clawpad 0.4.10 → 0.4.12

package/.next/static/chunks/{webpack-d35467e84f0e8517.js → webpack-bae8b6e8f6434041.js}

@@ -1 +1 @@
-(()=>{"use strict";var e,t,r,o,n,a,i,l,c,d={},u={};function s(e){var t=u[e];if(void 0!==t)return t.exports;var r=u[e]={exports:{}},o=!0;try{d[e].call(r.exports,r,r.exports,s),o=!1}finally{o&&delete u[e]}return r.exports}s.m=d,e=[],s.O=(t,r,o,n)=>{if(r){n=n||0;for(var a=e.length;a>0&&e[a-1][2]>n;a--)e[a]=e[a-1];e[a]=[r,o,n];return}for(var i=1/0,a=0;a<e.length;a++){for(var[r,o,n]=e[a],l=!0,c=0;c<r.length;c++)(!1&n||i>=n)&&Object.keys(s.O).every(e=>s.O[e](r[c]))?r.splice(c--,1):(l=!1,n<i&&(i=n));if(l){e.splice(a--,1);var d=o();void 0!==d&&(t=d)}}return t},s.n=e=>{var t=e&&e.__esModule?()=>e.default:()=>e;return s.d(t,{a:t}),t},r=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,s.t=function(e,o){if(1&o&&(e=this(e)),8&o||"object"==typeof e&&e&&(4&o&&e.__esModule||16&o&&"function"==typeof e.then))return e;var n=Object.create(null);s.r(n);var a={};t=t||[null,r({}),r([]),r(r)];for(var i=2&o&&e;"object"==typeof i&&!~t.indexOf(i);i=r(i))Object.getOwnPropertyNames(i).forEach(t=>a[t]=()=>e[t]);return a.default=()=>e,s.d(n,a),n},s.d=(e,t)=>{for(var r in t)s.o(t,r)&&!s.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:t[r]})},s.f={},s.e=e=>Promise.all(Object.keys(s.f).reduce((t,r)=>(s.f[r](e,t),t),[])),s.u=e=>9352===e?"static/chunks/9352-dcb425f6cf5347f4.js":"static/chunks/"+(({234:"76567b6f",277:"54a60aa6",1375:"6be7e44c",2545:"c16f53c3",4034:"0cc5eebf",4758:"c0e397d0",5004:"70e0d97a"})[e]||e)+"."+({234:"f10e15270bb8b0cf",277:"867b5520f2f42695",1375:"8771fa8ed0278196",2545:"52cb4e268737986f",3678:"620cb571eead466f",4034:"810e51166712a4fc",4758:"4d79f4a4fe21a0b3",5004:"6903b8594c742784",6361:"30ea8932d09b0d43"})[e]+".js",s.miniCssF=e=>"static/css/"+({3266:"d37476854e9e226d",7105:"d64754055f7202fb",8425:"df8c8bd97929f65b"})[e]+".css",s.g=function(){if("object"==typeof globalThis)return globalThis;try{return this||Function("return this")()}catch(e){if("object"==typeof window)return window}}(),s.o=(e,t)=>Object.prototype.hasOwnProperty.call(e,t),o={},s.l=(e,t,r,n)=>{if(o[e])return void o[e].push(t);if(void 0!==r)for(var a,i,l=document.getElementsByTagName("script"),c=0;c<l.length;c++){var d=l[c];if(d.getAttribute("src")==e||d.getAttribute("data-webpack")=="_N_E:"+r){a=d;break}}a||(i=!0,(a=document.createElement("script")).charset="utf-8",a.timeout=120,s.nc&&a.setAttribute("nonce",s.nc),a.setAttribute("data-webpack","_N_E:"+r),a.src=s.tu(e)),o[e]=[t];var u=(t,r)=>{a.onerror=a.onload=null,clearTimeout(f);var n=o[e];if(delete o[e],a.parentNode&&a.parentNode.removeChild(a),n&&n.forEach(e=>e(r)),t)return t(r)},f=setTimeout(u.bind(null,void 0,{type:"timeout",target:a}),12e4);a.onerror=u.bind(null,a.onerror),a.onload=u.bind(null,a.onload),i&&document.head.appendChild(a)},s.r=e=>{"u">typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},s.tt=()=>(void 0===n&&(n={createScriptURL:e=>e},"u">typeof trustedTypes&&trustedTypes.createPolicy&&(n=trustedTypes.createPolicy("nextjs#bundler",n))),n),s.tu=e=>s.tt().createScriptURL(e),s.p="/_next/",a={8068:0},s.f.miniCss=(e,t)=>{if(a[e])t.push(a[e]);else 0!