feat(lifecycle): notify and offer restart on in-place package upgrade

dpkg/rpm replace app.asar via rename() while the main process keeps
its in-memory JS. Any window opened after the swap loads HTML/asset
files fresh from disk, where the hashed asset filenames now point at
v(N+1) bundles that the in-memory v(N) IPC and preload layers don't
match. Symptoms observed across recent reports: Quick Entry rendering
as raw JS text, About dialog showing minified source, and Ctrl+Q
intermittently failing — anything where a post-swap window load
crosses the version boundary.

macOS / Windows clients get this from Squirrel; Linux deb/RPM has no
equivalent, so we watch the file ourselves and surface a click-to-
restart notification. AppImage is unaffected (squashfs mount stays
pinned to the running file's contents); Nix store paths are immutable
until GC, so the running inode also stays valid until explicit
relaunch. The watcher noop-quiet on those targets is deliberate.

Implementation: stat-baseline app.asar at first require('electron'),
watch the parent dir (file-level fs.watch loses the inode across
rename-replace; inotify on the dir reports the new entry via
IN_MOVED_TO), filename-filter, debounce 5s past the last event to
clear dpkg's .dpkg-new → rename dance, compare ino+mtime to confirm
a real change, then show a Notification deferred behind whenReady.
Click → app.relaunch(); app.quit().

Co-Authored-By: Claude <[email protected]>

Author: lizthegrey

scripts/frame-fix-wrapper.js

@@ -654,6 +654,96 @@ X-GNOME-Autostart-enabled=true
         console.log('[Autostart] XDG Autostart shim installed');
       }
 
+      // Detect in-place package upgrade and prompt for restart.
+      // dpkg/rpm replace app.asar via rename(); the running main
+      // process keeps its in-memory JS, but any BrowserWindow opened
+      // after the swap reads HTML/assets fresh from disk, where the
+      // hashed asset filenames already point at v(N+1) bundles the
+      // in-memory v(N) IPC and preload no longer match. Symptoms
+      // observed: Quick Entry rendering as raw JS text, About
+      // dialog showing minified source, Ctrl+Q intermittently
+      // failing — anything where the post-swap window load crosses
+      // the version boundary. macOS / Windows handle this via
+      // Squirrel; Linux deb/RPM has no equivalent, so we watch the
+      // file ourselves and surface a notification. AppImage is
+      // unaffected (squashfs mount stays pinned to the running
+      // file's contents); Nix store paths are immutable until GC,
+      // so the running inode also stays valid until the user
+      // explicitly relaunches.
+      if (process.platform === 'linux') {
+        try {
+          const fs = require('fs');
+          const asarPath = path.join(process.resourcesPath, 'app.asar');
+          let baseline = null;
+          try { baseline = fs.statSync(asarPath); } catch { /* not present */ }
+          if (baseline) {
+            let notified = false;
+            let debounceTimer = null;
+            const promptRestart = () => {
+              if (notified) return;
+              let cur;
+              try { cur = fs.statSync(asarPath); } catch { return; }
+              // Compare both inode (rename-replace path) and mtime
+              // (in-place rewrite path) so we catch either upgrade
+              // shape. Touching the file with no real content change
+              // would still fire — tolerable; the restart is a no-op
+              // for the user, and dpkg/rpm don't do that in practice.
+              if (cur.ino === baseline.ino
+                && cur.mtimeMs === baseline.mtimeMs) {
+                return;
+              }
+              notified = true;
+              console.log(
+                '[Frame Fix] app.asar replaced — prompting restart');
+              const show = () => {
+                try {
+                  const n = new result.Notification({
+                    title: 'Claude Desktop has been updated',
+                    body: 'Click to restart and apply the update.',
+                  });
+                  // Linux libnotify ignores Electron's `actions`
+                  // (macOS-only per the Notification docs), so the
+                  // whole-notification click is the only affordance.
+                  n.on('click', () => {
+                    result.app.relaunch();
+                    result.app.quit();
+                  });
+                  n.show();
+                } catch (err) {
+                  console.warn(
+                    '[Frame Fix] Restart notification failed:',
+                    err.message);
+                }
+              };
+              if (result.app.isReady()) show();
+              else result.app.whenReady().then(show);
+            };
+            // Watch the parent dir, not the file: fs.watch on the
+            // file loses the inode across a rename-replace, but the
+            // dir watcher reports the new entry via inotify
+            // IN_MOVED_TO / IN_CREATE. Filter by filename so we
+            // ignore unrelated activity in the resources dir.
+            const watcher = fs.watch(path.dirname(asarPath),
+              (_evt, filename) => {
+                if (filename !== 'app.asar') return;
+                if (debounceTimer) clearTimeout(debounceTimer);
+                // dpkg writes app.asar.dpkg-new then renames; rpm
+                // and Nix have similar multi-stage swaps. 5s of
+                // post-event quiet covers the slowest of these
+                // without being noticeably late.
+                debounceTimer = setTimeout(promptRestart, 5000);
+              });
+            // Don't keep the event loop alive on the watcher alone;
+            // the app's other handles drive the lifetime.
+            watcher.unref();
+            console.log('[Frame Fix] Upgrade watcher armed:', asarPath);
+          }
+        } catch (err) {
+          console.warn('[Frame Fix] Upgrade watcher failed to arm:',
+            err.message);
+        }
+      }
+
       console.log('[Frame Fix] Patches built successfully');
     }