mirror of
https://github.com/Ryder-Sun/Meldwork.git
synced 2026-11-07 06:56:03 -10:00
chore(release): prepare the public MVP
Adopt AGPL-3.0-only for the Community Edition, reserve separate commercial licensing, and set the permanent macOS Bundle ID to com.rydersun.meldwork. Add fail-closed Developer ID/notarization preflight and post-sign checks, package license notices, and refresh public MVP, signing, architecture, security, and verification documentation. Checks: frontend 237/237; desktop 842/842; web and desktop builds; production audits; pack and DMG/ZIP dist; strict codesign; clean-profile packaged startup; archive Bundle ID/license inspection; Markdown links; git diff --check.
This commit is contained in:
Ryder Sun committed
1 parent
0aba8f5d4d
commit
d8c701b296
28 files changed
+1287
-173
No files matched your search
@@ -40,6 +40,7 @@ blob-report/
|
||||
*.local
|
||||
*.pem
|
||||
*.key
|
||||
*.p8
|
||||
*.p12
|
||||
*.pfx
|
||||
*.cer
|
||||
|
||||
@@ -1,5 +1,25 @@
|
||||
# Changelog
|
||||
|
||||
## Unreleased public MVP release candidate
|
||||
|
||||
### Highlights
|
||||
|
||||
- Hardened durable group orchestration, crash recovery, Human Gates, Agent controls, and bounded run traces.
|
||||
- Added validated image, media, document, code, Office, and archive attachments through picker, paste, and drag-and-drop flows.
|
||||
- Added read-only staging when an Agent lacks native support for a selected attachment type.
|
||||
- Removed the superseded Role Review module and kept review as a bounded two-Agent group workflow.
|
||||
- Completed Agent, Knowledge, mock Cloud, and Channel framework contracts while keeping production Cloud and Channel connectors disabled by default.
|
||||
- Changed the Community Edition license from PolyForm Noncommercial 1.0.0 to AGPL-3.0-only, with separate commercial licensing available for proprietary use cases.
|
||||
- Set the permanent macOS Bundle ID to `com.rydersun.meldwork` before the first public release.
|
||||
|
||||
### Verification
|
||||
|
||||
- Frontend tests: 237 passed.
|
||||
- Desktop tests: 842 passed.
|
||||
- Web and Electron renderer builds passed without the previous 500 kB chunk warning.
|
||||
- Apple silicon package validation and exact packaged direct/group attachment acceptance passed.
|
||||
- Public distribution still requires Developer ID signing and Apple notarization.
|
||||
|
||||
## 0.1.0 Private Preview 1 - 2026-08-03
|
||||
|
||||
This private preview packages the current Meldwork MVP for internal evaluation on Apple silicon Macs.
|
||||
|
||||
+10
-10
@@ -1,16 +1,16 @@
|
||||
# Commercial Use Policy
|
||||
# Commercial Use And Licensing
|
||||
|
||||
Meldwork is source-available under the [PolyForm Noncommercial License 1.0.0](LICENSE). It is not licensed under Apache 2.0, because Apache 2.0 permits commercial use.
|
||||
Meldwork Community Edition is open source under the [GNU Affero General Public License v3.0 only](LICENSE). The AGPL permits commercial use. You do not need a separate commercial license merely to use an unmodified copy, including inside a company, as long as your use complies with the AGPL.
|
||||
|
||||
You may use, study, modify, and share Meldwork only for purposes permitted by the PolyForm Noncommercial license. Commercial use requires a separate written agreement from the copyright holder.
|
||||
The AGPL also permits modification and redistribution, but it requires covered source code to remain available in circumstances defined by the license, including distribution of modified versions and remote network interaction with a modified version.
|
||||
|
||||
Examples that require prior written permission include:
|
||||
The copyright holder may offer a separate commercial license for organizations that need terms outside the AGPL, including:
|
||||
|
||||
- using Meldwork in a for-profit company's internal workflow, commercial evaluation, or client delivery;
|
||||
- offering Meldwork as a paid product, hosted service, consulting service, integration, training, or managed deployment;
|
||||
- redistributing Meldwork as part of a commercial product, bundle, or appliance;
|
||||
- using Meldwork branding, product assets, or documentation in commercial marketing.
|
||||
- proprietary redistribution or resale of Meldwork or a modified version;
|
||||
- embedding Meldwork code in a closed-source product;
|
||||
- offering a modified hosted or network-accessible version without the AGPL source obligations;
|
||||
- separately licensed commercial features, enterprise integrations, support, or managed deployment.
|
||||
|
||||
This page is a practical summary and does not replace or modify the license terms. When the classification of a use is unclear, obtain written permission before using Meldwork in a commercial context.
|
||||
A commercial license does not change the licenses of third-party dependencies, Agent products, names, or logos. The AGPL also does not grant trademark rights to the Meldwork name, logo, or other brand assets.
|
||||
|
||||
For commercial licensing, contact the repository owner through GitHub.
|
||||
This page is a practical summary and does not replace the license text or legal advice. When a planned use does not fit the AGPL, contact the repository owner through GitHub before distributing or offering the product.
|
||||
+5
-4
@@ -1,8 +1,8 @@
|
||||
# Contributing
|
||||
|
||||
Meldwork is currently a source-available, non-commercial project. Contributions are welcome when they improve the local-first desktop product, documentation, tests, or security posture.
|
||||
Meldwork Community Edition is open source under the [GNU Affero General Public License v3.0 only](LICENSE). Contributions are welcome when they improve the local-first desktop product, documentation, tests, or security posture.
