clawpad 0.4.11 → 0.4.12

package/.next/static/chunks/{webpack-d35467e84f0e8517.js → webpack-bae8b6e8f6434041.js}

@@ -1 +1 @@
-(()=>{"use strict";var e,t,r,o,n,a,i,l,c,d={},u={};function s(e){var t=u[e];if(void 0!==t)return t.exports;var r=u[e]={exports:{}},o=!0;try{d[e].call(r.exports,r,r.exports,s),o=!1}finally{o&&delete u[e]}return r.exports}s.m=d,e=[],s.O=(t,r,o,n)=>{if(r){n=n||0;for(var a=e.length;a>0&&e[a-1][2]>n;a--)e[a]=e[a-1];e[a]=[r,o,n];return}for(var i=1/0,a=0;a<e.length;a++){for(var[r,o,n]=e[a],l=!0,c=0;c<r.length;c++)(!1&n||i>=n)&&Object.keys(s.O).every(e=>s.O[e](r[c]))?r.splice(c--,1):(l=!1,n<i&&(i=n));if(l){e.splice(a--,1);var d=o();void 0!==d&&(t=d)}}return t},s.n=e=>{var t=e&&e.__esModule?()=>e.default:()=>e;return s.d(t,{a:t}),t},r=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,s.t=function(e,o){if(1&o&&(e=this(e)),8&o||"object"==typeof e&&e&&(4&o&&e.__esModule||16&o&&"function"==typeof e.then))return e;var n=Object.create(null);s.r(n);var a={};t=t||[null,r({}),r([]),r(r)];for(var i=2&o&&e;"object"==typeof i&&!~t.indexOf(i);i=r(i))Object.getOwnPropertyNames(i).forEach(t=>a[t]=()=>e[t]);return a.default=()=>e,s.d(n,a),n},s.d=(e,t)=>{for(var r in t)s.o(t,r)&&!s.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:t[r]})},s.f={},s.e=e=>Promise.all(Object.keys(s.f).reduce((t,r)=>(s.f[r](e,t),t),[])),s.u=e=>9352===e?"static/chunks/9352-dcb425f6cf5347f4.js":"static/chunks/"+(({234:"76567b6f",277:"54a60aa6",1375:"6be7e44c",2545:"c16f53c3",4034:"0cc5eebf",4758:"c0e397d0",5004:"70e0d97a"})[e]||e)+"."+({234:"f10e15270bb8b0cf",277:"867b5520f2f42695",1375:"8771fa8ed0278196",2545:"52cb4e268737986f",3678:"620cb571eead466f",4034:"810e51166712a4fc",4758:"4d79f4a4fe21a0b3",5004:"6903b8594c742784",6361:"30ea8932d09b0d43"})[e]+".js",s.miniCssF=e=>"static/css/"+({3266:"d37476854e9e226d",7105:"d64754055f7202fb",8425:"df8c8bd97929f65b"})[e]+".css",s.g=function(){if("object"==typeof globalThis)return globalThis;try{return this||Function("return this")()}catch(e){if("object"==typeof window)return window}}(),s.o=(e,t)=>Object.prototype.hasOwnProperty.call(e,t),o={},s.l=(e,t,r,n)=>{if(o[e])return void o[e].push(t);if(void 0!==r)for(var a,i,l=document.getElementsByTagName("script"),c=0;c<l.length;c++){var d=l[c];if(d.getAttribute("src")==e||d.getAttribute("data-webpack")=="_N_E:"+r){a=d;break}}a||(i=!0,(a=document.createElement("script")).charset="utf-8",a.timeout=120,s.nc&&a.setAttribute("nonce",s.nc),a.setAttribute("data-webpack","_N_E:"+r),a.src=s.tu(e)),o[e]=[t];var u=(t,r)=>{a.onerror=a.onload=null,clearTimeout(f);var n=o[e];if(delete o[e],a.parentNode&&a.parentNode.removeChild(a),n&&n.forEach(e=>e(r)),t)return t(r)},f=setTimeout(u.bind(null,void 0,{type:"timeout",target:a}),12e4);a.onerror=u.bind(null,a.onerror),a.onload=u.bind(null,a.onload),i&&document.head.appendChild(a)},s.r=e=>{"u">typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},s.tt=()=>(void 0===n&&(n={createScriptURL:e=>e},"u">typeof trustedTypes&&trustedTypes.createPolicy&&(n=trustedTypes.createPolicy("nextjs#bundler",n))),n),s.tu=e=>s.tt().createScriptURL(e),s.p="/_next/",a={8068:0},s.f.miniCss=(e,t)=>{if(a[e])t.push(a[e]);else 0!