feat(macos): configuration window + curl-backed macOS updater (#71)

docs/RELEASING.md

@@ -84,5 +84,8 @@ Notes:
 - AUR publish is best-effort: the workflow retries transient SSH clone/push failures, then warns and leaves the GitHub Release green if AUR still fails. Follow up with a manual `git push aur master` from the AUR checkout when needed.
 - Required GitHub Actions secret: `AUR_SSH_PRIVATE_KEY`. Add the matching public key to your AUR account before relying on the automation.
 - Release and prerelease workflows upload updater metadata (`*.yml`) and blockmaps (`*.blockmap`) alongside platform artifacts. Do not remove those files while `electron-updater` is enabled.
+- macOS tray app updates use the standard `electron-updater`/Squirrel path. Keep `latest-mac.yml`, the macOS ZIP, and ZIP blockmap published; Squirrel uses the ZIP payload even when the DMG remains the user-facing installer.
+- macOS update metadata and full ZIP downloads are routed through `/usr/bin/curl` before Squirrel installation to avoid Electron main-process network crashes on update checks.
+- Local macOS build-output apps outside `/Applications` or `~/Applications` skip native update checks. To validate auto-update end to end, install the signed and notarized app bundle into one of those Applications folders and point it at a published updater feed.
 - The first updater-enabled release cannot update older installs automatically. Users need one manual install to get the updater code.
 - Stable auto-update checks ignore beta/RC prereleases by default. Set `updates.channel` to `"prerelease"` on a test install when validating beta/RC updater behavior.

docs/plans/config-settings-window.md

@@ -0,0 +1,70 @@
+# Config Settings Window
+
+read_when: changing config UI, config save behavior, or config docs
+
+## Intent
+
+Add a dedicated Electron settings window for editing canonical config values without exposing the historical layout mistakes in `config.jsonc`.
+
+The UI groups options by workflow:
+
+- Viewing
+- Mining & Anki
+- Playback & Sources
+- Input
+- Integrations
+- Tracking & App
+- Advanced
+
+Each field maps back to its current raw config path. The presentation layer must stay separate from generated config-template sections.
+
+## Sources
+
+- Canonical defaults: `DEFAULT_CONFIG`
+- Existing option descriptions/enums: `CONFIG_OPTION_REGISTRY`
+- UI registry: `src/config/settings/registry.ts`
+- JSONC save path: `src/config/settings/jsonc-edit.ts`
+- Window runtime: `src/main/runtime/config-settings-window.ts`
+
+## Save Contract
+
+Settings writes use `jsonc-parser.modify`, not `JSON.stringify`.
+
+Required behavior:
+
+- Preserve comments, trailing commas, unrelated keys, and hidden legacy keys.
+- Reset removes the explicit path so defaults resolve normally.
+- Validate the candidate config before writing.
+- Reject warnings caused by modified fields.
+- Preserve unrelated existing warnings and return them in the snapshot.
+- Write atomically, reload `ConfigService`, classify with existing hot-reload logic, and apply live changes where supported.
+- Never return secret values to the renderer; snapshots only expose configured/not-configured state.
+
+## Hidden Compatibility Keys
+
+Do not expose these as first-class controls:
+
+- `ankiConnect.deck`
+- Legacy top-level Anki migration fields such as `wordField`, `audioField`, media-generation aliases, and behavior aliases
+- Legacy `ankiConnect.nPlusOne.*` aliases except canonical `nPlusOne.nPlusOne` and `nPlusOne.minSentenceWords`
+- Deprecated Lapis sentence-card fields
+- `youtubeSubgen.primarySubLanguages`
+- `anilist.characterDictionary.refreshTtlHours`
+- `anilist.characterDictionary.evictionPolicy`
+- `jellyfin.accessToken`
+- `jellyfin.userId`
+- `controller.buttonIndices` as a normal editable field
+
+## Verification
+
+Minimum targeted checks:
+
+- `bun test src/config/settings/registry.test.ts src/config/settings/jsonc-edit.test.ts src/settings/settings-model.test.ts src/main/runtime/config-settings-window.test.ts`
+- `bun run test:config`
+- `bun run typecheck`
+- `bun run build`
+
+If docs changed:
+
+- `bun run docs:test`
+- `bun run docs:build`