Desktop: notifications, tray, auto-update, installer; web: sliding sync, voice messages, notifications

Web client (also what the desktop app runs):

- Simplified Sliding Sync (MSC4186) when the homeserver advertises
  org.matrix.simplified_msc3575. src/matrix/sliding.ts answers the SDK's
  GET /sync with a sliding sync request and rewrites the response into
  the /sync shape, as the Android app does; the SDK's own sliding sync
  mode doesn't sort thread replies into threads. 20 rooms first, then
  every room (up to 1000); to_device, e2ee, account data, receipts and
  typing extensions; M_UNKNOWN_POS starts a new connection. The SDK's
  /members?at=<sync token> drops the token, which here is ours. Settings
  can switch back to /sync.
- Notifications for new messages and incoming calls while Warp isn't in
  front, by the account's push rules, evaluated after decryption. The
  browser's Notification API once turned on in Settings, or the desktop
  app's bridge (window.warpDesktop). One per room; a click opens it.
- Voice messages: record from the composer, sent as m.audio with
  MSC3245's voice marker and MSC1767's duration and waveform (encrypted
  in encrypted rooms); a waveform player in the timeline.
- @warp/ui: a slot for extra composer buttons; bell-off, play and pause
  icons.

Desktop app:

- System notifications through Wails' notifications service, fed by
  /_desktop/bridge.js (/_desktop/notify, JSON only); clicking one shows
  the window and opens the room.
- Tray icon with Open and Quit; closing the window hides it (a one-time
  notification says so), File > Quit ends it. The page title goes to
  the window and the tray tooltip, the unread count to the taskbar or
  Dock badge.
- Auto-update from a Wails update manifest at DESKTOP_UPDATE_URL: a quiet
  check a minute after start and every six hours, a notification when a
  newer version exists, Help > Check for updates opens the update window.
  Optional signature key (DESKTOP_UPDATE_KEY). Linux package installs
  leave updates to the package manager. build/manifest writes the
  manifest.
- Per-user NSIS installer (make desktop-windows-installer), the macOS
  bundle zipped for the updater, a desktop CI job, and a Desktop release
  workflow that builds all three platforms and the manifest.

Tested on Windows against a local homeserver: sliding sync with E2EE,
threads and a server restart; notifications (toast history), close to
tray, relaunch restoring the window; voice messages recorded, sent and
played, encrypted too; the update check finding a newer version. Not
tested: installing an update, the NSIS installer, CI, macOS and Linux.
Code signing needs certificates and isn't done.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

apps/desktop/internal/shell/shell.go

@@ -54,6 +54,10 @@ type Options struct {
 	// HTTPClient is used to find and check a homeserver on the setup
 	// page. Defaults to a client with a 15 second timeout.
 	HTTPClient *http.Client
+	// Notify shows a system notification; nil drops them.
+	Notify func(Notification) error
+	// SetTitle gets the page's title whenever it changes.
+	SetTitle func(string)
 }
 
 // Shell is the webview's http.Handler.
@@ -81,12 +85,12 @@ func New(opts Options) (*Shell, error) {
 		opts.HTTPClient = &http.Client{Timeout: 15 * time.Second}
 	}
 	if opts.Client != nil {
-		client, ok, err := withLinkScript(opts.Client)
+		client, ok, err := withDesktopScripts(opts.Client)
 		if err != nil {
 			return nil, err
 		}
 		if !ok {
-			opts.Logger.Warn("the client's index.html has no <head>; links to other sites will open in the app's window")
+			opts.Logger.Warn("the client's index.html has no <head>; links will open in the app's window, and there are no notifications")
 		}
 		opts.Client = client
 	}
@@ -147,12 +151,17 @@ func (s *Shell) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 	case openPath:
 		s.serveOpen(w, r)
 		return
+	case notifyPath:
+		s.serveNotify(w, r)
+		return
+	case titlePath:
+		s.serveTitle(w, r)
+		return
 	case linkScriptPath:
-		h := w.Header()
-		h.Set("Content-Type", "text/javascript; charset=utf-8")
-		h.Set("Cache-Control", "no-cache")
-		h.Set("X-Content-Type-Options", "nosniff")
-		_, _ = w.Write([]byte(linkScript))
+		writeScript(w, linkScript)
+		return
+	case bridgeScriptPath:
+		writeScript(w, bridgeScript)
 		return
 	}
 
@@ -170,6 +179,14 @@ func (s *Shell) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 	a.handler.ServeHTTP(w, r)
 }
 
+func writeScript(w http.ResponseWriter, script string) {
+	h := w.Header()
+	h.Set("Content-Type", "text/javascript; charset=utf-8")
+	h.Set("Cache-Control", "no-cache")
+	h.Set("X-Content-Type-Options", "nosniff")
+	_, _ = w.Write([]byte(script))
+}
+
 func (s *Shell) serveOpen(w http.ResponseWriter, r *http.Request) {
 	if r.Method != http.MethodPost {
 		w.Header().Set("Allow", "POST")
@@ -232,7 +249,10 @@ func (s *Shell) serveSetup(w http.ResponseWriter, r *http.Request) {
 			s.renderSetup(w, setupPage{Server: input, Current: s.Homeserver(), Error: err.Error()})
 			return
 		}
-		if err := s.opts.Store.Save(Settings{Homeserver: base}); err != nil {
+		// The rest of the settings stay; a damaged file is replaced.
+		st, _ := s.opts.Store.Load()
+		st.Homeserver = base
+		if err := s.opts.Store.Save(st); err != nil {
 			// The choice still holds for this run.
 			s.opts.Logger.Warn("can't save the settings", "err", err)
 		}