Skip to content

Ship Apple-notarized Mac packages and keep startup responsive - #727

Closed
igorcosta wants to merge 6 commits into
mainfrom
apple-notarized-cli-release
Closed

igorcosta wants to merge 6 commits into
mainfrom
apple-notarized-cli-release

Conversation

@igorcosta

Copy link
Copy Markdown
Contributor

Mac releases could still fall back to ad-hoc signing, while the Computer Use dependency used an upstream Apple team and provisioning profile that Autohand cannot use. This release branch requires Autohand Developer ID signing and App Store Connect API notarization, pins the independent signed macOS engine revision, and repairs compatible managed engines whose native files lack Autohand signatures.

The branch also includes the startup fixes from this task: mount the composer before initialization, keep repository snapshots off startup, and defer optional account search discovery. Unrelated unpublished commits and working changes are excluded.

Both native CLI architectures and ahtraces are signed with Bun runtime entitlements. Transported tools must pass Apple's codesign -R=notarized --check-notarization; the host must retain its stapled ticket and pass Gatekeeper. Missing signing credentials block alpha and stable publication.

Validation: 136 focused tests, lint, typecheck, and build passed. Apple accepted the Computer Use distribution and both architectures of the validation CLI candidate; native Apple Silicon and Rosetta smoke tests passed. The exact review-branch candidate is being certified and will be staged as a draft release. Full proof is running separately. Computer Use changes are in autohandai/computer-use#3.

The two existing packaging-test failures were reproduced and corrected: built-in skill checks now accept materialized assets, and file URL expectations encode spaces correctly. Their behavioral and content assertions remain intact.

igorcosta and others added 6 commits November 3, 2026 09:34
Initialize the shared Ink composer before manager and MCP startup can perform synchronous work. Preserve single renderer ownership and cover first paint, silent MCP handshakes, first responses, and exit in both screen modes.

Co-authored-by: Autohand Evolve <code-noreply@autohand.ai>
Pin CLI CI, installers, builds, and transported-artifact checks to macOS 26 for Apple Silicon and Intel. Preserve the Computer Use host deployment target, apply Bun runtime entitlements, and validate stapled tickets and Gatekeeper acceptance before publication. Document the Apple credential setup and add native signing coverage.

Co-authored-by: Autohand Evolve <code-noreply@autohand.ai>
Defer the Git baseline scan until the first instruction, where the existing finalizer still protects pre-existing user changes. Reset stale baselines on fresh and restored sessions without scanning before the composer renders. Cover silent MCP startup and user-edit isolation with regression tests.

Co-authored-by: Autohand Evolve <code-noreply@autohand.ai>
Prepare local search settings without holding the composer on the optional
3.5-second account capability request. Resolve shared, cancellable discovery
before advertising web_search, retaining provider precedence and retry safety.

Cover local configuration, stale accounts, cancellation, and startup typing in
primary-screen and fullscreen terminal sessions.

Co-authored-by: Autohand Evolve <code-noreply@autohand.ai>
…ter Use engines

Use the shared Autohand Developer ID certificate and App Store Connect API credentials, block publication without signing, and pin the separately notarized macOS engine revision. Verify managed native signatures before reusing an installed engine and preserve explicit custom driver paths.

Co-authored-by: Autohand Evolve <code-noreply@autohand.ai>
Require Apple notarization checks for standalone CLI and ahtraces binaries, pin the strengthened component verifier, and make packaged-asset and file-URL assertions independent of source-tree paths and spaces in the checkout.

Co-authored-by: Autohand Evolve <code-noreply@autohand.ai>
igorcosta added a commit that referenced this pull request Nov 10, 2026
Complete pending CLI reliability fixes from #745, #743, #742, #727, #690, #669, and #747, including responsive saved-session restoration and composer draft preservation.

Verified with complete hosted proof, regular CI, and native terminal compatibility checks on the integrated revision.

Closes #668.

Co-authored-by: Autohand Evolve <code-noreply@autohand.ai>
@igorcosta

Copy link
Copy Markdown
Contributor Author

Incorporated into #750 and merged into main at e59017ba7ca7. The audited source commit e8b7d9e0e74de5ea6be9e28434740e61fc7b9c1b is represented in that validated integration, including the necessary integration corrections. Closing this source PR as incorporated; its branch is retained.

@igorcosta igorcosta closed this Nov 10, 2026
@igorcosta
igorcosta deleted the apple-notarized-cli-release branch November 10, 2026 20:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant