fix(desktop): harden update and quit flows
Merged
WA
2mo ago+1103+1103+0123456789012345678901234567890123456789-400-400-012345678901234567890123456789
Summary
- require signed, notarized desktop releases and verify bundled native binaries before publication
- validate update manifests and installer URLs before download, with fallback to the next valid release
- confirm restart only after a downloaded update is ready and preserve normal quit safeguards
- harden desktop permissions, child-window unload handling, and off-screen window restoration
- share one race-safe update-state hook across the desktop gate, settings, and sidebar
Type of Change
- Bug fix
Testing
- 1,455 desktop tests
- 51 focused update feed, route, hook, and sidebar tests
- monorepo type-check, lint, 45 audits, desktop bridge/IPC checks, workflow YAML validation, and native-binary checksum verification
Checklist
- Code follows project style guidelines
- Self-reviewed my changes
- Tests added/updated and passing
- No new warnings introduced
- I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)