==a[e]&&({3266:1,7105:1,8425:1})[e]&&t.push(a[e]=new Promise((t,r)=>{var o,n=s.miniCssF(e),a=s.p+n;if(((e,t)=>{for(var r=document.getElementsByTagName("link"),o=0;o<r.length;o++){var n=r[o],a=n.getAttribute("data-href")||n.getAttribute("href");if("stylesheet"===n.rel&&(a===e||a===t))return n}for(var i=document.getElementsByTagName("style"),o=0;o<i.length;o++){var n=i[o],a=n.getAttribute("data-href");if(a===e||a===t)return n}})(n,a))return t();(o=document.createElement("link")).rel="stylesheet",o.type="text/css",o.onerror=o.onload=n=>{if(o.onerror=o.onload=null,"load"===n.type)t();else{var i=n&&("load"===n.type?"missing":n.type),l=n&&n.target&&n.target.href||a,c=Error("Loading CSS chunk "+e+" failed.\n("+l+")");c.code="CSS_CHUNK_LOAD_FAILED",c.type=i,c.request=l,o.parentNode.removeChild(o),r(c)}},o.href=a,function(e){if("function"==typeof _N_E_STYLE_LOAD){let{href:t,onload:r,onerror:o}=e;_N_E_STYLE_LOAD(0===t.indexOf(window.location.origin)?new URL(t).pathname:t).then(()=>null==r?void 0:r.call(e,{type:"load"}),()=>null==o?void 0:o.call(e,{}))}else document.head.appendChild(e)}(o)}).then(()=>{a[e]=0},t=>{throw delete a[e],t}))},i={8068:0,1817:0,3334:0},s.f.j=(e,t)=>{var r=s.o(i,e)?i[e]:void 0;if(0!==r)if(r)t.push(r[2]);else if(/^(1817|3266|3334|7105|8068|8425)$/.test(e))i[e]=0;else{var o=new Promise((t,o)=>r=i[e]=[t,o]);t.push(r[2]=o);var n=s.p+s.u(e),a=Error();s.l(n,t=>{if(s.o(i,e)&&(0!==(r=i[e])&&(i[e]=void 0),r)){var o=t&&("load"===t.type?"missing":t.type),n=t&&t.target&&t.target.src;a.message="Loading chunk "+e+" failed.\n("+o+": "+n+")",a.name="ChunkLoadError",a.type=o,a.request=n,r[1](a)}},"chunk-"+e,e)}},s.O.j=e=>0===i[e],l=(e,t)=>{var r,o,[n,a,l]=t,c=0;if(n.some(e=>0!==i[e])){for(r in a)s.o(a,r)&&(s.m[r]=a[r]);if(l)var d=l(s)}for(e&&e(t);c<n.length;c++)o=n[c],s.o(i,o)&&i[o]&&i[o][0](),i[o]=0;return s.O(d)},(c=self.webpackChunk_N_E=self.webpackChunk_N_E||[]).forEach(l.bind(null,0)),c.push=l.bind(null,c.push.bind(c)),s.nc=void 0})();
+(()=>{"use strict";var e,t,r,o,n,a,i,l,c,d={},u={};function s(e){var t=u[e];if(void 0!==t)return t.exports;var r=u[e]={exports:{}},o=!0;try{d[e].call(r.exports,r,r.exports,s),o=!1}finally{o&&delete u[e]}return r.exports}s.m=d,e=[],s.O=(t,r,o,n)=>{if(r){n=n||0;for(var a=e.length;a>0&&e[a-1][2]>n;a--)e[a]=e[a-1];e[a]=[r,o,n];return}for(var i=1/0,a=0;a<e.length;a++){for(var[r,o,n]=e[a],l=!0,c=0;c<r.length;c++)(!1&n||i>=n)&&Object.keys(s.O).every(e=>s.O[e](r[c]))?r.splice(c--,1):(l=!1,n<i&&(i=n));if(l){e.splice(a--,1);var d=o();void 0!==d&&(t=d)}}return t},s.n=e=>{var t=e&&e.__esModule?()=>e.default:()=>e;return s.d(t,{a:t}),t},r=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,s.t=function(e,o){if(1&o&&(e=this(e)),8&o||"object"==typeof e&&e&&(4&o&&e.__esModule||16&o&&"function"==typeof e.then))return e;var n=Object.create(null);s.r(n);var a={};t=t||[null,r({}),r([]),r(r)];for(var i=2&o&&e;"object"==typeof i&&!~t.indexOf(i);i=r(i))Object.getOwnPropertyNames(i).forEach(t=>a[t]=()=>e[t]);return a.default=()=>e,s.d(n,a),n},s.d=(e,t)=>{for(var r in t)s.o(t,r)&&!s.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:t[r]})},s.f={},s.e=e=>Promise.all(Object.keys(s.f).reduce((t,r)=>(s.f[r](e,t),t),[])),s.u=e=>9352===e?"static/chunks/9352-dcb425f6cf5347f4.js":"static/chunks/"+(({234:"76567b6f",277:"54a60aa6",1375:"6be7e44c",2545:"c16f53c3",4034:"0cc5eebf",4758:"c0e397d0",5004:"70e0d97a"})[e]||e)+"."