Skip to content

Firefly Weave 0.1.0a6 — macOS packaging repair

Pre-release
Pre-release

Choose a tag to compare

@ancongui ancongui released this 02 Oct 03:10

macOS packaging repair

Alpha6 repairs the missing macOS application resource seal in the alpha5 Apple Silicon installer. It also fixes the signed Python host startup by supplying the PyInstaller library-validation entitlement while keeping hardened runtime enabled.

macOS trust status: these preview bundles are ad-hoc signed, not Developer ID signed or notarized. Signature integrity and local startup have been verified; Gatekeeper still rejects the unnotarized publisher. This release does not promise that macOS will open a downloaded app without policy-approved manual approval. Use browser Studio if your installation policy requires a trusted publisher. Do not use the alpha5 Mac installer or remove quarantine as a workaround.

Download and install

  • Apple Silicon: download the alpha6 aarch64-apple-darwin.dmg and its target checksum inventory below.
  • CLI and browser Studio: use the matching 0.1.0a6 wheel/installer and optional Studio ZIP.
  • Other native targets are available only when attached below; no filename in the documentation implies an installer has already been published.
  • Follow the desktop installation guide or browser Studio guide.

Verification

Release packaging now verifies the outer application, both nested executables, and the application mounted read-only from its DMG. It smoke-tests the host again after signing, including readiness, matching version, assets, pairing, connection assistance, compiler, and owned shutdown. The alpha6 unit/contract suite passed 2,146 tests; packaging and source-attribution checks passed separately. Lint, types, strict documentation build, and independent installed artifact closures were checked.

The database schema remains 0025_run_lifecycle; this packaging repair adds no migration. This is an alpha preview, not certification of the full production recovery, live CIAM, mail, or cloud acceptance matrix. Checksums are supplied for the exact attached bytes. No signing credentials are included.