Skip to content

Sandbox no updater - #26

Merged
tsconfigdotjson merged 5 commits into
mainfrom
sandbox-no-updater
Mar 26, 2026
Merged

tsconfigdotjson merged 5 commits into
mainfrom
sandbox-no-updater

Conversation

@tsconfigdotjson

Copy link
Copy Markdown
Owner

No description provided.

The app's core promise is zero network access enforced by the macOS
sandbox. The in-app updater is incompatible with this — it requires
network entitlements. Users download new versions from the website.

- Remove all updater code (bun, RPC, types, frontend banner)
- Add com.apple.security.app-sandbox entitlement
- Add com.apple.security.files.user-selected.read-write for vault/repo access
- No network entitlements: grep -c "network" returns 0
- Update website verify section to show sandbox + network check

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
tsconfigdotjson and others added 3 commits March 26, 2026 10:27
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Bun crashes inside macOS App Sandbox (oven-sh/bun#27041). Remove
the entitlement so the app launches. Keep the full verify section
on the website but ghost it with a coming-soon stamp linking to
the upstream PR.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Remove app-sandbox entitlement (Bun crashes in sandbox, oven-sh/bun#27041)
- Ghost the verify section with a coming-soon stamp linking to the upstream PR
- Add clickable screenshot lightbox with keyboard dismiss

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@tsconfigdotjson
tsconfigdotjson merged commit 2dea825 into main Mar 26, 2026
1 check passed
@tsconfigdotjson
tsconfigdotjson deleted the sandbox-no-updater branch March 26, 2026 14:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant