mirror of https://github.com/openclaw/openclaw.git synced 2026-07-09 12:14:00 +00:00

Files

Peter Steinberger 76154d9275 test(macos): deflake browser proxy gate tests via injectable browser control (#100517 )

MacNodeRuntime's browser proxy gate read OPENCLAW_CONFIG_PATH-resolved config
at invoke time, so parallel tests mutating process env (raw setenv outside
TestIsolationLock in LogLocatorTests/WideAreaGatewayDiscoveryTests) could make
the gate read the real host config. Inject the gate state in tests, cover the
config flag parsing in OpenClawConfigFileTests, and route remaining raw setenv
test users through TestIsolation.withEnvValues.

2026-07-06 02:13:05 +01:00

Icon.icon

…

Packaging

…

Sources

test(macos): deflake browser proxy gate tests via injectable browser control (#100517 )

2026-07-06 02:13:05 +01:00

Tests/OpenClawIPCTests

test(macos): deflake browser proxy gate tests via injectable browser control (#100517 )

2026-07-06 02:13:05 +01:00

Package.resolved

feat(chat-ui): syntax-highlighted code blocks and native tables in chat markdown (#100207 )

2026-07-05 11:38:05 -07:00

Package.swift

fix(macos): compile packaged localizations

2026-07-01 05:19:12 -07:00

README.md

…

README.md

OpenClaw macOS app (dev + signing)

Quick dev run

# from repo root
scripts/restart-mac.sh

Options:

scripts/restart-mac.sh --no-sign   # fastest dev; ad-hoc signing (TCC permissions do not stick)
scripts/restart-mac.sh --sign      # force code signing (requires cert)

Packaging flow

scripts/package-mac-app.sh

Creates dist/OpenClaw.app and signs it via scripts/codesign-mac-app.sh.

Signing behavior

Auto-selects identity (first match):

Developer ID Application
Apple Distribution
Apple Development
first available identity

If none found:

errors by default
set ALLOW_ADHOC_SIGNING=1 or SIGN_IDENTITY="-" to ad-hoc sign

Team ID audit (Sparkle mismatch guard)

After signing, we read the app bundle Team ID and compare every Mach-O inside the app. If any embedded binary has a different Team ID, signing fails.

Skip the audit:

SKIP_TEAM_ID_CHECK=1 scripts/package-mac-app.sh

Library validation workaround (dev only)

If Sparkle Team ID mismatch blocks loading (common with Apple Development certs), opt in:

DISABLE_LIBRARY_VALIDATION=1 scripts/package-mac-app.sh

This adds com.apple.security.cs.disable-library-validation to app entitlements. Use for local dev only; keep off for release builds.

Useful env flags

SIGN_IDENTITY="Apple Development: Your Name (TEAMID)"
ALLOW_ADHOC_SIGNING=1 (ad-hoc, TCC permissions do not persist)
CODESIGN_TIMESTAMP=off (offline debug)
DISABLE_LIBRARY_VALIDATION=1 (dev-only Sparkle workaround)
SKIP_TEAM_ID_CHECK=1 (bypass audit)