v0.1.24

Signed and notarized on macOS

T4 Code v0.1.24 is the first macOS release signed with the project's pinned Developer ID identity and notarized by Apple. The protected release job reopens both the DMG and ZIP, checks their certificate and Team ID, hardened runtime, secure timestamp, stapled notarization ticket, and Gatekeeper result, and stops publication if any of them drift.

Local development can still produce an explicitly unsigned package without release credentials. Signing secrets are available only to the protected release job and are never bundled into the app.

One inbox for sessions that need attention

The attention inbox gathers sessions waiting for a decision, confirmation, or reply. It keeps the host authoritative: T4 projects the host's events into a useful list, deduplicates repeated signals, and routes an action back through the owning session instead of inventing local state.

Older runtimes remain usable. Attention controls appear only when the connected host advertises the required contract.

Clearer connection health

Session screens now distinguish reconnecting, delayed, and degraded transport states. Provider diagnostics explain what T4 last confirmed and whether it is safe to act, rather than collapsing every interruption into a generic disconnected message.

Faster bounded projections

Transcript and attention projections now avoid repeated full-history work where a bounded update is sufficient. Ordering, deduplication, retention, and host-authority checks remain intact.

Browser preview workspace

Session-linked browser previews now open in a dedicated workspace. The client projects bounded, sanitized preview state from the host, maps pointer and keyboard input through explicit permission gates, and uses leases so two clients cannot silently control the same preview at once. Preview activity records origins and paths without storing query strings, page pixels, credentials, or backend error text.

Runtime provenance

T4 Code v0.1.24 vendors app-wire 0.6.1 from integration commit e3e15c03, source tree e0f32b279eb4b8cbc403e47d765a226bee99c99f. The client contract remains omp-app/1.

The verified OMP 17.0.5 runtime is built from commit 772e5e41 and tagged t4code-17.0.5-appserver-5. It provides the appserver used by the desktop and remote workflows, including faster startup, cross-session attention and transcript search, and the complete negotiated browser-preview command surface. Unsupported optional capabilities remain hidden when the host does not advertise them.

The integration is based on the official upstream v17.0.5 tag, commit 9fd6e971. Official upstream OMP v17.0.5 has no appserver command and cannot host T4 Code.

Packages

The Android APK is signed and supports Android 7.0 or later. Linux packages target x86_64. macOS packages target Apple Silicon and are signed and notarized. Verify downloads with SHA256SUMS.txt.

What's Changed

• test(protocol): preserve provider transport diagnostics by @wolfiesch in #55
• fix: recognize dynamic site deployment runs by @lyc-aon in #56
• test: make tooling fixtures portable on macOS by @wolfiesch in #57
• feat(web): add session transport health by @wolfiesch in #58
• feat: add cross-session attention inbox by @wolfiesch in #59
• perf: speed bounded projections and correct click timing by @wolfiesch in #61
• feat(release): sign and notarize macOS builds by @wolfiesch in #63
• feat: implement browser preview workspace and resolve authenticated-only selection gap by @wolfiesch in #60
• release: prepare T4 Code 0.1.24 by @wolfiesch in #65
• feat: add cross-session transcript search by @wolfiesch in #62
• feat: productize desktop and phone onboarding by @wolfiesch in #64
• Release T4 Code 0.1.24 for OMP 17.0.5 by @lyc-aon in #66

Full Changelog: v0.1.23...v0.1.24