktop/src/i18n/en.ts b/apps/desktop/src/i18n/en.ts
deleted file mode 100644
index 372bf62..0000000
--- a/apps/desktop/src/i18n/en.ts
+++ /dev/null
@@ -1,560 +0,0 @@
-// English UI strings (the source catalog). Placeholders: {name}. Plural: a "<key>_one" entry for a count of 1.
-export const en = {
-  'a11y.skip': 'Skip to content',
-  'a11y.breadcrumbs': 'You are here',
-
-  'nav.sections': 'Sections',
-  'nav.portfolio': 'Portfolio',
-  'nav.appsLabel': 'Apps',
-  'nav.workspace': 'Workspace',
-  'nav.apps': 'App folders',
-  'nav.accounts': 'Accounts',
-  'nav.dependencies': 'Dependencies',
-  'nav.settings': 'Settings',
-  'nav.noApps': 'No apps yet',
-  'nav.problems': '{count} problems',
-  'nav.problems_one': '1 problem',
-
-  'tab.releases': 'Releases',
-  'tab.catalog': 'Catalog',
-  'tab.listings': 'Listings',
-  'tab.health': 'Health',
-  'tab.reviews': 'Reviews',
-  'tab.testflight': 'TestFlight',
-  'tab.checks': 'Checks',
-
-  'profile.app': 'App',
-  'profile.game': 'Game',
-  'profile.subscription-app': 'Subscription app',
-
-  'foot.cli': 'CLI {version} running',
-  'foot.cliDown': 'CLI not running',
-  'foot.cliStarting': 'Starting the CLI',
-  'foot.lastRead': 'Stores read {when}',
-  'foot.neverRead': 'Stores not read yet',
-
-  'top.storesRead': 'Stores read {when}',
-  'top.storesNotRead': 'Stores not read',
-  'dev.fixtures': 'DEV FIXTURES',
-  'dev.fixturesHint': 'Development build on fixture data: nothing here comes from a store. Release builds have no fixture mode.',
-
-  'action.readStores': 'Read the stores',
-  'action.reading': 'Reading',
-  'action.readStoresHint': 'Read-only: App Store Connect and Google Play status of every app, with each app\'s own accounts',
-  'action.checkConfigs': 'Check configs',
-  'action.addFolder': 'Add app folder',
-  'action.addAccount': 'Add a store account',
-  'action.toggleTheme': 'Switch light / dark',
-  'action.welcome': 'Open the welcome guide',
-  'action.refresh': 'Refresh',
-
-  'palette.title': 'Command palette',
-  'palette.button': 'Search or jump to',
-  'palette.placeholder': 'Jump to an app, a tab or a screen, or run an action',
-  'palette.results': 'Results',
-  'palette.none': 'Nothing matches "{q}"',
-  'palette.move': 'move',
-  'palette.open': 'open',
-  'palette.toggle': 'open / close',
-  'palette.gApps': 'Apps',
-  'palette.gGo': 'Go to',
-  'palette.gTabs': 'App tabs',
-  'palette.gActions': 'Actions',
-  'palette.openApp': 'Open',
-
-  'common.loading': 'Loading',
-  'common.unknown': 'Unknown',
-  'common.cancel': 'Cancel',
-  'common.close': 'Close',
-  'common.exit': 'Exit code {code}',
-  'common.cachedFrom': 'Last read {when} (saved copy)',
-  'common.readWhen': 'Read {when}',
-  'common.readFailedKeep': 'The last read failed, so this shows the previous one: {error}',
-
-  'time.justNow': 'just now',
-  'time.never': 'never',
-
-  'toast.readingStores': 'Reading the stores',
-  'toast.readingStoresDetail': 'App Store Connect and Google Play, read-only',
-  'toast.readDone': 'Stores read',
-  'toast.readDoneDetail': '{count} apps up to date',
-  'toast.readDoneDetail_one': '1 app up to date',
-  'toast.readDonePartial': 'Stores read, with gaps',
-  'toast.readDonePartialDetail': '{count} apps could not be read on a store; they show as unknown',
-  'toast.readDonePartialDetail_one': '1 app could not be read on a store; it shows as unknown',
-  'toast.readFailed': 'Reading the stores failed',
-  'toast.cancelled': 'Cancelled',
-  'toast.reading': 'Reading',
-  'toast.readingDetail': 'Read-only',
-  'toast.readOk': '{what} read',
-  'toast.readFailedWhat': 'Reading {what} failed',
-
-  'write.dryFailed': 'The dry run failed, nothing was written',
-  'write.failed': 'Not applied',
-
-  'phase.none': 'Not on this store',
-  'phase.live': 'Live',
-  'phase.rollout': 'Rollout',
-  'phase.phased': 'Phased',
-  'phase.halted': 'Halted',
-  'phase.paused': 'Paused',
-  'phase.approved': 'Approved',
-  'phase.review': 'In review',
-  'phase.rejected': 'Rejected',
-  'phase.testing': 'Testing',
-  'phase.draft': 'Draft',
-  'phase.other': 'Other',
-
-  'stage.build': 'Build',
-  'stage.testing': 'Testing',
-  'stage.review': 'Review',
-  'stage.live': 'Live',
-  'stage.rollout': 'Rollout',
-
-  'check.notChecked': 'Not checked',
-  'check.notLoaded': 'Config not loaded',
-  'check.problems': '{count} problems',
-  'check.problems_one': '1 problem',
-  'check.warnings': '{count} warnings',
-  'check.warnings_one': '1 warning',
-  'check.ok': 'Config OK',
-
-  'app.notSetUp': 'not set up',
-  'app.notOnStore': 'Not on this store',
-  'app.sections': '{name} sections',
-  'app.consoleHint': 'Submit, release and publish happen in the store console',
-
-  'portfolio.lead': 'Every app in this workspace on the App Store and Google Play.',
-  'portfolio.sub': '{count} apps · {stores} store listings',
-  'portfolio.sub_one': '1 app · {stores} store listings',
-  'portfolio.emptyTitle': 'Add your first app',
-  'portfolio.emptyText': 'storebound works on app folders: one storebound.config.ts per app, for iOS and Android. Add a folder that has one, or start a new one from the templates.',
-  'portfolio.notReadNotice': 'Releases, rollouts and catalog parity need one read of the stores. It is read-only and uses each app\'s own accounts.',
-  'portfolio.apps': 'Apps',
-  'portfolio.appsSub': 'Release state from the stores, read {when}',
-  'portfolio.appsSubOffline': 'Config only: read the stores for releases',
-  'portfolio.unreadable': 'Unreadable',
-  'portfolio.noVersion': 'No version yet',
-  'portfolio.noNext': 'Nothing in flight',
-  'portfolio.thenNext': 'next {version} · {phase}',
-  'portfolio.products': '{count} products',
-  'portfolio.products_one': '1 product',
-  'portfolio.subs': '{count} subs',
-  'portfolio.subs_one': '1 sub',
-  'portfolio.inParity': 'In parity',
-  'portfolio.differs': '{count} differ',
-  'portfolio.differs_one': '1 differs',
-  'portfolio.configOnly': 'Not compared yet',
-  'portfolio.attention': 'Needs attention',
-  'portfolio.attentionSub': 'Problems first, then warnings',
-  'portfolio.allClear': 'Nothing needs attention',
-  'portfolio.allClearText': 'Configs check out and no store reported a problem in the last read.',
-  'portfolio.workspace': 'Workspace',
-  'portfolio.healthNotRead': 'Not read',
-  'portfolio.healthNoPlay': 'iOS only',
-  'portfolio.healthTitle': 'Last 14 days, user-perceived, read {when}',
-  'portfolio.accounts': '{play} Google Play · {apple} App Store Connect',
-  'portfolio.storesRead': 'Stores read',
-  'portfolio.tools': 'Local tools',
-  'portfolio.toolsFound': '{found} of {total} found',
-
-  'kpi.apps': 'Apps',
-  'kpi.appsSub': '{ios} on iOS · {android} on Android',
-  'kpi.live': 'Live versions',
-  'kpi.liveSub': 'across {count} store listings',
-  'kpi.rolling': 'Rolling out',
-  'kpi.review': 'In review',
-  'kpi.attention': 'Needs attention',
-  'kpi.blockers': '{count} blockers',
-  'kpi.blockers_one': '1 blocker',
-  'kpi.noBlockers': 'No blockers',
-  'kpi.none': 'None',
-  'kpi.notRead': 'Read the stores to see this',
-
-  'legend.done': 'done',
-  'legend.stages': 'Build · Testing · Review · Live · Rollout',
-
-  'col.app': 'App',
-  'col.next': 'Next version',
-  'col.catalog': 'Catalog',
-  'col.crash': 'Crash rate',
-  'col.config': 'Config',
-  'col.version': 'Version',
-  'col.build': 'Build',
-  'col.versionCode': 'Version code',
-  'col.track': 'Track',
-  'col.item': 'Item',
-  'col.type': 'Type',
-  'col.priceGap': 'Price gap',
-  'col.region': 'Region',
-  'col.diff': 'Difference',
-  'col.language': 'Language',
-  'col.issue': 'Issue',
-  'col.reports': 'Reports',
-  'col.users': 'Users',
-  'col.metric': 'Metric',
-  'col.value': 'Value',
-  'col.goal': 'Goal',
-  'col.name': 'Name',
-  'col.store': 'Store',
-  'col.usedBy': 'Used by',
-  'col.added': 'Added',
-  'col.actions': 'Actions',
-
-  'att.storeError': '{store} could not be read: {error}',
-  'att.rejected': '{store} {version} was rejected',
-  'att.halted': '{store} {version}: rollout halted',
-  'att.catalog': '{count} catalog items differ between the stores',
-  'att.catalog_one': '1 catalog item differs between the stores',
-  'att.crash': 'Crash rate near or over the Google Play threshold',
-  'att.anr': 'ANR rate near or over the Google Play threshold',
-
-  'tl.next': 'Next',
-  'tl.live': 'Live',
-  'tl.store': 'Store',
-  'tl.created': 'Created {date}',
-  'tl.notOnStore': 'Not on this store',
-  'tl.noVersion': '{version} is not on {store} yet',
-  'tl.everyone': 'Everyone',
-  'tl.day': 'day {day} of 7',
-  'tl.rolloutAria': 'Share of users with this version',
-
-  'releases.notReadTitle': 'Release state is not read yet',
-  'releases.notReadText': 'The timeline shows each version on both stores: build, TestFlight or internal testing, review, live and the rollout share. Read the stores once to fill it.',
-  'releases.noAccounts': 'Tip: map store accounts to this app in App folders first.',
-  'releases.storeUnreadable': '{store} could not be read, so its lane shows as unknown: {error}',
-  'releases.noVersions': 'No versions on the stores yet',
-  'releases.noVersionsText': 'When the first build is uploaded it shows here.',
-  'releases.history': 'Versions on the stores',
-  'releases.historySub': 'Read {when}',
-  'releases.consoleNote': 'storebound never submits for review, releases or completes a rollout. Do those in the store console.',
-
-  'cat.products': 'One-time products',
-  'cat.productsSub': 'In the config',
-  'cat.subscriptions': 'Subscriptions',
-  'cat.subsSub': 'All groups',
-  'cat.parity': 'In parity',
-  'cat.parityRead': 'Compared {when}',
-  'cat.gaps': 'Price gaps',
-  'cat.gapsSub': 'Same currency, over 10 %',
-  'cat.matrix': 'Parity matrix',
-  'cat.configOnly': 'From the config only: compare with both stores to fill the store columns',
-  'cat.compare': 'Compare with the stores',
-  'cat.ok': 'Matches',
-  'cat.warn': 'Differs',
-  'cat.error': 'Missing or wrong',
-  'cat.na': 'Not sold here',
-  'cat.unknown': 'Not compared',
-  'cat.extra': 'Store only',
-  'cat.sub': 'Subscription',
-  'cat.product': 'Product',
-  'cat.notInConfig': 'Not in the config',
-  'cat.noGap': 'None',
-  'cat.gapsTitle': 'Price gaps between the stores',
-  'cat.gapsTitleSub': 'Stores round to their own price tiers, so small gaps are normal',
-  'cat.emptyTitle': 'No in-app products or subscriptions',
-  'cat.emptyText': 'Products and subscriptions are defined once in storebound.config.ts and created on both stores. This app has none in its config.',
-
-  'lst.languages': 'Languages',
-  'lst.completeKpi': 'Complete',
-  'lst.completeSub': 'Required fields, both stores',
-  'lst.toFix': 'To fix',
-  'lst.toFixSub': 'Missing or over the limit',
-  'lst.screenshots': 'Screenshots',
-  'lst.screenshotsSub': 'Rendered, all languages',
-  'lst.noRenders': 'No renders folder yet',
-  'lst.playSub': 'store/listing.md',
-  'lst.appleSub': 'store/appstore.md',
-  'lst.complete': 'Complete',
-  'lst.completeAria': '{pct} % complete',
-  'lst.missing': 'Missing',
-  'lst.optional': 'Optional',
-  'lst.over': '{n} over',
-  'lst.title': 'Title',
-  'lst.short': 'Short',
-  'lst.full': 'Full',
-  'lst.whatsNew': 'What\'s new',
-  'lst.name': 'Name',
-  'lst.subtitle': 'Subtitle',
-  'lst.promo': 'Promo text',
-  'lst.keywords': 'Keywords',
-  'lst.description': 'Description',
-  'lst.noFilesTitle': 'No listing files yet',
-  'lst.noFilesText': 'Listing text lives in store/listing.md (Google Play) and store/appstore.md (App Store) in the app folder, one section per language.',
-  'lst.noFilesHint': 'writes both templates into the app folder',
-  'lst.foot': 'From the app folder\'s files, read {when}. Nothing is uploaded from here.',
-
-  'health.read': 'Read health',
-  'health.emptyTitle': 'Health is not read yet',
-  'health.emptyText': 'Crash and ANR rates against the Google Play thresholds, worst devices and top issues, plus App Store diagnostics. Read-only.',
-  'health.crash': 'User-perceived crash rate',
-  'health.anr': 'User-perceived ANR rate',
-  'health.window': '{from} to {to}',
-  'health.over': 'Over threshold',
-  'health.near': 'Near threshold',
-  'health.under': 'Under threshold',
-  'health.current28': '28-day average, as Google Play counts it',
-  'health.daily': 'Daily',
-  'health.threshold': 'Bad behavior threshold {value}',
-  'health.chartAria': '{metric}: {value}',
-  'health.devices': 'Worst devices',
-  'health.devicesSub': 'Per-device threshold {value}',
-  'health.noDevices': 'No device has enough users to compare.',
-  'health.issues': 'Top issues',
-  'health.issuesSub': 'Most reports first',
-  'health.noIssues': 'No issues reported',
-  'health.crashShort': 'Crash',
-  'health.appleMetrics': 'Performance metrics',
-  'health.appleMetricsSub': 'Latest values per metric',
-  'health.noMetrics': 'No metrics yet',
-  'health.signatures': 'Diagnostic signatures',
-  'health.signaturesSub': 'Heaviest first, latest builds',
-  'health.noSignatures': 'No diagnostic signatures',
-  'health.betaCrashes': 'TestFlight crashes',
-  'health.noBetaCrashes': 'No TestFlight crash reports in the window.',
-  'health.build': 'build {build}',
-  'health.noPlay': 'This app is not on Google Play.',
-  'health.noApple': 'This app is not on the App Store.',
-  'health.unreadable': '{store} could not be read, shown as unknown: {error}',
-
-  'reviews.read': 'Read reviews',
-  'reviews.emptyTitle': 'Reviews are not read yet',
-  'reviews.emptyText': 'The last 30 days on the App Store, the last 7 on Google Play (its API keeps no more), with your local reply drafts. Read-only.',
-  'reviews.ratings': 'Ratings',
-  'reviews.count': '{count} reviews',
-  'reviews.count_one': '1 review',
-  'reviews.unansweredN': '{count} without a reply',
-  'reviews.unansweredN_one': '1 without a reply',
-  'reviews.filter': 'Filter',
-  'reviews.store': 'Store',
-  'reviews.all': 'All',
-  'reviews.onlyUnanswered': 'Only without a reply',
-  'reviews.search': 'Search reviews',
-  'reviews.inbox': 'Inbox',
-  'reviews.shown': '{count} shown',
-  'reviews.noMatch': 'No review matches the filter',
-  'reviews.pick': 'Pick a review',
-  'reviews.answered': 'Answered',
-  'reviews.drafted': 'Draft',
-  'reviews.approved': 'Approved',
-  'reviews.notApproved': 'Not approved',
-  'reviews.noTitle': 'No title',
-  'reviews.noText': 'No text',
-  'reviews.version': 'version {v}',
-  'reviews.currentReply': 'Reply on the store',
-  'reviews.draft': 'Your reply draft',
-  'reviews.noDraft': 'No draft for this review. "Make drafts" writes one file per unanswered review into .storebound/replies.',
-  'reviews.emptyDraft': 'The draft {file} has no reply yet: write it under "## Reply".',
-  'reviews.chars': '{n} of {limit} characters',
-  'reviews.approve': 'Approve',
-  'reviews.unapprove': 'Remove approval',
-  'reviews.approveHint': 'Marks the draft approved (local file, confirmed in a dialog). Nothing is sent.',
-  'reviews.fixFirst': 'Fix the errors first',
-  'reviews.sentOn': 'Sent {date}',
-  'reviews.sendNote': 'Replies are public, so they go out from a terminal:',
-  'reviews.makeDrafts': 'Make drafts',
-  'reviews.makeDraftsHint': 'One local draft per unanswered review (dry run first, then a confirmation)',
-  'reviews.draftsMade': 'Reply drafts written',
-  'reviews.approvedToast': 'Draft approved',
-  'reviews.unapproved': 'Approval removed',
-  'reviews.starsAria': '{count} of 5 stars',
-  'reviews.starsAria_one': '1 of 5 stars',
-
-  'tf.read': 'Read TestFlight',
-  'tf.emptyTitle': 'TestFlight is not read yet',
-  'tf.emptyText': 'Beta groups, testers and recent builds with their processing and beta review states. Read-only.',
-  'tf.noIos': 'This app is not on iOS',
-  'tf.noIosText': 'TestFlight is for apps with an App Store record. Add the apple section to the config to use it.',
-  'tf.internal': 'Internal',
-  'tf.external': 'External',
-  'tf.testers': 'testers',
-  'tf.builds': 'builds',
-  'tf.all': 'All',
-  'tf.publicOn': 'Public link on',
-  'tf.publicOff': 'Invite only',
-  'tf.noGroups': 'No beta groups',
-  'tf.buildsTitle': 'Recent builds',
-  'tf.buildsSub': 'Newest first',
-  'tf.processing': 'Processing',
-  'tf.internalTesting': 'Internal testing',
-  'tf.externalTesting': 'External testing',
-  'tf.uploaded': 'Uploaded',
-  'tf.noBuilds': 'No builds uploaded yet',
-  'tf.missingGroups': 'In the config but not on App Store Connect: {groups}',
-
-  'checks.offline': 'Config check',
-  'checks.offlineSub': 'Offline: config, listing files, copy, declarations, products',
-  'checks.again': 'Check again',
-  'checks.clean': 'The config checks out',
-  'checks.cleanText': 'No problems or warnings in the app folder.',
-  'checks.problem': 'Problem',
-  'checks.warning': 'Warning',
-  'checks.validate': 'Store readiness',
-  'checks.validateSub': 'Read-only report from both stores, blockers in order',
-  'checks.run': 'Run the report',
-  'checks.validateEmpty': 'Readiness not checked yet',
-  'checks.validateEmptyText': 'What is still missing on the App Store and Google Play before a submission, in the order to fix it.',
-  'checks.ready': 'No blockers',
-  'checks.readyText': 'Both stores have what a submission needs.',
-
-  'folders.lead': 'One folder per app with its storebound.config.ts (iOS and Android in one config). Pick the store accounts each app uses; the keys stay in the keychain.',
-  'folders.list': 'App folders',
-  'folders.listSub': '{count} folders',
-  'folders.listSub_one': '1 folder',
-  'folders.emptyTitle': 'No app folders yet',
-  'folders.emptyText': 'Add a folder that has a storebound.config.ts, or start a new one below.',
-  'folders.added': '{name} added',
-  'folders.started': '{name} started',
-  'folders.startedDetail': 'Templates written. Edit storebound.config.ts and the store files next.',
-  'folders.playFor': 'Google Play account for {name}',
-  'folders.appleFor': 'App Store Connect account for {name}',
-  'folders.noPlay': 'No Google Play account',
-  'folders.noApple': 'No App Store account',
-  'folders.check': 'Check',
-  'folders.gallery': 'Gallery',
-  'folders.galleryHint': 'Writes the local screenshot review page (dry run first, then a confirmation)',
-  'folders.remove': 'Remove {name} from the list (the folder stays)',
-  'folders.checkTitle': 'Config check',
-  'folders.galleryTitle': 'Screenshot review page',
-  'folders.newTitle': 'Start a new app folder',
-  'folders.newSub': 'storebound init: config, listing, screenshot copy, declarations and privacy policy templates',
-  'folders.profile': 'Profile',
-  'folders.profileHint.app': 'Utility or productivity app: optional account and analytics, no ads.',
-  'folders.profileHint.game': 'Free-to-play game with ads and in-app purchases.',
-  'folders.profileHint.subscription-app': 'App with accounts and auto-renewable subscriptions.',
-  'folders.chooseAndStart': 'Choose a folder and start',
-
-  'run.failed': 'Failed',
-  'run.running': 'Running',
-  'run.applied': 'Applied after your confirmation',
-  'run.cancelled': 'Cancelled in the dialog: nothing was written',
-  'run.dryFailed': 'The dry run failed: nothing was written',
-  'run.done': 'Done',
-
-  'accounts.lead': 'Store API keys live in the system keychain (Keychain on macOS, Credential Manager on Windows, Secret Service on Linux). They are never shown again, never written to your app folders, and reach storebound in memory for one call.',
-  'accounts.list': 'Store accounts',
-  'accounts.listSub': 'Labels only: the keys are in the keychain',
-  'accounts.emptyTitle': 'No store accounts yet',
-  'accounts.emptyText': 'Add a Google Play service account or an App Store Connect API key below. Store reads need them; app folders work without.',
-  'accounts.unused': 'Not used',
-  'accounts.remove': 'Remove',
-  'accounts.removeAria': 'Remove {label} and delete its key from the keychain',
-  'accounts.saved': '"{label}" saved',
-  'accounts.savedDetail': 'The key is in the system keychain.',
-  'accounts.playSub': 'Service account JSON key',
-  'accounts.appleSub': 'Team API key (.p8) from Users and Access, Integrations',
-  'accounts.label': 'Name',
-  'accounts.playPlaceholder': 'Studio Play account',
-  'accounts.applePlaceholder': 'Studio App Store key',
-  'accounts.playHow': 'A service account with access to your apps in Play Console (Users and permissions).',
-  'accounts.keyId': 'Key ID',
-  'accounts.issuerId': 'Issuer ID',
-  'accounts.choosePlay': 'Choose the JSON key',
-  'accounts.chooseApple': 'Choose the .p8 key',
-  'accounts.safety': 'Keys are picked in the system file dialog and go straight to the keychain. The window never sees them.',
-
-  'deps.lead': 'Local tools for screenshots, app previews, icons and simulator or emulator captures. Store work (listings, products, releases, reviews) needs none of them.',
-  'deps.checkAgain': 'Check again',
-  'deps.tools': 'Tools on this computer',
-  'deps.found': '{found} of {total} found',
-  'deps.missing': 'Missing',
-  'deps.appCopy': 'App copy',
-  'deps.installed': 'Installed',
-  'deps.download': 'Download',
-  'deps.remove': 'Remove',
-  'deps.getIt': 'Get it',
-  'deps.unavailable': 'Not for this platform',
-  'deps.downloading': 'Downloading {tool}',
-  'deps.installedToast': '{tool} installed',
-  'deps.failed': 'Download failed',
-  'deps.cancelledDetail': 'The partial download was deleted.',
-  'deps.removed': 'Removed from the app data folder',
-  'deps.inAppData': 'In the app data folder ({folder})',
-  'deps.notDownloaded': 'Not downloaded',
-  'deps.source': 'Source',
-  'deps.license': 'License',
-  'deps.verify': 'Verified by',
-  'deps.verifyFfmpeg': 'SHA-256 of the exact archive, pinned in this app version',
-  'deps.verifyChrome': 'Google\'s code signature (macOS, Windows) or the version banner (Linux)',
-  'deps.licenseLink': 'License and source',
-  'deps.terminal': 'From a terminal',
-  'deps.terminalSub': 'The same check, and the usual install commands',
-  'deps.copy': 'Copy "{cmd}"',
-  'deps.copied': 'Copied',
-
-  'dl.resolve': 'Finding the download',
-  'dl.download': 'Downloading',
-  'dl.verify': 'Verifying',
-  'dl.unpack': 'Unpacking',
-  'dl.install': 'Installing',
-  'dl.done': 'Done',
-  'dl.error': 'Failed',
-  'dl.cancelled': 'Cancelled',
-
-  'settings.lead': 'Appearance, language, shortcuts and what this app runs on.',
-  'settings.appearance': 'Appearance',
-  'settings.theme': 'Theme',
-  'settings.system': 'System',
-  'settings.light': 'Light',
-  'settings.dark': 'Dark',
-  'settings.motion': 'Motion',
-  'settings.followSystem': 'Follow the system',
-  'settings.reduce': 'Reduce',
-  'settings.language': 'Language',
-  'settings.shortcuts': 'Keyboard shortcuts',
-  'settings.scPalette': 'Command palette',
-  'settings.scWorkspace': 'App folders, Accounts, Dependencies, Settings',
-  'settings.scTabs': 'Previous / next app tab',
-  'settings.scTabArrows': 'Move between tabs (tab list focused)',
-  'settings.scClose': 'Close a dialog',
-  'settings.data': 'Saved reads',
-  'settings.dataText': 'The last store reads are kept in the app data folder so screens open with them offline, always marked with their time. No keys are kept there.',
-  'settings.clearCache': 'Clear saved reads',
-  'settings.cacheCleared': 'Saved reads cleared',
-  'settings.about': 'About',
-  'settings.app': 'App',
-  'settings.debug': 'debug build',
-  'settings.methods': '{count} methods',
-  'settings.tools': 'Local tools',
-  'settings.telemetry': 'Telemetry',
-  'settings.telemetryNone': 'None. The app only talks to the store APIs through storebound, with your keys.',
-
-  'wz.s1': 'Welcome',
-  'wz.s2': 'Your apps',
-  'wz.s3': 'Store keys',
-  'wz.s4': 'Local tools',
-  'wz.s5': 'First read',
-  'wz.footer': 'You can open this guide again from Settings or the command palette.',
-  'wz.footerSafe': 'Nothing is submitted or released from here.',
-  'wz.welcomeTitle': 'Every app, both stores, one window',
-  'wz.welcomeLead': 'storebound desktop shows where each of your apps stands on the App Store and Google Play, and runs the storebound CLI for you. Five short steps get you there.',
-  'wz.p1t': 'One portfolio',
-  'wz.p1s': 'Releases, rollouts, catalog parity, health and reviews of every app.',
-  'wz.p2t': 'Safe by design',
-  'wz.p2s': 'Reads are read-only. Every change shows a dry run and a native confirmation first.',
-  'wz.p3t': 'Your keys stay yours',
-  'wz.p3s': 'Store keys live in the system keychain. No account, no telemetry.',
-  'wz.appsTitle': 'Add your apps',
-  'wz.appsLead': 'Each app is a folder with a storebound.config.ts that describes it on both stores.',
-  'wz.addTitle': 'Add an existing folder',
-  'wz.addText': 'The folder already has a storebound.config.ts (from storebound init or the CLI).',
-  'wz.initTitle': 'Start a new app folder',
-  'wz.initText': 'Writes the templates for a profile into a folder you choose. Existing files are kept.',
-  'wz.added': 'Added',
-  'wz.ready': 'Ready',
-  'wz.keysTitle': 'Add your store keys',
-  'wz.keysLead': 'Store reads need an API key per store. You can skip this and add them later in Accounts.',
-  'wz.mapHint': 'Which accounts this app uses',
-  'wz.toolsTitle': 'Check the local tools',
-  'wz.toolsLead': 'Screenshots, previews and icons use ffmpeg and Chrome. The app can download its own copies; store work needs none of them.',
-  'wz.toolsNote': 'The same check in a terminal:',
-  'wz.readTitle': 'Read the stores',
-  'wz.readLead': 'One read-only pass over App Store Connect and Google Play fills the portfolio: versions, review state, rollouts and catalog parity.',
-  'wz.readNow': 'Read the stores now',
-  'wz.readDone': '{count} apps read {when}',
-  'wz.needApp': 'Add an app folder first (step 2).',
-  'wz.skip': 'Skip for now',
-  'wz.back': 'Back',
-  'wz.next': 'Next',
-  'wz.finish': 'Finish',
-} as const;
diff --git a/apps/desktop/src/i18n/index.ts b/apps/desktop/src/i18n/index.ts
deleted file mode 100644
index 67ef10b..0000000
--- a/apps/desktop/src/i18n/index.ts
+++ /dev/null
@@ -1,33 +0,0 @@
-// UI strings: English and Turkish catalogs with the same keys (tr.ts is typed against en.ts; tools/i18n-check.ts also
-// checks empty strings and placeholder parity in CI). `t(key, vars)`: "{name}" placeholders; with a numeric `count`,
-// a "<key>_one" entry is used for 1 when the catalog has one.
-import { en } from './en';
-import { tr } from './tr';
-
-export type Key = keyof typeof en;
-export type Vars = Record<string, string | number>;
-export type UiLang = 'en' | 'tr';
-
-export const CATALOGS: Record<UiLang, Record<Key, string>> = { en, tr };
-let current: UiLang = 'en';
-
-export function setLang(l: UiLang): void { current = l; }
-export function lang(): UiLang { return current; }
-
-export function format(s: string, vars?: Vars): string {
-  if (!vars) return s;
-  return s.replace(/\{(\w+)\}/g, (m, k: string) => (vars[k] === undefined ? m : String(vars[k])));
-}
-
-export function t(key: Key, vars?: Vars): string {
-  const cat = CATALOGS[current];
-  let k: Key = key;
-  if (vars && vars.count === 1) {
-    const one = `${key}_one` as Key;
-    if (one in cat) k = one;
-  }
-  return format(cat[k] ?? en[k] ?? key, vars);
-}
-
-/** Placeholders of a message ("{count} apps" -> ["count"]), sorted, for the parity check. */
-export const placeholders = (s: string): string[] => [...s.matchAll(/\{(\w+)\}/g)].map(m => m[1]!).sort();
diff --git a/apps/desktop/src/i18n/tr.ts b/apps/desktop/src/i18n/tr.ts
deleted file mode 100644
index 3d71e9d..0000000
--- a/apps/desktop/src/i18n/tr.ts
+++ /dev/null
@@ -1,562 +0,0 @@
-// Türkçe arayüz metinleri. Anahtarlar en.ts ile aynı (tip kontrolü); yer tutucular aynı kalmalı (tools/i18n-check.ts).
-import type { en } from './en';
-
-export const tr: Record<keyof typeof en, string> = {
-  'a11y.skip': 'İçeriğe geç',
-  'a11y.breadcrumbs': 'Buradasınız',
-
-  'nav.sections': 'Bölümler',
-  'nav.portfolio': 'Portföy',
-  'nav.appsLabel': 'Uygulamalar',
-  'nav.workspace': 'Çalışma alanı',
-  'nav.apps': 'Uygulama klasörleri',
-  'nav.accounts': 'Hesaplar',
-  'nav.dependencies': 'Bağımlılıklar',
-  'nav.settings': 'Ayarlar',
-  'nav.noApps': 'Henüz uygulama yok',
-  'nav.problems': '{count} sorun',
-  'nav.problems_one': '1 sorun',
-
-  'tab.releases': 'Sürümler',
-  'tab.catalog': 'Katalog',
-  'tab.listings': 'Mağaza metinleri',
-  'tab.health': 'Sağlık',
-  'tab.reviews': 'Yorumlar',
-  'tab.testflight': 'TestFlight',
-  'tab.checks': 'Kontroller',
-
-  'profile.app': 'Uygulama',
-  'profile.game': 'Oyun',
-  'profile.subscription-app': 'Abonelikli uygulama',
-
-  'foot.cli': 'CLI {version} çalışıyor',
-  'foot.cliDown': 'CLI çalışmıyor',
-  'foot.cliStarting': 'CLI başlatılıyor',
-  'foot.lastRead': 'Mağazalar {when} okundu',
-  'foot.neverRead': 'Mağazalar henüz okunmadı',
-
-  'top.storesRead': 'Mağazalar {when} okundu',
-  'top.storesNotRead': 'Mağazalar okunmadı',
-  'dev.fixtures': 'GELİŞTİRME VERİSİ',
-  'dev.fixturesHint': 'Geliştirme sürümü örnek verilerle çalışıyor: buradaki hiçbir şey bir mağazadan gelmiyor. Yayın sürümlerinde bu mod yok.',
-
-  'action.readStores': 'Mağazaları oku',
-  'action.reading': 'Okunuyor',
-  'action.readStoresHint': 'Salt okunur: her uygulamanın App Store Connect ve Google Play durumu, kendi hesaplarıyla',
-  'action.checkConfigs': 'Ayarları kontrol et',
-  'action.addFolder': 'Uygulama klasörü ekle',
-  'action.addAccount': 'Mağaza hesabı ekle',
-  'action.toggleTheme': 'Açık / koyu tema',
-  'action.welcome': 'Karşılama rehberini aç',
-  'action.refresh': 'Yenile',
-
-  'palette.title': 'Komut paleti',
-  'palette.button': 'Ara veya git',
-  'palette.placeholder': 'Bir uygulamaya, sekmeye veya ekrana git ya da bir işlem çalıştır',
-  'palette.results': 'Sonuçlar',
-  'palette.none': '"{q}" ile eşleşen bir şey yok',
-  'palette.move': 'gezin',
-  'palette.open': 'aç',
-  'palette.toggle': 'aç / kapat',
-  'palette.gApps': 'Uygulamalar',
-  'palette.gGo': 'Git',
-  'palette.gTabs': 'Uygulama sekmeleri',
-  'palette.gActions': 'İşlemler',
-  'palette.openApp': 'Aç',
-
-  'common.loading': 'Yükleniyor',
-  'common.unknown': 'Bilinmiyor',
-  'common.cancel': 'İptal',
-  'common.close': 'Kapat',
-  'common.exit': 'Çıkış kodu {code}',
-  'common.cachedFrom': 'Son okuma {when} (kayıtlı kopya)',
-  'common.readWhen': '{when} okundu',
-  'common.readFailedKeep': 'Son okuma başarısız oldu, bu yüzden bir öncekini gösteriyor: {error}',
-
-  'time.justNow': 'az önce',
-  'time.never': 'hiç',
-
-  'toast.readingStores': 'Mağazalar okunuyor',
-  'toast.readingStoresDetail': 'App Store Connect ve Google Play, salt okunur',
-  'toast.readDone': 'Mağazalar okundu',
-  'toast.readDoneDetail': '{count} uygulama güncel',
-  'toast.readDoneDetail_one': '1 uygulama güncel',
-  'toast.readDonePartial': 'Mağazalar eksik okundu',
-  'toast.readDonePartialDetail': '{count} uygulama bir mağazada okunamadı; bilinmiyor olarak gösteriliyor',
-  'toast.readDonePartialDetail_one': '1 uygulama bir mağazada okunamadı; bilinmiyor olarak gösteriliyor',
-  'toast.readFailed': 'Mağazalar okunamadı',
-  'toast.cancelled': 'İptal edildi',
-  'toast.reading': 'Okunuyor',
-  'toast.readingDetail': 'Salt okunur',
-  'toast.readOk': '{what} okundu',
-  'toast.readFailedWhat': '{what} okunamadı',
-
-  'write.dryFailed': 'Deneme çalıştırması başarısız, hiçbir şey yazılmadı',
-  'write.failed': 'Uygulanmadı',
-
-  'phase.none': 'Bu mağazada yok',
-  'phase.live': 'Yayında',
-  'phase.rollout': 'Kademeli',
-  'phase.phased': 'Aşamalı',
-  'phase.halted': 'Durduruldu',
-  'phase.paused': 'Duraklatıldı',
-  'phase.approved': 'Onaylandı',
-  'phase.review': 'İncelemede',
-  'phase.rejected': 'Reddedildi',
-  'phase.testing': 'Testte',
-  'phase.draft': 'Taslak',
-  'phase.other': 'Diğer',
-
-  'stage.build': 'Derleme',
-  'stage.testing': 'Test',
-  'stage.review': 'İnceleme',
-  'stage.live': 'Yayın',
-  'stage.rollout': 'Dağıtım',
-
-  'check.notChecked': 'Kontrol edilmedi',
-  'check.notLoaded': 'Ayar yüklenemedi',
-  'check.problems': '{count} sorun',
-  'check.problems_one': '1 sorun',
-  'check.warnings': '{count} uyarı',
-  'check.warnings_one': '1 uyarı',
-  'check.ok': 'Ayar tamam',
-
-  'app.notSetUp': 'kurulmadı',
-  'app.notOnStore': 'Bu mağazada yok',
-  'app.sections': '{name} bölümleri',
-  'app.consoleHint': 'İncelemeye gönderme, yayınlama ve dağıtım mağaza konsolunda yapılır',
-
-  'portfolio.lead': 'Bu çalışma alanındaki her uygulama, App Store ve Google Play\'de.',
-  'portfolio.sub': '{count} uygulama · {stores} mağaza kaydı',
-  'portfolio.sub_one': '1 uygulama · {stores} mağaza kaydı',
-  'portfolio.emptyTitle': 'İlk uygulamanızı ekleyin',
-  'portfolio.emptyText': 'storebound uygulama klasörleriyle çalışır: her uygulama için iOS ve Android\'i anlatan bir storebound.config.ts. Bu dosyası olan bir klasör ekleyin ya da şablonlardan yenisini başlatın.',
-  'portfolio.notReadNotice': 'Sürümler, kademeli dağıtımlar ve katalog eşleşmesi için mağazaların bir kez okunması gerekir. Salt okunurdur ve her uygulamanın kendi hesaplarını kullanır.',
-  'portfolio.apps': 'Uygulamalar',
-  'portfolio.appsSub': 'Mağazalardan sürüm durumu, {when} okundu',
-  'portfolio.appsSubOffline': 'Yalnızca ayar: sürümler için mağazaları okuyun',
-  'portfolio.unreadable': 'Okunamadı',
-  'portfolio.noVersion': 'Henüz sürüm yok',
-  'portfolio.noNext': 'Bekleyen sürüm yok',
-  'portfolio.thenNext': 'sonra {version} · {phase}',
-  'portfolio.products': '{count} ürün',
-  'portfolio.products_one': '1 ürün',
-  'portfolio.subs': '{count} abonelik',
-  'portfolio.subs_one': '1 abonelik',
-  'portfolio.inParity': 'Eşleşiyor',
-  'portfolio.differs': '{count} fark',
-  'portfolio.differs_one': '1 fark',
-  'portfolio.configOnly': 'Henüz karşılaştırılmadı',
-  'portfolio.attention': 'İlgilenilmesi gerekenler',
-  'portfolio.attentionSub': 'Önce sorunlar, sonra uyarılar',
-  'portfolio.allClear': 'İlgilenilecek bir şey yok',
-  'portfolio.allClearText': 'Ayarlar sorunsuz ve son okumada hiçbir mağaza sorun bildirmedi.',
-  'portfolio.workspace': 'Çalışma alanı',
-  'portfolio.healthNotRead': 'Okunmadı',
-  'portfolio.healthNoPlay': 'Yalnız iOS',
-  'portfolio.healthTitle': 'Son 14 gün, kullanıcının fark ettiği, {when} okundu',
-  'portfolio.accounts': '{play} Google Play · {apple} App Store Connect',
-  'portfolio.storesRead': 'Mağaza okuması',
-  'portfolio.tools': 'Yerel araçlar',
-  'portfolio.toolsFound': '{total} araçtan {found} tanesi var',
-
-  'kpi.apps': 'Uygulamalar',
-  'kpi.appsSub': '{ios} iOS · {android} Android',
-  'kpi.live': 'Yayındaki sürümler',
-  'kpi.liveSub': '{count} mağaza kaydında',
-  'kpi.rolling': 'Dağıtımda',
-  'kpi.review': 'İncelemede',
-  'kpi.attention': 'İlgi bekleyen',
-  'kpi.blockers': '{count} engel',
-  'kpi.blockers_one': '1 engel',
-  'kpi.noBlockers': 'Engel yok',
-  'kpi.none': 'Yok',
-  'kpi.notRead': 'Görmek için mağazaları okuyun',
-
-  'legend.done': 'tamam',
-  'legend.stages': 'Derleme · Test · İnceleme · Yayın · Dağıtım',
-
-  'col.app': 'Uygulama',
-  'col.next': 'Sonraki sürüm',
-  'col.catalog': 'Katalog',
-  'col.crash': 'Çökme oranı',
-  'col.config': 'Ayar',
-  'col.version': 'Sürüm',
-  'col.build': 'Derleme',
-  'col.versionCode': 'Sürüm kodu',
-  'col.track': 'Kanal',
-  'col.item': 'Öğe',
-  'col.type': 'Tür',
-  'col.priceGap': 'Fiyat farkı',
-  'col.region': 'Bölge',
-  'col.diff': 'Fark',
-  'col.language': 'Dil',
-  'col.issue': 'Sorun',
-  'col.reports': 'Rapor',
-  'col.users': 'Kullanıcı',
-  'col.metric': 'Ölçüm',
-  'col.value': 'Değer',
-  'col.goal': 'Hedef',
-  'col.name': 'Ad',
-  'col.store': 'Mağaza',
-  'col.usedBy': 'Kullanan',
-  'col.added': 'Eklendi',
-  'col.actions': 'İşlemler',
-
-  'att.storeError': '{store} okunamadı: {error}',
-  'att.rejected': '{store} {version} reddedildi',
-  'att.halted': '{store} {version}: dağıtım durduruldu',
-  'att.catalog': '{count} katalog öğesi mağazalar arasında farklı',
-  'att.catalog_one': '1 katalog öğesi mağazalar arasında farklı',
-  'att.crash': 'Çökme oranı Google Play eşiğine yakın veya üstünde',
-  'att.anr': 'ANR oranı Google Play eşiğine yakın veya üstünde',
-
-  'tl.next': 'Sonraki',
-  'tl.live': 'Yayında',
-  'tl.store': 'Mağaza',
-  'tl.created': 'Oluşturma: {date}',
-  'tl.notOnStore': 'Bu mağazada yok',
-  'tl.noVersion': '{version} henüz {store} mağazasında yok',
-  'tl.everyone': 'Herkes',
-  'tl.day': '7 günün {day}. günü',
-  'tl.rolloutAria': 'Bu sürümü alan kullanıcı payı',
-
-  'releases.notReadTitle': 'Sürüm durumu henüz okunmadı',
-  'releases.notReadText': 'Zaman çizelgesi her sürümü iki mağazada birlikte gösterir: derleme, TestFlight ya da dahili test, inceleme, yayın ve dağıtım payı. Doldurmak için mağazaları bir kez okuyun.',
-  'releases.noAccounts': 'İpucu: önce Uygulama klasörleri ekranında bu uygulamaya mağaza hesaplarını bağlayın.',
-  'releases.storeUnreadable': '{store} okunamadı, bu yüzden şeridi bilinmiyor olarak gösteriliyor: {error}',
-  'releases.noVersions': 'Mağazalarda henüz sürüm yok',
-  'releases.noVersionsText': 'İlk derleme yüklendiğinde burada görünür.',
-  'releases.history': 'Mağazalardaki sürümler',
-  'releases.historySub': '{when} okundu',
-  'releases.consoleNote': 'storebound hiçbir zaman incelemeye göndermez, yayınlamaz veya dağıtımı tamamlamaz. Bunları mağaza konsolunda yapın.',
-
-  'cat.products': 'Tek seferlik ürünler',
-  'cat.productsSub': 'Ayar dosyasında',
-  'cat.subscriptions': 'Abonelikler',
-  'cat.subsSub': 'Tüm gruplar',
-  'cat.parity': 'Eşleşen',
-  'cat.parityRead': '{when} karşılaştırıldı',
-  'cat.gaps': 'Fiyat farkları',
-  'cat.gapsSub': 'Aynı para birimi, %10 üstü',
-  'cat.matrix': 'Eşleşme tablosu',
-  'cat.configOnly': 'Yalnızca ayar dosyasından: mağaza sütunları için iki mağazayla karşılaştırın',
-  'cat.compare': 'Mağazalarla karşılaştır',
-  'cat.ok': 'Eşleşiyor',
-  'cat.warn': 'Farklı',
-  'cat.error': 'Eksik veya hatalı',
-  'cat.na': 'Burada satılmıyor',
-  'cat.unknown': 'Karşılaştırılmadı',
-  'cat.extra': 'Yalnız mağazada',
-  'cat.sub': 'Abonelik',
-  'cat.product': 'Ürün',
-  'cat.notInConfig': 'Ayar dosyasında yok',
-  'cat.noGap': 'Yok',
-  'cat.gapsTitle': 'Mağazalar arası fiyat farkları',
-  'cat.gapsTitleSub': 'Mağazalar kendi fiyat basamaklarına yuvarlar, küçük farklar normaldir',
-  'cat.emptyTitle': 'Uygulama içi ürün veya abonelik yok',
-  'cat.emptyText': 'Ürünler ve abonelikler storebound.config.ts içinde bir kez tanımlanır ve iki mağazada oluşturulur. Bu uygulamanın ayarında hiç yok.',
-
-  'lst.languages': 'Diller',
-  'lst.completeKpi': 'Tamamlanan',
-  'lst.completeSub': 'Zorunlu alanlar, iki mağaza',
-  'lst.toFix': 'Düzeltilecek',
-  'lst.toFixSub': 'Eksik veya sınırı aşan',
-  'lst.screenshots': 'Ekran görüntüleri',
-  'lst.screenshotsSub': 'Üretilmiş, tüm diller',
-  'lst.noRenders': 'Henüz görsel klasörü yok',
-  'lst.playSub': 'store/listing.md',
-  'lst.appleSub': 'store/appstore.md',
-  'lst.complete': 'Tamamlanan',
-  'lst.completeAria': '%{pct} tamamlandı',
-  'lst.missing': 'Eksik',
-  'lst.optional': 'İsteğe bağlı',
-  'lst.over': '{n} fazla',
-  'lst.title': 'Başlık',
-  'lst.short': 'Kısa',
-  'lst.full': 'Uzun',
-  'lst.whatsNew': 'Yenilikler',
-  'lst.name': 'Ad',
-  'lst.subtitle': 'Alt başlık',
-  'lst.promo': 'Tanıtım metni',
-  'lst.keywords': 'Anahtar kelimeler',
-  'lst.description': 'Açıklama',
-  'lst.noFilesTitle': 'Henüz mağaza metni dosyası yok',
-  'lst.noFilesText': 'Mağaza metinleri uygulama klasöründe store/listing.md (Google Play) ve store/appstore.md (App Store) dosyalarında, her dil için bir bölüm olarak durur.',
-  'lst.noFilesHint': 'iki şablonu da uygulama klasörüne yazar',
-  'lst.foot': 'Uygulama klasöründeki dosyalardan, {when} okundu. Buradan hiçbir şey yüklenmez.',
-
-  'health.read': 'Sağlığı oku',
-  'health.emptyTitle': 'Sağlık henüz okunmadı',
-  'health.emptyText': 'Google Play eşiklerine göre çökme ve ANR oranları, en kötü cihazlar ve öne çıkan sorunlar, ayrıca App Store tanılamaları. Salt okunur.',
-  'health.crash': 'Kullanıcının fark ettiği çökme oranı',
-  'health.anr': 'Kullanıcının fark ettiği ANR oranı',
-  'health.window': '{from} ile {to} arası',
-  'health.over': 'Eşiğin üstünde',
-  'health.near': 'Eşiğe yakın',
-  'health.under': 'Eşiğin altında',
-  'health.current28': '28 günlük ortalama, Google Play\'in saydığı gibi',
-  'health.daily': 'Günlük',
-  'health.threshold': 'Kötü davranış eşiği {value}',
-  'health.chartAria': '{metric}: {value}',
-  'health.devices': 'En kötü cihazlar',
-  'health.devicesSub': 'Cihaz başına eşik {value}',
-  'health.noDevices': 'Karşılaştırmaya yetecek kullanıcısı olan cihaz yok.',
-  'health.issues': 'Öne çıkan sorunlar',
-  'health.issuesSub': 'En çok rapor önce',
-  'health.noIssues': 'Bildirilen sorun yok',
-  'health.crashShort': 'Çökme',
-  'health.appleMetrics': 'Performans ölçümleri',
-  'health.appleMetricsSub': 'Her ölçümün son değeri',
-  'health.noMetrics': 'Henüz ölçüm yok',
-  'health.signatures': 'Tanılama imzaları',
-  'health.signaturesSub': 'En ağır önce, son derlemeler',
-  'health.noSignatures': 'Tanılama imzası yok',
-  'health.betaCrashes': 'TestFlight çökmeleri',
-  'health.noBetaCrashes': 'Bu aralıkta TestFlight çökme raporu yok.',
-  'health.build': 'derleme {build}',
-  'health.noPlay': 'Bu uygulama Google Play\'de değil.',
-  'health.noApple': 'Bu uygulama App Store\'da değil.',
-  'health.unreadable': '{store} okunamadı, bilinmiyor olarak gösteriliyor: {error}',
-
-  'reviews.read': 'Yorumları oku',
-  'reviews.emptyTitle': 'Yorumlar henüz okunmadı',
-  'reviews.emptyText': 'App Store\'da son 30 gün, Google Play\'de son 7 gün (API\'si fazlasını tutmuyor), yerel yanıt taslaklarınızla birlikte. Salt okunur.',
-  'reviews.ratings': 'Puanlar',
-  'reviews.count': '{count} yorum',
-  'reviews.count_one': '1 yorum',
-  'reviews.unansweredN': '{count} yanıtsız',
-  'reviews.unansweredN_one': '1 yanıtsız',
-  'reviews.filter': 'Süzgeç',
-  'reviews.store': 'Mağaza',
-  'reviews.all': 'Tümü',
-  'reviews.onlyUnanswered': 'Yalnızca yanıtsız olanlar',
-  'reviews.search': 'Yorumlarda ara',
-  'reviews.inbox': 'Gelen kutusu',
-  'reviews.shown': '{count} gösteriliyor',
-  'reviews.noMatch': 'Süzgece uyan yorum yok',
-  'reviews.pick': 'Bir yorum seçin',
-  'reviews.answered': 'Yanıtlandı',
-  'reviews.drafted': 'Taslak',
-  'reviews.approved': 'Onaylı',
-  'reviews.notApproved': 'Onaylanmadı',
-  'reviews.noTitle': 'Başlık yok',
-  'reviews.noText': 'Metin yok',
-  'reviews.version': 'sürüm {v}',
-  'reviews.currentReply': 'Mağazadaki yanıt',
-  'reviews.draft': 'Yanıt taslağınız',
-  'reviews.noDraft': 'Bu yorum için taslak yok. "Taslak oluştur" her yanıtsız yorum için .storebound/replies içine bir dosya yazar.',
-  'reviews.emptyDraft': '{file} taslağında henüz yanıt yok: "## Reply" altına yazın.',
-  'reviews.chars': '{limit} karakterden {n}',
-  'reviews.approve': 'Onayla',
-  'reviews.unapprove': 'Onayı kaldır',
-  'reviews.approveHint': 'Taslağı onaylı olarak işaretler (yerel dosya, bir pencerede onaylanır). Hiçbir şey gönderilmez.',
-  'reviews.fixFirst': 'Önce hataları düzeltin',
-  'reviews.sentOn': '{date} gönderildi',
-  'reviews.sendNote': 'Yanıtlar herkese açıktır, bu yüzden terminalden gönderilir:',
-  'reviews.makeDrafts': 'Taslak oluştur',
-  'reviews.makeDraftsHint': 'Her yanıtsız yorum için bir yerel taslak (önce deneme, sonra onay)',
-  'reviews.draftsMade': 'Yanıt taslakları yazıldı',
-  'reviews.approvedToast': 'Taslak onaylandı',
-  'reviews.unapproved': 'Onay kaldırıldı',
-  'reviews.starsAria': '5 üzerinden {count} yıldız',
-  'reviews.starsAria_one': '5 üzerinden 1 yıldız',
-
-  'tf.read': 'TestFlight\'ı oku',
-  'tf.emptyTitle': 'TestFlight henüz okunmadı',
-  'tf.emptyText': 'Beta grupları, test kullanıcıları ve son derlemeler, işlenme ve beta inceleme durumlarıyla. Salt okunur.',
-  'tf.noIos': 'Bu uygulama iOS\'ta değil',
-  'tf.noIosText': 'TestFlight, App Store kaydı olan uygulamalar içindir. Kullanmak için ayar dosyasına apple bölümünü ekleyin.',
-  'tf.internal': 'Dahili',
-  'tf.external': 'Harici',
-  'tf.testers': 'test kullanıcısı',
-  'tf.builds': 'derleme',
-  'tf.all': 'Tümü',
-  'tf.publicOn': 'Herkese açık bağlantı açık',
-  'tf.publicOff': 'Yalnızca davetle',
-  'tf.noGroups': 'Beta grubu yok',
-  'tf.buildsTitle': 'Son derlemeler',
-  'tf.buildsSub': 'En yeni önce',
-  'tf.processing': 'İşlenme',
-  'tf.internalTesting': 'Dahili test',
-  'tf.externalTesting': 'Harici test',
-  'tf.uploaded': 'Yüklendi',
-  'tf.noBuilds': 'Henüz derleme yüklenmedi',
-  'tf.missingGroups': 'Ayar dosyasında var ama App Store Connect\'te yok: {groups}',
-
-  'checks.offline': 'Ayar kontrolü',
-  'checks.offlineSub': 'Çevrimdışı: ayar, metin dosyaları, metinler, beyanlar, ürünler',
-  'checks.again': 'Yeniden kontrol et',
-  'checks.clean': 'Ayar sorunsuz',
-  'checks.cleanText': 'Uygulama klasöründe sorun veya uyarı yok.',
-  'checks.problem': 'Sorun',
-  'checks.warning': 'Uyarı',
-  'checks.validate': 'Mağaza hazırlığı',
-  'checks.validateSub': 'İki mağazadan salt okunur rapor, engeller sırayla',
-  'checks.run': 'Raporu çalıştır',
-  'checks.validateEmpty': 'Hazırlık henüz kontrol edilmedi',
-  'checks.validateEmptyText': 'Göndermeden önce App Store ve Google Play\'de hâlâ eksik olanlar, düzeltme sırasıyla.',
-  'checks.ready': 'Engel yok',
-  'checks.readyText': 'İki mağazada da gönderim için gerekenler tamam.',
-
-  'folders.lead': 'Her uygulama için storebound.config.ts dosyası olan bir klasör (iOS ve Android tek ayarda). Her uygulamanın kullandığı mağaza hesaplarını seçin; anahtarlar anahtar zincirinde kalır.',
-  'folders.list': 'Uygulama klasörleri',
-  'folders.listSub': '{count} klasör',
-  'folders.listSub_one': '1 klasör',
-  'folders.emptyTitle': 'Henüz uygulama klasörü yok',
-  'folders.emptyText': 'storebound.config.ts dosyası olan bir klasör ekleyin ya da aşağıdan yenisini başlatın.',
-  'folders.added': '{name} eklendi',
-  'folders.started': '{name} başlatıldı',
-  'folders.startedDetail': 'Şablonlar yazıldı. Sırada storebound.config.ts ve mağaza dosyalarını düzenlemek var.',
-  'folders.playFor': '{name} için Google Play hesabı',
-  'folders.appleFor': '{name} için App Store Connect hesabı',
-  'folders.noPlay': 'Google Play hesabı yok',
-  'folders.noApple': 'App Store hesabı yok',
-  'folders.check': 'Kontrol et',
-  'folders.gallery': 'Galeri',
-  'folders.galleryHint': 'Yerel ekran görüntüsü inceleme sayfasını yazar (önce deneme, sonra onay)',
-  'folders.remove': '{name} listeden kaldır (klasör yerinde kalır)',
-  'folders.checkTitle': 'Ayar kontrolü',
-  'folders.galleryTitle': 'Ekran görüntüsü inceleme sayfası',
-  'folders.newTitle': 'Yeni uygulama klasörü başlat',
-  'folders.newSub': 'storebound init: ayar, mağaza metni, ekran görüntüsü metni, beyan ve gizlilik politikası şablonları',
-  'folders.profile': 'Profil',
-  'folders.profileHint.app': 'Araç veya verimlilik uygulaması: isteğe bağlı hesap ve analiz, reklam yok.',
-  'folders.profileHint.game': 'Reklamlı ve uygulama içi satın almalı ücretsiz oyun.',
-  'folders.profileHint.subscription-app': 'Hesaplı ve otomatik yenilenen abonelikli uygulama.',
-  'folders.chooseAndStart': 'Klasör seç ve başlat',
-
-  'run.failed': 'Başarısız',
-  'run.running': 'Çalışıyor',
-  'run.applied': 'Onayınızdan sonra uygulandı',
-  'run.cancelled': 'Pencerede iptal edildi: hiçbir şey yazılmadı',
-  'run.dryFailed': 'Deneme çalıştırması başarısız: hiçbir şey yazılmadı',
-  'run.done': 'Bitti',
-
-  'accounts.lead': 'Mağaza API anahtarları sistemin anahtar zincirinde durur (macOS\'ta Anahtar Zinciri, Windows\'ta Kimlik Bilgisi Yöneticisi, Linux\'ta Secret Service). Bir daha gösterilmez, uygulama klasörlerinize yazılmaz ve storebound\'a yalnızca bir çağrı için bellekte verilir.',
-  'accounts.list': 'Mağaza hesapları',
-  'accounts.listSub': 'Yalnızca etiketler: anahtarlar anahtar zincirinde',
-  'accounts.emptyTitle': 'Henüz mağaza hesabı yok',
-  'accounts.emptyText': 'Aşağıdan bir Google Play hizmet hesabı veya App Store Connect API anahtarı ekleyin. Mağaza okumaları bunlara ihtiyaç duyar; uygulama klasörleri onlarsız da çalışır.',
-  'accounts.unused': 'Kullanılmıyor',
-  'accounts.remove': 'Kaldır',
-  'accounts.removeAria': '{label} hesabını kaldır ve anahtarını anahtar zincirinden sil',
-  'accounts.saved': '"{label}" kaydedildi',
-  'accounts.savedDetail': 'Anahtar sistemin anahtar zincirinde.',
-  'accounts.playSub': 'Hizmet hesabı JSON anahtarı',
-  'accounts.appleSub': 'Kullanıcılar ve Erişim, Entegrasyonlar altındaki ekip API anahtarı (.p8)',
-  'accounts.label': 'Ad',
-  'accounts.playPlaceholder': 'Stüdyo Play hesabı',
-  'accounts.applePlaceholder': 'Stüdyo App Store anahtarı',
-  'accounts.playHow': 'Play Console\'da uygulamalarınıza erişimi olan bir hizmet hesabı (Kullanıcılar ve izinler).',
-  'accounts.keyId': 'Anahtar kimliği',
-  'accounts.issuerId': 'Veren kimliği',
-  'accounts.choosePlay': 'JSON anahtarını seç',
-  'accounts.chooseApple': '.p8 anahtarını seç',
-  'accounts.safety': 'Anahtarlar sistemin dosya penceresinde seçilir ve doğrudan anahtar zincirine gider. Uygulama penceresi onları hiç görmez.',
-
-  'deps.lead': 'Ekran görüntüleri, uygulama önizlemeleri, simgeler ve simülatör ya da emülatör kayıtları için yerel araçlar. Mağaza işleri (metinler, ürünler, sürümler, yorumlar) hiçbirine ihtiyaç duymaz.',
-  'deps.checkAgain': 'Yeniden kontrol et',
-  'deps.tools': 'Bu bilgisayardaki araçlar',
-  'deps.found': '{total} araçtan {found} tanesi var',
-  'deps.missing': 'Eksik',
-  'deps.appCopy': 'Uygulamanın kopyası',
-  'deps.installed': 'Kurulu',
-  'deps.download': 'İndir',
-  'deps.remove': 'Kaldır',
-  'deps.getIt': 'Edin',
-  'deps.unavailable': 'Bu platform için yok',
-  'deps.downloading': '{tool} indiriliyor',
-  'deps.installedToast': '{tool} kuruldu',
-  'deps.failed': 'İndirme başarısız',
-  'deps.cancelledDetail': 'Yarım kalan indirme silindi.',
-  'deps.removed': 'Uygulama veri klasöründen kaldırıldı',
-  'deps.inAppData': 'Uygulama veri klasöründe ({folder})',
-  'deps.notDownloaded': 'İndirilmedi',
-  'deps.source': 'Kaynak',
-  'deps.license': 'Lisans',
-  'deps.verify': 'Doğrulama',
-  'deps.verifyFfmpeg': 'Bu uygulama sürümüne sabitlenmiş arşivin SHA-256 özeti',
-  'deps.verifyChrome': 'Google\'ın kod imzası (macOS, Windows) veya sürüm satırı (Linux)',
-  'deps.licenseLink': 'Lisans ve kaynak',
-  'deps.terminal': 'Terminalden',
-  'deps.terminalSub': 'Aynı kontrol ve alışılmış kurulum komutları',
-  'deps.copy': '"{cmd}" komutunu kopyala',
-  'deps.copied': 'Kopyalandı',
-
-  'dl.resolve': 'İndirme aranıyor',
-  'dl.download': 'İndiriliyor',
-  'dl.verify': 'Doğrulanıyor',
-  'dl.unpack': 'Açılıyor',
-  'dl.install': 'Kuruluyor',
-  'dl.done': 'Bitti',
-  'dl.error': 'Başarısız',
-  'dl.cancelled': 'İptal edildi',
-
-  'settings.lead': 'Görünüm, dil, kısayollar ve bu uygulamanın üzerinde çalıştığı şeyler.',
-  'settings.appearance': 'Görünüm',
-  'settings.theme': 'Tema',
-  'settings.system': 'Sistem',
-  'settings.light': 'Açık',
-  'settings.dark': 'Koyu',
-  'settings.motion': 'Hareket',
-  'settings.followSystem': 'Sistemi izle',
-  'settings.reduce': 'Azalt',
-  'settings.language': 'Dil',
-  'settings.shortcuts': 'Klavye kısayolları',
-  'settings.scPalette': 'Komut paleti',
-  'settings.scWorkspace': 'Uygulama klasörleri, Hesaplar, Bağımlılıklar, Ayarlar',
-  'settings.scTabs': 'Önceki / sonraki uygulama sekmesi',
-  'settings.scTabArrows': 'Sekmeler arasında gezin (sekme listesi odaktayken)',
-  'settings.scClose': 'Pencereyi kapat',
-  'settings.data': 'Kayıtlı okumalar',
-  'settings.dataText': 'Son mağaza okumaları uygulama veri klasöründe saklanır; böylece ekranlar çevrimdışıyken de açılır, her zaman okuma zamanıyla işaretli. Orada anahtar tutulmaz.',
-  'settings.clearCache': 'Kayıtlı okumaları temizle',
-  'settings.cacheCleared': 'Kayıtlı okumalar temizlendi',
-  'settings.about': 'Hakkında',
-  'settings.app': 'Uygulama',
-  'settings.debug': 'hata ayıklama sürümü',
-  'settings.methods': '{count} yöntem',
-  'settings.tools': 'Yerel araçlar',
-  'settings.telemetry': 'Telemetri',
-  'settings.telemetryNone': 'Yok. Uygulama mağaza API\'leriyle yalnızca storebound üzerinden, sizin anahtarlarınızla konuşur.',
-
-  'wz.s1': 'Hoş geldiniz',
-  'wz.s2': 'Uygulamalarınız',
-  'wz.s3': 'Mağaza anahtarları',
-  'wz.s4': 'Yerel araçlar',
-  'wz.s5': 'İlk okuma',
-  'wz.footer': 'Bu rehberi Ayarlar\'dan veya komut paletinden yeniden açabilirsiniz.',
-  'wz.footerSafe': 'Buradan hiçbir şey gönderilmez veya yayınlanmaz.',
-  'wz.welcomeTitle': 'Her uygulama, iki mağaza, tek pencere',
-  'wz.welcomeLead': 'storebound desktop her uygulamanızın App Store ve Google Play\'deki durumunu gösterir ve storebound CLI\'yi sizin için çalıştırır. Beş kısa adımda hazır.',
-  'wz.p1t': 'Tek portföy',
-  'wz.p1s': 'Her uygulamanın sürümleri, dağıtımları, katalog eşleşmesi, sağlığı ve yorumları.',
-  'wz.p2t': 'Tasarımı gereği güvenli',
-  'wz.p2s': 'Okumalar salt okunurdur. Her değişiklik önce bir deneme çalıştırması ve sistem onayı gösterir.',
-  'wz.p3t': 'Anahtarlarınız sizde kalır',
-  'wz.p3s': 'Mağaza anahtarları sistemin anahtar zincirinde durur. Hesap yok, telemetri yok.',
-  'wz.appsTitle': 'Uygulamalarınızı ekleyin',
-  'wz.appsLead': 'Her uygulama, onu iki mağazada anlatan bir storebound.config.ts dosyası olan bir klasördür.',
-  'wz.addTitle': 'Var olan klasörü ekle',
-  'wz.addText': 'Klasörde zaten bir storebound.config.ts var (storebound init veya CLI ile).',
-  'wz.initTitle': 'Yeni uygulama klasörü başlat',
-  'wz.initText': 'Seçtiğiniz klasöre bir profilin şablonlarını yazar. Var olan dosyalar korunur.',
-  'wz.added': 'Eklendi',
-  'wz.ready': 'Hazır',
-  'wz.keysTitle': 'Mağaza anahtarlarınızı ekleyin',
-  'wz.keysLead': 'Mağaza okumaları her mağaza için bir API anahtarı ister. Bu adımı atlayıp daha sonra Hesaplar\'dan ekleyebilirsiniz.',
-  'wz.mapHint': 'Bu uygulamanın kullandığı hesaplar',
-  'wz.toolsTitle': 'Yerel araçları kontrol edin',
-  'wz.toolsLead': 'Ekran görüntüleri, önizlemeler ve simgeler ffmpeg ve Chrome kullanır. Uygulama kendi kopyalarını indirebilir; mağaza işleri hiçbirine ihtiyaç duymaz.',
-  'wz.toolsNote': 'Aynı kontrol terminalde:',
-  'wz.readTitle': 'Mağazaları okuyun',
-  'wz.readLead': 'App Store Connect ve Google Play üzerinde salt okunur bir tur portföyü doldurur: sürümler, inceleme durumu, dağıtımlar ve katalog eşleşmesi.',
-  'wz.readNow': 'Mağazaları şimdi oku',
-  'wz.readDone': '{count} uygulama {when} okundu',
-  'wz.needApp': 'Önce bir uygulama klasörü ekleyin (2. adım).',
-  'wz.skip': 'Şimdilik geç',
-  'wz.back': 'Geri',
-  'wz.next': 'İleri',
-  'wz.finish': 'Bitir',
-};
diff --git a/apps/desktop/src/lib/format.ts b/apps/desktop/src/lib/format.ts
deleted file mode 100644
index f8f0f27..0000000
--- a/apps/desktop/src/lib/format.ts
+++ /dev/null
@@ -1,49 +0,0 @@
-// Locale-aware formatting for the UI (numbers, percentages, dates, "3 min ago"). Pure apart from Intl.
-import { lang, t } from '../i18n';
-
-const loc = (): string => (lang() === 'tr' ? 'tr-TR' : 'en-US');
-
-/** 0.0109 -> "1.09%" (Turkish: "%1,09"). */
-export function pct(x: number | null | undefined, digits = 2): string {
-  if (x === null || x === undefined || Number.isNaN(x)) return '–';
-  return new Intl.NumberFormat(loc(), { style: 'percent', minimumFractionDigits: digits, maximumFractionDigits: digits }).format(x);
-}
-
-/** Rollout share: 0.2 -> "20%", 0.05 -> "5%". */
-export function share(x: number): string {
-  return new Intl.NumberFormat(loc(), { style: 'percent', maximumFractionDigits: x < 0.1 ? 1 : 0 }).format(x);
-}
-
-export const num = (n: number, digits = 0): string => new Intl.NumberFormat(loc(), { maximumFractionDigits: digits, minimumFractionDigits: digits }).format(n);
-
-export function bytes(n: number | null | undefined): string {
-  if (!n) return '–';
-  const mb = n / 1e6;
-  return mb >= 1 ? `${num(mb, mb < 10 ? 1 : 0)} MB` : `${num(n / 1e3, 0)} KB`;
-}
-
-export function date(iso: string | null | undefined): string {
-  if (!iso) return '–';
-  const d = new Date(iso);
-  if (Number.isNaN(d.getTime())) return '–';
-  return d.toLocaleDateString(loc(), { day: 'numeric', month: 'short', year: d.getFullYear() === new Date().getFullYear() ? undefined : 'numeric' });
-}
-
-export function dateTime(iso: string | null | undefined): string {
-  if (!iso) return '–';
-  const d = new Date(iso);
-  return Number.isNaN(d.getTime()) ? '–' : d.toLocaleString(loc(), { day: 'numeric', month: 'short', hour: '2-digit', minute: '2-digit' });
-}
-
-/** "just now", "4 min ago", "3 h ago", "2 d ago" (and the Turkish forms). */
-export function ago(iso: string | null | undefined, now: number = Date.now()): string {
-  if (!iso) return t('time.never');
-  const s = Math.round((now - new Date(iso).getTime()) / 1000);
-  if (!Number.isFinite(s)) return t('time.never');
-  if (s < 45) return t('time.justNow');
-  const rtf = new Intl.RelativeTimeFormat(loc(), { numeric: 'auto', style: 'short' });
-  if (s < 3600) return rtf.format(-Math.round(s / 60), 'minute');
-  if (s < 86_400) return rtf.format(-Math.round(s / 3600), 'hour');
-  if (s < 86_400 * 30) return rtf.format(-Math.round(s / 86_400), 'day');
-  return date(iso);
-}
diff --git a/apps/desktop/src/lib/model.ts b/apps/desktop/src/lib/model.ts
deleted file mode 100644
index 52e8b40..0000000
--- a/apps/desktop/src/lib/model.ts
+++ /dev/null
@@ -1,239 +0,0 @@
-// Pure view models for the screens: release timeline stages, health series against the store thresholds, review
-// inbox stats, catalog parity matrix, the portfolio's "needs attention" list, and the command palette matcher.
-// "Unknown, never false": every derivation keeps "not read" apart from "none" / "ok".
-import type { AppStatus, ProjectSummary, ReleaseTrain, StoreRelease } from '../api';
-import { t } from '../i18n';
-
-export type Tone = 'ok' | 'warn' | 'bad' | 'info' | 'neutral' | 'accent';
-
-// ---- CLI JSON shapes the screens read (the commands' --json output) ----
-
-export interface MetricRow { date: string; dims: Record<string, string>; values: Record<string, number> }
-export interface PlayHealth {
-  window: { start: string; end: string; days: number };
-  crash: MetricRow[];
-  anr: MetricRow[];
-  devices?: { model: string; crash?: number; anr?: number; users?: number }[];
-  issues: { type: string; cause: string; location: string; reports: number; users: number; lastVersion?: string }[];
-}
-export interface AppleHealth {
-  metrics: { category: string; metric: string; unit: string; version: string; value: number; goal?: string }[];
-  signatures: { build: string; type: string; signature: string; weight: number }[];
-  betaCrashes: { build: string; count: number }[];
-}
-export interface HealthSnapshot { date: string; play?: PlayHealth | { error: string }; apple?: AppleHealth | { error: string } }
-export interface Review { store: 'apple' | 'play'; id: string; rating: number; title?: string; body: string; where?: string; date: string; appVersion?: string; reply?: { text: string; date?: string; state?: string } }
-export interface TfGroup { id: string; name: string; internal: boolean; testers: number; builds: number | 'all'; publicLink: boolean }
-export interface TfBuild { version: string | null; build: string | null; processing: string | null; internal: string | null; external: string | null; uploaded: string | null }
-export interface TestFlightStatus { groups: TfGroup[]; builds: TfBuild[]; missingGroups: string[] }
-export interface CatalogRow { id: string; store: 'apple' | 'play'; level: 'error' | 'warn' | 'ok'; code: string; msg: string }
-export interface ParityRow { id: string; region: string; currency: string; apple: number; play: number; diffPct: number }
-export interface CatalogDiff { errors: number; rows: CatalogRow[]; parity: ParityRow[] }
-export interface Finding { store: 'apple' | 'play'; level: 'blocker' | 'warn' | 'ok'; code: string; msg: string; fix?: string }
-export interface ValidateResult { blockers: number; findings: Finding[] }
-
-export const isError = (x: unknown): x is { error: string } => !!x && typeof x === 'object' && typeof (x as { error?: unknown }).error === 'string';
-
-// ---- Release timeline ----
-
-/** Stages of one version on one store, left to right. */
-export const STAGES = ['build', 'testing', 'review', 'live', 'rollout'] as const;
-export type Stage = (typeof STAGES)[number];
-
-export interface Lane {
-  store: 'ios' | 'android';
-  release: StoreRelease | null;
-  /** Index of the stage it is at (-1: not on this store). */
-  at: number;
-  tone: Tone;
-  /** Rollout share 0-1 when live or rolling out (1 = everyone). */
-  share: number | null;
-  /** The store's state word, for a tooltip. */
-  state: string;
-}
-
-/** Where a store release is on the track. Rollout counts as the last stage; a full release fills it. */
-export function laneOf(store: 'ios' | 'android', r: StoreRelease | null, testflightReached = false): Lane {
-  if (!r) return { store, release: null, at: -1, tone: 'neutral', share: null, state: '' };
-  const base = { store, release: r, state: r.state };
-  switch (r.phase) {
-    case 'draft': return { ...base, at: testflightReached ? 1 : 0, tone: testflightReached ? 'info' : 'neutral', share: null };
-    case 'testing': return { ...base, at: 1, tone: 'info', share: null };
-    case 'review': return { ...base, at: 2, tone: 'warn', share: null };
-    case 'approved': return { ...base, at: 2, tone: 'ok', share: null };
-    case 'rejected': return { ...base, at: 2, tone: 'bad', share: null };
-    case 'live': return { ...base, at: 4, tone: 'ok', share: 1 };
-    case 'rollout': return { ...base, at: 4, tone: 'accent', share: r.fraction ?? null };
-    case 'halted': return { ...base, at: 4, tone: 'bad', share: r.fraction ?? null };
-    default: return { ...base, at: 0, tone: 'neutral', share: null };
-  }
-}
-
-/** Both lanes of a train; iOS counts TestFlight as reached when a build of that version is in beta testing. */
-export function trainLanes(t: ReleaseTrain, tf?: TestFlightStatus | null): Lane[] {
-  const inBeta = !!tf?.builds.some(b => b.version === t.version && /IN_BETA_TESTING|BETA_APPROVED|READY_FOR_BETA_TESTING/.test(`${b.internal ?? ''} ${b.external ?? ''}`));
-  return [laneOf('ios', t.ios, inBeta), laneOf('android', t.android)];
-}
-
-/** Every distinct version of the store releases, newest first, with both stores' release (best phase per store). */
-export function versionHistory(all: StoreRelease[]): ReleaseTrain[] {
-  const rank: Record<string, number> = { live: 0, rollout: 1, halted: 2, approved: 3, review: 4, rejected: 5, testing: 6, draft: 7, other: 8 };
-  const versions = [...new Set(all.map(r => r.version).filter((v): v is string => !!v))].sort(cmpVersion).reverse();
-  const best = (store: 'ios' | 'android', v: string) => all.filter(r => r.store === store && r.version === v).sort((a, b) => (rank[a.phase] ?? 9) - (rank[b.phase] ?? 9))[0] ?? null;
-  return versions.map(v => ({ version: v, ios: best('ios', v), android: best('android', v) }));
-}
-
-/** On one store: the highest version reaching users (live or rolling out) and the highest version above it. */
-export function storeNow(all: StoreRelease[], store: 'ios' | 'android'): { now: StoreRelease | null; next: StoreRelease | null } {
-  const rs = all.filter((r): r is StoreRelease & { version: string } => r.store === store && !!r.version);
-  const desc = (a: { version: string }, b: { version: string }) => cmpVersion(b.version, a.version);
-  const now = rs.filter(r => r.phase === 'live' || r.phase === 'rollout' || r.phase === 'halted').sort(desc)[0] ?? null;
-  const next = rs.filter(r => !now || cmpVersion(r.version, now.version) > 0).sort(desc)[0] ?? null;
-  return { now, next };
-}
-
-export function cmpVersion(a: string, b: string): number {
-  const pa = a.split('.').map(x => parseInt(x, 10) || 0), pb = b.split('.').map(x => parseInt(x, 10) || 0);
-  for (let i = 0; i < Math.max(pa.length, pb.length); i++) { const d = (pa[i] ?? 0) - (pb[i] ?? 0); if (d) return d; }
-  return 0;
-}
-
-// ---- Health ----
-
-export const PLAY_THRESHOLDS = { crash: 0.0109, anr: 0.0047, perDevice: 0.08 } as const;
-
-export interface Series { dates: string[]; values: number[]; current: number | null; threshold: number; tone: Tone }
-
-/** Daily user-perceived rates (fractions) and the current 28-day value against the bad behavior threshold. */
-export function healthSeries(rows: MetricRow[], metric: 'userPerceivedCrashRate' | 'userPerceivedAnrRate', threshold: number): Series {
-  const pts = rows.filter(r => typeof r.values[metric] === 'number' && !r.dims.deviceModel).sort((a, b) => a.date.localeCompare(b.date));
-  const w28 = metric === 'userPerceivedCrashRate' ? 'userPerceivedCrashRate28dUserWeighted' : 'userPerceivedAnrRate28dUserWeighted';
-  let current: number | null = null;
-  for (let i = pts.length - 1; i >= 0 && current === null; i--) { const v = pts[i]!.values[w28]; if (typeof v === 'number') current = v; }
-  if (current === null && pts.length) current = pts.at(-1)!.values[metric]!;
-  return { dates: pts.map(p => p.date), values: pts.map(p => p.values[metric]!), current, threshold, tone: toneFor(current, threshold) };
-}
-
-/** Over the threshold: bad; from 80 % of it: warn; unknown: neutral. */
-export function toneFor(v: number | null, threshold: number): Tone {
-  if (v === null) return 'neutral';
-  return v >= threshold ? 'bad' : v >= threshold * 0.8 ? 'warn' : 'ok';
-}
-
-// ---- Reviews ----
-
-export interface StarStats { count: number; average: number | null; byStar: [number, number, number, number, number]; unanswered: number }
-
-export function starStats(rs: Review[]): StarStats {
-  const byStar: [number, number, number, number, number] = [0, 0, 0, 0, 0];
-  let sum = 0, n = 0;
-  for (const r of rs) if (r.rating >= 1 && r.rating <= 5) { byStar[r.rating - 1]!++; sum += r.rating; n++; }
-  return { count: rs.length, average: n ? sum / n : null, byStar, unanswered: rs.filter(r => !r.reply).length };
-}
-
-export interface ReviewFilter { store: 'all' | 'apple' | 'play'; stars: number[]; unanswered: boolean; query: string }
-
-export function filterReviews(rs: Review[], f: ReviewFilter): Review[] {
-  const q = f.query.trim().toLowerCase();
-  return rs.filter(r => (f.store === 'all' || r.store === f.store) && (!f.stars.length || f.stars.includes(r.rating)) && (!f.unanswered || !r.reply)
-    && (!q || `${r.title ?? ''} ${r.body}`.toLowerCase().includes(q))).sort((a, b) => b.date.localeCompare(a.date));
-}
-
-/** Draft file name of a review (cli/lib/reviews.ts draftName). */
-export const draftName = (r: Pick<Review, 'store' | 'id'>): string => `${r.store}-${r.id.replace(/[^A-Za-z0-9._-]/g, '_').slice(0, 120)}.md`;
-
-// ---- Catalog parity matrix ----
-
-export type CellState = 'ok' | 'warn' | 'error' | 'na' | 'unknown';
-export interface MatrixRow { id: string; kind: 'product' | 'subscription' | 'extra'; config: boolean; ios: { state: CellState; notes: string[] }; android: { state: CellState; notes: string[] }; maxDiff: number | null }
-
-export function parityMatrix(s: ProjectSummary | null, diff: CatalogDiff | null): MatrixRow[] {
-  const ids = new Map<string, MatrixRow['kind']>();
-  for (const id of s?.productIds ?? []) ids.set(id, 'product');
-  for (const id of s?.subscriptionIds ?? []) ids.set(id, 'subscription');
-  for (const r of diff?.rows ?? []) if (!ids.has(r.id)) ids.set(r.id, 'extra');
-  const cell = (id: string, store: 'apple' | 'play', sold: boolean): MatrixRow['ios'] => {
-    const rs = (diff?.rows ?? []).filter(r => r.id === id && r.store === store);
-    if (!diff) return { state: sold ? 'unknown' : 'na', notes: [] };
-    if (!rs.length) return { state: sold ? 'unknown' : 'na', notes: [] };
-    const state: CellState = rs.some(r => r.level === 'error') ? 'error' : rs.some(r => r.level === 'warn') ? 'warn' : 'ok';
-    return { state, notes: rs.filter(r => r.level !== 'ok').map(r => r.msg) };
-  };
-  return [...ids].map(([id, kind]) => {
-    const diffs = (diff?.parity ?? []).filter(p => p.id === id).map(p => p.diffPct);
-    return {
-      id, kind, config: kind !== 'extra',
-      ios: cell(id, 'apple', kind === 'extra' ? (diff?.rows ?? []).some(r => r.id === id && r.store === 'apple') : !!s?.catalog.ios.includes(id)),
-      android: cell(id, 'play', kind === 'extra' ? (diff?.rows ?? []).some(r => r.id === id && r.store === 'play') : !!s?.catalog.android.includes(id)),
-      maxDiff: diffs.length ? Math.max(...diffs) : null,
-    };
-  });
-}
-
-// ---- Portfolio: needs attention ----
-
-export interface Attention { app: string; projectId: string; tone: Tone; text: string; hint?: string; tab?: 'releases' | 'catalog' | 'listings' | 'health' | 'reviews' | 'testflight' | 'checks' }
-
-export function attention(projectId: string, name: string, e: AppStatus | undefined, live: AppStatus | undefined, health?: HealthSnapshot | null): Attention[] {
-  const out: Attention[] = [];
-  if (!e) return out;
-  const base = { app: name, projectId };
-  for (const x of e.errors) out.push({ ...base, tone: 'bad', text: x, tab: 'checks' });
-  for (const p of e.check?.problems ?? []) out.push({ ...base, tone: 'bad', text: p, tab: 'checks' });
-  for (const w of (e.check?.warnings ?? []).slice(0, 3)) out.push({ ...base, tone: 'warn', text: w, tab: 'checks' });
-  const l = live ?? (e.release.source === 'live' ? e : undefined);
-  if (l) {
-    if (l.storeErrors.ios) out.push({ ...base, tone: 'warn', text: t('att.storeError', { store: 'App Store', error: l.storeErrors.ios }), tab: 'releases' });
-    if (l.storeErrors.android) out.push({ ...base, tone: 'warn', text: t('att.storeError', { store: 'Google Play', error: l.storeErrors.android }), tab: 'releases' });
-    for (const r of l.release.all ?? []) {
-      if (r.phase === 'rejected') out.push({ ...base, tone: 'bad', text: t('att.rejected', { store: r.store === 'ios' ? 'App Store' : 'Google Play', version: r.version ?? '' }), tab: 'releases' });
-      if (r.phase === 'halted') out.push({ ...base, tone: 'bad', text: t('att.halted', { store: r.store === 'ios' ? 'App Store' : 'Google Play', version: r.version ?? '' }), tab: 'releases' });
-    }
-    const c = l.catalog;
-    if (c && c.checked === 'live' && !c.ok) {
-      const n = c.missingIos.length + c.missingAndroid.length + c.onlyIos.length + c.onlyAndroid.length;
-      out.push({ ...base, tone: 'warn', text: t('att.catalog', { count: n }), tab: 'catalog' });
-    }
-  }
-  if (health && health.play && !isError(health.play)) {
-    const c = healthSeries(health.play.crash, 'userPerceivedCrashRate', PLAY_THRESHOLDS.crash);
-    const a = healthSeries(health.play.anr, 'userPerceivedAnrRate', PLAY_THRESHOLDS.anr);
-    if (c.tone === 'bad' || c.tone === 'warn') out.push({ ...base, tone: c.tone, text: t('att.crash'), tab: 'health' });
-    if (a.tone === 'bad' || a.tone === 'warn') out.push({ ...base, tone: a.tone, text: t('att.anr'), tab: 'health' });
-  }
-  return out;
-}
-
-// ---- Command palette ----
-
-/** Subsequence match score (higher is better), or -1. Word starts and consecutive letters score more. */
-export function fuzzy(query: string, text: string): number {
-  const q = query.trim().toLowerCase();
-  if (!q) return 0;
-  const s = text.toLowerCase();
-  let score = 0, at = -1, run = 0;
-  for (const ch of q) {
-    const i = s.indexOf(ch, at + 1);
-    if (i < 0) return -1;
-    run = i === at + 1 ? run + 1 : 0;
-    score += 1 + run * 2 + (i === 0 || /[\s/·.-]/.test(s[i - 1] ?? '') ? 3 : 0);
-    at = i;
-  }
-  return score - s.length * 0.01;
-}
-
-// ---- Identity ----
-
-/** Two letters for a monogram ("Prism Puddle" -> "PP", "tidy" -> "TI"). */
-export function monogram(name: string): string {
-  const words = name.trim().split(/[\s_-]+/).filter(Boolean);
-  const m = words.length >= 2 ? words[0]![0]! + words[1]![0]! : (words[0] ?? '?').slice(0, 2);
-  return m.toUpperCase();
-}
-
-/** Stable hue (0-359) from a name, for the monogram gradient. */
-export function hueOf(name: string): number {
-  let h = 0;
-  for (const c of name) h = (h * 31 + c.charCodeAt(0)) >>> 0;
-  return h % 360;
-}
diff --git a/apps/desktop/src/main.tsx b/apps/desktop/src/main.tsx
deleted file mode 100644
index 556428a..0000000
--- a/apps/desktop/src/main.tsx
+++ /dev/null
@@ -1,36 +0,0 @@
-import { StrictMode, useCallback, useEffect, useState } from 'react';
-import { createRoot } from 'react-dom/client';
-import { App } from './App';
-import { devSwitch } from './dev/switches';
-import { setLang } from './i18n';
-import { applyPrefs, loadPrefs, type Prefs, resolveLang, savePrefs } from './prefs';
-import { PrefsContext } from './prefs-ctx';
-import { DataProvider } from './store';
-import './styles.css';
-
-const systemLang = (): string => (typeof navigator !== 'undefined' ? navigator.language : 'en');
-
-
-function Root() {
-  const [prefs, setPrefs] = useState<Prefs>(() => {
-    const p = loadPrefs();
-    // Dev builds only: theme=light|dark and lang=en|tr force them (screenshots without clicking).
-    const th = devSwitch('theme'), lg = devSwitch('lang');
-    if (th === 'light' || th === 'dark') p.theme = th;
-    if (lg === 'en' || lg === 'tr') p.lang = lg;
-    if (devSwitch('start')) p.onboarded = true;
-    return p;
-  });
-  const lang = resolveLang(prefs.lang, systemLang());
-  setLang(lang);
-  useEffect(() => { applyPrefs(prefs, document.documentElement, systemLang()); }, [prefs]);
-  const update = useCallback((p: Prefs) => { setPrefs(p); savePrefs(p); }, []);
-  const onTheme = useCallback(() => {
-    const dark = prefs.theme === 'dark' || (prefs.theme === 'system' && matchMedia('(prefers-color-scheme: dark)').matches);
-    update({ ...prefs, theme: dark ? 'light' : 'dark' });
-  }, [prefs, update]);
-  // a language change re-renders the whole tree in the new language
-  return <PrefsContext.Provider value={{ prefs, update }}><DataProvider><App key={lang} onTheme={onTheme} /></DataProvider></PrefsContext.Provider>;
-}
-
-createRoot(document.getElementById('root')!).render(<StrictMode><Root /></StrictMode>);
diff --git a/apps/desktop/src/nav.ts b/apps/desktop/src/nav.ts
deleted file mode 100644
index ede44b2..0000000
--- a/apps/desktop/src/nav.ts
+++ /dev/null
@@ -1,33 +0,0 @@
-// Routes: Portfolio -> one App (tabs) plus the workspace screens. Pure, so tests can check the deep links.
-import { createContext, useContext } from 'react';
-import type { Key } from './i18n';
-import type { IconName } from './ui/icons';
-
-export const APP_TABS = ['releases', 'catalog', 'listings', 'health', 'reviews', 'testflight', 'checks'] as const;
-export type AppTab = (typeof APP_TABS)[number];
-export const TAB_KEY: Record<AppTab, Key> = { releases: 'tab.releases', catalog: 'tab.catalog', listings: 'tab.listings', health: 'tab.health', reviews: 'tab.reviews', testflight: 'tab.testflight', checks: 'tab.checks' };
-export const TAB_ICON: Record<AppTab, IconName> = { releases: 'rocket', catalog: 'tag', listings: 'text', health: 'activity', reviews: 'message', testflight: 'plane', checks: 'shield' };
-export const WORKSPACE = ['apps', 'accounts', 'dependencies', 'settings'] as const;
-export type WorkspaceScreen = (typeof WORKSPACE)[number];
-
-export type Route = { screen: 'portfolio' } | { screen: 'app'; appId: string; tab: AppTab } | { screen: WorkspaceScreen };
-
-/** storebound://<screen> deep links and the dev-only start switch ("app:health" = first app, Health tab;
- *  "app:health:2" = second app). `apps` are the project ids in list order. */
-export function parseStart(v: string, apps: string[]): Route | null {
-  const [screen, tab, n] = v.split(':');
-  const app = apps[Math.max(0, (Number(n) || 1) - 1)];
-  if (screen === 'app' && app) return { screen: 'app', appId: app, tab: APP_TABS.includes(tab as AppTab) ? tab as AppTab : 'releases' };
-  if (screen === 'portfolio') return { screen: 'portfolio' };
-  return (WORKSPACE as readonly string[]).includes(screen ?? '') ? { screen: screen as WorkspaceScreen } : null;
-}
-
-export const sameRoute = (a: Route, b: Route): boolean => JSON.stringify(a) === JSON.stringify(b);
-
-export interface Nav { route: Route; go: (r: Route) => void; openPalette: () => void; openWelcome: () => void }
-export const NavCtx = createContext<Nav | null>(null);
-export const useNav = (): Nav => {
-  const n = useContext(NavCtx);
-  if (!n) throw new Error('useNav outside NavCtx');
-  return n;
-};
diff --git a/apps/desktop/src/paths.ts b/apps/desktop/src/paths.ts
deleted file mode 100644
index 809be78..0000000
--- a/apps/desktop/src/paths.ts
+++ /dev/null
@@ -1,13 +0,0 @@
-/** Home folder shown as "~", so screenshots and screen shares do not show the account name. */
-export function shortPath(p: string, home: string | null | undefined): string {
-  if (!home) return p;
-  const h = home.replace(/[\\/]+$/, '');
-  if (p === h) return '~';
-  return p.startsWith(h + '/') || p.startsWith(h + '\\') ? `~${p.slice(h.length)}` : p;
-}
-
-/** Every occurrence of the home folder in a log text as "~". */
-export function tildeText(text: string, home: string | null | undefined): string {
-  const h = home?.replace(/[\\/]+$/, '');
-  return h && h.length > 1 ? text.split(h).join('~') : text;
-}
diff --git a/apps/desktop/src/prefs-ctx.ts b/apps/desktop/src/prefs-ctx.ts
deleted file mode 100644
index 998e9e1..0000000
--- a/apps/desktop/src/prefs-ctx.ts
+++ /dev/null
@@ -1,10 +0,0 @@
-import { createContext, useContext } from 'react';
-import type { Prefs } from './prefs';
-
-export interface PrefsApi { prefs: Prefs; update: (p: Prefs) => void }
-export const PrefsContext = createContext<PrefsApi | null>(null);
-export const usePrefs = (): PrefsApi => {
-  const p = useContext(PrefsContext);
-  if (!p) throw new Error('usePrefs outside PrefsContext');
-  return p;
-};
diff --git a/apps/desktop/src/prefs.ts b/apps/desktop/src/prefs.ts
deleted file mode 100644
index 7c69eae..0000000
--- a/apps/desktop/src/prefs.ts
+++ /dev/null
@@ -1,42 +0,0 @@
-// Per-device UI preferences (theme, motion, language, onboarding seen). Only conveniences live in localStorage;
-// nothing about projects or accounts.
-export type Theme = 'system' | 'light' | 'dark';
-export type Motion = 'system' | 'reduce';
-export type Lang = 'system' | 'en' | 'tr';
-export interface Prefs { theme: Theme; motion: Motion; lang: Lang; onboarded: boolean }
-
-export const DEFAULT_PREFS: Prefs = { theme: 'system', motion: 'system', lang: 'system', onboarded: false };
-const KEY = 'storebound.prefs.v1';
-
-export function parsePrefs(raw: string | null): Prefs {
-  try {
-    const v = JSON.parse(raw ?? '{}') as Partial<Prefs>;
-    return {
-      theme: v.theme === 'light' || v.theme === 'dark' ? v.theme : 'system',
-      motion: v.motion === 'reduce' ? 'reduce' : 'system',
-      lang: v.lang === 'en' || v.lang === 'tr' ? v.lang : 'system',
-      onboarded: v.onboarded === true,
-    };
-  } catch { return { ...DEFAULT_PREFS }; }
-}
-
-export function loadPrefs(): Prefs {
-  try { return parsePrefs(localStorage.getItem(KEY)); } catch { return { ...DEFAULT_PREFS }; }
-}
-
-export function savePrefs(p: Prefs): void {
-  try { localStorage.setItem(KEY, JSON.stringify(p)); } catch { /* private mode: keep it for this run only */ }
-}
-
-/** Puts the preferences on <html>: data-theme (light / dark, absent = follow the system), data-motion and lang. */
-export function applyPrefs(p: Prefs, root: { dataset: DOMStringMap; lang?: string } = document.documentElement, systemLang = 'en'): void {
-  if (p.theme === 'system') delete root.dataset.theme; else root.dataset.theme = p.theme;
-  if (p.motion === 'reduce') root.dataset.motion = 'reduce'; else delete root.dataset.motion;
-  root.lang = resolveLang(p.lang, systemLang);
-}
-
-/** The language to show: the preference, else the system's when we have it (tr), else English. */
-export function resolveLang(l: Lang, systemLang: string): 'en' | 'tr' {
-  if (l !== 'system') return l;
-  return /^tr\b/i.test(systemLang) ? 'tr' : 'en';
-}
diff --git a/apps/desktop/src/screens/Accounts.tsx b/apps/desktop/src/screens/Accounts.tsx
deleted file mode 100644
index 307df75..0000000
--- a/apps/desktop/src/screens/Accounts.tsx
+++ /dev/null
@@ -1,88 +0,0 @@
-// Store accounts: the keys live in the system keychain; the app keeps a label only and hands a key to storebound in
-// memory for one call.
-import { useState } from 'react';
-import { type Account, api, errorText } from '../api';
-import { t } from '../i18n';
-import { date } from '../lib/format';
-import { useData } from '../store';
-import { Icon, StoreGlyph } from '../ui/icons';
-import { Card, Chip, Empty, Notice } from '../ui/kit';
-
-export function Accounts() {
-  const d = useData();
-  const [error, setError] = useState<string | null>(null);
-  const [busy, setBusy] = useState<string | null>(null);
-  const [playLabel, setPlayLabel] = useState('');
-  const [appleLabel, setAppleLabel] = useState('');
-  const [keyId, setKeyId] = useState('');
-  const [issuerId, setIssuerId] = useState('');
-
-  const act = async (key: string, fn: () => Promise<Account | null | void>) => {
-    setBusy(key); setError(null);
-    try {
-      const r = await fn();
-      if (r) d.toast({ kind: 'ok', title: t('accounts.saved', { label: r.label }), detail: t('accounts.savedDetail') });
-      await d.reload();
-    } catch (e) { setError(errorText(e)); } finally { setBusy(null); }
-  };
-  const addPlay = () => act('play', async () => { const a = await api.addPlayAccount(playLabel); if (a) setPlayLabel(''); return a; });
-  const addApple = () => act('apple', async () => { const a = await api.addAppleAccount(appleLabel, keyId, issuerId); if (a) { setAppleLabel(''); setKeyId(''); setIssuerId(''); } return a; });
-  const used = (a: Account) => d.projects.filter(p => p.playAccount === a.id || p.appleAccount === a.id).map(p => p.name);
-
-  return (
-    <div className="page">
-      <div className="ph"><div><h1>{t('nav.accounts')}</h1><p>{t('accounts.lead')}</p></div></div>
-      {error && <Notice tone="bad">{error}</Notice>}
-      <Card title={t('accounts.list')} icon="key" sub={t('accounts.listSub')} pad={false}>
-        {!d.accounts.length ? <Empty illo="key" title={t('accounts.emptyTitle')}>{t('accounts.emptyText')}</Empty> : (
-          <table className="table">
-            <thead><tr><th>{t('col.name')}</th><th>{t('col.store')}</th><th>{t('col.usedBy')}</th><th>{t('col.added')}</th><th><span className="sr">{t('col.actions')}</span></th></tr></thead>
-            <tbody>
-              {d.accounts.map(a => (
-                <tr key={a.id}>
-                  <td className="strong">{a.label}</td>
-                  <td><span className="row" style={{ gap: 8 }}><StoreGlyph store={a.kind === 'play' ? 'android' : 'ios'} className="ic14" />{a.kind === 'play' ? 'Google Play' : 'App Store Connect'}</span></td>
-                  <td>{used(a).length ? used(a).join(', ') : <Chip tone="neutral">{t('accounts.unused')}</Chip>}</td>
-                  <td className="muted">{date(a.created)}</td>
-                  <td className="right"><button className="btn btn-sm btn-ghost btn-danger" disabled={!!busy} onClick={() => act(`rm-${a.id}`, () => api.removeAccount(a.id))} aria-label={t('accounts.removeAria', { label: a.label })}><Icon name="trash" />{t('accounts.remove')}</button></td>
-                </tr>
-              ))}
-            </tbody>
-          </table>
-        )}
-      </Card>
-      <div className="grid g2">
-        <Card title="Google Play" icon="key" sub={t('accounts.playSub')}>
-          <form className="form" onSubmit={e => { e.preventDefault(); addPlay(); }}>
-            <div className="field">
-              <label htmlFor="play-label">{t('accounts.label')}</label>
-              <input id="play-label" className="input" type="text" value={playLabel} onChange={e => setPlayLabel(e.target.value)} placeholder={t('accounts.playPlaceholder')} maxLength={60} autoComplete="off" />
-            </div>
-            <p className="small muted">{t('accounts.playHow')}</p>
-            <div><button className="btn btn-primary" type="submit" disabled={!playLabel.trim() || !!busy}><Icon name="key" />{t('accounts.choosePlay')}</button></div>
-          </form>
-        </Card>
-        <Card title="App Store Connect" icon="key" sub={t('accounts.appleSub')}>
-          <form className="form" onSubmit={e => { e.preventDefault(); addApple(); }}>
-            <div className="field">
-              <label htmlFor="apple-label">{t('accounts.label')}</label>
-              <input id="apple-label" className="input" type="text" value={appleLabel} onChange={e => setAppleLabel(e.target.value)} placeholder={t('accounts.applePlaceholder')} maxLength={60} autoComplete="off" />
-            </div>
-            <div className="grid g2" style={{ gap: 12 }}>
-              <div className="field">
-                <label htmlFor="key-id">{t('accounts.keyId')}</label>
-                <input id="key-id" className="input mono" type="text" value={keyId} onChange={e => setKeyId(e.target.value.toUpperCase())} placeholder="ABC123DEFG" maxLength={10} autoComplete="off" spellCheck={false} />
-              </div>
-              <div className="field">
-                <label htmlFor="issuer-id">{t('accounts.issuerId')}</label>
-                <input id="issuer-id" className="input mono" type="text" value={issuerId} onChange={e => setIssuerId(e.target.value)} placeholder="UUID" maxLength={36} autoComplete="off" spellCheck={false} />
-              </div>
-            </div>
-            <div><button className="btn btn-primary" type="submit" disabled={!appleLabel.trim() || keyId.length !== 10 || issuerId.length < 36 || !!busy}><Icon name="key" />{t('accounts.chooseApple')}</button></div>
-          </form>
-        </Card>
-      </div>
-      <Notice tone="info" icon="shield">{t('accounts.safety')}</Notice>
-    </div>
-  );
-}
diff --git a/apps/desktop/src/screens/AppFolders.tsx b/apps/desktop/src/screens/AppFolders.tsx
deleted file mode 100644
index ce4243b..0000000
--- a/apps/desktop/src/screens/AppFolders.tsx
+++ /dev/null
@@ -1,137 +0,0 @@
-// Workspace: app folders (one storebound.config.ts per app), which store accounts each app uses, and starting a new
-// folder from the templates (`storebound init` with a profile, confirmed in a native dialog).
-import { useEffect, useRef, useState } from 'react';
-import { api, errorText, newJob, onProgress, type Project, type ToolResult, type WriteOutcome } from '../api';
-import { devSwitch } from '../dev/switches';
-import { t } from '../i18n';
-import { shortPath, tildeText } from '../paths';
-import { useData } from '../store';
-import { Icon, StoreGlyph } from '../ui/icons';
-import { AppIcon, Card, Chip, Empty, Notice, Seg, StoreBadge } from '../ui/kit';
-import { checkState } from './Portfolio';
-
-type Profile = 'app' | 'game' | 'subscription-app';
-interface Run { title: string; project: string; job: string; lines: string[]; result?: ToolResult; outcome?: WriteOutcome; error?: string }
-
-export function AppFolders() {
-  const d = useData();
-  const [error, setError] = useState<string | null>(null);
-  const [busy, setBusy] = useState<string | null>(null);
-  const [run, setRun] = useState<Run | null>(null);
-  const [profile, setProfile] = useState<Profile>('app');
-  const logRef = useRef<HTMLPreElement>(null);
-
-  useEffect(() => {
-    const un = onProgress(p => { if (p.line !== undefined) setRun(r => (r && p.job === r.job ? { ...r, lines: [...r.lines.slice(-400), p.line!] } : r)); });
-    return () => { un.then(f => f()); };
-  }, []);
-  useEffect(() => { logRef.current?.scrollTo({ top: logRef.current.scrollHeight }); }, [run?.lines.length]);
-
-  const act = async (key: string, fn: () => Promise<void>) => {
-    setBusy(key); setError(null);
-    try { await fn(); } catch (e) { setError(errorText(e)); } finally { setBusy(null); }
-  };
-  const add = () => act('add', async () => { const p = await api.addProject(); if (p) { await d.reload(); d.toast({ kind: 'ok', title: t('folders.added', { name: p.name }) }); } });
-  const init = () => act('init', async () => { const p = await api.initProject(profile); if (p) { await d.reload(); d.toast({ kind: 'ok', title: t('folders.started', { name: p.name }), detail: t('folders.startedDetail') }); } });
-  const remove = (p: Project) => act(`rm-${p.id}`, async () => { await api.removeProject(p.id); await d.reload(); });
-  const setAcc = (p: Project, play: string | null, apple: string | null) => act(`acc-${p.id}`, async () => { await api.setProjectAccounts(p.id, play, apple); await d.reload(); });
-
-  const check = (p: Project) => act(`check-${p.id}`, async () => {
-    const job = newJob('check');
-    setRun({ title: t('folders.checkTitle'), project: p.name, job, lines: [] });
-    try { const r = await api.call('check', p.id, undefined, job); setRun(x => x && { ...x, result: r }); } catch (e) { setRun(x => x && { ...x, error: errorText(e) }); }
-  });
-  const gallery = (p: Project) => act(`gallery-${p.id}`, async () => {
-    const job = newJob('gallery');
-    setRun({ title: t('folders.galleryTitle'), project: p.name, job, lines: [] });
-    try { const o = await api.writeWithConfirm('shots.gallery', p.id, {}, job); setRun(x => x && { ...x, outcome: o, result: o.result ?? o.dryRun }); } catch (e) { setRun(x => x && { ...x, error: errorText(e) }); }
-  });
-
-  // Dev builds only: VITE_AUTORUN=gallery starts the confirm flow on the first app once (checks of the native dialog).
-  const autorun = useRef(false);
-  useEffect(() => {
-    const first = d.projects[0];
-    if (devSwitch('autorun') !== 'gallery' || !first || autorun.current) return;
-    autorun.current = true;
-    gallery(first);
-  }, [d.projects]); // eslint-disable-line react-hooks/exhaustive-deps
-
-  const play = d.accounts.filter(a => a.kind === 'play');
-  const apple = d.accounts.filter(a => a.kind === 'apple');
-  const status = !run ? '' : run.error ? t('run.failed') : !run.result ? t('run.running') : run.outcome
-    ? (run.outcome.confirmed ? t('run.applied') : run.outcome.stage === 'dialog' ? t('run.cancelled') : t('run.dryFailed'))
-    : run.result.ok ? t('run.done') : t('common.exit', { code: run.result.exitCode });
-
-  return (
-    <div className="page">
-      <div className="ph">
-        <div><h1>{t('nav.apps')}</h1><p>{t('folders.lead')}</p></div>
-        <div className="actions"><button className="btn btn-primary" onClick={add} disabled={!!busy}><Icon name="folderPlus" />{t('action.addFolder')}</button></div>
-      </div>
-      {error && <Notice tone="bad">{error}</Notice>}
-
-      {!d.projects.length ? (
-        <Card pad={false}><Empty illo="apps" title={t('folders.emptyTitle')}>{t('folders.emptyText')}</Empty></Card>
-      ) : (
-        <Card title={t('folders.list')} icon="folder" sub={t('folders.listSub', { count: d.projects.length })} pad={false}>
-          <div className="list">
-            {d.projects.map(p => {
-              const e = d.statusOf(p);
-              const st = checkState(e);
-              return (
-                <div className="li" key={p.id} style={{ alignItems: 'center' }}>
-                  <AppIcon name={p.name} src={d.icons[p.id]} />
-                  <div className="li-main">
-                    <span className="row" style={{ gap: 8 }}><span className="li-title">{e?.app?.name ?? p.name}</span><Chip tone={st.tone}>{st.text}</Chip></span>
-                    <span className="li-sub mono-id selectable" title={p.path}>{shortPath(p.path, d.info?.home)}</span>
-                    <span className="row" style={{ gap: 6, marginTop: 6 }}>
-                      <StoreBadge store="ios" id={e?.app?.platforms.ios?.bundleId} off={!!e && !e.app?.platforms.ios} />
-                      <StoreBadge store="android" id={e?.app?.platforms.android?.packageName} off={!!e && !e.app?.platforms.android} />
-                    </span>
-                  </div>
-                  <div className="stack" style={{ gap: 6, width: 270 }}>
-                    <label className="acc-pick" title="Google Play"><StoreGlyph store="android" />
-                      <select className="input" aria-label={t('folders.playFor', { name: p.name })} value={p.playAccount ?? ''} onChange={ev => setAcc(p, ev.target.value || null, p.appleAccount)} disabled={!!busy}>
-                        <option value="">{t('folders.noPlay')}</option>
-                        {play.map(a => <option key={a.id} value={a.id}>{a.label}</option>)}
-                      </select></label>
-                    <label className="acc-pick" title="App Store Connect"><StoreGlyph store="ios" />
-                      <select className="input" aria-label={t('folders.appleFor', { name: p.name })} value={p.appleAccount ?? ''} onChange={ev => setAcc(p, p.playAccount, ev.target.value || null)} disabled={!!busy}>
-                        <option value="">{t('folders.noApple')}</option>
-                        {apple.map(a => <option key={a.id} value={a.id}>{a.label}</option>)}
-                      </select></label>
-                  </div>
-                  <div className="actions" style={{ flexWrap: 'nowrap' }}>
-                    <button className="btn btn-sm" onClick={() => check(p)} disabled={!!busy}><Icon name="shield" />{t('folders.check')}</button>
-                    <button className="btn btn-sm" onClick={() => gallery(p)} disabled={!!busy} title={t('folders.galleryHint')}><Icon name="image" />{t('folders.gallery')}</button>
-                    <button className="btn btn-sm btn-ghost btn-icon" onClick={() => remove(p)} disabled={!!busy} aria-label={t('folders.remove', { name: p.name })} title={t('folders.remove', { name: p.name })}><Icon name="trash" /></button>
-                  </div>
-                </div>
-              );
-            })}
-          </div>
-        </Card>
-      )}
-
-      <Card title={t('folders.newTitle')} icon="sparkle" sub={t('folders.newSub')}>
-        <div className="row between" style={{ gap: 16, flexWrap: 'wrap' }}>
-          <div className="stack" style={{ gap: 8 }}>
-            <Seg value={profile} onChange={setProfile} label={t('folders.profile')} options={[['app', t('profile.app')], ['game', t('profile.game')], ['subscription-app', t('profile.subscription-app')]]} />
-            <span className="small muted">{t(`folders.profileHint.${profile}` as 'folders.profileHint.app')}</span>
-          </div>
-          <button className="btn" onClick={init} disabled={!!busy}><Icon name="folderPlus" />{t('folders.chooseAndStart')}</button>
-        </div>
-      </Card>
-
-      {run && (
-        <Card title={`${run.title} · ${run.project}`} icon="terminal" sub={<>{status}{run.result && <> · <code className="selectable">{run.result.command}</code></>}</>}
-          actions={<button className="btn btn-sm btn-ghost btn-icon" onClick={() => setRun(null)} aria-label={t('common.close')}><Icon name="x" /></button>}>
-          <div className="stack">
-            {run.error && <Notice tone="bad">{run.error}</Notice>}
-            <pre className="log selectable" ref={logRef} aria-live="polite">{tildeText(run.result?.output ?? run.lines.join('\n'), d.info?.home) || ' '}</pre>
-          </div>
-        </Card>
-      )}
-    </div>
-  );
-}
diff --git a/apps/desktop/src/screens/AppView.tsx b/apps/desktop/src/screens/AppView.tsx
deleted file mode 100644
index becee55..0000000
--- a/apps/desktop/src/screens/AppView.tsx
+++ /dev/null
@@ -1,83 +0,0 @@
-// One app across both stores: header (icon, ids, store state), then the tabs.
-import { type KeyboardEvent, useRef } from 'react';
-import { api, type Project } from '../api';
-import { t } from '../i18n';
-import { APP_TABS, type AppTab, TAB_ICON, TAB_KEY, useNav } from '../nav';
-import { storeNow } from '../lib/model';
-import { useData } from '../store';
-import { Icon } from '../ui/icons';
-import { AppIcon, Chip, PhaseChip, StoreBadge } from '../ui/kit';
-import { CatalogTab } from './tabs/Catalog';
-import { ChecksTab } from './tabs/Checks';
-import { HealthTab } from './tabs/Health';
-import { ListingsTab } from './tabs/Listings';
-import { ReleasesTab } from './tabs/Releases';
-import { ReviewsTab } from './tabs/Reviews';
-import { TestFlightTab } from './tabs/TestFlight';
-
-export const ascUrl = (appId: string | null | undefined): string => (appId ? `https://appstoreconnect.apple.com/apps/${encodeURIComponent(appId)}/distribution` : 'https://appstoreconnect.apple.com/apps');
-export const PLAY_CONSOLE = 'https://play.google.com/console/';
-
-export function AppView({ project, tab }: { project: Project; tab: AppTab }) {
-  const d = useData();
-  const nav = useNav();
-  const e = d.statusOf(project);
-  const l = d.liveOf(project);
-  const ios = e?.app?.platforms.ios, android = e?.app?.platforms.android;
-  const name = e?.app?.name ?? project.name;
-  const tabs = useRef<(HTMLButtonElement | null)[]>([]);
-  const setTab = (x: AppTab) => nav.go({ screen: 'app', appId: project.id, tab: x });
-  const onKey = (ev: KeyboardEvent) => {
-    const i = APP_TABS.indexOf(tab);
-    const j = ev.key === 'ArrowRight' ? i + 1 : ev.key === 'ArrowLeft' ? i - 1 : ev.key === 'Home' ? 0 : ev.key === 'End' ? APP_TABS.length - 1 : null;
-    if (j === null) return;
-    ev.preventDefault();
-    const n = (j + APP_TABS.length) % APP_TABS.length;
-    setTab(APP_TABS[n]!);
-    tabs.current[n]?.focus();
-  };
-  const all = l?.release.all ?? [];
-  const iosNow = l ? storeNow(all, 'ios').now : null, androidNow = l ? storeNow(all, 'android').now : null;
-  const open = (url: string) => { api.openExternal(url).catch(() => {}); };
-
-  return (
-    <div className="page">
-      <div className="ph">
-        <div className="app-head">
-          <AppIcon name={name} src={d.icons[project.id]} />
-          <div>
-            <div className="row" style={{ gap: 10 }}>
-              <h1>{name}</h1>
-              {e?.summary?.profile && <Chip tone="outline">{t(`profile.${e.summary.profile}` as 'profile.app')}</Chip>}
-            </div>
-            <div className="ids">
-              <StoreBadge store="ios" id={ios?.bundleId} off={!!e && !ios}>{iosNow && <><span className="num strong">{iosNow.version}</span><PhaseChip r={iosNow} /></>}</StoreBadge>
-              <StoreBadge store="android" id={android?.packageName} off={!!e && !android}>{androidNow && <><span className="num strong">{androidNow.version}</span><PhaseChip r={androidNow} /></>}</StoreBadge>
-            </div>
-          </div>
-        </div>
-        <div className="actions">
-          {ios && <button className="btn btn-ghost" onClick={() => open(ascUrl(ios.ascAppId))} title={t('app.consoleHint')}><Icon name="external" />App Store Connect</button>}
-          {android && <button className="btn btn-ghost" onClick={() => open(PLAY_CONSOLE)} title={t('app.consoleHint')}><Icon name="external" />Play Console</button>}
-        </div>
-      </div>
-
-      <div className="tabs" role="tablist" aria-label={t('app.sections', { name })} onKeyDown={onKey}>
-        {APP_TABS.map((x, i) => (
-          <button key={x} ref={el => { tabs.current[i] = el; }} role="tab" id={`tab-${x}`} aria-selected={tab === x} aria-controls="tabpanel" tabIndex={tab === x ? 0 : -1} className="tab" onClick={() => setTab(x)}>
-            <Icon name={TAB_ICON[x]} />{t(TAB_KEY[x])}
-          </button>
-        ))}
-      </div>
-      <div role="tabpanel" id="tabpanel" aria-labelledby={`tab-${tab}`} className="stack" style={{ gap: 16 }}>
-        {tab === 'releases' && <ReleasesTab project={project} />}
-        {tab === 'catalog' && <CatalogTab project={project} />}
-        {tab === 'listings' && <ListingsTab project={project} />}
-        {tab === 'health' && <HealthTab project={project} />}
-        {tab === 'reviews' && <ReviewsTab project={project} />}
-        {tab === 'testflight' && <TestFlightTab project={project} />}
-        {tab === 'checks' && <ChecksTab project={project} />}
-      </div>
-    </div>
-  );
-}
diff --git a/apps/desktop/src/screens/Dependencies.tsx b/apps/desktop/src/screens/Dependencies.tsx
deleted file mode 100644
index b019541..0000000
--- a/apps/desktop/src/screens/Dependencies.tsx
+++ /dev/null
@@ -1,137 +0,0 @@
-// Dependencies: local tools for screenshots, previews, icons and captures. ffmpeg and Chrome for Testing download
-// into the app data folder in one click (checksum or signature verified, progress, cancel); the rest link out.
-// Store work needs none of them. Sources and licenses: docs/desktop.md.
-import { useCallback, useEffect, useState } from 'react';
-import { api, type DownloadInfo, errorText, newJob, onDownload, type ToolStatus } from '../api';
-import { t } from '../i18n';
-import { bytes } from '../lib/format';
-import { shortPath } from '../paths';
-import { useData } from '../store';
-import { Icon, type IconName } from '../ui/icons';
-import { Card, Chip, Notice, Skeleton } from '../ui/kit';
-
-const TOOL_ICON: Record<string, IconName> = { ffmpeg: 'image', ffprobe: 'search', chrome: 'globe', xcode: 'terminal', simctl: 'phone', adb: 'phone', git: 'layers' };
-
-/** Status chip of one tool. */
-export function toolState(x: ToolStatus): { text: string; tone: 'ok' | 'warn' | 'accent' } {
-  if (!x.found) return { text: t('deps.missing'), tone: 'warn' };
-  return x.source === 'app' ? { text: t('deps.appCopy'), tone: 'accent' } : { text: t('deps.installed'), tone: 'ok' };
-}
-
-interface Dl { job: string; stage: string; received: number; total: number | null }
-
-export function Dependencies() {
-  const d = useData();
-  const [tools, setTools] = useState<ToolStatus[] | null>(d.sidecar?.tools?.tools ?? null);
-  const [info, setInfo] = useState<DownloadInfo[]>([]);
-  const [error, setError] = useState<string | null>(null);
-  const [busy, setBusy] = useState(false);
-  const [dl, setDl] = useState<Record<string, Dl>>({});
-
-  const refresh = useCallback(async () => {
-    setBusy(true); setError(null);
-    try {
-      const [s, i] = await Promise.all([api.call<{ tools: ToolStatus[] }>('system.tools'), api.toolsInfo()]);
-      setTools(s.tools); setInfo(i);
-    } catch (e) { setError(errorText(e)); } finally { setBusy(false); }
-  }, []);
-  useEffect(() => { refresh(); }, [refresh]);
-  useEffect(() => {
-    const un = onDownload(e => setDl(m => {
-      const k = Object.keys(m).find(x => m[x]!.job === e.job);
-      return k ? { ...m, [k]: { ...m[k]!, stage: e.stage, received: e.received, total: e.total } } : m;
-    }));
-    return () => { un.then(f => f()); };
-  }, []);
-
-  const install = async (tool: 'ffmpeg' | 'chrome') => {
-    const job = newJob(`dl-${tool}`);
-    setDl(m => ({ ...m, [tool]: { job, stage: 'resolve', received: 0, total: null } }));
-    const tid = d.toast({ id: job, kind: 'job', title: t('deps.downloading', { tool: tool === 'chrome' ? 'Chrome for Testing' : 'ffmpeg' }), detail: t('dl.resolve'), progress: null, job });
-    try {
-      const v = await api.installTool(tool, job);
-      d.updateToast(tid, { kind: 'ok', title: t('deps.installedToast', { tool: tool === 'chrome' ? 'Chrome for Testing' : 'ffmpeg' }), detail: v, progress: undefined, job: undefined });
-    } catch (e) {
-      const msg = errorText(e);
-      d.updateToast(tid, { kind: msg === 'cancelled' ? 'info' : 'bad', title: msg === 'cancelled' ? t('toast.cancelled') : t('deps.failed'), detail: msg === 'cancelled' ? t('deps.cancelledDetail') : msg, progress: undefined, job: undefined });
-    } finally {
-      setDl(m => { const { [tool]: _gone, ...rest } = m; return rest; });
-      refresh();
-    }
-  };
-  const uninstall = async (tool: 'ffmpeg' | 'chrome') => {
-    try { await api.uninstallTool(tool); d.toast({ kind: 'ok', title: t('deps.removed') }); } catch (e) { setError(errorText(e)); }
-    refresh();
-  };
-  const open = (url: string) => api.openExternal(url).catch(e => setError(errorText(e)));
-  const copy = (s: string) => { navigator.clipboard?.writeText(s).then(() => d.toast({ kind: 'ok', title: t('deps.copied') }), () => {}); };
-
-  const found = tools?.filter(x => x.found).length ?? 0;
-  const managed = (id: string): DownloadInfo | undefined => info.find(i => i.tool === (id === 'ffprobe' ? 'ffmpeg' : id));
-
-  return (
-    <div className="page">
-      <div className="ph">
-        <div><h1>{t('nav.dependencies')}</h1><p>{t('deps.lead')}</p></div>
-        <div className="actions"><button className="btn" onClick={refresh} disabled={busy}><Icon name="refresh" className={busy ? 'spin' : undefined} />{t('deps.checkAgain')}</button></div>
-      </div>
-      {error && <Notice tone="bad">{error}</Notice>}
-      <Card title={t('deps.tools')} icon="package" sub={tools ? t('deps.found', { found, total: tools.length }) : t('common.loading')} pad={false}>
-        {!tools ? <div className="card-body"><Skeleton lines={6} /></div> : (
-          <div className="list">
-            {tools.map(x => {
-              const st = toolState(x);
-              const m = x.install.kind === 'download' ? managed(x.id) : undefined;
-              const running = m ? dl[m.tool] : undefined;
-              const pct = running?.total ? running.received / running.total : null;
-              return (
-                <div className="li tool-row" key={x.id} style={{ alignItems: 'center' }}>
-                  <span className="ti"><Icon name={TOOL_ICON[x.id] ?? 'package'} /></span>
-                  <div className="li-main">
-                    <span className="row" style={{ gap: 8 }}><span className="li-title">{x.name}</span><Chip tone={st.tone}>{st.text}</Chip>{x.version && <span className="small muted num">{x.version}</span>}</span>
-                    <span className="li-sub">{x.usedFor}</span>
-                    {x.path && <span className="li-sub mono-id selectable" title={x.path}>{shortPath(x.path, d.info?.home)}</span>}
-                  </div>
-                  <div className="actions" style={{ flexWrap: 'nowrap' }}>
-                    {running ? (
-                      <div className="prog" aria-live="polite">
-                        <div className={`bar${pct === null ? ' indet' : ''}`}><span style={{ width: `${(pct ?? 0.35) * 100}%` }} /></div>
-                        <div className="c"><span>{t(`dl.${running.stage}` as 'dl.download')}</span><span>{running.total ? `${bytes(running.received)} / ${bytes(running.total)}` : ''}</span></div>
-                      </div>
-                    ) : null}
-                    {running ? <button className="btn btn-sm" onClick={() => d.cancelJob(running.job)}>{t('common.cancel')}</button>
-                      : m && x.id !== 'ffprobe' ? (
-                        m.available ? (
-                          m.installed ? <button className="btn btn-sm btn-ghost" onClick={() => uninstall(m.tool)}><Icon name="trash" />{t('deps.remove')}</button>
-                            : <button className="btn btn-sm btn-primary" onClick={() => install(m.tool)} title={`${m.license} · ${m.source}`}><Icon name="download" />{t('deps.download')}{m.size ? ` · ${bytes(m.size)}` : ''}</button>
-                        ) : <Chip tone="neutral">{t('deps.unavailable')}</Chip>
-                      ) : x.install.kind === 'link' && !x.found ? <button className="btn btn-sm" onClick={() => open(x.install.url)}><Icon name="external" />{t('deps.getIt')}</button> : null}
-                  </div>
-                </div>
-              );
-            })}
-          </div>
-        )}
-      </Card>
-      <div className="grid g2">
-        {info.map(m => (
-          <Card key={m.tool} title={m.tool === 'chrome' ? 'Chrome for Testing' : `ffmpeg ${m.version ?? ''}`} icon={m.tool === 'chrome' ? 'globe' : 'image'} sub={m.installed ? t('deps.inAppData', { folder: m.folder }) : t('deps.notDownloaded')}>
-            <dl className="kv">
-              <dt>{t('deps.source')}</dt><dd className="selectable small">{m.source}</dd>
-              <dt>{t('deps.license')}</dt><dd className="small">{m.license}</dd>
-              <dt>{t('deps.verify')}</dt><dd className="small">{m.tool === 'chrome' ? t('deps.verifyChrome') : t('deps.verifyFfmpeg')}</dd>
-            </dl>
-            <div className="actions" style={{ marginTop: 12 }}><button className="btn btn-sm btn-ghost" onClick={() => open(m.licenseUrl)}><Icon name="external" />{t('deps.licenseLink')}</button></div>
-          </Card>
-        ))}
-      </div>
-      <Card title={t('deps.terminal')} icon="terminal" sub={t('deps.terminalSub')}>
-        <div className="stack">
-          {['storebound doctor', 'bun add -d playwright', 'brew install ffmpeg'].map(c => (
-            <div className="cmd" key={c}><code className="selectable">{c}</code><button className="btn btn-sm btn-ghost btn-icon" onClick={() => copy(c)} aria-label={t('deps.copy', { cmd: c })}><Icon name="copy" /></button></div>
-          ))}
-        </div>
-      </Card>
-    </div>
-  );
-}
diff --git a/apps/desktop/src/screens/Onboarding.tsx b/apps/desktop/src/screens/Onboarding.tsx
deleted file mode 100644
index c4c25af..0000000
--- a/apps/desktop/src/screens/Onboarding.tsx
+++ /dev/null
@@ -1,204 +0,0 @@
-// First-run guide: what the app does, add or start an app folder, store keys into the keychain, local tools, and the
-// first read of the stores. Every step can be skipped; it opens again from Settings or the command palette.
-import { type KeyboardEvent, useEffect, useRef, useState } from 'react';
-import { api, errorText, newJob } from '../api';
-import { devSwitch } from '../dev/switches';
-import { type Key, t } from '../i18n';
-import { ago } from '../lib/format';
-import { useData } from '../store';
-import { Icon, type IconName, Mark } from '../ui/icons';
-import { Illo } from '../ui/illustrations';
-import { AppIcon, Chip, Notice, Seg } from '../ui/kit';
-
-const STEPS: [Key, IconName][] = [['wz.s1', 'sparkle'], ['wz.s2', 'folder'], ['wz.s3', 'key'], ['wz.s4', 'package'], ['wz.s5', 'refresh']];
-type Profile = 'app' | 'game' | 'subscription-app';
-
-export function Onboarding({ onClose }: { onClose: () => void }) {
-  const d = useData();
-  const v = devSwitch('start');
-  const [step, setStep] = useState(() => (v.startsWith('welcome:') ? Math.max(0, Math.min(4, Number(v.split(':')[1]) - 1)) : 0));
-  const [busy, setBusy] = useState<string | null>(null);
-  const [error, setError] = useState<string | null>(null);
-  const [mode, setMode] = useState<'add' | 'init'>('add');
-  const [profile, setProfile] = useState<Profile>('app');
-  const [playLabel, setPlayLabel] = useState('');
-  const [appleLabel, setAppleLabel] = useState('');
-  const [keyId, setKeyId] = useState('');
-  const [issuerId, setIssuerId] = useState('');
-  const root = useRef<HTMLDivElement>(null);
-  const before = useRef<Element | null>(null);
-
-  useEffect(() => {
-    before.current = document.activeElement;
-    root.current?.querySelector<HTMLElement>('.wz-body h2')?.focus();
-    return () => { (before.current as HTMLElement | null)?.focus?.(); };
-  }, []);
-  useEffect(() => { root.current?.querySelector<HTMLElement>('.wz-body h2')?.focus(); setError(null); }, [step]);
-
-  const act = async (key: string, fn: () => Promise<unknown>) => {
-    setBusy(key); setError(null);
-    try { await fn(); await d.reload(); } catch (e) { setError(errorText(e)); } finally { setBusy(null); }
-  };
-  // focus stays inside the dialog; Esc closes it
-  const onKey = (e: KeyboardEvent) => {
-    if (e.key === 'Escape') { e.preventDefault(); onClose(); return; }
-    if (e.key !== 'Tab' || !root.current) return;
-    const f = [...root.current.querySelectorAll<HTMLElement>('button:not([disabled]), input:not([disabled]), select:not([disabled]), [tabindex="0"], h2[tabindex]')];
-    if (!f.length) return;
-    const first = f[0]!, last = f.at(-1)!;
-    if (e.shiftKey && document.activeElement === first) { e.preventDefault(); last.focus(); }
-    else if (!e.shiftKey && document.activeElement === last) { e.preventDefault(); first.focus(); }
-  };
-
-  const tools = d.sidecar?.tools?.tools ?? [];
-  const install = (tool: 'ffmpeg' | 'chrome') => act(`dl-${tool}`, async () => {
-    const job = newJob(`dl-${tool}`);
-    const tid = d.toast({ id: job, kind: 'job', title: t('deps.downloading', { tool: tool === 'chrome' ? 'Chrome for Testing' : 'ffmpeg' }), progress: null, job });
-    try { const r = await api.installTool(tool, job); d.updateToast(tid, { kind: 'ok', title: t('deps.installedToast', { tool }), detail: r, job: undefined, progress: undefined }); }
-    catch (e) { d.updateToast(tid, { kind: 'bad', title: t('deps.failed'), detail: errorText(e), job: undefined, progress: undefined }); }
-  });
-  const done = [d.projects.length > 0 || step > 0, d.projects.length > 0, d.accounts.length > 0, tools.length > 0 && tools.filter(x => x.id === 'ffmpeg' || x.id === 'chrome').every(x => x.found), !!d.live];
-  const liveApps = d.live?.value.apps.length ?? 0;
-
-  return (
-    <div className="wizard-scrim">
-      <div className="wizard" role="dialog" aria-modal="true" aria-labelledby="wz-title" ref={root} onKeyDown={onKey}>
-        <aside className="wz-side">
-          <div className="brand"><Mark className="brand-mark" /><span>storebound</span></div>
-          <ol className="wz-steps">
-            {STEPS.map(([k, icon], i) => (
-              <li key={k}>
-                <button className={`wz-step${done[i] && i !== step ? ' done' : ''}`} aria-current={i === step ? 'step' : undefined} onClick={() => setStep(i)}>
-                  <span className="wz-num">{done[i] && i !== step ? <Icon name="check" /> : i + 1}</span><span className="grow">{t(k)}</span><Icon name={icon} className="ic14 muted" />
-                </button>
-              </li>
-            ))}
-          </ol>
-          <div className="foot"><span>{t('wz.footer')}</span><span className="row" style={{ gap: 6 }}><Icon name="shield" className="ic13" />{t('wz.footerSafe')}</span></div>
-        </aside>
-        <div className="wz-main">
-          <div className="wz-body">
-            {step === 0 && (
-              <>
-                <Illo name="apps" />
-                <h2 id="wz-title" tabIndex={-1}>{t('wz.welcomeTitle')}</h2>
-                <p className="lead">{t('wz.welcomeLead')}</p>
-                <div className="checklist">
-                  {([['portfolio', 'wz.p1t', 'wz.p1s'], ['shield', 'wz.p2t', 'wz.p2s'], ['key', 'wz.p3t', 'wz.p3s']] as [IconName, Key, Key][]).map(([ic, a, b]) => (
-                    <div className="ck" key={a}><span className="ck-ic tone-bg-accent"><Icon name={ic} /></span><div className="grow"><div className="t">{t(a)}</div><div className="s">{t(b)}</div></div></div>
-                  ))}
-                </div>
-              </>
-            )}
-            {step === 1 && (
-              <>
-                <h2 id="wz-title" tabIndex={-1}>{t('wz.appsTitle')}</h2>
-                <p className="lead">{t('wz.appsLead')}</p>
-                <div className="choice-grid">
-                  <button className="choice" aria-pressed={mode === 'add'} onClick={() => setMode('add')}>
-                    <span className="ch-icon"><Icon name="folder" /></span><b>{t('wz.addTitle')}</b><span>{t('wz.addText')}</span>
-                  </button>
-                  <button className="choice" aria-pressed={mode === 'init'} onClick={() => setMode('init')}>
-                    <span className="ch-icon"><Icon name="sparkle" /></span><b>{t('wz.initTitle')}</b><span>{t('wz.initText')}</span>
-                  </button>
-                </div>
-                {mode === 'init' && (
-                  <div className="stack" style={{ gap: 8 }}>
-                    <Seg value={profile} onChange={setProfile} label={t('folders.profile')} options={[['app', t('profile.app')], ['game', t('profile.game')], ['subscription-app', t('profile.subscription-app')]]} />
-                    <span className="small muted">{t(`folders.profileHint.${profile}` as Key)}</span>
-                  </div>
-                )}
-                <div className="actions">
-                  {mode === 'add'
-                    ? <button className="btn btn-primary" onClick={() => act('add', () => api.addProject())} disabled={!!busy}><Icon name="folderPlus" />{t('action.addFolder')}</button>
-                    : <button className="btn btn-primary" onClick={() => act('init', () => api.initProject(profile))} disabled={!!busy}><Icon name="folderPlus" />{t('folders.chooseAndStart')}</button>}
-                </div>
-                {d.projects.length > 0 && (
-                  <div className="checklist">
-                    {d.projects.map(p => <div className="ck" key={p.id}><AppIcon name={p.name} src={d.icons[p.id]} /><div className="grow"><div className="t">{d.statusOf(p)?.app?.name ?? p.name}</div><div className="s">{t('wz.added')}</div></div><Chip tone="ok" icon="check">{t('wz.ready')}</Chip></div>)}
-                  </div>
-                )}
-              </>
-            )}
-            {step === 2 && (
-              <>
-                <h2 id="wz-title" tabIndex={-1}>{t('wz.keysTitle')}</h2>
-                <p className="lead">{t('wz.keysLead')}</p>
-                <div className="choice-grid">
-                  <form className="choice" onSubmit={e => { e.preventDefault(); act('play', async () => { if (await api.addPlayAccount(playLabel)) setPlayLabel(''); }); }}>
-                    <span className="ch-icon"><Icon name="key" /></span><b>Google Play</b><span>{t('accounts.playHow')}</span>
-                    <input className="input" value={playLabel} onChange={e => setPlayLabel(e.target.value)} placeholder={t('accounts.playPlaceholder')} aria-label={t('accounts.label')} maxLength={60} />
-                    <div><button className="btn btn-sm btn-primary" type="submit" disabled={!playLabel.trim() || !!busy}>{t('accounts.choosePlay')}</button></div>
-                  </form>
-                  <form className="choice" onSubmit={e => { e.preventDefault(); act('apple', async () => { if (await api.addAppleAccount(appleLabel, keyId, issuerId)) { setAppleLabel(''); setKeyId(''); setIssuerId(''); } }); }}>
-                    <span className="ch-icon"><Icon name="key" /></span><b>App Store Connect</b><span>{t('accounts.appleSub')}</span>
-                    <input className="input" value={appleLabel} onChange={e => setAppleLabel(e.target.value)} placeholder={t('accounts.applePlaceholder')} aria-label={t('accounts.label')} maxLength={60} />
-                    <div className="row"><input className="input mono" value={keyId} onChange={e => setKeyId(e.target.value.toUpperCase())} placeholder={t('accounts.keyId')} aria-label={t('accounts.keyId')} maxLength={10} />
-                      <input className="input mono" value={issuerId} onChange={e => setIssuerId(e.target.value)} placeholder={t('accounts.issuerId')} aria-label={t('accounts.issuerId')} maxLength={36} /></div>
-                    <div><button className="btn btn-sm btn-primary" type="submit" disabled={!appleLabel.trim() || keyId.length !== 10 || issuerId.length < 36 || !!busy}>{t('accounts.chooseApple')}</button></div>
-                  </form>
-                </div>
-                {d.accounts.length > 0 && d.projects.length > 0 && (
-                  <div className="checklist">
-                    {d.projects.map(p => (
-                      <div className="ck" key={p.id}>
-                        <AppIcon name={p.name} src={d.icons[p.id]} />
-                        <div className="grow"><div className="t">{p.name}</div><div className="s">{t('wz.mapHint')}</div></div>
-                        <select className="input" style={{ width: 180 }} aria-label={t('folders.playFor', { name: p.name })} value={p.playAccount ?? ''} onChange={e => act('map', () => api.setProjectAccounts(p.id, e.target.value || null, p.appleAccount))}>
-                          <option value="">{t('folders.noPlay')}</option>{d.accounts.filter(a => a.kind === 'play').map(a => <option key={a.id} value={a.id}>{a.label}</option>)}
-                        </select>
-                        <select className="input" style={{ width: 180 }} aria-label={t('folders.appleFor', { name: p.name })} value={p.appleAccount ?? ''} onChange={e => act('map', () => api.setProjectAccounts(p.id, p.playAccount, e.target.value || null))}>
-                          <option value="">{t('folders.noApple')}</option>{d.accounts.filter(a => a.kind === 'apple').map(a => <option key={a.id} value={a.id}>{a.label}</option>)}
-                        </select>
-                      </div>
-                    ))}
-                  </div>
-                )}
-                <Notice tone="info" icon="shield">{t('accounts.safety')}</Notice>
-              </>
-            )}
-            {step === 3 && (
-              <>
-                <h2 id="wz-title" tabIndex={-1}>{t('wz.toolsTitle')}</h2>
-                <p className="lead">{t('wz.toolsLead')}</p>
-                <div className="checklist">
-                  {tools.map(x => (
-                    <div className="ck" key={x.id}>
-                      <span className={`ck-ic ${x.found ? 'tone-bg-ok' : 'tone-bg-warn'}`}><Icon name={x.found ? 'check' : 'alert'} /></span>
-                      <div className="grow"><div className="t">{x.name}{x.version ? <span className="muted small num"> · {x.version}</span> : null}</div><div className="s">{x.usedFor}</div></div>
-                      {!x.found && (x.id === 'ffmpeg' || x.id === 'chrome') && <button className="btn btn-sm btn-primary" onClick={() => install(x.id as 'ffmpeg' | 'chrome')} disabled={!!busy}><Icon name="download" />{t('deps.download')}</button>}
-                      {!x.found && x.install.kind === 'link' && <button className="btn btn-sm" onClick={() => api.openExternal(x.install.url).catch(() => {})}><Icon name="external" />{t('deps.getIt')}</button>}
-                      {x.found && <Chip tone={x.source === 'app' ? 'accent' : 'ok'}>{x.source === 'app' ? t('deps.appCopy') : t('deps.installed')}</Chip>}
-                    </div>
-                  ))}
-                  {!tools.length && <p className="muted">{t('common.loading')}</p>}
-                </div>
-                <p className="small muted">{t('wz.toolsNote')} <code className="selectable">storebound doctor</code></p>
-              </>
-            )}
-            {step === 4 && (
-              <>
-                <Illo name="cloud" />
-                <h2 id="wz-title" tabIndex={-1}>{t('wz.readTitle')}</h2>
-                <p className="lead">{t('wz.readLead')}</p>
-                <div className="actions">
-                  <button className="btn btn-primary" onClick={() => d.refreshPortfolio(true)} disabled={!!d.portfolioBusy || !d.projects.length}><Icon name="refresh" className={d.portfolioBusy === 'live' ? 'spin' : undefined} />{d.portfolioBusy === 'live' ? t('action.reading') : t('wz.readNow')}</button>
-                  {d.live && <span className="small muted">{t('wz.readDone', { count: liveApps, when: ago(d.live.at) })}</span>}
-                </div>
-                {!d.projects.length && <Notice tone="warn">{t('wz.needApp')}</Notice>}
-              </>
-            )}
-            {error && <Notice tone="bad">{error}</Notice>}
-          </div>
-          <div className="wz-foot">
-            <button className="btn btn-ghost" onClick={onClose}>{step === 4 ? t('common.close') : t('wz.skip')}</button>
-            <span className="grow" />
-            {step > 0 && <button className="btn" onClick={() => setStep(s => s - 1)}><Icon name="arrowLeft" />{t('wz.back')}</button>}
-            {step < 4 ? <button className="btn btn-primary" onClick={() => setStep(s => s + 1)}>{t('wz.next')}<Icon name="arrowRight" /></button>
-              : <button className="btn btn-primary" onClick={onClose}><Icon name="check" />{t('wz.finish')}</button>}
-          </div>
-        </div>
-      </div>
-    </div>
-  );
-}
diff --git a/apps/desktop/src/screens/Portfolio.tsx b/apps/desktop/src/screens/Portfolio.tsx
deleted file mode 100644
index 4b1ed21..0000000
--- a/apps/desktop/src/screens/Portfolio.tsx
+++ /dev/null
@@ -1,220 +0,0 @@
-// Portfolio: every app on both stores. KPIs, one row per app (live version and state per store with its place on
-// the release track, next version, catalog parity, config check), what needs attention, and the workspace state.
-import { useEffect, useState } from 'react';
-import { api, type AppStatus, type Project, type StoreRelease, type ToolResult } from '../api';
-import { type Key, t } from '../i18n';
-import { ago, pct, share } from '../lib/format';
-import { type Attention, attention, healthSeries, type HealthSnapshot, isError, laneOf, PLAY_THRESHOLDS, STAGES, storeNow, type Tone } from '../lib/model';
-import { useNav } from '../nav';
-import { useData } from '../store';
-import { Icon, StoreGlyph } from '../ui/icons';
-import { AppIcon, Card, Chip, Empty, Kpi, Notice, PhaseChip, Skeleton, Sparkline } from '../ui/kit';
-
-/** Tag of one app's offline config check. */
-export function checkState(e: Pick<AppStatus, 'errors' | 'check'> | undefined): { text: string; tone: Tone } {
-  if (!e) return { text: t('check.notChecked'), tone: 'neutral' };
-  if (e.errors.length || !e.check) return { text: t('check.notLoaded'), tone: 'bad' };
-  if (e.check.problems.length) return { text: t('check.problems', { count: e.check.problems.length }), tone: 'bad' };
-  if (e.check.warnings.length) return { text: t('check.warnings', { count: e.check.warnings.length }), tone: 'warn' };
-  return { text: t('check.ok'), tone: 'ok' };
-}
-
-export function Pips({ r, store }: { r: StoreRelease | null; store: 'ios' | 'android' }) {
-  const lane = laneOf(store, r);
-  return (
-    <span className="pips" aria-hidden="true">
-      {STAGES.map((s, i) => <b key={s} className={i < lane.at ? 'on' : i === lane.at ? (lane.tone === 'neutral' ? 'on' : lane.tone === 'accent' ? 'on' : lane.tone) : ''} />)}
-      {lane.share !== null && lane.share < 1 && <span className="pct">{share(lane.share)}</span>}
-    </span>
-  );
-}
-
-function StoreCell({ e, store, project }: { e: AppStatus | undefined; store: 'ios' | 'android'; project: AppStatus | undefined }) {
-  const on = store === 'ios' ? project?.app?.platforms.ios : project?.app?.platforms.android;
-  if (project && !on) return <span className="muted small">{t('app.notOnStore')}</span>;
-  if (!e) return <span className="muted small">{t('common.unknown')}</span>;
-  const err = e.storeErrors[store];
-  if (err) return <span title={err}><Chip tone="warn">{t('portfolio.unreadable')}</Chip></span>;
-  const all = e.release.all ?? [e.release.current?.ios, e.release.current?.android, e.release.next?.ios, e.release.next?.android].filter((x): x is StoreRelease => !!x);
-  const { now, next } = storeNow(all, store);
-  const r = now ?? next;
-  if (!r) return <span className="muted small">{t('portfolio.noVersion')}</span>;
-  return (
-    <div className="mini">
-      <div className="row" style={{ gap: 8 }}><span className="strong num">{r.version}</span><PhaseChip r={r} /></div>
-      <Pips r={r} store={store} />
-      {now && next && <span className="small muted">{t('portfolio.thenNext', { version: next.version ?? '', phase: t(`phase.${next.phase}` as Key) })}</span>}
-    </div>
-  );
-}
-
-function NextCell({ e }: { e: AppStatus | undefined }) {
-  const n = e?.release.next;
-  if (!e) return <span className="muted small">{t('common.unknown')}</span>;
-  if (!n) return <span className="muted small">{t('portfolio.noNext')}</span>;
-  return (
-    <div className="mini">
-      <span className="strong num">{n.version}</span>
-      <div className="row small muted" style={{ gap: 10 }}>
-        {n.ios && <span className="row" style={{ gap: 4 }}><StoreGlyph store="ios" className="ic13" />{t(`phase.${n.ios.phase}`)}</span>}
-        {n.android && <span className="row" style={{ gap: 4 }}><StoreGlyph store="android" className="ic13" />{t(`phase.${n.android.phase}`)}</span>}
-      </div>
-    </div>
-  );
-}
-
-/** Last cached health read of every app (the Health tab reads it; the portfolio only shows what is saved). */
-function useCachedHealth(projects: Project[]): Record<string, { h: HealthSnapshot; at: string } | null> {
-  const [m, set] = useState<Record<string, { h: HealthSnapshot; at: string } | null>>({});
-  const key = projects.map(p => p.id).join();
-  useEffect(() => {
-    for (const p of projects) {
-      api.cached<ToolResult>('health', p.id).then(c => set(x => ({ ...x, [p.id]: c?.value.data ? { h: c.value.data as HealthSnapshot, at: c.at } : null })), () => {});
-    }
-  }, [key]); // eslint-disable-line react-hooks/exhaustive-deps
-  return m;
-}
-
-function HealthCell({ c }: { c: { h: HealthSnapshot; at: string } | null | undefined }) {
-  if (!c) return <span className="muted small">{t('portfolio.healthNotRead')}</span>;
-  const play = c.h.play;
-  if (!play) return <span className="muted small">{t('portfolio.healthNoPlay')}</span>;
-  if (isError(play)) return <Chip tone="warn">{t('portfolio.unreadable')}</Chip>;
-  const s = healthSeries(play.crash, 'userPerceivedCrashRate', PLAY_THRESHOLDS.crash);
-  return (
-    <div className="mini-health" title={t('portfolio.healthTitle', { when: ago(c.at) })}>
-      <Sparkline values={s.values.slice(-14)} threshold={s.threshold} tone={s.tone} label={t('health.chartAria', { metric: t('health.crash'), value: pct(s.current) })} />
-      <span className={`num small strong ${s.tone === 'bad' ? 'tbad' : s.tone === 'warn' ? 'twarn' : ''}`}>{pct(s.current)}</span>
-    </div>
-  );
-}
-
-function AttentionList({ items }: { items: Attention[] }) {
-  const nav = useNav();
-  if (!items.length) return <Empty compact illo="shield" title={t('portfolio.allClear')}>{t('portfolio.allClearText')}</Empty>;
-  return (
-    <div className="list">
-      {items.slice(0, 8).map((a, i) => (
-        <button key={i} className="li" onClick={() => nav.go({ screen: 'app', appId: a.projectId, tab: a.tab ?? 'checks' })}>
-          <span className={`li-icon tone-bg-${a.tone}`}><Icon name={a.tone === 'bad' ? 'alertCircle' : a.tone === 'warn' ? 'alert' : 'info'} /></span>
-          <span className="li-main"><span className="li-title">{a.text}</span><span className="li-sub">{a.app}{a.tab ? ` · ${t(`tab.${a.tab}`)}` : ''}</span></span>
-          <Icon name="chevronRight" className="ic14 muted" />
-        </button>
-      ))}
-    </div>
-  );
-}
-
-export function Portfolio() {
-  const d = useData();
-  const nav = useNav();
-  const open = (p: Project) => nav.go({ screen: 'app', appId: p.id, tab: 'releases' });
-
-  if (d.ready && !d.projects.length) {
-    return (
-      <div className="page">
-        <div className="ph"><div><h1>{t('nav.portfolio')}</h1><p>{t('portfolio.lead')}</p></div></div>
-        <Card pad={false}>
-          <Empty illo="apps" title={t('portfolio.emptyTitle')} actions={<>
-            <button className="btn btn-primary" onClick={() => nav.go({ screen: 'apps' })}><Icon name="folderPlus" />{t('action.addFolder')}</button>
-            <button className="btn" onClick={nav.openWelcome}><Icon name="sparkle" />{t('action.welcome')}</button>
-          </>}>{t('portfolio.emptyText')}</Empty>
-        </Card>
-      </div>
-    );
-  }
-
-  const health = useCachedHealth(d.projects);
-  const rows = d.projects.map(p => ({ p, e: d.statusOf(p), l: d.liveOf(p) }));
-  const lives = rows.map(r => r.l).filter((x): x is AppStatus => !!x);
-  const all = lives.flatMap(l => l.release.all ?? [l.release.current?.ios, l.release.current?.android, l.release.next?.ios, l.release.next?.android].filter((x): x is StoreRelease => !!x));
-  const stores = rows.reduce((n, r) => n + (r.e?.app?.platforms.ios ? 1 : 0) + (r.e?.app?.platforms.android ? 1 : 0), 0);
-  const liveCount = lives.reduce((n, l) => n + (l.release.current?.ios ? 1 : 0) + (l.release.current?.android ? 1 : 0), 0);
-  const rolling = all.filter(r => r.phase === 'rollout');
-  const review = all.filter(r => r.phase === 'review');
-  const att = rows.flatMap(r => attention(r.p.id, r.e?.app?.name ?? r.p.name, r.e, r.l, health[r.p.id]?.h));
-  const blockers = att.filter(a => a.tone === 'bad').length;
-  const known = lives.length > 0;
-  const iosApps = rows.filter(r => r.e?.app?.platforms.ios).length, androidApps = rows.filter(r => r.e?.app?.platforms.android).length;
-
-  return (
-    <div className="page">
-      <div className="ph">
-        <div><h1>{t('nav.portfolio')}</h1><p>{t('portfolio.sub', { count: d.projects.length, stores })}</p></div>
-        <div className="actions">
-          <button className="btn" onClick={() => d.refreshPortfolio(false)} disabled={!!d.portfolioBusy}><Icon name="shield" />{t('action.checkConfigs')}</button>
-          <button className="btn btn-primary" onClick={() => d.refreshPortfolio(true)} disabled={!!d.portfolioBusy} title={t('action.readStoresHint')}>
-            <Icon name="refresh" className={d.portfolioBusy === 'live' ? 'spin' : undefined} />{d.portfolioBusy === 'live' ? t('action.reading') : t('action.readStores')}
-          </button>
-        </div>
-      </div>
-
-      {d.portfolioError && <Notice tone="bad">{d.portfolioError}</Notice>}
-      {!known && d.ready && <Notice tone="info" action={<button className="btn btn-sm" onClick={() => d.refreshPortfolio(true)}>{t('action.readStores')}</button>}>{t('portfolio.notReadNotice')}</Notice>}
-
-      <div className="kpis">
-        <Kpi icon="layers" label={t('kpi.apps')} value={d.projects.length} sub={t('kpi.appsSub', { ios: iosApps, android: androidApps })} />
-        <Kpi icon="check" label={t('kpi.live')} value={known ? liveCount : '–'} sub={known ? t('kpi.liveSub', { count: stores }) : t('kpi.notRead')} />
-        <Kpi icon="rocket" label={t('kpi.rolling')} value={known ? rolling.length : '–'} sub={!known ? t('kpi.notRead') : rolling.length ? [...new Set(rolling.map(r => r.version))].map(v => `${v}: ${rolling.filter(r => r.version === v).map(r => `${r.store === 'ios' ? 'iOS' : 'Android'}${r.fraction !== null ? ` ${share(r.fraction)}` : ''}`).join(', ')}`).join(' · ') : t('kpi.none')} />
-        <Kpi icon="clock" label={t('kpi.review')} value={known ? review.length : '–'} sub={!known ? t('kpi.notRead') : review.length ? review.map(r => `${r.store === 'ios' ? 'iOS' : 'Android'} ${r.version}`).join(' · ') : t('kpi.none')} tone={review.length ? 'warn' : undefined} />
-        <Kpi icon="alert" label={t('kpi.attention')} value={att.length} sub={blockers ? t('kpi.blockers', { count: blockers }) : t('kpi.noBlockers')} tone={blockers ? 'bad' : att.length ? 'warn' : undefined} />
-      </div>
-
-      <Card title={t('portfolio.apps')} icon="portfolio" sub={known ? t('portfolio.appsSub', { when: ago(d.live?.at) }) : t('portfolio.appsSubOffline')} pad={false}
-        actions={<div className="legend-row"><span><span className="pips"><b className="on" /></span>{t('legend.done')}</span><span>{t('legend.stages')}</span></div>}>
-        <div className="table-wrap">
-          <table className="table">
-            <thead><tr>
-              <th>{t('col.app')}</th><th>App Store</th><th>Google Play</th><th>{t('col.next')}</th><th>{t('col.crash')}</th><th>{t('col.catalog')}</th><th className="right">{t('col.config')}</th>
-            </tr></thead>
-            <tbody>
-              {rows.map(({ p, e, l }) => {
-                const st = checkState(e);
-                const cat = l?.catalog ?? e?.catalog;
-                return (
-                  <tr key={p.id} className="clickable" onClick={() => open(p)}>
-                    <td>
-                      <div className="cell-app">
-                        <AppIcon name={e?.app?.name ?? p.name} src={d.icons[p.id]} />
-                        <div className="t">
-                          <button className="link n" onClick={ev => { ev.stopPropagation(); open(p); }}>{e?.app?.name ?? p.name}</button>
-                          <div className="s mono-id">{e?.app?.platforms.ios?.bundleId ?? e?.app?.platforms.android?.packageName ?? ''}</div>
-                        </div>
-                      </div>
-                    </td>
-                    <td>{e ? <StoreCell e={l} store="ios" project={e} /> : <Skeleton lines={2} />}</td>
-                    <td>{e ? <StoreCell e={l} store="android" project={e} /> : <Skeleton lines={2} />}</td>
-                    <td><NextCell e={l} /></td>
-                    <td><HealthCell c={health[p.id]} /></td>
-                    <td>
-                      {cat ? (
-                        <div className="mini">
-                          <span className="num small strong">{t('portfolio.products', { count: cat.products })} · {t('portfolio.subs', { count: cat.subscriptions })}</span>
-                          {cat.checked === 'live' ? (cat.ok ? <Chip tone="ok">{t('portfolio.inParity')}</Chip> : <Chip tone="warn">{t('portfolio.differs', { count: cat.missingIos.length + cat.missingAndroid.length + cat.onlyIos.length + cat.onlyAndroid.length })}</Chip>)
-                            : <span className="small muted">{t('portfolio.configOnly')}</span>}
-                        </div>
-                      ) : <span className="muted small">–</span>}
-                    </td>
-                    <td className="right"><Chip tone={st.tone}>{st.text}</Chip></td>
-                  </tr>
-                );
-              })}
-            </tbody>
-          </table>
-        </div>
-      </Card>
-
-      <div className="grid g-main-side">
-        <Card title={t('portfolio.attention')} icon="alert" sub={t('portfolio.attentionSub')} pad={false}><AttentionList items={att} /></Card>
-        <Card title={t('portfolio.workspace')} icon="settings">
-          <dl className="kv">
-            <dt>{t('nav.accounts')}</dt><dd>{d.accounts.length ? t('portfolio.accounts', { play: d.accounts.filter(a => a.kind === 'play').length, apple: d.accounts.filter(a => a.kind === 'apple').length }) : <button className="link" onClick={() => nav.go({ screen: 'accounts' })}>{t('action.addAccount')}</button>}</dd>
-            <dt>{t('portfolio.storesRead')}</dt><dd>{d.live ? ago(d.live.at) : t('time.never')}</dd>
-            <dt>{t('portfolio.tools')}</dt><dd>{d.sidecar?.tools ? t('portfolio.toolsFound', { found: d.sidecar.tools.tools.filter(x => x.found).length, total: d.sidecar.tools.tools.length }) : '–'}</dd>
-            <dt>CLI</dt><dd>{d.sidecar ? `storebound ${d.sidecar.version}` : d.sidecarError ?? '–'}</dd>
-          </dl>
-        </Card>
-      </div>
-    </div>
-  );
-}
diff --git a/apps/desktop/src/screens/Settings.tsx b/apps/desktop/src/screens/Settings.tsx
deleted file mode 100644
index 35087e3..0000000
--- a/apps/desktop/src/screens/Settings.tsx
+++ /dev/null
@@ -1,66 +0,0 @@
-import { useState } from 'react';
-import { api, errorText } from '../api';
-import { t } from '../i18n';
-import { useNav } from '../nav';
-import { usePrefs } from '../prefs-ctx';
-import { useData } from '../store';
-import { Icon } from '../ui/icons';
-import { Card, Kbd, MOD, Notice, Seg } from '../ui/kit';
-
-export function Settings({ onTheme: _onTheme }: { onTheme: () => void }) {
-  const d = useData();
-  const nav = useNav();
-  const { prefs, update } = usePrefs();
-  const [error, setError] = useState<string | null>(null);
-  const tools = d.sidecar?.tools;
-  const clear = () => api.clearCache().then(() => d.toast({ kind: 'ok', title: t('settings.cacheCleared') }), e => setError(errorText(e)));
-
-  return (
-    <div className="page">
-      <div className="ph"><div><h1>{t('nav.settings')}</h1><p>{t('settings.lead')}</p></div></div>
-      {error && <Notice tone="bad">{error}</Notice>}
-      <div className="grid g2" style={{ alignItems: 'start' }}>
-        <Card title={t('settings.appearance')} icon="sun">
-          <div className="form">
-            <div className="field" role="group" aria-label={t('settings.theme')}><span className="legend">{t('settings.theme')}</span>
-              <Seg value={prefs.theme} onChange={theme => update({ ...prefs, theme })} label={t('settings.theme')} options={[['system', t('settings.system'), 'settings'], ['light', t('settings.light'), 'sun'], ['dark', t('settings.dark'), 'moon']]} /></div>
-            <div className="field" role="group" aria-label={t('settings.motion')}><span className="legend">{t('settings.motion')}</span>
-              <Seg value={prefs.motion} onChange={motion => update({ ...prefs, motion })} label={t('settings.motion')} options={[['system', t('settings.followSystem')], ['reduce', t('settings.reduce')]]} /></div>
-            <div className="field" role="group" aria-label={t('settings.language')}><span className="legend">{t('settings.language')}</span>
-              <Seg value={prefs.lang} onChange={lang => update({ ...prefs, lang })} label={t('settings.language')} options={[['system', t('settings.system')], ['en', 'English'], ['tr', 'Türkçe']]} /></div>
-          </div>
-        </Card>
-        <Card title={t('settings.shortcuts')} icon="keyboard">
-          <dl className="shortcuts">
-            <dt>{t('settings.scPalette')}</dt><dd><Kbd keys={[MOD, 'K']} /></dd>
-            <dt>{t('nav.portfolio')}</dt><dd><Kbd keys={[MOD, '1']} /></dd>
-            <dt>{t('settings.scWorkspace')}</dt><dd><Kbd keys={[MOD, '2']} /><span className="muted">–</span><Kbd keys={[MOD, '5']} /></dd>
-            <dt>{t('settings.scTabs')}</dt><dd><Kbd keys={[MOD, '⇧', '[']} /><Kbd keys={[MOD, '⇧', ']']} /></dd>
-            <dt>{t('settings.scTabArrows')}</dt><dd><Kbd keys={['←', '→']} /></dd>
-            <dt>{t('settings.scClose')}</dt><dd><Kbd keys={['Esc']} /></dd>
-          </dl>
-        </Card>
-        <Card title={t('settings.data')} icon="database">
-          <div className="stack">
-            <p className="small muted">{t('settings.dataText')}</p>
-            <div className="actions">
-              <button className="btn btn-sm" onClick={clear}><Icon name="trash" />{t('settings.clearCache')}</button>
-              <button className="btn btn-sm" onClick={nav.openWelcome}><Icon name="sparkle" />{t('action.welcome')}</button>
-            </div>
-          </div>
-        </Card>
-        <Card title={t('settings.about')} icon="info">
-          <dl className="kv">
-            <dt>{t('settings.app')}</dt><dd>{d.info ? `storebound desktop ${d.info.version}${d.info.debug ? ` (${t('settings.debug')})` : ''}` : '–'}</dd>
-            <dt>CLI</dt><dd>{d.sidecar ? `storebound ${d.sidecar.version} · ${d.sidecar.protocol} · ${t('settings.methods', { count: d.sidecar.methods.length })}` : d.sidecarError ?? t('foot.cliStarting')}</dd>
-            <dt>{t('settings.tools')}</dt><dd>{tools ? t('portfolio.toolsFound', { found: tools.tools.filter(x => x.found).length, total: tools.tools.length }) : '–'}</dd>
-            <dt>{t('settings.telemetry')}</dt><dd>{t('settings.telemetryNone')}</dd>
-          </dl>
-          <div className="actions" style={{ marginTop: 12 }}>
-            <button className="btn btn-sm btn-ghost" onClick={() => api.openExternal('https://storebound.dev/').catch(e => setError(errorText(e)))}><Icon name="external" />storebound.dev</button>
-          </div>
-        </Card>
-      </div>
-    </div>
-  );
-}
diff --git a/apps/desktop/src/screens/tabs/Catalog.tsx b/apps/desktop/src/screens/tabs/Catalog.tsx
deleted file mode 100644
index 06cd007..0000000
--- a/apps/desktop/src/screens/tabs/Catalog.tsx
+++ /dev/null
@@ -1,84 +0,0 @@
-// Catalog: products and subscriptions defined once in the config against both stores (catalog diff): a parity
-// matrix (present, mismatched, missing, not sold there, not read), and price gaps between the stores per region.
-import type { Project } from '../../api';
-import { type Key, t } from '../../i18n';
-import { ago, num } from '../../lib/format';
-import { type CatalogDiff, type CellState, parityMatrix } from '../../lib/model';
-import { useData, useRead } from '../../store';
-import { Icon, type IconName } from '../../ui/icons';
-import { Card, Chip, Empty, Kpi, Notice, Skeleton } from '../../ui/kit';
-
-const CELL: Record<CellState, [IconName, Key]> = { ok: ['check', 'cat.ok'], warn: ['alert', 'cat.warn'], error: ['x', 'cat.error'], na: ['dot', 'cat.na'], unknown: ['info', 'cat.unknown'] };
-
-function Cell({ c }: { c: { state: CellState; notes: string[] } }) {
-  const [icon, key] = CELL[c.state];
-  return (
-    <div>
-      <span className="mx-cell"><span className={`mx-icon mx-${c.state}`}><Icon name={icon} /></span>{t(key)}</span>
-      {c.notes.length > 0 && <ul className="note-list">{c.notes.slice(0, 3).map((n, i) => <li key={i}>{n}</li>)}</ul>}
-    </div>
-  );
-}
-
-export function CatalogTab({ project }: { project: Project }) {
-  const d = useData();
-  const e = d.statusOf(project);
-  const diff = useRead<CatalogDiff>(project.id, 'catalog.diff', { network: true, title: t('tab.catalog') });
-  const s = e?.summary ?? null;
-  if (!e) return <Card><Skeleton lines={5} block /></Card>;
-  const rows = parityMatrix(s, diff.data);
-  const read = !!diff.data;
-  const inParity = rows.filter(r => r.ios.state !== 'error' && r.ios.state !== 'warn' && r.android.state !== 'error' && r.android.state !== 'warn' && r.kind !== 'extra').length;
-  const gaps = diff.data?.parity ?? [];
-
-  if (!rows.length) {
-    return <Card pad={false}><Empty illo="catalog" title={t('cat.emptyTitle')}>{t('cat.emptyText')}</Empty></Card>;
-  }
-  return (
-    <>
-      <div className="kpis" style={{ gridTemplateColumns: 'repeat(4, minmax(0, 1fr))' }}>
-        <Kpi icon="tag" label={t('cat.products')} value={s?.products ?? 0} sub={t('cat.productsSub')} />
-        <Kpi icon="refresh" label={t('cat.subscriptions')} value={s?.subscriptions ?? 0} sub={t('cat.subsSub')} />
-        <Kpi icon="check" label={t('cat.parity')} value={read ? `${inParity}/${rows.filter(r => r.kind !== 'extra').length}` : '–'} sub={read ? t('cat.parityRead', { when: ago(diff.at) }) : t('kpi.notRead')} tone={read && inParity < rows.length ? 'warn' : undefined} />
-        <Kpi icon="globe" label={t('cat.gaps')} value={read ? gaps.length : '–'} sub={read ? t('cat.gapsSub') : t('kpi.notRead')} />
-      </div>
-      {diff.error && <Notice tone="warn">{t('common.readFailedKeep', { error: diff.error })}</Notice>}
-      <Card title={t('cat.matrix')} icon="layers" sub={read ? (diff.fromCache ? t('common.cachedFrom', { when: ago(diff.at) }) : t('common.readWhen', { when: ago(diff.at) })) : t('cat.configOnly')} pad={false}
-        actions={<button className="btn btn-sm" onClick={diff.refresh} disabled={diff.loading}><Icon name="refresh" className={diff.loading ? 'spin' : undefined} />{read ? t('action.refresh') : t('cat.compare')}</button>}>
-        <div className="table-wrap">
-          <table className="table">
-            <thead><tr><th>{t('col.item')}</th><th>{t('col.type')}</th><th>{t('col.config')}</th><th>App Store</th><th>Google Play</th><th className="right">{t('col.priceGap')}</th></tr></thead>
-            <tbody>
-              {rows.map(r => (
-                <tr key={r.id}>
-                  <td><span className="mono-id strong">{r.id}</span></td>
-                  <td>{r.kind === 'extra' ? <Chip tone="warn">{t('cat.extra')}</Chip> : <Chip tone="outline">{r.kind === 'subscription' ? t('cat.sub') : t('cat.product')}</Chip>}</td>
-                  <td className="small">{r.config ? [s?.catalog.ios.includes(r.id) ? 'iOS' : null, s?.catalog.android.includes(r.id) ? 'Android' : null].filter(Boolean).join(' + ') || t('cat.na') : <span className="muted">{t('cat.notInConfig')}</span>}</td>
-                  <td><Cell c={r.ios} /></td>
-                  <td><Cell c={r.android} /></td>
-                  <td className="right">{r.maxDiff !== null ? <Chip tone={r.maxDiff > 25 ? 'bad' : 'warn'}>{`${num(r.maxDiff, 1)} %`}</Chip> : <span className="muted small">{read ? t('cat.noGap') : '–'}</span>}</td>
-                </tr>
-              ))}
-            </tbody>
-          </table>
-        </div>
-      </Card>
-      {gaps.length > 0 && (
-        <Card title={t('cat.gapsTitle')} icon="globe" sub={t('cat.gapsTitleSub')} pad={false}>
-          <table className="table">
-            <thead><tr><th>{t('col.item')}</th><th>{t('col.region')}</th><th className="right">App Store</th><th className="right">Google Play</th><th className="right">{t('col.diff')}</th></tr></thead>
-            <tbody>
-              {gaps.slice(0, 12).map((g, i) => (
-                <tr key={i}>
-                  <td className="mono-id">{g.id}</td><td>{g.region}</td>
-                  <td className="right num">{num(g.apple, 2)} {g.currency}</td><td className="right num">{num(g.play, 2)} {g.currency}</td>
-                  <td className="right"><Chip tone={g.diffPct > 25 ? 'bad' : 'warn'}>{`${num(g.diffPct, 1)} %`}</Chip></td>
-                </tr>
-              ))}
-            </tbody>
-          </table>
-        </Card>
-      )}
-    </>
-  );
-}
diff --git a/apps/desktop/src/screens/tabs/Checks.tsx b/apps/desktop/src/screens/tabs/Checks.tsx
deleted file mode 100644
index 186d162..0000000
--- a/apps/desktop/src/screens/tabs/Checks.tsx
+++ /dev/null
@@ -1,58 +0,0 @@
-// Checks: the offline config check (every time) and the read-only store readiness report (`validate`, on demand)
-// with its ordered blockers and fix hints.
-import type { Project } from '../../api';
-import { t } from '../../i18n';
-import { ago } from '../../lib/format';
-import type { Finding, ValidateResult } from '../../lib/model';
-import { useData, useRead } from '../../store';
-import { Icon } from '../../ui/icons';
-import { Card, Chip, Empty, Notice, Skeleton } from '../../ui/kit';
-
-const LEVEL: Record<Finding['level'], ['bad' | 'warn' | 'ok', 'alertCircle' | 'alert' | 'check']> = { blocker: ['bad', 'alertCircle'], warn: ['warn', 'alert'], ok: ['ok', 'check'] };
-
-export function ChecksTab({ project }: { project: Project }) {
-  const d = useData();
-  const e = d.statusOf(project);
-  const v = useRead<ValidateResult>(project.id, 'validate', { network: true, title: t('checks.validate') });
-  const problems = [...(e?.errors ?? []), ...(e?.check?.problems ?? [])];
-  const warnings = e?.check?.warnings ?? [];
-  const findings = [...(v.data?.findings ?? [])].sort((a, b) => ['blocker', 'warn', 'ok'].indexOf(a.level) - ['blocker', 'warn', 'ok'].indexOf(b.level));
-  return (
-    <div className="grid g2" style={{ alignItems: 'start' }}>
-      <Card title={t('checks.offline')} icon="shield" sub={t('checks.offlineSub')} pad={false}
-        actions={<button className="btn btn-sm" onClick={() => d.refreshPortfolio(false)} disabled={!!d.portfolioBusy}><Icon name="refresh" className={d.portfolioBusy === 'offline' ? 'spin' : undefined} />{t('checks.again')}</button>}>
-        {!e ? <div className="card-body"><Skeleton lines={4} /></div> : !problems.length && !warnings.length ? (
-          <Empty compact illo="shield" title={t('checks.clean')}>{t('checks.cleanText')}</Empty>
-        ) : (
-          <div className="list">
-            {problems.map((p, i) => <div className="li" key={`p${i}`}><span className="li-icon tone-bg-bad"><Icon name="alertCircle" /></span><div className="li-main"><span className="li-title">{p}</span><span className="li-sub">{t('checks.problem')}</span></div></div>)}
-            {warnings.map((w, i) => <div className="li" key={`w${i}`}><span className="li-icon tone-bg-warn"><Icon name="alert" /></span><div className="li-main"><span className="li-title">{w}</span><span className="li-sub">{t('checks.warning')}</span></div></div>)}
-          </div>
-        )}
-      </Card>
-      <Card title={t('checks.validate')} icon="layers" sub={v.data ? (v.fromCache ? t('common.cachedFrom', { when: ago(v.at) }) : t('common.readWhen', { when: ago(v.at) })) : t('checks.validateSub')} pad={false}
-        actions={<button className="btn btn-sm" onClick={v.refresh} disabled={v.loading}><Icon name="refresh" />{v.data ? t('action.refresh') : t('checks.run')}</button>}>
-        {v.error && <div className="card-body"><Notice tone="warn">{v.error}</Notice></div>}
-        {!v.data ? (
-          v.loading && !v.error ? <div className="card-body"><Skeleton lines={4} /></div> : <Empty compact illo="cloud" title={t('checks.validateEmpty')}>{t('checks.validateEmptyText')}</Empty>
-        ) : !findings.length ? <Empty compact illo="shield" title={t('checks.ready')}>{t('checks.readyText')}</Empty> : (
-          <div className="list">
-            {findings.map((f, i) => {
-              const [tone, icon] = LEVEL[f.level];
-              return (
-                <div className="li" key={i}>
-                  <span className={`li-icon tone-bg-${tone}`}><Icon name={icon} /></span>
-                  <div className="li-main">
-                    <span className="li-title">{f.msg}</span>
-                    {f.fix && <span className="fix"><Icon name="wand" /><code className="selectable">{f.fix}</code></span>}
-                  </div>
-                  <Chip tone="outline">{f.store === 'apple' ? 'App Store' : 'Google Play'}</Chip>
-                </div>
-              );
-            })}
-          </div>
-        )}
-      </Card>
-    </div>
-  );
-}
diff --git a/apps/desktop/src/screens/tabs/Health.tsx b/apps/desktop/src/screens/tabs/Health.tsx
deleted file mode 100644
index 4f07064..0000000
--- a/apps/desktop/src/screens/tabs/Health.tsx
+++ /dev/null
@@ -1,151 +0,0 @@
-// Health: Google Play vitals (user-perceived crash and ANR rate per day against the bad behavior thresholds, worst
-// devices, top issues) and App Store diagnostics (power and performance metrics, signatures, TestFlight crashes).
-import type { Project } from '../../api';
-import { t } from '../../i18n';
-import { ago, date, num, pct } from '../../lib/format';
-import { type AppleHealth, healthSeries, type HealthSnapshot, isError, PLAY_THRESHOLDS, type PlayHealth, type Series } from '../../lib/model';
-import { useRead } from '../../store';
-import { Icon } from '../../ui/icons';
-import { Bar, Card, Chip, Empty, Notice, Skeleton, Sparkline } from '../../ui/kit';
-
-function Metric({ title, s }: { title: string; s: Series }) {
-  return (
-    <Card title={title} icon="activity" sub={t('health.window', { from: date(s.dates[0]), to: date(s.dates.at(-1)) })}
-      actions={<Chip tone={s.tone === 'neutral' ? 'neutral' : s.tone}>{s.tone === 'bad' ? t('health.over') : s.tone === 'warn' ? t('health.near') : s.tone === 'ok' ? t('health.under') : t('common.unknown')}</Chip>}>
-      <div className="metric">
-        <div className="metric-top">
-          <div>
-            <div className={`metric-val ${s.tone}`}>{pct(s.current)}</div>
-            <div className="small muted">{t('health.current28')}</div>
-          </div>
-          <div className="metric-legend">
-            <span className="lg"><span className={`sw ${s.tone}`} />{t('health.daily')}</span>
-            <span className="lg"><span className="sw thr" />{t('health.threshold', { value: pct(s.threshold) })}</span>
-          </div>
-        </div>
-        <Sparkline values={s.values} threshold={s.threshold} tone={s.tone} label={t('health.chartAria', { metric: title, value: pct(s.current) })} />
-        <div className="axis"><span>{date(s.dates[0])}</span><span>{date(s.dates[Math.floor(s.dates.length / 2)])}</span><span>{date(s.dates.at(-1))}</span></div>
-      </div>
-    </Card>
-  );
-}
-
-function Play({ h }: { h: PlayHealth }) {
-  const crash = healthSeries(h.crash, 'userPerceivedCrashRate', PLAY_THRESHOLDS.crash);
-  const anr = healthSeries(h.anr, 'userPerceivedAnrRate', PLAY_THRESHOLDS.anr);
-  const devices = (h.devices ?? []).slice(0, 6);
-  const worst = Math.max(PLAY_THRESHOLDS.perDevice, ...devices.map(x => Math.max(x.crash ?? 0, x.anr ?? 0)));
-  return (
-    <>
-      <div className="grid g2">
-        <Metric title={t('health.crash')} s={crash} />
-        <Metric title={t('health.anr')} s={anr} />
-      </div>
-      <div className="grid g2">
-        <Card title={t('health.devices')} icon="phone" sub={t('health.devicesSub', { value: pct(PLAY_THRESHOLDS.perDevice, 0) })}>
-          {devices.length ? (
-            <div className="hbars">
-              {devices.map(x => {
-                const v = Math.max(x.crash ?? 0, x.anr ?? 0);
-                return (
-                  <div className="hbar" key={x.model}>
-                    <span className="nm">{x.model}</span>
-                    <Bar value={v / worst} tone={v >= PLAY_THRESHOLDS.perDevice ? 'bad' : v >= PLAY_THRESHOLDS.perDevice * 0.8 ? 'warn' : 'ok'} label={x.model} />
-                    <span className="num right small">{pct(v)}</span>
-                  </div>
-                );
-              })}
-            </div>
-          ) : <p className="muted">{t('health.noDevices')}</p>}
-        </Card>
-        <Card title={t('health.issues')} icon="alert" sub={t('health.issuesSub')} pad={false}>
-          {h.issues.length ? (
-            <table className="table">
-              <thead><tr><th>{t('col.issue')}</th><th className="right">{t('col.reports')}</th><th className="right">{t('col.users')}</th></tr></thead>
-              <tbody>
-                {h.issues.slice(0, 6).map((i, n) => (
-                  <tr key={n}>
-                    <td><div className="row" style={{ gap: 8 }}><Chip tone={i.type === 'ANR' ? 'warn' : 'bad'}>{i.type === 'ANR' ? 'ANR' : t('health.crashShort')}</Chip><span className="strong" style={{ overflow: 'hidden', textOverflow: 'ellipsis', whiteSpace: 'nowrap', maxWidth: 260 }}>{i.cause || '?'}</span></div>
-                      <div className="mono-id muted" style={{ marginTop: 4, overflow: 'hidden', textOverflow: 'ellipsis', whiteSpace: 'nowrap', maxWidth: 360 }}>{i.location}</div></td>
-                    <td className="right num">{num(i.reports)}</td><td className="right num">{num(i.users)}</td>
-                  </tr>
-                ))}
-              </tbody>
-            </table>
-          ) : <Empty compact illo="shield" title={t('health.noIssues')} />}
-        </Card>
-      </div>
-    </>
-  );
-}
-
-function Apple({ h }: { h: AppleHealth }) {
-  const maxCrash = Math.max(1, ...h.betaCrashes.map(b => b.count));
-  return (
-    <div className="grid g2">
-      <Card title={t('health.appleMetrics')} icon="activity" sub={t('health.appleMetricsSub')} pad={false}>
-        {h.metrics.length ? (
-          <table className="table">
-            <thead><tr><th>{t('col.metric')}</th><th className="right">{t('col.value')}</th><th>{t('col.version')}</th><th>{t('col.goal')}</th></tr></thead>
-            <tbody>
-              {h.metrics.slice(0, 8).map((m, i) => (
-                <tr key={i}><td><div className="strong">{m.metric}</div><div className="small muted">{m.category}</div></td><td className="right num strong">{num(m.value, m.value < 10 ? 2 : 0)} <span className="muted small">{m.unit}</span></td>
-                  <td className="num muted">{m.version}</td><td>{m.goal ? <Chip tone={m.goal === 'poor' ? 'bad' : m.goal === 'fair' ? 'warn' : 'ok'}>{m.goal}</Chip> : '–'}</td></tr>
-              ))}
-            </tbody>
-          </table>
-        ) : <Empty compact illo="pulse" title={t('health.noMetrics')} />}
-      </Card>
-      <div className="stack" style={{ gap: 16 }}>
-        <Card title={t('health.signatures')} icon="layers" sub={t('health.signaturesSub')} pad={false}>
-          {h.signatures.length ? (
-            <div className="list">
-              {h.signatures.slice(0, 5).map((s, i) => (
-                <div className="li" key={i}>
-                  <span className="li-icon tone-bg-neutral"><Icon name="alertCircle" /></span>
-                  <div className="li-main"><span className="li-title" style={{ overflow: 'hidden', textOverflow: 'ellipsis', whiteSpace: 'nowrap' }}>{s.signature || s.type}</span><span className="li-sub">{s.type} · {t('health.build', { build: s.build })}</span></div>
-                  <span className="num small strong">{num(s.weight * 100, 1)}%</span>
-                </div>
-              ))}
-            </div>
-          ) : <Empty compact illo="shield" title={t('health.noSignatures')} />}
-        </Card>
-        <Card title={t('health.betaCrashes')} icon="plane">
-          {h.betaCrashes.length ? (
-            <div className="hbars">{h.betaCrashes.slice(0, 5).map(b => (
-              <div className="hbar" key={b.build}><span className="nm">{t('health.build', { build: b.build })}</span><Bar value={b.count / maxCrash} tone="warn" label={b.build} /><span className="num right small">{num(b.count)}</span></div>
-            ))}</div>
-          ) : <p className="muted">{t('health.noBetaCrashes')}</p>}
-        </Card>
-      </div>
-    </div>
-  );
-}
-
-export function HealthTab({ project }: { project: Project }) {
-  const r = useRead<HealthSnapshot>(project.id, 'health', { network: true, title: t('tab.health') });
-  const refresh = <button className="btn btn-sm" onClick={r.refresh} disabled={r.loading}><Icon name="refresh" className={r.loading && !r.data ? 'spin' : undefined} />{r.data ? t('action.refresh') : t('health.read')}</button>;
-  if (!r.data) {
-    if (r.loading && !r.error) return <Card><Skeleton lines={4} block /></Card>;
-    return (
-      <Card pad={false}>
-        <Empty illo="pulse" title={t('health.emptyTitle')} actions={<button className="btn btn-primary" onClick={r.refresh}><Icon name="refresh" />{t('health.read')}</button>}>{t('health.emptyText')}</Empty>
-        {r.error && <div className="card-foot"><Icon name="alertCircle" />{r.error}</div>}
-      </Card>
-    );
-  }
-  const h = r.data;
-  return (
-    <>
-      <div className="row between">
-        <span className="stamp"><Icon name="clock" />{r.fromCache ? t('common.cachedFrom', { when: ago(r.at) }) : t('common.readWhen', { when: ago(r.at) })}</span>
-        {refresh}
-      </div>
-      {r.error && <Notice tone="warn">{t('common.readFailedKeep', { error: r.error })}</Notice>}
-      <h2 className="label">Google Play</h2>
-      {h.play === undefined ? <Notice tone="info">{t('health.noPlay')}</Notice> : isError(h.play) ? <Notice tone="warn">{t('health.unreadable', { store: 'Google Play', error: h.play.error })}</Notice> : <Play h={h.play} />}
-      <h2 className="label">App Store</h2>
-      {h.apple === undefined ? <Notice tone="info">{t('health.noApple')}</Notice> : isError(h.apple) ? <Notice tone="warn">{t('health.unreadable', { store: 'App Store', error: h.apple.error })}</Notice> : <Apple h={h.apple} />}
-    </>
-  );
-}
diff --git a/apps/desktop/src/screens/tabs/Listings.tsx b/apps/desktop/src/screens/tabs/Listings.tsx
deleted file mode 100644
index ff43a3b..0000000
--- a/apps/desktop/src/screens/tabs/Listings.tsx
+++ /dev/null
@@ -1,93 +0,0 @@
-// Listings: per language and store, which listing fields are written and within the store limits (from the listing
-// files in the app folder), and how many screenshots are rendered per language.
-import type { ListingField, ListingLocale, ListingsResult, Project } from '../../api';
-import { type Key, t } from '../../i18n';
-import { ago, num } from '../../lib/format';
-import { useRead } from '../../store';
-import { Icon } from '../../ui/icons';
-import { Card, Chip, Empty, Kpi, Notice, Skeleton } from '../../ui/kit';
-
-const FIELD_KEY: Record<string, Key> = {
-  title: 'lst.title', short: 'lst.short', full: 'lst.full', whatsNew: 'lst.whatsNew', name: 'lst.name', subtitle: 'lst.subtitle',
-  promotionalText: 'lst.promo', keywords: 'lst.keywords', description: 'lst.description',
-};
-
-function FieldCell({ f }: { f: ListingField | undefined }) {
-  if (!f) return <span className="muted small">–</span>;
-  const ratio = f.limit ? Math.min(1, f.length / f.limit) : 0;
-  const tone = f.state === 'over' || f.state === 'missing' ? 'bad' : ratio > 0.97 ? 'warn' : '';
-  const label = f.state === 'missing' ? t('lst.missing') : f.state === 'empty-optional' ? t('lst.optional') : f.state === 'over' ? t('lst.over', { n: f.length - f.limit }) : `${num(f.length)} / ${num(f.limit)}`;
-  return (
-    <div className={`lg-cell ${f.state}`} title={`${f.length} / ${f.limit}`}>
-      <div className={`bar thin ${f.state === 'empty-optional' ? '' : tone}`}><span style={{ width: `${f.state === 'missing' ? 100 : ratio * 100}%`, opacity: f.state === 'missing' ? 0.25 : 1 }} /></div>
-      <span className="c"><span>{label}</span></span>
-    </div>
-  );
-}
-
-function Ring({ value }: { value: number }) {
-  const tone = value >= 1 ? 'var(--ok-solid)' : value >= 0.6 ? 'var(--warn-solid)' : 'var(--bad-solid)';
-  return (
-    <span className={`ring${value >= 1 ? ' full' : ''}`} style={{ ['--p' as string]: Math.round(value * 100), ['--ring' as string]: tone }} role="img" aria-label={t('lst.completeAria', { pct: Math.round(value * 100) })}>
-      <span>{value >= 1 ? <Icon name="check" /> : `${Math.round(value * 100)}%`}</span>
-    </span>
-  );
-}
-
-function StoreGrid({ store, locales }: { store: 'play' | 'apple'; locales: ListingLocale[] }) {
-  const fields = locales.find(l => l[store])?.[store]?.fields.map(f => f.field) ?? [];
-  const done = (l: ListingLocale) => {
-    const fs = l[store]?.fields.filter(f => f.required) ?? [];
-    return fs.length ? fs.filter(f => f.state === 'ok').length / fs.length : 0;
-  };
-  return (
-    <Card title={store === 'play' ? 'Google Play' : 'App Store'} icon="text" sub={store === 'play' ? t('lst.playSub') : t('lst.appleSub')} pad={false}>
-      <div className="lg-grid" style={{ ['--cols' as string]: fields.length }}>
-        <div className="lg-row head"><span>{t('col.language')}</span>{fields.map(f => <span key={f}>{t(FIELD_KEY[f] ?? 'lst.title')}</span>)}<span style={{ textAlign: 'right' }}>{t('lst.complete')}</span></div>
-        {locales.map(l => (
-          <div className="lg-row" key={l.lang}>
-            <div className="lg-lang"><span className="mono-id strong">{l.lang}</span><span className="small muted">{l[store]?.code ?? ''}</span>{l.rtl && <Chip tone="outline">RTL</Chip>}</div>
-            {fields.map(f => <FieldCell key={f} f={l[store]?.fields.find(x => x.field === f)} />)}
-            <div style={{ display: 'flex', justifyContent: 'flex-end' }}><Ring value={done(l)} /></div>
-          </div>
-        ))}
-      </div>
-    </Card>
-  );
-}
-
-export function ListingsTab({ project }: { project: Project }) {
-  const r = useRead<ListingsResult>(project.id, 'project.listings', { network: false });
-  if (!r.data) {
-    if (r.error) return <Notice tone="bad">{r.error}</Notice>;
-    return <Card><Skeleton lines={6} block /></Card>;
-  }
-  const L = r.data;
-  const missing = L.locales.reduce((n, l) => n + [...(l.play?.fields ?? []), ...(l.apple?.fields ?? [])].filter(f => f.state === 'missing' || f.state === 'over').length, 0);
-  const avg = L.locales.length ? L.locales.reduce((n, l) => n + l.complete, 0) / L.locales.length : 0;
-  const shots = L.locales.reduce((n, l) => n + (l.screenshots ?? 0), 0);
-  const noFiles = !L.files.play && !L.files.apple;
-  return (
-    <>
-      <div className="kpis" style={{ gridTemplateColumns: 'repeat(4, minmax(0, 1fr))' }}>
-        <Kpi icon="globe" label={t('lst.languages')} value={L.locales.length} sub={L.locales.map(l => l.lang).join(' · ')} />
-        <Kpi icon="check" label={t('lst.completeKpi')} value={noFiles ? '–' : `${Math.round(avg * 100)}%`} sub={t('lst.completeSub')} tone={!noFiles && avg < 1 ? 'warn' : undefined} />
-        <Kpi icon="alert" label={t('lst.toFix')} value={noFiles ? '–' : missing} sub={t('lst.toFixSub')} tone={missing ? 'bad' : undefined} />
-        <Kpi icon="image" label={t('lst.screenshots')} value={L.locales.some(l => l.screenshots !== null) ? shots : '–'} sub={L.locales.some(l => l.screenshots !== null) ? t('lst.screenshotsSub') : t('lst.noRenders')} />
-      </div>
-      {L.problems.map((p, i) => <Notice key={i} tone="warn">{p}</Notice>)}
-      {noFiles ? (
-        <Card pad={false}>
-          <Empty illo="text" title={t('lst.noFilesTitle')}>{t('lst.noFilesText')}</Empty>
-          <div className="card-foot"><Icon name="terminal" /><code className="selectable">storebound init</code><span>{t('lst.noFilesHint')}</span></div>
-        </Card>
-      ) : (
-        <>
-          {L.files.play && <StoreGrid store="play" locales={L.locales} />}
-          {L.files.apple && <StoreGrid store="apple" locales={L.locales} />}
-        </>
-      )}
-      <p className="small muted">{t('lst.foot', { when: ago(r.at) })}</p>
-    </>
-  );
-}
diff --git a/apps/desktop/src/screens/tabs/Releases.tsx b/apps/desktop/src/screens/tabs/Releases.tsx
deleted file mode 100644
index 8ddb316..0000000
--- a/apps/desktop/src/screens/tabs/Releases.tsx
+++ /dev/null
@@ -1,116 +0,0 @@
-// Releases: the release timeline (one version on both stores on one track: build -> testing -> review -> live ->
-// rollout %), then every version read from the stores. Submit and release stay in the consoles.
-import { api, type Project, type ReleaseTrain } from '../../api';
-import { type Key, t } from '../../i18n';
-import { ago, date, share } from '../../lib/format';
-import { type Lane, STAGES, type TestFlightStatus, trainLanes, versionHistory } from '../../lib/model';
-import { useData, useRead } from '../../store';
-import { Icon, StoreGlyph } from '../../ui/icons';
-import { Bar, Card, Chip, Empty, Notice, PhaseChip, storeName } from '../../ui/kit';
-import { ascUrl, PLAY_CONSOLE } from '../AppView';
-
-const STAGE_KEY: Record<(typeof STAGES)[number], Key> = { build: 'stage.build', testing: 'stage.testing', review: 'stage.review', live: 'stage.live', rollout: 'stage.rollout' };
-
-function stageCaption(l: Lane, i: number): string {
-  if (i !== l.at || !l.release) return '';
-  const r = l.release;
-  if (i === 1) return r.store === 'ios' ? 'TestFlight' : (r.track ?? t('stage.testing'));
-  if (i === 2) return t(`phase.${r.phase}` as Key);
-  return '';
-}
-
-function LaneRow({ lane, version }: { lane: Lane; version: string }) {
-  const r = lane.release;
-  return (
-    <div className="tl-lane">
-      <div className="tl-who">
-        <StoreGlyph store={lane.store} />
-        <div>
-          <div className="w1">{storeName(lane.store)}</div>
-          <div className="w2">{r ? `${version}${r.build ? ` (${r.build})` : ''}` : t('tl.notOnStore')}</div>
-        </div>
-      </div>
-      {lane.at < 0 ? <div className="tl-none">{t('tl.noVersion', { version, store: storeName(lane.store) })}</div> : STAGES.map((s, i) => {
-        const cls = i < lane.at ? 'done' : i === lane.at ? `cur ${lane.tone}` : '';
-        const last = s === 'rollout';
-        return (
-          <div key={s} className={`tl-step ${cls}${i === 0 ? ' first' : ''}`} title={i === lane.at ? r?.state : undefined}>
-            <span className="tl-node">{i < lane.at && <Icon name="check" />}</span>
-            {last && i === lane.at && lane.share !== null ? (
-              <div className="tl-roll"><Bar value={lane.share} tone={lane.tone === 'bad' ? 'bad' : lane.share >= 1 ? 'ok' : 'accent'} label={t('tl.rolloutAria')} />
-                <span className="pct">{lane.share >= 1 ? t('tl.everyone') : `${share(lane.share)}${r?.phased?.day ? ` · ${t('tl.day', { day: r.phased.day })}` : ''}`}</span></div>
-            ) : <span className="tl-cap">{stageCaption(lane, i)}</span>}
-          </div>
-        );
-      })}
-    </div>
-  );
-}
-
-function Train({ title, train, tf, tone }: { title: string; train: ReleaseTrain; tf: TestFlightStatus | null; tone: 'accent' | 'ok' }) {
-  const lanes = trainLanes(train, tf);
-  return (
-    <Card pad={false} title={<span className="train-head"><span className="ver">{train.version}</span><Chip tone={tone}>{title}</Chip></span>}
-      sub={[train.ios?.date ? t('tl.created', { date: date(train.ios.date) }) : null].filter(Boolean).join(' · ') || undefined}>
-      <div className="tl" style={{ paddingTop: 12 }}>
-        <div className="tl-head"><span>{t('tl.store')}</span>{STAGES.map(s => <span key={s}>{t(STAGE_KEY[s])}</span>)}</div>
-        {lanes.map(l => <LaneRow key={l.store} lane={l} version={train.version} />)}
-      </div>
-    </Card>
-  );
-}
-
-export function ReleasesTab({ project }: { project: Project }) {
-  const d = useData();
-  const l = d.liveOf(project);
-  const tf = useRead<TestFlightStatus>(project.id, 'apple.testflight_status', { network: true, title: 'TestFlight' });
-  const open = (url: string) => { api.openExternal(url).catch(() => {}); };
-
-  if (!l) {
-    return (
-      <Card pad={false}>
-        <Empty illo="cloud" title={t('releases.notReadTitle')} actions={<>
-          <button className="btn btn-primary" onClick={() => d.refreshPortfolio(true)} disabled={!!d.portfolioBusy}><Icon name="refresh" />{t('action.readStores')}</button>
-          {!project.playAccount && !project.appleAccount && <span className="small muted">{t('releases.noAccounts')}</span>}
-        </>}>{t('releases.notReadText')}</Empty>
-      </Card>
-    );
-  }
-  const history = versionHistory(l.release.all ?? []);
-  const errs = Object.entries(l.storeErrors);
-  return (
-    <>
-      {errs.map(([s, msg]) => <Notice key={s} tone="warn">{t('releases.storeUnreadable', { store: storeName(s as 'ios'), error: msg })}</Notice>)}
-      {l.release.next && <Train title={t('tl.next')} train={l.release.next} tf={tf.data} tone="accent" />}
-      {l.release.current && <Train title={t('tl.live')} train={l.release.current} tf={tf.data} tone="ok" />}
-      {!l.release.next && !l.release.current && <Card pad={false}><Empty compact illo="unknown" title={t('releases.noVersions')}>{t('releases.noVersionsText')}</Empty></Card>}
-
-      <Card title={t('releases.history')} icon="layers" sub={t('releases.historySub', { when: ago(d.live?.at ?? d.portfolio?.at) })} pad={false}>
-        {history.length ? (
-          <div className="table-wrap">
-            <table className="table">
-              <thead><tr><th>{t('col.version')}</th><th>App Store</th><th>{t('col.build')}</th><th>Google Play</th><th>{t('col.versionCode')}</th><th>{t('col.track')}</th></tr></thead>
-              <tbody>
-                {history.map(h => (
-                  <tr key={h.version}>
-                    <td className="strong num">{h.version}</td>
-                    <td>{h.ios ? <PhaseChip r={h.ios} /> : <span className="muted small">–</span>}</td>
-                    <td className="num muted">{h.ios?.build ?? '–'}</td>
-                    <td>{h.android ? <PhaseChip r={h.android} /> : <span className="muted small">–</span>}</td>
-                    <td className="num muted">{h.android?.build ?? '–'}</td>
-                    <td className="muted">{h.android?.track ?? '–'}</td>
-                  </tr>
-                ))}
-              </tbody>
-            </table>
-          </div>
-        ) : <Empty compact illo="unknown" title={t('releases.noVersions')} />}
-      </Card>
-
-      <Notice tone="info" icon="shield" action={<div className="actions">
-        {l.app?.platforms.ios && <button className="btn btn-sm" onClick={() => open(ascUrl(l.app?.platforms.ios?.ascAppId))}><Icon name="external" />App Store Connect</button>}
-        {l.app?.platforms.android && <button className="btn btn-sm" onClick={() => open(PLAY_CONSOLE)}><Icon name="external" />Play Console</button>}
-      </div>}>{t('releases.consoleNote')}</Notice>
-    </>
-  );
-}
diff --git a/apps/desktop/src/screens/tabs/Reviews.tsx b/apps/desktop/src/screens/tabs/Reviews.tsx
deleted file mode 100644
index 964786f..0000000
--- a/apps/desktop/src/screens/tabs/Reviews.tsx
+++ /dev/null
@@ -1,152 +0,0 @@
-// Reviews: the inbox of both stores with the star distribution and filters, and per review its local reply draft
-// (.storebound/replies) with the send checks. Approving a draft is a local, confirmed write; sending stays in the
-// terminal (`storebound reviews send`): replies are public.
-import { useMemo, useState } from 'react';
-import { api, type DraftsResult, errorText, newJob, type Project, type ReplyDraft } from '../../api';
-import { t } from '../../i18n';
-import { ago, date, num } from '../../lib/format';
-import { draftName, filterReviews, type Review, type ReviewFilter, starStats } from '../../lib/model';
-import { useData, useRead } from '../../store';
-import { Icon, StoreGlyph } from '../../ui/icons';
-import { Bar, Card, Chip, Empty, Notice, Seg, Skeleton, Stars } from '../../ui/kit';
-
-const base = (f: string) => f.split(/[\\/]/).pop() ?? f;
-
-function Detail({ r, draft, onApprove, busy }: { r: Review; draft: ReplyDraft | undefined; onApprove: (d: ReplyDraft, undo: boolean) => void; busy: boolean }) {
-  const errors = draft?.issues.filter(i => i.level === 'error') ?? [];
-  return (
-    <Card className="rv-detail" title={<span className="row" style={{ gap: 10 }}><Stars n={r.rating} />{r.title || t('reviews.noTitle')}</span>}
-      sub={<span className="row" style={{ gap: 6 }}><StoreGlyph store={r.store === 'apple' ? 'ios' : 'android'} className="ic13" />{r.store === 'apple' ? 'App Store' : 'Google Play'}{r.where ? ` · ${r.where}` : ''} · {date(r.date)}{r.appVersion ? ` · ${t('reviews.version', { v: r.appVersion })}` : ''}</span>}>
-      <div className="stack" style={{ gap: 16 }}>
-        <p className="quote selectable">{r.body || t('reviews.noText')}</p>
-        {r.reply && (
-          <div className="stack" style={{ gap: 6 }}>
-            <span className="label">{t('reviews.currentReply')}{r.reply.date ? ` · ${date(r.reply.date)}` : ''}</span>
-            <div className="reply-box selectable">{r.reply.text}</div>
-          </div>
-        )}
-        <hr className="divider" />
-        <div className="stack" style={{ gap: 8 }}>
-          <div className="row between">
-            <span className="label">{t('reviews.draft')}</span>
-            {draft && (draft.sent ? <Chip tone="ok">{t('reviews.sentOn', { date: date(draft.sent) })}</Chip> : draft.approved ? <Chip tone="ok" icon="check">{t('reviews.approved')}</Chip> : <Chip tone="neutral">{t('reviews.notApproved')}</Chip>)}
-          </div>
-          {!draft ? <p className="muted small">{t('reviews.noDraft')}</p> : (
-            <>
-              {draft.reply ? <div className="reply-box selectable">{draft.reply}</div> : <p className="muted small">{t('reviews.emptyDraft', { file: base(draft.file) })}</p>}
-              <div className="row small muted" style={{ gap: 10 }}><span className="num">{t('reviews.chars', { n: num([...draft.reply].length), limit: r.store === 'play' ? 350 : 5970 })}</span><span className="mono-id">{base(draft.file)}</span></div>
-              {draft.issues.length > 0 && (
-                <ul className="issues">
-                  {draft.issues.map((i, n) => <li key={n} className={i.level === 'error' ? 'e' : 'w'}><Icon name={i.level === 'error' ? 'alertCircle' : 'alert'} />{i.msg}</li>)}
-                </ul>
-              )}
-              {!draft.sent && (
-                <div className="actions">
-                  {draft.approved
-                    ? <button className="btn" onClick={() => onApprove(draft, true)} disabled={busy}>{t('reviews.unapprove')}</button>
-                    : <button className="btn btn-primary" onClick={() => onApprove(draft, false)} disabled={busy || !draft.reply || errors.length > 0} title={errors.length ? t('reviews.fixFirst') : t('reviews.approveHint')}><Icon name="check" />{t('reviews.approve')}</button>}
-                </div>
-              )}
-            </>
-          )}
-          <p className="small muted">{t('reviews.sendNote')} <code className="selectable">storebound reviews send</code></p>
-        </div>
-      </div>
-    </Card>
-  );
-}
-
-export function ReviewsTab({ project }: { project: Project }) {
-  const d = useData();
-  const list = useRead<Review[]>(project.id, 'reviews.list', { network: true, args: { days: 30 }, title: t('tab.reviews') });
-  const drafts = useRead<DraftsResult>(project.id, 'reviews.drafts', { network: false });
-  const [f, setF] = useState<ReviewFilter>({ store: 'all', stars: [], unanswered: false, query: '' });
-  const [sel, setSel] = useState<string | null>(null);
-  const [busy, setBusy] = useState(false);
-
-  const all = list.data ?? [];
-  const stats = useMemo(() => starStats(f.store === 'all' ? all : all.filter(r => r.store === f.store)), [all, f.store]);
-  const shown = useMemo(() => filterReviews(all, f), [all, f]);
-  const byFile = useMemo(() => new Map((drafts.data?.drafts ?? []).map(x => [base(x.file), x] as const)), [drafts.data]);
-  const cur = shown.find(r => `${r.store}:${r.id}` === sel) ?? shown.find(r => !r.reply && byFile.has(draftName(r))) ?? shown[0];
-
-  const write = async (method: string, args: Record<string, unknown>, title: string) => {
-    setBusy(true);
-    const job = newJob(method);
-    try {
-      const o = await api.writeWithConfirm(method, project.id, args, job);
-      if (o.confirmed && o.result?.ok) { d.toast({ kind: 'ok', title, detail: undefined }); await drafts.refresh(); }
-      else if (o.stage === 'dry-run') d.toast({ kind: 'bad', title: t('write.dryFailed'), detail: o.dryRun.output.split('\n').filter(Boolean).at(-1) });
-      else if (o.confirmed) d.toast({ kind: 'bad', title: t('write.failed'), detail: o.result?.output.split('\n').filter(Boolean).at(-1) });
-    } catch (e) { d.toast({ kind: 'bad', title: t('write.failed'), detail: errorText(e) }); } finally { setBusy(false); }
-  };
-
-  if (!list.data) {
-    if (list.loading && !list.error) return <Card><Skeleton lines={5} block /></Card>;
-    return (
-      <Card pad={false}>
-        <Empty illo="reviews" title={t('reviews.emptyTitle')} actions={<button className="btn btn-primary" onClick={list.refresh}><Icon name="refresh" />{t('reviews.read')}</button>}>{t('reviews.emptyText')}</Empty>
-        {list.error && <div className="card-foot"><Icon name="alertCircle" />{list.error}</div>}
-      </Card>
-    );
-  }
-
-  const toggleStar = (n: number) => setF(x => ({ ...x, stars: x.stars.includes(n) ? x.stars.filter(s => s !== n) : [...x.stars, n] }));
-  return (
-    <>
-      <div className="row between">
-        <span className="stamp"><Icon name="clock" />{list.fromCache ? t('common.cachedFrom', { when: ago(list.at) }) : t('common.readWhen', { when: ago(list.at) })}</span>
-        <div className="actions">
-          <button className="btn btn-sm" onClick={() => write('reviews.draft', { days: 30 }, t('reviews.draftsMade'))} disabled={busy} title={t('reviews.makeDraftsHint')}><Icon name="text" />{t('reviews.makeDrafts')}</button>
-          <button className="btn btn-sm" onClick={list.refresh} disabled={list.loading}><Icon name="refresh" />{t('action.refresh')}</button>
-        </div>
-      </div>
-      {list.error && <Notice tone="warn">{t('common.readFailedKeep', { error: list.error })}</Notice>}
-      <div className="rv">
-        <div className="stack" style={{ gap: 16 }}>
-          <Card title={t('reviews.ratings')} icon="star">
-            <div className="stack" style={{ gap: 14 }}>
-              <div className="big-rating"><b>{stats.average !== null ? num(stats.average, 1) : '–'}</b><Stars n={Math.round(stats.average ?? 0)} /></div>
-              <span className="small muted">{t('reviews.count', { count: stats.count })} · {t('reviews.unansweredN', { count: stats.unanswered })}</span>
-              <div className="dist">
-                {[5, 4, 3, 2, 1].map(n => (
-                  <button key={n} className="dist-row" onClick={() => toggleStar(n)} aria-pressed={f.stars.includes(n)} style={{ all: 'unset', display: 'grid', gridTemplateColumns: '26px 1fr 30px', alignItems: 'center', gap: 8, cursor: 'pointer', fontSize: 12, opacity: f.stars.length && !f.stars.includes(n) ? 0.45 : 1 }}>
-                    <span className="num">{n}★</span><Bar value={stats.count ? stats.byStar[n - 1]! / stats.count : 0} tone="warn" label={`${n}`} /><span className="num right">{stats.byStar[n - 1]}</span>
-                  </button>
-                ))}
-              </div>
-            </div>
-          </Card>
-          <Card title={t('reviews.filter')} icon="search">
-            <div className="form">
-              <Seg value={f.store} onChange={store => setF(x => ({ ...x, store }))} label={t('reviews.store')} options={[['all', t('reviews.all')], ['apple', 'App Store'], ['play', 'Google Play']]} />
-              <label className="check"><input type="checkbox" checked={f.unanswered} onChange={e => setF(x => ({ ...x, unanswered: e.target.checked }))} />{t('reviews.onlyUnanswered')}</label>
-              <div className="search-input"><Icon name="search" /><input className="input" value={f.query} onChange={e => setF(x => ({ ...x, query: e.target.value }))} placeholder={t('reviews.search')} aria-label={t('reviews.search')} /></div>
-            </div>
-          </Card>
-        </div>
-        <Card title={t('reviews.inbox')} icon="message" sub={t('reviews.shown', { count: shown.length })} pad={false}>
-          {shown.length ? (
-            <div className="inbox" role="listbox" aria-label={t('reviews.inbox')}>
-              {shown.map(r => {
-                const dr = byFile.get(draftName(r));
-                const k = `${r.store}:${r.id}`;
-                return (
-                  <button key={k} role="option" aria-selected={cur === r} className="inbox-item" onClick={() => setSel(k)}>
-                    <span className="t1"><Stars n={r.rating} /><StoreGlyph store={r.store === 'apple' ? 'ios' : 'android'} className="ic13" /><span>{r.where ?? ''}</span><span className="grow" />
-                      {r.reply ? <Chip tone="ok" dot={false}>{t('reviews.answered')}</Chip> : dr?.approved ? <Chip tone="accent" dot={false}>{t('reviews.approved')}</Chip> : dr ? <Chip tone="neutral" dot={false}>{t('reviews.drafted')}</Chip> : null}
-                      <span>{date(r.date)}</span></span>
-                    {r.title && <span className="t2">{r.title}</span>}
-                    <span className="t3">{r.body}</span>
-                  </button>
-                );
-              })}
-            </div>
-          ) : <Empty compact illo="reviews" title={t('reviews.noMatch')} />}
-        </Card>
-        {cur ? <Detail r={cur} draft={byFile.get(draftName(cur))} busy={busy} onApprove={(dr, undo) => write('reviews.approve', { file: base(dr.file), ...(undo ? { undo: true } : {}) }, undo ? t('reviews.unapproved') : t('reviews.approvedToast'))} />
-          : <Card className="rv-detail"><Empty compact illo="reviews" title={t('reviews.pick')} /></Card>}
-      </div>
-    </>
-  );
-}
diff --git a/apps/desktop/src/screens/tabs/TestFlight.tsx b/apps/desktop/src/screens/tabs/TestFlight.tsx
deleted file mode 100644
index a9376fd..0000000
--- a/apps/desktop/src/screens/tabs/TestFlight.tsx
+++ /dev/null
@@ -1,80 +0,0 @@
-// TestFlight: beta groups (internal / external, testers, builds, public link) and the recent builds with their
-// processing and beta review states.
-import type { Project } from '../../api';
-import { t } from '../../i18n';
-import { ago, date, num } from '../../lib/format';
-import type { TestFlightStatus, Tone } from '../../lib/model';
-import { useData, useRead } from '../../store';
-import { Icon } from '../../ui/icons';
-import { Card, Chip, Empty, Notice, Skeleton } from '../../ui/kit';
-
-/** Beta state word -> tone and a short label. */
-export function betaState(s: string | null): { tone: Tone; text: string } {
-  if (!s) return { tone: 'neutral', text: '–' };
-  if (/IN_BETA_TESTING|BETA_APPROVED|READY_FOR_BETA_TESTING|VALID/.test(s)) return { tone: 'ok', text: s.replace(/_/g, ' ').toLowerCase() };
-  if (/WAITING|IN_BETA_REVIEW|PROCESSING|READY_FOR_BETA_SUBMISSION/.test(s)) return { tone: 'warn', text: s.replace(/_/g, ' ').toLowerCase() };
-  if (/EXPIRED/.test(s)) return { tone: 'neutral', text: s.replace(/_/g, ' ').toLowerCase() };
-  if (/REJECTED|FAILED|INVALID|MISSING_EXPORT_COMPLIANCE/.test(s)) return { tone: 'bad', text: s.replace(/_/g, ' ').toLowerCase() };
-  return { tone: 'neutral', text: s.replace(/_/g, ' ').toLowerCase() };
-}
-
-function State({ s }: { s: string | null }) {
-  const b = betaState(s);
-  return s ? <Chip tone={b.tone}>{b.text}</Chip> : <span className="muted small">–</span>;
-}
-
-export function TestFlightTab({ project }: { project: Project }) {
-  const d = useData();
-  const e = d.statusOf(project);
-  const r = useRead<TestFlightStatus>(project.id, 'apple.testflight_status', { network: true, title: 'TestFlight' });
-  if (e && !e.app?.platforms.ios) return <Card pad={false}><Empty illo="plane" title={t('tf.noIos')}>{t('tf.noIosText')}</Empty></Card>;
-  if (!r.data) {
-    if (r.loading && !r.error) return <Card><Skeleton lines={4} block /></Card>;
-    return (
-      <Card pad={false}>
-        <Empty illo="plane" title={t('tf.emptyTitle')} actions={<button className="btn btn-primary" onClick={r.refresh}><Icon name="refresh" />{t('tf.read')}</button>}>{t('tf.emptyText')}</Empty>
-        {r.error && <div className="card-foot"><Icon name="alertCircle" />{r.error}</div>}
-      </Card>
-    );
-  }
-  const s = r.data;
-  return (
-    <>
-      <div className="row between">
-        <span className="stamp"><Icon name="clock" />{r.fromCache ? t('common.cachedFrom', { when: ago(r.at) }) : t('common.readWhen', { when: ago(r.at) })}</span>
-        <button className="btn btn-sm" onClick={r.refresh} disabled={r.loading}><Icon name="refresh" />{t('action.refresh')}</button>
-      </div>
-      {r.error && <Notice tone="warn">{t('common.readFailedKeep', { error: r.error })}</Notice>}
-      {s.missingGroups.length > 0 && <Notice tone="warn">{t('tf.missingGroups', { groups: s.missingGroups.join(', ') })}</Notice>}
-      <div className="grid-cards">
-        {s.groups.map(g => (
-          <div key={g.id} className="tf-group">
-            <div className="row between"><span className="strong">{g.name}</span><Chip tone={g.internal ? 'info' : 'accent'}>{g.internal ? t('tf.internal') : t('tf.external')}</Chip></div>
-            <div className="stat">
-              <div><b>{num(g.testers)}</b><span className="small muted">{t('tf.testers')}</span></div>
-              <div><b>{g.builds === 'all' ? t('tf.all') : num(g.builds)}</b><span className="small muted">{t('tf.builds')}</span></div>
-            </div>
-            <div className="row small muted" style={{ gap: 6 }}><Icon name={g.publicLink ? 'globe' : 'users'} className="ic13" />{g.publicLink ? t('tf.publicOn') : t('tf.publicOff')}</div>
-          </div>
-        ))}
-        {!s.groups.length && <Card><Empty compact illo="plane" title={t('tf.noGroups')} /></Card>}
-      </div>
-      <Card title={t('tf.buildsTitle')} icon="cube" sub={t('tf.buildsSub')} pad={false}>
-        {s.builds.length ? (
-          <table className="table">
-            <thead><tr><th>{t('col.version')}</th><th>{t('col.build')}</th><th>{t('tf.processing')}</th><th>{t('tf.internalTesting')}</th><th>{t('tf.externalTesting')}</th><th className="right">{t('tf.uploaded')}</th></tr></thead>
-            <tbody>
-              {s.builds.map((b, i) => (
-                <tr key={i}>
-                  <td className="strong num">{b.version ?? '–'}</td><td className="num">{b.build ?? '–'}</td>
-                  <td><State s={b.processing} /></td><td><State s={b.internal} /></td><td><State s={b.external} /></td>
-                  <td className="right muted">{date(b.uploaded)}</td>
-                </tr>
-              ))}
-            </tbody>
-          </table>
-        ) : <Empty compact illo="plane" title={t('tf.noBuilds')} />}
-      </Card>
-    </>
-  );
-}
diff --git a/apps/desktop/src/store.tsx b/apps/desktop/src/store.tsx
deleted file mode 100644
index 6dcfb68..0000000
--- a/apps/desktop/src/store.tsx
+++ /dev/null
@@ -1,234 +0,0 @@
-// App data shared by every screen: app folders, accounts, the sidecar, the portfolio (offline check + the last live
-// read from the cache), app icons, and background jobs shown as toasts with progress and cancel.
-import { createContext, type ReactNode, useCallback, useContext, useEffect, useMemo, useRef, useState } from 'react';
-import {
-  type Account, api, type AppInfo, type AppStatus, type CacheEntry, errorText, newJob, onDownload, onProgress, type PortfolioResult, type Project, reads,
-  type SidecarStatus, type ToolResult,
-} from './api';
-import { t } from './i18n';
-
-export type ToastKind = 'job' | 'ok' | 'bad' | 'info';
-export interface Toast {
-  id: string;
-  kind: ToastKind;
-  title: string;
-  detail?: string;
-  /** null: running without a known total. */
-  progress?: { done: number; total: number } | null;
-  /** Cancellable job id. */
-  job?: string;
-}
-
-export interface Data {
-  ready: boolean;
-  info: AppInfo | null;
-  projects: Project[];
-  accounts: Account[];
-  sidecar: SidecarStatus | null;
-  sidecarError: string | null;
-  /** Latest portfolio read (offline check, or live when just read). */
-  portfolio: PortfolioResult | null;
-  /** Last live read of the stores (cached across runs). */
-  live: CacheEntry<PortfolioResult> | null;
-  portfolioBusy: 'offline' | 'live' | null;
-  portfolioError: string | null;
-  icons: Record<string, string | null>;
-  refreshPortfolio: (live?: boolean) => Promise<void>;
-  reload: () => Promise<void>;
-  statusOf: (p: Project) => AppStatus | undefined;
-  liveOf: (p: Project) => AppStatus | undefined;
-  toasts: Toast[];
-  toast: (t: Omit<Toast, 'id'> & { id?: string }) => string;
-  updateToast: (id: string, patch: Partial<Toast>) => void;
-  dismiss: (id: string) => void;
-  cancelJob: (job: string) => void;
-}
-
-const Ctx = createContext<Data | null>(null);
-export const useData = (): Data => {
-  const d = useContext(Ctx);
-  if (!d) throw new Error('useData outside DataProvider');
-  return d;
-};
-
-const lastLine = (s: string): string => s.trim().split('\n').filter(Boolean).at(-1)?.replace(/^\S+ \[[^\]]+\] /, '') ?? '';
-
-export function DataProvider({ children }: { children: ReactNode }) {
-  const [ready, setReady] = useState(false);
-  const [info, setInfo] = useState<AppInfo | null>(null);
-  const [projects, setProjects] = useState<Project[]>([]);
-  const [accounts, setAccounts] = useState<Account[]>([]);
-  const [sidecar, setSidecar] = useState<SidecarStatus | null>(null);
-  const [sidecarError, setSidecarError] = useState<string | null>(null);
-  const [portfolio, setPortfolio] = useState<PortfolioResult | null>(null);
-  const [live, setLive] = useState<CacheEntry<PortfolioResult> | null>(null);
-  const [portfolioBusy, setBusy] = useState<Data['portfolioBusy']>(null);
-  const [portfolioError, setPortfolioError] = useState<string | null>(null);
-  const [icons, setIcons] = useState<Record<string, string | null>>({});
-  const [toasts, setToasts] = useState<Toast[]>([]);
-  const timers = useRef(new Map<string, ReturnType<typeof setTimeout>>());
-
-  const dismiss = useCallback((id: string) => {
-    setToasts(ts => ts.filter(x => x.id !== id));
-    const tm = timers.current.get(id);
-    if (tm) { clearTimeout(tm); timers.current.delete(id); }
-  }, []);
-  const autoClose = useCallback((id: string, kind: ToastKind) => {
-    if (kind === 'job') return;
-    const old = timers.current.get(id);
-    if (old) clearTimeout(old);
-    timers.current.set(id, setTimeout(() => dismiss(id), kind === 'bad' ? 9000 : 4500));
-  }, [dismiss]);
-  const toast = useCallback((x: Omit<Toast, 'id'> & { id?: string }) => {
-    const id = x.id ?? newJob('toast');
-    setToasts(ts => [...ts.filter(o => o.id !== id), { ...x, id }].slice(-4));
-    autoClose(id, x.kind);
-    return id;
-  }, [autoClose]);
-  const updateToast = useCallback((id: string, patch: Partial<Toast>) => {
-    setToasts(ts => ts.map(x => (x.id === id ? { ...x, ...patch } : x)));
-    if (patch.kind) autoClose(id, patch.kind);
-  }, [autoClose]);
-  const cancelJob = useCallback((job: string) => { api.cancel(job).catch(() => {}); }, []);
-
-  const reload = useCallback(async () => {
-    const [p, a] = await Promise.all([api.projects(), api.accounts()]);
-    setProjects(p);
-    setAccounts(a);
-  }, []);
-
-  const refreshPortfolio = useCallback(async (liveRead = false) => {
-    const job = newJob(liveRead ? 'portfolio-live' : 'portfolio');
-    setBusy(liveRead ? 'live' : 'offline'); setPortfolioError(null);
-    const tid = liveRead ? toast({ id: job, kind: 'job', title: t('toast.readingStores'), detail: t('toast.readingStoresDetail'), progress: null, job }) : null;
-    try {
-      const r = await api.portfolio(liveRead, job);
-      setPortfolio(r);
-      if (liveRead) {
-        setLive({ value: r, at: r.at });
-        const failed = r.apps.filter(a => a.storeErrors.ios || a.storeErrors.android).length;
-        if (tid) updateToast(tid, failed ? { kind: 'info', title: t('toast.readDonePartial'), detail: t('toast.readDonePartialDetail', { count: failed }), progress: undefined, job: undefined }
-          : { kind: 'ok', title: t('toast.readDone'), detail: t('toast.readDoneDetail', { count: r.apps.length }), progress: undefined, job: undefined });
-      }
-    } catch (e) {
-      const msg = errorText(e);
-      setPortfolioError(msg);
-      if (tid) updateToast(tid, { kind: /cancel/i.test(msg) ? 'info' : 'bad', title: /cancel/i.test(msg) ? t('toast.cancelled') : t('toast.readFailed'), detail: msg, progress: undefined, job: undefined });
-    } finally { setBusy(null); }
-  }, [toast, updateToast]);
-
-  // start: app info, folders, accounts, sidecar, cached live portfolio
-  useEffect(() => {
-    api.appInfo().then(setInfo, () => {});
-    reload().catch(() => {}).finally(() => setReady(true));
-    api.sidecarStatus().then(s => { setSidecar(s); setSidecarError(null); }, e => setSidecarError(errorText(e)));
-    api.cached<PortfolioResult>('portfolio.status', '*', { live: true }).then(e => { if (e) setLive(e); }, () => {});
-  }, [reload]);
-
-  useEffect(() => { if (projects.length) refreshPortfolio(false); }, [projects.length, refreshPortfolio]);
-
-  // icons: cached first, then read (offline, cheap)
-  useEffect(() => {
-    for (const p of projects) {
-      if (p.id in icons) continue;
-      setIcons(m => ({ ...m, [p.id]: null }));
-      api.cached<ToolResult & { data?: { dataUrl: string | null } }>('project.icon', p.id).then(c => {
-        if (c?.value.data?.dataUrl) setIcons(m => ({ ...m, [p.id]: c.value.data!.dataUrl }));
-      }, () => {}).finally(() => {
-        reads.icon(p.id).then(r => setIcons(m => ({ ...m, [p.id]: r.data?.dataUrl ?? m[p.id] ?? null })), () => {});
-      });
-    }
-  }, [projects]); // eslint-disable-line react-hooks/exhaustive-deps
-
-  // progress of jobs -> their toasts
-  useEffect(() => {
-    const un = onProgress(p => {
-      if (!p.job) return;
-      setToasts(ts => ts.map(x => {
-        if (x.job !== p.job) return x;
-        if (p.total) return { ...x, progress: { done: p.n ?? 0, total: p.total } };
-        if (p.line) return { ...x, detail: lastLine(p.line) || x.detail };
-        return x;
-      }));
-    });
-    const unD = onDownload(e => {
-      setToasts(ts => ts.map(x => (x.job === e.job && e.stage !== 'done' && e.stage !== 'error' && e.stage !== 'cancelled'
-        ? { ...x, detail: t(`dl.${e.stage}`), progress: e.total ? { done: e.received, total: e.total } : null } : x)));
-    });
-    return () => { un.then(f => f()); unD.then(f => f()); };
-  }, []);
-
-  const statusOf = useCallback((p: Project) => portfolio?.apps.find(a => a.project === p.path || a.app?.id === p.path), [portfolio]);
-  const liveOf = useCallback((p: Project) => {
-    const cur = portfolio?.apps.find(a => (a.project === p.path || a.app?.id === p.path) && a.release.source === 'live');
-    return cur ?? live?.value.apps.find(a => a.project === p.path || a.app?.id === p.path);
-  }, [portfolio, live]);
-
-  const value = useMemo<Data>(() => ({
-    ready, info, projects, accounts, sidecar, sidecarError, portfolio, live, portfolioBusy, portfolioError, icons,
-    refreshPortfolio, reload, statusOf, liveOf, toasts, toast, updateToast, dismiss, cancelJob,
-  }), [ready, info, projects, accounts, sidecar, sidecarError, portfolio, live, portfolioBusy, portfolioError, icons, refreshPortfolio, reload, statusOf, liveOf, toasts, toast, updateToast, dismiss, cancelJob]);
-  return <Ctx.Provider value={value}>{children}</Ctx.Provider>;
-}
-
-export interface ReadState<T> {
-  data: T | null;
-  /** When `data` was read (from the store or the cache). */
-  at: string | null;
-  fromCache: boolean;
-  loading: boolean;
-  error: string | null;
-  /** The command line it ran (shown with errors). */
-  command: string | null;
-  refresh: () => Promise<void>;
-}
-
-/**
- * One read method of one app. The cached value shows at once with its time; offline reads (`network: false`) then
- * refresh by themselves, store reads only on demand (they use the account's API quota). A failed read keeps the last
- * good value and says so: never an empty "all fine".
- */
-export function useRead<T>(projectId: string, method: string, o: { network: boolean; args?: Record<string, unknown>; title?: string }): ReadState<T> {
-  const d = useData();
-  const argsKey = JSON.stringify(o.args ?? {});
-  const [s, set] = useState<Omit<ReadState<T>, 'refresh'>>({ data: null, at: null, fromCache: false, loading: true, error: null, command: null });
-  const seq = useRef(0);
-
-  const refresh = useCallback(async () => {
-    const my = ++seq.current;
-    const job = newJob(method);
-    set(x => ({ ...x, loading: true, error: null }));
-    const tid = o.network ? d.toast({ id: job, kind: 'job', title: o.title ?? t('toast.reading'), detail: t('toast.readingDetail'), progress: null, job }) : null;
-    try {
-      const r = await api.call<ToolResult>(method, projectId, { args: JSON.parse(argsKey) as Record<string, unknown> }, job);
-      if (my !== seq.current) return;
-      if (r.ok && r.data !== undefined) {
-        set({ data: r.data as T, at: new Date().toISOString(), fromCache: false, loading: false, error: null, command: r.command });
-        if (tid) d.updateToast(tid, { kind: 'ok', title: t('toast.readOk', { what: o.title ?? method }), detail: undefined, progress: undefined, job: undefined });
-      } else {
-        const msg = lastLine(r.output) || t('common.exit', { code: r.exitCode });
-        set(x => ({ ...x, loading: false, error: msg, command: r.command }));
-        if (tid) d.updateToast(tid, { kind: 'bad', title: t('toast.readFailedWhat', { what: o.title ?? method }), detail: msg, progress: undefined, job: undefined });
-      }
-    } catch (e) {
-      if (my !== seq.current) return;
-      const msg = errorText(e);
-      set(x => ({ ...x, loading: false, error: msg }));
-      if (tid) d.updateToast(tid, { kind: /cancel/i.test(msg) ? 'info' : 'bad', title: /cancel/i.test(msg) ? t('toast.cancelled') : t('toast.readFailedWhat', { what: o.title ?? method }), detail: msg, progress: undefined, job: undefined });
-    }
-  }, [projectId, method, argsKey, o.network, o.title]); // eslint-disable-line react-hooks/exhaustive-deps
-
-  useEffect(() => {
-    let alive = true;
-    set({ data: null, at: null, fromCache: false, loading: true, error: null, command: null });
-    api.cached<ToolResult>(method, projectId, JSON.parse(argsKey) as Record<string, unknown>).then(c => {
-      if (!alive) return;
-      if (c && c.value.data !== undefined) set({ data: c.value.data as T, at: c.at, fromCache: true, loading: !o.network, error: null, command: c.value.command });
-      else set(x => ({ ...x, loading: !o.network }));
-      if (!o.network) refresh();
-    }, () => { if (alive) { set(x => ({ ...x, loading: !o.network })); if (!o.network) refresh(); } });
-    return () => { alive = false; };
-  }, [projectId, method, argsKey]); // eslint-disable-line react-hooks/exhaustive-deps
-
-  return { ...s, refresh };
-}
diff --git a/apps/desktop/src/styles.css b/apps/desktop/src/styles.css
deleted file mode 100644
index 3c1db63..0000000
--- a/apps/desktop/src/styles.css
+++ /dev/null
@@ -1,634 +0,0 @@
-/* storebound desktop design system.
-   Tokens follow storebound.dev (slate neutrals, indigo accent). Text tokens keep 7:1 contrast on every surface they
-   are used on, in both themes (tests/theme.test.ts checks it). Scales: space 4-40, type 11-28, radius 6/10/14.
-   Motion: 120-180 ms, none with reduced motion (system setting or Settings > Motion). */
-:root {
-  --bg: #f6f7f9;
-  --bg-sunken: #eef1f5;
-  --surface: #ffffff;
-  --surface-2: #f9fafb;
-  --hover: #f1f4f8;
-  --ink: #0b1220;
-  --ink-2: #2b3648;
-  --muted: #455066;
-  --faint: #8a95a8;
-  --line: #e4e7ec;
-  --line-2: #d2d7e0;
-  --accent: #3f35c2;
-  --accent-solid: #5b55e8;
-  --accent-ink: #ffffff;
-  --accent-soft: #eef0ff;
-  --accent-line: #c7cbfa;
-  --focus: #5b55e8;
-
-  --ok-bg: #e3f7ea; --ok-ink: #11502b; --ok-solid: #1f9d55;
-  --warn-bg: #fff3d6; --warn-ink: #6b3a06; --warn-solid: #d68a0c;
-  --bad-bg: #ffe6ea; --bad-ink: #7f1230; --bad-solid: #e0355b;
-  --info-bg: #e2f2fd; --info-ink: #0b4467; --info-solid: #1689d0;
-  --neutral-bg: #eef1f5; --neutral-ink: #2b3648; --neutral-solid: #9aa4b5;
-
-  --illo-1: #eef0ff;
-  --illo-2: #dfe3ff;
-  --illo-line: #5b55e8;
-  --illo-soft: #c9d0dc;
-
-  --code-bg: #0e1526;
-  --code-ink: #dbe3f0;
-
-  --shadow-1: 0 1px 2px rgba(16, 24, 40, .05);
-  --shadow-2: 0 1px 2px rgba(16, 24, 40, .06), 0 8px 24px -12px rgba(16, 24, 40, .16);
-  --shadow-3: 0 2px 6px rgba(16, 24, 40, .08), 0 24px 64px -16px rgba(16, 24, 40, .28);
-  --scrim: rgba(15, 20, 32, .38);
-
-  --s1: 4px; --s2: 8px; --s3: 12px; --s4: 16px; --s5: 20px; --s6: 24px; --s8: 32px; --s10: 40px;
-  --r-sm: 6px; --r: 10px; --r-lg: 14px;
-  --t-micro: 11px; --t-meta: 12px; --t-body: 13px; --t-em: 14px; --t-section: 15px; --t-title: 20px; --t-kpi: 26px;
-  --font: ui-sans-serif, -apple-system, BlinkMacSystemFont, "Segoe UI Variable", "Segoe UI", "Inter", Roboto, "Helvetica Neue", Arial, sans-serif;
-  --mono: ui-monospace, "SF Mono", SFMono-Regular, Menlo, Consolas, "Liberation Mono", monospace;
-  --speed: .16s;
-  --ease: cubic-bezier(.2, .7, .2, 1);
-  color-scheme: light;
-}
-
-@media (prefers-color-scheme: dark) {
-  :root:not([data-theme="light"]) {
-    --bg: #0a0f1a; --bg-sunken: #080c16; --surface: #111827; --surface-2: #0e1522; --hover: #172133;
-    --ink: #f3f6fb; --ink-2: #d3dbe7; --muted: #a9b5c7; --faint: #6b788d; --line: #1e2838; --line-2: #2b374b;
-    --accent: #b4bcff; --accent-solid: #8189f8; --accent-ink: #0a0f1a; --accent-soft: #1b1f45; --accent-line: #3a3f86; --focus: #9aa2ff;
-    --ok-bg: #0c2c1b; --ok-ink: #9ff0bf; --ok-solid: #34c172;
-    --warn-bg: #33230a; --warn-ink: #ffd88a; --warn-solid: #eba22f;
-    --bad-bg: #3a0f1c; --bad-ink: #ffb3c2; --bad-solid: #f2557a;
-    --info-bg: #0b2a40; --info-ink: #a6dcff; --info-solid: #3aa7ec;
-    --neutral-bg: #1a2333; --neutral-ink: #d3dbe7; --neutral-solid: #6b788d;
-    --illo-1: #181d3d; --illo-2: #232a5a; --illo-line: #8f97ff; --illo-soft: #334058;
-    --code-bg: #060a13; --code-ink: #dbe3f0;
-    --shadow-1: 0 1px 2px rgba(0, 0, 0, .4);
-    --shadow-2: 0 1px 2px rgba(0, 0, 0, .45), 0 12px 32px -16px rgba(0, 0, 0, .7);
-    --shadow-3: 0 2px 8px rgba(0, 0, 0, .5), 0 30px 80px -20px rgba(0, 0, 0, .8);
-    --scrim: rgba(2, 4, 10, .6);
-    color-scheme: dark;
-  }
-}
-:root[data-theme="dark"] {
-  --bg: #0a0f1a; --bg-sunken: #080c16; --surface: #111827; --surface-2: #0e1522; --hover: #172133;
-  --ink: #f3f6fb; --ink-2: #d3dbe7; --muted: #a9b5c7; --faint: #6b788d; --line: #1e2838; --line-2: #2b374b;
-  --accent: #b4bcff; --accent-solid: #8189f8; --accent-ink: #0a0f1a; --accent-soft: #1b1f45; --accent-line: #3a3f86; --focus: #9aa2ff;
-  --ok-bg: #0c2c1b; --ok-ink: #9ff0bf; --ok-solid: #34c172;
-  --warn-bg: #33230a; --warn-ink: #ffd88a; --warn-solid: #eba22f;
-  --bad-bg: #3a0f1c; --bad-ink: #ffb3c2; --bad-solid: #f2557a;
-  --info-bg: #0b2a40; --info-ink: #a6dcff; --info-solid: #3aa7ec;
-  --neutral-bg: #1a2333; --neutral-ink: #d3dbe7; --neutral-solid: #6b788d;
-  --illo-1: #181d3d; --illo-2: #232a5a; --illo-line: #8f97ff; --illo-soft: #334058;
-  --code-bg: #060a13; --code-ink: #dbe3f0;
-  --shadow-1: 0 1px 2px rgba(0, 0, 0, .4);
-  --shadow-2: 0 1px 2px rgba(0, 0, 0, .45), 0 12px 32px -16px rgba(0, 0, 0, .7);
-  --shadow-3: 0 2px 8px rgba(0, 0, 0, .5), 0 30px 80px -20px rgba(0, 0, 0, .8);
-  --scrim: rgba(2, 4, 10, .6);
-  color-scheme: dark;
-}
-
-@media (prefers-reduced-motion: reduce) { :root { --speed: 0s; } }
-:root[data-motion="reduce"] { --speed: 0s; }
-
-/* ---------- base ---------- */
-*, *::before, *::after { box-sizing: border-box; }
-html, body, #root { height: 100%; }
-body {
-  margin: 0; background: var(--bg); color: var(--ink);
-  font: var(--t-body)/1.5 var(--font); font-feature-settings: "cv11", "ss01";
-  -webkit-font-smoothing: antialiased; text-rendering: optimizeLegibility;
-  user-select: none; -webkit-user-select: none; cursor: default; overflow: hidden;
-}
-input, textarea, .selectable, pre, code, .mono-id { user-select: text; -webkit-user-select: text; }
-:focus { outline: none; }
-:focus-visible { outline: 2px solid var(--focus); outline-offset: 2px; border-radius: var(--r-sm); }
-h1, h2, h3, h4 { margin: 0; letter-spacing: -.012em; }
-p { margin: 0; }
-code, pre, .mono { font-family: var(--mono); font-size: 12px; }
-.num { font-variant-numeric: tabular-nums; }
-button { font: inherit; color: inherit; }
-svg { flex: none; }
-.sr { position: absolute !important; width: 1px; height: 1px; overflow: hidden; clip: rect(0 0 0 0); white-space: nowrap; }
-.skip { position: absolute; left: -9999px; top: 8px; z-index: 100; background: var(--ink); color: var(--bg); padding: 8px 12px; border-radius: var(--r-sm); }
-.skip:focus { left: 8px; }
-::selection { background: var(--accent-soft); }
-
-/* ---------- shell ---------- */
-.shell { display: grid; grid-template-columns: 236px minmax(0, 1fr); height: 100%; }
-.side { background: var(--bg-sunken); border-right: 1px solid var(--line); display: flex; flex-direction: column; min-height: 0; }
-.side-top { padding: 14px 12px 8px; display: grid; gap: 10px; }
-.brand { display: flex; align-items: center; gap: 10px; padding: 2px 6px; font-weight: 650; font-size: var(--t-em); letter-spacing: -.01em; }
-.brand-mark { width: 24px; height: 24px; }
-.brand small { margin-left: auto; font: 600 10px/1 var(--mono); color: var(--muted); border: 1px solid var(--line-2); padding: 3px 5px; border-radius: 5px; letter-spacing: .04em; }
-.search-btn {
-  all: unset; display: flex; align-items: center; gap: 8px; height: 32px; padding: 0 8px 0 10px; border-radius: 8px; cursor: pointer;
-  background: var(--surface); border: 1px solid var(--line); color: var(--muted); box-shadow: var(--shadow-1); transition: border-color var(--speed) var(--ease);
-}
-.search-btn:hover { border-color: var(--line-2); }
-.search-btn:focus-visible { outline: 2px solid var(--focus); outline-offset: 1px; }
-.search-btn svg { width: 15px; height: 15px; }
-.search-btn .lbl { flex: 1; text-align: left; white-space: nowrap; }
-.kbd { display: inline-flex; align-items: center; gap: 2px; font: 600 10.5px/1 var(--font); color: var(--muted); border: 1px solid var(--line-2); border-bottom-width: 2px; border-radius: 5px; padding: 3px 5px; background: var(--surface); }
-.side-scroll { flex: 1; overflow: auto; padding: 4px 8px 12px; min-height: 0; }
-.side-label { display: flex; align-items: center; justify-content: space-between; margin: 14px 10px 4px; font-size: var(--t-micro); font-weight: 650; letter-spacing: .06em; text-transform: uppercase; color: var(--muted); }
-.side-label button { all: unset; cursor: pointer; display: grid; place-items: center; width: 20px; height: 20px; border-radius: 5px; color: var(--muted); }
-.side-label button:hover { background: var(--hover); color: var(--ink); }
-.side-label button:focus-visible { outline: 2px solid var(--focus); }
-.side-label svg { width: 14px; height: 14px; }
-.nav {
-  all: unset; box-sizing: border-box; width: 100%; display: flex; align-items: center; gap: 10px; height: 32px; padding: 0 10px; border-radius: 7px;
-  color: var(--ink-2); font-weight: 520; cursor: pointer; transition: background-color var(--speed) var(--ease), color var(--speed) var(--ease);
-}
-.nav + .nav { margin-top: 1px; }
-.nav svg { width: 16px; height: 16px; color: var(--muted); }
-.nav:hover { background: var(--hover); color: var(--ink); }
-.nav[aria-current="page"] { background: var(--surface); color: var(--ink); box-shadow: var(--shadow-1), inset 0 0 0 1px var(--line); font-weight: 600; }
-.nav[aria-current="page"] svg { color: var(--accent-solid); }
-.nav:focus-visible { outline: 2px solid var(--focus); outline-offset: -2px; }
-.nav .grow { flex: 1; min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
-.nav .count { font-size: var(--t-micro); color: var(--muted); font-variant-numeric: tabular-nums; }
-.nav-app { height: 34px; }
-.nav-app .app-icon { width: 20px; height: 20px; border-radius: 5px; font-size: 8.5px; }
-.nav .pip { width: 7px; height: 7px; border-radius: 50%; }
-.side-empty { color: var(--muted); font-size: var(--t-meta); padding: 6px 10px; }
-.side-foot { border-top: 1px solid var(--line); padding: 10px 14px; display: grid; gap: 6px; font-size: var(--t-meta); color: var(--muted); }
-.side-foot .row { display: flex; align-items: center; gap: 8px; }
-.dot { width: 8px; height: 8px; border-radius: 50%; background: var(--neutral-solid); flex: none; }
-.dot.ok { background: var(--ok-solid); box-shadow: 0 0 0 3px color-mix(in srgb, var(--ok-solid) 22%, transparent); }
-.dot.bad { background: var(--bad-solid); }
-.dot.warn { background: var(--warn-solid); }
-
-.main { display: flex; flex-direction: column; min-width: 0; min-height: 0; }
-.topbar { height: 52px; flex: none; display: flex; align-items: center; gap: 12px; padding: 0 24px 0 28px; border-bottom: 1px solid var(--line); background: color-mix(in srgb, var(--bg) 85%, var(--surface)); }
-.crumbs { display: flex; align-items: center; gap: 6px; min-width: 0; font-size: var(--t-body); color: var(--muted); }
-.crumbs button { all: unset; cursor: pointer; color: var(--muted); border-radius: 5px; padding: 2px 4px; }
-.crumbs button:hover { color: var(--ink); }
-.crumbs button:focus-visible { outline: 2px solid var(--focus); }
-.crumbs .here { color: var(--ink); font-weight: 600; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
-.crumbs svg { width: 14px; height: 14px; color: var(--faint); }
-.topbar .spacer { flex: 1; }
-.stamp { display: inline-flex; align-items: center; gap: 6px; font-size: var(--t-meta); color: var(--muted); white-space: nowrap; }
-.stamp svg { width: 13px; height: 13px; }
-.dev-pill { font: 700 10px/1 var(--mono); letter-spacing: .06em; color: var(--warn-ink); background: var(--warn-bg); border: 1px solid color-mix(in srgb, var(--warn-solid) 45%, transparent); padding: 5px 7px; border-radius: 5px; }
-.content { flex: 1; overflow: auto; min-height: 0; scroll-behavior: smooth; }
-.page { padding: 24px 28px 48px; max-width: 1360px; margin: 0 auto; display: grid; gap: 20px; }
-@media (prefers-reduced-motion: reduce) { .content { scroll-behavior: auto; } }
-
-/* ---------- page header ---------- */
-.ph { display: flex; align-items: flex-end; justify-content: space-between; gap: 16px; }
-.ph h1 { font-size: var(--t-title); font-weight: 650; line-height: 1.2; }
-.ph p { color: var(--muted); margin-top: 4px; max-width: 72ch; }
-.ph .actions { flex: none; }
-.actions { display: flex; align-items: center; gap: 8px; flex-wrap: wrap; }
-.app-head { display: flex; gap: 16px; align-items: center; }
-.app-head .app-icon { width: 60px; height: 60px; border-radius: 14px; font-size: 20px; box-shadow: var(--shadow-2); }
-.app-head h1 { font-size: 22px; font-weight: 680; }
-.app-head .ids { display: flex; gap: 6px; margin-top: 6px; flex-wrap: wrap; align-items: center; }
-
-/* ---------- surfaces ---------- */
-.card { background: var(--surface); border: 1px solid var(--line); border-radius: var(--r-lg); box-shadow: var(--shadow-1); min-width: 0; }
-.card-head { display: flex; align-items: center; justify-content: space-between; gap: 12px; padding: 14px 18px; border-bottom: 1px solid var(--line); min-height: 52px; }
-.card-head h2 { font-size: var(--t-em); font-weight: 650; display: flex; align-items: center; gap: 8px; }
-.card-head h2 > svg { width: 16px; height: 16px; color: var(--muted); }
-.card-head .sub { color: var(--muted); font-size: var(--t-meta); font-weight: 450; }
-.card-body { padding: 16px 18px; }
-.card-foot { padding: 10px 18px; border-top: 1px solid var(--line); color: var(--muted); font-size: var(--t-meta); display: flex; align-items: center; gap: 8px; background: var(--surface-2); border-radius: 0 0 var(--r-lg) var(--r-lg); }
-.grid { display: grid; gap: 16px; }
-.g2 { grid-template-columns: repeat(2, minmax(0, 1fr)); }
-.g3 { grid-template-columns: repeat(3, minmax(0, 1fr)); }
-.g-main-side { grid-template-columns: minmax(0, 1fr) 340px; align-items: start; }
-@media (max-width: 1180px) { .g-main-side { grid-template-columns: 1fr; } .g3 { grid-template-columns: repeat(2, minmax(0, 1fr)); } }
-.stack { display: grid; gap: 12px; }
-.row { display: flex; align-items: center; gap: 8px; }
-.between { justify-content: space-between; }
-.muted { color: var(--muted); }
-.ink2 { color: var(--ink-2); }
-.small { font-size: var(--t-meta); }
-.micro { font-size: var(--t-micro); }
-.strong { font-weight: 620; }
-.label { font-size: var(--t-micro); font-weight: 650; letter-spacing: .06em; text-transform: uppercase; color: var(--muted); }
-.divider { height: 1px; background: var(--line); border: 0; margin: 0; }
-.mono-id { font-family: var(--mono); font-size: 11.5px; color: var(--ink-2); }
-
-/* ---------- KPI ---------- */
-.kpis { display: grid; grid-template-columns: repeat(5, minmax(0, 1fr)); gap: 12px; }
-@media (max-width: 1180px) { .kpis { grid-template-columns: repeat(3, minmax(0, 1fr)); } }
-.kpi { background: var(--surface); border: 1px solid var(--line); border-radius: var(--r-lg); padding: 14px 16px; display: grid; gap: 6px; box-shadow: var(--shadow-1); position: relative; overflow: hidden; }
-.kpi .k-label { display: flex; align-items: center; gap: 6px; font-size: var(--t-meta); color: var(--muted); font-weight: 550; }
-.kpi .k-label svg { width: 14px; height: 14px; }
-.kpi .k-value { font-size: var(--t-kpi); font-weight: 680; letter-spacing: -.02em; line-height: 1.1; font-variant-numeric: tabular-nums; }
-.kpi .k-sub { font-size: var(--t-meta); color: var(--muted); white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
-.kpi.tone-bad .k-value { color: var(--bad-ink); }
-.kpi.tone-warn .k-value { color: var(--warn-ink); }
-.kpi::after { content: ""; position: absolute; inset: 0 auto 0 0; width: 3px; background: transparent; }
-.kpi.tone-bad::after { background: var(--bad-solid); }
-.kpi.tone-warn::after { background: var(--warn-solid); }
-
-/* ---------- buttons ---------- */
-.btn {
-  all: unset; box-sizing: border-box; display: inline-flex; align-items: center; justify-content: center; gap: 7px; height: 32px; padding: 0 12px; border-radius: 8px;
-  font-weight: 600; font-size: var(--t-body); cursor: pointer; border: 1px solid var(--line-2); background: var(--surface); color: var(--ink); white-space: nowrap;
-  box-shadow: var(--shadow-1); transition: background-color var(--speed) var(--ease), border-color var(--speed) var(--ease), box-shadow var(--speed) var(--ease);
-}
-.btn svg { width: 15px; height: 15px; }
-.btn:hover { background: var(--hover); }
-.btn:focus-visible { outline: 2px solid var(--focus); outline-offset: 2px; }
-.btn[disabled], .btn[aria-disabled="true"] { opacity: .5; cursor: not-allowed; }
-.btn-primary { background: var(--accent); border-color: transparent; color: var(--accent-ink); box-shadow: 0 1px 2px rgba(67, 56, 202, .3), inset 0 1px 0 rgba(255, 255, 255, .12); }
-.btn-primary:hover { background: color-mix(in srgb, var(--accent) 88%, var(--ink)); }
-.btn-ghost { background: transparent; border-color: transparent; box-shadow: none; color: var(--ink-2); }
-.btn-ghost:hover { background: var(--hover); color: var(--ink); }
-.btn-danger { color: var(--bad-ink); }
-.btn-sm { height: 26px; padding: 0 9px; font-size: var(--t-meta); border-radius: 7px; gap: 5px; }
-.btn-sm svg { width: 13px; height: 13px; }
-.btn-icon { width: 32px; padding: 0; }
-.btn-sm.btn-icon { width: 26px; }
-.spin { animation: spin .9s linear infinite; }
-@keyframes spin { to { transform: rotate(360deg); } }
-:root[data-motion="reduce"] .spin { animation: none; }
-@media (prefers-reduced-motion: reduce) { .spin { animation: none; } }
-
-.seg { display: inline-flex; padding: 2px; gap: 2px; background: var(--bg-sunken); border: 1px solid var(--line); border-radius: 9px; }
-.seg button { all: unset; height: 26px; padding: 0 10px; border-radius: 7px; cursor: pointer; font-weight: 580; font-size: var(--t-meta); color: var(--muted); display: inline-flex; align-items: center; gap: 6px; }
-.seg button:hover { color: var(--ink); }
-.seg button[aria-pressed="true"] { background: var(--surface); color: var(--ink); box-shadow: var(--shadow-1), inset 0 0 0 1px var(--line); }
-.seg button:focus-visible { outline: 2px solid var(--focus); }
-.seg svg { width: 13px; height: 13px; }
-
-/* ---------- chips, badges ---------- */
-.chip { display: inline-flex; align-items: center; gap: 6px; height: 22px; padding: 0 8px; border-radius: 999px; font-size: var(--t-micro); font-weight: 650; white-space: nowrap; letter-spacing: .01em; }
-.chip i { width: 6px; height: 6px; border-radius: 50%; background: currentColor; flex: none; }
-.chip svg { width: 12px; height: 12px; }
-.chip.ok { background: var(--ok-bg); color: var(--ok-ink); }
-.chip.warn { background: var(--warn-bg); color: var(--warn-ink); }
-.chip.bad { background: var(--bad-bg); color: var(--bad-ink); }
-.chip.info { background: var(--info-bg); color: var(--info-ink); }
-.chip.accent { background: var(--accent-soft); color: var(--accent); }
-.chip.neutral { background: var(--neutral-bg); color: var(--neutral-ink); }
-.chip.outline { background: transparent; color: var(--ink-2); box-shadow: inset 0 0 0 1px var(--line-2); }
-.chip.ok i { background: var(--ok-solid); } .chip.warn i { background: var(--warn-solid); } .chip.bad i { background: var(--bad-solid); }
-.chip.info i { background: var(--info-solid); } .chip.accent i { background: var(--accent-solid); } .chip.neutral i { background: var(--neutral-solid); }
-.store-badge { display: inline-flex; align-items: center; gap: 7px; height: 26px; padding: 0 10px 0 8px; border-radius: 7px; border: 1px solid var(--line); background: var(--surface); font-size: var(--t-meta); font-weight: 600; color: var(--ink-2); white-space: nowrap; }
-.store-badge svg { width: 14px; height: 14px; }
-.store-badge .sb-sep { width: 1px; height: 12px; background: var(--line-2); }
-.store-badge.off { color: var(--muted); border-style: dashed; background: transparent; }
-.glyph-ios { color: var(--ink); }
-.glyph-play { color: var(--ink); }
-.tag-count { display: inline-grid; place-items: center; min-width: 18px; height: 18px; padding: 0 5px; border-radius: 9px; font-size: 10.5px; font-weight: 700; background: var(--neutral-bg); color: var(--neutral-ink); font-variant-numeric: tabular-nums; }
-.tag-count.bad { background: var(--bad-bg); color: var(--bad-ink); }
-.tag-count.warn { background: var(--warn-bg); color: var(--warn-ink); }
-
-/* ---------- app icon ---------- */
-.app-icon { width: 36px; height: 36px; border-radius: 9px; display: grid; place-items: center; overflow: hidden; flex: none; color: #fff; font-weight: 750; font-size: 13px; letter-spacing: .02em; position: relative; box-shadow: inset 0 0 0 1px rgba(0, 0, 0, .06); }
-.app-icon img { width: 100%; height: 100%; object-fit: cover; }
-.app-icon.mono::after { content: ""; position: absolute; inset: 0; background: linear-gradient(180deg, rgba(255, 255, 255, .22), transparent 55%); }
-
-/* ---------- tables ---------- */
-.table { width: 100%; border-collapse: separate; border-spacing: 0; }
-.table th { text-align: left; font-size: var(--t-micro); font-weight: 650; letter-spacing: .05em; text-transform: uppercase; color: var(--muted); padding: 9px 12px; background: var(--surface-2); border-bottom: 1px solid var(--line); white-space: nowrap; }
-.table th:first-child { border-top-left-radius: var(--r-lg); padding-left: 18px; }
-.table th:last-child { border-top-right-radius: var(--r-lg); padding-right: 18px; }
-.table td { padding: 10px 12px; border-bottom: 1px solid var(--line); vertical-align: middle; }
-.table td:first-child { padding-left: 18px; }
-.table td:last-child { padding-right: 18px; }
-.table tr:last-child td { border-bottom: 0; }
-.table tbody tr { transition: background-color var(--speed) var(--ease); }
-.table tbody tr.clickable { cursor: pointer; }
-.table tbody tr.clickable:hover { background: var(--hover); }
-.table .right { text-align: right; }
-.table .center { text-align: center; }
-.table .nowrap { white-space: nowrap; }
-.table-wrap { overflow-x: auto; }
-.cell-app { display: flex; align-items: center; gap: 12px; min-width: 0; }
-.cell-app .t { min-width: 0; }
-.cell-app .n { font-weight: 640; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
-.cell-app .s { color: var(--muted); font-size: var(--t-meta); white-space: nowrap; overflow: hidden; text-overflow: ellipsis; max-width: 260px; }
-.link { all: unset; cursor: pointer; color: var(--accent); font-weight: 600; border-radius: 4px; }
-.link:hover { text-decoration: underline; text-underline-offset: 3px; }
-.link:focus-visible { outline: 2px solid var(--focus); outline-offset: 2px; }
-
-/* ---------- mini lanes (portfolio) ---------- */
-.mini { display: grid; gap: 6px; justify-items: start; }
-.mini-row { display: grid; grid-template-columns: 16px 64px 74px 1fr; align-items: center; gap: 8px; font-size: var(--t-meta); }
-.mini-row svg { width: 14px; height: 14px; color: var(--ink-2); }
-.mini-row .v { font-weight: 640; font-variant-numeric: tabular-nums; }
-.pips { display: flex; align-items: center; gap: 3px; }
-.pips b { width: 14px; height: 4px; border-radius: 2px; background: var(--line-2); }
-.pips b.on { background: var(--accent-solid); }
-.pips b.ok { background: var(--ok-solid); } .pips b.warn { background: var(--warn-solid); } .pips b.bad { background: var(--bad-solid); } .pips b.info { background: var(--info-solid); }
-.pips .pct { margin-left: 6px; font-size: var(--t-micro); color: var(--muted); font-variant-numeric: tabular-nums; }
-
-/* ---------- release timeline ---------- */
-.tl { display: grid; gap: 0; }
-.tl-head, .tl-lane { display: grid; grid-template-columns: 200px repeat(5, minmax(0, 1fr)); align-items: center; }
-.tl-head { padding: 0 18px 8px; }
-.tl-head span { font-size: var(--t-micro); font-weight: 650; letter-spacing: .05em; text-transform: uppercase; color: var(--muted); text-align: center; }
-.tl-head span:first-child { text-align: left; }
-.tl-lane { padding: 14px 18px; border-top: 1px solid var(--line); }
-.tl-who { display: flex; align-items: center; gap: 10px; min-width: 0; }
-.tl-who svg { width: 18px; height: 18px; }
-.tl-who .w1 { font-weight: 640; }
-.tl-who .w2 { font-size: var(--t-meta); color: var(--muted); font-variant-numeric: tabular-nums; }
-.tl-step { position: relative; display: grid; justify-items: center; gap: 6px; min-height: 52px; align-content: center; }
-.tl-step::before { content: ""; position: absolute; top: 50%; left: 0; right: 0; height: 2px; margin-top: -9px; background: var(--line-2); }
-.tl-step.first::before { left: 50%; }
-.tl-step:last-child::before { right: 50%; }
-.tl-step.done::before, .tl-step.cur::before { background: var(--accent-solid); }
-.tl-step.cur::before { right: 50%; }
-.tl-step.cur.first::before { display: none; }
-.tl-node { position: relative; z-index: 1; width: 18px; height: 18px; margin-top: -18px; border-radius: 50%; background: var(--surface); border: 2px solid var(--line-2); display: grid; place-items: center; }
-.tl-node svg { width: 10px; height: 10px; color: #fff; }
-.tl-step.done .tl-node { background: var(--accent-solid); border-color: var(--accent-solid); }
-.tl-step.cur .tl-node { border-width: 5px; background: var(--surface); }
-.tl-step.cur.ok .tl-node { border-color: var(--ok-solid); } .tl-step.cur.warn .tl-node { border-color: var(--warn-solid); }
-.tl-step.cur.bad .tl-node { border-color: var(--bad-solid); } .tl-step.cur.info .tl-node { border-color: var(--info-solid); }
-.tl-step.cur.accent .tl-node { border-color: var(--accent-solid); } .tl-step.cur.neutral .tl-node { border-color: var(--neutral-solid); }
-.tl-cap { position: absolute; top: calc(50% + 4px); font-size: var(--t-micro); color: var(--muted); white-space: nowrap; font-weight: 550; }
-.tl-step.cur .tl-cap { color: var(--ink); font-weight: 650; }
-.tl-roll { width: 76%; display: grid; gap: 4px; position: absolute; top: calc(50% + 2px); }
-.tl-roll .bar { height: 6px; }
-.tl-roll .pct { font-size: var(--t-micro); text-align: center; font-weight: 650; font-variant-numeric: tabular-nums; }
-.tl-none { grid-column: 2 / -1; color: var(--muted); font-size: var(--t-meta); text-align: center; border: 1px dashed var(--line-2); border-radius: 8px; padding: 10px; }
-.train-head { display: flex; align-items: center; gap: 10px; }
-.train-head .ver { font-size: 18px; font-weight: 700; font-variant-numeric: tabular-nums; letter-spacing: -.01em; }
-
-.bar { height: 8px; border-radius: 99px; background: var(--neutral-bg); overflow: hidden; box-shadow: inset 0 0 0 1px var(--line); }
-.bar > span { display: block; height: 100%; border-radius: inherit; background: var(--accent-solid); transition: width var(--speed) var(--ease); }
-.bar.ok > span { background: var(--ok-solid); } .bar.warn > span { background: var(--warn-solid); } .bar.bad > span { background: var(--bad-solid); } .bar.info > span { background: var(--info-solid); }
-.bar.thin { height: 4px; }
-
-/* ---------- charts ---------- */
-.spark { width: 100%; height: 72px; display: block; overflow: visible; }
-.spark .area { opacity: 1; }
-.spark .stop-a { stop-color: var(--spark, var(--accent-solid)); stop-opacity: .28; }
-.spark .stop-b { stop-color: var(--spark, var(--accent-solid)); stop-opacity: 0; }
-.spark .line { fill: none; stroke-width: 2; vector-effect: non-scaling-stroke; stroke-linejoin: round; stroke-linecap: round; }
-.spark .thr { stroke: var(--bad-solid); stroke-width: 1.25; stroke-dasharray: 4 4; vector-effect: non-scaling-stroke; }
-.spark.ok { --spark: var(--ok-solid); } .spark.ok .line { stroke: var(--ok-solid); }
-.spark.warn { --spark: var(--warn-solid); } .spark.warn .line { stroke: var(--warn-solid); }
-.spark.bad { --spark: var(--bad-solid); } .spark.bad .line { stroke: var(--bad-solid); }
-.spark.neutral .line, .spark.accent .line, .spark.info .line { stroke: var(--accent-solid); }
-.metric { display: grid; gap: 10px; }
-.metric-top { display: flex; align-items: baseline; justify-content: space-between; gap: 12px; }
-.metric-val { font-size: 28px; font-weight: 700; letter-spacing: -.02em; font-variant-numeric: tabular-nums; }
-.metric-val.bad { color: var(--bad-ink); } .metric-val.warn { color: var(--warn-ink); }
-.metric-legend { display: flex; gap: 14px; font-size: var(--t-micro); color: var(--muted); }
-.metric-legend .lg { display: inline-flex; align-items: center; gap: 6px; }
-.metric-legend .sw { width: 14px; height: 2px; background: var(--accent-solid); }
-.metric-legend .sw.ok { background: var(--ok-solid); } .metric-legend .sw.warn { background: var(--warn-solid); } .metric-legend .sw.bad { background: var(--bad-solid); }
-.metric-legend .sw.thr { background: repeating-linear-gradient(90deg, var(--bad-solid) 0 4px, transparent 4px 7px); }
-.axis { display: flex; justify-content: space-between; font-size: 10.5px; color: var(--muted); font-variant-numeric: tabular-nums; }
-.hbars { display: grid; gap: 8px; }
-.hbar { display: grid; grid-template-columns: minmax(0, 1fr) 120px 64px; gap: 12px; align-items: center; font-size: var(--t-meta); }
-.hbar .nm { white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
-
-/* ---------- catalog matrix ---------- */
-.mx-cell { display: inline-flex; align-items: center; gap: 6px; font-size: var(--t-meta); font-weight: 600; }
-.mx-icon { width: 20px; height: 20px; border-radius: 6px; display: grid; place-items: center; }
-.mx-icon svg { width: 12px; height: 12px; }
-.mx-ok { background: var(--ok-bg); color: var(--ok-ink); }
-.mx-warn { background: var(--warn-bg); color: var(--warn-ink); }
-.mx-error { background: var(--bad-bg); color: var(--bad-ink); }
-.mx-na { background: transparent; color: var(--faint); box-shadow: inset 0 0 0 1px var(--line); }
-.mx-unknown { background: var(--neutral-bg); color: var(--neutral-ink); }
-.note-list { margin: 4px 0 0; padding: 0; list-style: none; display: grid; gap: 2px; color: var(--muted); font-size: var(--t-micro); }
-
-/* ---------- listings grid ---------- */
-.lg-grid { display: grid; gap: 0; }
-.lg-row { display: grid; grid-template-columns: 150px repeat(var(--cols), minmax(0, 1fr)) 120px; align-items: center; gap: 10px; padding: 10px 18px; border-top: 1px solid var(--line); }
-.lg-row.head { border-top: 0; background: var(--surface-2); padding-top: 8px; padding-bottom: 8px; }
-.lg-row.head span { font-size: var(--t-micro); text-transform: uppercase; letter-spacing: .05em; color: var(--muted); font-weight: 650; }
-.lg-lang { display: flex; align-items: center; gap: 8px; font-weight: 640; }
-.lg-cell { display: grid; gap: 4px; }
-.lg-cell .bar { height: 5px; }
-.lg-cell .c { font-size: 10.5px; color: var(--muted); font-variant-numeric: tabular-nums; display: flex; justify-content: space-between; }
-.lg-cell.missing .c { color: var(--bad-ink); font-weight: 650; }
-.lg-cell.over .c { color: var(--bad-ink); font-weight: 650; }
-.lg-cell.empty-optional .c { color: var(--muted); }
-.ring { --p: 0; width: 38px; height: 38px; border-radius: 50%; display: grid; place-items: center; font-size: 10.5px; font-weight: 700; font-variant-numeric: tabular-nums;
-  background: conic-gradient(var(--ring, var(--accent-solid)) calc(var(--p) * 1%), var(--neutral-bg) 0); position: relative; }
-.ring::before { content: ""; position: absolute; inset: 4px; border-radius: 50%; background: var(--surface); }
-.ring span { position: relative; display: grid; place-items: center; }
-.ring.full span { color: var(--ok-ink); }
-.ring svg { width: 15px; height: 15px; }
-
-/* ---------- reviews ---------- */
-.rv { display: grid; grid-template-columns: 260px minmax(0, 1fr) minmax(0, 1.1fr); gap: 16px; align-items: start; }
-@media (max-width: 1240px) { .rv { grid-template-columns: 240px minmax(0, 1fr); } .rv-detail { grid-column: 1 / -1; } }
-.stars { display: inline-flex; gap: 1px; color: var(--warn-solid); }
-.stars svg { width: 12px; height: 12px; }
-.stars .off { color: var(--line-2); }
-.dist { display: grid; gap: 6px; }
-.dist-row { display: grid; grid-template-columns: 26px 1fr 30px; align-items: center; gap: 8px; font-size: var(--t-meta); font-variant-numeric: tabular-nums; }
-.dist-row .bar > span { background: var(--warn-solid); }
-.dist-row button { all: unset; cursor: pointer; display: contents; }
-.big-rating { display: flex; align-items: baseline; gap: 8px; }
-.big-rating b { font-size: 34px; font-weight: 720; letter-spacing: -.02em; font-variant-numeric: tabular-nums; }
-.inbox { display: grid; }
-.inbox-item { all: unset; box-sizing: border-box; display: grid; gap: 4px; padding: 12px 16px; border-top: 1px solid var(--line); cursor: pointer; position: relative; }
-.inbox-item:first-child { border-top: 0; }
-.inbox-item:hover { background: var(--hover); }
-.inbox-item[aria-selected="true"] { background: var(--accent-soft); }
-.inbox-item[aria-selected="true"]::before { content: ""; position: absolute; left: 0; top: 8px; bottom: 8px; width: 3px; border-radius: 0 3px 3px 0; background: var(--accent-solid); }
-.inbox-item:focus-visible { outline: 2px solid var(--focus); outline-offset: -2px; }
-.inbox-item .t1 { display: flex; align-items: center; gap: 8px; font-size: var(--t-meta); color: var(--muted); }
-.inbox-item .t1 .grow { flex: 1; }
-.inbox-item .t2 { font-weight: 620; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
-.inbox-item .t3 { color: var(--ink-2); font-size: var(--t-meta); display: -webkit-box; -webkit-line-clamp: 2; -webkit-box-orient: vertical; overflow: hidden; }
-.quote { border-left: 3px solid var(--line-2); padding: 2px 0 2px 12px; color: var(--ink-2); white-space: pre-wrap; }
-.reply-box { border: 1px solid var(--line); border-radius: var(--r); padding: 12px 14px; background: var(--surface-2); white-space: pre-wrap; }
-.issues { display: grid; gap: 6px; margin: 0; padding: 0; list-style: none; }
-.issues li { display: flex; gap: 8px; align-items: flex-start; font-size: var(--t-meta); }
-.issues svg { width: 14px; height: 14px; margin-top: 1px; }
-.issues .e { color: var(--bad-ink); } .issues .w { color: var(--warn-ink); }
-
-/* ---------- lists ---------- */
-.list { display: grid; }
-.li { display: flex; align-items: flex-start; gap: 12px; padding: 12px 18px; border-top: 1px solid var(--line); }
-.li:first-child { border-top: 0; }
-.li .li-icon { width: 28px; height: 28px; border-radius: 8px; display: grid; place-items: center; flex: none; }
-.li .li-icon svg { width: 15px; height: 15px; }
-.li .li-main { flex: 1; min-width: 0; display: grid; gap: 2px; }
-.li .li-title { font-weight: 600; }
-.li .li-sub { color: var(--muted); font-size: var(--t-meta); }
-.li.clickable { cursor: pointer; }
-.li.clickable:hover { background: var(--hover); }
-button.li { all: unset; box-sizing: border-box; display: flex; align-items: flex-start; gap: 12px; padding: 12px 18px; border-top: 1px solid var(--line); cursor: pointer; width: 100%; }
-button.li:first-child { border-top: 0; }
-button.li:hover { background: var(--hover); }
-button.li:focus-visible { outline: 2px solid var(--focus); outline-offset: -2px; }
-.tone-bg-ok { background: var(--ok-bg); color: var(--ok-ink); } .tone-bg-warn { background: var(--warn-bg); color: var(--warn-ink); }
-.tone-bg-bad { background: var(--bad-bg); color: var(--bad-ink); } .tone-bg-info { background: var(--info-bg); color: var(--info-ink); }
-.tone-bg-neutral { background: var(--neutral-bg); color: var(--neutral-ink); } .tone-bg-accent { background: var(--accent-soft); color: var(--accent); }
-.kv { display: grid; grid-template-columns: minmax(96px, max-content) minmax(0, 1fr); gap: 8px 16px; font-size: var(--t-body); }
-.kv dt { color: var(--muted); }
-.kv dd { margin: 0; min-width: 0; }
-
-/* ---------- tabs ---------- */
-.tabs { display: flex; gap: 2px; border-bottom: 1px solid var(--line); margin-top: -4px; }
-.tab { all: unset; display: inline-flex; align-items: center; gap: 7px; height: 38px; padding: 0 12px; font-weight: 600; color: var(--muted); cursor: pointer; border-bottom: 2px solid transparent; margin-bottom: -1px; transition: color var(--speed) var(--ease), border-color var(--speed) var(--ease); }
-.tab svg { width: 15px; height: 15px; }
-.tab:hover { color: var(--ink); }
-.tab[aria-selected="true"] { color: var(--ink); border-bottom-color: var(--accent-solid); }
-.tab[aria-selected="true"] svg { color: var(--accent-solid); }
-.tab:focus-visible { outline: 2px solid var(--focus); outline-offset: -4px; border-radius: 8px; }
-
-/* ---------- empty states ---------- */
-.empty { display: grid; justify-items: center; text-align: center; gap: 8px; padding: 40px 24px 44px; }
-.empty svg.illo { width: 168px; height: 112px; margin-bottom: 6px; }
-.empty h3 { font-size: var(--t-section); font-weight: 650; }
-.empty p { color: var(--muted); max-width: 52ch; }
-.empty .actions { margin-top: 10px; justify-content: center; }
-.empty.compact { padding: 24px 16px; }
-.empty.compact svg.illo { width: 120px; height: 80px; }
-.illo .f1 { fill: var(--illo-1); } .illo .f2 { fill: var(--illo-2); } .illo .s1 { stroke: var(--illo-line); fill: none; } .illo .s2 { stroke: var(--illo-soft); fill: none; }
-.illo .fl { fill: var(--illo-line); } .illo .fs { fill: var(--surface); } .illo .fsoft { fill: var(--illo-soft); }
-
-/* ---------- skeletons ---------- */
-.sk { display: block; border-radius: 6px; background: linear-gradient(90deg, var(--neutral-bg) 0%, color-mix(in srgb, var(--neutral-bg) 55%, var(--surface)) 50%, var(--neutral-bg) 100%); background-size: 200% 100%; animation: sk 1.3s ease-in-out infinite; }
-@keyframes sk { from { background-position: 100% 0; } to { background-position: -100% 0; } }
-:root[data-motion="reduce"] .sk { animation: none; }
-@media (prefers-reduced-motion: reduce) { .sk { animation: none; } }
-.sk-line { height: 10px; }
-.sk-block { height: 72px; border-radius: var(--r); }
-
-/* ---------- notices ---------- */
-.notice { display: flex; gap: 10px; align-items: flex-start; border-radius: var(--r); padding: 10px 14px; font-size: var(--t-body); border: 1px solid transparent; }
-.notice svg { width: 16px; height: 16px; margin-top: 1px; flex: none; }
-.notice.bad { background: var(--bad-bg); color: var(--bad-ink); border-color: color-mix(in srgb, var(--bad-solid) 25%, transparent); }
-.notice.warn { background: var(--warn-bg); color: var(--warn-ink); border-color: color-mix(in srgb, var(--warn-solid) 25%, transparent); }
-.notice.ok { background: var(--ok-bg); color: var(--ok-ink); }
-.notice.info { background: var(--accent-soft); color: var(--ink); border-color: var(--accent-line); }
-.notice .grow { flex: 1; }
-
-/* ---------- forms ---------- */
-.form { display: grid; gap: 14px; align-content: start; }
-.field { display: grid; gap: 6px; }
-.field label, .legend { font-weight: 600; font-size: var(--t-body); }
-.field .hint { color: var(--muted); font-size: var(--t-meta); }
-.input, select.input {
-  font: inherit; color: var(--ink); background: var(--surface); border: 1px solid var(--line-2); border-radius: 8px; height: 34px; padding: 0 10px; width: 100%;
-  box-shadow: var(--shadow-1); transition: border-color var(--speed) var(--ease), box-shadow var(--speed) var(--ease);
-}
-.input::placeholder { color: var(--faint); }
-.input:focus-visible { outline: none; border-color: var(--accent-solid); box-shadow: 0 0 0 3px color-mix(in srgb, var(--accent-solid) 25%, transparent); }
-select.input { padding-right: 8px; }
-.search-input { position: relative; }
-.search-input svg { position: absolute; left: 10px; top: 50%; width: 14px; height: 14px; margin-top: -7px; color: var(--muted); }
-.search-input .input { padding-left: 30px; }
-.check { display: inline-flex; align-items: center; gap: 8px; cursor: pointer; font-size: var(--t-meta); font-weight: 560; }
-.check input { width: 15px; height: 15px; accent-color: var(--accent-solid); margin: 0; }
-
-/* ---------- log ---------- */
-.log { background: var(--code-bg); color: var(--code-ink); border-radius: var(--r); padding: 12px 14px; max-height: 260px; overflow: auto; white-space: pre-wrap; overflow-wrap: anywhere; margin: 0; font-size: 11.5px; line-height: 1.55; }
-.cmd { display: flex; align-items: center; gap: 8px; background: var(--surface-2); border: 1px solid var(--line); border-radius: 8px; padding: 6px 6px 6px 10px; font-family: var(--mono); font-size: 11.5px; }
-.cmd code { flex: 1; min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
-
-/* ---------- overlays: palette, onboarding ---------- */
-.scrim { position: fixed; inset: 0; background: var(--scrim); z-index: 50; display: grid; place-items: start center; padding-top: 12vh; animation: fade var(--speed) var(--ease); }
-@keyframes fade { from { opacity: 0; } }
-@keyframes rise { from { opacity: 0; transform: translateY(6px) scale(.99); } }
-.palette { width: min(640px, calc(100vw - 48px)); background: var(--surface); border: 1px solid var(--line); border-radius: var(--r-lg); box-shadow: var(--shadow-3); overflow: hidden; animation: rise var(--speed) var(--ease); }
-.palette-in { display: flex; align-items: center; gap: 10px; padding: 0 16px; border-bottom: 1px solid var(--line); }
-.palette-in svg { width: 17px; height: 17px; color: var(--muted); }
-.palette-in input { all: unset; flex: 1; height: 52px; font-size: var(--t-section); color: var(--ink); }
-.palette-in input::placeholder { color: var(--faint); }
-.palette-list { max-height: 380px; overflow: auto; padding: 6px; }
-.palette-group { padding: 10px 10px 4px; font-size: var(--t-micro); font-weight: 650; letter-spacing: .06em; text-transform: uppercase; color: var(--muted); }
-.palette-item { display: flex; align-items: center; gap: 10px; height: 38px; padding: 0 10px; border-radius: 8px; cursor: pointer; color: var(--ink-2); }
-.palette-item svg { width: 16px; height: 16px; color: var(--muted); }
-.palette-item .app-icon { width: 20px; height: 20px; border-radius: 5px; font-size: 8.5px; }
-.palette-item .grow { flex: 1; min-width: 0; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
-.palette-item .hint { font-size: var(--t-micro); color: var(--muted); }
-.palette-item[aria-selected="true"] { background: var(--accent-soft); color: var(--ink); }
-.palette-item[aria-selected="true"] svg { color: var(--accent-solid); }
-.palette-foot { display: flex; gap: 14px; padding: 8px 14px; border-top: 1px solid var(--line); background: var(--surface-2); font-size: var(--t-micro); color: var(--muted); }
-.palette-foot span { display: inline-flex; align-items: center; gap: 5px; }
-.palette-empty { padding: 28px; text-align: center; color: var(--muted); }
-
-.wizard-scrim { position: fixed; inset: 0; z-index: 40; background: var(--scrim); display: grid; place-items: center; padding: 32px; animation: fade var(--speed) var(--ease); }
-.wizard { width: min(980px, 100%); height: min(640px, 100%); display: grid; grid-template-columns: 280px minmax(0, 1fr); background: var(--surface); border: 1px solid var(--line); border-radius: 18px; box-shadow: var(--shadow-3); overflow: hidden; animation: rise var(--speed) var(--ease); }
-.wz-side { background: var(--bg-sunken); border-right: 1px solid var(--line); padding: 24px 20px; display: flex; flex-direction: column; gap: 22px; }
-.wz-steps { list-style: none; margin: 0; padding: 0; display: grid; gap: 4px; }
-.wz-step { all: unset; box-sizing: border-box; width: 100%; display: flex; align-items: center; gap: 12px; padding: 9px 10px; border-radius: 9px; color: var(--muted); cursor: pointer; font-weight: 560; }
-.wz-step:hover { background: var(--hover); color: var(--ink); }
-.wz-step:focus-visible { outline: 2px solid var(--focus); outline-offset: -2px; }
-.wz-step[aria-current="step"] { background: var(--surface); color: var(--ink); box-shadow: var(--shadow-1), inset 0 0 0 1px var(--line); font-weight: 640; }
-.wz-num { width: 24px; height: 24px; border-radius: 50%; display: grid; place-items: center; font-size: var(--t-micro); font-weight: 700; border: 1.5px solid var(--line-2); color: var(--muted); background: var(--surface); flex: none; }
-.wz-num svg { width: 12px; height: 12px; }
-.wz-step[aria-current="step"] .wz-num { border-color: var(--accent-solid); color: var(--accent); }
-.wz-step.done .wz-num { background: var(--accent-solid); border-color: var(--accent-solid); color: #fff; }
-.wz-side .foot { margin-top: auto; font-size: var(--t-meta); color: var(--muted); display: grid; gap: 6px; }
-.wz-main { display: flex; flex-direction: column; min-height: 0; }
-.wz-body { flex: 1; overflow: auto; padding: 32px 36px 20px; display: grid; gap: 18px; align-content: start; }
-.wz-body h2 { font-size: 22px; font-weight: 680; letter-spacing: -.015em; }
-.wz-body .lead { color: var(--muted); font-size: var(--t-em); max-width: 60ch; line-height: 1.55; }
-.wz-foot { display: flex; align-items: center; gap: 8px; padding: 14px 20px; border-top: 1px solid var(--line); background: var(--surface-2); }
-.wz-foot .grow { flex: 1; }
-.choice-grid { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 12px; }
-.choice { all: unset; box-sizing: border-box; display: grid; gap: 6px; align-content: start; padding: 16px; border: 1px solid var(--line); border-radius: var(--r-lg); cursor: pointer; background: var(--surface); transition: border-color var(--speed) var(--ease), box-shadow var(--speed) var(--ease); }
-.choice:hover { border-color: var(--accent-line); box-shadow: var(--shadow-2); }
-.choice:focus-visible { outline: 2px solid var(--focus); outline-offset: 2px; }
-.choice[aria-pressed="true"] { border-color: var(--accent-solid); box-shadow: 0 0 0 3px color-mix(in srgb, var(--accent-solid) 18%, transparent); }
-.choice .ch-icon { width: 34px; height: 34px; border-radius: 9px; display: grid; place-items: center; background: var(--accent-soft); color: var(--accent); margin-bottom: 4px; }
-.choice .ch-icon svg { width: 18px; height: 18px; }
-.choice b { font-weight: 650; }
-.choice span { color: var(--muted); font-size: var(--t-meta); line-height: 1.45; }
-.checklist { display: grid; gap: 8px; }
-.ck { display: flex; align-items: center; gap: 12px; padding: 10px 14px; border: 1px solid var(--line); border-radius: var(--r); background: var(--surface); }
-.ck .ck-ic { width: 22px; height: 22px; border-radius: 50%; display: grid; place-items: center; flex: none; }
-.ck .ck-ic svg { width: 12px; height: 12px; }
-.ck .grow { flex: 1; min-width: 0; }
-.ck .t { font-weight: 600; }
-.ck .s { color: var(--muted); font-size: var(--t-meta); }
-
-/* ---------- toasts ---------- */
-.toasts { position: fixed; right: 20px; bottom: 20px; z-index: 60; display: grid; gap: 10px; width: 360px; }
-.toast { background: var(--surface); border: 1px solid var(--line); border-radius: var(--r-lg); box-shadow: var(--shadow-3); padding: 12px 14px; display: grid; gap: 8px; animation: rise var(--speed) var(--ease); }
-.toast-top { display: flex; align-items: flex-start; gap: 10px; }
-.toast-top .ti { width: 22px; height: 22px; border-radius: 50%; display: grid; place-items: center; flex: none; }
-.toast-top .ti svg { width: 13px; height: 13px; }
-.toast-top .tt { flex: 1; min-width: 0; display: grid; gap: 2px; }
-.toast-top .tt b { font-weight: 640; }
-.toast-top .tt span { color: var(--muted); font-size: var(--t-meta); overflow: hidden; text-overflow: ellipsis; display: -webkit-box; -webkit-line-clamp: 2; -webkit-box-orient: vertical; }
-.toast .bar { height: 5px; }
-.toast .bar.indet > span { width: 35% !important; animation: indet 1.2s ease-in-out infinite; }
-@keyframes indet { from { transform: translateX(-100%); } to { transform: translateX(290%); } }
-:root[data-motion="reduce"] .toast .bar.indet > span { animation: none; width: 100% !important; opacity: .5; }
-@media (prefers-reduced-motion: reduce) { .toast .bar.indet > span { animation: none; width: 100% !important; opacity: .5; } }
-.toast-actions { display: flex; justify-content: flex-end; gap: 6px; }
-
-/* ---------- misc ---------- */
-.grid-cards { display: grid; grid-template-columns: repeat(auto-fill, minmax(260px, 1fr)); gap: 12px; }
-.tf-group { padding: 14px 16px; border: 1px solid var(--line); border-radius: var(--r-lg); background: var(--surface); display: grid; gap: 10px; box-shadow: var(--shadow-1); }
-.tf-group .stat { display: flex; gap: 18px; }
-.tf-group .stat div { display: grid; gap: 2px; }
-.tf-group .stat b { font-size: 18px; font-weight: 700; font-variant-numeric: tabular-nums; }
-.tool-row .ti { width: 34px; height: 34px; border-radius: 9px; display: grid; place-items: center; background: var(--neutral-bg); color: var(--ink-2); flex: none; }
-.tool-row .ti svg { width: 17px; height: 17px; }
-.prog { display: grid; gap: 4px; min-width: 180px; }
-.prog .bar { height: 6px; }
-.prog .c { font-size: var(--t-micro); color: var(--muted); display: flex; justify-content: space-between; font-variant-numeric: tabular-nums; }
-.shortcuts { display: grid; grid-template-columns: 1fr auto; gap: 8px 24px; font-size: var(--t-body); }
-.shortcuts dd { margin: 0; display: flex; gap: 4px; justify-content: flex-end; }
-.legend-row { display: flex; gap: 16px; flex-wrap: wrap; font-size: var(--t-micro); color: var(--muted); }
-.legend-row span { display: inline-flex; align-items: center; gap: 6px; }
-.ic13 { width: 13px; height: 13px; }
-.ic14 { width: 14px; height: 14px; }
-.side-foot svg { width: 13px; height: 13px; }
-.fix { display: flex; align-items: flex-start; gap: 8px; margin-top: 6px; padding: 6px 10px; border-radius: 8px; background: var(--surface-2); border: 1px solid var(--line); color: var(--ink-2); }
-.fix svg { width: 13px; height: 13px; margin-top: 2px; color: var(--accent-solid); flex: none; }
-.fix code { font-size: 11.5px; white-space: pre-wrap; overflow-wrap: anywhere; }
-.field > .seg { justify-self: start; }
-.wz-body svg.illo { width: 168px; height: 112px; margin-bottom: -6px; }
-h2[tabindex="-1"]:focus, h2[tabindex="-1"]:focus-visible { outline: none; }
-.acc-pick { display: grid; grid-template-columns: 18px minmax(0, 1fr); align-items: center; gap: 8px; }
-.acc-pick svg { width: 15px; height: 15px; color: var(--muted); }
-.li .app-icon { width: 40px; height: 40px; border-radius: 10px; }
-.app-head .store-badge { height: 30px; padding-right: 4px; }
-.app-head .store-badge .chip { height: 22px; }
-.mini-health { display: flex; align-items: center; gap: 8px; }
-.mini-health .spark { width: 76px; height: 26px; }
-.tbad { color: var(--bad-ink); } .twarn { color: var(--warn-ink); }
-.table .mini, .table .mini > * { white-space: nowrap; }
-.table .mini .row { flex-wrap: nowrap; }
diff --git a/apps/desktop/src/ui/Palette.tsx b/apps/desktop/src/ui/Palette.tsx
deleted file mode 100644
index d80b2a1..0000000
--- a/apps/desktop/src/ui/Palette.tsx
+++ /dev/null
@@ -1,73 +0,0 @@
-// Command palette (Cmd/Ctrl+K): jump to an app, a tab, a screen, or run an action. Arrow keys, Enter, Esc.
-import { type ReactNode, useEffect, useMemo, useRef, useState } from 'react';
-import { t } from '../i18n';
-import { fuzzy } from '../lib/model';
-import { Icon, type IconName } from './icons';
-import { AppIcon, Kbd, MOD } from './kit';
-
-export interface Command { id: string; group: string; title: string; hint?: string; icon?: IconName; app?: { name: string; icon?: string | null }; keywords?: string; run: () => void }
-
-export function Palette({ commands, onClose }: { commands: Command[]; onClose: () => void }) {
-  const [q, setQ] = useState('');
-  const [sel, setSel] = useState(0);
-  const input = useRef<HTMLInputElement>(null);
-  const list = useRef<HTMLDivElement>(null);
-  const before = useRef<Element | null>(null);
-
-  useEffect(() => {
-    before.current = document.activeElement;
-    input.current?.focus();
-    return () => { (before.current as HTMLElement | null)?.focus?.(); };
-  }, []);
-
-  const items = useMemo(() => {
-    if (!q.trim()) return commands;
-    return commands.map(c => ({ c, s: Math.max(fuzzy(q, c.title), fuzzy(q, `${c.group} ${c.title} ${c.keywords ?? ''}`) - 1) }))
-      .filter(x => x.s >= 0).sort((a, b) => b.s - a.s).map(x => x.c);
-  }, [q, commands]);
-  useEffect(() => { setSel(0); }, [q]);
-  useEffect(() => { list.current?.querySelector('[aria-selected="true"]')?.scrollIntoView({ block: 'nearest' }); }, [sel]);
-
-  const run = (c: Command | undefined) => { if (!c) return; onClose(); c.run(); };
-  const onKey = (e: React.KeyboardEvent) => {
-    if (e.key === 'ArrowDown') { e.preventDefault(); setSel(s => Math.min(items.length - 1, s + 1)); }
-    else if (e.key === 'ArrowUp') { e.preventDefault(); setSel(s => Math.max(0, s - 1)); }
-    else if (e.key === 'Enter') { e.preventDefault(); run(items[sel]); }
-    else if (e.key === 'Escape') { e.preventDefault(); onClose(); }
-    else if (e.key === 'Tab') e.preventDefault();
-  };
-
-  const rows: ReactNode[] = [];
-  let group = '';
-  items.forEach((c, i) => {
-    if (!q.trim() && c.group !== group) { group = c.group; rows.push(<div key={`g-${group}`} className="palette-group" role="presentation">{group}</div>); }
-    rows.push(
-      <div key={c.id} id={`pi-${i}`} role="option" aria-selected={i === sel} className="palette-item" onMouseMove={() => setSel(i)} onClick={() => run(c)}>
-        {c.app ? <AppIcon name={c.app.name} src={c.app.icon} /> : <Icon name={c.icon ?? 'arrowRight'} />}
-        <span className="grow">{c.title}</span>
-        {c.hint && <span className="hint">{c.hint}</span>}
-      </div>,
-    );
-  });
-
-  return (
-    <div className="scrim" onMouseDown={e => { if (e.target === e.currentTarget) onClose(); }}>
-      <div className="palette" role="dialog" aria-modal="true" aria-label={t('palette.title')} onKeyDown={onKey}>
-        <div className="palette-in">
-          <Icon name="search" />
-          <input ref={input} value={q} onChange={e => setQ(e.target.value)} placeholder={t('palette.placeholder')} role="combobox" aria-expanded="true"
-            aria-controls="palette-list" aria-activedescendant={items.length ? `pi-${sel}` : undefined} aria-autocomplete="list" spellCheck={false} />
-          <Kbd keys={['Esc']} />
-        </div>
-        <div className="palette-list" id="palette-list" role="listbox" ref={list} aria-label={t('palette.results')}>
-          {items.length ? rows : <div className="palette-empty">{t('palette.none', { q })}</div>}
-        </div>
-        <div className="palette-foot">
-          <span><Kbd keys={['↑', '↓']} />{t('palette.move')}</span>
-          <span><Kbd keys={['↵']} />{t('palette.open')}</span>
-          <span><Kbd keys={[MOD, 'K']} />{t('palette.toggle')}</span>
-        </div>
-      </div>
-    </div>
-  );
-}
diff --git a/apps/desktop/src/ui/Toasts.tsx b/apps/desktop/src/ui/Toasts.tsx
deleted file mode 100644
index eabb03d..0000000
--- a/apps/desktop/src/ui/Toasts.tsx
+++ /dev/null
@@ -1,40 +0,0 @@
-import { t } from '../i18n';
-import { bytes, num } from '../lib/format';
-import { useData } from '../store';
-import { Icon, type IconName } from './icons';
-
-const ICON: Record<string, [IconName, string]> = { job: ['refresh', 'tone-bg-accent'], ok: ['check', 'tone-bg-ok'], bad: ['alertCircle', 'tone-bg-bad'], info: ['info', 'tone-bg-info'] };
-
-/** Background jobs and results, bottom right. Jobs show progress and a Cancel button; results close by themselves. */
-export function Toasts() {
-  const d = useData();
-  return (
-    <div className="toasts" aria-live="polite" aria-relevant="additions text">
-      {d.toasts.map(x => {
-        const [icon, cls] = ICON[x.kind]!;
-        const p = x.progress;
-        const big = p && p.total > 10_000;
-        return (
-          <div key={x.id} className="toast" role={x.kind === 'bad' ? 'alert' : 'status'}>
-            <div className="toast-top">
-              <span className={`ti ${cls}`}><Icon name={icon} className={x.kind === 'job' ? 'spin' : undefined} /></span>
-              <div className="tt"><b>{x.title}</b>{x.detail && <span>{x.detail}</span>}</div>
-              <button className="btn btn-ghost btn-sm btn-icon" onClick={() => d.dismiss(x.id)} aria-label={t('common.close')}><Icon name="x" /></button>
-            </div>
-            {x.kind === 'job' && (
-              <>
-                {p ? (
-                  <div className="prog">
-                    <div className="bar"><span style={{ width: `${Math.min(100, (p.done / Math.max(1, p.total)) * 100)}%` }} /></div>
-                    <div className="c"><span>{big ? `${bytes(p.done)} / ${bytes(p.total)}` : `${num(p.done)} / ${num(p.total)}`}</span><span>{Math.round((p.done / Math.max(1, p.total)) * 100)}%</span></div>
-                  </div>
-                ) : <div className="bar indet"><span /></div>}
-                {x.job && <div className="toast-actions"><button className="btn btn-sm" onClick={() => d.cancelJob(x.job!)}>{t('common.cancel')}</button></div>}
-              </>
-            )}
-          </div>
-        );
-      })}
-    </div>
-  );
-}
diff --git a/apps/desktop/src/ui/icons.tsx b/apps/desktop/src/ui/icons.tsx
deleted file mode 100644
index dd5a607..0000000
--- a/apps/desktop/src/ui/icons.tsx
+++ /dev/null
@@ -1,92 +0,0 @@
-// One stroke icon set (24 x 24 grid, 1.75 stroke, round caps), drawn for this app. Decorative: aria-hidden.
-const P = {
-  portfolio: 'M4 4h6.5v6.5H4zM13.5 4H20v6.5h-6.5zM4 13.5h6.5V20H4zM13.5 13.5H20V20h-6.5z',
-  folder: 'M3.5 7A1.5 1.5 0 0 1 5 5.5h4l2 2h8A1.5 1.5 0 0 1 20.5 9v8.5A1.5 1.5 0 0 1 19 19H5a1.5 1.5 0 0 1-1.5-1.5z',
-  folderPlus: 'M3.5 7A1.5 1.5 0 0 1 5 5.5h4l2 2h8A1.5 1.5 0 0 1 20.5 9v8.5A1.5 1.5 0 0 1 19 19H5a1.5 1.5 0 0 1-1.5-1.5zM12 10.5v5M9.5 13h5',
-  key: 'M8 20a4.5 4.5 0 1 0 0-9 4.5 4.5 0 0 0 0 9zM11.2 12.3 20 3.5M16.5 7l2.5 2.5M14.2 9.3l2 2',
-  package: 'M12 3 20 7.5v9L12 21l-8-4.5v-9zM4 7.5l8 4.5 8-4.5M12 12v9',
-  settings: 'M12 15.2a3.2 3.2 0 1 0 0-6.4 3.2 3.2 0 0 0 0 6.4zM19.1 13.6l1.4 1.1-1.8 3.1-1.7-.6a7 7 0 0 1-1.9 1.1l-.3 1.8h-3.6l-.3-1.8a7 7 0 0 1-1.9-1.1l-1.7.6-1.8-3.1 1.4-1.1a7 7 0 0 1 0-2.2L3.5 9.3l1.8-3.1 1.7.6A7 7 0 0 1 8.9 5.7l.3-1.8h3.6l.3 1.8a7 7 0 0 1 1.9 1.1l1.7-.6 1.8 3.1-1.4 1.1a7 7 0 0 1 0 2.2z',
-  search: 'M10.5 17a6.5 6.5 0 1 0 0-13 6.5 6.5 0 0 0 0 13zM15.3 15.3 20 20',
-  refresh: 'M20 11a8 8 0 0 0-14.3-4.9L4 8M4 4v4h4M4 13a8 8 0 0 0 14.3 4.9L20 16M20 20v-4h-4',
-  chevronRight: 'M9.5 6l6 6-6 6',
-  chevronDown: 'M6 9.5l6 6 6-6',
-  plus: 'M12 5v14M5 12h14',
-  x: 'M6 6l12 12M18 6 6 18',
-  check: 'M5 12.5l4.5 4.5L19 7.5',
-  alert: 'M12 4 21 19.5H3zM12 10v4.5M12 17.2v.1',
-  alertCircle: 'M12 21a9 9 0 1 0 0-18 9 9 0 0 0 0 18zM12 7.5v5.5M12 16.3v.1',
-  info: 'M12 21a9 9 0 1 0 0-18 9 9 0 0 0 0 18zM12 11v5.5M12 7.7v.1',
-  external: 'M14 4h6v6M20 4l-8.5 8.5M18 14v4.5A1.5 1.5 0 0 1 16.5 20h-11A1.5 1.5 0 0 1 4 18.5v-11A1.5 1.5 0 0 1 5.5 6H10',
-  download: 'M12 4v11M7.5 10.5 12 15l4.5-4.5M4.5 19.5h15',
-  trash: 'M4.5 7h15M9.5 7V4.5h5V7M6.5 7l1 12.5h9l1-12.5M10.5 11v5M13.5 11v5',
-  star: 'M12 3.8l2.5 5.1 5.6.8-4 4 1 5.5-5.1-2.7-5 2.7 1-5.5-4.1-4 5.7-.8z',
-  message: 'M5 5.5h14A1.5 1.5 0 0 1 20.5 7v9a1.5 1.5 0 0 1-1.5 1.5h-7l-4.5 3v-3H5A1.5 1.5 0 0 1 3.5 16V7A1.5 1.5 0 0 1 5 5.5z',
-  activity: 'M3.5 12h4l2.5-6.5 4 13 2.5-6.5h4',
-  tag: 'M3.5 12.3V4.5a1 1 0 0 1 1-1h7.8l8.2 8.2a1.4 1.4 0 0 1 0 2L13.7 20.5a1.4 1.4 0 0 1-2 0zM8 8.2v.1',
-  text: 'M6 3.5h8.5L19 8v12.5H6zM14 3.5V8.5h5M9 12.5h7M9 16h5',
-  plane: 'M21 3.5 10.5 14M21 3.5l-6.5 17-4-6.5-6.5-4z',
-  rocket: 'M14 4.5c3-1 5.5-1 5.5-1s0 2.5-1 5.5L12 15.5 8.5 12zM8.5 12l-3 .5-2 2 4 1M12 15.5l-.5 3-2 2-1-4M15.5 8.5v.1',
-  shield: 'M12 3.5 19 6v5.5c0 4.5-3 7.5-7 9-4-1.5-7-4.5-7-9V6zM8.8 12l2.2 2.2 4.4-4.4',
-  clock: 'M12 21a9 9 0 1 0 0-18 9 9 0 0 0 0 18zM12 7v5l3.5 2',
-  command: 'M9 6.5A2.5 2.5 0 1 0 6.5 9H9zm0 0v11m0-11h6m-6 11a2.5 2.5 0 1 1-2.5-2.5H9zm6-11A2.5 2.5 0 1 1 17.5 9H15zm0 0v11m0 0a2.5 2.5 0 1 0 2.5-2.5H15zM9 9h6M9 15h6',
-  globe: 'M12 21a9 9 0 1 0 0-18 9 9 0 0 0 0 18zM3.5 12h17M12 3c2.5 2.5 3.5 5.5 3.5 9s-1 6.5-3.5 9c-2.5-2.5-3.5-5.5-3.5-9S9.5 5.5 12 3z',
-  moon: 'M19.5 14.5A7.5 7.5 0 0 1 9.5 4.5a7.5 7.5 0 1 0 10 10z',
-  sun: 'M12 16a4 4 0 1 0 0-8 4 4 0 0 0 0 8zM12 2.5v2M12 19.5v2M4.6 4.6l1.4 1.4M18 18l1.4 1.4M2.5 12h2M19.5 12h2M4.6 19.4 6 18M18 6l1.4-1.4',
-  terminal: 'M4.5 5h15A1.5 1.5 0 0 1 21 6.5v11a1.5 1.5 0 0 1-1.5 1.5h-15A1.5 1.5 0 0 1 3 17.5v-11A1.5 1.5 0 0 1 4.5 5zM7 9.5l3 2.5-3 2.5M12.5 15h4',
-  copy: 'M9 9h10.5v10.5H9zM15 9V4.5H4.5V15H9',
-  image: 'M5 4.5h14A1.5 1.5 0 0 1 20.5 6v12a1.5 1.5 0 0 1-1.5 1.5H5A1.5 1.5 0 0 1 3.5 18V6A1.5 1.5 0 0 1 5 4.5zM3.5 16l5-5 4 4 2.5-2.5 5.5 5.5M15.5 9.5v.1',
-  users: 'M9 11a3.5 3.5 0 1 0 0-7 3.5 3.5 0 0 0 0 7zM2.5 20a6.5 6.5 0 0 1 13 0M16 4.3a3.5 3.5 0 0 1 0 6.4M18 14a6.5 6.5 0 0 1 3.5 6',
-  layers: 'M12 3.5 21 8l-9 4.5L3 8zM3 12.5l9 4.5 9-4.5M3 16.5l9 4.5 9-4.5',
-  sparkle: 'M12 3.5c.6 4 2.4 5.9 6.5 6.5-4.1.6-5.9 2.5-6.5 6.5-.6-4-2.4-5.9-6.5-6.5 4.1-.6 5.9-2.5 6.5-6.5zM18.5 15.5c.3 1.6 1 2.3 2.5 2.5-1.5.2-2.2.9-2.5 2.5-.3-1.6-1-2.3-2.5-2.5 1.5-.2 2.2-.9 2.5-2.5z',
-  pause: 'M8.5 5.5v13M15.5 5.5v13',
-  cube: 'M12 3.5 20 8v8l-8 4.5L4 16V8zM12 12.5V20.5M12 12.5 20 8M12 12.5 4 8',
-  arrowRight: 'M5 12h14M13 6l6 6-6 6',
-  arrowLeft: 'M19 12H5M11 6l-6 6 6 6',
-  dot: 'M12 12.5a.5.5 0 1 0 0-1 .5.5 0 0 0 0 1z',
-  phone: 'M7.5 3h9A1.5 1.5 0 0 1 18 4.5v15a1.5 1.5 0 0 1-1.5 1.5h-9A1.5 1.5 0 0 1 6 19.5v-15A1.5 1.5 0 0 1 7.5 3zM10.5 18h3',
-  keyboard: 'M3.5 6.5h17A1 1 0 0 1 21.5 7.5v9a1 1 0 0 1-1 1h-17a1 1 0 0 1-1-1v-9a1 1 0 0 1 1-1zM6.5 10h.1M10 10h.1M13.5 10h.1M17 10h.1M7.5 14h9',
-  database: 'M12 8c4.4 0 8-1.3 8-3s-3.6-3-8-3-8 1.3-8 3 3.6 3 8 3zM4 5v14c0 1.7 3.6 3 8 3s8-1.3 8-3V5M4 12c0 1.7 3.6 3 8 3s8-1.3 8-3',
-  wand: 'M14.5 6.5l3 3M4 20 17.5 6.5l-3-3L1 17zM19 2.5v3M20.5 4h-3M21 10v2M22 11h-2',
-} as const;
-
-export type IconName = keyof typeof P;
-
-export function Icon({ name, className, title }: { name: IconName; className?: string; title?: string }) {
-  return (
-    <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="1.75" strokeLinecap="round" strokeLinejoin="round" className={className} aria-hidden={title ? undefined : true} role={title ? 'img' : undefined}>
-      {title && <title>{title}</title>}
-      <path d={P[name]} />
-    </svg>
-  );
-}
-
-/** Generic store glyphs (not the stores' logos): a rounded "A" tile for the App Store, a play triangle for Google Play. */
-export function StoreGlyph({ store, className }: { store: 'ios' | 'android'; className?: string }) {
-  return store === 'ios' ? (
-    <svg viewBox="0 0 24 24" className={className} aria-hidden="true" fill="none" stroke="currentColor" strokeWidth="1.75" strokeLinecap="round" strokeLinejoin="round">
-      <rect x="3" y="3" width="18" height="18" rx="5" />
-      <path d="M9 16.5 12.6 7.5M15 16.5l-2.2-5.4M8 13.5h8" />
-    </svg>
-  ) : (
-    <svg viewBox="0 0 24 24" className={className} aria-hidden="true" fill="none" stroke="currentColor" strokeWidth="1.75" strokeLinejoin="round">
-      <path d="M6 3.8v16.4a.8.8 0 0 0 1.2.7l13.6-8.2a.8.8 0 0 0 0-1.4L7.2 3.1A.8.8 0 0 0 6 3.8z" />
-      <path d="M6.3 3.4 14.5 12l-8.2 8.6" strokeLinecap="round" />
-    </svg>
-  );
-}
-
-/** The storebound mark (an arrow out of a tray, like the site's favicon). */
-export function Mark({ className }: { className?: string }) {
-  return (
-    <svg viewBox="0 0 32 32" className={className} aria-hidden="true">
-      <defs>
-        <linearGradient id="sb-mark" x1="0" y1="0" x2="1" y2="1">
-          <stop offset="0" stopColor="#6d67f0" />
-          <stop offset="1" stopColor="#4338ca" />
-        </linearGradient>
-      </defs>
-      <rect width="32" height="32" rx="8" fill="url(#sb-mark)" />
-      <path d="M16 7.5v11M11 12.5l5-5 5 5M8.5 18v5.5h15V18" fill="none" stroke="#fff" strokeWidth="2.6" strokeLinecap="round" strokeLinejoin="round" />
-    </svg>
-  );
-}
diff --git a/apps/desktop/src/ui/illustrations.tsx b/apps/desktop/src/ui/illustrations.tsx
deleted file mode 100644
index b9d6f3d..0000000
--- a/apps/desktop/src/ui/illustrations.tsx
+++ /dev/null
@@ -1,103 +0,0 @@
-// Empty state illustrations: inline SVG in the theme's tokens (no external assets, both themes). Decorative.
-import type { ReactNode } from 'react';
-const Frame = ({ children }: { children: ReactNode }) => (
-  <svg className="illo" viewBox="0 0 168 112" aria-hidden="true" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round">
-    <ellipse cx="84" cy="100" rx="58" ry="6" className="f1" />
-    {children}
-  </svg>
-);
-
-export type IlloName = 'apps' | 'cloud' | 'reviews' | 'shield' | 'key' | 'plane' | 'pulse' | 'catalog' | 'text' | 'tools' | 'unknown';
-
-export function Illo({ name }: { name: IlloName }) {
-  switch (name) {
-    case 'apps': return (
-      <Frame>
-        <rect x="40" y="22" width="40" height="70" rx="9" className="f2" />
-        <rect x="64" y="14" width="44" height="78" rx="10" className="fs s1" />
-        <rect x="72" y="26" width="28" height="28" rx="7" className="f1" />
-        <path d="M80 72h12M80 79h8" className="s2" />
-        <circle cx="118" cy="28" r="13" className="fl" />
-        <path d="M118 22v12M112 28h12" stroke="#fff" />
-      </Frame>
-    );
-    case 'cloud': return (
-      <Frame>
-        <path d="M54 66a16 16 0 0 1 3-31.7A22 22 0 0 1 99 30a17 17 0 0 1 14 36z" className="f2" />
-        <path d="M60 62a14 14 0 0 1 2.6-27.7A19 19 0 0 1 98.5 32 15 15 0 0 1 110 62" className="s1" />
-        <path d="M84 50v32M75 73l9 9 9-9" className="s1" />
-        <path d="M60 92h48" className="s2" strokeDasharray="3 5" />
-      </Frame>
-    );
-    case 'reviews': return (
-      <Frame>
-        <path d="M38 24h70a8 8 0 0 1 8 8v30a8 8 0 0 1-8 8H66l-14 12V70H38a8 8 0 0 1-8-8V32a8 8 0 0 1 8-8z" className="f2" />
-        <path d="M60 36h66a8 8 0 0 1 8 8v28a8 8 0 0 1-8 8h-12v12l-14-12H60a8 8 0 0 1-8-8V44a8 8 0 0 1 8-8z" className="fs s1" />
-        {[72, 86, 100, 114].map((x, i) => <path key={x} d={`M${x} 52l2.2 4.6 5 .7-3.6 3.5.9 5-4.5-2.4-4.5 2.4.9-5-3.6-3.5 5-.7z`} className={i < 3 ? 'fl' : 'f2'} strokeWidth="0" />)}
-      </Frame>
-    );
-    case 'shield': return (
-      <Frame>
-        <path d="M84 12 116 24v26c0 22-14 36-32 44-18-8-32-22-32-44V24z" className="f2" />
-        <path d="M84 20 110 30v20c0 18-11 30-26 37-15-7-26-19-26-37V30z" className="fs s1" />
-        <path d="M71 52l9 9 18-18" className="s1" strokeWidth="3" />
-      </Frame>
-    );
-    case 'key': return (
-      <Frame>
-        <rect x="34" y="30" width="100" height="58" rx="10" className="f2" />
-        <rect x="42" y="22" width="84" height="58" rx="10" className="fs s1" />
-        <circle cx="70" cy="51" r="11" className="s1" />
-        <path d="M81 51h30M103 51v8M111 51v6" className="s1" />
-        <path d="M54 70h20" className="s2" />
-      </Frame>
-    );
-    case 'plane': return (
-      <Frame>
-        <path d="M30 80c20-6 44-6 64-22" className="s2" strokeDasharray="3 6" />
-        <path d="M136 18 58 50l28 10 10 28z" className="f2" />
-        <path d="M136 18 58 50l28 10 10 28zM136 18 86 60" className="s1" />
-      </Frame>
-    );
-    case 'pulse': return (
-      <Frame>
-        <rect x="26" y="20" width="116" height="68" rx="12" className="f2" />
-        <rect x="34" y="14" width="100" height="68" rx="11" className="fs s1" />
-        <path d="M44 56h16l7-18 12 34 8-22 6 6h21" className="s1" strokeWidth="2.5" />
-        <path d="M44 40h80" className="s2" strokeDasharray="4 5" />
-      </Frame>
-    );
-    case 'catalog': return (
-      <Frame>
-        <rect x="36" y="26" width="44" height="54" rx="9" className="f2" />
-        <rect x="88" y="26" width="44" height="54" rx="9" className="f2" />
-        <rect x="44" y="18" width="80" height="60" rx="10" className="fs s1" />
-        <path d="M56 36h14M56 48h14M56 60h14" className="s2" />
-        <path d="M86 34l4 4 7-7M86 46l4 4 7-7M86 58l4 4 7-7" className="s1" />
-        <path d="M106 34l8 0M106 46l8 0M106 58l8 0" className="s2" />
-      </Frame>
-    );
-    case 'text': return (
-      <Frame>
-        <rect x="46" y="18" width="70" height="78" rx="9" className="f2" />
-        <rect x="54" y="10" width="70" height="78" rx="9" className="fs s1" />
-        <path d="M66 28h46M66 40h40M66 52h46M66 64h28" className="s2" />
-        <circle cx="122" cy="76" r="12" className="fl" />
-        <path d="M117 76l4 4 7-8" stroke="#fff" />
-      </Frame>
-    );
-    case 'tools': return (
-      <Frame>
-        <path d="M84 14 118 32v38L84 88 50 70V32z" className="f2" />
-        <path d="M84 22 112 37v31L84 83 56 68V37zM56 37l28 15 28-15M84 52v31" className="s1" />
-      </Frame>
-    );
-    default: return (
-      <Frame>
-        <circle cx="84" cy="52" r="34" className="f2" />
-        <circle cx="84" cy="52" r="26" className="s1" strokeDasharray="5 6" />
-        <path d="M76 45a8 8 0 1 1 11 7.5c-2 .8-3 2-3 4v2M84 66v.1" className="s1" strokeWidth="3" />
-      </Frame>
-    );
-  }
-}
diff --git a/apps/desktop/src/ui/kit.tsx b/apps/desktop/src/ui/kit.tsx
deleted file mode 100644
index 64555ec..0000000
--- a/apps/desktop/src/ui/kit.tsx
+++ /dev/null
@@ -1,160 +0,0 @@
-// Shared UI pieces of the design system (styles.css): chips, store badges, app icons, KPI tiles, bars, sparklines,
-// stars, notices, skeletons, empty states, segmented controls, cards.
-import { type ReactNode, useId } from 'react';
-import type { ReleasePhase, StoreRelease } from '../api';
-import { t } from '../i18n';
-import { share } from '../lib/format';
-import { hueOf, monogram, type Tone } from '../lib/model';
-import { Icon, type IconName, StoreGlyph } from './icons';
-import { Illo, type IlloName } from './illustrations';
-
-export function Chip({ tone = 'neutral', children, dot = true, title, icon }: { tone?: Tone | 'outline'; children: ReactNode; dot?: boolean; title?: string; icon?: IconName }) {
-  return <span className={`chip ${tone}`} title={title}>{icon ? <Icon name={icon} /> : dot && tone !== 'outline' && <i />}{children}</span>;
-}
-
-const PHASE_TONE: Record<ReleasePhase, Tone> = { live: 'ok', rollout: 'accent', halted: 'bad', approved: 'ok', review: 'warn', rejected: 'bad', testing: 'info', draft: 'neutral', other: 'neutral' };
-
-/** Chip of a store release: "Live", "Rollout 20%", "In review" ... (iOS phased release: "Phased 50%", "Paused"). */
-export function phaseLabel(r: StoreRelease | null | undefined): { text: string; tone: Tone } {
-  if (!r) return { text: t('phase.none'), tone: 'neutral' };
-  const pct = r.fraction !== null && r.fraction !== undefined && r.fraction < 1 ? ` ${share(r.fraction)}` : '';
-  if (r.phase === 'rollout') return { text: (r.store === 'ios' ? t('phase.phased') : t('phase.rollout')) + pct, tone: 'accent' };
-  if (r.phase === 'halted') return { text: (r.store === 'ios' ? t('phase.paused') : t('phase.halted')) + pct, tone: 'bad' };
-  if (r.phase === 'testing' && r.track) return { text: `${t('phase.testing')} · ${r.track}`, tone: 'info' };
-  return { text: t(`phase.${r.phase}`), tone: PHASE_TONE[r.phase] };
-}
-
-export function PhaseChip({ r }: { r: StoreRelease | null | undefined }) {
-  const p = phaseLabel(r);
-  return <Chip tone={p.tone} title={r?.state}>{p.text}</Chip>;
-}
-
-export const storeName = (s: 'ios' | 'android'): string => (s === 'ios' ? 'App Store' : 'Google Play');
-
-/** "App Store · com.example.app" badge, dashed when the app is not on that store. */
-export function StoreBadge({ store, id, off, children }: { store: 'ios' | 'android'; id?: string | null; off?: boolean; children?: ReactNode }) {
-  return (
-    <span className={`store-badge${off ? ' off' : ''}`} title={off ? t('app.notSetUp') : id ?? undefined}>
-      <StoreGlyph store={store} className={store === 'ios' ? 'glyph-ios' : 'glyph-play'} />
-      {storeName(store)}
-      {id && <><span className="sb-sep" /><span className="mono-id">{id}</span></>}
-      {off && <span className="muted">· {t('app.notSetUp')}</span>}
-      {children && <><span className="sb-sep" />{children}</>}
-    </span>
-  );
-}
-
-/** The app's own icon when the project has one, else a monogram on a gradient picked from the name. */
-export function AppIcon({ name, src, className = '' }: { name: string; src?: string | null; className?: string }) {
-  if (src) return <span className={`app-icon ${className}`}><img src={src} alt="" draggable={false} /></span>;
-  const h = hueOf(name);
-  return (
-    <span className={`app-icon mono ${className}`} style={{ background: `linear-gradient(135deg, hsl(${h} 72% 58%), hsl(${(h + 40) % 360} 70% 44%))` }} aria-hidden="true">
-      {monogram(name)}
-    </span>
-  );
-}
-
-export function Kpi({ label, value, sub, icon, tone }: { label: string; value: ReactNode; sub?: ReactNode; icon?: IconName; tone?: Tone }) {
-  return (
-    <div className={`kpi${tone ? ` tone-${tone}` : ''}`}>
-      <div className="k-label">{icon && <Icon name={icon} />}{label}</div>
-      <div className="k-value">{value}</div>
-      {sub !== undefined && <div className="k-sub">{sub}</div>}
-    </div>
-  );
-}
-
-export function Bar({ value, tone, thin, label }: { value: number; tone?: Tone; thin?: boolean; label?: string }) {
-  const v = Math.max(0, Math.min(1, value));
-  return (
-    <div className={`bar${tone && tone !== 'accent' ? ` ${tone}` : ''}${thin ? ' thin' : ''}`} role="meter" aria-valuemin={0} aria-valuemax={100} aria-valuenow={Math.round(v * 100)} aria-label={label}>
-      <span style={{ width: `${v * 100}%` }} />
-    </div>
-  );
-}
-
-/** Line + area sparkline with a dashed threshold line. Values are fractions; the y range always shows the threshold. */
-export function Sparkline({ values, threshold, tone = 'neutral', label }: { values: number[]; threshold?: number; tone?: Tone; label: string }) {
-  const W = 300, H = 72, pad = 4;
-  const gid = useId().replace(/:/g, '');
-  if (!values.length) return <div className="spark" />;
-  const max = Math.max(...values, (threshold ?? 0) * 1.25) * 1.08 || 1;
-  const x = (i: number) => (values.length === 1 ? W / 2 : (i / (values.length - 1)) * W);
-  const y = (v: number) => H - pad - (v / max) * (H - pad * 2);
-  const line = values.map((v, i) => `${i ? 'L' : 'M'}${x(i).toFixed(1)} ${y(v).toFixed(1)}`).join(' ');
-  const area = `${line} L${W} ${H} L0 ${H} Z`;
-  return (
-    <svg className={`spark ${tone}`} viewBox={`0 0 ${W} ${H}`} preserveAspectRatio="none" role="img" aria-label={label}>
-      <defs><linearGradient id={`sg${gid}`} x1="0" y1="0" x2="0" y2="1"><stop offset="0" className="stop-a" /><stop offset="1" className="stop-b" /></linearGradient></defs>
-      <path className="area" d={area} fill={`url(#sg${gid})`} />
-      {threshold !== undefined && <line className="thr" x1="0" x2={W} y1={y(threshold)} y2={y(threshold)} />}
-      <path className="line" d={line} />
-    </svg>
-  );
-}
-
-export function Stars({ n, label }: { n: number; label?: string }) {
-  return (
-    <span className="stars" role="img" aria-label={label ?? t('reviews.starsAria', { count: n })}>
-      {[1, 2, 3, 4, 5].map(i => (
-        <svg key={i} viewBox="0 0 24 24" className={i <= n ? '' : 'off'} aria-hidden="true"><path fill="currentColor" d="M12 3.8l2.5 5.1 5.6.8-4 4 1 5.5-5.1-2.7-5 2.7 1-5.5-4.1-4 5.7-.8z" /></svg>
-      ))}
-    </span>
-  );
-}
-
-export function Notice({ tone, children, icon, action }: { tone: 'bad' | 'warn' | 'ok' | 'info'; children: ReactNode; icon?: IconName; action?: ReactNode }) {
-  const ic: IconName = icon ?? (tone === 'bad' ? 'alertCircle' : tone === 'warn' ? 'alert' : tone === 'ok' ? 'check' : 'info');
-  return <div className={`notice ${tone}`} role={tone === 'bad' ? 'alert' : 'status'}><Icon name={ic} /><div className="grow">{children}</div>{action}</div>;
-}
-
-export function Skeleton({ lines = 3, block }: { lines?: number; block?: boolean }) {
-  return (
-    <div className="stack" aria-busy="true" aria-label={t('common.loading')}>
-      {block && <span className="sk sk-block" />}
-      {Array.from({ length: lines }, (_, i) => <span key={i} className="sk sk-line" style={{ width: `${[92, 76, 84, 58, 70][i % 5]}%` }} />)}
-    </div>
-  );
-}
-
-export function Empty({ illo, title, children, actions, compact }: { illo: IlloName; title: string; children?: ReactNode; actions?: ReactNode; compact?: boolean }) {
-  return (
-    <div className={`empty${compact ? ' compact' : ''}`}>
-      <Illo name={illo} />
-      <h3>{title}</h3>
-      {children && <p>{children}</p>}
-      {actions && <div className="actions">{actions}</div>}
-    </div>
-  );
-}
-
-export function Seg<T extends string>({ value, options, onChange, label }: { value: T; options: [T, string, IconName?][]; onChange: (v: T) => void; label: string }) {
-  return (
-    <div className="seg" role="group" aria-label={label}>
-      {options.map(([v, text, icon]) => <button key={v} type="button" aria-pressed={value === v} onClick={() => onChange(v)}>{icon && <Icon name={icon} />}{text}</button>)}
-    </div>
-  );
-}
-
-export function Card({ title, icon, sub, actions, children, foot, className = '', pad = true }: { title?: ReactNode; icon?: IconName; sub?: ReactNode; actions?: ReactNode; children: ReactNode; foot?: ReactNode; className?: string; pad?: boolean }) {
-  return (
-    <section className={`card ${className}`}>
-      {title !== undefined && (
-        <div className="card-head">
-          <div className="stack" style={{ gap: 2 }}><h2>{icon && <Icon name={icon} />}{title}</h2>{sub && <div className="sub">{sub}</div>}</div>
-          {actions && <div className="actions">{actions}</div>}
-        </div>
-      )}
-      {pad ? <div className="card-body">{children}</div> : children}
-      {foot && <div className="card-foot">{foot}</div>}
-    </section>
-  );
-}
-
-export function Kbd({ keys }: { keys: string[] }) {
-  return <>{keys.map(k => <span key={k} className="kbd">{k}</span>)}</>;
-}
-
-/** Platform modifier label (⌘ on macOS, Ctrl elsewhere). */
-export const MOD = typeof navigator !== 'undefined' && /Mac|iPhone|iPad/.test(navigator.platform) ? '⌘' : 'Ctrl';
diff --git a/apps/desktop/src/vite-env.d.ts b/apps/desktop/src/vite-env.d.ts
deleted file mode 100644
index 11f02fe..0000000
--- a/apps/desktop/src/vite-env.d.ts
+++ /dev/null
@@ -1 +0,0 @@
-/// <reference types="vite/client" />
diff --git a/apps/desktop/tests/model.test.ts b/apps/desktop/tests/model.test.ts
deleted file mode 100644
index 2db98dc..0000000
--- a/apps/desktop/tests/model.test.ts
+++ /dev/null
@@ -1,146 +0,0 @@
-import { describe, expect, test } from 'bun:test';
-import type { AppStatus, ProjectSummary, StoreRelease } from '../src/api';
-import { setLang, t } from '../src/i18n';
-import {
-  attention, type CatalogDiff, filterReviews, fuzzy, healthSeries, hueOf, laneOf, monogram, parityMatrix, PLAY_THRESHOLDS, type Review, starStats,
-  storeNow, toneFor, trainLanes, versionHistory,
-} from '../src/lib/model';
-import { checkState } from '../src/screens/Portfolio';
-import { betaState } from '../src/screens/tabs/TestFlight';
-import { phaseLabel } from '../src/ui/kit';
-
-const rel = (store: 'ios' | 'android', version: string, phase: StoreRelease['phase'], o: Partial<StoreRelease> = {}): StoreRelease =>
-  ({ store, version, build: null, state: phase, phase, fraction: null, track: null, ...o });
-
-describe('release timeline', () => {
-  test('lanes: stage and tone per phase, unknown store = -1', () => {
-    expect(laneOf('ios', null)).toMatchObject({ at: -1 });
-    expect(laneOf('ios', rel('ios', '1', 'draft'))).toMatchObject({ at: 0, tone: 'neutral' });
-    expect(laneOf('ios', rel('ios', '1', 'draft'), true)).toMatchObject({ at: 1, tone: 'info' });
-    expect(laneOf('android', rel('android', '1', 'testing'))).toMatchObject({ at: 1 });
-    expect(laneOf('ios', rel('ios', '1', 'review'))).toMatchObject({ at: 2, tone: 'warn' });
-    expect(laneOf('ios', rel('ios', '1', 'rejected'))).toMatchObject({ at: 2, tone: 'bad' });
-    expect(laneOf('ios', rel('ios', '1', 'live'))).toMatchObject({ at: 4, share: 1, tone: 'ok' });
-    expect(laneOf('android', rel('android', '1', 'rollout', { fraction: 0.2 }))).toMatchObject({ at: 4, share: 0.2, tone: 'accent' });
-    expect(laneOf('android', rel('android', '1', 'halted', { fraction: 0.05 }))).toMatchObject({ at: 4, share: 0.05, tone: 'bad' });
-  });
-  test('TestFlight counts as testing for an iOS draft when a build of that version is in beta', () => {
-    const tf = { groups: [], missingGroups: [], builds: [{ version: '1.5.0', build: '31', processing: 'VALID', internal: 'IN_BETA_TESTING', external: null, uploaded: null }] };
-    const lanes = trainLanes({ version: '1.5.0', ios: rel('ios', '1.5.0', 'draft'), android: null }, tf);
-    expect(lanes.map(l => l.at)).toEqual([1, -1]);
-    expect(trainLanes({ version: '1.6.0', ios: rel('ios', '1.6.0', 'draft'), android: null }, tf)[0]!.at).toBe(0);
-  });
-  test('per store: what reaches users now, and what is next', () => {
-    const all = [rel('ios', '2.4.0', 'review'), rel('ios', '2.3.0', 'rollout', { fraction: 0.2 }), rel('ios', '2.2.1', 'other'), rel('android', '2.2.1', 'live'), rel('android', '2.4.0', 'testing')];
-    expect(storeNow(all, 'ios')).toMatchObject({ now: { version: '2.3.0' }, next: { version: '2.4.0' } });
-    expect(storeNow(all, 'android')).toMatchObject({ now: { version: '2.2.1' }, next: { version: '2.4.0' } });
-    expect(storeNow([], 'ios')).toEqual({ now: null, next: null });
-    expect(versionHistory(all).map(h => [h.version, h.ios?.phase ?? null, h.android?.phase ?? null])).toEqual([['2.4.0', 'review', 'testing'], ['2.3.0', 'rollout', null], ['2.2.1', 'other', 'live']]);
-  });
-  test('phase labels: rollout share, iOS phased and paused words', () => {
-    setLang('en');
-    expect(phaseLabel(rel('android', '1', 'rollout', { fraction: 0.2 }))).toEqual({ text: 'Rollout 20%', tone: 'accent' });
-    expect(phaseLabel(rel('ios', '1', 'rollout', { fraction: 0.5 }))).toEqual({ text: 'Phased 50%', tone: 'accent' });
-    expect(phaseLabel(rel('ios', '1', 'halted', { fraction: 0.02 }))).toEqual({ text: 'Paused 2%', tone: 'bad' });
-    expect(phaseLabel(rel('android', '1', 'testing', { track: 'internal' }))).toEqual({ text: 'Testing · internal', tone: 'info' });
-    expect(phaseLabel(null)).toEqual({ text: 'Not on this store', tone: 'neutral' });
-  });
-});
-
-describe('health', () => {
-  const rows = (vals: number[], w28?: number) => vals.map((v, i) => ({ date: `2026-10-0${i + 1}`, dims: {}, values: { userPerceivedCrashRate: v, ...(i === vals.length - 1 && w28 !== undefined ? { userPerceivedCrashRate28dUserWeighted: w28 } : {}) } }));
-  test('series sorted by date, current = the 28-day value, tone against the threshold', () => {
-    const s = healthSeries([...rows([0.005, 0.006, 0.007], 0.0095)].reverse(), 'userPerceivedCrashRate', PLAY_THRESHOLDS.crash);
-    expect(s.values).toEqual([0.005, 0.006, 0.007]);
-    expect(s.current).toBe(0.0095);
-    expect(s.tone).toBe('warn');
-    expect(healthSeries(rows([0.012]), 'userPerceivedCrashRate', PLAY_THRESHOLDS.crash).tone).toBe('bad');
-    expect(healthSeries([], 'userPerceivedCrashRate', PLAY_THRESHOLDS.crash)).toMatchObject({ current: null, tone: 'neutral' });
-    expect(toneFor(0.001, 0.0109)).toBe('ok');
-  });
-});
-
-describe('reviews', () => {
-  const r = (id: string, store: 'apple' | 'play', rating: number, reply = false, date = '2026-10-01'): Review => ({ store, id, rating, body: `body ${id}`, date, ...(reply ? { reply: { text: 'x' } } : {}) });
-  const rs = [r('a', 'apple', 5, true, '2026-10-03'), r('b', 'play', 1, false, '2026-10-05'), r('c', 'play', 4), r('d', 'apple', 1)];
-  test('star distribution and average', () => {
-    expect(starStats(rs)).toEqual({ count: 4, average: 2.75, byStar: [2, 0, 0, 1, 1], unanswered: 3 });
-    expect(starStats([]).average).toBeNull();
-  });
-  test('filters: store, stars, unanswered, text; newest first', () => {
-    expect(filterReviews(rs, { store: 'all', stars: [], unanswered: false, query: '' }).map(x => x.id)).toEqual(['b', 'a', 'c', 'd']);
-    expect(filterReviews(rs, { store: 'play', stars: [], unanswered: false, query: '' }).map(x => x.id)).toEqual(['b', 'c']);
-    expect(filterReviews(rs, { store: 'all', stars: [1], unanswered: true, query: '' }).map(x => x.id)).toEqual(['b', 'd']);
-    expect(filterReviews(rs, { store: 'all', stars: [], unanswered: false, query: 'BODY C' }).map(x => x.id)).toEqual(['c']);
-  });
-});
-
-describe('catalog parity matrix', () => {
-  const s = { productIds: ['coins', 'no_ads'], subscriptionIds: ['pro'], catalog: { ios: ['coins', 'no_ads', 'pro'], android: ['coins', 'pro'] } } as unknown as ProjectSummary;
-  test('not compared yet: unknown where sold, n/a where not ("unknown, never false")', () => {
-    const m = parityMatrix(s, null);
-    expect(m.map(x => [x.id, x.kind, x.ios.state, x.android.state])).toEqual([['coins', 'product', 'unknown', 'unknown'], ['no_ads', 'product', 'unknown', 'na'], ['pro', 'subscription', 'unknown', 'unknown']]);
-  });
-  test('compared: worst level per cell, store-only items, the largest price gap', () => {
-    const diff: CatalogDiff = { errors: 1, rows: [
-      { id: 'coins', store: 'apple', level: 'ok', code: 'ok', msg: '' }, { id: 'coins', store: 'play', level: 'warn', code: 'locale', msg: 'no listing for de-DE' },
-      { id: 'pro', store: 'play', level: 'error', code: 'missing', msg: 'not on Google Play' }, { id: 'pro', store: 'apple', level: 'ok', code: 'ok', msg: '' },
-      { id: 'old', store: 'apple', level: 'warn', code: 'extra', msg: 'on the store only' },
-    ], parity: [{ id: 'coins', region: 'TR', currency: 'TRY', apple: 10, play: 7, diffPct: 30 }, { id: 'coins', region: 'BR', currency: 'BRL', apple: 5, play: 4.5, diffPct: 10 }] };
-    const m = parityMatrix(s, diff);
-    const by = Object.fromEntries(m.map(x => [x.id, x]));
-    expect(by.coins).toMatchObject({ ios: { state: 'ok' }, android: { state: 'warn', notes: ['no listing for de-DE'] }, maxDiff: 30 });
-    expect(by.no_ads).toMatchObject({ ios: { state: 'unknown' }, android: { state: 'na' } });
-    expect(by.pro).toMatchObject({ android: { state: 'error' } });
-    expect(by.old).toMatchObject({ kind: 'extra', config: false, ios: { state: 'warn' }, android: { state: 'na' } });
-  });
-});
-
-describe('portfolio', () => {
-  const base: AppStatus = { project: '/g', ok: true, app: null, summary: null, check: { ok: true, problems: [], warnings: [] }, release: { source: 'none', current: null, next: null }, catalog: null, storeErrors: {}, errors: [] };
-  test('config check chip', () => {
-    setLang('en');
-    expect(checkState(undefined)).toEqual({ text: 'Not checked', tone: 'neutral' });
-    expect(checkState({ ...base, check: null })).toEqual({ text: 'Config not loaded', tone: 'bad' });
-    expect(checkState({ ...base, check: { ok: false, problems: ['a', 'b'], warnings: [] } })).toEqual({ text: '2 problems', tone: 'bad' });
-    expect(checkState({ ...base, check: { ok: true, problems: [], warnings: ['w'] } })).toEqual({ text: '1 warning', tone: 'warn' });
-    expect(checkState(base)).toEqual({ text: 'Config OK', tone: 'ok' });
-  });
-  test('needs attention: problems, unreadable stores, rejected / halted releases, catalog drift, health near the threshold', () => {
-    const live: AppStatus = { ...base, release: { source: 'live', current: null, next: null, all: [rel('ios', '2.0', 'rejected'), rel('android', '1.9', 'halted')] }, storeErrors: { ios: 'HTTP 401' },
-      catalog: { checked: 'live', products: 2, subscriptions: 0, onlyIos: ['x'], onlyAndroid: [], missingIos: [], missingAndroid: ['y'], ok: false } };
-    const a = attention('p', 'Demo', { ...base, check: { ok: false, problems: ['bad config'], warnings: ['w1'] } }, live,
-      { date: '', play: { window: { start: '', end: '', days: 28 }, crash: [{ date: '2026-10-01', dims: {}, values: { userPerceivedCrashRate: 0.02 } }], anr: [], issues: [] } });
-    expect(a.map(x => [x.tone, x.tab])).toEqual([['bad', 'checks'], ['warn', 'checks'], ['warn', 'releases'], ['bad', 'releases'], ['bad', 'releases'], ['warn', 'catalog'], ['bad', 'health']]);
-    expect(a[5]!.text).toBe('2 catalog items differ between the stores');
-    expect(attention('p', 'Demo', undefined, undefined)).toEqual([]);
-  });
-});
-
-describe('small helpers', () => {
-  test('palette matching prefers word starts and runs', () => {
-    expect(fuzzy('rel', 'Releases')).toBeGreaterThan(fuzzy('rel', 'Prism Puddle · Catalog listing'));
-    expect(fuzzy('xyz', 'Releases')).toBe(-1);
-    expect(fuzzy('', 'x')).toBe(0);
-  });
-  test('monograms and stable hues', () => {
-    expect(monogram('Prism Puddle')).toBe('PP');
-    expect(monogram('tidy')).toBe('TI');
-    expect(hueOf('Prism Puddle')).toBe(hueOf('Prism Puddle'));
-  });
-  test('TestFlight states: expired is history, not an error', () => {
-    expect(betaState('IN_BETA_TESTING').tone).toBe('ok');
-    expect(betaState('WAITING_FOR_BETA_REVIEW').tone).toBe('warn');
-    expect(betaState('BETA_REJECTED').tone).toBe('bad');
-    expect(betaState('EXPIRED').tone).toBe('neutral');
-    expect(betaState(null).text).toBe('–');
-  });
-  test('plural forms', () => {
-    setLang('en');
-    expect(t('reviews.count', { count: 1 })).toBe('1 review');
-    expect(t('reviews.count', { count: 3 })).toBe('3 reviews');
-    setLang('tr');
-    expect(t('reviews.count', { count: 3 })).toBe('3 yorum');
-    setLang('en');
-  });
-});
diff --git a/apps/desktop/tests/prefs.test.ts b/apps/desktop/tests/prefs.test.ts
deleted file mode 100644
index fc30e08..0000000
--- a/apps/desktop/tests/prefs.test.ts
+++ /dev/null
@@ -1,50 +0,0 @@
-import { describe, expect, test } from 'bun:test';
-import { parseStart } from '../src/nav';
-import { shortPath, tildeText } from '../src/paths';
-import { applyPrefs, DEFAULT_PREFS, parsePrefs, resolveLang } from '../src/prefs';
-
-describe('prefs', () => {
-  test('parse is tolerant and only keeps known values', () => {
-    expect(parsePrefs(null)).toEqual(DEFAULT_PREFS);
-    expect(parsePrefs('{broken')).toEqual(DEFAULT_PREFS);
-    expect(parsePrefs('{"theme":"dark","motion":"reduce","lang":"tr","onboarded":true}')).toEqual({ theme: 'dark', motion: 'reduce', lang: 'tr', onboarded: true });
-    expect(parsePrefs('{"theme":"neon","motion":"fast","lang":"xx","onboarded":"yes"}')).toEqual(DEFAULT_PREFS);
-  });
-  test('apply sets and clears data attributes and the document language', () => {
-    const root = { dataset: {} as DOMStringMap, lang: '' };
-    applyPrefs({ theme: 'light', motion: 'reduce', lang: 'tr', onboarded: true }, root);
-    expect({ ...root.dataset }).toEqual({ theme: 'light', motion: 'reduce' });
-    expect(root.lang).toBe('tr');
-    applyPrefs(DEFAULT_PREFS, root, 'en-GB');
-    expect({ ...root.dataset }).toEqual({});
-    expect(root.lang).toBe('en');
-  });
-  test('system language: Turkish when the system is, else English', () => {
-    expect(resolveLang('system', 'tr-TR')).toBe('tr');
-    expect(resolveLang('system', 'de-DE')).toBe('en');
-    expect(resolveLang('en', 'tr-TR')).toBe('en');
-  });
-});
-
-describe('paths', () => {
-  test('home shown as ~', () => {
-    expect(shortPath('/home/you/games/a', '/home/you')).toBe('~/games/a');
-    expect(shortPath('/home/you', '/home/you/')).toBe('~');
-    expect(shortPath('/home/you-2/a', '/home/you')).toBe('/home/you-2/a');
-    expect(shortPath('C:\\Users\\you\\a', 'C:\\Users\\you')).toBe('~\\a');
-    expect(shortPath('/x', null)).toBe('/x');
-    expect(tildeText('in /home/you/a and /home/you/b', '/home/you')).toBe('in ~/a and ~/b');
-  });
-});
-
-describe('routes', () => {
-  test('deep links and start switches', () => {
-    expect(parseStart('accounts', [])).toEqual({ screen: 'accounts' });
-    expect(parseStart('portfolio', [])).toEqual({ screen: 'portfolio' });
-    expect(parseStart('app:health', ['a', 'b'])).toEqual({ screen: 'app', appId: 'a', tab: 'health' });
-    expect(parseStart('app:reviews:2', ['a', 'b'])).toEqual({ screen: 'app', appId: 'b', tab: 'reviews' });
-    expect(parseStart('app:nope', ['a'])).toEqual({ screen: 'app', appId: 'a', tab: 'releases' });
-    expect(parseStart('app:health', [])).toBeNull();
-    expect(parseStart('write', ['a'])).toBeNull();
-  });
-});
diff --git a/apps/desktop/tests/theme.test.ts b/apps/desktop/tests/theme.test.ts
deleted file mode 100644
index e43b466..0000000
--- a/apps/desktop/tests/theme.test.ts
+++ /dev/null
@@ -1,66 +0,0 @@
-// Theme doctor: every text token keeps 7:1 contrast (WCAG AAA) on every surface it is used on, in light and dark;
-// the dark theme is the same whether it comes from the system or from Settings.
-import { describe, expect, test } from 'bun:test';
-import { readFileSync } from 'node:fs';
-import { join } from 'node:path';
-
-const css = readFileSync(join(import.meta.dir, '..', 'src', 'styles.css'), 'utf8');
-
-function block(selector: string): Record<string, string> {
-  const at = css.indexOf(selector);
-  if (at < 0) throw new Error(`no ${selector} block`);
-  const open = css.indexOf('{', at), close = css.indexOf('}', open);
-  const out: Record<string, string> = {};
-  for (const m of css.slice(open + 1, close).matchAll(/--([\w-]+):\s*(#[0-9a-fA-F]{6})\b/g)) out[m[1]!] = m[2]!.toLowerCase();
-  return out;
-}
-
-const lum = (hex: string): number => {
-  const c = [1, 3, 5].map(i => parseInt(hex.slice(i, i + 2), 16) / 255).map(v => (v <= 0.03928 ? v / 12.92 : ((v + 0.055) / 1.055) ** 2.4));
-  return 0.2126 * c[0]! + 0.7152 * c[1]! + 0.0722 * c[2]!;
-};
-export const contrast = (a: string, b: string): number => { const [x, y] = [lum(a), lum(b)].sort((p, q) => q - p); return (x! + 0.05) / (y! + 0.05); };
-
-/** [text token, background token] pairs the stylesheet uses for text. */
-const PAIRS: [string, string][] = [
-  ...['ink', 'ink-2', 'muted'].flatMap(f => ['bg', 'bg-sunken', 'surface', 'surface-2', 'hover'].map(b => [f, b] as [string, string])),
-  ['ink', 'accent-soft'], ['accent', 'surface'], ['accent', 'bg'], ['accent', 'accent-soft'], ['accent-ink', 'accent'],
-  ['ok-ink', 'ok-bg'], ['warn-ink', 'warn-bg'], ['bad-ink', 'bad-bg'], ['info-ink', 'info-bg'], ['neutral-ink', 'neutral-bg'],
-  ['code-ink', 'code-bg'],
-];
-
-describe('theme doctor', () => {
-  const light = block(':root {');
-  const dark = block(':root[data-theme="dark"] {');
-  for (const [name, theme] of [['light', light], ['dark', dark]] as const) {
-    test(`${name}: text tokens reach 7:1`, () => {
-      const low: string[] = [];
-      for (const [f, b] of PAIRS) {
-        const fg = theme[f] ?? light[f], bg = theme[b] ?? light[b];
-        expect(fg, `--${f}`).toBeDefined();
-        expect(bg, `--${b}`).toBeDefined();
-        const c = contrast(fg!, bg!);
-        if (c < 7) low.push(`--${f} on --${b}: ${c.toFixed(2)}:1`);
-      }
-      expect(low).toEqual([]);
-    });
-  }
-  test('system dark and chosen dark are the same tokens', () => {
-    const at = css.indexOf(':root:not([data-theme="light"]) {');
-    const open = css.indexOf('{', at), close = css.indexOf('}', open);
-    const sys: Record<string, string> = {};
-    for (const m of css.slice(open + 1, close).matchAll(/--([\w-]+):\s*([^;]+);/g)) sys[m[1]!] = m[2]!.trim();
-    const chosen: Record<string, string> = {};
-    const a2 = css.indexOf(':root[data-theme="dark"] {'), o2 = css.indexOf('{', a2), c2 = css.indexOf('}', o2);
-    for (const m of css.slice(o2 + 1, c2).matchAll(/--([\w-]+):\s*([^;]+);/g)) chosen[m[1]!] = m[2]!.trim();
-    expect(Object.keys(sys).length).toBeGreaterThan(30);
-    expect(sys).toEqual(chosen);
-  });
-  test('reduced motion turns transitions and animations off', () => {
-    expect(css).toMatch(/prefers-reduced-motion: reduce\) \{ :root \{ --speed: 0s; \} \}/);
-    expect(css).toMatch(/:root\[data-motion="reduce"\] \{ --speed: 0s; \}/);
-    for (const anim of ['.spin', '.sk', '.toast .bar.indet > span']) expect(css).toContain(`:root[data-motion="reduce"] ${anim}`);
-    // no transition longer than 200 ms
-    for (const m of css.matchAll(/transition:[^;]*?(\d*\.?\d+)s/g)) expect(Number(m[1])).toBeLessThanOrEqual(0.2);
-  });
-});
diff --git a/apps/desktop/tests/webview.test.ts b/apps/desktop/tests/webview.test.ts
deleted file mode 100644
index 6e387b9..0000000
--- a/apps/desktop/tests/webview.test.ts
+++ /dev/null
@@ -1,70 +0,0 @@
-// What the webview code may do: only the app commands (no plugin JS API, no network of its own, no eval), no secret
-// ever passes through it, the catalogs are complete, and the release bundle carries no dev fixture mode.
-import { describe, expect, test } from 'bun:test';
-import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
-import { join } from 'node:path';
-import { checkCatalogs } from '../../../tools/i18n-check';
-import { en } from '../src/i18n/en';
-import { tr } from '../src/i18n/tr';
-
-const ROOT = join(import.meta.dir, '..');
-const src = (f: string) => readFileSync(join(ROOT, f), 'utf8');
-function files(dir: string): string[] {
-  return readdirSync(join(ROOT, dir)).flatMap(n => {
-    const rel = join(dir, n);
-    return statSync(join(ROOT, rel)).isDirectory() ? files(rel) : /\.(ts|tsx)$/.test(n) ? [rel] : [];
-  });
-}
-
-describe('webview rules', () => {
-  test('only app commands: no plugin JS APIs, no direct network, no eval', () => {
-    const all = files('src');
-    expect(all.length).toBeGreaterThan(20);
-    for (const f of all) {
-      const s = src(f);
-      expect(s, f).not.toMatch(/@tauri-apps\/plugin-/);
-      expect(s, f).not.toMatch(/\bfetch\(|XMLHttpRequest|WebSocket|eval\(|new Function|dangerouslySetInnerHTML|innerHTML\s*=/);
-      // only api.ts talks to the host
-      if (!f.endsWith('api.ts')) expect(s, f).not.toMatch(/@tauri-apps\/api/);
-    }
-    expect(JSON.parse(src('package.json')).dependencies).toEqual({ '@tauri-apps/api': expect.any(String), react: expect.any(String), 'react-dom': expect.any(String) });
-  });
-  test('the confirm token and credentials never appear in the webview code', () => {
-    for (const f of files('src')) expect(src(f), f).not.toMatch(/confirmToken|credentials|PLAY_SERVICE_ACCOUNT|ASC_P8/);
-  });
-  test('fixtures load only behind import.meta.env.DEV', () => {
-    for (const f of files('src')) {
-      const s = src(f);
-      if (f.includes(`${'dev'}/`)) continue;
-      for (const m of s.matchAll(/import\(['"]\.\/dev\/fixtures['"]\)/g)) {
-        const before = s.slice(Math.max(0, m.index! - 120), m.index!);
-        expect(before, f).toContain('import.meta.env.DEV');
-      }
-      expect(s, f).not.toMatch(/^import .*dev\/fixtures/m);
-    }
-  });
-  test('built bundle (when present) has no fixture mode and no dev switches', () => {
-    const dist = join(ROOT, 'dist', 'assets');
-    if (!existsSync(dist)) return;
-    for (const n of readdirSync(dist)) {
-      const s = readFileSync(join(dist, n), 'utf8');
-      expect(s, n).not.toContain('storebound-dev-fixtures');
-      expect(s, n).not.toContain('mockInvoke');
-      expect(s, n).not.toContain('VITE_START');
-    }
-  });
-});
-
-describe('i18n', () => {
-  test('en and tr: same keys, no empty strings, matching placeholders, house style', () => {
-    expect(checkCatalogs(en, { tr })).toEqual([]);
-  });
-  test('every t() key used in the code exists', () => {
-    const keys = new Set(Object.keys(en));
-    const missing: string[] = [];
-    for (const f of files('src')) {
-      for (const m of src(f).matchAll(/\bt\('([a-zA-Z0-9_.-]+)'/g)) if (!keys.has(m[1]!)) missing.push(`${f}: ${m[1]}`);
-    }
-    expect(missing).toEqual([]);
-  });
-});
diff --git a/apps/desktop/tsconfig.json b/apps/desktop/tsconfig.json
deleted file mode 100644
index 6b90d8f..0000000
--- a/apps/desktop/tsconfig.json
+++ /dev/null
@@ -1,21 +0,0 @@
-{
-  "compilerOptions": {
-    "target": "ES2022",
-    "module": "ESNext",
-    "moduleResolution": "bundler",
-    "lib": ["ES2023", "DOM", "DOM.Iterable"],
-    "jsx": "react-jsx",
-    "types": ["bun"],
-    "strict": true,
-    "noUncheckedIndexedAccess": true,
-    "noImplicitOverride": true,
-    "noUnusedLocals": true,
-    "noUnusedParameters": true,
-    "noEmit": true,
-    "skipLibCheck": true,
-    "isolatedModules": true,
-    "verbatimModuleSyntax": true,
-    "resolveJsonModule": true
-  },
-  "include": ["src", "tests", "vite.config.ts"]
-}
diff --git a/apps/desktop/vite.config.ts b/apps/desktop/vite.config.ts
deleted file mode 100644
index 2ceaa3e..0000000
--- a/apps/desktop/vite.config.ts
+++ /dev/null
@@ -1,18 +0,0 @@
-import react from '@vitejs/plugin-react';
-import { defineConfig } from 'vite';
-
-// Tauri loads the dev server from build.devUrl (http://127.0.0.1:1420) and the built files from ../dist.
-export default defineConfig({
-  plugins: [react()],
-  clearScreen: false,
-  server: { host: '127.0.0.1', port: 1420, strictPort: true, watch: { ignored: ['**/src-tauri/**'] } },
-  build: {
-    target: ['safari15', 'chrome110'],
-    outDir: 'dist',
-    emptyOutDir: true,
-    sourcemap: false,
-    // no inline scripts or styles: the CSP is script-src 'self', style-src 'self'
-    assetsInlineLimit: 0,
-    cssCodeSplit: false,
-  },
-});
diff --git a/cli/analytics.ts b/cli/analytics.ts
index 9c581dc..2df81f7 100644
--- a/cli/analytics.ts
+++ b/cli/analytics.ts
@@ -17,7 +17,7 @@ import {
   latestPerDate, mergeSeries, monthsBetween, parseGitLog, parseReport, pickReport, type PlayDay, playDaily, playObjects, playTotals, type Snapshot,
 } from './lib/analytics';
 import { STORAGE_READ_SCOPE } from './lib/google-auth';
-import { done, log, printJson, warn } from './lib/log';
+import { done, log, warn } from './lib/log';
 import { pct, textTable } from './lib/table';
 import { googleClient } from './play/google';
 
