plan: one app, open while held, installers and updaters (D-22, D-23, D-24)

The owner, 2026-10-18: one app to simplify installing and updating.
One wanderbooks executable whose modes run as separate processes; the
books open while the app, an agent session (its stdio bridge), a serve
terminal or a CLI command holds them, and close after the last (still
no background service); a signed, notarized dmg and a per-user Windows
installer that update themselves, AUR, apt, dnf and a self-updating
AppImage on Linux. New section 3.9 (leases, the helper's clean host
start, local sockets instead of TCP, restarts, one version at a time,
the server's format-upgrade gate); P2, P11 and the decisions follow.
Five review rounds, the last clean.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01T3gXMVt7XJPi6ens1or9Dj

plan/STATUS.md

@@ -55,10 +55,13 @@ the MCP, no TINs), privately, by decision, never in this public repo
 (plan 5.6). P1+ must reproduce them except where the P3 change log
 adjudicates a difference (cash flow, defect 1).
 
-**Then:** P2 (serve locally, started by hand in a terminal with no
-background service, D-21 (owner, 2026-10-18); cutover; ask the owner the two open plain-English cutover questions
+**Then:** P2 (one `wanderbooks` executable, D-22; the books open while
+the app, an agent session or a terminal holds them, no background
+service, D-21/D-23 (owner, 2026-10-18); cutover; ask the owner the two open plain-English cutover questions
 in plan section 10.3 first; Q-2 is answered, D-20), P3-P11 as planned (P11, added 2026-10-17: one app for Windows, Mac and
-Linux; P2 gained backup restore and the viewer's menu).
+Linux, with installers and updaters per D-24: `.dmg`, a per-user Windows
+installer, AUR, apt, dnf and AppImage; P2 gained backup restore and the
+viewer's menu).
 
 ---