electron-builder before 26.16.1 passes the .p12 password to
`security set-key-partition-list -k`, which expects its temporary
keychain's password. macOS 26 runners enforce that check, so signed
release builds failed with "SecKeychainUnlock: The user name or passphrase
you entered is not correct" (electron-builder#10066). 26.17.0 passes the
keychain password. npm's `latest` tag still points at 26.15.3, so the
range is pinned explicitly.
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
* Sign and notarize macOS release builds
Release builds of the Mac app now run in the protected release-signing
environment (approval required, v* tags only), are signed with the
Developer ID certificate, notarized with the App Store Connect key, and
checked with codesign, spctl and stapler before upload. Push and PR
builds stay ad-hoc signed and never see the secrets.
- electron-builder config moved to electron-builder.config.cjs, which
switches between ad-hoc and Developer ID signing based on CSC_LINK
- Hardened runtime entitlements for Electron
- Local network usage description and Bonjour services in Info.plist
for the macOS 15+ local network prompt
- README: signing setup and current "Open Anyway" steps
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* Only export signing variables for signed Mac builds
electron-builder treats an empty CSC_LINK as a certificate path, so PR
builds failed with "apps/desktop not a file". The variables are now
exported only by the signing step, which also checks every secret is
present.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* Keep Mac signing secrets inside the build step
They were exported through GITHUB_ENV, which makes them visible to every
later step and action in the job (artifact upload, post steps). They now
live only in the build step's environment, and the notarization key file
is deleted when the step exits.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* Build pull requests once, not once per push and once per PR
Push builds now run only for main; branch commits are built through their
pull request.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
build/icon.icns is the macOS version (Apple's rounded-square grid with
padding and shadow); build/icon.png is the full-bleed square electron-builder
uses for Windows and Linux.
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Publishing a vX.Y.Z release on GitHub now builds that tag as version
X.Y.Z and attaches the installers to the release. The version-bump
commit to main is gone, so releases work with branch protection. The
update checker only announces a release once its installers are attached.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The Linux AppImage derived its executable name from "@frameloader/desktop"
and electron-builder rejects the @ and /. Packages are now
frameloader-desktop, frameloader-web and frameloader-tokens, and the
Linux executable is named frameloader explicitly.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- wrangler.jsonc at the repo root: a static-assets Worker serving
apps/web/dist on www.frameloader.com, workers.dev off, previews on
- _headers with a strict CSP, security headers and immutable caching
for hashed assets; a 404 page
- Root-absolute asset paths and the clean /terms URL (app links too)
- Wrangler as a root dev dependency, with preview:web and deploy:web
- README section with the Workers Builds settings
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- Rename devkit titles in the Steam library after registration (via the
Steam client's DevTools port on the headset) so they no longer show as
"Devkit Game: <id>"
- Stage a lone dropped program by itself instead of uploading its folder
- Hide logs and the activity log behind Settings > Developer tools, and
stream them into a persistent pane instead of re-rendering the app
- Check GitHub releases for a newer version (switchable in Settings)
- Atomic config writes, a navigation guard, OBB upload progress, and
serialized APK parsing
- Build workflow for every push and PR, plus a release workflow that
publishes main as a version and bumps to the next patch
- Ad-hoc sign macOS builds; drop TERMS.md in favor of the site's terms page
- Start versioning at 0.0.1
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- apps/desktop: the Electron app, now bundling all runtime deps into
dist/main.cjs so packaged builds need no node_modules; Electron pinned
for electron-builder; screenshot script for the website
- apps/web: static landing page (Vite) and terms of use, using real app
screenshots in light and dark
- packages/tokens: shared color/type/shape tokens used by both
- Terms of use (TERMS.md, /terms.html), linked from the app's connect
screen
- Canonical URLs, social tags, robots.txt and sitemap for
www.frameloader.com
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Electron + TypeScript app that sideloads APKs, Windows apps, and Linux
ARM64 builds onto a Steam Frame through Valve's SteamOS devkit protocol:
devkit pairing or password SSH, mDNS headset discovery, upload and
registration via Valve's vendored devkit-utils scripts, Lepton logcat
streaming, and a light/dark UI with a browser mock for previews.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