+({234:"f10e15270bb8b0cf",277:"867b5520f2f42695",1375:"8771fa8ed0278196",2545:"52cb4e268737986f",3678:"620cb571eead466f",4034:"810e51166712a4fc",4758:"4d79f4a4fe21a0b3",5004:"6903b8594c742784",6361:"4027eebdd6a32ea5"})[e]+".js",s.miniCssF=e=>"static/css/"+({3266:"d37476854e9e226d",7105:"d64754055f7202fb",8425:"df8c8bd97929f65b"})[e]+".css",s.g=function(){if("object"==typeof globalThis)return globalThis;try{return this||Function("return this")()}catch(e){if("object"==typeof window)return window}}(),s.o=(e,t)=>Object.prototype.hasOwnProperty.call(e,t),o={},s.l=(e,t,r,n)=>{if(o[e])return void o[e].push(t);if(void 0!==r)for(var a,i,l=document.getElementsByTagName("script"),c=0;c<l.length;c++){var d=l[c];if(d.getAttribute("src")==e||d.getAttribute("data-webpack")=="_N_E:"+r){a=d;break}}a||(i=!0,(a=document.createElement("script")).charset="utf-8",a.timeout=120,s.nc&&a.setAttribute("nonce",s.nc),a.setAttribute("data-webpack","_N_E:"+r),a.src=s.tu(e)),o[e]=[t];var u=(t,r)=>{a.onerror=a.onload=null,clearTimeout(f);var n=o[e];if(delete o[e],a.parentNode&&a.parentNode.removeChild(a),n&&n.forEach(e=>e(r)),t)return t(r)},f=setTimeout(u.bind(null,void 0,{type:"timeout",target:a}),12e4);a.onerror=u.bind(null,a.onerror),a.onload=u.bind(null,a.onload),i&&document.head.appendChild(a)},s.r=e=>{"u">typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},s.tt=()=>(void 0===n&&(n={createScriptURL:e=>e},"u">typeof trustedTypes&&trustedTypes.createPolicy&&(n=trustedTypes.createPolicy("nextjs#bundler",n))),n),s.tu=e=>s.tt().createScriptURL(e),s.p="/_next/",a={8068:0},s.f.miniCss=(e,t)=>{if(a[e])t.push(a[e]);else 0!==a[e]&&({3266:1,7105:1,8425:1})[e]&&t.push(a[e]=new Promise((t,r)=>{var o,n=s.miniCssF(e),a=s.p+n;if(((e,t)=>{for(var r=document.getElementsByTagName("link"),o=0;o<r.length;o++){var n=r[o],a=n.getAttribute("data-href")||n.getAttribute("href");if("stylesheet"===n.rel&&(a===e||a===t))return n}for(var i=document.getElementsByTagName("style"),o=0;o<i.length;o++){var n=i[o],a=n.getAttribute("data-href");if(a===e||a===t)return n}})(n,a))return t();(o=document.createElement("link")).rel="stylesheet",o.type="text/css",o.onerror=o.onload=n=>{if(o.onerror=o.onload=null,"load"===n.type)t();else{var i=n&&("load"===n.type?"missing":n.type),l=n&&n.target&&n.target.href||a,c=Error("Loading CSS chunk "+e+" failed.\n("+l+")");c.code="CSS_CHUNK_LOAD_FAILED",c.type=i,c.request=l,o.parentNode.removeChild(o),r(c)}},o.href=a,function(e){if("function"==typeof _N_E_STYLE_LOAD){let{href:t,onload:r,onerror:o}=e;_N_E_STYLE_LOAD(0===t.indexOf(window.location.origin)?new URL(t).pathname:t).then(()=>null==r?void 0:r.call(e,{type:"load"}),()=>null==o?void 0:o.call(e,{}))}else document.head.appendChild(e)}(o)}).then(()=>{a[e]=0},t=>{throw delete a[e],t}))},i={8068:0,1817:0,3334:0},s.f.j=(e,t)=>{var r=s.o(i,e)?i[e]:void 0;if(0!==r)if(r)t.push(r[2]);else if(/^(1817|3266|3334|7105|8068|8425)$/.test(e))i[e]=0;else{var o=new Promise((t,o)=>r=i[e]=[t,o]);t.push(r[2]=o);var n=s.p+s.u(e),a=Error();s.l(n,t=>{if(s.o(i,e)&&(0!==(r=i[e])&&(i[e]=void 0),r)){var o=t&&("load"===t.type?"missing":t.type),n=t&&t.target&&t.target.src;a.message="Loading chunk "+e+" failed.\n("+o+": "+n+")",a.name="ChunkLoadError",a.type=o,a.request=n,r[1](a)}},"chunk-"+e,e)}},s.O.j=e=>0===i[e],l=(e,t)=>{var r,o,[n,a,l]=t,c=0;if(n.some(e=>0!==i[e])){for(r in a)s.o(a,r)&&(s.m[r]=a[r]);if(l)var d=l(s)}for(e&&e(t);c<n.length;c++)o=n[c],s.o(i,o)&&i[o]&&i[o][0](),i[o]=0;return s.O(d)},(c=self.webpackChunk_N_E=self.webpackChunk_N_E||[]).forEach(l.bind(null,0)),c.push=l.bind(null,c.push.bind(c)),s.nc=void 0})();

package/bin/clawpad.js

@@ -34,11 +34,21 @@ const CURRENT_VERSION = (() => {
     return "0.0.0";
   }
 })();
+const CURRENT_LAUNCHER_REALPATH = (() => {
+  try {
+    if (!process.argv[1]) return null;
+    return fs.realpathSync(process.argv[1]);
+  } catch {
+    return null;
+  }
+})();
 
 // ─── Arg Parsing ─────────────────────────────────────────
 const args = process.argv.slice(2);
 
 async function bootstrap() {
+  maybeHandoffToNewerInstall(args);
+
   // Handle Cloud Share Command
   if (args[0] === "share") {
     await startShare(args.slice(1));
@@ -173,6 +183,121 @@ function compareSemver(a, b) {
   return 0;
 }
 
+function parseCliPaths(output) {
+  return String(output || "")
+    .split(/\r?\n/g)
+    .map((line) => line.trim())
+    .filter(Boolean);
+}
+
+function collectCandidateClawpadExecutables() {
+  const candidates = [];
+  if (process.platform === "win32") {
+    const result = runBinary("where", ["clawpad"]);
+    if (result.ok) {
+      candidates.push(...parseCliPaths(result.stdout));
+    }
+  } else {
+    const result = runBinary("which", ["-a", "clawpad"]);
+    if (result.ok) {
+      candidates.push(...parseCliPaths(result.stdout));
+    }
+  }
+
+  // Include common global install locations in case shell lookup misses one.
+  candidates.push(
+    path.join(os.homedir(), ".local", "bin", "clawpad"),
+    "/opt/homebrew/bin/clawpad",
+    "/usr/local/bin/clawpad",
+  );
+
+  const dedup = new Set();
+  const existing = [];
+  for (const candidate of candidates) {
+    const resolved = String(candidate || "").trim();
+    if (!resolved || dedup.has(resolved)) continue;
+    dedup.add(resolved);
+    try {
+      fs.accessSync(resolved, fs.constants.X_OK);
+      existing.push(resolved);
+    } catch {
+      // ignore
+    }
+  }
+  return existing;
+}
+
+function resolveClawpadPackageInfo(executablePath) {
+  let launcherRealpath;
+  try {
+    launcherRealpath = fs.realpathSync(executablePath);
+  } catch {
+    return null;
+  }
+
+  let dir = path.dirname(launcherRealpath);
+  for (let i = 0; i < 8; i += 1) {
+    const pkgPath = path.join(dir, "package.json");
+    try {
+      const pkg = JSON.parse(fs.readFileSync(pkgPath, "utf8"));
+      if (pkg && pkg.name === "clawpad" && typeof pkg.version === "string") {
+        return {
+          executablePath,
+          launcherRealpath,
+          packageRoot: dir,
+          version: pkg.version,
+        };
+      }
+    } catch {
+      // continue walking up
+    }
+    const parent = path.dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return null;
+}
+
+function maybeHandoffToNewerInstall(cliArgs) {
+  if (process.env.CLAWPAD_HANDOFF_DONE === "1") return;
+  if (process.env.CLAWPAD_DISABLE_HANDOFF === "1") return;
+
+  // In source checkouts, keep local run behavior predictable for development.
+  try {
+    if (fs.existsSync(path.join(ROOT_DIR, ".git"))) return;
+  } catch {
+    // ignore
+  }
+
+  const currentVersion = CURRENT_VERSION;
+  const candidates = collectCandidateClawpadExecutables()
+    .map(resolveClawpadPackageInfo)
+    .filter(Boolean)
+    .filter((info) => info.launcherRealpath !== CURRENT_LAUNCHER_REALPATH);
+
+  if (candidates.length === 0) return;
+
+  candidates.sort((a, b) => compareSemver(b.version, a.version));
+  const best = candidates[0];
+  if (!best) return;
+  if (compareSemver(best.version, currentVersion) <= 0) return;
+
+  console.log(
+    `  🔁 Found newer ClawPad install (${best.version}). Relaunching from ${best.executablePath}...`,
+  );
+  const handoff = spawnSync(best.executablePath, cliArgs, {
+    stdio: "inherit",
+    windowsHide: true,
+    env: { ...process.env, CLAWPAD_HANDOFF_DONE: "1" },
+  });
+  if (handoff.error) {
+    console.warn(`  ⚠️  Relaunch failed: ${handoff.error.message}`);
+    return;
+  }
+  const code = typeof handoff.status === "number" ? handoff.status : 0;
+  process.exit(code);
+}
+
 async function checkForUpdates(currentVersion, platformProfile) {
   if (process.env.CLAWPAD_SKIP_UPDATE_CHECK === "1") return;
   if (process.env.CI === "1" || process.env.NODE_ENV === "test") return;
@@ -256,10 +381,13 @@ function normalizeScopes(raw) {
 }
 
 function scoreScopes(scopes) {
-  if (scopes.has("operator.admin")) return 100;
-  if (scopes.has("operator.write")) return 90;
-  if (scopes.has("operator.read")) return 20;
-  return 10;
+  let score = 10;
+  if (scopes.has("operator.read")) score += 100;
+  if (scopes.has("operator.write")) score += 200;
+  if (scopes.has("operator.admin")) score += 30;
+  if (scopes.has("operator.approvals")) score += 5;
+  if (scopes.has("operator.pairing")) score += 5;
+  return score;
 }
 
 function extractTokenFromEntry(entry) {
@@ -1328,6 +1456,98 @@ function writeOpenClawConfig(configPath, config) {
   fs.writeFileSync(configPath, `${serialized}\n`, "utf-8");
 }
 
