Skip to content

v0.3.0 — signed macOS installer

Choose a tag to compare

View all tags
@R44VC0RP R44VC0RP released this 07 Sep 15:11
· 2 commits to main since this release
v0.3.0
7d39d5e

Signed macOS installer

The first prebuilt native-cua release for Apple Silicon. The app is signed with Developer ID Application: Ryan Vogel (9G68SMNHEU), accepted by Apple's notarization service, stapled, and accepted by Gatekeeper.

Install

Requires Node.js 22+ and an Apple Silicon Mac. No Git, Xcode, or source compilation is required.

curl -fsSL https://raw.githubusercontent.com/R44VC0RP/native-cua/v0.3.0/install.sh | sh

You can download and inspect the installer before running it. It validates the archive checksum, pinned Developer ID signature, bundle identifier, and notarized Gatekeeper assessment. It never overwrites an existing app or launcher and never removes quarantine or disables security settings.

For OpenCode 2:

opencode2 mcp add native_cua --global -- "$HOME/.local/bin/native-cua" mcp

Run the status tool through the MCP client and grant missing macOS permissions to the responsible host. Those permissions are not granted by the installer.

Included

  • Native app/window observation and accessibility-based control through CLI and MCP.
  • Floating live preview and same-stream H.264 MP4 recording on macOS 15+.
  • Fourteen published tool families; recordings are video-only and limited to one explicit window.
  • Private recording files, no-clobber publication, owner isolation, and bounded stopping behavior.

Verification and limits

Verified the notarized archive through an isolated installation path containing spaces and an apostrophe, CLI/MCP startup, actual accessibility changes, exact-window screenshots, and a decoded video-only recording. The app signature remained intact after running. Unsigned packages and existing installation paths were refused.

The build targets macOS 14+ for core controls; preview and recording require macOS 15+. Runtime verification was on Apple Silicon/macOS 27 beta. Intel, Windows, Linux, and fresh-machine permission onboarding are not verified. Tool-family coverage is not universal desktop compatibility.

Assets: the signed/stapled app ZIP, SHA256SUMS, release metadata, and the installer. Signing credentials and private verification data are not included.

Assets 6
Loading