desktop: tri-platform window chrome, packaging and draft-release CI

electron/main.cjs

@@ -258,8 +258,16 @@ function createWindow(url) {
 		// (band 0–59.5, pill box 19–39.5) — y 22.5 lands the circles at
 		// 29.25, exactly on the pill. Wordmark gutter: components/sidebar.tsx.
 		// Dragging comes from the renderer's .lh-drag bands (app/globals.css).
-		titleBarStyle: "hiddenInset",
-		trafficLightPosition: { x: 16, y: 22.5 },
+		...(process.platform === "darwin"
+			? { titleBarStyle: "hiddenInset", trafficLightPosition: { x: 16, y: 22.5 } }
+			: {
+				titleBarStyle: "hidden",
+				// Native min/max/close on the right; the renderer reserves their
+				// actual width via env(titlebar-area-*), not a guessed gutter.
+				titleBarOverlay: { color: "#141414", symbolColor: "#e5e5e5", height: 60 },
+				// Keep the custom bar alone; Alt reveals the native menu.
+				autoHideMenuBar: true,
+			}),
 		webPreferences: {
 			contextIsolation: true,
 			sandbox: true,
@@ -361,7 +369,9 @@ const ZOOM_LADDER = [0.75, 0.9, 1, 1.1, 1.25, 1.5, 1.75, 2];
  * Feed: GitHub Releases (electron-builder.yml publish → app-update.yml,
  * baked + signed into the bundle). macOS needs the app signed (it is —
  * Developer ID) and updates ride the zip target (Squirrel.Mac); blockmaps
- * give differential downloads for free.
+ * give differential downloads for free. Windows uses NSIS; Linux uses
+ * AppImage or DebUpdater (6.8.9 supports deb; installation can request
+ * administrator permission via the package manager — owner 2026-10-11).
  *
  * Hard rules:
  *  - DEV NEVER UPDATES: !app.isPackaged skips the updater entirely — the

electron/preload.cjs

@@ -4,6 +4,9 @@
  * on (electron/main.cjs), so this file is the renderer's entire access to
  * Electron — keep it a minimal, explicit API surface.
  *
+ *   window.lh.platform — read-only OS identity for native window-control
+ *   gutters (darwin: left traffic lights; win32/linux: right overlay).
+ *
  *   window.lh.expandWindow() — widen the window to the sidebar auto-close
  *   threshold (928px) when the sidebar is opened below it. The main
  *   process clamps: no-op if the window is already wide enough.
@@ -25,6 +28,7 @@
 const { contextBridge, ipcRenderer } = require("electron");
 
 contextBridge.exposeInMainWorld("lh", {
+	platform: process.platform,
 	expandWindow: () => ipcRenderer.send("lh:expand-window"),
 	onZoom: (cb) => {
 		const listener = (_event, factor) => cb(factor);