refactor(ipc): consolidate the desktop bridge

[charleslpan]

Summary

• define every renderer-to-main method, channel, transport, and wire guard in one typed bridge manifest
• split renderer-safe wire vocabulary into domain modules and derive the preload bridge from the manifest
• register all main-process handlers through one trusted sender/argument/result boundary and reject direct IPC registrations
• keep bridge context outside optional domain arguments and make invalid invokes reject explicitly

Verification

• ./scripts/check.sh
• ./scripts/verify.sh
• incremental desktop typechecks after each logical commit

Commit structure

1. typed bridge manifest and domain wire contracts
2. renderer imports moved to explicit domain boundaries
3. centralized main/preload registration and repository enforcement
4. focused bridge-context and invalid-request regression fix from review

Automated visual evidence

Download the deterministic macOS evidence · workflow run

• Commit: 8455ab9e9c9535e480bcedad8745b2bfed80ade3
• Scenario: smoke
• Physical-notch check: not performed by CI

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
luke-web	Skipped		Aug 24, 2026 8:00pm

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 2 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit d5f0b98. Configure here.}