+function hasRequiredOperatorScopes(scopeSet) {
+  return scopeSet.has("operator.read") && scopeSet.has("operator.write");
+}
+
+function normalizeScopeArray(raw, defaults = []) {
+  const scopes = normalizeScopes(raw);
+  if (scopes.size === 0 && Array.isArray(defaults)) {
+    for (const item of defaults) {
+      const normalized = String(item || "").trim().toLowerCase();
+      if (normalized) scopes.add(normalized);
+    }
+  }
+  return [...scopes];
+}
+
+function normalizeTokenEntry(entry) {
+  const token = extractTokenFromEntry(entry);
+  if (!token) return null;
+  const scopes =
+    entry && typeof entry === "object"
+      ? normalizeScopeArray(entry.scopes ?? entry.scope)
+      : [];
+  return {
+    token,
+    scopes,
+  };
+}
+
+function migrateLegacyGatewayAuthConfig(configPath, config) {
+  const auth = config?.gateway?.auth;
+  if (!auth || typeof auth !== "object") {
+    return { updated: false, config };
+  }
+
+  const defaults = ["operator.read", "operator.write", "operator.admin"];
+  const tokenEntries = Array.isArray(auth.tokens) ? auth.tokens.map(normalizeTokenEntry).filter(Boolean) : [];
+  const hasWritableToken = tokenEntries.some((entry) => hasRequiredOperatorScopes(new Set(entry.scopes)));
+  if (hasWritableToken) {
+    return { updated: false, config };
+  }
+
+  const directToken = normalizeToken(auth.token);
+  let updated = false;
+
+  if (directToken) {
+    const directScopes = normalizeScopeArray(auth.scopes ?? auth.scope, defaults);
+    const rebuiltTokens = [
+      { token: directToken, scopes: directScopes },
+      ...tokenEntries.filter((entry) => entry.token !== directToken),
+    ];
+
+    auth.tokens = rebuiltTokens;
+    delete auth.token;
+    delete auth.scope;
+    delete auth.scopes;
+    updated = true;
+  } else if (tokenEntries.length > 0) {
+    const [first, ...rest] = tokenEntries;
+    if (first) {
+      const merged = [...new Set([...first.scopes, ...defaults])];
+      auth.tokens = [{ token: first.token, scopes: merged }, ...rest];
+      updated = true;
+    }
+  }
+
+  if (!updated) {
+    return { updated: false, config };
+  }
+
+  writeOpenClawConfig(configPath, config);
+  return { updated: true, config };
+}
+
+function restartOpenClawGateway() {
+  const commands = [
+    "openclaw gateway restart",
+    "openclaw daemon restart",
+  ];
+  for (const cmd of commands) {
+    try {
+      execSync(cmd, {
+        stdio: "ignore",
+        timeout: 20000,
+      });
+      return true;
+    } catch {
+      // try next command
+    }
+  }
+  return false;
+}
+
 function resolveClawpadPagesDir(config) {
   const explicit = process.env.CLAWPAD_PAGES_DIR;
   if (explicit && explicit.trim()) {
@@ -2119,7 +2339,8 @@ async function main(
   }
   console.log();
 
-  const { config } = loadOpenClawConfig();
+  const loadedConfig = loadOpenClawConfig();
+  let config = loadedConfig.config;
   const openclawInstall = await ensureOpenClawCli(platformProfile, {
     autoYes,
     noPrompt,
@@ -2142,6 +2363,19 @@ async function main(
       console.log(`  ✅ OpenClaw CLI detected (${versionText}).`);
     }
   }
+  if (openclawInstall.installed) {
+    const migration = migrateLegacyGatewayAuthConfig(loadedConfig.configPath, config);
+    config = migration.config;
+    if (migration.updated) {
+      console.log("  🔐 Upgraded OpenClaw gateway auth to scoped token format.");
+      if (restartOpenClawGateway()) {
+        console.log("  ♻️  Restarted OpenClaw gateway to apply scoped token config.");
+      } else {
+        console.warn("  ⚠️  Updated config but could not restart gateway automatically.");
+        console.warn("     Run: openclaw gateway restart");
+      }
+    }
+  }
   let pagesDir = resolveClawpadPagesDir(config);
   const migration = await maybeMigrateLegacyPages(config, pagesDir, {
     hasExplicitPagesDir,

