mirror of
https://github.com/stablyai/orca.git
synced 2026-10-19 08:03:13 +00:00
Local 'pnpm build' carried the release appId com.stablyai.orca under a different (ad-hoc/local) signature; macOS TCC keys grants to bundle id + signature, so local builds collided with and corrupted the installed release's grant identity. Non-release packaging now uses com.stablyai.orca.local, gated on ORCA_MAC_RELEASE — the same env that enables release signing — so release artifacts are byte-identical. Knock-ons covered: sidecar peer-trust allowlist, notification-status sidecar bundle id, and the notification settings deep-link now trusts the launchd-provided id. Refs #9756