public/galaxy
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
245 Commits 1 Branch 0 Tags
master
Commit Graph
6 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
George BrancoviciandClaude Opus 4.6 af5315313d Add migration docs and fix notarization scripts to use inline credentials 
Keychain profile approach doesn't work from Galaxy terminal (no interactive
auth entitlement). Switched to inline Apple ID/team/password in notarize.sh
and package.sh. Added migration-docs/ for session continuity on new machines.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-07-09 14:15:36 -04:00
George BrancoviciandClaude Opus 4.6 ab59eb1ecc Update GALAXY.md with signing pipeline and diagnostics documentation 
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-05-14 15:00:41 -04:00
George BrancoviciandClaude Opus 4.6 cd52f5f940 Add copy-dmgs.sh to copy DMGs to ~/Downloads with date+letter suffix 
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-05-14 14:56:54 -04:00
George Brancovici 587ca64de2 Merge branch 'master' into feat/signing 2026-05-14 13:44:51 -04:00
George BrancoviciandClaude Opus 4.6 9cd70549ca Fix hdiutil Resource Busy: retry loop + Spotlight indexing prevention 
Adds .metadata_never_index to staging dir and retries hdiutil create
up to 3 times to handle transient "Resource busy" failures from
Spotlight/fseventsd locking the source folder.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-05-13 13:21:14 -04:00
George BrancoviciandClaude Opus 4.6 c9492c90ea Add code signing, notarization, and DMG packaging scripts 
Enables distributing Galaxy.app to end users without Gatekeeper warnings.
Uses Samsung Developer ID Application certificate with hardened runtime.

Pipeline: cargo bundle → sign.sh → notarize.sh → package.sh → Galaxy.dmg

Entitlements:
- network.client (AWS Bedrock API calls)
- automation.apple-events (osascript for CLI install)
- cs.allow-unsigned-executable-memory (Metal shader compilation)

Orchestration scripts:
- build-debug.sh: full pipeline with debug build
- build-release.sh: full pipeline with release build

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-05-13 12:47:57 -04:00