refactor(desktop): lock renderer root architecture

.github/workflows/ci.yml

@@ -141,6 +141,20 @@ jobs:
         if: steps.plan.outputs.asf_source == 'true'
         run: npm run check:asf-source
 
+      # Parsed dependency rules and an exact legacy-debt ledger keep the
+      # renderer root from absorbing new feature or Desktop ownership while
+      # the existing AppShell is migrated behind stable boundaries.
+      - name: Check renderer architecture
+        if: steps.plan.outputs.code == 'true'
+        env:
+          BASE_SHA: ${{ github.event_name == 'push' && github.event.before || github.event.pull_request.base.sha }}
+        run: |
+          if [[ -n "$BASE_SHA" && ! "$BASE_SHA" =~ ^0+$ ]]; then
+            npm run check:renderer-architecture -- --base "$BASE_SHA"
+          else
+            npm run check:renderer-architecture
+          fi
+
       - name: Lint
         if: steps.plan.outputs.code == 'true'
         run: npm run lint

apps/desktop/e2e/sidebar-geometry.spec.ts

@@ -44,7 +44,7 @@ import { expect, test } from './fixtures';
 import {
   SESSION_LIST_EXPANDED_MAX_WIDTH,
   SESSION_LIST_EXPANDED_MIN_WIDTH,
-} from '../src/renderer/features/session-navigation/model/session-list-layout';
+} from '../src/renderer/features/session-navigation/testing';
 import type { Locator, Page } from '@playwright/test';
 
 async function revealPopulatedSidebar(page: Page): Promise<Locator> {

apps/desktop/package.json

@@ -16,6 +16,7 @@
     "storybook": "storybook dev -p 6006 -c .storybook",
     "build-storybook": "storybook build -c .storybook --output-dir storybook-static",
     "smoke:storybook": "node ../../scripts/storybook-visual-smoke.mjs",
+    "check:architecture": "node --test scripts/check-renderer-architecture.test.mjs && node scripts/check-renderer-architecture.mjs",
     "build": "npm run build:resources && npm run build:main && npm run build:preload && npm run build:overlay && npm run build:renderer",
     "build:resources": "node scripts/copy-runtime-filesystem-worker.mjs",
     "build:test": "npm run build:main && npm run build:preload && npm run build:overlay",
@@ -24,7 +25,7 @@
     "build:main": "tsc -p tsconfig.main.json",
     "build:preload": "esbuild src/preload/preload.ts --bundle --platform=node --format=cjs --outfile=dist/preload/preload.cjs --external:electron",
     "build:overlay": "node ../../scripts/build-cursor-overlay.mjs",
-    "build:renderer": "vite build && node ../../scripts/check-third-party-notices.mjs",
+    "build:renderer": "vite build && node scripts/check-renderer-entry-output.mjs && node ../../scripts/check-third-party-notices.mjs",
     "build:workspace-deps": "npm --workspace @maka/core run build && npm --workspace @maka/storage run build && npm --workspace @maka/mcp run build && npm --workspace @maka/runtime run build && npm --workspace @maka/runtime-host run build && npm --workspace @maka/computer-use run build && npm --workspace @maka/ui run build",
     "package:macos-arm64": "electron-builder --config electron-builder.config.mjs --mac --arm64 --publish never",
     "package:windows-x64": "electron-builder --config electron-builder.config.mjs --win --x64 --publish never",