Desktop Application

Overview

World Monitor’s desktop application is built with Tauri 2.0, packaging the full web dashboard with a local Node.js sidecar that runs all 60+ API handlers entirely on your machine.

Version: 2.5.21 | Platforms: macOS (Intel + Apple Silicon), Windows (EXE/MSI), Linux (AppImage)

Download Links

macOS
Windows
Linux

Apple Silicon (M1/M2/M3)

https://worldmonitor.app/api/download?platform=macos-arm64

Intel

https://worldmonitor.app/api/download?platform=macos-x64

Installation:

Download .dmg file
Open and drag to Applications
First launch: Right-click → Open (bypasses Gatekeeper)
Grant permissions when prompted

Installer (Recommended)

https://worldmonitor.app/api/download?platform=windows-exe

MSI Package

https://worldmonitor.app/api/download?platform=windows-msi

Installation:

Run installer
Follow setup wizard
Launch from Start Menu
Windows Defender: Allow network access

AppImage (Universal)

https://worldmonitor.app/api/download?platform=linux-appimage

Installation:

chmod +x World-Monitor-*.AppImage
./World-Monitor-*.AppImage

Includes bundled media frameworks.

Variant Downloads

Download specific variants:

# Tech Monitor
https://worldmonitor.app/api/download?platform=macos-arm64&variant=tech

# Finance Monitor  
https://worldmonitor.app/api/download?platform=windows-exe&variant=finance

# Full (default)
https://worldmonitor.app/api/download?platform=linux-appimage&variant=full

Architecture

Tauri Runtime

// From src-tauri/tauri.conf.json
{
  "productName": "World Monitor",
  "mainBinaryName": "world-monitor",
  "version": "2.5.21",
  "identifier": "app.worldmonitor.desktop"
}

The app consists of:

Rust Core - Native window management, IPC, system integration
WebView - Renders the full web dashboard
Node.js Sidecar - Runs local API server on random port

Local API Sidecar

Built from /api directory during build:

# From package.json scripts
npm run build:sidecar-sebuf
npm run desktop:build:full

Sidecar provides:

60+ API endpoints (same as Vercel cloud deployment)
RSS proxy (150+ feeds fetched locally)
Data caching (Redis-compatible in-memory)
Sebuf RPC handlers (20 typed services)

The desktop app can operate as a fully self-contained intelligence platform with zero cloud dependencies.

Token-Authenticated Sidecar

Prevents other local processes from accessing the sidecar:

// Session token generated per launch
// Uses randomized hashing
// Included in all localhost requests
// Validates origin and token

Security:

Token unique per app instance
Not stored on disk
Regenerated on each launch
Prevents localhost hijacking

OS Keychain Integration

API keys stored securely in system credential manager:

macOS
Windows
Linux

Keychain Access

All secrets in single entry: secrets-vault
JSON blob format
Protected by macOS security
Touch ID / password unlock

Migration:

// One-time migration from individual entries
// Consolidates 20+ entries → 1 vault
// Reduces authorization prompts from 20+ → 1 per launch

Credential Manager

secrets-vault entry
Windows encryption
User-scope storage
Survives reinstalls

Never stored in plaintext files - all API keys go through OS-level encryption.

Settings Window

Dedicated configuration UI (Cmd+, or Ctrl+,):

LLMs Tab
API Keys Tab
Debug & Logs Tab

Local AI Configuration

Ollama Endpoint
- Default: http://localhost:11434
- Custom endpoints supported
- Connection test button
Model Selection
- Auto-discovered from endpoint
- Dropdown with available models
- Filters out embedding-only models
- Manual fallback if discovery fails
Cloud APIs
- Groq API key
- OpenRouter API key

Model Discovery:

// Tries Ollama native: /api/tags
// Falls back to OpenAI-compatible: /v1/models
// Populates dropdown immediately

Cross-Window Secret Sync

Settings and main window run in separate webviews:

// Saving in Settings:
// 1. Writes to OS keychain
// 2. Broadcasts localStorage change event
// 3. Main window listens
// 4. Hot-reloads all secrets
// 5. No app restart required

Change API keys in Settings → immediately available in main window without restarting.

