chore: update Peekaboo to 3.9.0 (#104398)

* build(macos): update Peekaboo to 3.9.0

* chore: keep release notes in PR body

* fix(macos): trust current Peekaboo release signers

apps/macos/Package.resolved

@@ -42,8 +42,8 @@
       "kind" : "remoteSourceControl",
       "location" : "https://github.com/steipete/Peekaboo.git",
       "state" : {
-        "revision" : "1fa8eead7eeac3ff618a3111fc333ae78db043d2",
-        "version" : "3.5.2"
+        "revision" : "e3a2b3793fe4c4a6b4ccbc3069ccd9816516edb7",
+        "version" : "3.9.0"
       }
     },
     {

apps/macos/Package.swift

@@ -19,7 +19,7 @@ let package = Package(
         .package(url: "https://github.com/swiftlang/swift-subprocess.git", from: "0.4.0"),
         .package(url: "https://github.com/apple/swift-log.git", from: "1.10.1"),
         .package(url: "https://github.com/sparkle-project/Sparkle", from: "2.9.0"),
-        .package(url: "https://github.com/steipete/Peekaboo.git", exact: "3.5.2"),
+        .package(url: "https://github.com/steipete/Peekaboo.git", exact: "3.9.0"),
         .package(url: "https://github.com/pointfreeco/swift-concurrency-extras", from: "1.3.1"),
         .package(path: "../shared/OpenClawKit"),
         .package(path: "../shared/OpenClawMLXTTSProtocol"),

apps/macos/Sources/OpenClaw/PeekabooBridgeHostCoordinator.swift

@@ -56,7 +56,8 @@ final class PeekabooBridgeHostCoordinator {
     private func startIfNeeded() async {
         guard self.host == nil else { return }
 
-        var allowlistedTeamIDs: Set = ["Y5PE65HELJ"]
+        // Peekaboo owns release-signer migrations; hosts must accept its current compatibility set.
+        var allowlistedTeamIDs = PeekabooBridgeConstants.trustedReleaseTeamIDs
         if let teamID = Self.currentTeamID() {
             allowlistedTeamIDs.insert(teamID)
         }