The web app serves both customer and admin experiences.

The API owns auth, billing, compatibility, remote config, and support primitives.

The worker isolates queue-driven side effects and scheduled jobs.

Source-of-truth responsibilities and domain boundaries for each service.

How bind/bootstrap/session flows work for the managed extension client.