fix(desktop-shell): add --config flag, overlay app.security, copy OpenWork icons

Author: yiliang114

packages/desktop-shell/package-lock.json

@@ -5,8 +5,8 @@
   "type": "module",
   "scripts": {
     "tauri": "tauri",
-    "dev": "tauri dev",
-    "build": "npm run build:runtime && tauri build",
+    "dev": "tauri dev --config src-tauri/tauri.openwork.conf.json",
+    "build": "npm run build:runtime && tauri build --config src-tauri/tauri.openwork.conf.json",
     "build:runtime": "node scripts/prepare-runtime.js",
     "smoke:runtime": "node scripts/smoke-runtime.js",
     "smoke:packaged": "node scripts/smoke-packaged.js",

packages/desktop-shell/package.json

@@ -3,6 +3,17 @@
   "productName": "OpenWork",
   "version": "0.1.0",
   "identifier": "com.alibaba.openwork",
+  "build": {
+    "frontendDist": "../bootstrap"
+  },
+  "app": {
+    "withGlobalTauri": true,
+    "windows": [],
+    "security": {
+      "csp": "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src ipc: http://ipc.localhost; object-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'",
+      "capabilities": ["bootstrap"]
+    }
+  },
   "bundle": {
     "shortDescription": "OpenWork — AI agent workspace",
     "resources": {