==a[e]&&({3266:1,7105:1,8425:1})[e]&&t.push(a[e]=new Promise((t,r)=>{var o,n=s.miniCssF(e),a=s.p+n;if(((e,t)=>{for(var r=document.getElementsByTagName("link"),o=0;o<r.length;o++){var n=r[o],a=n.getAttribute("data-href")||n.getAttribute("href");if("stylesheet"===n.rel&&(a===e||a===t))return n}for(var i=document.getElementsByTagName("style"),o=0;o<i.length;o++){var n=i[o],a=n.getAttribute("data-href");if(a===e||a===t)return n}})(n,a))return t();(o=document.createElement("link")).rel="stylesheet",o.type="text/css",o.onerror=o.onload=n=>{if(o.onerror=o.onload=null,"load"===n.type)t();else{var i=n&&("load"===n.type?"missing":n.type),l=n&&n.target&&n.target.href||a,c=Error("Loading CSS chunk "+e+" failed.\n("+l+")");c.code="CSS_CHUNK_LOAD_FAILED",c.type=i,c.request=l,o.parentNode.removeChild(o),r(c)}},o.href=a,function(e){if("function"==typeof _N_E_STYLE_LOAD){let{href:t,onload:r,onerror:o}=e;_N_E_STYLE_LOAD(0===t.indexOf(window.location.origin)?new URL(t).pathname:t).then(()=>null==r?void 0:r.call(e,{type:"load"}),()=>null==o?void 0:o.call(e,{}))}else document.head.appendChild(e)}(o)}).then(()=>{a[e]=0},t=>{throw delete a[e],t}))},i={8068:0,1817:0,3334:0},s.f.j=(e,t)=>{var r=s.o(i,e)?i[e]:void 0;if(0!==r)if(r)t.push(r[2]);else if(/^(1817|3266|3334|7105|8068|8425)$/.test(e))i[e]=0;else{var o=new Promise((t,o)=>r=i[e]=[t,o]);t.push(r[2]=o);var n=s.p+s.u(e),a=Error();s.l(n,t=>{if(s.o(i,e)&&(0!==(r=i[e])&&(i[e]=void 0),r)){var o=t&&("load"===t.type?"missing":t.type),n=t&&t.target&&t.target.src;a.message="Loading chunk "+e+" failed.\n("+o+": "+n+")",a.name="ChunkLoadError",a.type=o,a.request=n,r[1](a)}},"chunk-"+e,e)}},s.O.j=e=>0===i[e],l=(e,t)=>{var r,o,[n,a,l]=t,c=0;if(n.some(e=>0!==i[e])){for(r in a)s.o(a,r)&&(s.m[r]=a[r]);if(l)var d=l(s)}for(e&&e(t);c<n.length;c++)o=n[c],s.o(i,o)&&i[o]&&i[o][0](),i[o]=0;return s.O(d)},(c=self.webpackChunk_N_E=self.webpackChunk_N_E||[]).forEach(l.bind(null,0)),c.push=l.bind(null,c.push.bind(c)),s.nc=void 0})();
+(()=>{"use strict";var e,t,r,o,n,a,i,l,c,d={},u={};function s(e){var t=u[e];if(void 0!==t)return t.exports;var r=u[e]={exports:{}},o=!0;try{d[e].call(r.exports,r,r.exports,s),o=!1}finally{o&&delete u[e]}return r.exports}s.m=d,e=[],s.O=(t,r,o,n)=>{if(r){n=n||0;for(var a=e.length;a>0&&e[a-1][2]>n;a--)e[a]=e[a-1];e[a]=[r,o,n];return}for(var i=1/0,a=0;a<e.length;a++){for(var[r,o,n]=e[a],l=!0,c=0;c<r.length;c++)(!1&n||i>=n)&&Object.keys(s.O).every(e=>s.O[e](r[c]))?r.splice(c--,1):(l=!1,n<i&&(i=n));if(l){e.splice(a--,1);var d=o();void 0!==d&&(t=d)}}return t},s.n=e=>{var t=e&&e.__esModule?()=>e.default:()=>e;return s.d(t,{a:t}),t},r=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,s.t=function(e,o){if(1&o&&(e=this(e)),8&o||"object"==typeof e&&e&&(4&o&&e.__esModule||16&o&&"function"==typeof e.then))return e;var n=Object.create(null);s.r(n);var a={};t=t||[null,r({}),r([]),r(r)];for(var i=2&o&&e;"object"==typeof i&&!~t.indexOf(i);i=r(i))Object.getOwnPropertyNames(i).forEach(t=>a[t]=()=>e[t]);return a.default=()=>e,s.d(n,a),n},s.d=(e,t)=>{for(var r in t)s.o(t,r)&&!s.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:t[r]})},s.f={},s.e=e=>Promise.all(Object.keys(s.f).reduce((t,r)=>(s.f[r](e,t),t),[])),s.u=e=>9352===e?"static/chunks/9352-dcb425f6cf5347f4.js":"static/chunks/"+(({234:"76567b6f",277:"54a60aa6",1375:"6be7e44c",2545:"c16f53c3",4034:"0cc5eebf",4758:"c0e397d0",5004:"70e0d97a"})[e]||e)+"."+({234:"f10e15270bb8b0cf",277:"867b5520f2f42695",1375:"8771fa8ed0278196",2545:"52cb4e268737986f",3678:"620cb571eead466f",4034:"810e51166712a4fc",4758:"4d79f4a4fe21a0b3",5004:"6903b8594c742784",6361:"4027eebdd6a32ea5"})[e]+".js",s.miniCssF=e=>"static/css/"+({3266:"d37476854e9e226d",7105:"d64754055f7202fb",8425:"df8c8bd97929f65b"})[e]+".css",s.g=function(){if("object"==typeof globalThis)return globalThis;try{return this||Function("return this")()}catch(e){if("object"==typeof window)return window}}(),s.o=(e,t)=>Object.prototype.hasOwnProperty.call(e,t),o={},s.l=(e,t,r,n)=>{if(o[e])return void o[e].push(t);if(void 0!==r)for(var a,i,l=document.getElementsByTagName("script"),c=0;c<l.length;c++){var d=l[c];if(d.getAttribute("src")==e||d.getAttribute("data-webpack")=="_N_E:"+r){a=d;break}}a||(i=!0,(a=document.createElement("script")).charset="utf-8",a.timeout=120,s.nc&&a.setAttribute("nonce",s.nc),a.setAttribute("data-webpack","_N_E:"+r),a.src=s.tu(e)),o[e]=[t];var u=(t,r)=>{a.onerror=a.onload=null,clearTimeout(f);var n=o[e];if(delete o[e],a.parentNode&&a.parentNode.removeChild(a),n&&n.forEach(e=>e(r)),t)return t(r)},f=setTimeout(u.bind(null,void 0,{type:"timeout",target:a}),12e4);a.onerror=u.bind(null,a.onerror),a.onload=u.bind(null,a.onload),i&&document.head.appendChild(a)},s.r=e=>{"u">typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},s.tt=()=>(void 0===n&&(n={createScriptURL:e=>e},"u">typeof trustedTypes&&trustedTypes.createPolicy&&(n=trustedTypes.createPolicy("nextjs#bundler",n))),n),s.tu=e=>s.tt().createScriptURL(e),s.p="/_next/",a={8068:0},s.f.miniCss=(e,t)=>{if(a[e])t.push(a[e]);else 0!==a[e]&&({3266:1,7105:1,8425:1})[e]&&t.push(a[e]=new Promise((t,r)=>{var o,n=s.miniCssF(e),a=s.p+n;if(((e,t)=>{for(var r=document.getElementsByTagName("link"),o=0;o<r.length;o++){var n=r[o],a=n.getAttribute("data-href")||n.getAttribute("href");if("stylesheet"===n.rel&&(a===e||a===t))return n}for(var i=document.getElementsByTagName("style"),o=0;o<i.length;o++){var n=i[o],a=n.getAttribute("data-href");if(a===e||a===t)return n}})(n,a))return t();(o=document.createElement("link")).rel="stylesheet",o.type="text/css",o.onerror=o.onload=n=>{if(o.onerror=o.onload=null,"load"===n.type)t();else{var i=n&&("load"===n.type?"missing":n.type),l=n&&n.target&&n.target.href||a,c=Error("Loading CSS chunk "+e+" failed.