ai/byre
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 6 Wiki Activity

Add signed, notarized releases with the server inside the app

Browse Source
This commit is contained in:
Ian Gulliver
2026-10-18 15:19:57 -07:00
parent 10a80ccb22
commit 6b86a7d5a9
20 changed files with 388 additions and 66 deletions
Download Patch File Download Diff File Expand all files Collapse all files
TODO.md
+4 -2
View File
@@ -26,5 +26,7 @@
- Phone app
A native client for the phone over the same API, sharing the macOS client's SwiftUI code where it can. Every surveyed tool has one (Claude, Codex, Cursor and Conductor apps, GitHub Mobile, Superset for iPhone); it needs its own layout, since two half-width panes don't fit a phone.
- Real release
A tagged version with a downloadable, signed and notarized app that runs on Macs outside the team. Sign `Byre` and `byre-hands` with a Developer ID certificate and hardened runtime (`codesign --options runtime`), embed a Developer ID provisioning profile (iCloud needs one outside the App Store), switch `aps-environment` to `production` and deploy the CloudKit schema to Production (its store is separate from Development's), notarize with `notarytool` and staple, and ship a zip or dmg. `mac/bundle.sh` takes the version from the tag instead of the commit hash. The README gets install steps for the server (`go install g.fc.run/misc/byre/cmd/byre@<tag>`, plus building `byre-hands`) and for building the app under one's own Apple team, since `mac/byre.entitlements` and `mac/byre.provisionprofile` name this team.
- Move to g.fc.run/ai/byre
Before tagging v0.1.0, since the update feed URL is baked into every installed app. The owner creates the `ai` org on g.fc.run and transfers the repo (Settings → Danger Zone → Transfer ownership). Then rename all the way down: `go.mod`'s module and every import, `SUFeedURL` in `mac/Info.plist`, `repo=` in `mac/release.sh`, README and docs links, and the service checkout's `origin` (`git@g.fc.run:ai/byre.git`).
- Server setup in the app
Setting up the server's Mac from the app instead of a terminal: on the connection screen, a choice to run the server on this Mac, which does what `Contents/Helpers/byre install` does (the launch agent, `tailscale serve`), checks that `claude`, `codex`, `git` and Tailscale are there, and connects to the URL it set up.