@@ -145,7 +145,6 @@ export async function run(ctx: Ctx): Promise<void> {
     const events = parseGitLog(g.stdout.toString()).reverse();
     log(TAG, `${snaps.length} snapshot(s), ${series.apple.length} App Store day(s), ${series.play.length} Play day(s), ${events.length} store change(s) since ${first}`);
     const fx = compareAroundEvents(series, events, a.num('days', 7));
-    if (a.has('json')) { printJson({ snapshots: snaps.length, since: first, series, effects: fx }); return; }
     console.log(a.has('md') ? effectMarkdown(fx) : effectTable(fx));
     log(TAG, 'reading: a change needs several days on both sides and enough traffic; seasonality, featuring and ads move these numbers too');
     return;
diff --git a/cli/apple/next-build.ts b/cli/apple/next-build.ts
index 5c4a560..0ee770c 100644
--- a/cli/apple/next-build.ts
+++ b/cli/apple/next-build.ts
@@ -5,7 +5,6 @@
 // Then attach exactly that build: storebound apple listing --version x.y.z --build 42 (never "the latest").
 import type { Ctx } from '../lib/ctx';
 import { need } from '../lib/ctx';
-import { printJson } from '../lib/log';
 import { nextBuildNumber } from '../lib/release';
 import { ascClient } from './asc';
 
