Hide the Desktop window on close and confirm interruptible quits
Hide the Desktop window on close and confirm interruptible quits
Closing the Desktop window destroyed it. On macOS the Host kept running but the Dock rebuilt a fresh page, losing the current session, draft, and scroll position; on Windows the close quit the application and cut running tasks without any warning. Quit itself never asked, although the Host knows which agents, jobs, and scheduled reminders would stop.
English
Problem
Closing the Desktop window destroyed it. On macOS the Host kept running but the Dock rebuilt a fresh page, losing the current session, draft, and scroll position; on Windows the close quit the application and cut running tasks without any warning. Quit itself never asked, although the Host knows which agents, jobs, and scheduled reminders would stop.
Decision
Closing the main window hides it on both platforms; the page and the Host keep running and the next show presents the same document. Windows gets a permanent tray icon (single click opens, context menu offers Open and Quit) because Windows users expect × to quit and need a visible way back, plus a first-close acknowledgement through the shared update-dialog overlay before hiding. Only Confirm records acknowledgement; cancellation keeps the window visible. Closing sends no system notification. macOS keeps the Dock and ships no menu bar icon. Closing the welcome window before the workspace opens quits on Windows and drops the unused main window on macOS, so the Dock rebuilds the welcome.
Every ordinary quit entry asks the Host over the private IPC channel for two facts: active tasks under the update-restart rule, and armed scheduled reminders reported by the schedule family of workspace/session-activity for the sessions loaded in this run. Both absent, the quit proceeds silently; otherwise a native message box without an owner window shows one of three fixed explanations with Quit as the default and Cancel on Esc. Repeated quit requests join the open box, the copy is frozen while it is open, and approval does not re-inspect. A Host that is not ready cannot run tasks and the quit proceeds; an inspection failure or a missed two-second deadline counts as running tasks because a needless prompt is cheaper than a silent interruption. The installer restart, fatal recovery, the development restart command, and operating-system session end skip the confirmation.
The Windows tray bitmaps are rendered from the vector icon at seven sizes and committed as an ICO; the confirmation on Windows uses the application icon in a task dialog and stays light because the control does not follow the application theme. The installer and uninstaller copy for a running application points at the tray.
Alternatives considered
Keep quitting on close and add a confirmation there. It asks on every close, and Windows users would still lose background work whenever they dismissed the window. Hiding matches the product requirement that tasks continue.
Render the quit confirmation in the shell's HTML overlay. The overlay needs a visible parent window and a working renderer; the quit must also work when the window is hidden or the page is stuck, so the native dialog is the reliable choice.
Reuse the update-tasks IPC request with a flag. The quit needs a second fact and a shorter deadline; a distinct request keeps the update admission lock semantics untouched and lets both share one correlation id space.
Downscale one large bitmap for the tray. Rasterizing the vector source per size keeps edges crisp at 100 % through 400 % display scale, which a single downscale does not guarantee.
Consequences
Users can close the window freely; background tasks and scheduled reminders continue, and reopening restores the same page. Quitting warns only when it interrupts something. Windows carries a tray icon for the whole run, and a hidden window that finishes a user-initiated update download defers its install confirmation until the window is shown again. Reminders in sessions never loaded during the run are neither counted nor resumed until those sessions open, and Desktop does not enable scheduled tasks by default, so the scheduled-task copy appears only once that feature is on.
Verification covers the four inspection outcomes, inspection failure and deadline, each quit entry's bypass or confirmation, the close-to-hide path with the tray and the first-close acknowledgement, the deferred update prompt, the Host-side inspection, the IPC correlation and deadline, and the committed tray icon's bitmap set. Windows tray and dialog behavior needs a manual pass on a Windows machine at several display scales.
中文
问题
关闭 Desktop 窗口会销毁它。macOS 上 Host 继续运行，但 Dock 会重建一个全新页面，丢失当前会话、草稿和滚动位置；Windows 上关闭即退出应用，正在运行的任务被直接切断，没有任何提示。退出本身从不询问，尽管 Host 知道哪些 agent、后台任务和定时提醒会因此停止。
决策
两个平台上关闭主窗口都只隐藏它；页面和 Host 继续运行，下次显示仍是同一个文档。Windows 增加常驻托盘图标（单击打开，右键菜单提供"打开"和"退出"），因为 Windows 用户习惯 × 即退出，需要一个看得见的回路；首次关闭时先通过复用的更新弹窗确认，再隐藏窗口。只有点击“确认”才记录已读；取消时保持窗口可见。关闭窗口不发送系统通知。macOS 沿用 Dock，不提供菜单栏图标。进入工作区前关闭欢迎窗口，Windows 上退出，macOS 上丢弃未使用的主窗口，让 Dock 重建欢迎窗口。
所有普通退出入口都通过私有 IPC 通道向 Host 询问两项事实：按更新重启口径判定的运行中任务，以及本次运行中已加载会话里由 workspace/session-activity 的 schedule family 报告的已挂定时器的提醒。两项都没有时直接退出；否则弹出一个没有父窗口的原生消息框，显示三种固定说明之一，"退出"为默认按钮，Esc 对应"取消"。重复的退出请求并入已打开的弹框，弹框打开期间文案冻结，批准后不再重新查询。Host 未就绪时不可能有任务在跑，直接退出；查询失败或超过两秒截止时间按运行中任务处理，因为多提示一次的代价低于无声中断。安装更新的重启、致命错误恢复、开发版重启命令和操作系统会话结束跳过确认。
Windows 托盘位图由矢量图标按七种尺寸分别渲染并提交为 ICO；Windows 上的确认框在任务对话框中显示应用图标，且始终为浅色，因为该系统控件不跟随应用主题。安装程序和卸载程序针对应用仍在运行的文案指向托盘。
备选方案
保留关闭即退出，只在关闭时加确认。 每次关闭都要询问，而 Windows 用户只要想收起窗口，后台工作就仍会丢失。隐藏才符合"任务继续运行"的产品要求。
用壳的 HTML 遮罩渲染退出确认框。 遮罩需要可见的父窗口和正常工作的渲染进程；退出必须在窗口隐藏或页面卡死时也能完成，因此原生对话框才是可靠选择。
在 update-tasks IPC 请求上加一个标志复用。 退出需要第二项事实和更短的截止时间；独立请求不触碰更新准入锁的语义，同时两者共用一个关联 id 空间。
为托盘缩小一张大位图。 按尺寸分别栅格化矢量源，才能在 100% 到 400% 缩放下都保持边缘清晰，单次缩小无法保证这一点。
影响
用户可以随意关闭窗口；后台任务和定时提醒继续运行，重新打开时恢复同一页面。退出只在会中断工作时提醒。Windows 在整个运行期间携带托盘图标；窗口隐藏期间完成的用户主动发起的更新下载，把安装确认推迟到窗口再次显示时。本次运行中从未加载的会话里的提醒既不计入，也要等到这些会话打开后才会继续，而 Desktop 默认未开启定时任务，因此定时任务文案只在该功能开启后出现。
验证覆盖四种查询结果、查询失败与截止时间、每个退出入口的跳过或确认、带托盘和首次关闭确认的关闭即隐藏路径、推迟的更新提示、Host 侧查询、IPC 关联与截止时间，以及已提交托盘图标的位图集合。Windows 托盘和对话框的表现需要在 Windows 机器上以多种显示缩放人工验收。