3744af3d44
improve(mac): guard elevation signing identity against drift ( #123764 )
...
scripts/mac-elevation-host.sh ships as the portable installer added in
#123675 , so it is deliberately self-contained and cannot source shared
constants. That forces it to duplicate ELEVATION_TEAM_ID and
ELEVATION_IDENTITY from scripts/codesign-mac-app.sh, with nothing keeping
the two copies in sync. Add a test asserting they agree, so rotation drift
fails at build time instead of on a target Mac.
Also document why the sign-time and install-time elevation verification
functions both exist: verify_elevation_app requires a notarized and stapled
bundle, so it cannot replace the sign-time check, and deleting that check
would defer every identity failure until after a notarization submission is
already spent.
No behavior change: no artifact bytes, filenames, modes, receipt fields,
signing, notarization, or install paths are touched.
2026-08-14 12:50:57 -07:00
19ace6830b
feat(macos): add embedded CUA computer provider ( #123635 )
...
* feat(macos): embed CUA computer provider
* fix(macos): clarify embedded CUA trust posture
* fix(macos): contain embedded CUA daemon lifecycle
* fix(macos): reap orphaned CUA daemons
* fix(macos): record the spawned CUA daemon pid so reaping can terminate orphans
* chore(macos): refresh native i18n baseline for the computer control provider picker
* style(macos): satisfy swiftlint on the embedded CUA host and connect params
* refactor(gateway): move optional connect params to GatewayConnectOptions
2026-08-14 10:24:08 -07:00
44dd983c0c
feat(mac): add canonical elevation host workflow ( #123569 )
...
* feat(mac): add canonical elevation host workflow
* fix(mac): clarify elevation host deployment
* test(ui): stabilize cloud startup effort flow
* fix(mac): fail closed on unknown TCC status
* test: synchronize async CI boundaries
* test: remove remaining CI timing races
2026-08-14 05:39:24 -07:00
737982d5fe
fix(macos): adopt Peekaboo 4.1 bridge contracts ( #123420 )
...
* feat(macos): adopt checked Peekaboo bridge runtime
* fix(macos): preserve bridge snapshot retention
* docs(macos): clarify bridge client identity
* fix(macos): retry transient timestamp signing
* build(macos): pin embedded Peekaboo runtime
* fix(macos): expose embedded bridge source identity
* test(macos): isolate gateway launch agent hooks
(cherry picked from commit 7da18c5fee43fed7e8dfa42c4851f99d035b2a36)
* test(macos): pin gateway command mode
* fix(macos): preserve Peekaboo bridge provenance
2026-08-13 22:03:47 -07:00
e59d0b540e
fix(mac): reject invalid codesign args
2026-06-20 21:41:34 +02:00
e8cb2b5ab3
fix(mac): remove unused codesign entitlements
2026-05-26 12:19:42 +02:00
68f877ef66
fix(mac): clean codesign entitlement temps
2026-05-26 12:06:18 +02:00
9fe74e391d
fix(macos): sign mlx tts helper before app binary
2026-04-23 16:49:53 +01:00
e836b5b6d7
ci: isolate mlx from macos swift checks
2026-04-22 02:12:07 +01:00
9a7160786a
refactor: rename to openclaw
2026-01-30 03:16:21 +01:00
6d16a658e5
refactor: rename clawdbot to moltbot with legacy compat
2026-01-27 12:21:02 +00:00
8a20f44228
fix: improve gateway ssh auth handling
2026-01-22 06:54:08 +00:00
50049fd220
chore(macos): drop time-sensitive notification entitlement toggle
2026-01-22 04:50:03 +00:00
0b350d78d5
fix: harden macOS signing flow
2026-01-18 16:28:39 +00:00
16bc4cdef3
chore: drop legacy Relay signing
2026-01-16 03:11:16 +00:00
21ba04755b
fix(macos): onboarding location + layout
2026-01-11 01:36:00 +01:00
449bee9645
fix: bundle node runtime for mac app
2026-01-10 15:28:37 +01:00
246adaa119
chore: rename project to clawdbot
2026-01-04 14:38:51 +00:00
641080a0b6
fix: document macOS permission requirements
2026-01-03 20:05:22 +01:00
99c3fc1128
Scripts: Make ad-hoc fallback opt-in with stronger TCC warnings
2026-01-03 20:05:22 +01:00
8c7b2aa2d3
Scripts: Fallback to ad-hoc signing in codesign-mac-app.sh
2026-01-03 20:05:22 +01:00
2a6248dad6
fix: add camera entitlement to macOS signing
2026-01-02 17:31:59 +01:00
fe5e58af91
scripts: fix ad-hoc signing crashes and bash unbound variable error
2026-01-01 15:29:01 +01:00
ced271bec1
chore(macos): harden mktemp templates in codesign
2025-12-29 17:49:13 +01:00
c54e4d0900
refactor: node tools and canvas host url
2025-12-27 01:36:29 +01:00
02787b5674
build(mac): add notarize flow for release artifacts
2025-12-21 12:33:45 +01:00
405ff0377a
refactor(macos): bundle single relay binary
2025-12-20 19:35:30 +00:00
849446ae17
refactor(cli): unify on clawdis CLI + node permissions
2025-12-20 02:08:04 +00:00
2ef2136c2c
fix(macos): sign bun gateway with jit entitlements
2025-12-19 19:24:49 +01:00
98bbc73925
build(macos): bundle bun gateway
2025-12-19 19:21:26 +01:00
bf41197b97
fix(mac): open settings for microphone permission
2025-12-12 19:25:21 +00:00
e2ad0ed9f7
fix(mac): disable restricted time-sensitive entitlement
2025-12-12 19:20:47 +00:00
d2158966db
fix(mac): treat timeSensitive as best-effort
2025-12-12 18:58:07 +00:00
337ae05ed8
build(mac): enable time-sensitive notifications
2025-12-12 18:40:09 +00:00
a3bf2bdd8c
chore: rename relay to gateway
2025-12-09 18:00:01 +00:00
cf36f5a23b
chore: guard host runtime and simplify packaging
2025-12-09 00:59:56 +01:00
ddbe680a58
feat(macos): add Sparkle updates and release docs
2025-12-08 00:18:16 +01:00
7efa152418
VoiceWake: document escape path and reset stale forward command
2025-12-07 18:23:34 +01:00
f23b16db2b
build: require signing identity for mac packaging
2025-12-07 04:38:45 +01:00
21bb2fb03f
Mac: add mic entitlement to signing helper
2025-12-06 23:52:54 +00:00
b2e3013898
mac: add signing helper and document debug bundle
2025-12-07 00:30:58 +01:00
Peter Steinberger