Consus Launcher 1.2.4

What's new

• The app the Windows installer installs now passes signature verification. Since v1.0.0 the bundler rewrote the signed app to stamp the bundle type into it before packaging, so the installed consus-launcher.exe reported a hash mismatch while the .msi itself verified. Every release build now installs the x64 .msi on the build machine and checks the installed app's signature.
• The Windows installers are named -windows-x64.msi and -windows-arm64.msi, so the x64 one that most PCs need is listed first on the release page, and the release notes and README say which to pick. The ARM64 installer was listed first, and on an Intel PC it stops with "not supported by this processor type".

Consus Launcher 1.2.4 for macOS (Apple silicon and Intel) and Windows (x64 and ARM64).

macOS: the .dmg, or the .pkg to install into /Applications.
Windows: the -windows-x64.msi for most PCs (Intel and AMD). The -windows-arm64.msi is only for ARM PCs such as Snapdragon and Surface Pro X; on another PC it stops with "not supported by this processor type".
SHA256SUMS.txt lists the checksums; the .cdx.json files are the CycloneDX SBOMs.
consus-launcher-policy-1.2.4.json is the policy document: every setting this version writes into a tool, which the Consus portal renders into the device-management lock files.

The Windows installers and the app are signed by Consus Industries, Inc.

Or install from Terminal (checks the checksum first):

curl -fsSL https://raw.githubusercontent.com/consusindustries/consus-launcher/main/install.sh | sh

Consus Launcher 1.2.3

What's new

• The ChatGPT tile shows RUNNING while ChatGPT is open. ChatGPT 26.930 restarts itself in a new process a few seconds after it opens; the launcher took that for the app closing, so the tile went back to OPEN, quitting the launcher left ChatGPT open, and clicking the tile again restarted it. The launcher now follows ChatGPT to the new process.

Consus Launcher 1.2.3 for macOS (Apple silicon and Intel) and Windows (x64 and ARM64).

macOS: the .dmg, or the .pkg to install into /Applications. Windows: the .msi for your PC.
SHA256SUMS.txt lists the checksums; the .cdx.json files are the CycloneDX SBOMs.
consus-launcher-policy-1.2.3.json is the policy document: every setting this version writes into a tool, which the Consus portal renders into the device-management lock files.

The Windows installers and the app are signed by Consus Industries, Inc.

Or install from Terminal (checks the checksum first):

curl -fsSL https://raw.githubusercontent.com/consusindustries/consus-launcher/main/install.sh | sh

Consus Launcher 1.2.2

What's new

• ChatGPT lists the Consus models again. ChatGPT 26.930 moved a program the launcher uses to build that list, and dropped a model it was built from, so the picker showed OpenAI's models and the gateway refused them.
• If the launcher cannot update ChatGPT's model list, it now says so on the ChatGPT tile. Notices sent while a tool opens stay on the tile instead of being cleared.
• Dependency updates: rustls, sha2, getrandom, Vite, the Tauri CLI, and the rust-cache build action.

Consus Launcher 1.2.2 for macOS (Apple silicon and Intel) and Windows (x64 and ARM64).

macOS: the .dmg, or the .pkg to install into /Applications. Windows: the .msi for your PC.
SHA256SUMS.txt lists the checksums; the .cdx.json files are the CycloneDX SBOMs.
consus-launcher-policy-1.2.2.json is the policy document: every setting this version writes into a tool, which the Consus portal renders into the device-management lock files.

The Windows installers and the app are signed by Consus Industries, Inc.

Or install from Terminal (checks the checksum first):

curl -fsSL https://raw.githubusercontent.com/consusindustries/consus-launcher/main/install.sh | sh

Consus Launcher 1.2.1

What's new

• While you sign in, the launcher says when your approval has landed and the key is being prepared, instead of still asking you to approve.
• One policy document. Every setting the launcher writes into a tool, and every setting only a device-management lock may carry, now lives in policy/launcher-policy.json; the launcher embeds it, the README's per-tool table is generated from it, and each release attaches it so the Consus portal renders the lock files from the same values. What the launcher writes is unchanged.

Consus Launcher 1.2.1 for macOS (Apple silicon and Intel) and Windows (x64 and ARM64).

macOS: the .dmg, or the .pkg to install into /Applications. Windows: the .msi for your PC.
SHA256SUMS.txt lists the checksums; the .cdx.json files are the CycloneDX SBOMs.
consus-launcher-policy-1.2.1.json is the policy document: every setting this version writes into a tool, which the Consus portal renders into the device-management lock files.

The Windows installers and the app are signed by Consus Industries, Inc.

Or install from Terminal (checks the checksum first):

curl -fsSL https://raw.githubusercontent.com/consusindustries/consus-launcher/main/install.sh | sh

Consus Launcher 1.2.0

What's new

• Sign in with your company account instead of pasting a key. The launcher opens the Consus portal, you approve in the browser, and a key that is yours alone, named after this computer and expiring after 30 days, goes straight to the keychain. Pasting a key stays for organizations without SSO. A key the Consus credential helper already obtained on the machine is used as is.

• Sign out revokes the key in Consus, not just on this computer. The Keys tab shows who is signed in and when the key expires.

• Claude Desktop no longer polls Anthropic's model catalog, checks fetched hostnames with Anthropic in Code sessions, or lets users add plugin marketplaces and uploads. Its remaining Anthropic connection, the sandbox VM bundle downloaded at the first Cowork or Code session, is now stated in the README.