Cloud Fallback

When a local API handler fails or is missing:

// Transparent fallback to cloud deployment
// Origin headers stripped
// Falls through to worldmonitor.app
// Seamless hybrid operation

Use Cases:

New features not yet in local sidecar
Experimental endpoints
High-bandwidth data sources
Distributed processing

Auto-Update Checker

Polls cloud API for new versions every 6 hours:

// Displays non-intrusive update badge
// Direct download link to GitHub Release
// Per-version dismiss
// Variant-aware (Tech Monitor links to Tech release)

Update Flow:

Notification appears
Click to view release notes
Download new version
Install over existing
Settings and cache preserved

Bundle Contents

What’s included in the desktop app:

// From src-tauri/tauri.conf.json
"resources": [
  "../api",                    // Vercel API handlers
  "sidecar/local-api-server.mjs", // Node.js server
  "sidecar/package.json",
  "sidecar/node",              // Bundled Node.js runtime
  "../data",                   // Static datasets (bases, cables, etc.)
  "../src/config"              // Configuration files
]

Total Size:

macOS ARM: ~180MB
macOS Intel: ~200MB
Windows EXE: ~150MB
Linux AppImage: ~170MB

Build Variants

Building desktop apps for different variants:

# Full variant (geopolitical)
npm run desktop:build:full

# Tech variant
npm run desktop:build:tech

# Finance variant
npm run desktop:build:finance

Each variant:

Different branding
Variant-specific datasets
Optimized feed selection
Tailored color schemes

CSP (Content Security Policy)

Desktop app has relaxed CSP for localhost:

// From tauri.conf.json
"csp": "connect-src 'self' https: http://127.0.0.1:* ws: wss:; frame-src 'self' http://127.0.0.1:* https://www.youtube.com;"

Allows:

Sidecar communication (random port)
YouTube embeds
WebSocket connections
HTTPS APIs

Development Mode

Run desktop app in dev mode:

npm run desktop:dev

Features:

Hot reload
DevTools open by default
Verbose logging
Sidecar rebuilds on change

Uses:

{
  "beforeDevCommand": "npm run build:sidecar-sebuf && npm run dev"
}

Code Signing & Notarization

macOS
Windows
Linux

Hardened Runtime

{
  "macOS": {
    "hardenedRuntime": true
  }
}

Signing:

Developer ID certificate required
Gatekeeper bypass on first launch
Notarization for distribution

Build Script:

npm run desktop:package:macos:full:sign

Authenticode Signing

{
  "windows": {
    "digestAlgorithm": "sha256",
    "timestampUrl": "https://timestamp.digicert.com"
  }
}

Build Script:

npm run desktop:package:windows:full:sign

AppImageNo code signing required.Media Framework:

{
  "linux": {
    "appimage": {
      "bundleMediaFramework": true
    }
  }
}

Advantages Over Web Version

Feature	Desktop	Web
Local API processing	✅ All endpoints	❌ Cloud only
Offline operation	✅ Full functionality	⚠️ Limited (PWA cache)
API key storage	✅ OS keychain	⚠️ Session only
Native shortcuts	✅ Cmd+, Cmd+K, etc.	⚠️ Browser-dependent
Update notifications	✅ Automatic	❌ None
Performance	✅ Native optimizations	⚠️ Browser overhead
YouTube playback	✅ Embed bridge	⚠️ Iframe restrictions
Multi-window	✅ Settings window	❌ Single tab

System Requirements

Minimum:

CPU: Dual-core 2.0GHz
RAM: 4GB
GPU: WebGL 2.0 support
Storage: 500MB free
OS: macOS 10.13+, Windows 10+, Ubuntu 18.04+

Recommended:

CPU: Quad-core 3.0GHz+
RAM: 8GB+
GPU: Dedicated graphics
Storage: 1GB free (for caching)
Network: Broadband internet

Performance Optimizations

Sidecar Caching

// In-memory Redis-compatible cache
// Avoids network roundtrips
// Typical response time: <10ms

Brotli Compression

// API responses prefer Brotli
// Gzip fallback for legacy clients
// 50-80% wire size reduction
// Applies to OpenSky, RSS, UCDP, AIS

Request Deduplication

// Concurrent identical requests → single upstream fetch
// Example: 53 RSS cache misses → 1 actual fetch
// Served with X-Cache: DEDUP header

Troubleshooting

App won’t launch?

macOS: Right-click → Open (first time)
Windows: Allow in Defender
Linux: Check chmod +x
Verify system requirements

Sidecar not starting?