package/bin/postinstall-repair.js

@@ -0,0 +1,79 @@
+#!/usr/bin/env node
+
+const fs = require("fs");
+const os = require("os");
+const path = require("path");
+
+function isGlobalInstall() {
+  return (
+    process.env.npm_config_global === "true" ||
+    process.env.npm_config_location === "global"
+  );
+}
+
+function isManagedClawpadLinkTarget(targetPath) {
+  const normalized = String(targetPath || "").replace(/\\/g, "/");
+  return normalized.includes("/node_modules/clawpad/bin/clawpad.js");
+}
+
+function repairLocalBinSymlink() {
+  const binTarget = path.resolve(__dirname, "clawpad.js");
+  if (!fs.existsSync(binTarget)) return;
+
+  const localBinDir = path.join(os.homedir(), ".local", "bin");
+  const launcherLink = path.join(localBinDir, "clawpad");
+
+  try {
+    fs.mkdirSync(localBinDir, { recursive: true });
+  } catch {
+    return;
+  }
+
+  let stat = null;
+  try {
+    stat = fs.lstatSync(launcherLink);
+  } catch {
+    stat = null;
+  }
+
+  if (!stat) {
+    try {
+      fs.symlinkSync(binTarget, launcherLink);
+      console.log(`clawpad: linked ${launcherLink} -> ${binTarget}`);
+    } catch {
+      // ignore
+    }
+    return;
+  }
+
+  if (!stat.isSymbolicLink()) {
+    return;
+  }
+
+  let currentTarget;
+  try {
+    currentTarget = path.resolve(path.dirname(launcherLink), fs.readlinkSync(launcherLink));
+  } catch {
+    return;
+  }
+
+  if (currentTarget === binTarget) return;
+  if (!isManagedClawpadLinkTarget(currentTarget)) return;
+
+  try {
+    fs.unlinkSync(launcherLink);
+    fs.symlinkSync(binTarget, launcherLink);
+    console.log(`clawpad: updated ${launcherLink} -> ${binTarget}`);
+  } catch {
+    // ignore
+  }
+}
+
+function main() {
+  if (process.env.CLAWPAD_SKIP_POSTINSTALL_REPAIR === "1") return;
+  if (!isGlobalInstall()) return;
+  if (process.platform === "win32") return;
+  repairLocalBinSymlink();
+}
+
+main();