@@ -15,7 +14,6 @@ export async function run(ctx: Ctx): Promise<void> {
   const appId = await c.app();
   const builds = await c.all(`/v1/builds?filter[app]=${appId}&limit=200&fields[builds]=version`);
   const next = nextBuildNumber(builds.map(b => String(b.attributes.version)));
-  if (ctx.args.has('json')) { printJson({ next, builds: builds.length }); return; }
   console.error(`[apple] ${builds.length} builds on App Store Connect; next build number:`);
   console.log(next);
 }
diff --git a/cli/apple/ppo.ts b/cli/apple/ppo.ts
index af8d2c7..de07de9 100644
--- a/cli/apple/ppo.ts
+++ b/cli/apple/ppo.ts
@@ -1,5 +1,5 @@
 // App Store Product Page Optimization through the App Store Connect API, wired to the `shots` variants.
-//   storebound apple ppo status [--json]
+//   storebound apple ppo status
 //   storebound apple ppo create --variant b[,c] [--name "..."] [--traffic 30] [--dry]
 //   storebound apple ppo upload --variant b [--experiment "..."] [--only en-US,tr] [--src store/renders] [--dry]
 //   storebound apple ppo start | stop [--experiment "..."] [--dry] [--yes]
@@ -13,7 +13,7 @@ import { existsSync } from 'node:fs';
 import { join } from 'node:path';
 import type { Ctx } from '../lib/ctx';
 import { byAppleLocale, confirm, need } from '../lib/ctx';
-import { done, log, printJson, warn } from '../lib/log';
+import { done, log, warn } from '../lib/log';
 import {
   checkCreate, createExperimentReq, defaultName, type Experiment, experimentFromApi, pickExperiment, planTreatmentLocales, planTreatments, startStopReq,
 } from '../lib/ppo';
@@ -44,16 +44,6 @@ export async function run(ctx: Ctx): Promise<void> {
   const list = await experiments(c, appId);
   const locales = config.languages.map(l => l.apple).filter((x): x is string => !!x);
 