\n("+l+")");c.code="CSS_CHUNK_LOAD_FAILED",c.type=i,c.request=l,o.parentNode.removeChild(o),r(c)}},o.href=a,function(e){if("function"==typeof _N_E_STYLE_LOAD){let{href:t,onload:r,onerror:o}=e;_N_E_STYLE_LOAD(0===t.indexOf(window.location.origin)?new URL(t).pathname:t).then(()=>null==r?void 0:r.call(e,{type:"load"}),()=>null==o?void 0:o.call(e,{}))}else document.head.appendChild(e)}(o)}).then(()=>{a[e]=0},t=>{throw delete a[e],t}))},i={8068:0,1817:0,3334:0},s.f.j=(e,t)=>{var r=s.o(i,e)?i[e]:void 0;if(0!==r)if(r)t.push(r[2]);else if(/^(1817|3266|3334|7105|8068|8425)$/.test(e))i[e]=0;else{var o=new Promise((t,o)=>r=i[e]=[t,o]);t.push(r[2]=o);var n=s.p+s.u(e),a=Error();s.l(n,t=>{if(s.o(i,e)&&(0!==(r=i[e])&&(i[e]=void 0),r)){var o=t&&("load"===t.type?"missing":t.type),n=t&&t.target&&t.target.src;a.message="Loading chunk "+e+" failed.\n("+o+": "+n+")",a.name="ChunkLoadError",a.type=o,a.request=n,r[1](a)}},"chunk-"+e,e)}},s.O.j=e=>0===i[e],l=(e,t)=>{var r,o,[n,a,l]=t,c=0;if(n.some(e=>0!==i[e])){for(r in a)s.o(a,r)&&(s.m[r]=a[r]);if(l)var d=l(s)}for(e&&e(t);c<n.length;c++)o=n[c],s.o(i,o)&&i[o]&&i[o][0](),i[o]=0;return s.O(d)},(c=self.webpackChunk_N_E=self.webpackChunk_N_E||[]).forEach(l.bind(null,0)),c.push=l.bind(null,c.push.bind(c)),s.nc=void 0})();

package/bin/clawpad.js

@@ -381,10 +381,13 @@ function normalizeScopes(raw) {
 }
 
 function scoreScopes(scopes) {
-  if (scopes.has("operator.admin")) return 100;
-  if (scopes.has("operator.write")) return 90;
-  if (scopes.has("operator.read")) return 20;
-  return 10;
+  let score = 10;
+  if (scopes.has("operator.read")) score += 100;
+  if (scopes.has("operator.write")) score += 200;
+  if (scopes.has("operator.admin")) score += 30;
+  if (scopes.has("operator.approvals")) score += 5;
+  if (scopes.has("operator.pairing")) score += 5;
+  return score;
 }
 
 function extractTokenFromEntry(entry) {
@@ -1453,6 +1456,98 @@ function writeOpenClawConfig(configPath, config) {
   fs.writeFileSync(configPath, `${serialized}\n`, "utf-8");
 }
 
+function hasRequiredOperatorScopes(scopeSet) {
+  return scopeSet.has("operator.read") && scopeSet.has("operator.write");
+}
+
+function normalizeScopeArray(raw, defaults = []) {
+  const scopes = normalizeScopes(raw);
+  if (scopes.size === 0 && Array.isArray(defaults)) {
+    for (const item of defaults) {
+      const normalized = String(item || "").trim().toLowerCase();
+      if (normalized) scopes.add(normalized);
+    }
+  }
+  return [...scopes];
+}
+
+function normalizeTokenEntry(entry) {
+  const token = extractTokenFromEntry(entry);
+  if (!token) return null;
+  const scopes =
+    entry && typeof entry === "object"
+      ? normalizeScopeArray(entry.scopes ?? entry.scope)
+      : [];
+  return {
+    token,
+    scopes,
+  };
+}
+
+function migrateLegacyGatewayAuthConfig(configPath, config) {
+  const auth = config?.gateway?.auth;
+  if (!auth || typeof auth !== "object") {
+    return { updated: false, config };
+  }
+
+  const defaults = ["operator.read", "operator.write", "operator.admin"];
+  const tokenEntries = Array.isArray(auth.tokens) ? auth.tokens.map(normalizeTokenEntry).filter(Boolean) : [];