package/desktop/main.mjs

@@ -0,0 +1,246 @@
+import { app, BrowserWindow, dialog, shell, utilityProcess } from "electron";
+import fs from "node:fs";
+import path from "node:path";
+import http from "node:http";
+import net from "node:net";
+import { fileURLToPath } from "node:url";
+
+const DEV_URL = process.env.CLAWPAD_ELECTRON_URL || "http://localhost:3000";
+const DEFAULT_PORT = 3333;
+const MAX_PORT_ATTEMPTS = 80;
+const SERVER_READY_TIMEOUT_MS = 45_000;
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+let mainWindow = null;
+let serverProcess = null;
+let quitting = false;
+
+function isDev() {
+  return !app.isPackaged;
+}
+
+function canConnect(host, port, timeoutMs = 300) {
+  return new Promise((resolve) => {
+    const socket = new net.Socket();
+    let settled = false;
+
+    const finish = (value) => {
+      if (settled) return;
+      settled = true;
+      socket.destroy();
+      resolve(value);
+    };
+
+    socket.setTimeout(timeoutMs);
+    socket.once("connect", () => finish(true));
+    socket.once("timeout", () => finish(false));
+    socket.once("error", () => finish(false));
+    socket.connect(port, host);
+  });
+}
+
+async function findAvailablePort(startPort = DEFAULT_PORT, attempts = MAX_PORT_ATTEMPTS) {
+  for (let i = 0; i < attempts; i += 1) {
+    const port = startPort + i;
+    const inUse = await canConnect("127.0.0.1", port);
+    if (!inUse) return port;
+  }
+  throw new Error(`No free port found from ${startPort} to ${startPort + attempts - 1}`);
+}
+
+function wait(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+
+function probeHttp(url, timeoutMs = 1_200) {
+  return new Promise((resolve) => {
+    const request = http.get(url, (res) => {
+      res.resume();
+      resolve(res.statusCode ? res.statusCode < 500 : false);
+    });
+
+    request.on("error", () => resolve(false));
+    request.setTimeout(timeoutMs, () => {
+      request.destroy();
+      resolve(false);
+    });
+  });
+}
+
+async function waitForServer(url, timeoutMs = SERVER_READY_TIMEOUT_MS) {
+  const startedAt = Date.now();
+  while (Date.now() - startedAt < timeoutMs) {
+    const ok = await probeHttp(url);
+    if (ok) return;
+    await wait(250);
+  }
+  throw new Error(`Timed out waiting for bundled server at ${url}`);
+}
+
+function copyDirIfMissing(src, dest) {
+  if (fs.existsSync(dest)) return;
+  if (!fs.existsSync(src)) return;
+  fs.mkdirSync(path.dirname(dest), { recursive: true });
+  fs.cpSync(src, dest, { recursive: true });
+}
+
+function prepareStandaloneAssets(appRoot, standaloneDir) {
+  const staticSrc = path.join(appRoot, ".next", "static");
+  const staticDest = path.join(standaloneDir, ".next", "static");
+  const publicSrc = path.join(appRoot, "public");
+  const publicDest = path.join(standaloneDir, "public");
+
+  copyDirIfMissing(staticSrc, staticDest);
+  copyDirIfMissing(publicSrc, publicDest);
+}
+
+function stopBundledServer() {
+  if (!serverProcess) return;
+  const proc = serverProcess;
+  serverProcess = null;
+  proc.kill();
+}
+
+async function startBundledServer() {
+  const appRoot = app.getAppPath();
+  const standaloneDir = path.join(appRoot, ".next", "standalone");
+  const serverEntry = path.join(standaloneDir, "server.js");
+
