fix launcher UI and game launch pipeline

docs/game-trust-boundary.md

@@ -33,10 +33,14 @@ real main class is `net.minecraftforge.installer.SimpleInstaller`, which
 supports this flag. **Empirically verified (2026-09-06)**: it refuses to
 target a directory unless a `launcher_profiles.json` stub already exists
 there ("you need to run the launcher first!") — `ensure_launcher_profiles_stub`
-writes a minimal one. It then fetches and patches vanilla itself; no
-pre-seeding needed. Its own downloads go straight to `maven.neoforged.net`/
-Mojang, outside our control — an accepted trust delegation to NeoForge's
-official tooling once the installer binary itself is verified.
+writes a minimal one. It fetches the inputs needed to patch vanilla, but does
+not guarantee that the complete vanilla runtime library set is present.
+After installation, `mojang::ensure_client_jar` and `ensure_libraries` always
+verify and download the complete merged launch set, including LWJGL and its
+platform natives. The installer's own downloads go straight to
+`maven.neoforged.net`/Mojang, outside our control — an accepted trust
+delegation to NeoForge's official tooling once the installer binary itself is
+verified.
 
 Also verified: the resulting
 `libraries/net/neoforged/neoforge/<ver>/neoforge-<ver>-client.jar` (the

docs/launcher-architecture.md

@@ -9,6 +9,10 @@ launch either with a real Microsoft account or with a local offline profile
 (nickname + deterministic offline UUID) — see `docs/game-trust-boundary.md`
 and `AGENTS.md`'s trust model section.
 
+The interface also shows a live Aeronautics player count from the fixed,
+read-only `https://shacraft.ru/api/online/aoc` endpoint. It is display-only:
+the result never controls files, versions, URLs, or the launch command.
+
 Not yet implemented: a user-selectable profile directory, a "reset managed
 files only" recovery action, and signed cross-platform release builds of the
 launcher itself. Do not represent these as completed in UI or release notes.
@@ -28,6 +32,7 @@ Game itself (never controlled by the manifest above)
   -> Java 21 via Adoptium if none installed (runtime.rs)
   -> NeoForge's own installer, run headlessly (neoforge.rs)
   -> generic inheritsFrom merge of the two version JSONs (mojang.rs)
+  -> SHA-1-verified merged libraries + platform natives (mojang.rs)
   -> real Microsoft/Xbox/Minecraft Services login (msa.rs)
   -> java process spawned with the merged classpath/args (launch.rs)
 ```