feat(kit): every platform from one clip.config.ts: desktop-kit, mobile-kit, create-clip-wallet for extension, desktop and phone

[shayansal]

npx create-clip-wallet my-wallet now makes the wallet on every platform from one root clip.config.ts: a browser extension, a desktop app (macOS, Windows, Linux) and a phone app (iOS, Android), plus the Scaffold-HBAR dapp with --scaffold-hbar. The desktop and phone apps become libraries the same way the extension became @clip-wallet/extension-kit.

Ported from the pre-publication history onto main: Apache-2.0 everywhere (including the new packages' LICENSE and NOTICE), the Low audit fixes kept (MOB-02 and PLG-02 moved with the mobile code into mobile-kit), crypto dependencies pinned exactly, vitest 4.1.11, and shayan@coldai.org contacts. pnpm-lock.yaml was regenerated with pnpm install.

Generated layout

clip.config.ts            the wallet, for every platform
wallet.identity.json      name, description, rdns, homepage, icon, appId, extension.key
icon.svg | icon.png       the logo; every platform's icons are rendered from it
MAINNET.md  .env  .keys/  checklist, CLIP_* build values, extension key (the last two never committed)
packages/extension/       wxt.config.ts = clipWallet({ config, configDir: "../.." }); one-line entrypoints
packages/desktop/         clipDesktop() + electronBuilderConfig(); one-line main/preload/renderer; icons, entitlements
packages/mobile/          expoConfig() + withClipWallet(); registerClipWallet(); assets/; eas.json
packages/nextjs/          Scaffold-HBAR dapp (--scaffold-hbar)
docs/listings/  docs/signing.md  tools/harness/  .harness/  AGENTS.md  llms.txt

Parts you don't choose are removed: their folders, root scripts, and the platform:<part> blocks in the docs and CI. With --scaffold-hbar and every platform, the result is byte-for-byte the create-scaffold-hbar project.

CLI

npx create-clip-wallet acme-wallet --platforms extension,desktop,mobile \
  --name "Acme Wallet" --rdns com.acme.wallet --id com.acme.wallet \
  --logo ./acme-logo.png --accent "#0B7A3B" --networks "evm:*,hedera,solana,bitcoin" \
  --languages en,de,ja --homepage https://wallet.acme.example --scaffold-hbar --yes

New options: --platforms, --scaffold-hbar, --id, --logo (alias --icon) and --languages. Without --yes it asks for each one. The new brand command (pnpm wallet:brand) re-renders every icon from the logo. Icons are made with Node alone: PNG encode and decode, area-average resampling, and ICO and ICNS writers. SVG logos are rasterised once by resvg, rsvg-convert, sips or ImageMagick.

New packages

• @clip-wallet/desktop-kit: the main process, preloads, pages and native-messaging host, moved from apps/desktop.
  • clipDesktop() builds the electron-vite config.
  • electronBuilderConfig() maps clip.config.ts to electron-builder: app id, product, executable and artifact names, scheme, locales, icons, and signing only when its env vars are set.
• @clip-wallet/mobile-kit: the screens, background host, in-app browser and plugins, moved from apps/mobile.
  • expoConfig() builds the app config.
  • withClipWallet() wires Metro.
• @clip-wallet/config gains languages, appId, scheme, desktop/mobile id overrides, fees/usage (reserved, never acted on), platformIds(), and @clip-wallet/config/node.
• apps/desktop and apps/mobile are now only Clip Wallet's brand on the kits, like apps/extension.

Docs

docs/kit-platforms.md is folded into the docs site and removed:

• kit/index, create-clip-wallet, config (new Platforms section) and build-and-ship (desktop and phone sections) are updated.
• New kit/signing page, added to the sidebar.
• The project's wxt.config.ts, electron.vite.config.ts and app.config.ts are typechecked snippets.
• Repo layout, vault-importer rules and the engine diagram are updated.
• The new config settings are in the generated schema reference.
• TypeDoc pages are generated for both kits.

Test results (local, macOS arm64, Node 24)

Check	Result
pnpm install --frozen-lockfile	ok
pnpm -r typecheck	ok
pnpm -r test	ok (desktop-kit 66, mobile-kit 103 vitest + 58 jest-expo, create-clip-wallet 26, docs 29, …)
pnpm harness	ok (1989 source files, 0 warnings); check-manifests ok; sync-template ok
pnpm pack-all	37 tarballs (desktop-kit 228 kB, mobile-kit 629 kB)
pnpm kit:e2e --dapp	all checks passed (76)
pnpm kit:e2e:scaffold-hbar	all checks passed (same project as create-clip-wallet)
desktop Playwright e2e (apps/desktop)	2/2
extension Playwright e2e (apps/extension)	23 passed, 1 skipped (store screenshots). link.spec timed out once in the first full run, then passed alone and in a second full run.
docs build + link check	203 pages, no broken links, nothing unsafe
gitleaks git on the 3 commits	no leaks

Build sizes from kit:e2e (a kit-built wallet, every platform):

Output	Size
extension (chrome-mv3, unpacked)	11.2 MB
extension store zip	3.8 MB
desktop out/ (main, preloads, renderer)	23.6 MB
desktop Acme-Wallet-0.1.0-mac-arm64.zip	115.0 MB
desktop Acme Wallet.app (mac-arm64)	265.6 MB
mobile iOS bundle (Hermes)	25.7 MB
mobile Android bundle (Hermes)	25.7 MB
mobile dist/ (expo export)	51.4 MB

CI fixes in this PR

On main, the services job and the reproducible-build check already failed, and the desktop workflow failed on every runner. The new packages also brought CodeQL alerts. The last three commits fix all of these:

• CodeQL:
  • Linear scans replace the regexes flagged as ReDoS in config, create-clip-wallet, i18n and media-client.
  • The harness and kit e2e escape regex metacharacters fully.
  • A file-system race in selectParts() is removed.
• services: the install uses --filter "{./services/**}...". Without the braces, pnpm installed only the services, not packages/link.
• desktop:
  • The Playwright step runs with --conditions=development.
  • The desktop-kit path and permission tests are platform-neutral.
  • shellEmulator: true lets Windows run NODE_OPTIONS=… electron-vite build.
• repro: the check uses full history, so the commit bundle can be fetched. The container makes its outputs readable when run with umask 077.
• create-clip-wallet: the scaffold tests get a 60 s timeout on shared runners.

Not built here

• Windows and Linux installers were not built locally.
  • The desktop workflow builds apps/desktop for Windows (NSIS + zip) and Linux (AppImage, deb, tar.gz), unsigned, in CI only.
  • The CI kit e2e (ubuntu) builds the kit project's Linux tar.gz.
  • A kit project's Windows installer and Linux AppImage/deb were not built anywhere.
• No native phone builds. The phone app was checked with expo export (iOS and Android) and expo prebuild only. There was no Xcode or Gradle build and no EAS.

Needs accounts or certificates (owner)

None of these is needed to build. The variable names are in kit/signing and the project's docs/signing.md.

• Apple Developer Program:
  • Developer ID Application certificate and notarization key, for signed and notarized macOS builds. Everything built here is unsigned.
  • App Store Connect, for iOS.
• Windows code-signing certificate (OV/EV) or Azure Trusted Signing.
• Store accounts: Chrome Web Store, addons.mozilla.org, Edge Partner Center, Google Play Console. An Expo/EAS account if EAS builds are used.
• A domain with AASA/assetlinks for universal links and phone passkeys.
• npm publishing of the two new packages, through the existing CI-only changesets release with provenance.

🤖 Generated with Claude Code