+  if (!fs.existsSync(serverEntry)) {
+    throw new Error(
+      `Missing bundled server entry at ${serverEntry}. Run "npm run desktop:build:prep" first.`,
+    );
+  }
+
+  prepareStandaloneAssets(appRoot, standaloneDir);
+
+  const port = await findAvailablePort(DEFAULT_PORT);
+  const serverUrl = `http://127.0.0.1:${port}`;
+
+  // Use utilityProcess so the server runs headlessly without creating a second Dock app.
+  serverProcess = utilityProcess.fork(serverEntry, [], {
+    cwd: standaloneDir,
+    stdio: "pipe",
+    serviceName: "ClawPad Server",
+    env: {
+      ...process.env,
+      PORT: String(port),
+      HOSTNAME: "127.0.0.1",
+    },
+  });
+
+  serverProcess.stdout?.on("data", (chunk) => {
+    process.stdout.write(`[desktop-server] ${chunk}`);
+  });
+
+  serverProcess.stderr?.on("data", (chunk) => {
+    process.stderr.write(`[desktop-server] ${chunk}`);
+  });
+
+  const exitedEarly = new Promise((_, reject) => {
+    serverProcess.once("exit", (code) => {
+      reject(new Error(`Bundled server exited early (code=${code})`));
+    });
+  });
+
+  await Promise.race([
+    waitForServer(`${serverUrl}/api/version`),
+    exitedEarly,
+  ]);
+
+  return serverUrl;
+}
+
+async function resolveStartUrl() {
+  if (isDev()) {
+    return DEV_URL;
+  }
+  return startBundledServer();
+}
+
+async function createMainWindow() {
+  const startUrl = await resolveStartUrl();
+
+  mainWindow = new BrowserWindow({
+    width: 1440,
+    height: 920,
+    minWidth: 980,
+    minHeight: 680,
+    show: false,
+    autoHideMenuBar: false,
+    backgroundColor: "#0b0f14",
+    webPreferences: {
+      preload: path.join(__dirname, "preload.mjs"),
+      contextIsolation: true,
+      nodeIntegration: false,
+      sandbox: false,
+    },
+  });
+
+  mainWindow.once("ready-to-show", () => {
+    mainWindow.show();
+  });
+
+  mainWindow.webContents.setWindowOpenHandler(({ url }) => {
+    shell.openExternal(url);
+    return { action: "deny" };
+  });
+
+  await mainWindow.loadURL(startUrl);
+
+  mainWindow.on("closed", () => {
+    mainWindow = null;
+  });
+}
+
+app.on("second-instance", () => {
+  if (!mainWindow) return;
+  if (mainWindow.isMinimized()) mainWindow.restore();
+  mainWindow.focus();
+});
+
+const lock = app.requestSingleInstanceLock();
+if (!lock) {
+  app.quit();
+} else {
+  app.whenReady().then(async () => {
+    try {
+      await createMainWindow();
+    } catch (error) {
+      dialog.showErrorBox(
+        "ClawPad failed to start",
+        error instanceof Error ? error.message : String(error),
+      );
+      app.quit();
+      return;
+    }
+
+    app.on("activate", async () => {
+      if (BrowserWindow.getAllWindows().length === 0) {
+        try {
+          await createMainWindow();
+        } catch (error) {
+          dialog.showErrorBox(
+            "ClawPad failed to re-open",
+            error instanceof Error ? error.message : String(error),
+          );
+        }
+      }
+    });
+  });
+
+  app.on("before-quit", () => {
+    quitting = true;
+    stopBundledServer();
+  });
+
+  app.on("window-all-closed", () => {
+    if (process.platform !== "darwin") {
+      app.quit();
+    } else if (quitting) {
+      stopBundledServer();
+    }
+  });
+}