[brianjfox]

Closes #95

Stacked on #101, which it shares the document pane's tab selection with; its base should move to main once #101 merges.

Items 1, 2, 4 and 5 of the issue; item 3 (mockup pictures for screens the check cannot reach) is left for a follow-up.

What changed

Coder side (workflows/coder/starter/AGENTS.md, workflows/coder/check/check-app.ts)

• The manual is part of done: the app ships README.md and docs/USER-MANUAL.md, written once the features work and before the app is filed, and the done sentence names both. The manual is for the people who use the app, in plain, non-technical standard American English, never a developer's view of the code.
• check-app reports a missing manual as a docs problem and goes on, so the rest of the check still runs and every page's picture is saved under docs/manual/ whether or not the manual shows it yet. A manual with no picture is reported the same way instead of stopping the run.
• Once a manual exists it is held to the app: a picture whose name matches no page the check opened fails (the page moved or is gone), and an area of the app that was opened but the manual never shows fails, an area being a page's first path segment so one picture covers every record a list opens onto. The rule wording in the checklist says all this.

Hub and UI

• packages/schemas/src/artifact.ts: UserManual, the markdown with its pictures keyed as the markdown names them, as data URLs.
• apps/hub/src/artifacts/design-draft.ts: readUserManual reads docs/USER-MANUAL.md and the pictures it shows from the coder's workspace with the same symlink-safe reads the draft uses; manualPictureRefs and manualPictures are shared with the filed-app path. Sizes are bounded.
• apps/hub/src/artifacts/service.ts and routes.ts: GET /api/tenants/:t/projects/:p/manual serves the live coder's manual, else the one filed with the latest app from the bundle's binaries.
• packages/client: manual(tenantId, projectId).
• apps/web: a User Manual tab in the document pane beside the live preview once a manual exists, rendered with its pictures in place, read again every minute while the coder works. The pane's tab selection moved into a selectTab helper to make room without crossing the complexity limit.

How it was verified

• tsc --noEmit passes for the hub, the web app and the client; oxlint --deny-warnings and Prettier pass on every changed file.
• bun --conditions=intx-src test passes for apps/web/src/pages/workspace, apps/hub/src/artifacts (two new tests for the picture reader) and apps/hub/src/builds: 97 tests.
• check-app ran through the hub's own sandbox executor against the app built on 2026-11-02, in a throwaway hub container with the new file in place. Without a manual it reported "docs/USER-MANUAL.md is missing" and still opened the app and saved docs/manual/home.png. With a manual naming a picture of a page that does not exist, it reported that picture as of a page that may have moved or gone and the home page as not shown.

Replaces #96.

[corbits-triage]

Triage: Pass

No changes needed from you. A maintainer will review this pull request.

Triage will approve, request review.