Skip to content

Fama v1.1.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Aug 06:44
· 10 commits to master since this release
v1.1.2
56468b4
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Fama v1.1.2 — reliable cross-platform release

Released 2026-08-12.

Fixed

  • The release gate now validates the universal macOS package before publishing
    the Windows release, preventing a partial latest release when Mac packaging
    fails.
  • macOS builds explicitly disable automatic identity discovery when no signing
    certificate is configured, avoiding the hosted-runner path error that blocked
    the prior Mac package.
  • The version in package.json, package-lock.json, and the release tag is
    now kept in lockstep by the release workflow's existing tag gate.

Fama v1.1.0 — Windows and macOS parity

Released 2026-08-12.

Fama now ships from one shared Electron codebase as a Windows x64 app and a universal macOS app for Apple Silicon and Intel.

Added

  • Universal macOS .dmg and updater .zip packaging with the same application ID, runtime, features, privacy boundary, tests, and package-secret scan as Windows.
  • Native macOS application, Dock, menu-bar, and tray menus, plus standard reopen behavior when the Dock icon is clicked.
  • Platform-correct startup and built-in voice labels while preserving one shared settings interface.
  • Pull-request and tagged-release jobs that build both Windows and macOS, combine checksums, and attest both platform bundles.
  • A high-resolution macOS .icns generated from the same Signal Aperture identity used on Windows.

Compatibility and signing

  • macOS 12 or newer on Apple Silicon or Intel.
  • The Windows build remains x64.
  • Windows remains unsigned by Authenticode. macOS remains unsigned by Apple Developer ID and is not notarized until the repository owner supplies those signing credentials; hashes, the SBOM, package scans, and GitHub/Sigstore attestations remain mandatory.

Fama v1.0.0 — first stable release

Released 2026-08-11.

Fama is a local-first Windows desktop companion for Claude Code and Codex. It turns the transcript files those agents already write on your computer into a live conversation/activity dashboard, with optional spoken narration.

Highlights

  • Follow Claude Code and Codex sessions side by side, grouped by project and provider.
  • Read messages in a conversation view or inspect reasoning summaries, tool calls, results, and errors in the activity view.
  • Hear the latest active session through the free operating-system voice or optional OpenAI text-to-speech using your own API key.
  • Watch multiple selected projects, rename and reorder lanes, and keep the app available from the Windows system tray.
  • Receive bounded native notifications when active agents finish, fail, or go quiet.
  • Install with the Windows setup executable or use the portable zip; updates are always user-confirmed before download and again before installation.

Privacy and security

  • The local server binds only to 127.0.0.1 and requires a per-process token for mutations.
  • Fama has no account, telemetry, analytics, or remotely hosted application UI.
  • Transcript content stays on the device unless optional cloud voice is enabled. In that mode, only narration requests are sent to OpenAI with the user's own key.
  • Transcript images are size-bounded and external image URLs are never fetched automatically.
  • Every release build runs tests, a high-severity dependency audit, and a package scan that blocks credentials and forbidden files.
  • Release downloads include SHA-256 checksums, a CycloneDX software bill of materials, and GitHub/Sigstore-signed build-provenance and SBOM attestations.

Compatibility

  • Prebuilt and end-to-end tested on Windows x64.
  • Source server requires Node.js 18 or newer.
  • macOS and Linux packaging paths are available for contributors but are not published or claimed as end-to-end supported in this release.

Known limitation

The Windows binaries are not Authenticode-signed yet, so Microsoft Defender SmartScreen may warn on first launch. A real certificate requires owner identity verification and enrollment; Fama does not claim a certificate it does not possess. Download integrity and build origin can instead be checked with SHA256SUMS.txt and GitHub artifact attestations on the release page.

For private vulnerability reports, use GitHub's Security → Report a vulnerability flow. See SECURITY.md for the complete disclosure and data-flow policy.

Assets 9
Loading