wushenghua 80d7f04335 fix(deploy): pin a stable signing identity for local binary deploys ...

Ad-hoc signatures carry a cdhash-based TCC requirement that changes on
every build, so macOS treats each local binary as a new app and re-asks
protected permissions (Documents, Downloads, media library, ...) after
every deploy.

- add scripts/deploy-local.sh: pins one Apple Development identity
  (SHA-1 stored in ~/.hapi/signing-identity, override via
  HAPI_SIGN_IDENTITY), signs with identifier run.hapi.cli, copies to a
  new versioned file, repoints ~/.hapi/bin/hapi, restarts the hub, and
  rolls back when /health fails
- document the identity step and TCC rationale in AGENTS.md and
  docs/local-deployment.md; agent sessions must prune TCC-protected
  folders (~/Music, ~/Pictures, ~/Movies, ~/Library) from recursive
  $HOME sweeps
- drop the one-off scripts/deploy-local-capacity-retry.sh (ad-hoc)

2026-09-16 17:43:46 +08:00

..

dev

feat(media): add audio and file display (#1405)

2026-08-08 13:46:59 +08:00

tooling

feat(media): add audio and file display (#1405)

2026-08-08 13:46:59 +08:00

deploy-local.sh

fix(deploy): pin a stable signing identity for local binary deploys

2026-09-16 17:43:46 +08:00