feat(desktop): media/notification permissions + notification raises the app

- desktop/main.js: grant media (camera/mic), display-capture, notifications, clipboard,
  fullscreen, pointerLock for the app origin (Electron denies these by default, which
  silently broke meetings' camera/mic). Adds setPermissionRequestHandler +
  setPermissionCheckHandler on the app session.
- Clicking a notification now raises + focuses the window: preload exposes
  bizConnectNative.focusApp(), main handles 'focus-window' IPC, and the web notify()
  onclick calls it when running in the desktop shell. (home.html build batch16)
- CLIENTS.md: Phase D — inline-reply notifications (Windows Toast RemoteInput /
  Android RemoteInput / iOS UNTextInputNotificationAction) queued right after packaging.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

desktop/main.js

@@ -8,9 +8,17 @@
 //   - external links open in the user's browser, not inside the app
 //
 // Server origin is configurable so the same build works against prod or a dev server.
-const { app, BrowserWindow, session, desktopCapturer, shell, Menu } = require('electron');
+const { app, BrowserWindow, session, desktopCapturer, shell, Menu, ipcMain } = require('electron');
 const path = require('path');
 
+// Renderer asks (via preload) to raise the window — e.g. when an OS notification is clicked.
+ipcMain.on('focus-window', () => {
+  if (!win) return;
+  if (win.isMinimized()) win.restore();
+  win.show();
+  win.focus();
+});
+
 const SERVER_URL = (process.env.SERVER_URL || 'https://remote.bizgaze.com').replace(/\/+$/, '');
 
 let win;
@@ -41,19 +49,35 @@ function createWindow() {
   });
 }
 
-// Electron requires an explicit handler for getDisplayMedia(); without it the web UI's
-// "Share Screen" silently fails. Default to the primary display with loopback audio.
-// A production build can swap this for a source-picker window.
-function registerDisplayMediaHandler() {
-  session.fromPartition('persist:bizconnect').setDisplayMediaRequestHandler((request, callback) => {
+// The full Connect experience needs several web capabilities that Electron denies by
+// default. We grant them for our own trusted origin:
+//   - media            → camera + mic for meetings/calls (getUserMedia)
+//   - display-capture  → "Share my screen" (getDisplayMedia)
+//   - notifications    → in-app alerts
+//   - clipboard, fullscreen, pointerLock → chat paste + meeting UX
+// Without this, meetings silently have no camera/mic and notifications never fire.
+const GRANTED = new Set([
+  'media', 'display-capture', 'notifications',
+  'clipboard-read', 'clipboard-sanitized-write', 'fullscreen', 'pointerLock',
+]);
+
+function configureSession() {
+  const ses = session.fromPartition('persist:bizconnect');
+  // getDisplayMedia needs an explicit source. Default to the primary display + loopback audio.
+  // A production build can swap this for a source-picker window.
+  ses.setDisplayMediaRequestHandler((request, callback) => {
     desktopCapturer.getSources({ types: ['screen', 'window'] }).then((sources) => {
       callback(sources.length ? { video: sources[0], audio: 'loopback' } : {});
     }).catch(() => callback({}));
-  });
+  }, { useSystemPicker: false });
+  // Async grant (getUserMedia, notifications, …)
+  ses.setPermissionRequestHandler((_wc, permission, callback) => callback(GRANTED.has(permission)));
+  // Sync check (some getUserMedia paths query this before requesting)
+  ses.setPermissionCheckHandler((_wc, permission) => GRANTED.has(permission));
 }
 
 app.whenReady().then(() => {
-  registerDisplayMediaHandler();
+  configureSession();
   createWindow();
   Menu.setApplicationMenu(null); // hide the default menu bar; the web UI is the chrome
   app.on('activate', () => { if (BrowserWindow.getAllWindows().length === 0) createWindow(); });

desktop/preload.js

@@ -1,10 +1,13 @@
 // Minimal, safe bridge into the web UI. Runs with contextIsolation, so it only exposes a
 // frozen marker the web app can feature-detect against (e.g. to hide the PWA install prompt
 // or prefer native push). No Node APIs are exposed to page JS.
-const { contextBridge } = require('electron');
+const { contextBridge, ipcRenderer } = require('electron');
 
 contextBridge.exposeInMainWorld('__NATIVE__', 'desktop');
 contextBridge.exposeInMainWorld('bizConnectNative', Object.freeze({
   platform: 'desktop',
   version: process.env.npm_package_version || '0.1.0',
+  // Bring the app window to the foreground (e.g. when a notification is clicked) — the web
+  // Notification's window.focus() can't raise an Electron window; the main process must.
+  focusApp: () => ipcRenderer.send('focus-window'),
 }));