+  const hasWritableToken = tokenEntries.some((entry) => hasRequiredOperatorScopes(new Set(entry.scopes)));
+  if (hasWritableToken) {
+    return { updated: false, config };
+  }
+
+  const directToken = normalizeToken(auth.token);
+  let updated = false;
+
+  if (directToken) {
+    const directScopes = normalizeScopeArray(auth.scopes ?? auth.scope, defaults);
+    const rebuiltTokens = [
+      { token: directToken, scopes: directScopes },
+      ...tokenEntries.filter((entry) => entry.token !== directToken),
+    ];
+
+    auth.tokens = rebuiltTokens;
+    delete auth.token;
+    delete auth.scope;
+    delete auth.scopes;
+    updated = true;
+  } else if (tokenEntries.length > 0) {
+    const [first, ...rest] = tokenEntries;
+    if (first) {
+      const merged = [...new Set([...first.scopes, ...defaults])];
+      auth.tokens = [{ token: first.token, scopes: merged }, ...rest];
+      updated = true;
+    }
+  }
+
+  if (!updated) {
+    return { updated: false, config };
+  }
+
+  writeOpenClawConfig(configPath, config);
+  return { updated: true, config };
+}
+
+function restartOpenClawGateway() {
+  const commands = [
+    "openclaw gateway restart",
+    "openclaw daemon restart",
+  ];
+  for (const cmd of commands) {
+    try {
+      execSync(cmd, {
+        stdio: "ignore",
+        timeout: 20000,
+      });
+      return true;
+    } catch {
+      // try next command
+    }
+  }
+  return false;
+}
+
 function resolveClawpadPagesDir(config) {
   const explicit = process.env.CLAWPAD_PAGES_DIR;
   if (explicit && explicit.trim()) {
@@ -2244,7 +2339,8 @@ async function main(
   }
   console.log();
 
-  const { config } = loadOpenClawConfig();
+  const loadedConfig = loadOpenClawConfig();
+  let config = loadedConfig.config;
   const openclawInstall = await ensureOpenClawCli(platformProfile, {
     autoYes,
     noPrompt,
@@ -2267,6 +2363,19 @@ async function main(
       console.log(`  ✅ OpenClaw CLI detected (${versionText}).`);
     }
   }
+  if (openclawInstall.installed) {
+    const migration = migrateLegacyGatewayAuthConfig(loadedConfig.configPath, config);
+    config = migration.config;
+    if (migration.updated) {
+      console.log("  🔐 Upgraded OpenClaw gateway auth to scoped token format.");
+      if (restartOpenClawGateway()) {
+        console.log("  ♻️  Restarted OpenClaw gateway to apply scoped token config.");
+      } else {
+        console.warn("  ⚠️  Updated config but could not restart gateway automatically.");
+        console.warn("     Run: openclaw gateway restart");
+      }
+    }
+  }
   let pagesDir = resolveClawpadPagesDir(config);
   const migration = await maybeMigrateLegacyPages(config, pagesDir, {
     hasExplicitPagesDir,

package/desktop/main.mjs

@@ -0,0 +1,246 @@
+import { app, BrowserWindow, dialog, shell, utilityProcess } from "electron";
+import fs from "node:fs";
+import path from "node:path";
+import http from "node:http";
+import net from "node:net";
