George Brancovici and Claude Opus 4.6
ab59eb1ecc
Update GALAXY.md with signing pipeline and diagnostics documentation
...
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-05-14 15:00:41 -04:00
George Brancovici and Claude Opus 4.6
cd52f5f940
Add copy-dmgs.sh to copy DMGs to ~/Downloads with date+letter suffix
...
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-05-14 14:56:54 -04:00
George Brancovici
587ca64de2
Merge branch 'master' into feat/signing
2026-05-14 13:44:51 -04:00
George Brancovici and Claude Opus 4.6
9cd70549ca
Fix hdiutil Resource Busy: retry loop + Spotlight indexing prevention
...
Adds .metadata_never_index to staging dir and retries hdiutil create
up to 3 times to handle transient "Resource busy" failures from
Spotlight/fseventsd locking the source folder.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-05-13 13:21:14 -04:00
George Brancovici and Claude Opus 4.6
c9492c90ea
Add code signing, notarization, and DMG packaging scripts
...
Enables distributing Galaxy.app to end users without Gatekeeper warnings.
Uses Samsung Developer ID Application certificate with hardened runtime.
Pipeline: cargo bundle → sign.sh → notarize.sh → package.sh → Galaxy.dmg
Entitlements:
- network.client (AWS Bedrock API calls)
- automation.apple-events (osascript for CLI install)
- cs.allow-unsigned-executable-memory (Metal shader compilation)
Orchestration scripts:
- build-debug.sh: full pipeline with debug build
- build-release.sh: full pipeline with release build
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-05-13 12:47:57 -04:00