-  if (sub === 'status' && a.has('json')) {
-    const tests = [];
-    for (const x of list) {
-      const ts = [];
-      if (!['COMPLETED', 'STOPPED'].includes(x.state)) for (const t of await treatments(c, x.id)) ts.push({ id: t.id, name: t.attributes.name, locales: (await treatmentLocs(c, t.id)).length });
-      tests.push({ ...x, treatments: ts });
-    }
-    printJson({ tests });
-    return;
-  }
   if (sub === 'status') {
     if (!list.length) { done(TAG, 'no Product Page Optimization tests (storebound apple ppo create --variant b)'); return; }
     console.log(textTable(['test', 'state', 'traffic', 'start', 'end'], list.map(x => [x.name, x.state, x.trafficProportion !== undefined ? `${x.trafficProportion}%` : '', (x.startDate ?? '').slice(0, 10), (x.endDate ?? '').slice(0, 10)])));
diff --git a/cli/apple/status.ts b/cli/apple/status.ts
index 74ee204..9cd5c24 100644
--- a/cli/apple/status.ts
+++ b/cli/apple/status.ts
@@ -7,7 +7,7 @@
 //   exit codes: 0 approved, 1 rejected, 7 timeout (2 = nothing in review)
 import type { Ctx } from '../lib/ctx';
 import { confirm, need } from '../lib/ctx';
-import { log, printJson } from '../lib/log';
+import { log } from '../lib/log';
 import { classifyReviewState, nextPollDelay, parseDuration, WAIT_EXIT } from '../lib/release';
 import { type Asc, ascClient, type J } from './asc';
 