+import { fileURLToPath } from "node:url";
+
+const DEV_URL = process.env.CLAWPAD_ELECTRON_URL || "http://localhost:3000";
+const DEFAULT_PORT = 3333;
+const MAX_PORT_ATTEMPTS = 80;
+const SERVER_READY_TIMEOUT_MS = 45_000;
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+let mainWindow = null;
+let serverProcess = null;
+let quitting = false;
+
+function isDev() {
+  return !app.isPackaged;
+}
+
+function canConnect(host, port, timeoutMs = 300) {
+  return new Promise((resolve) => {
+    const socket = new net.Socket();
+    let settled = false;
+
+    const finish = (value) => {
+      if (settled) return;
+      settled = true;
+      socket.destroy();
+      resolve(value);
+    };
+
+    socket.setTimeout(timeoutMs);
+    socket.once("connect", () => finish(true));
+    socket.once("timeout", () => finish(false));
+    socket.once("error", () => finish(false));
+    socket.connect(port, host);
+  });
+}
+
+async function findAvailablePort(startPort = DEFAULT_PORT, attempts = MAX_PORT_ATTEMPTS) {
+  for (let i = 0; i < attempts; i += 1) {
+    const port = startPort + i;
+    const inUse = await canConnect("127.0.0.1", port);
+    if (!inUse) return port;
+  }
+  throw new Error(`No free port found from ${startPort} to ${startPort + attempts - 1}`);
+}
+
+function wait(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+
+function probeHttp(url, timeoutMs = 1_200) {
+  return new Promise((resolve) => {
+    const request = http.get(url, (res) => {
+      res.resume();
+      resolve(res.statusCode ? res.statusCode < 500 : false);
+    });
+
+    request.on("error", () => resolve(false));
+    request.setTimeout(timeoutMs, () => {
+      request.destroy();
+      resolve(false);
+    });
+  });
+}
+
+async function waitForServer(url, timeoutMs = SERVER_READY_TIMEOUT_MS) {
+  const startedAt = Date.now();
+  while (Date.now() - startedAt < timeoutMs) {
+    const ok = await probeHttp(url);
+    if (ok) return;
+    await wait(250);
+  }
+  throw new Error(`Timed out waiting for bundled server at ${url}`);
+}
+
+function copyDirIfMissing(src, dest) {
+  if (fs.existsSync(dest)) return;
+  if (!fs.existsSync(src)) return;
+  fs.mkdirSync(path.dirname(dest), { recursive: true });
+  fs.cpSync(src, dest, { recursive: true });
+}
+
+function prepareStandaloneAssets(appRoot, standaloneDir) {
+  const staticSrc = path.join(appRoot, ".next", "static");
+  const staticDest = path.join(standaloneDir, ".next", "static");
+  const publicSrc = path.join(appRoot, "public");
+  const publicDest = path.join(standaloneDir, "public");
+
+  copyDirIfMissing(staticSrc, staticDest);
+  copyDirIfMissing(publicSrc, publicDest);
+}
+
+function stopBundledServer() {
+  if (!serverProcess) return;
+  const proc = serverProcess;
+  serverProcess = null;
+  proc.kill();
+}
+
+async function startBundledServer() {
+  const appRoot = app.getAppPath();
+  const standaloneDir = path.join(appRoot, ".next", "standalone");
+  const serverEntry = path.join(standaloneDir, "server.js");
