VITRONITOR

Push JS-only updates without an app-store review or a forced restart — across all four targets. iOS uses self-hosted Capgo; Electron uses a custom shell auto-updater plus a renderer state machine; web ships through the Service Worker. One signing key signs them all. You own the full publish → sign → serve → verify loop. No Capgo Cloud, no EAS Update, no GitHub Releases dependency. Bundles ship to any S3-compatible bucket. The rare, durable differentiator — every other piece of this stack is increasingly commoditized; this one isn't.

Every write goes through @tanstack/offline-transactions — a unified mutation outbox, persisted to durable SQLite on every platform. OPFS-backed wa-sqlite on web and Electron renderer, native SQLite via @capacitor-community/sqlite on iOS and Android. Writes survive full app crashes, drain on reconnect with idempotency keys, and dead-letter via NonRetriableError on 404/410/422 instead of looping forever. The read path is symmetric: @tanstack/query-db-collection fetches GET /api/sync/:table through TanStack Query, and Supabase Realtime broadcasts trigger invalidateQueries for cross-device propagation. Reference example: a notes table with full CRUD + RLS + soft-delete.

Capacitor 8 with a custom-plugin pattern handles iOS and Android. Raw Electron 41 for desktop — not the Capacitor-Community-Electron wrapper, which loses tray, multi-window, IPC depth, and safeStorage. Two purpose-built native shells sharing one Vite/React renderer. System tray, deep-link handler, single-instance lock, IPC-backed safeStorage credentials, keyboard shortcuts, offline launch — Electron as Electron, not as a Capacitor flavour.

The repo's reference server is Hono, but the client only assumes the HTTP+JSON contracts in docs/BACKEND_CONTRACTS.md. Implement them on Bun, Cloudflare Workers, Deno, Express, Fastify, Elysia, Next.js API routes, FastAPI, Rails, Go, Rust, .NET, PHP — anything. The auth provider (Supabase) and object store (S3-compatible) are also swappable.