ciregenzandClaude Opus 5 18b83d9697 [eric] build: the signing preflight must not assume a keychain exists ...

The pin added earlier read the local keychain unconditionally, which was right
for publish.sh and wrong for release-macos.yml: on CI the cert arrives as a
base64 .p12 in CSC_LINK and electron-builder imports it into a temporary
keychain LATER than this preflight runs, so the probe would have found nothing
and aborted every CI mac build before it started. Fixed by branching on where
the cert actually comes from -- keychain locally, the .p12 itself on CI -- and
running the profile check against whichever cert that resolves to, since both
sources can drift from the embedded profile.

Verified with controls on both paths: the .p12 reader returns the true SHA-1 of
a synthetic cert and returns nothing (rather than a bogus hash) under a wrong
password, and the local path still passes against the live cert and profile.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014wtspwSFzZmjCx9UNPAorQ

2026-08-20 11:49:01 -07:00

..

ci

[eric] build: drop foreign-arch native prebuilds from the app, with a release gate to keep them out

2026-07-31 00:05:54 -07:00

perf

[eric] perf: stopwatch the boot + headcount every file we ship

2026-05-27 10:19:53 -07:00

release

[eric] ci: dont call anything latest until both update feeds agree + resolve

2026-05-27 10:19:53 -07:00

verify175

[eric] qa: the perf gate measures main-thread blocking at mount, the class every other gate slept through

2026-08-07 13:19:13 -07:00

add-defender-exclusion.ps1

[eric] perf: draft opt-in defender exclusion helper for windows cold-start (#9 item 5)

2026-06-16 22:23:11 -07:00

analyze-browser-metrics.py

[eric] browser: say which runs the latency report skipped and why

2026-08-01 00:58:53 -07:00

browser_canary.py

[eric] canary: cleanup passes on the outcome (marker gone), not on which code path deleted it

2026-07-31 01:15:38 -07:00

build-app-win.ps1

[eric] win: sign the bundled claude.exe (AV-quarantine class) + require-signed gate + post-sign smoke

2026-07-28 15:49:59 -07:00

build-app.sh

[eric] build: the signing preflight must not assume a keychain exists

2026-08-20 11:49:01 -07:00

build-python-env-win.ps1

[eric] debugger: swap vendored debugger/ for PyPI swarm-debug in app workspaces

2026-07-02 00:16:53 -07:00

build-python-env.sh

[eric] apps: the bundled python keeps ensurepip so app-backend venvs are real, and a hollow venv can never reach an app

2026-08-14 12:27:42 -07:00

build-template-archive.sh

[eric] build: the webapp-template node_modules archive skips when already built for the digest, so an interrupted build stops re-running the 22s npm install every restart

2026-08-09 17:04:58 -07:00

build-test-dmg.sh

[eric] 1.0.27 production push: fixes the weird "exec" icon next to OpenSwarm on fresh Macs, faster startup (~10s less from shipping a real Node binary instead of running Electron as Node), and Google Workspace + other uvx-based MCPs work again on machines without uv installed.

2026-04-27 22:37:17 -07:00

fetch-router.ps1

[eric] remove vendored 9router (now fetched from npm at build), remove Copilot, and fix subs + tools

2026-04-25 02:26:08 -07:00

fetch-router.sh

[eric] remove vendored 9router (now fetched from npm at build), remove Copilot, and fix subs + tools

2026-04-25 02:26:08 -07:00

fetch-webapp-template.sh

[eric] apps: restart.sh lets the agent bounce its own runtime (sentinel watched by the harness)

2026-07-02 02:48:21 -07:00

gen-squirrel-latest-yml.ps1

[eric] win: generate latest.yml for squirrel releases so existing NSIS clients can migrate

2026-05-31 13:06:06 -07:00

human-benchmark.py

[eric] browser: human-performance benchmark harness for rudimentary tasks

2026-06-02 12:29:59 -07:00

probe-pdf-roundtrip.py

[eric] attach: native PDFs on Claude/Gemini/OR, cost calc, meter fix, 9router bypass for image blocks

2026-05-22 23:43:54 -07:00

run-phase-tests.js

[eric] docs: move the release runbook, checklist + squirrel plan into docs/ so root stops feeling cluttered

2026-05-27 11:03:43 -07:00

setup-evs.sh

[eric] build: signup already prompts for the code, so stop asking twice

2026-08-02 19:08:22 -07:00

smoke-packaged-mac.sh

[eric] smoke: assert Gatekeeper would actually LAUNCH the app, and surface an unsigned DMG wrapper

2026-08-13 06:28:21 -07:00

strip-py-to-pyc.ps1

[eric] perf: draft pyc-only site-packages strip to shrink defender cold-start (#9 item 3)

2026-06-16 22:15:45 -07:00

sync-toolui-template.sh

[eric] apps: the full tool-ui widget set is vendored into every app workspace behind an @toolui alias, deps exact-pinned to the host's locked versions

2026-08-08 01:22:43 -07:00

ui-sweep.js

[eric] qa: a dead-control sweep clicks every control and fails when nothing happens

2026-08-07 11:55:44 -07:00

verify-175.py

[eric] qa: the perf gate measures main-thread blocking at mount, the class every other gate slept through

2026-08-07 13:19:13 -07:00

zip-python-stdlib.ps1

[eric] perf: draft stdlib-zip tool to shrink defender cold-start surface (#9 item 1)

2026-06-16 21:59:16 -07:00