@@ -54,17 +54,7 @@ export async function run(ctx: Ctx): Promise<void> {
   const builds = (await c.asc('GET', `/v1/builds?filter[app]=${appId}&sort=-uploadedDate&limit=5&include=preReleaseVersion`));
   const iaps = await c.all(`/v1/apps/${appId}/inAppPurchasesV2?limit=200`);
   const subs = await c.all(`/v1/reviewSubmissions?filter[app]=${appId}&limit=20`);
-  if (ctx.args.has('json')) {
-    // phased release of the newest versions that are live or close to it (rollout share on the desktop timeline)
-    const phased: Record<string, unknown> = {};
-    for (const v of versions.slice(0, 3)) {
-      const st = String(v.attributes.appVersionState ?? v.attributes.appStoreState ?? '');
-      if (!/READY_FOR_SALE|READY_FOR_DISTRIBUTION|PENDING_DEVELOPER_RELEASE|PENDING_APPLE_RELEASE|ACCEPTED/.test(st)) continue;
-      phased[v.id] = (await c.maybe(`/v1/appStoreVersions/${v.id}/appStoreVersionPhasedRelease`))?.data ?? null;
-    }
-    printJson({ app, versions, builds: builds.data, iaps, subs, phased });
-    return;
-  }
+  if (ctx.args.has('json')) { console.log(JSON.stringify({ app, versions, builds: builds.data, iaps, subs }, null, 2)); return; }
 
   console.log(`${app.attributes.name} · ${app.attributes.bundleId} · Apple ID ${appId}`);
   for (const v of versions) console.log(`  version ${v.attributes.versionString.padEnd(8)} ${v.attributes.appVersionState ?? v.attributes.appStoreState}${v.relationships?.build?.data ? ' (build attached)' : ''}`);
diff --git a/cli/apple/testflight.ts b/cli/apple/testflight.ts
index 89db3ba..626b55f 100644
--- a/cli/apple/testflight.ts
+++ b/cli/apple/testflight.ts
@@ -1,5 +1,5 @@
 // TestFlight through the App Store Connect API.
-//   storebound apple testflight status [--json]                          groups, testers per group, recent builds + beta states
+//   storebound apple testflight status                                   groups, testers per group, recent builds + beta states
 //   storebound apple testflight groups [--dry]                           create the groups of apple.testflight.groups that are missing
 //   storebound apple testflight testers [--csv f] [--group a,b] [--remove] [--invite] [--dry] [--yes]
 //   storebound apple testflight what-to-test --build N [--version x.y.z] [--locale en-US,tr] [--text "..."] [--dry]
@@ -14,7 +14,7 @@ import { existsSync, readFileSync } from 'node:fs';
 import type { Ctx } from '../lib/ctx';
 import { confirm, need } from '../lib/ctx';
 import { reviewContact } from '../lib/credentials';
-import { done, log, printJson, warn } from '../lib/log';
+import { done, log, warn } from '../lib/log';
 import { textTable } from '../lib/table';
 import {
   type ApiBuild, betaDescriptions, betaReadiness, betaReviewReq, buildsWithVersion, type Group, groupFromApi, inviteReq, maskEmail,
@@ -52,30 +52,21 @@ export async function run(ctx: Ctx): Promise<void> {
   if (sub === 'status') {
     const gs = await groups(c, appId);
     const rows: (string | number)[][] = [];
-    const jsonGroups: Record<string, unknown>[] = [];
     for (const g of gs) {
       const testers = await c.all(`/v1/betaGroups/${g.id}/betaTesters?limit=200`);
       const builds = await c.all(`/v1/betaGroups/${g.id}/builds?limit=200`);
-      jsonGroups.push({ id: g.id, name: g.name, internal: g.internal, testers: testers.length, builds: g.internal && g.hasAccessToAllBuilds ? 'all' : builds.length, publicLink: !!g.publicLinkEnabled });
       rows.push([g.name, g.internal ? 'internal' : 'external', testers.length, g.internal && g.hasAccessToAllBuilds ? 'all' : builds.length, g.publicLinkEnabled ? 'public link on' : '']);
     }
+    console.log(textTable(['group', 'kind', 'testers', 'builds', ''], rows));
     const q = new URLSearchParams({ 'filter[app]': appId, include: 'preReleaseVersion,buildBetaDetail', sort: '-uploadedDate', limit: '8' });
     const resp = await c.asc('GET', `/v1/builds?${q}`);
     const details = new Map((resp.included ?? []).filter((x: J) => x.type === 'buildBetaDetails').map((x: J) => [x.id, x.attributes] as const));
-    const missingGroups = (tf?.groups ?? []).filter(w => !gs.some(g => g.name === w.name)).map(w => w.name);
-    if (a.has('json')) {
-      printJson({ groups: jsonGroups, builds: buildsWithVersion(resp).map(b => {
-        const d = details.get((b as J).relationships?.buildBetaDetail?.data?.id) as J;
-        return { version: b.marketing ?? null, build: b.attributes.version ?? null, processing: b.attributes.processingState ?? null, internal: d?.internalBuildState ?? null, external: d?.externalBuildState ?? null, uploaded: b.attributes.uploadedDate ?? null };
-      }), missingGroups });
-      return;
-    }
-    console.log(textTable(['group', 'kind', 'testers', 'builds', ''], rows));
     console.log('\n' + textTable(['version', 'build', 'processing', 'internal', 'external', 'uploaded'], buildsWithVersion(resp).map(b => {
       const d = details.get((b as J).relationships?.buildBetaDetail?.data?.id) as J;
       return [b.marketing ?? '', b.attributes.version ?? '', b.attributes.processingState ?? '', d?.internalBuildState ?? '', d?.externalBuildState ?? '', (b.attributes.uploadedDate ?? '').slice(0, 10)];
     })));
-    if (missingGroups.length) warn(TAG, `configured but not on App Store Connect: ${missingGroups.join(', ')} (storebound apple testflight groups)`);
+    const missing = (tf?.groups ?? []).filter(w => !gs.some(g => g.name === w.name)).map(w => w.name);
+    if (missing.length) warn(TAG, `configured but not on App Store Connect: ${missing.join(', ')} (storebound apple testflight groups)`);
     return;
   }
 
diff --git a/cli/catalog.ts b/cli/catalog.ts
index 84f6904..3de5fff 100644
--- a/cli/catalog.ts
+++ b/cli/catalog.ts
@@ -9,7 +9,7 @@ import { appleCurrent, pages, playProduct } from './prices';
 import { ascClient, type J } from './apple/asc';
 import { type CatalogRow, catalogDiff, fromApplePeriod, fromAppleType, regionOf, type StoreItem, wantedCatalog } from './lib/catalog';
 import type { Ctx } from './lib/ctx';
-import { done, log, printJson } from './lib/log';
+import { done, log } from './lib/log';
 import { fromMoney } from './lib/money';
 import { listOneTimeProducts } from './play/products';
 import { playClient } from './play/client';
@@ -94,7 +94,7 @@ export async function run(ctx: Ctx): Promise<void> {
   const play = (!store || store === 'play') && config.play ? await playItems(ctx) : null;
   const { rows, parity } = catalogDiff(want, { apple, play }, { threshold: a.num('threshold', 10) / 100 });
   const errors = rows.filter(r => r.level === 'error').length;
-  if (a.has('json')) printJson({ errors, rows, parity });
+  if (a.has('json')) console.log(JSON.stringify({ errors, rows, parity }, null, 2));
   else {
     console.log(formatRows(rows));
     if (parity.length) console.log(`\nprice differences between the stores (same currency, over ${a.num('threshold', 10)} %):\n` +
diff --git a/cli/check.ts b/cli/check.ts
index e69099f..8c4309f 100644
--- a/cli/check.ts
+++ b/cli/check.ts
@@ -3,7 +3,6 @@
 // subscriptions + terms URL) and the files the config points at. No network; credentials are only checked for presence.
 //   storebound check          everything above
 //   storebound check --aso    keyword audit of both listing files (App Store keyword field, Play stuffing); exit 1 on errors
-//   --json                    structured result ({ ok, items, warnings, problems } or { findings, errors }), exit 1 on problems
 import { existsSync, readFileSync } from 'node:fs';
 import { type AsoFinding, auditAso } from './lib/aso';
 import { playCodes } from './lib/config';
@@ -11,7 +10,7 @@ import { APPLE_IAP_LIMITS, len, parseAppStoreListing, parsePlayListing } from '.
 import type { Ctx } from './lib/ctx';
 import { dataSafetyRows } from './lib/data-safety';
 import { reviewDemoAccount } from './lib/credentials';
-import { log, printJson, warn } from './lib/log';
+import { log, warn } from './lib/log';
 import { profileIssues } from './lib/profile';
 import { allSubscriptions } from './lib/subscriptions';
 import { type CopyFile, validateCopy } from './shots/lib';
@@ -21,7 +20,6 @@ function aso(ctx: Ctx): void {
   const apple = config.apple ? parseAppStoreListing(readFileSync(resolve(config.apple.listing ?? 'store/appstore.md'), 'utf8')) : undefined;
   const play = config.play ? parsePlayListing(readFileSync(resolve(config.play.listing ?? 'store/listing.md'), 'utf8'), config.app.name) : undefined;
   const f: AsoFinding[] = auditAso({ apple, play, appName: config.app.name, storefront: ctx.args.get('storefront') ?? 'US' });
-  if (ctx.args.has('json')) { const errors = f.filter(x => x.level === 'error').length; printJson({ findings: f, errors }); if (errors) process.exitCode = 1; return; }
   const tag = { error: 'ERROR', warn: 'warn ', info: 'info ' } as const;
   for (const x of f) console.log(`${tag[x.level]} [${x.where}] ${x.msg}`);
   const errors = f.filter(x => x.level === 'error').length;
@@ -34,29 +32,24 @@ export async function run(ctx: Ctx): Promise<void> {
   const { config, resolve, path } = ctx.loaded;
   log('check', `config ok: ${path}`);
   const problems: string[] = [];
-  const items: { what: string; detail: string }[] = [];
-  const warnings: string[] = [];
-  const note = (msg: string): void => { warnings.push(msg); warn('check', msg); };
-  const tryDo = (what: string, fn: () => string): void => {
-    try { const detail = fn(); items.push({ what, detail }); log('check', `${what}: ${detail}`); } catch (e) { problems.push(`${what}: ${(e as Error).message}`); }
-  };
+  const tryDo = (what: string, fn: () => string): void => { try { log('check', `${what}: ${fn()}`); } catch (e) { problems.push(`${what}: ${(e as Error).message}`); } };
 
   if (config.play) tryDo('play listing', () => {
     const f = resolve(config.play!.listing ?? 'store/listing.md');
     const copy = parsePlayListing(readFileSync(f, 'utf8'), config.app.name);
     const want = config.languages.flatMap(playCodes);
     const missing = want.filter(c => !copy.some(x => x.lang === c));
-    if (missing.length) note(`play listing has no section for ${missing.join(', ')}`);
+    if (missing.length) warn('check', `play listing has no section for ${missing.join(', ')}`);
     const def = copy.find(x => x.lang === (config.play!.defaultLanguage ?? 'en-US'));
     const same = copy.filter(x => def && x !== def && x.whatsNew && x.whatsNew === def.whatsNew && x.lang.slice(0, 2) !== def.lang.slice(0, 2));
-    if (same.length) note(`what's new of ${same.map(x => x.lang).join(', ')} is the same text as ${def!.lang}: translate it`);
+    if (same.length) warn('check', `what's new of ${same.map(x => x.lang).join(', ')} is the same text as ${def!.lang}: translate it`);
     return `${copy.length} languages`;
   });
   if (config.apple) tryDo('appstore listing', () => {
     const f = resolve(config.apple!.listing ?? 'store/appstore.md');
     const copy = parseAppStoreListing(readFileSync(f, 'utf8'));
     const missing = config.languages.filter(l => l.apple && !copy[l.apple]).map(l => l.apple);
-    if (missing.length) note(`appstore listing has no section for ${missing.join(', ')}`);
+    if (missing.length) warn('check', `appstore listing has no section for ${missing.join(', ')}`);
     return `${Object.keys(copy).length} locales`;
   });
   if (config.dataSafety) tryDo('data safety', () => `${dataSafetyRows(config.dataSafety!).length - 1} CSV rows`);
@@ -81,7 +74,6 @@ export async function run(ctx: Ctx): Promise<void> {
   if (existsSync(resolve('.gitignore')) && !/^\/?\.storebound\/?$/m.test(readFileSync(resolve('.gitignore'), 'utf8')))
     problems.push('.gitignore does not ignore .storebound/ (credentials live there)');
 
-  if (ctx.args.has('json')) { printJson({ config: path, ok: !problems.length, items, warnings, problems }); if (problems.length) process.exitCode = 1; return; }
   if (problems.length) { for (const p of problems) console.error(`  - ${p}`); throw new Error(`${problems.length} problems`); }
   log('check', 'all good');
 }
diff --git a/cli/doctor.ts b/cli/doctor.ts
deleted file mode 100644
index 0ddf74c..0000000
--- a/cli/doctor.ts
+++ /dev/null
@@ -1,52 +0,0 @@
-// What this machine has for storebound, and how to get what is missing. The same detection as the desktop app's
-// Dependencies screen (lib/tools.ts). Store work (listings, products, releases, reviews) needs none of these tools;
-// screenshots, app previews, icons and simulator / emulator captures do. Read-only: it prints commands, it runs none.
-//   storebound doctor [--dir .] [--json]
-import { existsSync } from 'node:fs';
-import { join, resolve } from 'node:path';
-import pkg from '../package.json' with { type: 'json' };
-import type { Args } from './lib/args';
-import { CONFIG_NAMES } from './lib/config';
-import { log } from './lib/log';
-import { textTable } from './lib/table';
-import { detectTools, findPlaywright, installCommands, type ToolStatus } from './lib/tools';
-
-export interface DoctorRow {
-  id: ToolStatus['id'] | 'playwright';
-  name: string;
-  found: boolean;
-  version: string | null;
-  path: string | null;
-  source: ToolStatus['source'];
-  usedFor: string;
-  /** Install commands for this OS (empty when found). */
-  install: string[];
-  url: string | null;
-}
-export interface DoctorResult { storebound: string; bun: string; platform: string; project: string | null; tools: DoctorRow[]; missing: number }
-
-export function doctor(cwd: string, env: Record<string, string | undefined> = process.env): DoctorResult {
-  const tools: DoctorRow[] = detectTools(env).map(t => ({ id: t.id, name: t.name, found: t.found, version: t.version, path: t.path, source: t.source, usedFor: t.usedFor,
-    install: t.found ? [] : installCommands(t.id), url: t.install.url }));
-  const pw = findPlaywright([cwd, join(import.meta.dir, '..')]);
-  tools.splice(3, 0, { id: 'playwright', name: 'playwright', found: !!pw, version: null, path: pw, source: pw ? 'system' : null,
-    usedFor: 'screenshot renders and web captures from a terminal (the desktop app brings its own)', install: pw ? [] : installCommands('playwright'), url: 'https://playwright.dev/docs/intro' });
-  const project = CONFIG_NAMES.some(n => existsSync(join(cwd, n))) ? cwd : null;
-  return { storebound: pkg.version, bun: Bun.version, platform: `${process.platform}-${process.arch}`, project, tools, missing: tools.filter(t => !t.found).length };
-}
-
-export async function run(args: Args): Promise<void> {
-  const r = doctor(resolve(args.str('dir', '.')));
-  if (args.has('json')) { console.log(JSON.stringify(r, null, 2)); return; }
-  log('doctor', `storebound ${r.storebound} · bun ${r.bun} · ${r.platform}${r.project ? ' · project config found' : ''}`);
-  console.log(textTable(['tool', 'status', 'version', 'used for'], r.tools.map(t => [t.name, t.found ? (t.source === 'app' ? 'ok (app copy)' : 'ok') : 'missing', t.version ?? '', t.usedFor])));
-  const missing = r.tools.filter(t => !t.found);
-  if (!missing.length) { log('doctor', 'everything storebound can use is here'); return; }
-  console.log('\nTo install what is missing (pick one per tool; storebound never runs these for you):');
-  for (const t of missing) {
-    console.log(`  ${t.name}`);
-    for (const c of t.install) console.log(`    ${c}`);
-    if (t.url) console.log(`    ${t.url}`);
-  }
-  log('doctor', `${missing.length} missing. Store work needs none of them; screenshots, previews, icons and captures do.`);
-}
diff --git a/cli/health.ts b/cli/health.ts
index a0b80d7..fe56980 100644
--- a/cli/health.ts
+++ b/cli/health.ts
@@ -16,7 +16,7 @@ import {
   type AppleHealth, ANR_METRICS, betaCrashCounts, CRASH_METRICS, deviceBreakdown, healthFindings, healthMarkdown, type HealthSnapshot, healthTable,
   issuesQuery, latestDailyEnd, metricQuery, parseIssues, parseMetricRows, parsePerfPower, type PlayHealth, ymd, ymdString,
 } from './lib/health';
-import { done, log, printJson, warn } from './lib/log';
+import { done, log, warn } from './lib/log';
 import { formatFindings } from './lib/validate-rules';
 import { googleClient, REPORTING_API } from './play/google';
 
@@ -84,7 +84,7 @@ export async function run(ctx: Ctx): Promise<void> {
   const days = a.num('days', 7);
   if (!(days >= 1 && days <= 90)) throw new Error('--days: 1-90');
   const h = await collectHealth(ctx, { apple: both || a.has('apple'), play: both || a.has('play'), days });
-  if (a.has('json')) { printJson(h); return; }
+  if (a.has('json')) { console.log(JSON.stringify(h, null, 2)); return; }
   console.log(healthTable(h));
   console.log('\n' + formatFindings(healthFindings(h)));
   if (weekly) {
diff --git a/cli/index.ts b/cli/index.ts
index 9986970..52d73f3 100755
--- a/cli/index.ts
+++ b/cli/index.ts
@@ -12,12 +12,9 @@ const PLAIN: Record<string, [() => Promise<Plain>, string]> = {
   'init': [() => import('./init'), 'copy the templates (config, listing, copy, declarations, privacy policy) into this project; --profile app|game|subscription-app (default app)'],
   'install': [() => import('./install'), 'skills + MCP server for --agent claude|codex|cursor|copilot|windsurf|gemini|opencode'],
   'mcp': [async () => ({ run: async () => (await import('./mcp')).serve() }), 'stdio MCP server wrapping these commands (for any MCP-capable AI tool)'],
-  'serve': [() => import('./serve'), '--stdio: JSON-RPC session for the storebound desktop app (dry runs; writes need a host confirm token)'],
-  'doctor': [() => import('./doctor'), 'local tools for screenshots, previews, icons and captures (ffmpeg, Chrome, playwright, Xcode, adb, git) and how to install what is missing; --json'],
   'privacy-manifest': [() => import('./privacy-manifest'), 'iOS PrivacyInfo.xcprivacy + required-reason API + SDK manifest scan (--ios <path>)'],
 };
 const COMMANDS: Record<string, [() => Promise<Mod>, string]> = {
-  'inspect': [() => import('./inspect'), 'offline summary of the config (name, store ids, languages, products, subscriptions); --json'],
   'check': [() => import('./check'), 'validate config, copy files, data safety answers, products, subscriptions and the app profile (offline); --aso keyword audit'],
   'validate': [() => import('./validate'), 'read-only store readiness report with ordered blockers (--apple / --play), plus local renders checks (--no-local skips); exit 1 on blockers'],
   'analytics': [() => import('./analytics'), 'setup (App Store report request) | snapshot (impressions, page views, installs, conversion -> .storebound/analytics) | compare (vs listing changes in git)'],
diff --git a/cli/init.ts b/cli/init.ts
index 4d224fe..e5ba529 100644
--- a/cli/init.ts
+++ b/cli/init.ts
@@ -1,16 +1,15 @@
 // Copies the templates into the current project without overwriting anything, and makes sure .storebound/ is ignored.
-//   storebound init [--dir .] [--profile app|game|subscription-app] [--dry]
+//   storebound init [--dir .] [--profile app|game|subscription-app]
 // Profiles (default app): app = utility / productivity app with an optional account and analytics, no ads;
 // game = free-to-play game with ads and in-app purchases (the templates storebound shipped before 0.5.0);
 // subscription-app = accounts plus auto-renewable subscriptions. Each profile has its own config, declarations,
 // App Privacy answers, Data safety section, listing copy and screenshot copy; every answer is a starting point to edit.
 // Lookup per file: templates/profiles/<profile>/<file>, then the profile it builds on, then templates/<file>.
-import { appendFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
-import { dirname, join, relative, resolve } from 'node:path';
+import { appendFileSync, copyFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
 import type { Args } from './lib/args';
 import { type AppProfile, PROFILES } from './lib/config';
 import { log } from './lib/log';
-import { TEMPLATE_TEXT } from './lib/template-files';
 
 const T = join(import.meta.dir, '..', 'templates');
 export const FILES: [string, string][] = [
@@ -25,43 +24,33 @@ export const FILES: [string, string][] = [
   ['testers.csv', '.storebound/testers.csv'],
 ];
 
-/** Template folders a profile reads from (relative to templates/), most specific first. game = the root templates. */
+/** Template folders a profile reads from, most specific first. game = the root templates. */
 const CHAIN: Record<AppProfile, string[]> = {
-  'game': [''],
-  'app': ['profiles/app/', ''],
-  'subscription-app': ['profiles/subscription-app/', 'profiles/app/', ''],
+  'game': [T],
+  'app': [join(T, 'profiles', 'app'), T],
+  'subscription-app': [join(T, 'profiles', 'subscription-app'), join(T, 'profiles', 'app'), T],
 };
 
-/** Key (path under templates/) of one template for a profile. Pure: looks it up in the embedded list. */
-export function templateKey(profile: AppProfile, name: string): string {
-  for (const dir of CHAIN[profile]) if (TEMPLATE_TEXT[dir + name] !== undefined) return dir + name;
+/** Source file of one template for a profile. Pure apart from existsSync. */
+export function templateFor(profile: AppProfile, name: string): string {
+  for (const dir of CHAIN[profile]) if (existsSync(join(dir, name))) return join(dir, name);
   throw new Error(`template ${name} not found`);
 }
 
-/** Source file of one template for a profile (in the storebound folder; the compiled sidecar has none). */
-export const templateFor = (profile: AppProfile, name: string): string => join(T, ...templateKey(profile, name).split('/'));
-
-/** Template text: the embedded copy (the same bytes as the file; tests/apps.test.ts checks it). */
-export const templateText = (profile: AppProfile, name: string): string => TEMPLATE_TEXT[templateKey(profile, name)]!;
-
 export async function run(args: Args): Promise<void> {
   const root = resolve(args.str('dir', '.'));
   const profile = args.str('profile', 'app') as AppProfile;
   if (!PROFILES.includes(profile)) throw new Error(`--profile ${profile}: one of ${PROFILES.join(', ')}`);
-  const dry = args.has('dry');
-  log('init', `profile ${profile}${dry ? ' (dry run: nothing is written)' : ''} (templates are starting points: edit every answer to match your app)`);
+  log('init', `profile ${profile} (templates are starting points: edit every answer to match your app)`);
   for (const [from, to] of FILES) {
     const dest = join(root, to);
-    if (relative(root, dest).startsWith('..')) throw new Error(`template target outside the project: ${to}`);
     if (existsSync(dest)) { log('init', `keep   ${to} (exists)`); continue; }
-    if (dry) { log('init', `would create ${to}`); continue; }
     mkdirSync(dirname(dest), { recursive: true });
-    writeFileSync(dest, templateText(profile, from));
+    copyFileSync(templateFor(profile, from), dest);
     log('init', `create ${to}`);
   }
   const gi = join(root, '.gitignore');
   const cur = existsSync(gi) ? readFileSync(gi, 'utf8') : '';
-  if (dry) { if (!/^\/?\.storebound\/?$/m.test(cur)) log('init', 'would add .storebound/ to .gitignore'); return; }
   if (!/^\/?\.storebound\/?$/m.test(cur)) {
     if (cur) appendFileSync(gi, `${cur.endsWith('\n') ? '' : '\n'}# storebound: credentials, fonts, temp files\n.storebound/\n`);
     else writeFileSync(gi, '# storebound: credentials, fonts, temp files\n.storebound/\n');
diff --git a/cli/inspect.ts b/cli/inspect.ts
deleted file mode 100644
index 22520f3..0000000
--- a/cli/inspect.ts
+++ /dev/null
@@ -1,53 +0,0 @@
-// Offline summary of the project config: app name, store ids, languages, products, shots. No network, no credentials.
-//   storebound inspect [--json]
-//   storebound inspect --icon --json       the app icon as a data: URL (for the desktop app)
-//   storebound inspect --listings [--json] listing completeness per language on both stores (+ rendered screenshots)
-import { platformsOf, profileOf, sellsOn } from './lib/config';
-import type { Ctx } from './lib/ctx';
-import type { ProjectSummary } from './lib/desktop-protocol';
-import { log, printJson } from './lib/log';
-import { findIcon, iconDataUrl, listingCompleteness } from './lib/project-files';
-
-export function summarize(ctx: Ctx): ProjectSummary {
-  const { config, root, path } = ctx.loaded;
-  const subs = (config.subscriptions ?? []).flatMap(g => g.subscriptions);
-  return {
-    dir: root,
-    config: path,
-    name: config.app.name,
-    languages: config.languages.map(l => l.id),
-    play: config.play ? { packageName: config.play.packageName } : null,
-    apple: config.apple ? { bundleId: config.apple.bundleId, appId: config.apple.appId ?? null } : null,
-    platforms: platformsOf(config),
-    products: config.products?.length ?? 0,
-    productIds: (config.products ?? []).map(p => p.id),
-    subscriptions: subs.length,
-    subscriptionIds: subs.map(s => s.id),
-    // the catalog each store should sell (items can be limited to one platform)
-    catalog: {
-      ios: config.apple ? [...(config.products ?? []), ...subs].filter(x => sellsOn(config, x, 'apple')).map(x => x.id) : [],
-      android: config.play ? [...(config.products ?? []), ...subs].filter(x => sellsOn(config, x, 'play')).map(x => x.id) : [],
-    },
-    shots: !!config.shots,
-    testflightGroups: config.apple?.testflight?.groups?.length ?? 0,
-    profile: profileOf(config),
-    icon: findIcon(config, root),
-  };
-}
-
-export async function run(ctx: Ctx): Promise<void> {
-  const { config, root } = ctx.loaded;
-  if (ctx.args.has('icon')) { printJson(iconDataUrl(findIcon(config, root))); return; }
-  if (ctx.args.has('listings')) {
-    const l = listingCompleteness(config, root);
-    if (ctx.args.has('json')) { printJson(l); return; }
-    for (const p of l.problems) log('inspect', p);
-    for (const x of l.locales) log('inspect', `${x.lang.padEnd(6)} ${Math.round(x.complete * 100)} % complete${x.screenshots === null ? '' : ` · ${x.screenshots} screenshots`}`);
-    return;
-  }
-  const s = summarize(ctx);
-  if (ctx.args.has('json')) { printJson(s); return; }
-  log('inspect', `${s.name} · ${s.platforms.join(' + ')} · ${s.languages.length} languages · ${s.products} products · ${s.subscriptions} subscriptions`);
-  log('inspect', `play ${s.play?.packageName ?? '-'} · apple ${s.apple?.bundleId ?? '-'}${s.apple?.appId ? ` (${s.apple.appId})` : ''}`);
-  log('inspect', `config ${s.config}`);
-}
diff --git a/cli/lib/config.ts b/cli/lib/config.ts
index b4ef28b..93e5d97 100644
--- a/cli/lib/config.ts
+++ b/cli/lib/config.ts
@@ -617,14 +617,14 @@ export function validateConfig(c: unknown): string[] {
 
 export interface Loaded { config: ShipConfig; root: string; path: string; resolve(p: string): string }
 
-export const CONFIG_NAMES = ['storebound.config.ts', 'storebound.config.js', 'storebound.config.json'];
+const NAMES = ['storebound.config.ts', 'storebound.config.js', 'storebound.config.json'];
 
 /** Finds storebound.config.* from `start` upwards (or uses `explicit`), imports and validates it. */
 export async function loadConfig(explicit?: string, start = process.cwd()): Promise<Loaded> {
   let path = explicit ? resolve(explicit) : '';
   if (!path) {
     for (let d = resolve(start); ; d = dirname(d)) {
-      const hit = CONFIG_NAMES.map(n => join(d, n)).find(existsSync);
+      const hit = NAMES.map(n => join(d, n)).find(existsSync);
       if (hit) { path = hit; break; }
       if (dirname(d) === d) break;
     }
diff --git a/cli/lib/confirm-token.ts b/cli/lib/confirm-token.ts
deleted file mode 100644
index e3344f9..0000000
--- a/cli/lib/confirm-token.ts
+++ /dev/null
@@ -1,95 +0,0 @@
-// Confirm tokens for `storebound serve --stdio` (the desktop app's sidecar protocol).
-//
-// A write method only runs for real (dryRun: false) with a token that the desktop host mints after the owner said yes
-// in a native dialog showing the dry run. The token is an HMAC over the method, the canonical params and an expiry,
-// keyed with a per-session secret the host generates and hands over in `session.hello` on stdin. Only the process that
-// owns the sidecar's stdin (the Rust host) knows the secret; the webview never sees it, and child commands never get it
-// (runner.ts strips STOREBOUND_SESSION* from their env, and the secret never is in the env to begin with).
-//
-//   token = "sbt1." + expiryMs + "." + nonce + "." + base64url(HMAC-SHA256(secret, payload))
-//   payload = "storebound-confirm-v1\n" + method + "\n" + canonical(params) + "\n" + expiryMs + "\n" + nonce
-//
-// Tokens are single use (nonce kept until expiry), live at most MAX_TTL_MS, and are bound to the exact method and
-// params: another project, other arguments or another method do not verify. The Rust side (apps/desktop/src-tauri/
-// src/confirm.rs) implements the same scheme; both test the shared vector in tests/serve.test.ts and tests/confirm.rs.
-import { createHmac, randomBytes, timingSafeEqual } from 'node:crypto';
-
-export const TOKEN_PREFIX = 'sbt1';
-export const DOMAIN = 'storebound-confirm-v1';
-/** A token may not be valid for longer than this (the host mints 60 s ones right after the dialog). */
-export const MAX_TTL_MS = 120_000;
-export const MIN_SECRET_BYTES = 32;
-
-/**
- * Canonical JSON: object keys sorted (by UTF-16 code units, like JS sort), no whitespace, strings escaped by
- * JSON.stringify. Numbers must be safe integers so every language prints them the same way; undefined object
- * members are dropped, like JSON.stringify does.
- */
-export function canonical(v: unknown): string {
-  if (v === null) return 'null';
-  if (typeof v === 'boolean') return v ? 'true' : 'false';
-  if (typeof v === 'number') {
-    if (!Number.isSafeInteger(v)) throw new Error('canonical: only safe integers are allowed as numbers');
-    return String(v);
-  }
-  if (typeof v === 'string') return JSON.stringify(v);
-  if (Array.isArray(v)) return `[${v.map(canonical).join(',')}]`;
-  if (typeof v === 'object') {
-    const o = v as Record<string, unknown>;
-    const keys = Object.keys(o).filter(k => o[k] !== undefined).sort();
-    return `{${keys.map(k => `${JSON.stringify(k)}:${canonical(o[k])}`).join(',')}}`;
-  }
-  throw new Error(`canonical: unsupported ${typeof v}`);
-}
-
-const b64url = (b: Buffer): string => b.toString('base64url');
-
-export function payload(method: string, params: unknown, expiry: number, nonce: string): string {
-  return `${DOMAIN}\n${method}\n${canonical(params)}\n${expiry}\n${nonce}`;
-}
-
-export function mac(secret: Buffer, method: string, params: unknown, expiry: number, nonce: string): string {
-  return b64url(createHmac('sha256', secret).update(payload(method, params, expiry, nonce), 'utf8').digest());
-}
-
-/** Mints a token (the host does this in Rust; here for tests and tools). */
-export function mint(secret: Buffer, method: string, params: unknown, o: { now?: number; ttlMs?: number; nonce?: string } = {}): string {
-  const expiry = (o.now ?? Date.now()) + (o.ttlMs ?? 60_000);
-  const nonce = o.nonce ?? b64url(randomBytes(16));
-  return `${TOKEN_PREFIX}.${expiry}.${nonce}.${mac(secret, method, params, expiry, nonce)}`;
-}
-
-export function parseSecret(hex: unknown): Buffer {
-  if (typeof hex !== 'string' || !/^[0-9a-f]+$/i.test(hex) || hex.length % 2) throw new Error('secret: hex string expected');
-  const b = Buffer.from(hex, 'hex');
-  if (b.length < MIN_SECRET_BYTES) throw new Error(`secret: at least ${MIN_SECRET_BYTES} bytes`);
-  return b;
-}
-
-export type VerifyError = 'malformed' | 'expired' | 'too-long' | 'replayed' | 'mismatch';
-
-/** Verifies tokens of one session and remembers used nonces until they expire (replay protection). */
-export class TokenGuard {
-  private used = new Map<string, number>();
-  constructor(private readonly secret: Buffer, private readonly clock: () => number = Date.now) {}
-
-  verify(token: unknown, method: string, params: unknown): { ok: true } | { ok: false; error: VerifyError } {
-    const now = this.clock();
-    for (const [n, exp] of this.used) if (exp <= now) this.used.delete(n);
-    if (typeof token !== 'string') return { ok: false, error: 'malformed' };
-    const parts = token.split('.');
-    if (parts.length !== 4 || parts[0] !== TOKEN_PREFIX) return { ok: false, error: 'malformed' };
-    const [, exp, nonce, sig] = parts as [string, string, string, string];
-    if (!/^\d{1,16}$/.test(exp) || !/^[A-Za-z0-9_-]{16,64}$/.test(nonce) || !/^[A-Za-z0-9_-]{43}$/.test(sig)) return { ok: false, error: 'malformed' };
-    const expiry = Number(exp);
-    let want: string;
-    try { want = mac(this.secret, method, params, expiry, nonce); } catch { return { ok: false, error: 'malformed' }; }
-    const a = Buffer.from(sig), b = Buffer.from(want);
-    if (a.length !== b.length || !timingSafeEqual(a, b)) return { ok: false, error: 'mismatch' };
-    if (expiry <= now) return { ok: false, error: 'expired' };
-    if (expiry - now > MAX_TTL_MS) return { ok: false, error: 'too-long' };
-    if (this.used.has(nonce)) return { ok: false, error: 'replayed' };
-    this.used.set(nonce, expiry);
-    return { ok: true };
-  }
-}
diff --git a/cli/lib/ctx.ts b/cli/lib/ctx.ts
index d85a96b..79f97f5 100644
--- a/cli/lib/ctx.ts
+++ b/cli/lib/ctx.ts
@@ -21,13 +21,8 @@ export function byAppleLocale(langs: Language[]): Map<string, Language> {
   return new Map(langs.filter(l => l.apple).map(l => [l.apple!, l] as const));
 }
 
-/**
- * Asks on the terminal unless --yes. Store actions that are public or irreversible go through this.
- * Under `storebound serve` (the desktop sidecar) nothing can answer and nothing may skip the question, not even --yes:
- * those actions stay terminal-only, so the answer is always no.
- */
+/** Asks on the terminal unless --yes. Store actions that are public or irreversible go through this. */
 export async function confirm(ctx: Ctx, question: string): Promise<boolean> {
-  if (process.env.STOREBOUND_SERVE === '1') { console.error(`confirm-required: ${question}\n  terminal only: run it in a terminal`); return false; }
   if (ctx.args.has('yes')) return true;
   if (!process.stdin.isTTY) { console.log(`${question}\n  not a terminal: re-run with --yes to confirm`); return false; }
   process.stdout.write(`${question} [y/N] `);
diff --git a/cli/lib/desktop-protocol.ts b/cli/lib/desktop-protocol.ts
deleted file mode 100644
index ac8019c..0000000
--- a/cli/lib/desktop-protocol.ts
+++ /dev/null
@@ -1,206 +0,0 @@
-// Types of the `storebound serve --stdio` protocol (desktop profile). Type-only, no runtime code: the desktop app
-// (apps/desktop) imports this file so both sides agree on shapes. Newline-delimited JSON-RPC 2.0 on stdio.
-//
-// Session: the first request must be `session.hello` with the per-session secret (hex, >= 32 bytes) the host
-// generated. Every other method answers -32002 before that. One hello per process.
-// Progress: notifications `progress` { requestId, line?, stream?, n?, total?, project? } while a request runs.
-// Cancel: notification `$/cancelRequest` { id } (or MCP-style `notifications/cancelled` { requestId }); the request
-// then answers -32800.
-// Writes: every write method is a dry run unless `dryRun: false` comes with a `confirmToken` minted by the host for
-// exactly (method, { project, args }) (cli/lib/confirm-token.ts). No method submits, releases or publishes anything.
-
-export const DESKTOP_PROTOCOL = 'storebound-desktop/1';
-
-export const ERR = {
-  parse: -32700,
-  invalidRequest: -32600,
-  methodNotFound: -32601,
-  invalidParams: -32602,
-  internal: -32603,
-  notInitialized: -32002,
-  confirmRequired: -32010,
-  confirmInvalid: -32011,
-  cancelled: -32800,
-} as const;
-
-export interface JsonSchemaLite { type: string; description?: string; enum?: (string | number)[]; default?: unknown; minimum?: number; maximum?: number; pattern?: string }
-
-export interface MethodDescriptor {
-  method: string;
-  title: string;
-  description: string;
-  kind: 'read' | 'write' | 'session' | 'system' | 'portfolio';
-  /** Talks to a store API or the internet. */
-  network: boolean;
-  /** Replaces existing data on a store (screenshots, whole forms). */
-  destructive: boolean;
-  /** Result carries structured `data` (the command's --json output). */
-  json: boolean;
-  /** Schema of `params.args` (tool methods), or of `params` (other methods). */
-  args: { type: 'object'; properties: Record<string, JsonSchemaLite>; required?: string[]; additionalProperties: false };
-}
-
-export interface HelloParams { secret: string; client?: { name: string; version: string } }
-export interface HelloResult { protocol: typeof DESKTOP_PROTOCOL; server: { name: 'storebound'; version: string; compiled: boolean }; methods: MethodDescriptor[] }
-
-export interface Credentials { PLAY_SERVICE_ACCOUNT?: string; ASC_KEY_ID?: string; ASC_ISSUER_ID?: string; ASC_P8?: string }
-
-export interface ToolParams {
-  /** Absolute path of a folder that contains storebound.config.ts. */
-  project: string;
-  args?: Record<string, unknown>;
-  /** Write methods: false runs for real and needs confirmToken. Default true. */
-  dryRun?: boolean;
-  confirmToken?: string;
-  /** Per-call credentials (kept in memory, passed to the command's env only). Not part of the token. */
-  credentials?: Credentials;
-}
-
-export interface ToolResult {
-  method: string;
-  ok: boolean;
-  exitCode: number;
-  dryRun: boolean;
-  /** The CLI line it ran, for logs ("storebound play listing --dry"). */
-  command: string;
-  /** Text output (log lines), trimmed to the last 60 000 characters. */
-  output: string;
-  /** Structured result of a --json capable command. */
-  data?: unknown;
-}
-
-export interface ProgressParams { requestId: string | number; line?: string; stream?: 'stdout' | 'stderr'; n?: number; total?: number; project?: string }
-
-export interface ProjectSummary {
-  dir: string;
-  config: string;
-  name: string;
-  languages: string[];
-  play: { packageName: string } | null;
-  apple: { bundleId: string; appId: string | null } | null;
-  /** app.platforms (default: from the apple / play sections). */
-  platforms: ('ios' | 'android')[];
-  /** One-time in-app products in the config (one shared catalog). */
-  products: number;
-  productIds: string[];
-  /** Auto-renewable subscriptions in the config (all groups). */
-  subscriptions: number;
-  subscriptionIds: string[];
-  /** Product and subscription ids each store should sell (items may be limited to one platform). */
-  catalog: { ios: string[]; android: string[] };
-  shots: boolean;
-  testflightGroups: number;
-  /** App profile from the config (app, game, subscription-app). */
-  profile?: string;
-  /** Absolute path of the app icon the config or the usual places point at (project.icon reads it), or null. */
-  icon?: string | null;
-}
-
-// ---- App-centric model (one app = one product on up to two platforms; a workspace holds many apps) ----
-
-/** One product across platforms. id = its project folder (one storebound.config.ts per app). */
-export interface AppIdentity {
-  id: string;
-  name: string;
-  platforms: { ios: { bundleId: string; ascAppId: string | null } | null; android: { packageName: string } | null };
-}
-
-/** Where a version is on one store. */
-export type ReleasePhase = 'live' | 'rollout' | 'halted' | 'approved' | 'review' | 'rejected' | 'testing' | 'draft' | 'other';
-
-export interface StoreRelease {
-  store: 'ios' | 'android';
-  version: string | null;
-  /** iOS build number (CFBundleVersion) / highest Android versionCode. */
-  build: string | null;
-  /** The store's own state word (READY_FOR_SALE, inProgress ...). */
-  state: string;
-  phase: ReleasePhase;
-  /** Rollout share (0-1): Android staged rollout user fraction, iOS phased release day -> 1, 2, 5, 10, 20, 50, 100 %. */
-  fraction: number | null;
-  /** Android track (production, beta, internal ...). */
-  track: string | null;
-  /** iOS phased release: day 1-7 and its state (ACTIVE, PAUSED, COMPLETE); null without one. */
-  phased?: { state: string; day: number | null } | null;
-  /** When the store record was made (iOS version createdDate), if the store says. */
-  date?: string | null;
-}
-
-/** A release train: one version (e.g. 2.3.0) across both stores. */
-export interface ReleaseTrain { version: string; ios: StoreRelease | null; android: StoreRelease | null }
-
-/** In-app catalog parity between the config and both stores. */
-export interface CatalogParity {
-  checked: 'config' | 'live';
-  products: number;
-  subscriptions: number;
-  /** Live: ids on one store only, and config ids missing on a store the app is on. */
-  onlyIos: string[];
-  onlyAndroid: string[];
-  missingIos: string[];
-  missingAndroid: string[];
-  ok: boolean;
-}
-
-export interface PortfolioParams { projects: string[]; live?: boolean; credentials?: Credentials }
-
-export interface AppStatus {
-  /** Project folder as given. */
-  project: string;
-  ok: boolean;
-  app: AppIdentity | null;
-  summary: ProjectSummary | null;
-  check: { ok: boolean; problems: string[]; warnings: string[] } | null;
-  /** Release trains; `source: none` offline (no store data read). `all`: every store release read (live only). */
-  release: { source: 'none' | 'live'; current: ReleaseTrain | null; next: ReleaseTrain | null; all?: StoreRelease[] };
-  catalog: CatalogParity | null;
-  /** live only: per-platform read errors ("unknown, never false"). */
-  storeErrors: { ios?: string; android?: string };
-  errors: string[];
-}
-
-export interface PortfolioResult { apps: AppStatus[]; at: string }
-
-// ---- Offline project reads (D2) ----
-
-/** One listing field of one language on one store: length against the store limit. */
-export interface ListingField { field: string; length: number; limit: number; required: boolean; state: 'ok' | 'missing' | 'over' | 'empty-optional' }
-
-/** Listing completeness of one language (config language id) on both stores. */
-export interface ListingLocale {
-  lang: string;
-  rtl: boolean;
-  play: { code: string | null; fields: ListingField[] } | null;
-  apple: { code: string | null; fields: ListingField[] } | null;
-  /** Rendered screenshots found for this language (renders folder), null when there is no renders folder. */
-  screenshots: number | null;
-  /** Required fields present and within limits, 0-1 (both stores). */
-  complete: number;
-}
-
-export interface ListingsResult {
-  files: { play: string | null; apple: string | null };
-  /** File-level problems (missing file, unreadable section). */
-  problems: string[];
-  locales: ListingLocale[];
-}
-
-/** A local review reply draft (.storebound/replies/<store>-<id>.md) with its checks. */
-export interface ReplyDraft {
-  file: string;
-  store: 'apple' | 'play';
-  reviewId: string;
-  approved: boolean;
-  sent: string | null;
-  reply: string;
-  rating: number | null;
-  title: string | null;
-  body: string | null;
-  date: string | null;
-  issues: { level: 'error' | 'warn'; msg: string }[];
-}
-
-export interface DraftsResult { dir: string; drafts: ReplyDraft[]; problems: string[] }
-
-/** project.icon: the icon as a data: URL (PNG / JPEG / WebP / SVG, at most 1.5 MB), or null. */
-export interface IconResult { path: string | null; dataUrl: string | null }
diff --git a/cli/lib/log.ts b/cli/lib/log.ts
index ebe9e0e..9d6c090 100644
--- a/cli/lib/log.ts
+++ b/cli/lib/log.ts
@@ -10,15 +10,3 @@ export const done = (tag: string, msg: string): void => console.log(`${stamp()}
 
 /** "3/14 de-DE" style counters. */
 export const step = (i: number, n: number, what: string): string => `${String(i).padStart(String(n).length)}/${n} ${what}`;
-
-/** Prefix of the one machine-readable result line that `storebound serve --stdio` reads from a child command. */
-export const RESULT_MARK = '\u001estorebound-result ';
-
-/**
- * Structured result of a `--json` run. In a terminal (or a pipe) it is pretty JSON on stdout as before; under
- * `storebound serve` (STOREBOUND_MACHINE=1) it is one marked line, so log lines printed before it never break parsing.
- */
-export function printJson(data: unknown): void {
-  if (process.env.STOREBOUND_MACHINE === '1') process.stdout.write(RESULT_MARK + JSON.stringify(data) + '\n');
-  else console.log(JSON.stringify(data, null, 2));
-}
diff --git a/cli/lib/portfolio.ts b/cli/lib/portfolio.ts
deleted file mode 100644
index 848b326..0000000
--- a/cli/lib/portfolio.ts
+++ /dev/null
@@ -1,124 +0,0 @@
-// Pure pieces of `portfolio.status` (serve.ts): an app's identity across platforms, its release trains (one version
-// across the App Store and Google Play) and the in-app catalog parity between the config and both stores.
-// Inputs are the `apple status --json` / `play status --json` results, read defensively: "unknown, never false".
-import type { AppIdentity, CatalogParity, ProjectSummary, ReleasePhase, ReleaseTrain, StoreRelease } from './desktop-protocol';
-
-type J = Record<string, any>; // eslint-disable-line @typescript-eslint/no-explicit-any
-
-export function appIdentity(s: ProjectSummary): AppIdentity {
-  return {
-    id: s.dir,
-    name: s.name,
-    platforms: {
-      ios: s.apple && s.platforms.includes('ios') ? { bundleId: s.apple.bundleId, ascAppId: s.apple.appId } : null,
-      android: s.play && s.platforms.includes('android') ? { packageName: s.play.packageName } : null,
-    },
-  };
-}
-
-/** Numeric compare of dotted versions ("2.10.0" > "2.9.1"); non-numeric parts compare as 0. */
-export function cmpVersion(a: string, b: string): number {
-  const pa = a.split('.').map(x => parseInt(x, 10) || 0), pb = b.split('.').map(x => parseInt(x, 10) || 0);
-  for (let i = 0; i < Math.max(pa.length, pb.length); i++) { const d = (pa[i] ?? 0) - (pb[i] ?? 0); if (d) return d; }
-  return 0;
-}
-
-/** App Store version states (appStoreState / appVersionState) -> phase. */
-export function applePhase(state: string): ReleasePhase {
-  if (/^(READY_FOR_SALE|READY_FOR_DISTRIBUTION)$/.test(state)) return 'live';
-  if (/^(PENDING_DEVELOPER_RELEASE|PENDING_APPLE_RELEASE|ACCEPTED)$/.test(state)) return 'approved';
-  if (/^(WAITING_FOR_REVIEW|IN_REVIEW|WAITING_FOR_EXPORT_COMPLIANCE|PROCESSING_FOR_DISTRIBUTION|PROCESSING_FOR_APP_STORE)$/.test(state)) return 'review';
-  if (/REJECTED$/.test(state)) return 'rejected';
-  if (/^(PREPARE_FOR_SUBMISSION|DEVELOPER_ACTION_NEEDED)$/.test(state)) return 'draft';
-  return 'other';
-}
-
-/** Apple's phased release schedule: share of users with automatic updates on day 1-7. */
-export const PHASED_SCHEDULE = [0.01, 0.02, 0.05, 0.1, 0.2, 0.5, 1] as const;
-
-/** Phased release of a version (`apple status --json` phased[versionId]) -> rollout share, or null. */
-export function phasedFraction(p: { state?: string; currentDayNumber?: number | null } | null | undefined): number | null {
-  if (!p?.state) return null;
-  if (p.state === 'COMPLETE') return 1;
-  const d = typeof p.currentDayNumber === 'number' ? Math.min(7, Math.max(1, Math.round(p.currentDayNumber))) : null;
-  return d ? PHASED_SCHEDULE[d - 1]! : p.state === 'INACTIVE' ? 0 : null;
-}
-
-export function appleReleases(data: unknown): StoreRelease[] {
-  const versions = ((data as J)?.versions ?? []) as J[];
-  const builds = new Map((((data as J)?.builds ?? []) as J[]).map(b => [b.id, b.attributes?.version] as const));
-  const phasedById = (((data as J)?.phased ?? {}) as Record<string, J | null>);
-  return versions.filter(v => typeof v?.attributes?.versionString === 'string' && (v.attributes.platform ?? 'IOS') === 'IOS').map(v => {
-    const state = String(v.attributes.appVersionState ?? v.attributes.appStoreState ?? 'UNKNOWN');
-    const buildId = v.relationships?.build?.data?.id;
-    let phase = applePhase(state);
-    const pr = (typeof v.id === 'string' ? phasedById[v.id] : null) ?? null;
-    const prState = typeof pr?.attributes?.phasedReleaseState === 'string' ? String(pr.attributes.phasedReleaseState) : null;
-    const day = typeof pr?.attributes?.currentDayNumber === 'number' ? pr.attributes.currentDayNumber as number : null;
-    const fraction = phase === 'live' && prState ? phasedFraction({ state: prState, currentDayNumber: day }) : null;
-    // live but still rolling out (phased release on, not complete): the same as a Play staged rollout
-    if (phase === 'live' && prState === 'ACTIVE') phase = 'rollout';
-    if (phase === 'live' && prState === 'PAUSED') phase = 'halted';
-    const r: StoreRelease = { store: 'ios', version: v.attributes.versionString as string, build: (buildId && builds.get(buildId)) ? String(builds.get(buildId)) : null, state, phase, fraction, track: null };
-    if (prState) r.phased = { state: prState, day };
-    if (typeof v.attributes.createdDate === 'string') r.date = v.attributes.createdDate;
-    return r;
-  });
-}
-
-/** Leading dotted version of a Play release name ("2.3.0 (45)" -> "2.3.0"). */
-export const versionOfName = (name: unknown): string | null => (typeof name === 'string' ? name.match(/\d+(?:\.\d+){0,3}/)?.[0] ?? null : null);
-
-export function playReleases(data: unknown): StoreRelease[] {
-  const out: StoreRelease[] = [];
-  for (const t of ((data as J)?.tracks ?? []) as J[]) {
-    for (const r of (t?.releases ?? []) as J[]) {
-      const codes = ((r.versionCodes ?? []) as unknown[]).map(Number).filter(Number.isFinite);
-      const production = t.track === 'production';
-      const status = String(r.status ?? 'unknown');
-      const phase: ReleasePhase = !production ? (status === 'draft' ? 'draft' : 'testing')
-        : status === 'completed' ? 'live' : status === 'inProgress' ? 'rollout' : status === 'halted' ? 'halted' : status === 'draft' ? 'draft' : 'other';
-      out.push({ store: 'android', version: versionOfName(r.name), build: codes.length ? String(Math.max(...codes)) : null, state: status, phase, fraction: typeof r.userFraction === 'number' ? r.userFraction : null, track: String(t.track) });
-    }
-  }
-  return out;
-}
-
-const PHASE_RANK: Record<ReleasePhase, number> = { live: 0, rollout: 1, halted: 2, approved: 3, review: 4, rejected: 5, testing: 6, draft: 7, other: 8 };
-const pick = (rs: StoreRelease[]): StoreRelease | null => [...rs].sort((a, b) => PHASE_RANK[a.phase] - PHASE_RANK[b.phase])[0] ?? null;
-
-/**
- * Release trains: one version across both stores. current = the highest version that reaches users on a store (live,
- * or rolling out: a staged rollout or an iOS phased release, also when halted / paused); next = the highest version
- * above it on either store (review, testing, draft ...). A store without that version has null in the train.
- */
-export function releaseTrains(ios: StoreRelease[], android: StoreRelease[]): { current: ReleaseTrain | null; next: ReleaseTrain | null } {
-  const all = [...ios, ...android].filter((r): r is StoreRelease & { version: string } => !!r.version);
-  const train = (v: string): ReleaseTrain => ({ version: v, ios: pick(all.filter(r => r.store === 'ios' && r.version === v)), android: pick(all.filter(r => r.store === 'android' && r.version === v)) });
-  const live = all.filter(r => r.phase === 'live' || r.phase === 'rollout' || r.phase === 'halted').map(r => r.version).sort(cmpVersion).at(-1) ?? null;
-  const above = all.filter(r => !live || cmpVersion(r.version, live) > 0).map(r => r.version).sort(cmpVersion).at(-1) ?? null;
-  return { current: live ? train(live) : null, next: above ? train(above) : null };
-}
-
-/** Product ids on App Store Connect (`apple status --json` iaps) and Google Play (`play status --json` products). */
-export const appleProductIds = (data: unknown): string[] => (((data as J)?.iaps ?? []) as J[]).map(p => p?.attributes?.productId).filter((x): x is string => typeof x === 'string');
-export const playProductIds = (data: unknown): string[] => (((data as J)?.products ?? []) as J[]).map(p => p?.productId ?? p?.sku).filter((x): x is string => typeof x === 'string');
-
-/**
- * Catalog parity. Without store data (offline) only the config side is known. With it: ids only on one store,
- * and config ids missing from a store the app is on.
- */
-export function catalogParity(s: ProjectSummary, apple?: string[], play?: string[]): CatalogParity {
-  const live = apple !== undefined || play !== undefined;
-  const onlyIos = apple && play ? apple.filter(x => !play.includes(x)) : [];
-  const onlyAndroid = apple && play ? play.filter(x => !apple.includes(x)) : [];
-  // the status reads list one-time products; subscriptions are compared by `catalog diff` (catalog.diff method)
-  const sold = (ids: string[]) => ids.filter(x => s.productIds.includes(x));
-  const missingIos = apple ? sold(s.catalog.ios).filter(x => !apple.includes(x)) : [];
-  const missingAndroid = play ? sold(s.catalog.android).filter(x => !play.includes(x)) : [];
-  return {
-    checked: live ? 'live' : 'config', products: s.products, subscriptions: s.subscriptions,
-    onlyIos, onlyAndroid, missingIos, missingAndroid,
-    ok: !onlyIos.length && !onlyAndroid.length && !missingIos.length && !missingAndroid.length,
-  };
-}
diff --git a/cli/lib/project-files.ts b/cli/lib/project-files.ts
deleted file mode 100644
index eb6276e..0000000
--- a/cli/lib/project-files.ts
+++ /dev/null
@@ -1,180 +0,0 @@
-// Offline reads of a project's own files for the desktop app (serve.ts): the app icon, listing completeness per
-// language on both stores, and the local review reply drafts. Tolerant on purpose: a broken file becomes a problem
-// line, never an exception, so one bad section does not hide the rest ("unknown, never false").
-import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
-import { extname, isAbsolute, join, resolve } from 'node:path';
-import { type ShipConfig, playCodes } from './config';
-import { APPLE_LIMITS, len, PLAY_LIMITS } from './copy';
-import type { DraftsResult, IconResult, ListingField, ListingLocale, ListingsResult, ReplyDraft } from './desktop-protocol';
-import { parseFrontMatter, stringifyFrontMatter } from './frontmatter';
-import { checkReply, parseDraft } from './reviews';
-
-const IMAGE = /\.(png|jpe?g|webp|svg)$/i;
-export const ICON_MAX_BYTES = 1_500_000;
-
-/** Icon candidates, most specific first: icons.composite, the rendered store icons, play.icon, the usual places. */
-export function iconCandidates(config: Pick<ShipConfig, 'icons' | 'play'>, root: string): string[] {
-  const r = (p: string) => (isAbsolute(p) ? p : resolve(root, p));
-  const out: string[] = [];
-  if (config.icons?.composite) out.push(r(config.icons.composite));
-  if (config.icons?.out) out.push(r(join(config.icons.out, 'app-store-1024.png')), r(join(config.icons.out, 'play-512.png')));
-  if (config.play?.icon) out.push(r(config.play.icon));
-  for (const p of ['store/icons/app-store-1024.png', 'store/icons/play-512.png', 'store/icon.png', 'store/icon-1024.png', 'icon.png', 'assets/icon.png',
-    'resources/icon.png', 'assets/icon-only.png', 'public/icon-512.png', 'web/icon-512.png']) out.push(r(p));
-  return [...new Set(out)];
-}
-
-/** First candidate that exists and is an image file, or null. */
-export function findIcon(config: Pick<ShipConfig, 'icons' | 'play'>, root: string): string | null {
-  for (const p of iconCandidates(config, root)) {
-    try { if (IMAGE.test(p) && statSync(p).isFile()) return p; } catch { /* next */ }
-  }
-  return null;
-}
-
-const MIME: Record<string, string> = { '.png': 'image/png', '.jpg': 'image/jpeg', '.jpeg': 'image/jpeg', '.webp': 'image/webp', '.svg': 'image/svg+xml' };
-
-/** The icon as a data: URL for the desktop window (its CSP allows data: images only). Too big or unreadable -> null. */
-export function iconDataUrl(path: string | null): IconResult {
-  if (!path) return { path: null, dataUrl: null };
-  try {
-    const st = statSync(path);
-    if (!st.isFile() || st.size > ICON_MAX_BYTES) return { path, dataUrl: null };
-    const mime = MIME[extname(path).toLowerCase()];
-    if (!mime) return { path, dataUrl: null };
-    return { path, dataUrl: `data:${mime};base64,${readFileSync(path).toString('base64')}` };
-  } catch { return { path, dataUrl: null }; }
-}
-
-/** "### heading" sub-sections of a "## " section with their first fenced block (like lib/copy.ts, never throws). */
-function blocks(section: string): { heading: string; text: string }[] {
-  const out: { heading: string; text: string }[] = [];
-  for (const part of section.split(/^### /m).slice(1)) {
-    const heading = part.split('\n')[0]!.trim();
-    const m = /^```[^\n]*\n([\s\S]*?)\n```/m.exec(part);
-    out.push({ heading, text: m ? m[1]!.trim() : '' });
-  }
-  return out;
-}
-
-function field(name: string, text: string | undefined, limit: number, required: boolean): ListingField {
-  const n = text ? len(text) : 0;
-  const state: ListingField['state'] = !n ? (required ? 'missing' : 'empty-optional') : n > limit ? 'over' : 'ok';
-  return { field: name, length: n, limit, required, state };
-}
-
-/** Play sections by Play language code: { title, short, full, whatsNew } texts. */
-export function playSections(md: string): Map<string, Record<string, string | undefined>> {
-  const out = new Map<string, Record<string, string | undefined>>();
-  for (const sec of md.split(/^## /m).slice(1)) {
-    const m = /^<!--\s*play:\s*([^>]+?)\s*-->$/m.exec(sec);
-    if (!m) continue;
-    const bs = blocks(sec);
-    const find = (re: RegExp): string | undefined => bs.find(b => re.test(b.heading))?.text;
-    const f = { title: find(/\btitle\b/i), short: find(/\bshort\b/i), full: find(/\bfull\b/i), whatsNew: find(/what'?s new|release notes/i) };
-    for (const lang of m[1]!.split(',').map(s => s.trim()).filter(Boolean)) out.set(lang, f);
-  }
-  return out;
-}
-
-/** App Store sections by App Store Connect locale: field -> text. */
-export function appleSections(md: string): Map<string, Record<string, string | undefined>> {
-  const out = new Map<string, Record<string, string | undefined>>();
-  for (const sec of md.split(/^## /m).slice(1)) {
-    const locale = sec.split(/[\s·]/)[0]!.trim();
-    if (!/^[a-z]{2,3}(-[A-Za-z]{2,4})?$/.test(locale)) continue;
-    const f: Record<string, string | undefined> = {};
-    for (const b of blocks(sec)) if (b.heading in APPLE_LIMITS) f[b.heading] = b.text;
-    out.set(locale, f);
-  }
-  return out;
-}
-
-function countImages(dir: string): number {
-  let n = 0;
-  try {
-    for (const e of readdirSync(dir, { withFileTypes: true })) {
-      if (e.isDirectory()) n += countImages(join(dir, e.name));
-      else if (/\.(png|jpe?g)$/i.test(e.name)) n++;
-    }
-  } catch { /* unreadable: 0 */ }
-  return n;
-}
-
-/** Listing completeness per config language, both stores, plus rendered screenshots per language. */
-export function listingCompleteness(config: ShipConfig, root: string): ListingsResult {
-  const problems: string[] = [];
-  const read = (rel: string | undefined, fallback: string): { path: string | null; text: string | null } => {
-    const p = resolve(root, rel ?? fallback);
-    if (!existsSync(p)) { problems.push(`${rel ?? fallback}: file not found`); return { path: null, text: null }; }
-    try { return { path: p, text: readFileSync(p, 'utf8') }; } catch (e) { problems.push(`${rel ?? fallback}: ${(e as Error).message}`); return { path: p, text: null }; }
-  };
-  const playFile = config.play ? read(config.play.listing, 'store/listing.md') : { path: null, text: null };
-  const appleFile = config.apple ? read(config.apple.listing, 'store/appstore.md') : { path: null, text: null };
-  const play = playFile.text !== null ? playSections(playFile.text) : null;
-  const apple = appleFile.text !== null ? appleSections(appleFile.text) : null;
-  const rendersDir = resolve(root, config.renders ?? config.shots?.out ?? 'store/renders');
-  const hasRenders = existsSync(rendersDir);
-  const locales: ListingLocale[] = config.languages.map(l => {
-    let req = 0, good = 0;
-    const tally = (fs: ListingField[]) => { for (const f of fs) if (f.required) { req++; if (f.state === 'ok') good++; } return fs; };
-    const pc = config.play ? playCodes(l)[0] ?? null : null;
-    const ps = pc && play ? play.get(pc) : undefined;
-    const playPart = config.play ? {
-      code: pc,
-      fields: tally([
-        field('title', ps?.title ?? (ps ? config.app.name : undefined), PLAY_LIMITS.title, true),
-        field('short', ps?.short, PLAY_LIMITS.short, true),
-        field('full', ps?.full, PLAY_LIMITS.full, true),
-        field('whatsNew', ps?.whatsNew, PLAY_LIMITS.whatsNew, false),
-      ]),
-    } : null;
-    const ac = config.apple ? l.apple ?? null : null;
-    const as = ac && apple ? apple.get(ac) : undefined;
-    const applePart = config.apple ? {
-      code: ac,
-      fields: tally([
-        field('name', as?.name ?? (as ? config.app.name : undefined), APPLE_LIMITS.name, true),
-        field('subtitle', as?.subtitle, APPLE_LIMITS.subtitle, true),
-        field('promotionalText', as?.promotionalText, APPLE_LIMITS.promotionalText, true),
-        field('keywords', as?.keywords, APPLE_LIMITS.keywords, true),
-        field('description', as?.description, APPLE_LIMITS.description, true),
-        field('whatsNew', as?.whatsNew, APPLE_LIMITS.whatsNew, false),
-      ]),
-    } : null;
-    const screenshots = hasRenders ? countImages(join(rendersDir, l.id)) : null;
-    return { lang: l.id, rtl: !!l.rtl, play: playPart, apple: applePart, screenshots, complete: req ? good / req : 0 };
-  });
-  return { files: { play: playFile.path, apple: appleFile.path }, problems, locales };
-}
-
-/** Local reply drafts with their send checks. Unparsable files become problems. */
-export function readReplyDrafts(dir: string): DraftsResult {
-  const out: DraftsResult = { dir, drafts: [], problems: [] };
-  if (!existsSync(dir)) return out;
-  for (const name of readdirSync(dir).filter(n => n.endsWith('.md')).sort()) {
-    const file = join(dir, name);
-    try {
-      const text = readFileSync(file, 'utf8');
-      const d = parseDraft(file, text);
-      const { data, body } = parseFrontMatter(text);
-      const quote = body.split(/^## Reply\s*$/m)[0]!.split('\n').filter(l => l.startsWith('>')).map(l => l.replace(/^>\s?/, '')).join('\n').trim();
-      const num = (v: unknown): number | null => (typeof v === 'number' ? v : typeof v === 'string' && /^\d+$/.test(v) ? Number(v) : null);
-      const str = (v: unknown): string | null => (typeof v === 'string' && v ? v : null);
-      const draft: ReplyDraft = {
-        file, store: d.store, reviewId: d.reviewId, approved: d.approved, sent: d.sent, reply: d.reply,
-        rating: num(data.rating), title: str(data.title) ?? (/^# [★☆]*\s*(.+)$/m.exec(body)?.[1]?.trim() || null), body: quote || null, date: str(data.date),
-        issues: d.reply ? checkReply(d.reply, d.store) : [],
-      };
-      out.drafts.push(draft);
-    } catch (e) { out.problems.push(`${name}: ${(e as Error).message}`); }
-  }
-  return out;
-}
-
-/** Front matter `approved: <bool>` set in a draft file text; the body unchanged. */
-export function setApproved(text: string, approved: boolean): string {
-  const { data, body } = parseFrontMatter(text);
-  if (data.store !== 'apple' && data.store !== 'play') throw new Error('not a review reply draft (front matter "store" missing)');
-  return stringifyFrontMatter({ ...data, approved }, body);
-}
diff --git a/cli/lib/runner.ts b/cli/lib/runner.ts
deleted file mode 100644
index 98f1ab0..0000000
--- a/cli/lib/runner.ts
+++ /dev/null
@@ -1,82 +0,0 @@
-// Runs one storebound command as a child process: the shared core of `storebound mcp` and `storebound serve --stdio`.
-// Works from source (`bun cli/index.ts ...`) and from a `bun build --compile` binary (the desktop sidecar), where the
-// binary re-executes itself. Output is streamed line by line (progress) and the `--json` result line is picked out.
-import { join } from 'node:path';
-import { RESULT_MARK } from './log';
-import { toolPath } from './tools';
-
-/** True inside a `bun build --compile` executable (the entry module lives in Bun's embedded file system). */
-export const compiled = (): boolean => /^(\/\$bunfs\/|[A-Z]:[\\/]~BUN[\\/])/.test(Bun.main);
-
-/** Command prefix that starts this storebound: the compiled binary itself, or bun + cli/index.ts. */
-export function selfCommand(): string[] {
-  return compiled() ? [process.execPath] : [process.execPath, join(import.meta.dir, '..', 'index.ts')];
-}
-
-export interface RunOptions {
-  cwd: string;
-  /** Extra environment for this call only (credentials from the desktop keychain, never written anywhere). */
-  env?: Record<string, string>;
-  /** Every output line as it arrives (stdout and stderr), without the machine result line. */
-  onLine?: (line: string, stream: 'stdout' | 'stderr') => void;
-  /** Ask for the marked `--json` result line (STOREBOUND_MACHINE=1). */
-  machine?: boolean;
-}
-
-export interface RunResult { code: number; out: string; data?: unknown; cancelled: boolean }
-
-export interface Running { result: Promise<RunResult>; cancel(): void }
-
-/** Env names a caller may pass per call; anything else in `env` is ignored. */
-export const CALL_ENV = ['PLAY_SERVICE_ACCOUNT', 'ASC_KEY_ID', 'ASC_ISSUER_ID', 'ASC_P8'] as const;
-
-export function pickCallEnv(env: Record<string, unknown> | undefined): Record<string, string> {
-  const out: Record<string, string> = {};
-  for (const k of CALL_ENV) { const v = env?.[k]; if (typeof v === 'string' && v) out[k] = v; }
-  return out;
-}
-
-/** Environment of a child: the parent's minus anything secret to the session, plus the per-call values. */
-export function childEnv(extra: Record<string, string> = {}, machine = false): Record<string, string> {
-  const base: Record<string, string> = {};
-  for (const [k, v] of Object.entries(process.env)) if (v !== undefined && !k.startsWith('STOREBOUND_SESSION')) base[k] = v;
-  // app-managed tools (desktop data folder) come first on PATH
-  if (base.STOREBOUND_TOOL_PATH) base.PATH = toolPath(base);
-  return { ...base, ...extra, NO_COLOR: '1', ...(machine ? { STOREBOUND_MACHINE: '1', STOREBOUND_SERVE: '1' } : {}) };
-}
-
-async function pump(stream: ReadableStream<Uint8Array>, kind: 'stdout' | 'stderr', each: (line: string, kind: 'stdout' | 'stderr') => void): Promise<void> {
-  const dec = new TextDecoder();
-  let buf = '';
-  const reader = stream.getReader();
-  for (;;) {
-    const { value, done } = await reader.read();
-    if (done) break;
-    buf += dec.decode(value, { stream: true });
-    let nl: number;
-    while ((nl = buf.indexOf('\n')) >= 0) { each(buf.slice(0, nl).replace(/\r$/, ''), kind); buf = buf.slice(nl + 1); }
-  }
-  buf += dec.decode();
-  if (buf) each(buf, kind);
-}
-
-export function runCommand(argv: string[], o: RunOptions): Running {
-  const p = Bun.spawn([...selfCommand(), ...argv], { cwd: o.cwd, stdin: 'ignore', stdout: 'pipe', stderr: 'pipe', env: childEnv(o.env, o.machine) });
-  let cancelled = false;
-  const lines: string[] = [];
-  let data: unknown;
-  const each = (line: string, kind: 'stdout' | 'stderr'): void => {
-    if (kind === 'stdout' && line.startsWith(RESULT_MARK)) {
-      try { data = JSON.parse(line.slice(RESULT_MARK.length)); } catch { lines.push(line); }
-      return;
-    }
-    lines.push(line);
-    o.onLine?.(line, kind);
-  };
-  const result = (async (): Promise<RunResult> => {
-    await Promise.all([pump(p.stdout, 'stdout', each), pump(p.stderr, 'stderr', each)]);
-    const code = await p.exited;
-    return { code, out: lines.join('\n').trim(), ...(data === undefined ? {} : { data }), cancelled };
-  })();
-  return { result, cancel: () => { cancelled = true; p.kill(); } };
-}
diff --git a/cli/lib/template-files.ts b/cli/lib/template-files.ts
deleted file mode 100644
index 9ba695a..0000000
--- a/cli/lib/template-files.ts
+++ /dev/null
@@ -1,51 +0,0 @@
-// Every file under templates/, embedded as text so `storebound init` also works from the compiled desktop sidecar
-// (a `bun build --compile` binary has no templates folder next to it). tests/apps.test.ts checks this list against the
-// folder: add a line here when a template is added.
-import t0 from '../../templates/app-privacy.md' with { type: 'text' };
-import t1 from '../../templates/appstore.md' with { type: 'text' };
-import t2 from '../../templates/credentials.example.json' with { type: 'text' };
-import t3 from '../../templates/data-safety.csv' with { type: 'text' };
-import t4 from '../../templates/declarations.md' with { type: 'text' };
-import t5 from '../../templates/listing.md' with { type: 'text' };
-import t6 from '../../templates/privacy-policy.html' with { type: 'text' };
-import t7 from '../../templates/profiles/app/app-privacy.md' with { type: 'text' };
-import t8 from '../../templates/profiles/app/appstore.md' with { type: 'text' };
-import t9 from '../../templates/profiles/app/declarations.md' with { type: 'text' };
-import t10 from '../../templates/profiles/app/listing.md' with { type: 'text' };
-import t11 from '../../templates/profiles/app/privacy-policy.html' with { type: 'text' };
-import t12 from '../../templates/profiles/app/shots-copy.json' with { type: 'text' };
-import t13 from '../../templates/profiles/app/storebound.config.ts' with { type: 'text' };
-import t14 from '../../templates/profiles/subscription-app/app-privacy.md' with { type: 'text' };
-import t15 from '../../templates/profiles/subscription-app/appstore.md' with { type: 'text' };
-import t16 from '../../templates/profiles/subscription-app/declarations.md' with { type: 'text' };
-import t17 from '../../templates/profiles/subscription-app/listing.md' with { type: 'text' };
-import t18 from '../../templates/profiles/subscription-app/storebound.config.ts' with { type: 'text' };
-import t19 from '../../templates/shots-copy.json' with { type: 'text' };
-import t20 from '../../templates/storebound.config.ts' with { type: 'text' };
-import t21 from '../../templates/testers.csv' with { type: 'text' };
-
-/** Template text by its path under templates/ (forward slashes). */
-export const TEMPLATE_TEXT: Record<string, string> = {
-  'app-privacy.md': t0 as unknown as string,
-  'appstore.md': t1 as unknown as string,
-  'credentials.example.json': t2 as unknown as string,
-  'data-safety.csv': t3 as unknown as string,
-  'declarations.md': t4 as unknown as string,
-  'listing.md': t5 as unknown as string,
-  'privacy-policy.html': t6 as unknown as string,
-  'profiles/app/app-privacy.md': t7 as unknown as string,
-  'profiles/app/appstore.md': t8 as unknown as string,
-  'profiles/app/declarations.md': t9 as unknown as string,
-  'profiles/app/listing.md': t10 as unknown as string,
-  'profiles/app/privacy-policy.html': t11 as unknown as string,
-  'profiles/app/shots-copy.json': t12 as unknown as string,
-  'profiles/app/storebound.config.ts': t13 as unknown as string,
-  'profiles/subscription-app/app-privacy.md': t14 as unknown as string,
-  'profiles/subscription-app/appstore.md': t15 as unknown as string,
-  'profiles/subscription-app/declarations.md': t16 as unknown as string,
-  'profiles/subscription-app/listing.md': t17 as unknown as string,
-  'profiles/subscription-app/storebound.config.ts': t18 as unknown as string,
-  'shots-copy.json': t19 as unknown as string,
-  'storebound.config.ts': t20 as unknown as string,
-  'testers.csv': t21 as unknown as string,
-};
diff --git a/cli/lib/tools.ts b/cli/lib/tools.ts
deleted file mode 100644
index 2e145c2..0000000
--- a/cli/lib/tools.ts
+++ /dev/null
@@ -1,115 +0,0 @@
-// Optional local tools storebound uses (screenshots, previews, icons, simulator and emulator captures), found on this
-// machine with their versions. The desktop app can manage its own copies of ffmpeg and Chrome for Testing in its data
-// folder and points storebound at them:
-//   STOREBOUND_TOOL_PATH   folders put in front of PATH for every command (app-managed ffmpeg / ffprobe)
-//   STOREBOUND_CHROME      Chrome / Chrome for Testing executable for renders and web captures
-// Nothing is installed system-wide. Sources and licenses: docs/desktop.md.
-import { existsSync } from 'node:fs';
-import { delimiter, join } from 'node:path';
-
-export type ToolId = 'ffmpeg' | 'ffprobe' | 'chrome' | 'xcode' | 'simctl' | 'adb' | 'git';
-
-export interface ToolStatus {
-  id: ToolId;
-  name: string;
-  found: boolean;
-  path: string | null;
-  version: string | null;
-  /** 'app' = the desktop app's own copy (STOREBOUND_TOOL_PATH / STOREBOUND_CHROME), 'system' = installed by the user. */
-  source: 'app' | 'system' | null;
-  /** What needs it. */
-  usedFor: string;
-  /** How to get it: the desktop app downloads ffmpeg and Chrome for Testing; Xcode and the Android SDK are link-out. */
-  install: { kind: 'download' | 'link'; url: string; note: string };
-}
-
-/** PATH with the app-managed tool folders first. */
-export function toolPath(env: Record<string, string | undefined> = process.env): string {
-  const extra = (env.STOREBOUND_TOOL_PATH ?? '').split(delimiter).filter(Boolean);
-  return [...extra, env.PATH ?? ''].filter(Boolean).join(delimiter);
-}
-
-/** First line of `<cmd> <args>` (version banners), or null. */
-function firstLine(cmd: string[], env: Record<string, string>): string | null {
-  try {
-    const r = Bun.spawnSync(cmd, { stdout: 'pipe', stderr: 'pipe', env, timeout: 5_000 });
-    if (r.exitCode !== 0) return null;
-    return (r.stdout.toString() || r.stderr.toString()).trim().split('\n')[0]?.trim() || null;
-  } catch { return null; }
-}
-
-/** "ffmpeg version 7.1.1 Copyright ..." -> "7.1.1"; "Google Chrome for Testing 131.0.6778.85" -> "131.0.6778.85". */
-export function parseVersion(line: string | null): string | null {
-  if (!line) return null;
-  return line.match(/version\s+([^\s,]+)/i)?.[1] ?? line.match(/(\d+(?:\.\d+)+)/)?.[1] ?? null;
-}
-
-export function systemChrome(platform = process.platform, env: Record<string, string | undefined> = process.env): string | null {
-  const c = platform === 'darwin' ? ['/Applications/Google Chrome.app/Contents/MacOS/Google Chrome']
-    : platform === 'win32' ? [env.PROGRAMFILES, env['PROGRAMFILES(X86)'], env.LOCALAPPDATA].filter((d): d is string => !!d).map(d => join(d, 'Google/Chrome/Application/chrome.exe'))
-    : ['/usr/bin/google-chrome', '/usr/bin/google-chrome-stable', '/usr/bin/chromium', '/usr/bin/chromium-browser'];
-  return c.find(p => existsSync(p)) ?? null;
-}
-
-const FFMPEG_NOTE = 'Static build into the app data folder (GPL; never bundled with the app). Checksum-verified.';
-
-export function detectTools(env: Record<string, string | undefined> = process.env): ToolStatus[] {
-  const PATH = toolPath(env);
-  const spawnEnv: Record<string, string> = { ...Object.fromEntries(Object.entries(env).filter((e): e is [string, string] => e[1] !== undefined)), PATH };
-  const appDirs = (env.STOREBOUND_TOOL_PATH ?? '').split(delimiter).filter(Boolean);
-  const which = (n: string): string | null => Bun.which(n, { PATH });
-  const src = (p: string | null): ToolStatus['source'] => (!p ? null : appDirs.some(d => p.startsWith(d)) ? 'app' : 'system');
-  const bin = (id: ToolId, name: string, usedFor: string, install: ToolStatus['install'], versionArgs: string[]): ToolStatus => {
-    const path = which(id);
-    const version = path ? parseVersion(firstLine([path, ...versionArgs], spawnEnv)) : null;
-    return { id, name, found: !!path, path, version, source: src(path), usedFor, install };
-  };
-  const out: ToolStatus[] = [
-    bin('ffmpeg', 'ffmpeg', 'icons, screenshot renders, app preview videos, frame crops', { kind: 'download', url: 'https://ffmpeg.org/download.html', note: FFMPEG_NOTE }, ['-version']),
-    bin('ffprobe', 'ffprobe', 'checks of app preview videos and clips', { kind: 'download', url: 'https://ffmpeg.org/download.html', note: 'Comes with the ffmpeg download.' }, ['-version']),
-  ];
-  const appChrome = env.STOREBOUND_CHROME && existsSync(env.STOREBOUND_CHROME) ? env.STOREBOUND_CHROME : null;
-  const chrome = appChrome ?? systemChrome(process.platform, env);
-  out.push({
-    id: 'chrome', name: appChrome ? 'Chrome for Testing' : 'Google Chrome', found: !!chrome, path: chrome,
-    version: chrome ? parseVersion(firstLine([chrome, '--version'], spawnEnv)) : null, source: appChrome ? 'app' : chrome ? 'system' : null,
-    usedFor: 'screenshot renders, captions, web captures and recordings',
-    install: { kind: 'download', url: 'https://googlechromelabs.github.io/chrome-for-testing/', note: 'Chrome for Testing from Google\'s official endpoints into the app data folder.' },
-  });
-  if (process.platform === 'darwin') {
-    const dev = firstLine(['xcode-select', '-p'], spawnEnv);
-    out.push({ id: 'xcode', name: 'Xcode command line tools', found: !!dev, path: dev, version: parseVersion(firstLine(['xcodebuild', '-version'], spawnEnv)), source: dev ? 'system' : null,
-      usedFor: 'iOS builds, the iOS Simulator (simctl)', install: { kind: 'link', url: 'https://developer.apple.com/xcode/', note: 'Install Xcode from the App Store or developer.apple.com.' } });
-    const simctl = firstLine(['xcrun', '--find', 'simctl'], spawnEnv);
-    out.push({ id: 'simctl', name: 'simctl (iOS Simulator)', found: !!simctl, path: simctl, version: null, source: simctl ? 'system' : null,
-      usedFor: 'iOS Simulator screenshots and recordings', install: { kind: 'link', url: 'https://developer.apple.com/xcode/', note: 'Part of Xcode.' } });
-  }
-  out.push(bin('adb', 'adb (Android platform tools)', 'Android emulator / device screenshots and recordings', { kind: 'link', url: 'https://developer.android.com/tools/releases/platform-tools', note: 'Install Android Studio or the SDK platform tools.' }, ['version']));
-  out.push(bin('git', 'git', 'release notes from history, analytics compare', { kind: 'link', url: 'https://git-scm.com/downloads', note: 'Install git from your OS package manager.' }, ['--version']));
-  return out;
-}
-
-/**
- * Commands that install a tool on this OS (shown by `storebound doctor` and the desktop Dependencies screen, never
- * run by storebound). Package managers only; the desktop app can also download ffmpeg and Chrome for Testing itself.
- */
-export function installCommands(id: ToolId | 'playwright', platform: NodeJS.Platform = process.platform): string[] {
-  const mac = platform === 'darwin', win = platform === 'win32';
-  switch (id) {
-    case 'ffmpeg': case 'ffprobe': return mac ? ['brew install ffmpeg'] : win ? ['winget install --id Gyan.FFmpeg'] : ['sudo apt install ffmpeg', 'sudo dnf install ffmpeg'];
-    case 'chrome': return ['bunx playwright install chromium', ...(mac ? ['brew install --cask google-chrome'] : win ? ['winget install --id Google.Chrome'] : [])];
-    case 'playwright': return ['bun add -d playwright'];
-    case 'xcode': return mac ? ['xcode-select --install'] : [];
-    case 'simctl': return mac ? ['Install Xcode from the App Store, then: sudo xcode-select -s /Applications/Xcode.app'] : [];
-    case 'adb': return mac ? ['brew install --cask android-platform-tools'] : win ? ['winget install --id Google.PlatformTools'] : ['sudo apt install adb'];
-    case 'git': return mac ? ['xcode-select --install', 'brew install git'] : win ? ['winget install --id Git.Git'] : ['sudo apt install git'];
-  }
-}
-
-/** Where playwright resolves from (the project, then the storebound folder), or null. */
-export function findPlaywright(bases: string[]): string | null {
-  for (const base of bases) {
-    try { return Bun.resolveSync('playwright', base); } catch { /* next */ }
-  }
-  return null;
-}
diff --git a/cli/mcp.ts b/cli/mcp.ts
index 04a552d..571042f 100644
--- a/cli/mcp.ts
+++ b/cli/mcp.ts
@@ -20,8 +20,8 @@
 // Every tool runs the CLI as a child process in the project directory (STOREBOUND_PROJECT or the server's cwd) and
 // returns its output. stdout of this process carries protocol messages only; logs go to stderr.
 // Tool list and safety rules: mcp-tools.ts (write tools default to dry_run, nothing public or irreversible exposed).
+import { join } from 'node:path';
 import pkg from '../package.json' with { type: 'json' };
-import { runCommand, type Running } from './lib/runner';
 import { listTools, TOOLS, toArgv, validateInput } from './mcp-tools';
 