+
+  if (!fs.existsSync(serverEntry)) {
+    throw new Error(
+      `Missing bundled server entry at ${serverEntry}. Run "npm run desktop:build:prep" first.`,
+    );
+  }
+
+  prepareStandaloneAssets(appRoot, standaloneDir);
+
+  const port = await findAvailablePort(DEFAULT_PORT);
+  const serverUrl = `http://127.0.0.1:${port}`;
+
+  // Use utilityProcess so the server runs headlessly without creating a second Dock app.
+  serverProcess = utilityProcess.fork(serverEntry, [], {
+    cwd: standaloneDir,
+    stdio: "pipe",
+    serviceName: "ClawPad Server",
+    env: {
+      ...process.env,
+      PORT: String(port),
+      HOSTNAME: "127.0.0.1",
+    },
+  });
+
+  serverProcess.stdout?.on("data", (chunk) => {
+    process.stdout.write(`[desktop-server] ${chunk}`);
+  });
+
+  serverProcess.stderr?.on("data", (chunk) => {
+    process.stderr.write(`[desktop-server] ${chunk}`);
+  });
+
+  const exitedEarly = new Promise((_, reject) => {
+    serverProcess.once("exit", (code) => {
+      reject(new Error(`Bundled server exited early (code=${code})`));
+    });
+  });
+
+  await Promise.race([
+    waitForServer(`${serverUrl}/api/version`),
+    exitedEarly,
+  ]);
+
+  return serverUrl;
+}
+
+async function resolveStartUrl() {
+  if (isDev()) {
+    return DEV_URL;
+  }
+  return startBundledServer();
+}
+
+async function createMainWindow() {
+  const startUrl = await resolveStartUrl();
+
+  mainWindow = new BrowserWindow({
+    width: 1440,
+    height: 920,
+    minWidth: 980,
+    minHeight: 680,
+    show: false,
+    autoHideMenuBar: false,
+    backgroundColor: "#0b0f14",
+    webPreferences: {
+      preload: path.join(__dirname, "preload.mjs"),
+      contextIsolation: true,
+      nodeIntegration: false,
+      sandbox: false,
+    },
+  });
+
+  mainWindow.once("ready-to-show", () => {
+    mainWindow.show();
+  });
+
+  mainWindow.webContents.setWindowOpenHandler(({ url }) => {
+    shell.openExternal(url);
+    return { action: "deny" };
+  });
+
+  await mainWindow.loadURL(startUrl);
+
+  mainWindow.on("closed", () => {
+    mainWindow = null;
+  });
+}
+
+app.on("second-instance", () => {
+  if (!mainWindow) return;
+  if (mainWindow.isMinimized()) mainWindow.restore();
+  mainWindow.focus();
+});
+
+const lock = app.requestSingleInstanceLock();
+if (!lock) {
+  app.quit();
+} else {
+  app.whenReady().then(async () => {
+    try {
+      await createMainWindow();
+    } catch (error) {
+      dialog.showErrorBox(
+        "ClawPad failed to start",
+        error instanceof Error ? error.message : String(error),
+      );
+      app.quit();
+      return;
+    }
+
+    app.on("activate", async () => {
+      if (BrowserWindow.getAllWindows().length === 0) {
+        try {
+          await createMainWindow();
+        } catch (error) {
+          dialog.showErrorBox(
+            "ClawPad failed to re-open",
+            error instanceof Error ? error.message : String(error),
+          );
+        }
+      }
