fix(ui): integrate PWA build and avoid api caching

Move PWA config into the default Vite build, ensure the PWA icon source is generated, and restrict Workbox caching to static assets only. Update server UI build wiring and clarify TLS requirements in docs.

packages/ui/vite.config.ts

@@ -1,6 +1,7 @@
 import fs from "fs"
 import { defineConfig } from "vite"
 import solid from "vite-plugin-solid"
+import { VitePWA } from "vite-plugin-pwa"
 import { resolve } from "path"
 
 const uiPackageJson = JSON.parse(fs.readFileSync(resolve(__dirname, "package.json"), "utf-8")) as { version?: string }
@@ -20,6 +21,55 @@ export default defineConfig({
         })
       },
     },
+    {
+      name: "prepare-pwa-source-icon",
+      apply: "build",
+      buildStart() {
+        // vite-pwa-assets requires the source image inside root/public/
+        const source = resolve(__dirname, "src/images/CodeNomad-Icon.png")
+        const publicDir = resolve(__dirname, "src/renderer/public")
+        const dest = resolve(publicDir, "logo.png")
+        fs.mkdirSync(publicDir, { recursive: true })
+        fs.copyFileSync(source, dest)
+      },
+    },
+    VitePWA({
+      registerType: "autoUpdate",
+      injectRegister: "auto",
+      pwaAssets: {
+        preset: "minimal-2023",
+        image: "public/logo.png",
+      },
+      manifest: {
+        name: "CodeNomad",
+        short_name: "CodeNomad",
+        id: "/",
+        start_url: "/",
+        display: "standalone",
+        display_override: ["window-controls-overlay", "standalone"],
+        background_color: "#1a1a1a",
+        theme_color: "#1a1a1a",
+      },
+      workbox: {
+        // Preserve server-side auth redirects (e.g., /login) instead of serving cached index.html.
+        navigateFallback: null,
+        // Only cache static UI assets; never cache API traffic.
+        runtimeCaching: [
+          {
+            urlPattern: ({ url, request }) => {
+              if (url.pathname.startsWith("/api/")) return false
+              return ["script", "style", "image", "font"].includes(request.destination)
+            },
+            handler: "CacheFirst",
+            options: {
+              cacheName: "asset-cache",
+              expiration: { maxEntries: 200, maxAgeSeconds: 60 * 60 * 24 * 30 },
+              cacheableResponse: { statuses: [0, 200] },
+            },
+          },
+        ],
+      },
+    }),
   ],
   css: {
     postcss: "./postcss.config.js",