 /** Current (modern, stateless) revision. */
@@ -54,6 +54,7 @@ type Id = string | number;
 interface Msg { jsonrpc: '2.0'; id?: Id; method?: string; params?: Record<string, unknown> }
 
 const MAX_OUTPUT = 60_000;
+const CLI = join(import.meta.dir, 'index.ts');
 const serverInfo = () => ({ name: 'storebound', title: 'storebound', version: pkg.version });
 
 /** Era of one request: modern when its _meta names a modern (or unknown) protocol version, else legacy. */
@@ -116,13 +117,17 @@ export async function handle(m: Msg, run: (argv: string[], id: Id) => Promise<{
   }
 }
 
-const running = new Map<Id, Running>();
-function cancel(id: Id | undefined): void { if (id !== undefined) running.get(id)?.cancel(); }
+const running = new Map<Id, ReturnType<typeof Bun.spawn>>();
+function cancel(id: Id | undefined): void { if (id !== undefined) running.get(id)?.kill(); }
 
 async function runCli(argv: string[], id: Id): Promise<{ code: number; out: string }> {
-  const r = runCommand(argv, { cwd: process.env.STOREBOUND_PROJECT || process.cwd() });
-  running.set(id, r);
-  try { const { code, out } = await r.result; return { code, out }; } finally { running.delete(id); }
+  const cwd = process.env.STOREBOUND_PROJECT || process.cwd();
+  const p = Bun.spawn([process.execPath, CLI, ...argv], { cwd, stdin: 'ignore', stdout: 'pipe', stderr: 'pipe', env: { ...process.env, NO_COLOR: '1' } });
+  running.set(id, p);
+  try {
+    const [out, errText, code] = await Promise.all([new Response(p.stdout).text(), new Response(p.stderr).text(), p.exited]);
+    return { code, out: (out + (errText ? `\n${errText}` : '')).trim() };
+  } finally { running.delete(id); }
 }
 
 export async function serve(): Promise<void> {
diff --git a/cli/play/next-version-code.ts b/cli/play/next-version-code.ts
index 2d8bcb8..d7a5b40 100644
--- a/cli/play/next-version-code.ts
+++ b/cli/play/next-version-code.ts
@@ -4,7 +4,6 @@
 //   ./gradlew bundleRelease -PversionCode=$(storebound play next-version-code)
 import type { Ctx } from '../lib/ctx';
 import { need } from '../lib/ctx';
-import { printJson } from '../lib/log';
 import { nextVersionCode } from '../lib/release';
 import { playClient } from './client';
 
@@ -17,11 +16,8 @@ export async function run(ctx: Ctx): Promise<void> {
     const apks = (await play.call<{ apks?: { versionCode: number }[] }>('GET', `${play.API}/edits/${e.id}/apks`).catch(() => ({ apks: [] }))).apks ?? [];
     const tracks = (await play.call<{ tracks?: { releases?: { versionCodes?: string[] }[] }[] }>('GET', `${play.API}/edits/${e.id}/tracks`)).tracks ?? [];
     const codes = [...bundles.map(b => b.versionCode), ...apks.map(a => a.versionCode), ...tracks.flatMap(t => (t.releases ?? []).flatMap(r => r.versionCodes ?? []))];
-    if (ctx.args.has('json')) printJson({ next: nextVersionCode(codes), seen: codes.length });
-    else {
-      console.error(`[play] ${codes.length} version codes seen; next versionCode:`);
-      console.log(nextVersionCode(codes));
-    }
+    console.error(`[play] ${codes.length} version codes seen; next versionCode:`);
+    console.log(nextVersionCode(codes));
   } finally {
     await play.call('DELETE', `${play.API}/edits/${e.id}`).catch(() => {});
   }
diff --git a/cli/play/status.ts b/cli/play/status.ts
index 73668e3..5525b25 100644
--- a/cli/play/status.ts
+++ b/cli/play/status.ts
@@ -2,7 +2,6 @@
 //   storebound play status [--json]
 import type { Ctx } from '../lib/ctx';
 import { need } from '../lib/ctx';
-import { printJson } from '../lib/log';
 import { playClient } from './client';
 import { listOneTimeProducts } from './products';
 
@@ -17,7 +16,7 @@ export async function run(ctx: Ctx): Promise<void> {
     const listings = (await play.call<{ listings?: { language: string }[] }>('GET', `${play.API}/edits/${e.id}/listings`)).listings ?? [];
     const details = await play.call<Record<string, string>>('GET', `${play.API}/edits/${e.id}/details`);
     const products = await listOneTimeProducts(play);
-    if (ctx.args.has('json')) { printJson({ details, tracks, listings, products }); return; }
+    if (ctx.args.has('json')) { console.log(JSON.stringify({ details, tracks, listings, products }, null, 2)); return; }
     console.log(`${play.packageName}\n  details: ${details.defaultLanguage} · ${details.contactEmail ?? '-'} · ${details.contactWebsite ?? '-'}`);
     console.log(`  listings (${listings.length}): ${listings.map(l => l.language).join(', ') || '-'}`);
     for (const t of tracks) {
diff --git a/cli/prices.ts b/cli/prices.ts
index 220e8a5..555af5f 100644
--- a/cli/prices.ts
+++ b/cli/prices.ts
@@ -13,7 +13,7 @@ import { existsSync, readFileSync, writeFileSync } from 'node:fs';
 import { ascClient, type Asc, type J } from './apple/asc';
 import type { Ctx } from './lib/ctx';
 import { confirm, need } from './lib/ctx';
-import { done, log, printJson, step, warn } from './lib/log';
+import { done, log, step, warn } from './lib/log';
 import { toMoney } from './lib/money';
 import {
   appleSchedule, appleScheduleBody, applePriceRows, diffPrices, diffTable, parsePriceCsv, type PlayProduct, playPatchBody, playPriceRows, playRegions,
@@ -96,12 +96,10 @@ export async function run(ctx: Ctx): Promise<void> {
   const wantedAll = parsePriceCsv(readFileSync(csvPath, 'utf8'), { products: config.products!.map(p => p.id) })
     .filter(r => products.some(p => p.id === r.product) && ((r.store === 'apple' && useApple) || (r.store === 'play' && usePlay)));
   const diff = diffPrices(current, wantedAll);
+  console.log(diffTable(diff, { all: a.has('all') }));
   const changed = new Set(diff.filter(d => d.change !== 'same').map(d => `${d.product}|${d.store}`));
   const reconvert = a.has('reconvert');
   if (reconvert && usePlay) for (const p of products) if (playProducts.has(p.id)) changed.add(`${p.id}|play`);
-  // --json is a read-only diff: it never writes, whatever the other flags say.
-  if (a.has('json')) { printJson({ csv: csvPath, diff: a.has('all') ? diff : diff.filter(d => d.change !== 'same'), changed: [...changed] }); return; }
-  console.log(diffTable(diff, { all: a.has('all') }));
   if (!changed.size) { done(TAG, 'prices up to date'); return; }
   log(TAG, `${changed.size} product / store pair(s) to update`);
   if (dry) { done(TAG, 'dry run: nothing written'); return; }
diff --git a/cli/reviews.ts b/cli/reviews.ts
index 832bbb5..d9448e8 100644
--- a/cli/reviews.ts
+++ b/cli/reviews.ts
@@ -2,8 +2,6 @@
 //   storebound reviews list  [--store apple|play] [--days 14] [--unanswered] [--rating 1,2] [--json]
 //   storebound reviews draft [--store apple|play] [--days 14] [--rating 1,2,3] [--all] [--dir .storebound/replies] [--dry]
 //   storebound reviews send  [--dir .storebound/replies] [--dry] [--yes]
-//   storebound reviews drafts [--json]                 the local drafts with the checks `send` applies (offline)
-//   storebound reviews approve <draft file> [--undo] [--dry]   sets approved: true (false) in one draft (local file)
 // `draft` writes one Markdown file per unanswered review into .storebound/replies/ (gitignored): front matter
 // (store, review_id, rating, approved: false), the review, and an empty "## Reply" section. Existing files are never
 // overwritten (your edits stay). The owner or an agent with the review-replies skill writes the reply; the owner sets
@@ -11,17 +9,16 @@
 // confirmation, then writes `sent: <time>` into the file. Replies are public: `send` is not an MCP tool.
 // Google Play's API only returns reviews created or edited in the last 7 days.
 import { existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync } from 'node:fs';
-import { join, relative, resolve } from 'node:path';
+import { join } from 'node:path';
 import { ascClient, type J } from './apple/asc';
 import type { Ctx } from './lib/ctx';
 import { confirm } from './lib/ctx';
-import { done, log, printJson, warn } from './lib/log';
+import { done, log, warn } from './lib/log';
 import {
   checkReply, type Draft, draftMarkdown, draftName, filterReviews, markSent, parseAppleReviews, parseDraft, parsePlayReviews, replyRequest,
   type Review, sendPlan,
 } from './lib/reviews';
 import { textTable } from './lib/table';
-import { readReplyDrafts, setApproved } from './lib/project-files';
 import { playClient } from './play/client';
 
 const TAG = 'reviews';
@@ -95,7 +92,7 @@ export async function run(ctx: Ctx): Promise<void> {
 
   if (sub === 'list') {
     const rs = await collect(ctx, { since, unanswered: a.has('unanswered'), ratings });
-    if (a.has('json')) { printJson(rs.map(({ author: _a, ...r }) => r)); return; }
+    if (a.has('json')) { console.log(JSON.stringify(rs.map(({ author: _a, ...r }) => r), null, 2)); return; }
     console.log(textTable(['store', 'date', 'stars', 'where', 'replied', 'review'], rs.map(r => [r.store, r.date.slice(0, 10), r.rating, r.where ?? '', r.reply ? 'yes' : '', snippet(r)])));
     done(TAG, `${rs.length} review(s) in the last ${days} days, ${rs.filter(r => !r.reply).length} without a reply`);
     return;
@@ -142,34 +139,5 @@ export async function run(ctx: Ctx): Promise<void> {
     done(TAG, `${sent}/${plan.send.length} sent (Apple shows replies within about 24 hours)`);
     return;
   }
-  if (sub === 'drafts') {
-    // read-only: the local drafts with the checks `send` applies (no network)
-    const r = readReplyDrafts(dir);
-    if (a.has('json')) { printJson(r); return; }
-    console.log(textTable(['store', 'review', 'state', 'chars', 'checks'], r.drafts.map(d => [d.store, d.reviewId, d.sent ? `sent ${d.sent.slice(0, 10)}` : d.approved ? 'approved' : 'draft',
-      [...d.reply].length, d.issues.map(i => `${i.level}: ${i.msg}`).join('; ')])));
-    for (const p of r.problems) warn(TAG, p);
-    done(TAG, `${r.drafts.length} draft(s) in ${dir}`);
-    return;
-  }
-
-  if (sub === 'approve') {
-    // marks one draft approved (or not, with --undo); local file only, nothing is sent
-    const file = a.get('file') ?? a._[1];
-    if (!file) throw new Error('usage: storebound reviews approve <draft file> [--undo] [--dry]');
-    const p = resolve(dir, file);
-    if (relative(dir, p).startsWith('..') || !p.endsWith('.md') || !existsSync(p)) throw new Error(`no draft ${file} in ${dir}`);
-    const text = readFileSync(p, 'utf8');
-    const d = parseDraft(p, text);
-    const approved = !a.has('undo');
-    if (approved) {
-      const errors = checkReply(d.reply, d.store).filter(i => i.level === 'error');
-      if (errors.length) throw new Error(`${file}: ${errors.map(i => i.msg).join('; ')}`);
-    }
-    if (a.has('dry')) { done(TAG, `would set approved: ${approved} in ${p} (dry run)`); return; }
-    writeFileSync(p, setApproved(text, approved));
-    done(TAG, `${approved ? 'approved' : 'approval removed'}: ${p} (send with storebound reviews send)`);
-    return;
-  }
-  throw new Error('usage: storebound reviews list | draft | drafts | approve | send');
+  throw new Error('usage: storebound reviews list | draft | send');
 }
diff --git a/cli/serve.ts b/cli/serve.ts
deleted file mode 100644
index 20d7c4a..0000000
--- a/cli/serve.ts
+++ /dev/null
@@ -1,339 +0,0 @@
-// `storebound serve --stdio`: the machine interface the desktop app (apps/desktop) drives as a sidecar.
-// Newline-delimited JSON-RPC 2.0 on stdin / stdout, logs on stderr. Protocol types: lib/desktop-protocol.ts.
-//
-// It reuses the MCP core: the same tool list (mcp-tools.ts: schemas, validation, argv building, the forbidden-flag
-// rules) and the same child-process runner (lib/runner.ts). On top of that, the desktop profile adds:
-//   - a session handshake (`session.hello`) carrying the per-session secret of the host,
-//   - typed methods (one per tool, e.g. `play.listing`, plus project.inspect, portfolio.status, system.*),
-//   - structured results (`data`, the command's --json output), progress notifications and cancellation,
-//   - writes that are dry runs unless the host sends a confirm token (lib/confirm-token.ts) it minted after the owner
-//     confirmed a native dialog showing that dry run.
-// Nothing here submits for review, releases or publishes: those methods do not exist (tests/serve.test.ts).
-import { existsSync, statSync } from 'node:fs';
-import { isAbsolute, join, resolve } from 'node:path';
-import pkg from '../package.json' with { type: 'json' };
-import { parseSecret, TokenGuard } from './lib/confirm-token';
-import { CONFIG_NAMES } from './lib/config';
-import {
-  DESKTOP_PROTOCOL, ERR, type AppStatus, type MethodDescriptor, type PortfolioResult, type ProjectSummary, type ToolResult,
-} from './lib/desktop-protocol';
-import { appIdentity, appleProductIds, appleReleases, catalogParity, playProductIds, playReleases, releaseTrains } from './lib/portfolio';
-import { detectTools } from './lib/tools';
-import { compiled, pickCallEnv, runCommand, type RunOptions, type Running } from './lib/runner';
-import { inputSchema, type ToolDef, TOOLS, toArgv, validateInput } from './mcp-tools';
-
-type Id = string | number;
-interface Msg { jsonrpc?: string; id?: Id | null; method?: string; params?: unknown }
-type Json = Record<string, unknown>;
-export type Send = (msg: Json) => void;
-export type Runner = (argv: string[], o: RunOptions) => Running;
-
-const MAX_OUTPUT = 60_000;
-
-/** MCP tools the desktop profile leaves out (sending builds to testers on Play, release state changes). */
-export const DESKTOP_EXCLUDED = new Set(['play_release_testing', 'apple_phased_release']);
-/** Words no desktop method name may contain. */
-export const FORBIDDEN_METHOD_WORDS = /submit|release|publish|rollout|resume|complete|send|start|stop|cancel|delete|remove|invite/i;
-
-/** Read tools whose command prints a structured result with --json. */
-export const JSON_TOOLS = new Set(['check', 'check_aso', 'validate', 'health', 'reviews_list', 'prices_diff', 'analytics_compare', 'apple_status',
-  'apple_next_build', 'play_status', 'play_next_version_code', 'shots_check', 'apple_testflight_status', 'apple_ppo_status', 'catalog_diff',
-  'project_icon', 'project_listings', 'reviews_drafts']);
-
-/**
- * Methods only the desktop profile has (not MCP tools): offline reads of the project's own files, and two local
- * writes the owner confirms in a native dialog. Approving a reply draft is the owner's decision, so AI tools do not get
- * it; `project.init` writes the templates into a new folder (the host passes that folder, it has no config yet).
- */
-export const DESKTOP_ONLY: ToolDef[] = [
-  { name: 'project_icon', title: 'App icon', command: ['inspect', '--icon'], write: false, network: false,
-    description: 'The app icon (icons.composite, the rendered store icons, play.icon or the usual places) as a data: URL, at most 1.5 MB.' },
-  { name: 'project_listings', title: 'Listing completeness', command: ['inspect', '--listings'], write: false, network: false,
-    description: 'Per config language and store: listing fields present and within the store limits (store/listing.md, store/appstore.md), and rendered screenshots per language.' },
-  { name: 'reviews_drafts', title: 'Reply drafts', command: ['reviews', 'drafts'], write: false, network: false,
-    description: 'The local review reply drafts (.storebound/replies) with the checks `reviews send` applies: approved, sent, length, no incentives, no personal data.' },
-  { name: 'reviews_approve', title: 'Approve a reply draft', command: ['reviews', 'approve'], write: true, network: false, idempotent: true,
-    description: 'Sets approved: true (or false with undo) in one local reply draft after its checks pass. Nothing is sent: replies go out with `storebound reviews send` in a terminal.',
-    props: { file: { type: 'string', pattern: '^(apple|play)-[A-Za-z0-9._-]{1,120}\\.md$', description: 'Draft file name in .storebound/replies' }, undo: { type: 'boolean', default: false } },
-    required: ['file'], args: i => [String(i.file), ...(i.undo === true ? ['--undo'] : [])] },
-  { name: 'project_init', title: 'Start an app folder', command: ['init'], write: true, network: false, idempotent: true,
-    description: 'Copies the storebound templates (config, listing, screenshot copy, declarations, privacy policy) for a profile into an empty app folder; existing files are kept.',
-    props: { profile: { type: 'string', enum: ['app', 'game', 'subscription-app'], default: 'app' } }, args: i => ['--profile', String(i.profile ?? 'app')] },
-];
-/** Desktop-only methods whose `project` is a folder without a config yet. */
-const NEW_PROJECT = new Set(['project_init']);
-
-/** `apple_testflight_status` -> `apple.testflight_status`: first underscore becomes the namespace dot. */
-export const methodName = (tool: string): string => tool.replace('_', '.');
-
-export const DESKTOP_TOOLS: ToolDef[] = [...TOOLS.filter(t => !DESKTOP_EXCLUDED.has(t.name)), ...DESKTOP_ONLY];
-const byMethod = new Map(DESKTOP_TOOLS.map(t => [methodName(t.name), t] as const));
-
-function argsSchema(t: ToolDef): MethodDescriptor['args'] {
-  const s = inputSchema(t) as MethodDescriptor['args'];
-  const { dry_run: _d, ...properties } = s.properties;
-  return { ...s, properties };
-}
-
-const obj = (properties: MethodDescriptor['args']['properties'], required?: string[]): MethodDescriptor['args'] =>
-  ({ type: 'object', properties, ...(required ? { required } : {}), additionalProperties: false });
-
-const SYSTEM: MethodDescriptor[] = [
-  { method: 'session.hello', title: 'Start the session', description: 'Hand over the per-session secret (hex, >= 32 bytes). Must be the first request.', kind: 'session', network: false, destructive: false, json: true,
-    args: obj({ secret: { type: 'string' }, client: { type: 'object' } }, ['secret']) },
-  { method: 'system.version', title: 'Version', description: 'storebound version, platform and whether this is the compiled sidecar.', kind: 'system', network: false, destructive: false, json: true, args: obj({}) },
-  { method: 'system.methods', title: 'Methods', description: 'Every method of this profile with its argument schema.', kind: 'system', network: false, destructive: false, json: true, args: obj({}) },
-  { method: 'system.tools', title: 'Local tools', description: 'Optional local tools with versions and where they come from (ffmpeg, ffprobe, Chrome, Xcode / simctl, adb, git); screenshot, video and capture features need them.', kind: 'system', network: false, destructive: false, json: true, args: obj({}) },
-  { method: 'project.inspect', title: 'Inspect a project', description: 'Offline summary of a folder\'s storebound.config.ts (name, store ids, languages, products).', kind: 'read', network: false, destructive: false, json: true,
-    args: obj({ project: { type: 'string', description: 'Absolute folder path' } }, ['project']) },
-  { method: 'portfolio.status', title: 'Portfolio status', description: 'Apps (one per project folder) across iOS and Android: identity, offline config check, catalog parity; with live, release trains (current / next version on both stores) and live catalog parity from App Store and Google Play status (read-only).', kind: 'portfolio', network: true, destructive: false, json: true,
-    args: obj({ projects: { type: 'array' }, live: { type: 'boolean', default: false } }, ['projects']) },
-];
-
-export function describeMethods(): MethodDescriptor[] {
-  return [...SYSTEM, ...DESKTOP_TOOLS.map(t => ({
-    method: methodName(t.name), title: t.title, description: t.description, kind: t.write ? 'write' as const : 'read' as const,
-    network: t.network, destructive: !!t.destructive, json: !t.write && JSON_TOOLS.has(t.name), args: argsSchema(t),
-  }))];
-}
-
-class RpcError extends Error {
-  constructor(readonly code: number, message: string, readonly data?: unknown) { super(message); }
-}
-
-/** Absolute folder with a storebound config in it, else an error. */
-export function checkProject(p: unknown): string {
-  if (typeof p !== 'string' || !p) throw new RpcError(ERR.invalidParams, 'project: absolute folder path required');
-  if (!isAbsolute(p)) throw new RpcError(ERR.invalidParams, 'project: must be an absolute path');
-  const dir = resolve(p);
-  let isDir = false;
-  try { isDir = statSync(dir).isDirectory(); } catch { /* missing */ }
-  if (!isDir) throw new RpcError(ERR.invalidParams, `project: not a folder: ${dir}`);
-  if (!CONFIG_NAMES.some(n => existsSync(join(dir, n)))) throw new RpcError(ERR.invalidParams, `project: no storebound.config.ts in ${dir}`);
-  return dir;
-}
-
-const cut = (s: string): string => (s.length > MAX_OUTPUT ? `[... first ${s.length - MAX_OUTPUT} characters cut ...]\n` + s.slice(-MAX_OUTPUT) : s);
-
-function credentialsOf(v: unknown): Record<string, string> {
-  if (v === undefined) return {};
-  if (typeof v !== 'object' || v === null || Array.isArray(v)) throw new RpcError(ERR.invalidParams, 'credentials: object expected');
-  return pickCallEnv(v as Record<string, unknown>);
-}
-
-/** Absolute existing folder without a storebound config (project.init), else an error. */
-export function checkNewProject(p: unknown): string {
-  if (typeof p !== 'string' || !p || !isAbsolute(p)) throw new RpcError(ERR.invalidParams, 'project: absolute folder path required');
-  const dir = resolve(p);
-  let isDir = false;
-  try { isDir = statSync(dir).isDirectory(); } catch { /* missing */ }
-  if (!isDir) throw new RpcError(ERR.invalidParams, `project: not a folder: ${dir}`);
-  if (CONFIG_NAMES.some(n => existsSync(join(dir, n)))) throw new RpcError(ERR.invalidParams, `project: ${dir} already has a storebound config`);
-  return dir;
-}
-
-/** One sidecar session: state is the secret (after hello), the token guard and the running requests. */
-export class Session {
-  private guard: TokenGuard | null = null;
-  private running = new Map<Id, Set<Running>>();
-  private cancelled = new Set<Id>();
-
-  constructor(private readonly send: Send, private readonly run: Runner = runCommand, private readonly clock: () => number = Date.now) {}
-
-  get ready(): boolean { return this.guard !== null; }
-
-  /** Stops every running child (the host went away). */
-  shutdown(): void { for (const set of this.running.values()) for (const r of set) r.cancel(); }
-
-  /** Handles one incoming message; resolves with the response (or null for notifications). */
-  async handle(m: Msg): Promise<Json | null> {
-    if (typeof m !== 'object' || m === null || Array.isArray(m)) return { jsonrpc: '2.0', id: null, error: { code: ERR.invalidRequest, message: 'Invalid request' } };
-    if (m.id === undefined || m.id === null) { this.notification(m); return null; }
-    const id = m.id;
-    try {
-      const result = await this.dispatch(String(m.method ?? ''), (m.params ?? {}) as Json, id);
-      return { jsonrpc: '2.0', id, result };
-    } catch (e) {
-      if (this.cancelled.has(id)) return { jsonrpc: '2.0', id, error: { code: ERR.cancelled, message: 'Request cancelled' } };
-      const err = e instanceof RpcError ? e : new RpcError(ERR.internal, (e as Error).message);
-      return { jsonrpc: '2.0', id, error: { code: err.code, message: err.message, ...(err.data === undefined ? {} : { data: err.data }) } };
-    } finally {
-      this.running.delete(id);
-      this.cancelled.delete(id);
-    }
-  }
-
-  private notification(m: Msg): void {
-    const p = (m.params ?? {}) as Json;
-    if (m.method === '$/cancelRequest' || m.method === 'notifications/cancelled') {
-      const id = (p.id ?? p.requestId) as Id | undefined;
-      if (id === undefined) return;
-      this.cancelled.add(id);
-      for (const r of this.running.get(id) ?? []) r.cancel();
-    }
-  }
-
-  private track(id: Id, r: Running): Running {
-    if (this.cancelled.has(id)) r.cancel();
-    let set = this.running.get(id);
-    if (!set) this.running.set(id, (set = new Set()));
-    set.add(r);
-    return r;
-  }
-
-  private async dispatch(method: string, params: Json, id: Id): Promise<unknown> {
-    if (typeof params !== 'object' || params === null || Array.isArray(params)) throw new RpcError(ERR.invalidParams, 'params must be an object');
-    if (method === 'session.hello') {
-      if (this.guard) throw new RpcError(ERR.invalidRequest, 'session already started');
-      let secret: Buffer;
-      try { secret = parseSecret(params.secret); } catch (e) { throw new RpcError(ERR.invalidParams, (e as Error).message); }
-      this.guard = new TokenGuard(secret, this.clock);
-      return { protocol: DESKTOP_PROTOCOL, server: { name: 'storebound', version: pkg.version, compiled: compiled() }, methods: describeMethods() };
-    }
-    if (!this.guard) throw new RpcError(ERR.notInitialized, 'session.hello first');
-    switch (method) {
-      case 'system.version': return { version: pkg.version, compiled: compiled(), platform: process.platform, arch: process.arch, bun: Bun.version };
-      case 'system.methods': return { methods: describeMethods() };
-      case 'system.tools': return localTools();
-      case 'project.inspect': return this.inspect(checkProject(params.project), {}, id);
-      case 'portfolio.status': return this.portfolio(params, id);
-    }
-    const tool = byMethod.get(method);
-    if (!tool) throw new RpcError(ERR.methodNotFound, `Method not found: ${method}`);
-    return this.tool(method, tool, params, id);
-  }
-
-  private async tool(method: string, t: ToolDef, params: Json, id: Id): Promise<ToolResult> {
-    for (const k of Object.keys(params)) if (!['project', 'args', 'dryRun', 'confirmToken', 'credentials'].includes(k)) throw new RpcError(ERR.invalidParams, `unknown param: ${k}`);
-    const project = NEW_PROJECT.has(t.name) ? checkNewProject(params.project) : checkProject(params.project);
-    const args = (params.args ?? {}) as Json;
-    if (typeof args !== 'object' || args === null || Array.isArray(args)) throw new RpcError(ERR.invalidParams, 'args must be an object');
-    if ('dry_run' in args) throw new RpcError(ERR.invalidParams, 'args.dry_run: use params.dryRun');
-    const problems = validateInput(t, args);
-    if (problems.length) throw new RpcError(ERR.invalidParams, `Invalid arguments: ${problems.join('; ')}`, { problems });
-    const env = credentialsOf(params.credentials);
-    let dryRun = true;
-    if (params.dryRun === false) {
-      if (!t.write) dryRun = false;
-      else {
-        if (params.confirmToken === undefined) throw new RpcError(ERR.confirmRequired, `${method} writes: dryRun false needs a confirmToken from the desktop host`);
-        // Bound to the project string exactly as sent (the host mints over what it sends) and the args object.
-        const v = this.guard!.verify(params.confirmToken, method, { project: params.project, args });
-        if (!v.ok) throw new RpcError(ERR.confirmInvalid, `confirm token rejected: ${v.error}`, { reason: v.error });
-        dryRun = false;
-      }
-    } else if (params.dryRun !== undefined && params.dryRun !== true) throw new RpcError(ERR.invalidParams, 'dryRun must be a boolean');
-    if (!t.write) dryRun = false;
-    const built = toArgv(t, { ...args, ...(t.write ? { dry_run: dryRun } : {}) });
-    const json = !t.write && JSON_TOOLS.has(t.name);
-    const argv = json ? [...built.argv, '--json'] : built.argv;
-    const r = this.track(id, this.run(argv, { cwd: project, env, machine: true, onLine: (line, stream) => this.progress(id, { line, stream }) }));
-    const res = await r.result;
-    if (res.cancelled || this.cancelled.has(id)) throw new RpcError(ERR.cancelled, 'Request cancelled');
-    return {
-      method, ok: res.code === 0, exitCode: res.code, dryRun: t.write ? dryRun : false, command: `storebound ${argv.join(' ')}`, output: cut(res.out),
-      ...(res.data === undefined ? {} : { data: res.data }),
-    };
-  }
-
-  private progress(id: Id, p: Json): void {
-    this.send({ jsonrpc: '2.0', method: 'progress', params: { requestId: id, ...p } });
-  }
-
-  private async inspect(project: string, env: Record<string, string>, id: Id): Promise<ProjectSummary> {
-    const r = await this.track(id, this.run(['inspect', '--json'], { cwd: project, env, machine: true })).result;
-    if (r.cancelled) throw new RpcError(ERR.cancelled, 'Request cancelled');
-    if (r.code !== 0 || !r.data) throw new RpcError(ERR.invalidParams, `project: ${lastLine(r.out) || 'config could not be loaded'}`);
-    return r.data as ProjectSummary;
-  }
-
-  private async portfolio(params: Json, id: Id): Promise<PortfolioResult> {
-    const list = params.projects;
-    if (!Array.isArray(list) || !list.length || list.length > 200) throw new RpcError(ERR.invalidParams, 'projects: 1-200 absolute folder paths');
-    const live = params.live === true;
-    const env = credentialsOf(params.credentials);
-    const out: AppStatus[] = new Array(list.length);
-    let done = 0;
-    const one = async (i: number): Promise<void> => {
-      const raw = list[i];
-      const e: AppStatus = { project: String(raw), ok: false, app: null, summary: null, check: null, release: { source: 'none', current: null, next: null }, catalog: null, storeErrors: {}, errors: [] };
-      out[i] = e;
-      try {
-        const dir = checkProject(raw);
-        e.project = dir;
-        const summary = e.summary = await this.inspect(dir, env, id);
-        e.app = appIdentity(summary);
-        e.catalog = catalogParity(summary);
-        const c = await this.track(id, this.run(['check', '--json'], { cwd: dir, env, machine: true })).result;
-        const cd = c.data as { ok?: boolean; problems?: string[]; warnings?: string[] } | undefined;
-        e.check = cd ? { ok: !!cd.ok, problems: cd.problems ?? [], warnings: cd.warnings ?? [] } : { ok: false, problems: [lastLine(c.out) || `check exit ${c.code}`], warnings: [] };
-        if (live) {
-          const store = async (argv: string[]): Promise<{ data?: unknown; error?: string }> => {
-            const r = await this.track(id, this.run(argv, { cwd: dir, env, machine: true })).result;
-            return r.code === 0 && r.data !== undefined ? { data: r.data } : { error: lastLine(r.out) || `exit ${r.code}` };
-          };
-          const [apple, play] = await Promise.all([summary.apple ? store(['apple', 'status', '--json']) : undefined, summary.play ? store(['play', 'status', '--json']) : undefined]);
-          if (apple?.error) e.storeErrors.ios = apple.error;
-          if (play?.error) e.storeErrors.android = play.error;
-          const ios = apple?.data ? appleReleases(apple.data) : [], android = play?.data ? playReleases(play.data) : [];
-          e.release = { source: 'live', ...releaseTrains(ios, android), all: [...ios, ...android] };
-          e.catalog = catalogParity(summary, apple?.data ? appleProductIds(apple.data) : undefined, play?.data ? playProductIds(play.data) : undefined);
-        }
-        e.ok = e.check.ok && !e.storeErrors.ios && !e.storeErrors.android && (e.catalog?.ok ?? true);
-      } catch (err) {
-        if (this.cancelled.has(id)) throw err;
-        e.errors.push((err as Error).message);
-      }
-      this.progress(id, { n: ++done, total: list.length, project: e.project });
-    };
-    // A few projects at a time: each one is a few child processes (and API calls when live).
-    let next = 0;
-    await Promise.all(Array.from({ length: Math.min(3, list.length) }, async () => { while (next < list.length) await one(next++); }));
-    if (this.cancelled.has(id)) throw new RpcError(ERR.cancelled, 'Request cancelled');
-    return { apps: out, at: new Date(this.clock()).toISOString() };
-  }
-}
-
-const lastLine = (s: string): string => s.trim().split('\n').filter(Boolean).at(-1)?.replace(/^error:\s*/, '') ?? '';
-
-/** Optional local tools with versions; app-managed copies (STOREBOUND_TOOL_PATH / STOREBOUND_CHROME) included. */
-export function localTools(): Json {
-  return { tools: detectTools() };
-}
-
-export async function serveStdio(): Promise<void> {
-  const send: Send = o => { process.stdout.write(JSON.stringify(o) + '\n'); };
-  const session = new Session(send);
-  console.error(`[storebound serve] ${pkg.version} on stdio (${DESKTOP_PROTOCOL}), waiting for session.hello`);
-  let buf = '';
-  const decoder = new TextDecoder();
-  const reader = Bun.stdin.stream().getReader();
-  for (;;) {
-    const { value, done } = await reader.read();
-    if (done) break;
-    buf += decoder.decode(value, { stream: true });
-    let nl: number;
-    while ((nl = buf.indexOf('\n')) >= 0) {
-      const line = buf.slice(0, nl).trim();
-      buf = buf.slice(nl + 1);
-      if (!line) continue;
-      let msg: Msg;
-      try { msg = JSON.parse(line) as Msg; } catch { send({ jsonrpc: '2.0', id: null, error: { code: ERR.parse, message: 'Parse error' } }); continue; }
-      if (Array.isArray(msg)) { send({ jsonrpc: '2.0', id: null, error: { code: ERR.invalidRequest, message: 'Batches are not supported' } }); continue; }
-      // The handshake must finish before anything else is read, so a request right behind it sees the session.
-      if (!session.ready && msg.method === 'session.hello') { const r = await session.handle(msg); if (r) send(r); continue; }
-      session.handle(msg).then(r => { if (r) send(r); }, e => send({ jsonrpc: '2.0', id: msg.id ?? null, error: { code: ERR.internal, message: String((e as Error).message) } }));
-    }
-  }
-  // stdin closed: the host is gone; stop what still runs.
-  session.shutdown();
-  process.exit(0);
-}
-
-export async function run(args: { has(n: string): boolean }): Promise<void> {
-  if (!args.has('stdio')) {
-    console.error('usage: storebound serve --stdio   (JSON-RPC for the storebound desktop app; for AI tools use `storebound mcp`)');
-    process.exit(2);
-  }
-  await serveStdio();
-}
diff --git a/cli/shots/browser.ts b/cli/shots/browser.ts
index b3c7d04..d44ba36 100644
--- a/cli/shots/browser.ts
+++ b/cli/shots/browser.ts
@@ -1,10 +1,7 @@
-// Playwright is an optional peer dependency of storebound, resolved from the project (or the storebound folder), so a
-// project that never renders screenshots never downloads a browser. The compiled desktop sidecar carries its own
-// playwright-core (tools/build-sidecars.ts bundles it) and renders with the Chrome for Testing the desktop app manages
-// (STOREBOUND_CHROME), so desktop users need neither playwright nor a browser in their project.
-// Launch order: STOREBOUND_CHROME, Playwright's own Chromium, then an installed Google Chrome (channel "chrome").
+// Playwright is not a dependency of storebound: it is resolved from the project (or the storebound folder), so a project
+// that never renders screenshots never downloads a browser. Launch order: Playwright's own Chromium, then an installed
+// Google Chrome (channel "chrome"), so `bunx playwright install chromium` is optional when Chrome is there.
 import { join } from 'node:path';
-import { compiled } from '../lib/runner';
 
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
 async function chromium(root: string): Promise<any> {
@@ -14,17 +11,12 @@ async function chromium(root: string): Promise<any> {
       return (await import(p)).chromium;
     } catch { /* next */ }
   }
-  // only reached in the compiled sidecar: the bundled playwright-core (not a runtime dependency of the npm package)
-  if (compiled()) return (await import('playwright-core')).chromium;
   throw new Error('playwright not found: in your project run `bun add -d playwright` (and `bunx playwright install chromium` if Google Chrome is not installed)');
 }
 
