docs: document Electron desktop app improvements

Document comprehensive desktop app improvements across security, platform lifecycle, and polish:

Security (P0):
- CSP headers, navigation origin validation, setWindowOpenHandler restrictions
- URL scheme validation on shell.openExternal (http/https/mailto only)
- Global uncaughtException/unhandledRejection handlers

Platform Lifecycle (P0):
- Minimum window size (960x600), macOS dock behavior, dock icon restoration
- Theme change listener syncs with OS dark/light mode

Professional Polish (P1):
- Cross-platform menus (Windows/Linux/macOS) with GitHub Help links
- System tray with Show Window/Quit context menu
- Non-blocking update notification banner from GitHub Releases
- Persistent zoom level and window state

Nice-to-Have (P2):
- Dock badge (macOS) and taskbar flash (Windows) on notifications
- Global hotkey Cmd/Ctrl+Shift+T for window focus

Updated: README.md desktop section, CLAUDE.md packages/desktop docs, packages/desktop/README.md with comprehensive feature list and updated dev/build commands.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: bobbyjohnstx

CLAUDE.md

@@ -105,6 +105,14 @@ SolidJS + TailwindCSS v4 web app. Connects to the tinycode API server. Used by b
 
 Electron shell wrapping `packages/app`. Run with `bun run --cwd packages/desktop dev`.
 
+**Key implementation files:**
+- **Security** (`src/main/window.ts`): Content Security Policy headers, navigation origin validation, `setWindowOpenHandler` preventing uncontrolled new windows, and `shell.openExternal` URL scheme validation (http/https/mailto only)
+- **System tray** (`src/main/tray.ts`): Cross-platform tray integration with Show Window and Quit context menu actions
+- **Application menus** (`src/main/menu.ts`): Cross-platform menus for Windows/Linux/macOS with Help menu linking to GitHub (repo, discussions, issues). No longer macOS-only
+- **Update notification** (`packages/app/src/components/update-notification-banner.tsx`): Non-blocking slide-in banner notifying about available updates from GitHub Releases. Includes i18n and ARIA accessibility
+- **Global exception handling** (`src/main/index.ts`): Captures `uncaughtException` and `unhandledRejection` globally
+- **Platform lifecycle**: Minimum window size 960x600, macOS dock icon restoration, theme change listener for OS dark/light mode sync, persistent zoom level and window state
+
 ### `packages/plugin` — Plugin SDK
 
 Source for `@tinycode/plugin`. Provides the public plugin API.

README.md

@@ -18,7 +18,17 @@ The primary interface is the **terminal UI (TUI)** — a full-featured interacti
 
 For teams or remote access, tinycode also ships a **web UI** (SolidJS + TailwindCSS) that connects to the tinycode API server. Open `http://localhost:4096` after starting the server, or run `bun dev web` to launch both. The web UI provides the same conversation, agent, and tool capabilities in a browser tab.
 
-A **standalone desktop app** (Electron) is available for macOS, Windows, and Linux. It wraps the web UI in a native window with system tray integration. Run `bun run --cwd packages/desktop dev` to launch in development, or build distributable binaries with `bun run --cwd packages/desktop build`.
+A **standalone desktop app** (Electron) is available for macOS, Windows, and Linux. It wraps the web UI in a native window with system tray integration, auto-updates via GitHub Releases, and platform-specific features. Run `bun run --cwd packages/desktop dev` to launch in development, or build distributable binaries with `bun run --cwd packages/desktop build`.
+
+**Desktop app features:**
+- **System tray integration**: Access tinycode from the menu bar (macOS) or system tray (Windows/Linux) with Show/Hide and Quit actions
+- **Global hotkey** (Cmd/Ctrl+Shift+T): Bring the window to front or minimize it without closing the app
+- **Auto-updates**: Automatically checks for new releases on GitHub and notifies you with an in-app banner
+- **Platform-specific behaviors**: 
+  - macOS: Closing the window keeps the app running in the dock; Cmd+Q quits fully. Dock badge shows notification count
+  - Windows/Linux: App menu with Help links to GitHub (repo, discussions, issues). Taskbar flashes on background notifications
+- **Persistent settings**: Zoom level and window state persist across app restarts
+- **Theme sync**: Automatically detects OS dark/light mode changes and updates the app appearance
 
 ### IDE Integration (ACP)
 

packages/desktop/README.md

@@ -1,19 +1,39 @@
 # tinycode Desktop
 
-The tinycode Desktop app, built with Electron.
+The tinycode Desktop app, built with Electron. Wraps the web UI in a native window with system tray integration, auto-updates, and platform-specific features for macOS, Windows, and Linux.
+
+## Features
+
+- **System tray integration**: Access tinycode from the menu bar (macOS) or system tray (Windows/Linux)
+- **Global hotkey** (Cmd/Ctrl+Shift+T): Bring the window to front or minimize
+- **Auto-updates**: Checks GitHub Releases for updates and notifies via in-app banner
+- **Cross-platform menus**: Application menus with Help links to GitHub (repo, discussions, issues)
+- **Theme sync**: Automatically detects OS dark/light mode changes
+- **Persistent settings**: Zoom level and window state saved across restarts
+- **Security**: Content Security Policy headers, navigation origin validation, URL scheme validation on external links
+- **Platform-specific behavior**:
+  - macOS: Closing the window keeps the app running in the dock. Cmd+Q quits fully. Dock badge shows notification count.
+  - Windows/Linux: Taskbar flashes on background notifications
 
 ## Development
 
+From the repo root:
+
 ```bash
+# Install dependencies
 bun install
-bun dev
+
+# Launch Electron app in development
+bun run --cwd packages/desktop dev
 ```
 
 ## Build
 
-Run the `build` script to build the app's JS assets, then `package` to
-bundle the assets as an application. The resulting app will be in `dist/`.
+From the repo root:
 
 ```bash
-bun run build && bun run package
+# Build web UI assets and package as distributable app
+bun run --cwd packages/desktop build && bun run --cwd packages/desktop package
 ```
+
+The resulting app will be in `packages/desktop/out/` with platform-specific installers and binaries ready for distribution.