+    });
+  });
+
+  app.on("before-quit", () => {
+    quitting = true;
+    stopBundledServer();
+  });
+
+  app.on("window-all-closed", () => {
+    if (process.platform !== "darwin") {
+      app.quit();
+    } else if (quitting) {
+      stopBundledServer();
+    }
+  });
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clawpad",
-  "version": "0.4.11",
+  "version": "0.4.12",
   "description": "A file-based, Notion-style document workspace for OpenClaw",
   "keywords": [
     "openclaw",
@@ -21,6 +21,7 @@
   "bin": {
     "clawpad": "./bin/clawpad.js"
   },
+  "main": "desktop/main.mjs",
   "engines": {
     "node": ">=18"
   },
@@ -39,6 +40,11 @@
     "build": "next build --webpack",
     "start": "next start",
     "postinstall": "node bin/postinstall-repair.js",
+    "desktop:dev": "concurrently -k \"npm run dev\" \"wait-on http://localhost:3000 && electron .\"",
+    "desktop:build:prep": "npm run build && node scripts/prepare-standalone.mjs",
+    "desktop:build:mac": "npm run desktop:build:prep && electron-builder --mac dmg",
+    "desktop:build:win": "npm run desktop:build:prep && electron-builder --win nsis",
+    "desktop:build": "npm run desktop:build:prep && electron-builder --mac dmg --win nsis",
     "lint": "eslint",
     "test": "tsx --test --test-concurrency=1 tests/**/*.test.ts",
     "test:unit": "tsx --test --test-concurrency=1 tests/unit/**/*.test.ts",
@@ -48,6 +54,44 @@
     "check:installer:live": "bash scripts/check-live-installer.sh",
     "prepublishOnly": "next build --webpack"
   },
+  "build": {
+    "appId": "io.clawpad.desktop",
+    "productName": "ClawPad",
+    "icon": "desktop/assets/icon.png",
+    "directories": {
+      "output": "dist-desktop"
+    },
+    "files": [
+      "desktop/**/*",
+      ".next/standalone/**/*",
+      ".next/static/**/*",
+      "public/**/*",
+      "package.json"
+    ],
+    "asar": false,
+    "mac": {
+      "target": [
+        "dmg"
+      ],
+      "icon": "desktop/assets/icon.icns",
+      "category": "public.app-category.productivity",
+      "hardenedRuntime": true,
+      "gatekeeperAssess": false,
+      "entitlements": "build/entitlements.mac.plist",
+      "entitlementsInherit": "build/entitlements.mac.plist"
+    },
+    "win": {
+      "target": [
+        "nsis"
+      ],
+      "icon": "desktop/assets/icon.ico"
+    },
+    "nsis": {
+      "oneClick": false,
+      "allowToChangeInstallationDirectory": true,
+      "perMachine": false
+    }
+  },
   "dependencies": {
     "@ai-sdk/openai": "^3.0.25",
     "@ai-sdk/react": "^3.0.71",
@@ -86,11 +130,15 @@
     "@types/react": "^19",
     "@types/react-dom": "^19",
     "@types/ws": "^8.18.1",
+    "concurrently": "^9.2.1",
+    "electron": "^37.7.0",
+    "electron-builder": "^26.0.16",
     "eslint": "^9",
     "eslint-config-next": "16.1.6",
     "tailwindcss": "^4",
     "tsx": "^4.21.0",
     "tw-animate-css": "^1.4.0",
-    "typescript": "^5"
+    "typescript": "^5",
+    "wait-on": "^9.0.3"
   }
 }