docs: sync after #448 and #446 (desktop downloads, run button, release gate)

[Sev7eNup]

What & why

Daily documentation-drift sweep over the pull requests active since 2026-09-28T01:03:39Z (#439, #441, #442, #443, #444, #445, #446, #447, #448). Two merged pull requests left documentation claims behind; each correction below names the pull request that caused it.

Caused by #448 — the Electron shell now allows same-origin downloads, a fourth release gate landed, and globals resolve inside a custom activity definition:

Doc surface	Was	Now
deploy/desktop/README.md (hardening bullet)	listed downloads among the things blocked outright	downloads allowed only when the whole URL chain stays on the app's own origin, destination chosen by Electron's native Save As dialog
content/de/deployment/desktop.md, content/en/deployment/desktop.md	"Pop-ups, Downloads und Berechtigungsanfragen sind deaktiviert" / "pop-ups, downloads and permission requests are disabled"	downloads split into their own bullet with the same-origin + Save As rule
deploy/desktop/README.md (dev-loop note)	tray → Quit Electron	tray → Quit NodePilot
CLAUDE.md § Production Deployment	"Ohne grünen Lauf aller drei kein Tag"	names scripts/release-lab/computer-use/ and counts vier
docs/custom-activities.md	globals only described for the node's config	new bullet: a {{globals.X}} appearing only in the ScriptTemplate or an input default resolves; missing or undecryptable fails the step before the script runs
content/de/concepts/data-bus.md, content/en/concepts/data-bus.md	"auch innerhalb eines runScript" / "including inside a runScript"	adds custom activities to the same guarantee

Caused by #446 — the designer's run button was renamed from "Test run" to "Run" (Ausführen):

Doc surface	Was	Now
docs/workflow-designer-features.md § 11	Test run (Ctrl+Enter)	Run (Ctrl+Enter)
docs/workflow-designer-features.md shortcut table	Test run / debug run	Run / debug run
content/en/designer/properties-modes.md	Test run: runs the workflow as a test; "Start a test run"; "A running test can be cancelled"	Run:; "Start a run"; "A running execution can be cancelled"
content/de/designer/properties-modes.md	Test Run:; "Testlauf starten"; "Ein laufender Test kann abgebrochen werden"	Ausführen:; "Ausführung starten"; "Eine laufende Ausführung kann abgebrochen werden"

How

Verified against the checked-out main (b49402d), not against the pull request diffs. The run-button label comes from testRun in src/nodepilot-ui/src/i18n/locales/{de,en}/editor.json, used as the button title/aria-label in header/RunControls.tsx; the download rule from hardenSession in src/nodepilot-desktop/src/security.ts (origin check across contents.getURL(), item.getURL() and the full getURLChain()); the globals contract from CustomActivityExecutor.FindUnavailableGlobals, which fails the step before ResolveScriptVariables runs; the fourth gate from RELEASING.md step 6 and scripts/release-lab/README.md.

Re-checked every count-bearing claim these pull requests could have invalidated — all match the code: 27 activity types (ActivityCatalog.cs), 10 skins (themeStore.ts), 242 vitest files and 77 E2E specs (CLAUDE.md, already updated by #446). CLAUDE.md is 45,888 bytes against the 50,000-byte cap in DocumentationCountsTests.

#447 carried its own documentation: docs/claude-reference.md and both copies of activities-reference.md already describe the new startProgram drain semantics consistently, so nothing there needed an edit. #441–#445 are dependency bumps with no user-facing surface, and #439 is the previous sweep's own pull request (it touches only src/nodepilot-ui/CLAUDE.md, so there is no overlap with this branch).

Three findings were deliberately not applied and are filed as docs-drift issues for triage: the resolved audit open question in docs/roadmap.md, the desktop README's known-gaps wording, and the new count-bearing claims in scripts/release-lab/README.md that sit outside DocumentationCountsTests and use a different basis for "Activity types" and "themes" than every other surface.

Testing

Documentation only — no code, no configuration, no test files touched. Both language copies of every changed site page were edited symmetrically, and no cross-reference or page was added or removed.

• New/updated tests cover the change — n/a, documentation only
• dotnet test (affected backend suites) green — not run: no .NET SDK in this container and the suites target net10.0-windows. DocumentationCountsTests is the relevant guard; its inputs were verified by hand above. Covered by CI.
• npm run test:run — not run: src/nodepilot-docs-ui/node_modules is absent in this container. Covered by CI.

Checklist

• Branched off main; no direct commits to main
• Docs updated (README / CLAUDE.md / docs/ / docs-ui content/de/ and content/en/) if behavior or config changed — this change is the documentation update, applied bilingually

🤖 Generated with Claude Code

https://claude.ai/code/session_018Hdn3USoyZs9C2DQ3LboAA

---

Generated by Claude Code