• Claude Code also gets the documented telemetry, error-report, and feedback switches, and the sign-in a desktop launcher can offer is off.

• Web access is a policy. Web search is never offered in Claude Code or Claude Desktop (the gateway refuses it). What the agent reaches from the machine (Claude Code's WebFetch and, on macOS and Linux, its shell through Claude Code's own sandbox; Claude Desktop's Web Fetch and sandbox; the sandbox network of ChatGPT and Codex) is off by default; the new WebAccess org setting turns it on. Pi has no sandbox and Windows has none for Claude Code, so their shells are not restricted; the README says so, tool by tool.

• README: which settings the launcher cannot lock (and which managed files from the portal do), CUI means fedramp-high, and Codex's requirements.toml lock.

Consus Launcher 1.2.0 for macOS (Apple silicon and Intel) and Windows (x64 and ARM64).

macOS: the .dmg, or the .pkg to install into /Applications. Windows: the .msi for your PC.
SHA256SUMS.txt lists the checksums; the .cdx.json files are the CycloneDX SBOMs.

The Windows installers and the app are signed by Consus Industries, Inc.

Or install from Terminal (checks the checksum first):

curl -fsSL https://raw.githubusercontent.com/consusindustries/consus-launcher/main/install.sh | sh

Consus Launcher 1.1.0

What's new

• Claude Code and Claude Desktop no longer contact Anthropic on their own; only the gateway's calls leave the machine. The launcher turns off their analytics, crash and error reports, feature flags, update checks, Claude Code's plugin marketplace download and WebFetch domain check, and Claude Desktop's connector icons, connector directory, and artifact preview.
• In Claude Desktop, artifacts no longer render, and the app no longer updates itself: install new versions yourself. Claude Code doesn't update itself either; run claude update.
• Signing in to a Claude.ai account is turned off, since it would bypass the gateway: /login in Claude Code, and the Claude.ai option on Claude Desktop's start screen.

Consus Launcher 1.1.0 for macOS (Apple silicon and Intel) and Windows (x64 and ARM64).

macOS: the .dmg, or the .pkg to install into /Applications. Windows: the .msi for your PC.
SHA256SUMS.txt lists the checksums; the .cdx.json files are the CycloneDX SBOMs.

The Windows installers and the app are signed by Consus Industries, Inc.

Or install from Terminal (checks the checksum first):

curl -fsSL https://raw.githubusercontent.com/consusindustries/consus-launcher/main/install.sh | sh

Consus Launcher 1.0.0

What's new

• Windows is no longer a preview: the .msi and the app are signed by Consus Industries, Inc. (Microsoft Artifact Signing), so Windows shows the publisher instead of "Unknown publisher".
• Says when a newer launcher is out: it reads a public file on portal.consus.io and links to the release. It never updates itself. Off by default on machines IT manages; the UpdateNotice setting turns it on or off.
• README: how to update and uninstall, and the signing identity IT needs to pre-approve the macOS permissions.
• Tauri 2.12.

Consus Launcher 1.0.0 for macOS (Apple silicon and Intel) and Windows (x64 and ARM64).

macOS: the .dmg, or the .pkg to install into /Applications. Windows: the .msi for your PC.
SHA256SUMS.txt lists the checksums; the .cdx.json files are the CycloneDX SBOMs.

The Windows installers and the app are signed by Consus Industries, Inc.

Or install from Terminal (checks the checksum first):

curl -fsSL https://raw.githubusercontent.com/consusindustries/consus-launcher/main/install.sh | sh

Consus Launcher 0.2.4

Consus Launcher 0.2.4 for macOS (Apple silicon and Intel) and Windows (x64 and ARM64, preview).

macOS: the .dmg, or the .pkg to install into /Applications. Windows: the .msi for your PC.
SHA256SUMS.txt lists the checksums; the .cdx.json files are the CycloneDX SBOMs.

The Windows installers are not code-signed yet, so Windows SmartScreen warns on first run:
choose More info, then Run anyway.

Or install from Terminal (checks the checksum first):

curl -fsSL https://raw.githubusercontent.com/consusindustries/consus-launcher/main/install.sh | sh

Consus Launcher 0.2.3

Consus Launcher 0.2.3 for macOS (Apple silicon and Intel) and Windows (x64 and ARM64, preview).

macOS: the .dmg, or the .pkg to install into /Applications. Windows: the .msi for your PC.
SHA256SUMS.txt lists the checksums; the .cdx.json files are the CycloneDX SBOMs.

The Windows installers are not code-signed yet, so Windows SmartScreen warns on first run:
choose More info, then Run anyway.

Or install from Terminal (checks the checksum first):

curl -fsSL https://raw.githubusercontent.com/consusindustries/consus-launcher/main/install.sh | sh

Consus Launcher 0.2.2

Consus Launcher 0.2.2 for macOS (Apple silicon and Intel) and Windows (x64 and ARM64, preview).

macOS: the .dmg, or the .pkg to install into /Applications. Windows: the .msi for your PC.
SHA256SUMS.txt lists the checksums; the .cdx.json files are the CycloneDX SBOMs.

The Windows installers are not code-signed yet, so Windows SmartScreen warns on first run:
choose More info, then Run anyway.

Or install from Terminal (checks the checksum first):

curl -fsSL https://raw.githubusercontent.com/consusindustries/consus-launcher/main/install.sh | sh

This build is not yet notarized by Apple. On first open, macOS will block a downloaded copy:
open System Settings, Privacy and Security, and click Open Anyway. If the app stays stuck
opening, use the Terminal install instead.