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
 export async function launch(root: string, opts: Record<string, unknown>): Promise<any> {
   const c = await chromium(root);
-  // the desktop app's own Chrome for Testing (or any Chrome the user points at)
-  const exe = process.env.STOREBOUND_CHROME;
-  if (exe) { try { return await c.launch({ ...opts, executablePath: exe }); } catch { /* fall back below */ } }
   try { return await c.launch(opts); } catch (e) {
     try { return await c.launch({ ...opts, channel: 'chrome' }); } catch { throw e; }
   }
diff --git a/cli/shots/check.ts b/cli/shots/check.ts
index 00a64dc..bd2539e 100644
--- a/cli/shots/check.ts
+++ b/cli/shots/check.ts
@@ -11,7 +11,7 @@ import { existsSync, readdirSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import type { ShipConfig } from '../lib/config';
 import type { Ctx } from '../lib/ctx';
-import { log, printJson } from '../lib/log';
+import { log } from '../lib/log';
 import { checkFrames, type FrameIssue } from './devices';
 import { defaultSizes, frameDims, SIZES } from './lib';
 import type { LocalIssue, RendersCheck } from '../lib/validate-rules';
@@ -64,7 +64,7 @@ export async function run(ctx: Ctx): Promise<void> {
   const cap = config.shots?.capture;
   const frameIssues = cap?.source === 'folder' ? checkFrameFolder(config, resolve(cap.folder ?? config.shots!.frames), scan.langs) : [];
   if (ctx.args.has('json')) {
-    printJson({ images: scan.images.length, videos: scan.videos.length, issues, frames: frameIssues });
+    console.log(JSON.stringify({ images: scan.images.length, videos: scan.videos.length, issues, frames: frameIssues }, null, 2));
   } else {
     for (const { where, issue } of issues) console.log(`${issue.level === 'error' ? 'ERROR' : 'warn '} ${where}: ${issue.msg}`);
     for (const f of frameIssues) console.log(`ERROR frames/${f.file}: ${f.msg}`);
diff --git a/cli/text-modules.d.ts b/cli/text-modules.d.ts
deleted file mode 100644
index d4977a4..0000000
--- a/cli/text-modules.d.ts
+++ /dev/null
@@ -1,4 +0,0 @@
-// Template files imported as text (lib/template-files.ts, `with { type: 'text' }`).
-declare module '*.md' { const text: string; export default text; }
-declare module '*.csv' { const text: string; export default text; }
-declare module '*.html' { const text: string; export default text; }
diff --git a/cli/validate.ts b/cli/validate.ts
index 0fb06c6..8179922 100644
--- a/cli/validate.ts
+++ b/cli/validate.ts
@@ -19,7 +19,7 @@ import type { Ctx } from './lib/ctx';
 import { checkUrl } from './lib/http';
 import { collectHealth } from './health';
 import { healthFindings } from './lib/health';
-import { log, printJson, warn } from './lib/log';
+import { log, warn } from './lib/log';
 import { type AppleSnapshot, appleRules, type Finding, formatFindings, PLAY_REQUIRED_IMAGES, type PlaySnapshot, playRules, type ProfileFacts, rendersFindings, sortFindings } from './lib/validate-rules';
 import { rendersCheck } from './shots/check';
 import { playClient } from './play/client';
@@ -177,7 +177,7 @@ export async function run(ctx: Ctx): Promise<void> {
     findings.push(...sortFindings(healthFindings(h, { unreadable: 'ok' })));
   }
   const blockers = findings.filter(f => f.level === 'blocker').length;
-  if (a.has('json')) printJson({ blockers, findings });
+  if (a.has('json')) console.log(JSON.stringify({ blockers, findings }, null, 2));
   else {
     console.log(formatFindings(findings));
     log('validate', blockers ? `${blockers} blocker(s)` : 'no blockers (UI-only steps are not visible to the API: App Privacy, Play App content)');
diff --git a/docs/desktop.md b/docs/desktop.md
deleted file mode 100644
index 3e3b91c..0000000
--- a/docs/desktop.md
+++ /dev/null
@@ -1,129 +0,0 @@
-# storebound desktop (apps/desktop)
-
-A Tauri 2 window around the storebound CLI: every app in a workspace, on iOS and Android, in one place. It is in
-development; this page is for contributors.
-
-## Shape
-
-- **One source of logic.** The app never calls a store itself. It runs the storebound CLI as a sidecar
-  (`storebound serve --stdio`, compiled with `bun tools/build-sidecars.ts`) and asks it for everything.
-- **App-centric.** One app = one product with up to two platforms (iOS bundle id / App Store Connect app id, Android
-  package name), one `storebound.config.ts` per app folder, many apps per workspace. Navigation: Portfolio -> App
-  (Releases, Catalog, Listings, Health, Reviews, TestFlight) plus the workspace screens (App folders, Accounts,
-  Dependencies, Settings).
-- **Release trains.** A version (for example 2.3.0) spans both stores: iOS build and Android versionCode, per-store
-  state (TestFlight, review, live, phased release, rollout fraction). `portfolio.status` returns per app the current
-  train (highest version live on a store) and the next one (highest version above it anywhere).
-- **Catalog parity.** Products (and subscriptions, once the config has them) are defined once; `portfolio.status`
-  compares the config with both stores (ids missing on a store, ids on one store only).
-
-Types of the protocol: `cli/lib/desktop-protocol.ts`; pure portfolio logic: `cli/lib/portfolio.ts`.
-
-## Safety model
-
-- The sidecar's first request is `session.hello` with a 32-byte secret the Rust host makes per start and writes to
-  the sidecar's stdin. Write methods are dry runs unless the call carries a confirm token: HMAC-SHA256 over the
-  method, the canonical `{ project, args }` and a 60 s expiry, single use. The host mints one only after the owner
-  pressed Apply in a native dialog that shows the summary and the dry run (`write_with_confirm`).
-- No method submits for review, releases, publishes, resumes or completes a rollout. Under `serve`, the CLI's own
-  terminal confirmations always answer no.
-- The webview gets no plugin API. It may call the app commands (each re-checks the window label and the page origin
-  in Rust) and listen to two events. Strict CSP, no remote content. `src-tauri/tests/security.rs` pins all of it.
-- Store keys (Play service account JSON, App Store Connect key id, issuer id and .p8) are picked in native dialogs,
-  stored in the OS keychain (`keyring`), never shown again and passed to the sidecar per call in memory only.
-
-## Screens and data (D2)
-
-- **Portfolio**: KPIs (apps, live versions, rolling out, in review, needs attention), one row per app with the version
-  reaching users on each store and its place on the track (build, testing, review, live, rollout %), the next
-  version, the last saved crash rate as a sparkline, catalog parity and the config check; then a "needs attention"
-  list (problems first, then warnings, store read errors, rejected or halted releases, catalog drift, health near a
-  threshold).
-- **App**: Releases (release timeline, both stores on one track per version; iOS phased release day and share from
-  `apple status --json`), Catalog (parity matrix from `catalog.diff`: matches, differs, missing, not sold there, not
-  compared; price gaps per region), Listings (`project.listings`: per language and store, fields against the limits,
-  rendered screenshots), Health (`health`: daily user-perceived crash and ANR rate against the Play thresholds,
-  worst devices, top issues, App Store metrics and signatures), Reviews (`reviews.list` + `reviews.drafts`: star
-  distribution, filters, the local draft with its send checks, Approve via `reviews.approve`), TestFlight
-  (`apple.testflight_status`), Checks (offline `check` + `validate` with fix hints).
-- **First-run guide**: what the app does, add or start an app folder (`project.init` = `storebound init --profile`,
-  confirmed in a native dialog), store keys into the keychain and which app uses which, local tools, first read.
-- **Command palette** (Cmd/Ctrl+K): apps, tabs, screens and actions. Cmd/Ctrl+1 Portfolio, +2-5 workspace screens,
-  Cmd/Ctrl+Shift+[ ] app tabs, arrow keys in the tab list. Toasts show background jobs with progress and Cancel.
-- **Unknown, never false.** Store reads run on demand (they use the account's API quota) and are saved in app data
-  (`cache.sqlite`, results only, never keys); a screen opens with the saved read and its time ("Last read 3 h ago,
-  saved copy"), a failed read keeps the previous one and says so, and nothing that was not read is shown as fine.
-  Settings clears the saved reads.
-- **Jobs.** The window tags a call with a job id; the host maps sidecar request ids to it, so progress lines reach the
-  right toast, and `job_cancel` sends `$/cancelRequest` (or stops a download). Live portfolio reads run up to four
-  apps at a time with their own accounts and report n / total.
-- **i18n**: English and Turkish (`src/i18n`), Settings picks the language (default: the system's); `tools/i18n-check.ts`
-  (CI) checks keys, empty messages and placeholders. **Theme**: text tokens keep 7:1 contrast in both themes
-  (`tests/theme.test.ts`), motion at most 200 ms and off with reduced motion.
-
-## Dependencies screen
-
-storebound needs no local tool for store work. Screenshots, app previews, icons and captures use:
-
-| tool | used for | how the app gets it |
-|---|---|---|
-| ffmpeg, ffprobe | icons, renders, app previews, frame crops | download into the app data folder (planned, see below) |
-| Chrome / Chrome for Testing | screenshot renders, captions, web captures | system Chrome, or Chrome for Testing downloaded into the app data folder (planned) |
-| Xcode command line tools, simctl | iOS builds, Simulator captures | link to Apple only |
-| adb | Android emulator / device captures | link to the Android platform tools only |
-| git | release notes, analytics compare | link only |
-
-`system.tools` reports each with its path, version and source (`app` or `system`). The host passes app-managed
-copies to the sidecar: `STOREBOUND_TOOL_PATH` (app data `tools/bin`, put in front of PATH for every command) and
-`STOREBOUND_CHROME` (app data `tools/chrome/...`, used as Playwright's `executablePath`). Nothing is installed
-system-wide and nothing is bundled in the installer.
-
-`storebound doctor` prints the same detection (plus playwright) with the install commands for the OS.
-
-Download sources (one click on the Dependencies screen or in the first-run guide; `src-tauri/src/downloads.rs`):
-
-- **ffmpeg, macOS (arm64, x64):** release builds from ffmpeg.martin-riedl.de (static, notarized zip per tool).
-- **ffmpeg, Linux (x64, arm64) and Windows (x64):** `ffmpeg-n<major>-latest-<os>-gpl` release builds from
-  github.com/BtbN/FFmpeg-Builds.
-- **Verification:** the app ships a manifest (`src-tauri/tools-manifest.json`, written by `bun tools/tools-manifest.ts`
-  before each desktop release, `--check` tests the URLs) with the exact URL, size and SHA-256 of each archive; a
-  download whose hash differs is deleted. Every pinned hash has two independent sources: macOS archives are
-  downloaded and hashed by the tool and must equal the publisher's `.sha256`; BtbN archives (pinned autobuild tag)
-  use the digest GitHub computes for the release asset, which must equal the publisher's `checksums.sha256`.
-  Downloads and their redirects may only use HTTPS and the hosts in `downloads::DOWNLOAD_HOSTS`. Everything is
-  unpacked and checked in a staging folder; only a verified result replaces the installed copy, and the sidecar
-  restarts so it sees the new tool.
-- **License:** these ffmpeg builds are GPL (v3 for the BtbN `gpl` variants). The app downloads them only on the
-  owner's click, from the original publisher, shows the license and the source link next to the button, and never
-  redistributes them, so the app itself stays MIT.
-- **Chrome for Testing:** Google's official JSON endpoints
-  (googlechromelabs.github.io/chrome-for-testing/last-known-good-versions-with-downloads.json, Stable channel), archives
-  from storage.googleapis.com over HTTPS. Those endpoints publish no hashes, so the app checks the code signature after
-  unpacking (macOS `codesign --verify` with Google's team, Windows Authenticode); on Linux it checks the version banner.
-  Chrome for Testing is under Google's terms for Chrome / Chromium (BSD-style Chromium license plus third-party notices).
-- **Progress and cancel** go through the same progress events as sidecar jobs; a cancelled download removes its
-  temporary file.
-
-## Develop
-
-```sh
-bun install
-bun tools/build-sidecars.ts --host        # apps/desktop/src-tauri/binaries/storebound-<target triple>
-cd apps/desktop && bunx tauri dev         # Vite on 127.0.0.1:1420 + the Rust host
-cd apps/desktop/src-tauri && cargo test && cargo clippy --all-targets -- -D warnings
-```
-
-Dev-only switches (ignored in release builds): `VITE_START=accounts|app:catalog|app:health:2|welcome:3|palette|...`
-opens a screen first, `VITE_THEME=light|dark` and `VITE_LANG=en|tr` force theme and language, `VITE_AUTORUN=gallery`
-starts the confirm flow on the first app (the same names work as `?start=...&theme=...` query parameters on the Vite
-server). `STOREBOUND_DEV_PROJECTS=<dir>:<dir>` (debug builds) seeds the app folder list.
-
-Fixture mode (dev builds only): `VITE_FIXTURES=1` answers every app command from `src/dev/fixtures.ts` (made-up
-store data around the two demo apps; `=empty` for a first run, `=cold` for nothing read yet). The window shows a
-"DEV FIXTURES" badge; release bundles do not contain it (`tests/webview.test.ts` checks `dist/`). Screenshots of
-every screen in both themes: `VITE_FIXTURES=1 bunx vite --port 1431 &` then
-`bun scripts/screens.ts --base http://127.0.0.1:1431 --out <dir>` (playwright with the installed Chrome).
-Gotchas kept from earlier Tauri apps: Cmd+Q quits and the Window menu keeps an entry for the hidden window; platform
-configs (`tauri.<os>.conf.json`) must not set `app.windows` (Tauri replaces the whole array); Linux sets
-`WEBKIT_DISABLE_DMABUF_RENDERER=1` unless the user set it; a `bun build --compile` binary needs an ad-hoc re-sign on
-macOS or the kernel kills it on start.
diff --git a/package.json b/package.json
index 98f1e88..9af7e85 100644
--- a/package.json
+++ b/package.json
@@ -46,9 +46,6 @@
     "CHANGELOG.md",
     "docs/agents-core.md"
   ],
-  "workspaces": [
-    "apps/*"
-  ],
   "engines": {
     "bun": ">=1.1"
   },
@@ -60,18 +57,9 @@
     "ci": "bun tools/ci.ts",
     "check": "bun run typecheck && bun test"
   },
-  "peerDependencies": {
-    "playwright": ">=1.45"
-  },
-  "peerDependenciesMeta": {
-    "playwright": {
-      "optional": true
-    }
-  },
   "devDependencies": {
     "@types/bun": "1.3.0",
     "playwright": "1.55.0",
-    "playwright-core": "1.55.0",
     "typescript": "5.9.3"
   },
   "homepage": "https://git.crt.fyi/CRT/storebound",
diff --git a/tests/desktop-d2.test.ts b/tests/desktop-d2.test.ts
deleted file mode 100644
index 66758b7..0000000
--- a/tests/desktop-d2.test.ts
+++ /dev/null
@@ -1,165 +0,0 @@
-// Desktop D2 on the CLI side: app icon discovery, listing completeness, reply drafts (read + approve), embedded
-// templates for `init` from the compiled sidecar, `storebound doctor`, and the optional playwright peer.
-import { describe, expect, test } from 'bun:test';
-import { mkdirSync, mkdtempSync, readdirSync, readFileSync, rmSync, statSync, writeFileSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join, relative } from 'node:path';
-import pkg from '../package.json' with { type: 'json' };
-import { doctor } from '../cli/doctor';
-import { FILES, templateFor, templateKey, templateText } from '../cli/init';
-import type { ShipConfig } from '../cli/lib/config';
-import { draftMarkdown, draftName, parseDraft } from '../cli/lib/reviews';
-import { findIcon, iconCandidates, iconDataUrl, listingCompleteness, readReplyDrafts, setApproved } from '../cli/lib/project-files';
-import { TEMPLATE_TEXT } from '../cli/lib/template-files';
-import { installCommands } from '../cli/lib/tools';
-import { NEUTRAL_ROOT, neutralize } from '../tools/build-sidecars';
-
-const ROOT = join(import.meta.dir, '..');
-const tmp = () => mkdtempSync(join(tmpdir(), 'sb-d2-'));
-const APP = { name: 'Demo', privacyPolicyUrl: 'https://example.com/p', supportUrl: 'https://example.com', website: 'https://example.com', contactEmail: 'a@example.com' };
-const PNG = Buffer.from('89504e470d0a1a0a0000000d4948445200000001000000010806000000', 'hex');
-
-describe('app icon', () => {
-  test('config first, then the rendered store icons, then the usual places; data: URL with a size cap', () => {
-    const d = tmp();
-    try {
-      const cfg = { icons: { composite: 'art/icon.png', out: 'store/icons' }, play: { packageName: 'x', icon: 'play.png' } } as unknown as ShipConfig;
-      expect(iconCandidates(cfg, d).slice(0, 4).map(p => relative(d, p))).toEqual(['art/icon.png', 'store/icons/app-store-1024.png', 'store/icons/play-512.png', 'play.png']);
-      expect(findIcon(cfg, d)).toBeNull();
-      mkdirSync(join(d, 'store/icons'), { recursive: true });
-      writeFileSync(join(d, 'store/icons/play-512.png'), PNG);
-      expect(findIcon(cfg, d)).toBe(join(d, 'store/icons/play-512.png'));
-      const u = iconDataUrl(findIcon(cfg, d));
-      expect(u.dataUrl).toStartWith('data:image/png;base64,');
-      writeFileSync(join(d, 'big.png'), Buffer.alloc(1_600_000));
-      expect(iconDataUrl(join(d, 'big.png')).dataUrl).toBeNull();
-      expect(iconDataUrl(null)).toEqual({ path: null, dataUrl: null });
-    } finally { rmSync(d, { recursive: true, force: true }); }
-  });
-});
-
-describe('listing completeness', () => {
-  test('per language and store: present, missing, over the limit, optional; screenshots counted; missing files reported', () => {
-    const d = tmp();
-    try {
-      const cfg = { app: APP, languages: [{ id: 'en', play: 'en-US', apple: 'en-US' }, { id: 'tr', play: 'tr-TR', apple: 'tr' }], play: { packageName: 'x' }, apple: { bundleId: 'x' }, renders: 'r' } as unknown as ShipConfig;
-      const none = listingCompleteness(cfg, d);
-      expect(none.problems).toEqual(['store/listing.md: file not found', 'store/appstore.md: file not found']);
-      expect(none.locales.map(l => [l.lang, l.complete, l.screenshots])).toEqual([['en', 0, null], ['tr', 0, null]]);
-      mkdirSync(join(d, 'store'));
-      writeFileSync(join(d, 'store/listing.md'), '## English\n<!-- play: en-US -->\n### Short description\n```\nShort text\n```\n### Full description\n```\nFull text\n```\n');
-      writeFileSync(join(d, 'store/appstore.md'), `## en-US\n### subtitle\n\`\`\`\n${'x'.repeat(31)}\n\`\`\`\n### promotionalText\n\`\`\`\nPromo\n\`\`\`\n### keywords\n\`\`\`\na,b\n\`\`\`\n### description\n\`\`\`\nDesc\n\`\`\`\n`);
-      mkdirSync(join(d, 'r/en/phone'), { recursive: true });
-      for (const n of ['01.png', '02.jpg', 'notes.txt']) writeFileSync(join(d, 'r/en/phone', n), 'x');
-      const l = listingCompleteness(cfg, d);
-      expect(l.problems).toEqual([]);
-      const en = l.locales[0]!;
-      expect(en.play!.fields.map(f => [f.field, f.state])).toEqual([['title', 'ok'], ['short', 'ok'], ['full', 'ok'], ['whatsNew', 'empty-optional']]);
-      expect(en.apple!.fields.find(f => f.field === 'subtitle')).toMatchObject({ length: 31, limit: 30, state: 'over' });
-      expect(en.screenshots).toBe(2);
-      expect(en.complete).toBeCloseTo(7 / 8);
-      expect(l.locales[1]!).toMatchObject({ complete: 0, screenshots: 0 });
-      expect(l.locales[1]!.play!.fields[1]).toMatchObject({ field: 'short', state: 'missing' });
-    } finally { rmSync(d, { recursive: true, force: true }); }
-  });
-});
-
-describe('reply drafts', () => {
-  const review = { store: 'play' as const, id: 'gp:1', rating: 2, title: 'Crash', body: 'It crashes', date: '2026-10-09T10:00:00.000Z', where: 'en' };
-  test('read with checks; approve sets the front matter only; unparsable files are problems', () => {
-    const d = tmp();
-    try {
-      const f = join(d, draftName(review));
-      writeFileSync(f, draftMarkdown(review).replace('## Reply\n\n', '## Reply\n\nSorry! Fixed in 2.4. Rate us 5 stars!\n'));
-      writeFileSync(join(d, 'apple-bad.md'), 'no front matter');
-      const r = readReplyDrafts(d);
-      expect(r.problems).toHaveLength(1);
-      expect(r.drafts).toHaveLength(1);
-      expect(r.drafts[0]).toMatchObject({ store: 'play', reviewId: 'gp:1', approved: false, sent: null, rating: 2, title: 'Crash', body: 'It crashes' });
-      expect(r.drafts[0]!.issues.some(i => i.level === 'error')).toBe(true);
-      const text = readFileSync(f, 'utf8');
-      const approved = setApproved(text, true);
-      expect(parseDraft(f, approved).approved).toBe(true);
-      expect(approved.split('---').slice(2).join('---')).toBe(text.split('---').slice(2).join('---'));
-      expect(() => setApproved('---\nfoo: 1\n---\nx', true)).toThrow();
-      expect(readReplyDrafts(join(d, 'none'))).toEqual({ dir: join(d, 'none'), drafts: [], problems: [] });
-    } finally { rmSync(d, { recursive: true, force: true }); }
-  });
-  test('CLI: reviews drafts --json and reviews approve (refuses a draft that fails the checks)', async () => {
-    const d = tmp();
-    try {
-      writeFileSync(join(d, 'storebound.config.ts'), `export default ${JSON.stringify({ app: APP, languages: [{ id: 'en', play: 'en-US' }], play: { packageName: 'com.example.demo' } })};\n`);
-      const dir = join(d, '.storebound/replies');
-      mkdirSync(dir, { recursive: true });
-      const good = draftName({ ...review, id: 'gp:2' }), bad = draftName(review);
-      writeFileSync(join(dir, good), draftMarkdown({ ...review, id: 'gp:2' }).replace('## Reply\n\n', '## Reply\n\nThanks, fixed in 2.4.\n'));
-      writeFileSync(join(dir, bad), draftMarkdown(review).replace('## Reply\n\n', '## Reply\n\nRate us 5 stars for free coins!\n'));
-      const run = (args: string[]) => Bun.spawnSync([process.execPath, join(ROOT, 'cli/index.ts'), ...args], { cwd: d, stdout: 'pipe', stderr: 'pipe' });
-      const list = run(['reviews', 'drafts', '--json']);
-      expect(list.exitCode).toBe(0);
-      expect((JSON.parse(list.stdout.toString()) as { drafts: unknown[] }).drafts).toHaveLength(2);
-      expect(run(['reviews', 'approve', good, '--dry']).exitCode).toBe(0);
-      expect(parseDraft(good, readFileSync(join(dir, good), 'utf8')).approved).toBe(false);
-      expect(run(['reviews', 'approve', good]).exitCode).toBe(0);
-      expect(parseDraft(good, readFileSync(join(dir, good), 'utf8')).approved).toBe(true);
-      expect(run(['reviews', 'approve', bad]).exitCode).not.toBe(0);
-      expect(run(['reviews', 'approve', '../storebound.config.ts']).exitCode).not.toBe(0);
-      expect(run(['reviews', 'approve', good, '--undo']).exitCode).toBe(0);
-      expect(parseDraft(good, readFileSync(join(dir, good), 'utf8')).approved).toBe(false);
-    } finally { rmSync(d, { recursive: true, force: true }); }
-  }, 30_000);
-});
-
-describe('init from the compiled sidecar', () => {
-  test('every template file is embedded with the same bytes, and init writes from the embedded copy', () => {
-    const all: string[] = [];
-    const walk = (dir: string) => { for (const n of readdirSync(dir)) { const p = join(dir, n); if (statSync(p).isDirectory()) walk(p); else all.push(relative(join(ROOT, 'templates'), p).split('\\').join('/')); } };
-    walk(join(ROOT, 'templates'));
-    expect(Object.keys(TEMPLATE_TEXT).sort()).toEqual(all.sort());
-    for (const k of all) expect(TEMPLATE_TEXT[k], k).toBe(readFileSync(join(ROOT, 'templates', k), 'utf8'));
-    for (const p of ['app', 'game', 'subscription-app'] as const) for (const [f] of FILES) expect(templateText(p, f)).toBe(readFileSync(templateFor(p, f), 'utf8'));
-    expect(templateKey('subscription-app', 'privacy-policy.html')).toBe('profiles/app/privacy-policy.html');
-  });
-  test('init --dry writes nothing', () => {
-    const d = tmp();
-    try {
-      const r = Bun.spawnSync([process.execPath, join(ROOT, 'cli/index.ts'), 'init', '--profile', 'game', '--dry'], { cwd: d, stdout: 'pipe', stderr: 'pipe' });
-      expect(r.exitCode).toBe(0);
-      expect(r.stdout.toString()).toContain('would create storebound.config.ts');
-      expect(readdirSync(d)).toEqual([]);
-    } finally { rmSync(d, { recursive: true, force: true }); }
-  });
-});
-
-describe('doctor and playwright', () => {
-  test('doctor: the GUI\'s detection plus playwright, install commands for what is missing', () => {
-    const r = doctor(ROOT, { PATH: '/nonexistent' });
-    expect(r.tools.map(t => t.id)).toEqual(expect.arrayContaining(['ffmpeg', 'ffprobe', 'chrome', 'playwright', 'git']));
-    const ff = r.tools.find(t => t.id === 'ffmpeg')!;
-    expect(ff.found).toBe(false);
-    expect(ff.install.length).toBeGreaterThan(0);
-    expect(r.missing).toBe(r.tools.filter(t => !t.found).length);
-    expect(r.project).toBeNull();
-  });
-  test('sidecar bundle: no checkout path, and bundled require.resolve of own files cannot throw', () => {
-    const js = 'var a = __require.resolve("/work/sb/node_modules/x/package.json"); var __dirname = "/work/sb/node_modules/x/lib";';
-    expect(neutralize(js, '/work/sb')).toBe(`var a = "${NEUTRAL_ROOT}/node_modules/x/package.json"; var __dirname = "${NEUTRAL_ROOT}/node_modules/x/lib";`);
-  });
-  test('install commands per OS, never empty for the tools that have a package', () => {
-    expect(installCommands('ffmpeg', 'darwin')).toEqual(['brew install ffmpeg']);
-    expect(installCommands('ffmpeg', 'win32')[0]).toContain('winget');
-    expect(installCommands('adb', 'linux')).toEqual(['sudo apt install adb']);
-    expect(installCommands('xcode', 'linux')).toEqual([]);
-    expect(installCommands('playwright')).toEqual(['bun add -d playwright']);
-  });
-  test('playwright is an optional peer, not a runtime dependency; playwright-core is only a dev dependency for the sidecar', () => {
-    const p = pkg as unknown as { dependencies?: Record<string, string>; peerDependencies: Record<string, string>; peerDependenciesMeta: Record<string, { optional: boolean }>; devDependencies: Record<string, string> };
-    expect(p.dependencies ?? {}).toEqual({});
-    expect(p.peerDependencies.playwright).toBeString();
-    expect(p.peerDependenciesMeta.playwright).toEqual({ optional: true });
-    expect(p.devDependencies['playwright-core']).toBe(p.devDependencies.playwright);
-    // the CLI reaches playwright-core only when compiled (the sidecar bundles it)
-    const browser = readFileSync(join(ROOT, 'cli/shots/browser.ts'), 'utf8');
-    expect(browser).toMatch(/if \(compiled\(\)\) return \(await import\('playwright-core'\)\)\.chromium;/);
-  });
-});
diff --git a/tests/portfolio.test.ts b/tests/portfolio.test.ts
deleted file mode 100644
index 3d7d06b..0000000
--- a/tests/portfolio.test.ts
+++ /dev/null
@@ -1,87 +0,0 @@
-import { describe, expect, test } from 'bun:test';
-import type { ProjectSummary } from '../cli/lib/desktop-protocol';
-import { appIdentity, applePhase, appleProductIds, appleReleases, catalogParity, cmpVersion, phasedFraction, playProductIds, playReleases, releaseTrains, versionOfName } from '../cli/lib/portfolio';
-
-const summary: ProjectSummary = {
-  dir: '/games/demo', config: '/games/demo/storebound.config.ts', name: 'Demo', languages: ['en'],
-  play: { packageName: 'com.example.demo' }, apple: { bundleId: 'com.example.demo', appId: null },
-  platforms: ['ios', 'android'], products: 2, productIds: ['coins', 'no_ads'], subscriptions: 1, subscriptionIds: ['pro_monthly'],
-  catalog: { ios: ['coins', 'no_ads', 'pro_monthly'], android: ['coins', 'no_ads', 'pro_monthly'] }, shots: false, testflightGroups: 0,
-};
-
-const apple = {
-  versions: [
-    { attributes: { versionString: '2.3.0', appVersionState: 'WAITING_FOR_REVIEW', platform: 'IOS' }, relationships: { build: { data: { id: 'b2' } } } },
-    { attributes: { versionString: '2.2.1', appStoreState: 'READY_FOR_SALE', platform: 'IOS' }, relationships: { build: { data: { id: 'b1' } } } },
-    { attributes: { versionString: '9.9.9', appStoreState: 'READY_FOR_SALE', platform: 'TV_OS' } },
-  ],
-  builds: [{ id: 'b1', attributes: { version: '41' } }, { id: 'b2', attributes: { version: '45' } }],
-  iaps: [{ attributes: { productId: 'coins' } }, { attributes: { productId: 'ios_only' } }],
-};
-const play = {
-  tracks: [
-    { track: 'production', releases: [{ name: '2.2.1 (220)', versionCodes: ['220'], status: 'completed' }, { name: '2.3.0', versionCodes: ['230', '231'], status: 'inProgress', userFraction: 0.2 }] },
-    { track: 'internal', releases: [{ name: '2.4.0', versionCodes: ['240'], status: 'completed' }] },
-  ],
-  products: [{ productId: 'coins' }, { productId: 'no_ads' }, { sku: 'android_only' }],
-};
-
-describe('portfolio (apps, release trains, catalog parity)', () => {
-  test('identity: one app, both platforms', () => {
-    expect(appIdentity(summary)).toEqual({ id: '/games/demo', name: 'Demo', platforms: { ios: { bundleId: 'com.example.demo', ascAppId: null }, android: { packageName: 'com.example.demo' } } });
-    expect(appIdentity({ ...summary, apple: null }).platforms.ios).toBeNull();
-    expect(appIdentity({ ...summary, platforms: ['android'] }).platforms.ios).toBeNull();
-  });
-  test('versions and phases', () => {
-    expect(cmpVersion('2.10.0', '2.9.1')).toBeGreaterThan(0);
-    expect(cmpVersion('2.3', '2.3.0')).toBe(0);
-    expect(versionOfName('2.3.0 (45)')).toBe('2.3.0');
-    expect(versionOfName(undefined)).toBeNull();
-    expect(applePhase('READY_FOR_SALE')).toBe('live');
-    expect(applePhase('PENDING_DEVELOPER_RELEASE')).toBe('approved');
-    expect(applePhase('METADATA_REJECTED')).toBe('rejected');
-    expect(applePhase('PREPARE_FOR_SUBMISSION')).toBe('draft');
-    expect(applePhase('SOMETHING_NEW')).toBe('other');
-  });
-  test('iOS phased release: day -> share, paused -> halted, complete -> live', () => {
-    expect(phasedFraction({ state: 'ACTIVE', currentDayNumber: 5 })).toBe(0.2);
-    expect(phasedFraction({ state: 'ACTIVE', currentDayNumber: 1 })).toBe(0.01);
-    expect(phasedFraction({ state: 'PAUSED', currentDayNumber: 6 })).toBe(0.5);
-    expect(phasedFraction({ state: 'COMPLETE', currentDayNumber: 7 })).toBe(1);
-    expect(phasedFraction({ state: 'ACTIVE', currentDayNumber: 99 })).toBe(1);
-    expect(phasedFraction(null)).toBeNull();
-    const v = (id: string, state: string) => ({ id, attributes: { versionString: id, appStoreState: state, platform: 'IOS' } });
-    const rs = appleReleases({ versions: [v('3.0.0', 'READY_FOR_SALE'), v('2.9.0', 'READY_FOR_SALE'), v('2.8.0', 'READY_FOR_SALE'), v('2.7.0', 'WAITING_FOR_REVIEW')],
-      phased: { '3.0.0': { attributes: { phasedReleaseState: 'ACTIVE', currentDayNumber: 4 } }, '2.9.0': { attributes: { phasedReleaseState: 'PAUSED', currentDayNumber: 2 } }, '2.8.0': { attributes: { phasedReleaseState: 'COMPLETE', currentDayNumber: 7 } } } });
-    expect(rs.map(r => [r.version, r.phase, r.fraction, r.phased?.state ?? null])).toEqual([['3.0.0', 'rollout', 0.1, 'ACTIVE'], ['2.9.0', 'halted', 0.02, 'PAUSED'], ['2.8.0', 'live', 1, 'COMPLETE'], ['2.7.0', 'review', null, null]]);
-  });
-  test('store releases from status data; garbage gives nothing', () => {
-    const ios = appleReleases(apple);
-    expect(ios.map(r => [r.version, r.build, r.phase])).toEqual([['2.3.0', '45', 'review'], ['2.2.1', '41', 'live']]);
-    const android = playReleases(play);
-    expect(android.map(r => [r.version, r.build, r.phase, r.fraction, r.track])).toEqual([['2.2.1', '220', 'live', null, 'production'], ['2.3.0', '231', 'rollout', 0.2, 'production'], ['2.4.0', '240', 'testing', null, 'internal']]);
-    expect(appleReleases(null)).toEqual([]);
-    expect(playReleases({ tracks: 'x' })).toEqual([]);
-  });
-  test('trains: current = highest version reaching users (live or rolling out), next = highest above it, per store', () => {
-    const t = releaseTrains(appleReleases(apple), playReleases(play));
-    expect(t.current).toMatchObject({ version: '2.3.0', ios: { phase: 'review', build: '45' }, android: { phase: 'rollout', fraction: 0.2, build: '231' } });
-    expect(t.next).toMatchObject({ version: '2.4.0', ios: null, android: { phase: 'testing' } });
-    const done = releaseTrains(appleReleases(apple), playReleases({ tracks: [play.tracks[0]!.releases[0] && { track: 'production', releases: [play.tracks[0]!.releases[0]] }] }));
-    expect(done.current).toMatchObject({ version: '2.2.1', ios: { phase: 'live', build: '41' }, android: { phase: 'live', build: '220' } });
-    expect(done.next).toMatchObject({ version: '2.3.0', ios: { phase: 'review' }, android: null });
-    expect(releaseTrains([], [])).toEqual({ current: null, next: null });
-    const onlyNext = releaseTrains(appleReleases({ versions: [apple.versions[0]] }), []);
-    expect(onlyNext.current).toBeNull();
-    expect(onlyNext.next?.version).toBe('2.3.0');
-  });
-  test('catalog parity: config only offline, both stores live', () => {
-    expect(catalogParity(summary)).toEqual({ checked: 'config', products: 2, subscriptions: 1, onlyIos: [], onlyAndroid: [], missingIos: [], missingAndroid: [], ok: true });
-    const live = catalogParity(summary, appleProductIds(apple), playProductIds(play));
-    expect(live).toMatchObject({ checked: 'live', onlyIos: ['ios_only'], onlyAndroid: ['no_ads', 'android_only'], missingIos: ['no_ads'], missingAndroid: [], ok: false });
-    // an item sold on Android only is not missing on iOS
-    expect(catalogParity({ ...summary, catalog: { ios: ['coins'], android: ['coins', 'no_ads'] } }, appleProductIds(apple), playProductIds(play)).missingIos).toEqual([]);
-    // one store unreadable: no cross-store claims
-    expect(catalogParity(summary, undefined, playProductIds(play))).toMatchObject({ onlyIos: [], onlyAndroid: [], missingIos: [], missingAndroid: [] });
-  });
-});
diff --git a/tests/serve.test.ts b/tests/serve.test.ts
deleted file mode 100644
index 6a2b31b..0000000
--- a/tests/serve.test.ts
+++ /dev/null
@@ -1,281 +0,0 @@
-import { describe, expect, test } from 'bun:test';
-import { existsSync, mkdtempSync, rmSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-import { canonical, mac, MAX_TTL_MS, mint, parseSecret, TokenGuard } from '../cli/lib/confirm-token';
-import { ERR } from '../cli/lib/desktop-protocol';
-import { childEnv, pickCallEnv, type RunOptions, type Running } from '../cli/lib/runner';
-import { FORBIDDEN_ARGS, TOOLS } from '../cli/mcp-tools';
-import { describeMethods, DESKTOP_ONLY, DESKTOP_TOOLS, FORBIDDEN_METHOD_WORDS, JSON_TOOLS, methodName, Session } from '../cli/serve';
-import { buildOne, hostTarget, leaks } from '../tools/build-sidecars';
-
-type J = Record<string, unknown>;
-const ROOT = join(import.meta.dir, '..');
-const DEMO = join(ROOT, 'examples/demo-game');
-const SECRET_HEX = Array.from({ length: 32 }, (_, i) => i.toString(16).padStart(2, '0')).join('');
-const SECRET = Buffer.from(SECRET_HEX, 'hex');
-
-interface Call { argv: string[]; o: RunOptions }
-function fakeRunner(reply: (argv: string[]) => { code?: number; out?: string; data?: unknown; lines?: string[]; wait?: Promise<void> } = () => ({})) {
-  const calls: Call[] = [];
-  const run = (argv: string[], o: RunOptions): Running => {
-    calls.push({ argv, o });
-    const r = reply(argv);
-    let cancelled = false;
-    let release: () => void = () => {};
-    const gate = new Promise<void>(res => { release = res; });
-    const result = (async () => {
-      for (const l of r.lines ?? []) o.onLine?.(l, 'stdout');
-      if (r.wait) await Promise.race([r.wait, gate]);
-      return { code: cancelled ? 143 : r.code ?? 0, out: r.out ?? '', ...(r.data === undefined ? {} : { data: r.data }), cancelled };
-    })();
-    return { result, cancel: () => { cancelled = true; release(); } };
-  };
-  return { calls, run };
-}
-
-async function session(reply?: Parameters<typeof fakeRunner>[0], clock: () => number = Date.now) {
-  const sent: J[] = [];
-  const f = fakeRunner(reply);
-  const s = new Session(m => sent.push(m), f.run, clock);
-  let id = 0;
-  const call = async (method: string, params: unknown = {}) => (await s.handle({ jsonrpc: '2.0', id: ++id, method, params }))!;
-  const hello = await call('session.hello', { secret: SECRET_HEX, client: { name: 'test', version: '1' } });
-  return { s, sent, calls: f.calls, call, hello, nextId: () => id + 1 };
-}
-const errOf = (r: J) => r.error as { code: number; message: string; data?: J };
-const resOf = (r: J) => r.result as J;
-
-describe('confirm tokens', () => {
-  test('canonical JSON: sorted keys, no whitespace, safe integers only', () => {
-    expect(canonical({ b: 1, a: [true, null, 'x'], c: { z: '', y: undefined } })).toBe('{"a":[true,null,"x"],"b":1,"c":{"z":""}}');
-    expect(() => canonical({ f: 0.5 })).toThrow();
-    expect(() => canonical({ f: 2 ** 60 })).toThrow();
-  });
-  test('shared vector (the Rust host tests the same one in src-tauri/tests/confirm.rs)', () => {
-    const p = { project: '/tmp/game', args: { only: 'en-US,tr', b: [1, true, null, 'ü"\n'] } };
-    expect(canonical(p)).toBe('{"args":{"b":[1,true,null,"ü\\"\\n"],"only":"en-US,tr"},"project":"/tmp/game"}');
-    expect(mac(SECRET, 'play.listing', p, 1700000060000, 'AAAAAAAAAAAAAAAAAAAAAA')).toBe('JhSxUL2ej4cm4yrmlcA23rTCPq3YMKJthbB7n6aixxw');
-  });
-  test('binding, expiry, max lifetime, replay', () => {
-    let now = 1_000_000;
-    const g = new TokenGuard(SECRET, () => now);
-    const p = { project: '/p', args: { only: 'en-US' } };
-    const t = mint(SECRET, 'play.listing', p, { now });
-    expect(g.verify(t, 'play.listing', { project: '/p', args: { only: 'tr' } })).toEqual({ ok: false, error: 'mismatch' });
-    expect(g.verify(t, 'play.listing', { project: '/q', args: { only: 'en-US' } })).toEqual({ ok: false, error: 'mismatch' });
-    expect(g.verify(t, 'play.images', p)).toEqual({ ok: false, error: 'mismatch' });
-    expect(g.verify(mint(Buffer.alloc(32, 7), 'play.listing', p, { now }), 'play.listing', p)).toEqual({ ok: false, error: 'mismatch' });
-    expect(g.verify(t, 'play.listing', p)).toEqual({ ok: true });
-    expect(g.verify(t, 'play.listing', p)).toEqual({ ok: false, error: 'replayed' });
-    const old = mint(SECRET, 'play.listing', p, { now, ttlMs: 1000 });
-    now += 1000;
-    expect(g.verify(old, 'play.listing', p)).toEqual({ ok: false, error: 'expired' });
-    expect(g.verify(mint(SECRET, 'play.listing', p, { now, ttlMs: MAX_TTL_MS + 1 }), 'play.listing', p)).toEqual({ ok: false, error: 'too-long' });
-    for (const bad of [undefined, '', 'sbt1', 'sbt2.1.AAAAAAAAAAAAAAAAAAAAAA.x', `sbt1.${now + 5000}.short.${'A'.repeat(43)}`, t + 'x'])
-      expect(g.verify(bad, 'play.listing', p).ok).toBe(false);
-  });
-  test('secrets: hex, at least 32 bytes', () => {
-    expect(parseSecret(SECRET_HEX).length).toBe(32);
-    expect(() => parseSecret('abcd')).toThrow();
-    expect(() => parseSecret('zz'.repeat(32))).toThrow();
-    expect(() => parseSecret(42)).toThrow();
-  });
-});
-
-describe('serve --stdio: methods', () => {
-  test('nothing submits, releases or publishes', () => {
-    const names = describeMethods().map(m => m.method);
-    for (const n of names) expect(n).not.toMatch(FORBIDDEN_METHOD_WORDS);
-    for (const n of ['apple.submit', 'apple.release', 'play.release', 'play.release_testing', 'apple.phased_release', 'play.rollout', 'reviews.send', 'apple.ppo_start', 'prices.import'])
-      expect(names).not.toContain(n);
-    // every desktop tool still goes through the MCP rules: no forbidden flag can come out of any of them
-    for (const t of DESKTOP_TOOLS) expect(t.command.some(c => FORBIDDEN_ARGS.includes(c))).toBe(false);
-    expect(new Set(names).size).toBe(names.length);
-  });
-  test('typed descriptors for every tool; json flags only on read tools', () => {
-    const ms = describeMethods();
-    expect(ms.filter(m => m.kind === 'read' || m.kind === 'write').length).toBe(DESKTOP_TOOLS.length + 1); // + project.inspect
-    for (const m of ms) { expect(m.args.type).toBe('object'); expect(m.args.additionalProperties).toBe(false); expect(m.args.properties.dry_run).toBeUndefined(); }
-    for (const t of JSON_TOOLS) expect(DESKTOP_TOOLS.find(x => x.name === t)?.write).toBe(false);
-    // desktop-only methods are not MCP tools (approving a reply is the owner's decision)
-    for (const t of DESKTOP_ONLY) expect(TOOLS.some(x => x.name === t.name)).toBe(false);
-    expect(ms.map(m => m.method)).toEqual(expect.arrayContaining(['project.icon', 'project.listings', 'reviews.drafts', 'reviews.approve', 'project.init']));
-    expect(ms.map(m => m.method)).toEqual(expect.arrayContaining(['portfolio.status', 'project.inspect', 'check', 'validate', 'apple.status', 'play.status', 'reviews.list', 'apple.testflight_status']));
-    expect(methodName('apple_testflight_status')).toBe('apple.testflight_status');
-  });
-});
-
-describe('serve --stdio: session', () => {
-  test('hello first, once, with a real secret', async () => {
-    const s = new Session(() => {}, fakeRunner().run);
-    expect(errOf((await s.handle({ jsonrpc: '2.0', id: 1, method: 'system.version' }))!).code).toBe(ERR.notInitialized);
-    expect(errOf((await s.handle({ jsonrpc: '2.0', id: 2, method: 'session.hello', params: { secret: 'ab' } }))!).code).toBe(ERR.invalidParams);
-    const ok = resOf((await s.handle({ jsonrpc: '2.0', id: 3, method: 'session.hello', params: { secret: SECRET_HEX } }))!);
-    expect(ok.protocol).toBe('storebound-desktop/1');
-    expect((ok.methods as unknown[]).length).toBe(describeMethods().length);
-    expect(errOf((await s.handle({ jsonrpc: '2.0', id: 4, method: 'session.hello', params: { secret: SECRET_HEX } }))!).code).toBe(ERR.invalidRequest);
-    expect(resOf((await s.handle({ jsonrpc: '2.0', id: 5, method: 'system.version' }))!).version).toBeString();
-    expect(errOf((await s.handle({ jsonrpc: '2.0', id: 6, method: 'apple.submit', params: { project: DEMO } }))!).code).toBe(ERR.methodNotFound);
-  });
-  test('read method: --json appended, data and progress passed through, credentials only as per-call env', async () => {
-    const { call, calls, sent } = await session(() => ({ data: { blockers: 0, findings: [] }, out: 'log line', lines: ['12:00:00 [validate] apple'] }));
-    const r = resOf(await call('validate', { project: DEMO, args: { store: 'apple' }, credentials: { ASC_KEY_ID: 'K', HOME: '/evil', ASC_P8: '' } }));
-    expect(calls[0]!.argv).toEqual(['validate', '--apple', '--json']);
-    expect(calls[0]!.o).toMatchObject({ cwd: DEMO, machine: true, env: { ASC_KEY_ID: 'K' } });
-    expect(Object.keys(calls[0]!.o.env!)).toEqual(['ASC_KEY_ID']);
-    expect(r).toMatchObject({ ok: true, exitCode: 0, dryRun: false, data: { blockers: 0 }, command: 'storebound validate --apple --json' });
-    expect(sent).toContainEqual({ jsonrpc: '2.0', method: 'progress', params: { requestId: 2, line: '12:00:00 [validate] apple', stream: 'stdout' } });
-  });
-  test('bad params: relative or config-less project, unknown args, dry_run inside args', async () => {
-    const { call } = await session();
-    expect(errOf(await call('check', { project: 'examples/demo-game' })).code).toBe(ERR.invalidParams);
-    expect(errOf(await call('check', { project: tmpdir() })).message).toContain('no storebound.config.ts');
-    expect(errOf(await call('check', { project: DEMO, args: { nope: 1 } })).code).toBe(ERR.invalidParams);
-    expect(errOf(await call('play.listing', { project: DEMO, args: { dry_run: false } })).code).toBe(ERR.invalidParams);
-    expect(errOf(await call('check', { project: DEMO, extra: true })).code).toBe(ERR.invalidParams);
-    expect(errOf(await call('play.listing', { project: DEMO, args: { only: '--yes' } })).code).toBe(ERR.invalidParams);
-  });
-  test('writes: dry run by default; real run only with a matching, fresh, unused host token', async () => {
-    let now = 5_000_000;
-    const { call, calls } = await session(undefined, () => now);
-    const p = { project: DEMO, args: { only: 'en-US' } };
-    expect(resOf(await call('play.listing', p))).toMatchObject({ dryRun: true });
-    expect(calls[0]!.argv).toEqual(['play', 'listing', '--only', 'en-US', '--dry']);
-    expect(errOf(await call('play.listing', { ...p, dryRun: false })).code).toBe(ERR.confirmRequired);
-    const token = mint(SECRET, 'play.listing', p, { now });
-    expect(errOf(await call('play.listing', { ...p, args: { only: 'tr-TR' }, dryRun: false, confirmToken: token })).code).toBe(ERR.confirmInvalid);
-    expect(errOf(await call('play.images', { ...p, dryRun: false, confirmToken: token })).code).toBe(ERR.confirmInvalid);
-    const real = resOf(await call('play.listing', { ...p, dryRun: false, confirmToken: token, credentials: { PLAY_SERVICE_ACCOUNT: '{}' } }));
-    expect(real).toMatchObject({ dryRun: false });
-    expect(calls.at(-1)!.argv).toEqual(['play', 'listing', '--only', 'en-US']);
-    const replay = errOf(await call('play.listing', { ...p, dryRun: false, confirmToken: token }));
-    expect(replay).toMatchObject({ code: ERR.confirmInvalid, data: { reason: 'replayed' } });
-    const soon = mint(SECRET, 'play.listing', p, { now, ttlMs: 10 });
-    now += 11;
-    expect(errOf(await call('play.listing', { ...p, dryRun: false, confirmToken: soon })).data).toEqual({ reason: 'expired' });
-    // a read method never needs a token, and dryRun false on it is just a normal run
-    expect(resOf(await call('check', { project: DEMO, dryRun: false })).dryRun).toBe(false);
-  });
-  test('desktop-only methods: offline reads, reply approval and project.init are dry runs without a host token', async () => {
-    let now = 7_000_000;
-    const { call, calls } = await session(argv => (argv[0] === 'inspect' ? { data: { path: null, dataUrl: null } } : {}), () => now);
-    expect(resOf(await call('project.icon', { project: DEMO }))).toMatchObject({ ok: true, data: { dataUrl: null } });
-    expect(calls.at(-1)!.argv).toEqual(['inspect', '--icon', '--json']);
-    await call('project.listings', { project: DEMO });
-    expect(calls.at(-1)!.argv).toEqual(['inspect', '--listings', '--json']);
-    await call('reviews.drafts', { project: DEMO });
-    expect(calls.at(-1)!.argv).toEqual(['reviews', 'drafts', '--json']);
-    // approve: file names only, dry run unless the token matches
-    expect(errOf(await call('reviews.approve', { project: DEMO, args: { file: '../x.md' } })).code).toBe(ERR.invalidParams);
-    const a = { project: DEMO, args: { file: 'play-abc.md' } };
-    expect(resOf(await call('reviews.approve', a))).toMatchObject({ dryRun: true });
-    expect(calls.at(-1)!.argv).toEqual(['reviews', 'approve', 'play-abc.md', '--dry']);
-    expect(errOf(await call('reviews.approve', { ...a, dryRun: false })).code).toBe(ERR.confirmRequired);
-    await call('reviews.approve', { ...a, dryRun: false, confirmToken: mint(SECRET, 'reviews.approve', a, { now }) });
-    expect(calls.at(-1)!.argv).toEqual(['reviews', 'approve', 'play-abc.md']);
-    // init: an existing folder without a config; never one that has a config
-    const dir = mkdtempSync(join(tmpdir(), 'sb-init-'));
-    try {
-      expect(errOf(await call('project.init', { project: DEMO, args: { profile: 'game' } })).message).toContain('already has a storebound config');
-      const i = { project: dir, args: { profile: 'game' } };
-      expect(resOf(await call('project.init', i))).toMatchObject({ dryRun: true });
-      expect(calls.at(-1)).toMatchObject({ argv: ['init', '--profile', 'game', '--dry'], o: { cwd: dir } });
-      expect(errOf(await call('project.init', { ...i, dryRun: false, confirmToken: mint(SECRET, 'project.init', { ...i, args: { profile: 'app' } }, { now }) })).code).toBe(ERR.confirmInvalid);
-      await call('project.init', { ...i, dryRun: false, confirmToken: mint(SECRET, 'project.init', i, { now }) });
-      expect(calls.at(-1)!.argv).toEqual(['init', '--profile', 'game']);
-      // project.init is not a way to run other tools in a config-less folder
-      expect(errOf(await call('check', { project: dir })).message).toContain('no storebound.config.ts');
-    } finally { rmSync(dir, { recursive: true, force: true }); }
-  });
-  test('cancellation answers -32800 and kills the child', async () => {
-    const { s, call, nextId } = await session(() => ({ wait: new Promise(() => {}) }));
-    const id = nextId();
-    const pending = call('validate', { project: DEMO });
-    await Bun.sleep(5);
-    await s.handle({ jsonrpc: '2.0', method: '$/cancelRequest', params: { id } });
-    expect(errOf(await pending).code).toBe(ERR.cancelled);
-  });
-  test('portfolio.status: apps across platforms, release trains, catalog parity, per-app errors, progress n/total', async () => {
-    const summary = { dir: DEMO, name: 'Demo', apple: { bundleId: 'com.example.demo', appId: null }, play: { packageName: 'com.example.demo' }, platforms: ['ios', 'android'], products: 2, productIds: ['coins', 'no_ads'], subscriptions: 0, subscriptionIds: [], catalog: { ios: ['coins', 'no_ads'], android: ['coins', 'no_ads'] } };
-    const { call, sent } = await session(argv => argv[0] === 'inspect' ? { data: summary }
-      : argv[0] === 'check' ? { data: { ok: true, problems: [], warnings: ['w'] } }
-      : argv[0] === 'apple' ? { code: 1, out: 'error: ASC_KEY_ID and ASC_ISSUER_ID are not set' }
-      : argv[0] === 'play' ? { data: { tracks: [{ track: 'production', releases: [{ name: '1.2.0 (12)', versionCodes: ['12'], status: 'completed' }] }, { track: 'beta', releases: [{ name: '1.3.0', versionCodes: ['13'], status: 'completed' }] }], products: [{ productId: 'coins' }] } } : {});
-    const r = resOf(await call('portfolio.status', { projects: [DEMO, '/nope/game'], live: true })) as { apps: J[] };
-    expect(r.apps[0]).toMatchObject({ project: DEMO, app: { id: DEMO, name: 'Demo', platforms: { ios: { bundleId: 'com.example.demo' }, android: { packageName: 'com.example.demo' } } },
-      check: { ok: true, warnings: ['w'] }, storeErrors: { ios: 'ASC_KEY_ID and ASC_ISSUER_ID are not set' }, ok: false });
-    expect(r.apps[0]!.release).toMatchObject({ source: 'live', current: { version: '1.2.0', ios: null, android: { phase: 'live', build: '12' } }, next: { version: '1.3.0', android: { phase: 'testing', track: 'beta' } } });
-    expect(r.apps[0]!.catalog).toMatchObject({ checked: 'live', missingAndroid: ['no_ads'], missingIos: [], ok: false });
-    expect(r.apps[1]).toMatchObject({ ok: false, summary: null, app: null });
-    expect((r.apps[1]!.errors as string[])[0]).toContain('not a folder');
-    const prog = sent.filter(m => m.method === 'progress').map(m => (m.params as J).n);
-    expect(prog.sort()).toEqual([1, 2]);
-    expect(errOf(await call('portfolio.status', { projects: [] })).code).toBe(ERR.invalidParams);
-  });
-  test('children never inherit session secrets; only credential names pass', () => {
-    process.env.STOREBOUND_SESSION_SECRET = 'x';
-    try { expect(childEnv({}, true).STOREBOUND_SESSION_SECRET).toBeUndefined(); } finally { delete process.env.STOREBOUND_SESSION_SECRET; }
-    expect(childEnv({}, true)).toMatchObject({ STOREBOUND_MACHINE: '1', STOREBOUND_SERVE: '1', NO_COLOR: '1' });
-    expect(pickCallEnv({ PATH: '/x', ASC_ISSUER_ID: 'i', ASC_P8: 3 })).toEqual({ ASC_ISSUER_ID: 'i' });
-  });
-});
-
-/** Talks to a real `storebound serve --stdio` process (source or compiled). */
-async function stdioRoundTrip(cmd: string[]): Promise<J[]> {
-  const p = Bun.spawn([...cmd, 'serve', '--stdio'], { cwd: ROOT, stdin: 'pipe', stdout: 'pipe', stderr: 'pipe' });
-  const lines = [
-    { jsonrpc: '2.0', id: 1, method: 'system.version' },
-    { jsonrpc: '2.0', id: 2, method: 'session.hello', params: { secret: SECRET_HEX } },
-    { jsonrpc: '2.0', id: 3, method: 'project.inspect', params: { project: DEMO } },
-    { jsonrpc: '2.0', id: 4, method: 'shots.check', params: { project: DEMO } },
-    { jsonrpc: '2.0', id: 5, method: 'play.listing', params: { project: DEMO, dryRun: false, confirmToken: 'sbt1.1.AAAAAAAAAAAAAAAAAAAAAA.' + 'A'.repeat(43) } },
-  ];
-  // hello must be answered before the next request is read: send the version probe, then the rest
-  p.stdin.write(lines.map(l => JSON.stringify(l)).join('\n') + '\n');
-  await p.stdin.flush();
-  const out: J[] = [];
-  const reader = p.stdout.getReader();
-  const dec = new TextDecoder();
-  let buf = '';
-  const deadline = Date.now() + 25_000;
-  while (out.filter(m => m.id !== undefined).length < lines.length && Date.now() < deadline) {
-    const { value, done } = await reader.read();
-    if (done) break;
-    buf += dec.decode(value, { stream: true });
-    let nl: number;
-    while ((nl = buf.indexOf('\n')) >= 0) { out.push(JSON.parse(buf.slice(0, nl)) as J); buf = buf.slice(nl + 1); }
-  }
-  p.stdin.end();
-  await p.exited;
-  return out;
-}
-
-function checkRoundTrip(out: J[]): void {
-  const byId = (id: number) => out.find(m => m.id === id)!;
-  expect(errOf(byId(1)).code).toBe(ERR.notInitialized);
-  expect(resOf(byId(2)).protocol).toBe('storebound-desktop/1');
-  expect(resOf(byId(3))).toMatchObject({ name: 'Prism Puddle', play: { packageName: 'com.example.prismpuddle' } });
-  const shots = resOf(byId(4));
-  expect(shots.command).toBe('storebound shots check --json');
-  expect((shots.data as J).issues).toBeArray();
-  expect(errOf(byId(5)).code).toBe(ERR.confirmInvalid);
-  expect(out.some(m => m.method === 'progress')).toBe(true);
-}
-
-describe('serve --stdio over a real pipe', () => {
-  test('from source', async () => { checkRoundTrip(await stdioRoundTrip([process.execPath, join(ROOT, 'cli/index.ts')])); }, 30_000);
-
-  test('compiled sidecar for this machine: version + handshake, no private paths inside', async () => {
-    const dir = mkdtempSync(join(tmpdir(), 'sb-sidecar-'));
-    try {
-      const bin = await buildOne(hostTarget(), dir);
-      expect(existsSync(bin)).toBe(true);
-      const v = Bun.spawnSync([bin, 'version'], { cwd: ROOT, stdout: 'pipe' });
-      expect(v.exitCode).toBe(0);
-      expect(v.stdout.toString().trim()).toMatch(/^\d+\.\d+\.\d+/);
-      expect(leaks(bin)).toEqual([]);
-      checkRoundTrip(await stdioRoundTrip([bin]));
-    } finally { rmSync(dir, { recursive: true, force: true }); }
-  }, 60_000);
-});
diff --git a/tests/tools.test.ts b/tests/tools.test.ts
deleted file mode 100644
index 7ea341f..0000000
--- a/tests/tools.test.ts
+++ /dev/null
@@ -1,40 +0,0 @@
-import { describe, expect, test } from 'bun:test';
-import { chmodSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { delimiter, join } from 'node:path';
-import { childEnv } from '../cli/lib/runner';
-import { detectTools, parseVersion, toolPath } from '../cli/lib/tools';
-
-describe('local tools (desktop Dependencies screen)', () => {
-  test('version banners', () => {
-    expect(parseVersion('ffmpeg version 7.1.1 Copyright (c) 2000-2025')).toBe('7.1.1');
-    expect(parseVersion('ffmpeg version N-118000-g1234abcd-20250101 Copyright')).toBe('N-118000-g1234abcd-20250101');
-    expect(parseVersion('Google Chrome for Testing 131.0.6778.85')).toBe('131.0.6778.85');
-    expect(parseVersion('Android Debug Bridge version 1.0.41')).toBe('1.0.41');
-    expect(parseVersion('git version 2.50.1')).toBe('2.50.1');
-    expect(parseVersion(null)).toBeNull();
-  });
-  test('app-managed folders go first on PATH, also for every child command', () => {
-    expect(toolPath({ PATH: '/usr/bin', STOREBOUND_TOOL_PATH: '/app/tools/bin' })).toBe(['/app/tools/bin', '/usr/bin'].join(delimiter));
-    expect(toolPath({ PATH: '/usr/bin' })).toBe('/usr/bin');
-    const before = process.env.STOREBOUND_TOOL_PATH;
-    process.env.STOREBOUND_TOOL_PATH = '/app/tools/bin';
-    try { expect(childEnv().PATH!.startsWith('/app/tools/bin' + delimiter)).toBe(true); } finally {
-      if (before === undefined) delete process.env.STOREBOUND_TOOL_PATH; else process.env.STOREBOUND_TOOL_PATH = before;
-    }
-  });
-  test('an app-managed ffmpeg is found first and marked as the app\'s', () => {
-    if (process.platform === 'win32') return;
-    const dir = mkdtempSync(join(tmpdir(), 'sb-tools-'));
-    try {
-      const f = join(dir, 'ffmpeg');
-      writeFileSync(f, '#!/bin/sh\necho "ffmpeg version 7.1.1-test Copyright"\n');
-      chmodSync(f, 0o755);
-      const tools = detectTools({ PATH: '/usr/bin:/bin', STOREBOUND_TOOL_PATH: dir });
-      const ff = tools.find(t => t.id === 'ffmpeg')!;
-      expect(ff).toMatchObject({ found: true, path: f, version: '7.1.1-test', source: 'app', install: { kind: 'download' } });
-      expect(tools.map(t => t.id)).toEqual(expect.arrayContaining(['ffmpeg', 'ffprobe', 'chrome', 'adb', 'git']));
-      for (const t of tools) if (t.id === 'xcode' || t.id === 'simctl' || t.id === 'adb') expect(t.install.kind).toBe('link');
-    } finally { rmSync(dir, { recursive: true, force: true }); }
-  });
-});
diff --git a/tools/build-sidecars.ts b/tools/build-sidecars.ts
deleted file mode 100644
index aa0dd62..0000000
--- a/tools/build-sidecars.ts
+++ /dev/null
@@ -1,103 +0,0 @@
-#!/usr/bin/env bun
-// Compiles the storebound CLI into single-file executables for the desktop app's sidecar (Tauri `externalBin`).
-//   bun tools/build-sidecars.ts              every target
-//   bun tools/build-sidecars.ts --host       only this machine's target (what `tauri dev` needs)
-//   bun tools/build-sidecars.ts --target bun-linux-x64[,bun-windows-x64]
-// Output: apps/desktop/src-tauri/binaries/storebound-<rust target triple>[.exe] (Tauri's sidecar naming; gitignored).
-// macOS outputs are re-signed ad hoc: the signature `bun build --compile` leaves is invalid once the payload is
-// appended, and the kernel kills such a binary on start (exit 137). Release builds re-sign with Developer ID (D5).
-// Every output is scanned for the build machine's home and checkout paths: nothing private may ship.
-import { mkdirSync, mkdtempSync, readFileSync, rmSync, statSync, writeFileSync } from 'node:fs';
-import { homedir, tmpdir } from 'node:os';
-import { join } from 'node:path';
-
-export const TARGETS: Record<string, string> = {
-  'bun-darwin-arm64': 'aarch64-apple-darwin',
-  'bun-darwin-x64': 'x86_64-apple-darwin',
-  'bun-linux-x64': 'x86_64-unknown-linux-gnu',
-  'bun-linux-arm64': 'aarch64-unknown-linux-gnu',
-  'bun-windows-x64': 'x86_64-pc-windows-msvc',
-};
-
-export const ROOT = join(import.meta.dir, '..');
-/** Modules playwright-core references but the sidecar never loads (Electron apps, the WebDriver BiDi protocol). */
-export const SIDECAR_EXTERNALS = ['electron', 'chromium-bidi'];
-export const OUT_DIR = join(ROOT, 'apps/desktop/src-tauri/binaries');
-
-export function hostTarget(): string {
-  const os = process.platform === 'darwin' ? 'darwin' : process.platform === 'win32' ? 'windows' : 'linux';
-  const arch = process.arch === 'arm64' ? 'arm64' : 'x64';
-  return `bun-${os}-${arch}`;
-}
-
-export const outName = (target: string): string => `storebound-${TARGETS[target]}${target.includes('windows') ? '.exe' : ''}`;
-
-/** Paths of this machine that must not appear in a shipped binary. */
-export function privateStrings(): string[] {
-  return [...new Set([homedir(), ROOT].filter(s => s.length > 4))];
-}
-
-export function leaks(file: string, needles = privateStrings()): string[] {
-  const buf = readFileSync(file);
-  return needles.filter(n => buf.includes(Buffer.from(n)));
-}
-
-/** Neutral prefix the checkout path is replaced with in the bundle (bundled packages carry their own paths). */
-export const NEUTRAL_ROOT = '/storebound';
-
-/**
- * Stage 1: one JavaScript bundle of the CLI (target bun, platform independent). playwright-core is bundled, so
- * screenshot renders work without playwright in the user's project (it drives the app-managed Chrome for Testing,
- * STOREBOUND_CHROME); its Electron and BiDi loaders are never used and stay out. Bundled CommonJS modules carry their
- * absolute source paths (__dirname, require.resolve): the checkout path becomes NEUTRAL_ROOT, so no build machine
- * path ships. Those paths only matter for features the sidecar never uses (Electron, trace viewer, app icon).
- */
-export function bundle(): string {
-  const dir = mkdtempSync(join(tmpdir(), 'sb-sidecar-'));
-  const p = Bun.spawnSync(['bun', 'build', 'cli/index.ts', '--target=bun', ...SIDECAR_EXTERNALS.flatMap(e => ['--external', e]), '--outdir', dir],
-    { cwd: ROOT, stdout: 'pipe', stderr: 'pipe' });
-  if (p.exitCode !== 0) throw new Error(`bundle failed\n${p.stderr.toString()}${p.stdout.toString()}`);
-  const entry = join(dir, 'index.js');
-  writeFileSync(entry, neutralize(readFileSync(entry, 'utf8')));
-  return entry;
-}
-
-/** The checkout path out of a bundle. `require.resolve("<checkout>/...")` of a bundled file (playwright-core asks
- *  for its own package.json, only to know its folder) becomes the plain path string, so it cannot throw at run time. */
-export function neutralize(js: string, root = ROOT): string {
-  const esc = root.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-  return js.replace(new RegExp(`__require\\.resolve\\(("${esc}[^"]*")\\)`, 'g'), '$1').split(root).join(NEUTRAL_ROOT);
-}
-
-let bundled: string | null = null;
-
-export async function buildOne(target: string, outDir = OUT_DIR): Promise<string> {
-  if (!TARGETS[target]) throw new Error(`unknown target ${target} (${Object.keys(TARGETS).join(', ')})`);
-  mkdirSync(outDir, { recursive: true });
-  const out = join(outDir, outName(target));
-  rmSync(out, { force: true });
-  const t = Date.now();
-  bundled ??= bundle();
-  const p = Bun.spawnSync(['bun', 'build', '--compile', `--target=${target}`, '--minify-syntax', '--minify-whitespace', bundled, '--outfile', out],
-    { cwd: ROOT, stdout: 'pipe', stderr: 'pipe' });
-  if (p.exitCode !== 0) throw new Error(`${target}: bun build failed\n${p.stderr.toString()}${p.stdout.toString()}`);
-  if (target.startsWith('bun-darwin') && process.platform === 'darwin') {
-    const s = Bun.spawnSync(['codesign', '--force', '--sign', '-', out], { stdout: 'pipe', stderr: 'pipe' });
-    if (s.exitCode !== 0) throw new Error(`${target}: ad-hoc codesign failed: ${s.stderr.toString()}`);
-  }
-  const hits = leaks(out);
-  if (hits.length) throw new Error(`${target}: ${out} contains private paths (${hits.length}); refusing to keep it`);
-  console.log(`sidecar ${target} -> ${out} (${(statSync(out).size / 1e6).toFixed(1)} MB, ${((Date.now() - t) / 1000).toFixed(1)}s)`);
-  return out;
-}
-
-if (import.meta.main) {
-  const argv = process.argv.slice(2);
-  const i = argv.indexOf('--target');
-  const targets = argv.includes('--host') ? [hostTarget()] : i >= 0 ? (argv[i + 1] ?? '').split(',').filter(Boolean) : Object.keys(TARGETS);
-  let failed = 0;
-  for (const t of targets) {
-    try { await buildOne(t); } catch (e) { failed++; console.error(`sidecar ${t}: ${(e as Error).message}`); }
-  }
-  if (failed) process.exit(1);
-}
diff --git a/tools/ci.ts b/tools/ci.ts
index b705290..d761bdf 100644
--- a/tools/ci.ts
+++ b/tools/ci.ts
@@ -1,35 +1,16 @@
 #!/usr/bin/env bun
 // Everything CI runs, in order; stops at the first failure.  bun run ci
-// `bun test` covers the CLI and the desktop webview (apps/desktop/tests: model, i18n, theme contrast, webview rules).
-// The desktop Rust host (cargo test, clippy
-// with warnings as errors) runs when cargo is installed; set STOREBOUND_CI_RUST=0 to skip it on a machine without Rust.
-import { join } from 'node:path';
-
-const root = new URL('..', import.meta.url).pathname;
-const tauri = join(root, 'apps/desktop/src-tauri');
-const cargo = process.env.STOREBOUND_CI_RUST === '0' ? null : Bun.which('cargo');
-const steps: [string, string[], string?][] = [
+const steps: [string, string[]][] = [
   ['adapters', ['bun', 'tools/gen-adapters.ts', '--check']],
   ['tests', ['bun', 'test']],
   ['typecheck', ['bunx', 'tsc', '--noEmit']],
-  ['desktop i18n', ['bun', 'tools/i18n-check.ts']],
-  ['desktop typecheck', ['bunx', 'tsc', '--noEmit', '-p', 'apps/desktop']],
-  ['desktop build', ['bun', 'run', '--cwd', 'apps/desktop', 'build']],
-  // the release bundle must not carry the dev fixture mode (apps/desktop/tests/webview.test.ts checks dist/ when present)
-  ['desktop bundle check', ['bun', 'test', 'apps/desktop/tests/webview.test.ts']],
-  ...(cargo ? [
-    // tauri's build script needs the host sidecar binary (gitignored), so a clean checkout builds it first
-    ['desktop sidecar (host)', ['bun', 'tools/build-sidecars.ts', '--host']],
-    ['desktop rust tests', [cargo, 'test', '--quiet'], tauri],
-    ['desktop clippy', [cargo, 'clippy', '--all-targets', '--quiet', '--', '-D', 'warnings'], tauri],
-  ] as [string, string[], string][] : []),
   ['scrub', ['bun', 'tools/scrub.ts']],
 ];
-if (!cargo) console.log('ci: cargo not found (or STOREBOUND_CI_RUST=0): desktop Rust tests and clippy skipped');
-for (const [name, cmd, cwd] of steps) {
+const root = new URL('..', import.meta.url).pathname;
+for (const [name, cmd] of steps) {
   const t = Date.now();
   console.log(`\n== ${name}: ${cmd.join(' ')}`);
-  const r = Bun.spawnSync(cmd, { cwd: cwd ?? root, stdout: 'inherit', stderr: 'inherit' });
+  const r = Bun.spawnSync(cmd, { cwd: root, stdout: 'inherit', stderr: 'inherit' });
   if (r.exitCode !== 0) { console.error(`\nci: ${name} failed (exit ${r.exitCode})`); process.exit(1); }
   console.log(`== ${name} ok (${((Date.now() - t) / 1000).toFixed(1)}s)`);
 }
diff --git a/tools/i18n-check.ts b/tools/i18n-check.ts
deleted file mode 100644
index 12e14f3..0000000
--- a/tools/i18n-check.ts
+++ /dev/null
@@ -1,42 +0,0 @@
-#!/usr/bin/env bun
-// Checks the desktop app's UI catalogs (apps/desktop/src/i18n): every language has exactly the English keys, no empty
-// message, the same {placeholders} as English, plural "_one" entries only next to their base key and with {count} or
-// a literal 1, no em dash (the house style uses "·"), no stray markup. Part of `bun run ci`.
-//   bun tools/i18n-check.ts
-import { en } from '../apps/desktop/src/i18n/en';
-import { tr } from '../apps/desktop/src/i18n/tr';
-
-export type Catalog = Record<string, string>;
-const placeholders = (s: string): string[] => [...s.matchAll(/\{(\w+)\}/g)].map(m => m[1]!).sort();
-
-export function checkCatalogs(source: Catalog, others: Record<string, Catalog>): string[] {
-  const errors: string[] = [];
-  const keys = Object.keys(source);
-  for (const [k, v] of Object.entries(source)) {
-    if (!v.trim()) errors.push(`en: ${k} is empty`);
-    if (k.endsWith('_one') && !(k.slice(0, -4) in source)) errors.push(`en: ${k} has no base key`);
-  }
-  for (const [lang, cat] of Object.entries({ en: source, ...others })) {
-    for (const k of keys) if (!(k in cat)) errors.push(`${lang}: missing ${k}`);
-    for (const [k, v] of Object.entries(cat)) {
-      if (!(k in source)) { errors.push(`${lang}: unknown key ${k}`); continue; }
-      if (!v.trim()) errors.push(`${lang}: ${k} is empty`);
-      if (/—/.test(v)) errors.push(`${lang}: ${k} has an em dash (use "·")`);
-      if (/<[a-z/][^>]*>/i.test(v)) errors.push(`${lang}: ${k} has markup`);
-      if (/[\u0000-\u0008\u000b-\u001f]/.test(v)) errors.push(`${lang}: ${k} has control characters`);
-      const want = placeholders(source[k]!), got = placeholders(v);
-      if (k.endsWith('_one')) {
-        // a "one" form may spell the count out ("1 app") instead of using {count}
-        const base = placeholders(source[k.slice(0, -4)]!).filter(p => p !== 'count');
-        if (got.filter(p => p !== 'count').join() !== base.join()) errors.push(`${lang}: ${k} placeholders ${got.join(',')} differ from ${base.join(',')}`);
-      } else if (got.join() !== want.join()) errors.push(`${lang}: ${k} placeholders {${got.join('},{')}} differ from English {${want.join('},{')}}`);
-    }
-  }
-  return errors;
-}
-
-if (import.meta.main) {
-  const errors = checkCatalogs(en, { tr });
-  if (errors.length) { console.error(errors.join('\n')); console.error(`i18n: ${errors.length} problem(s)`); process.exit(1); }
-  console.log(`i18n: en + tr, ${Object.keys(en).length} messages, placeholders match`);
-}
diff --git a/tools/scrub.ts b/tools/scrub.ts
index 61cd1cd..14aa95c 100644
--- a/tools/scrub.ts
+++ b/tools/scrub.ts
@@ -1,6 +1,5 @@
 #!/usr/bin/env bun
-// Secrets / personal data scrub over every tracked (and staged-new) text file, the desktop app (apps/desktop)
-// included. Fails on any hit.
+// Secrets / personal data scrub over every tracked (and staged-new) text file. Fails on any hit.
 //   bun tools/scrub.ts
 // Patterns are built from parts so this file does not match itself.
 import { readFileSync } from 'node:fs';
@@ -11,24 +10,20 @@ export interface Rule { id: string; re: RegExp; files?: RegExp; allow?: (m: stri
 const at = '@';
 export const RULES: Rule[] = [
   { id: 'email', re: new RegExp(`[A-Za-z0-9._%+-]+${at}[A-Za-z0-9.-]+\\.[A-Za-z]{2,}`, 'g'),
-    allow: m => /@example\.(com|org|net)$/i.test(m) || /@users\.noreply\./.test(m) || /@[0-9]x\.(png|jpe?g|webp)$/.test(m) },
+    allow: m => /@example\.(com|org|net)$/i.test(m) || /@users\.noreply\./.test(m) },
   { id: 'private-key', re: new RegExp('-----BEGIN [A-Z ]*PRIVATE ' + 'KEY-----\\s*[A-Za-z0-9+/=]{20,}', 'g'), wholeFile: true },
   { id: 'private_key-json', re: new RegExp('"private' + '_key"\\s*:\\s*"-----BEGIN', 'g') },
   { id: 'asc-key-file', re: new RegExp('AuthKey' + '_[A-Z0-9]{10}\\.p8', 'g') },
   { id: 'apple-id-like', re: /\b(?=[A-Z0-9]{10}\b)(?=[A-Z0-9]*\d)(?=[A-Z0-9]*[A-Z])[A-Z0-9]{10}\b/g,
-    files: /^(templates\/|.*\.config\.(ts|js|json)$|.*\.json$|.*\.toml$|.*\.plist$)/,
-    // Google's public code signing team, which the desktop app checks Chrome for Testing against
-    allow: (_m, line) => /"macTeamId":/.test(line) },
+    files: /^(templates\/|.*\.config\.(ts|js|json)$|.*\.json$|.*\.toml$|.*\.plist$)/ },
   { id: 'issuer-uuid', re: /\b[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\b/g,
     allow: m => /^0{8}-0{4}-0{4}-0{4}-0{12}$/.test(m) },
   { id: 'ip-address', re: /(?<![\w.\-]|[A-Za-z]\/)(?:\d{1,3}\.){3}\d{1,3}(?![\w.\-])/g, allow: m => ['127.0.0.1', '0.0.0.0'].includes(m) },
   { id: 'private-name', re: new RegExp(['Yon', 'ga'].join(''), 'gi') },
   { id: 'google-api-key', re: new RegExp('AI' + 'za[0-9A-Za-z_-]{35}', 'g') },
-  // absolute home folders leak a machine's account name (placeholders like /Users/you are fine)
-  { id: 'home-path', re: /(?:\/Users\/|\/home\/|[A-Z]:\\Users\\)(?!(?:you|me|user|runner|name|example)\b)[A-Za-z0-9._-]+/g },
 ];
 
-const SKIP = /(^|\/)(bun\.lock|Cargo\.lock|LICENSE)$|\.(png|jpe?g|webp|gif|ico|icns|woff2?|ttf|otf|p8|p12|aab|ipa|zip)$/i;
+const SKIP = /(^|\/)(bun\.lock|LICENSE)$|\.(png|jpe?g|webp|gif|ico|woff2?|ttf|otf|p8|p12|aab|ipa|zip)$/i;
 
 export function scan(files: { path: string; text: string }[]): { file: string; line: number; rule: string; match: string }[] {
   const hits: { file: string; line: number; rule: string; match: string }[] = [];
diff --git a/tools/tools-manifest.ts b/tools/tools-manifest.ts
deleted file mode 100644
index dbb2ada..0000000
--- a/tools/tools-manifest.ts
+++ /dev/null
@@ -1,103 +0,0 @@
-#!/usr/bin/env bun
-// Writes apps/desktop/src-tauri/tools-manifest.json: the exact ffmpeg archives the desktop app may download (URL,
-// SHA-256, size, files inside), per Rust target triple, plus the Chrome for Testing endpoint and the signers its
-// downloads must carry. Run before each desktop release (the BtbN autobuilds are pruned after a while):
-//   bun tools/tools-manifest.ts            resolve, verify, write
-//   bun tools/tools-manifest.ts --check    only check that the manifest parses and every URL still answers
-// Trust: macOS archives (ffmpeg.martin-riedl.de) are downloaded and hashed here, and that hash must equal the
-// publisher's .sha256 file. Linux / Windows archives (github.com/BtbN/FFmpeg-Builds, pinned autobuild tag) use the
-// SHA-256 digest GitHub computes for every release asset, which must equal the publisher's checksums.sha256. So every
-// pinned hash has two independent sources, and the app checks it again after its own download (docs/desktop.md).
-import { writeFileSync } from 'node:fs';
-import { join } from 'node:path';
-
-export const MANIFEST = join(import.meta.dir, '..', 'apps/desktop/src-tauri/tools-manifest.json');
-const FFMPEG_MAJOR = '9.0';
-
-export interface Archive { url: string; sha256: string; size: number; kind: 'zip' | 'tar.xz'; files: { from: string; to: string }[] }
-export interface ToolsManifest {
-  generated: string;
-  ffmpeg: { version: string; license: string; licenseUrl: string; sources: Record<string, string>; targets: Record<string, Archive[]> };
-  chrome: { endpoint: string; channel: string; platforms: Record<string, string>; macTeamId: string; windowsSigner: string; license: string; licenseUrl: string };
-}
-
-const sha256 = (b: ArrayBuffer): string => new Bun.CryptoHasher('sha256').update(new Uint8Array(b)).digest('hex');
-
-async function riedl(arch: 'arm64' | 'amd64', tool: 'ffmpeg' | 'ffprobe'): Promise<{ archive: Archive; version: string }> {
-  const r = await fetch(`https://ffmpeg.martin-riedl.de/redirect/latest/macos/${arch}/release/${tool}.zip`, { redirect: 'manual' });
-  const loc = r.headers.get('location');
-  if (r.status !== 307 && r.status !== 302 || !loc) throw new Error(`martin-riedl ${arch} ${tool}: no redirect (${r.status})`);
-  const url = new URL(loc, 'https://ffmpeg.martin-riedl.de').toString();
-  const version = /_(\d+(?:\.\d+)+)\//.exec(url)?.[1] ?? '?';
-  const published = (await (await fetch(`${url}.sha256`)).text()).trim().split(/\s+/)[0]!;
-  console.log(`download ${url}`);
-  const body = await (await fetch(url)).arrayBuffer();
-  const got = sha256(body);
-  if (got !== published) throw new Error(`${url}: sha256 ${got} != published ${published}`);
-  return { version, archive: { url, sha256: got, size: body.byteLength, kind: 'zip', files: [{ from: tool, to: tool }] } };
-}
-
-interface GhAsset { name: string; size: number; digest?: string; browser_download_url: string }
-
-async function btbn(): Promise<Record<string, Archive[]>> {
-  const rels = await (await fetch('https://api.github.com/repos/BtbN/FFmpeg-Builds/releases?per_page=5', { headers: { accept: 'application/vnd.github+json' } })).json() as { tag_name: string; assets: GhAsset[] }[];
-  const rel = rels.find(r => r.tag_name.startsWith('autobuild-'));
-  if (!rel) throw new Error('BtbN: no autobuild release');
-  const sums = await (await fetch(rel.assets.find(a => a.name === 'checksums.sha256')!.browser_download_url)).text();
-  const out: Record<string, Archive[]> = {};
-  const pick = (os: string, triple: string, ext: 'tar.xz' | 'zip', exe: string) => {
-    const re = new RegExp(`^ffmpeg-n${FFMPEG_MAJOR.replace('.', '\\.')}[^-]*-\\d+-g[0-9a-f]+-${os}-gpl-${FFMPEG_MAJOR.replace('.', '\\.')}\\.${ext.replace('.', '\\.')}$`);
-    const a = rel.assets.find(x => re.test(x.name));
-    if (!a?.digest?.startsWith('sha256:')) throw new Error(`BtbN ${os}: no asset with a digest in ${rel.tag_name}`);
-    const digest = a.digest.slice(7);
-    const line = sums.split('\n').find(l => l.trim().endsWith(a.name));
-    if (!line || line.split(/\s+/)[0] !== digest) throw new Error(`BtbN ${a.name}: GitHub digest and checksums.sha256 differ`);
-    const top = a.name.replace(/\.(tar\.xz|zip)$/, '');
-    out[triple] = [{ url: a.browser_download_url, sha256: digest, size: a.size, kind: ext, files: [{ from: `${top}/bin/ffmpeg${exe}`, to: `ffmpeg${exe}` }, { from: `${top}/bin/ffprobe${exe}`, to: `ffprobe${exe}` }] }];
-  };
-  pick('linux64', 'x86_64-unknown-linux-gnu', 'tar.xz', '');
-  pick('linuxarm64', 'aarch64-unknown-linux-gnu', 'tar.xz', '');
-  pick('win64', 'x86_64-pc-windows-msvc', 'zip', '.exe');
-  return out;
-}
-
-export async function build(): Promise<ToolsManifest> {
-  const targets: Record<string, Archive[]> = {};
-  let version = '?';
-  for (const [arch, triple] of [['arm64', 'aarch64-apple-darwin'], ['amd64', 'x86_64-apple-darwin']] as const) {
-    const ff = await riedl(arch, 'ffmpeg'), fp = await riedl(arch, 'ffprobe');
-    version = ff.version;
-    targets[triple] = [ff.archive, fp.archive];
-  }
-  Object.assign(targets, await btbn());
-  return {
-    generated: new Date().toISOString().slice(0, 10),
-    ffmpeg: {
-      version, license: 'GPL-3.0-or-later (ffmpeg built with GPL components)', licenseUrl: 'https://ffmpeg.org/legal.html',
-      sources: { macos: 'https://ffmpeg.martin-riedl.de/', linux: 'https://github.com/BtbN/FFmpeg-Builds', windows: 'https://github.com/BtbN/FFmpeg-Builds' },
-      targets,
-    },
-    chrome: {
-      endpoint: 'https://googlechromelabs.github.io/chrome-for-testing/last-known-good-versions-with-downloads.json', channel: 'Stable',
-      platforms: { 'aarch64-apple-darwin': 'mac-arm64', 'x86_64-apple-darwin': 'mac-x64', 'x86_64-unknown-linux-gnu': 'linux64', 'x86_64-pc-windows-msvc': 'win64' },
-      macTeamId: 'EQHXZ8M8AV', windowsSigner: 'Google LLC',
-      license: 'Chromium BSD-style license and third-party notices; Google Chrome for Testing terms', licenseUrl: 'https://github.com/GoogleChromeLabs/chrome-for-testing#readme',
-    },
-  };
-}
-
-if (import.meta.main) {
-  if (process.argv.includes('--check')) {
-    const m = await Bun.file(MANIFEST).json() as ToolsManifest;
-    let bad = 0;
-    for (const [t, list] of Object.entries(m.ffmpeg.targets)) for (const a of list) {
-      const r = await fetch(a.url, { method: 'HEAD' });
-      console.log(`${r.ok ? 'ok ' : 'BAD'} ${t} ${a.url}`);
-      if (!r.ok) bad++;
-    }
-    process.exit(bad ? 1 : 0);
-  }
-  const m = await build();
-  writeFileSync(MANIFEST, JSON.stringify(m, null, 2) + '\n');
-  console.log(`wrote ${MANIFEST} (ffmpeg ${m.ffmpeg.version}, ${Object.keys(m.ffmpeg.targets).length} targets)`);
-}
diff --git a/tsconfig.json b/tsconfig.json
index 85a64b5..ad2288a 100644
--- a/tsconfig.json
+++ b/tsconfig.json
@@ -10,8 +10,7 @@
     "noImplicitOverride": true,
     "noEmit": true,
     "skipLibCheck": true,
-    "resolveJsonModule": true,
-    "allowImportingTsExtensions": true
+    "resolveJsonModule": true
   },
   "include": ["cli", "tests", "tools", "templates/storebound.config.ts", "examples/demo-game/storebound.config.ts", "examples/demo-game/serve.ts", "examples/demo-app/storebound.config.ts", "examples/demo-app/serve.ts", "templates/profiles/*/storebound.config.ts", "media/teaser/render.ts"]
 }