Enable reliable native window dragging and hand authenticated sessions into the selected node's complete web experience

Hop-State: A_06FPG2TG1QGADXPK4Z3JRK8
Hop-Proposal: R_06FPG2STVE3YFFK1MMCXN7R
Hop-Task: T_06FPG0V9Q74727J7JHZVD20
Hop-Attempt: AT_06FPG0V9Q4RS0GRDVR1GXVG

README.md

@@ -4,9 +4,9 @@ A Tauri desktop client for the Synapsis federated social network. The first-run
 
 1. Choose and verify a Synapsis node.
 2. Sign in with an existing account or create a new account on that node.
-3. Enter the signed-in desktop shell.
+3. Continue directly into that node's real signed-in web experience.
 
-Node and authentication requests run in Rust so independent nodes do not need to opt into browser CORS. Session cookies are held by the native HTTP client and are not exposed to the React webview.
+Node and authentication requests run in Rust so independent nodes do not need to opt into browser CORS. After authentication, HttpOnly session cookies are securely handed to the native webview and the selected node's actual web client opens in the same window.
 
 ## Develop
 
@@ -30,8 +30,8 @@ cargo test --manifest-path src-tauri/Cargo.toml
 
 - Animated signal-field launch and onboarding visuals.
 - Node URL normalization and `/api/node` verification.
-- Existing-session detection while the app is running.
+- Persistent web-session detection across app launches.
 - Cookie-based sign in, account creation, and sign out.
-- A desktop navigation shell ready for the feed and other iOS features.
+- The selected node's complete website experience after authentication.
 
-The node address persists between launches. Authentication cookies currently live for the duration of the application process; durable, encrypted session restoration is a later security-focused addition.
+The node address and HttpOnly website session persist between launches using the native webview's cookie store.