One Worker. Web and mobile both call it.

TanStack Start, shadcn, i18n, SEO. File routes. The landing and this architecture session are public. Dashboard routes sit behind auth.

Expo Router, NativeTabs, the same oRPC client type. Passkeys and 2FA share the Worker session story.

oRPC routers and zod contracts. MCP tools and webhooks live here. The client type is import type only.

Compares the running app version to admin config and tells the client whether to prompt.

Better Auth with Drizzle, passkeys, 2FA, admin impersonation. Session cookies hit the Worker, not a second auth host.

Shared tsconfig and the oxlint client-boundary rules. No runtime.

Drizzle schema on Neon. The schema barrel is the one sanctioned aggregate, and only server code can reach it.

One sendEmail seam. Templates are pure. Production uses Cloudflare Email or Resend. Dev prints to the console.

env/server is Worker-only. env/web is the public subset. Native has its own leaf for Expo.

Shared error codes and i18n keys. Clients map codes to strings. They never import the server error factory.

Flag registry is a leaf. The DB repo is a separate subpath so a client import cannot pull Drizzle.

i18next plus a React provider. Server language is resolved from cookie and query.

pnpm setup. Rename, env files, Neon, GitHub and Worker secrets.

R2 through files-sdk. Uploads are namespaced per user. The Worker mints URLs or proxies bytes.

shadcn and ReUI primitives. Tokens in globals.css. This is the visual authority for web.

iOS and Android home-screen todo widgets. Gated by a feature flag and native rebuild.

agent-plugin. Agent Plugins 1.0 package: MCP over OAuth, draft-only writes, and skills. Lives in plugins/agent-plugin.