mirror of https://github.com/openclaw/openclaw.git synced 2026-07-19 15:31:39 +00:00

Files

Peter Steinberger 0fe2132d5f feat(mac): gate Peekaboo Bridge on Computer Control (#106531 )

Both settings grant local UI automation, so run PeekabooBridge only while
Allow Computer Control is on. The toggle now reflects the effective state and
is disabled when Computer Control is off; users drive Peekaboo via its own Mac
app in that case. Removes the confusing standalone bridge switch.

2026-07-13 08:56:27 -07:00

Icon.icon

…

Packaging

…

Sources

feat(mac): gate Peekaboo Bridge on Computer Control (#106531 )

2026-07-13 08:56:27 -07:00

Tests/OpenClawIPCTests

fix(mac): keep remote nodes connected during config metadata writes (#106419 )

2026-07-13 06:31:11 -07:00

.periphery.yml

ci(macos): add enforced periphery dead-code lane and delete the 12 current findings (#105743 )

2026-07-12 16:39:15 -07:00

Package.resolved

chore: update Peekaboo to 3.9.0 (#104398 )

2026-07-11 03:44:13 -07:00

Package.swift

refactor(macos): use swift-log contracts (#106270 )

2026-07-13 04:18:32 -07:00

README.md

…

README.md

OpenClaw macOS app (dev + signing)

Quick dev run

# from repo root
scripts/restart-mac.sh

Options:

scripts/restart-mac.sh --no-sign   # fastest dev; ad-hoc signing (TCC permissions do not stick)
scripts/restart-mac.sh --sign      # force code signing (requires cert)

Packaging flow

scripts/package-mac-app.sh

Creates dist/OpenClaw.app and signs it via scripts/codesign-mac-app.sh.

Signing behavior

Auto-selects identity (first match):

Developer ID Application
Apple Distribution
Apple Development
first available identity

If none found:

errors by default
set ALLOW_ADHOC_SIGNING=1 or SIGN_IDENTITY="-" to ad-hoc sign

Team ID audit (Sparkle mismatch guard)

After signing, we read the app bundle Team ID and compare every Mach-O inside the app. If any embedded binary has a different Team ID, signing fails.

Skip the audit:

SKIP_TEAM_ID_CHECK=1 scripts/package-mac-app.sh

Library validation workaround (dev only)

If Sparkle Team ID mismatch blocks loading (common with Apple Development certs), opt in:

DISABLE_LIBRARY_VALIDATION=1 scripts/package-mac-app.sh

This adds com.apple.security.cs.disable-library-validation to app entitlements. Use for local dev only; keep off for release builds.

Useful env flags

SIGN_IDENTITY="Apple Development: Your Name (TEAMID)"
ALLOW_ADHOC_SIGNING=1 (ad-hoc, TCC permissions do not persist)
CODESIGN_TIMESTAMP=off (offline debug)
DISABLE_LIBRARY_VALIDATION=1 (dev-only Sparkle workaround)
SKIP_TEAM_ID_CHECK=1 (bypass audit)