Check port isn’t blocked by firewall
Look for error logs in app data folder
Try restarting app
Desktop: Settings → Debug & Logs

Slow performance?

Close unused panels
Reduce active map layers
Disable browser ML if low RAM
Check for background processes

Settings not saving?

Grant keychain/credential manager access
Check file permissions
Verify OS security settings
Try running as administrator (Windows)

YouTube videos not playing?

Embed bridge handles restrictions automatically
Check internet connection
Try HLS native channels instead
Restart app if bridge fails

AI Intelligence - Local Ollama integration
Live News - Local RSS proxy
Interactive Globe - Native WebGL performance

Privacy & Security

Privacy Guarantees

API keys encrypted in OS keychain
No telemetry in desktop builds (opt-in analytics disabled)
Local processing for sensitive data
Network requests only to configured APIs
No advertising or tracking

Source Code: Desktop app built from same open-source codebase as web version. View on GitHub

Advanced Configuration

Custom Sidecar Port

By default, sidecar chooses random available port. To force specific port:

# Set environment variable before launch
export WM_SIDECAR_PORT=3001
./World\ Monitor.app

Disable Cloud Fallback

// In settings-manager.ts
const DISABLE_CLOUD_FALLBACK = true;

// Forces 100% local operation
// APIs fail if sidecar handler missing

Custom Data Directory

# Override default app data location
export WM_DATA_DIR=/custom/path

Contributing to Desktop

See CONTRIBUTING.md for:

Building from source
Adding sidecar endpoints
Testing desktop-specific features
Packaging workflow
Code signing setup

Get Started

Core Features

Data & Intelligence

Variants

Configuration

Development

Deployment

Overview

Download Links

Variant Downloads

Architecture

Tauri Runtime

Local API Sidecar

Token-Authenticated Sidecar

OS Keychain Integration

Settings Window

Cross-Window Secret Sync

Cloud Fallback

Auto-Update Checker

Bundle Contents

Build Variants

CSP (Content Security Policy)

Development Mode

Code Signing & Notarization

Advantages Over Web Version

System Requirements

Performance Optimizations

Sidecar Caching

Brotli Compression

Request Deduplication

Troubleshooting

Privacy & Security

Advanced Configuration

Custom Sidecar Port

Disable Cloud Fallback

Custom Data Directory

Contributing to Desktop

​Overview

​Download Links

​Variant Downloads

​Architecture

​Tauri Runtime

​Local API Sidecar

​Token-Authenticated Sidecar

​OS Keychain Integration

​Settings Window

​Cross-Window Secret Sync

​Cloud Fallback

​Auto-Update Checker

​Bundle Contents

​Build Variants

​CSP (Content Security Policy)

​Development Mode

​Code Signing & Notarization

​Advantages Over Web Version

​System Requirements

​Performance Optimizations

​Sidecar Caching

​Brotli Compression

​Request Deduplication

​Troubleshooting

​Related Features

​Privacy & Security

​Advanced Configuration

​Custom Sidecar Port

​Disable Cloud Fallback

​Custom Data Directory

​Contributing to Desktop

Overview

Download Links

Variant Downloads

Architecture

Tauri Runtime

Local API Sidecar

Token-Authenticated Sidecar

OS Keychain Integration

Settings Window

Cross-Window Secret Sync

Cloud Fallback

Auto-Update Checker

Bundle Contents

Build Variants

CSP (Content Security Policy)

Development Mode

Code Signing & Notarization

Advantages Over Web Version

System Requirements

Performance Optimizations

Sidecar Caching

Brotli Compression

Request Deduplication

Troubleshooting

Related Features

Privacy & Security

Advanced Configuration

Custom Sidecar Port

Disable Cloud Fallback

Custom Data Directory

Contributing to Desktop