IPC bridge and command map

How the React webview talks to the Rust backend, and where each Tauri command lives.

IPC bridge and command map

The bridge

All Rust↔webview traffic goes through Tauri’s invoke(). The TypeScript side is centralized in apps/desktop/src/lib/tauri-ipc.ts:

safeInvoke<T>(cmd, args) — wraps invoke() and throws a distinguishable TAURI_NOT_AVAILABLE error when window.__TAURI_INTERNALS__ is absent (plain browser, SSR, Storybook). Callers render a fallback UI on that error.
isTauriAvailable() — the guard every component should check before relying on a real backend.
Typed interfaces (SessionRow, ReviewFinding, RepoProject, …) that match the Rust structs in db/queries.rs exactly. Keep both sides in sync when you change a struct.

The Rust side registers every command in apps/desktop/src-tauri/src/main.rs via tauri::generate_handler![…], delegating to modules under apps/desktop/src-tauri/src/commands/.

Command map (by subsystem)

Command modules live in apps/desktop/src-tauri/src/commands/. Count is approximate (commands are #[tauri::command]-annotated fns).

Subsystem	Module(s)	Notes
Review	`review.rs`	Local diff / PR review, save findings, fix worktrees.
Unpack	`unpack*.rs` (~15 modules)	Scan, inventory, deep/fast graph, snapshot, qa, tests, analysis, outcome, export. See repo-unpacked.md.
History	`history.rs`, `history_graph.rs`, `history_query.rs`, `history_read.rs`, `history_summary_graph.rs`, `history_evidence.rs`	Session indexing, release-history graph, causal queries, evidence import.
Structural graph	`structural_graph/`, `graph_trust.rs`, `blast_radius.rs`	Canonical syntax-aware graph, trust, impact. See graph-and-history.md.
MCP access	`mcp_access.rs`	Enable/disable + metadata for the sidecar. See mcp-sidecar.md.
Agent runner	`agent.rs`, `agent_terminal.rs`	Spawn CLI agents, PTY terminals.
Sessions / telemetry	`sessions.rs`, `session_adapters.rs`, `accounts.rs`, `intel.rs`, `observability.rs`, `dora.rs`	JSONL transcript indexing, usage dedup, by-model/by-agent attribution, DORA.
Synthetic QA	`synthetic_qa.rs`	Fixture/Playwright/external-skill QA runs.
Audience validation	`audience_validation.rs`	Audience runs + responses, ShipRank diagnostics.
Taste verdict	`taste.rs`	Deterministic per-project quality grade.
T-Rex	`trex_watcher.rs`	PR watchers with retry + per-PR base-branch inference.
Agent memories	`agent_memories.rs`	Memory entries, copy-as-markdown, git-diff-vs-HEAD.
Repo workspace	`repo_workspace.rs`, `unpack_agent_activity.rs`	Repo projects, activity feed.
Files / git	`files.rs`, `git.rs`, `git_metadata.rs`	File reads, git CLI, metadata.
Preferences / setup	`preferences.rs`, `setup.rs`	User settings, first-run setup.
Evidence patterns	`evidence_pattern.rs`, `cli_stream.rs`	ast-grep evidence, CLI stream.
Sandbox	`sandbox.rs`	Isolated fix-execution sandbox.
Resources / secrets	`resources.rs`, `secret_policy.rs`	Resource chips, secret-policy enforcement.
SaaS Maker	`saas_maker.rs`	Fleet project linking. Has no top-nav tab; `/fleet` redirects to `/` (see product/surfaces.md).
Perf bench	`perf_bench.rs`	`#[ignore]`d release-mode benchmarks. See development/performance.md.

Conventions

One module per subsystem. Don’t pile new commands into mod.rs; create a focused module and register it in main.rs.
Types live in db/queries.rs and are mirrored in tauri-ipc.ts. When you change a Rust struct, update the TS interface in the same change.
No IPC for hot paths. The webview keeps working state in React; IPC is for persistence, file I/O, git, and subprocess spawning. Don’t add an IPC call for something React can compute locally.