Make the desktop app buildable on Linux

[NishanthNixx]

Everything needed to produce a Linux build. No CI/CD changes — builds are taken manually.

The one real blocker

keyring was pinned to apple-native, so the crate simply doesn't compile on Linux. Split it per target:

[target.'cfg(target_os = "macos")'.dependencies]
keyring = { version = "3", features = ["apple-native"] }

[target.'cfg(target_os = "linux")'.dependencies]
keyring = { version = "3", features = ["sync-secret-service"] }

db/device_key.rs needed no changes — it already uses only the portable Entry API, so the same code hits the macOS Keychain or the Linux Secret Service (GNOME Keyring / KWallet).

Deliberately not linux-native: that stores in kernel keyutils, which is session-scoped. A lost SQLCipher key means a user loses their local database.

Also in here

• Bundle: added deb + appimage targets and the PNG icons Linux needs — the icons were already in the repo, just never referenced.
• Top bar: the 92px traffic-light inset was applied on any desktop. titleBarStyle/trafficLightPosition are macOS-only, so on Linux that was an empty gap beside a native GTK title bar. Now gated to macOS.
• RELEASING.md: Linux build + verification steps, including the libdbus-1-dev build dep the new backend pulls in.

Verification (all from macOS — no Linux machine needed)

• cargo check passes on macOS → the mac build is not broken
• cargo metadata --filter-platform x86_64-unknown-linux-gnu → keyring + dbus-secret-service resolve, security-framework correctly absent
• cargo metadata --filter-platform aarch64-apple-darwin → no dbus crates leaking into the mac graph
• tsc clean

Cargo.lock gains dbus-secret-service 4.1.0 and zeroize_derive 1.5.0.

Not done / known follow-ups

• Not built or run on Linux yet. The keyring path is the one thing that can compile fine and still fail at runtime — it needs a real desktop session. Test: create a note → reboot → confirm it's still there.
• latest.json clobbering: the manifest is shared across platforms, so publishing Linux with --clobber would erase the darwin-* entries and silently break macOS auto-update. Needs merging, not overwriting, before Linux ships. Documented in RELEASING.md.
• Only AppImage can self-update; .deb is manual-install only.

🤖 Generated with Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
mydevtools-tech	Ready	Preview	Aug 20, 2026 7:35am

[github-actions]

ThreatCrush Security Scan

0 finding(s)

No findings.