|
||||
|
||||
By submitting a contribution, you agree that your contribution is licensed under the same license as this repository unless a separate written agreement says otherwise.
|
||||
Unless a separate written agreement applies, a contribution accepted into this repository is available under AGPL-3.0-only. The project may also offer separately licensed commercial editions. Before external code is incorporated into a separately licensed commercial build, the maintainer will require a reviewed contributor-license agreement that grants the necessary relicensing rights. Opening a pull request by itself does not transfer copyright or silently grant those additional rights.
|
||||
|
||||
## Ground Rules
|
||||
|
||||
@@ -11,7 +11,8 @@ By submitting a contribution, you agree that your contribution is licensed under
|
||||
- Do not add remote services, telemetry, credential collection, or server dependencies without explicit project approval.
|
||||
- Preserve the local-first boundary: renderer code must not gain unrestricted filesystem, shell, Provider credential, or executable-path access.
|
||||
- Include focused tests for behavior, security boundary, storage, or IPC changes.
|
||||
- Confirm that all submitted code and assets are yours to license and do not introduce incompatible license obligations.
|
||||
|
||||
## Commercial Rights
|
||||
## Commercial Editions
|
||||
|
||||
Submitting a contribution does not grant commercial-use rights to this repository. Commercial use requires a separate written agreement; see [COMMERCIAL_USE.md](COMMERCIAL_USE.md).
|
||||
The AGPL Community Edition remains available under its open-source terms. Commercial editions, proprietary integrations, support, and other paid offerings may use separate terms; see [COMMERCIAL_USE.md](COMMERCIAL_USE.md).
|
||||
@@ -1,132 +1,661 @@
|
||||
PolyForm Noncommercial License 1.0.0
|
||||
GNU AFFERO GENERAL PUBLIC LICENSE
|
||||
Version 3, 19 November 2007
|
||||
|
||||
https://polyformproject.org/licenses/noncommercial/1.0.0
|
||||
Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
|
||||
Everyone is permitted to copy and distribute verbatim copies
|
||||
of this license document, but changing it is not allowed.
|
||||
|
||||
Required Notice: Copyright 2026 Ryder-MHumble and Meldwork contributors.
|
||||
Preamble
|
||||
|
||||
Acceptance
|
||||
The GNU Affero General Public License is a free, copyleft license for
|
||||
software and other kinds of works, specifically designed to ensure
|
||||
cooperation with the community in the case of network server software.
|
||||
|
||||
In order to get any license under these terms, you must agree
|
||||
to them as both strict obligations and conditions to all
|
||||
your licenses.
|
||||
The licenses for most software and other practical works are designed
|
||||
to take away your freedom to share and change the works. By contrast,
|
||||
our General Public Licenses are intended to guarantee your freedom to
|
||||
share and change all versions of a program--to make sure it remains free
|
||||
software for all its users.
|
||||
|
||||
Copyright License
|
||||
When we speak of free software, we are referring to freedom, not
|
||||
price. Our General Public Licenses are designed to make sure that you
|
||||
have the freedom to distribute copies of free software (and charge for
|
||||
them if you wish), that you receive source code or can get it if you
|
||||
want it, that you can change the software or use pieces of it in new
|
||||
free programs, and that you know you can do these things.
|
||||
|
||||
The licensor grants you a copyright license for the
|
||||
software to do everything you might do with the software
|
||||
that would otherwise infringe the licensor's copyright
|
||||
in it for any permitted purpose. However, you may
|
||||
only distribute the software according to the Distribution
|
||||
License section and make changes or new works based on the
|
||||
software according to the Changes and New Works License section.
|
||||
Developers that use our General Public Licenses protect your rights
|
||||
with two steps: (1) assert copyright on the software, and (2) offer
|
||||
you this License which gives you legal permission to copy, distribute
|
||||
and/or modify the software.
|
||||
|
||||
Distribution License
|
||||
A secondary benefit of defending all users' freedom is that
|
||||
improvements made in alternate versions of the program, if they
|
||||
receive widespread use, become available for other developers to
|
||||
incorporate. Many developers of free software are heartened and
|
||||
encouraged by the resulting cooperation. However, in the case of
|
||||
software used on network servers, this result may fail to come about.
|
||||
The GNU General Public License permits making a modified version and
|
||||
letting the public access it on a server without ever releasing its
|
||||
source code to the public.
|
||||
|
||||
The licensor grants you an additional copyright license
|
||||
to distribute copies of the software. Your license
|
||||
to distribute covers distributing the software with
|
||||
changes and new works permitted by the Changes and New Works
|
||||
License section.
|
||||
The GNU Affero General Public License is designed specifically to
|
||||
ensure that, in such cases, the modified source code becomes available
|
||||
to the community. It requires the operator of a network server to
|
||||
provide the source code of the modified version running there to the
|
||||
users of that server. Therefore, public use of a modified version, on
|
||||
a publicly accessible server, gives the public access to the source
|
||||
code of the modified version.
|
||||
|
||||
Notices
|
||||
An older license, called the Affero General Public License and
|
||||
published by Affero, was designed to accomplish similar goals. This is
|
||||
a different license, not a version of the Affero GPL, but Affero has
|
||||
released a new version of the Affero GPL which permits relicensing under
|
||||
this license.
|
||||
|
||||
You must ensure that anyone who gets a copy of any part of
|
||||
the software from you also gets a copy of these terms or the
|
||||
URL for them above, as well as copies of any plain-text lines
|
||||
beginning with "Required Notice:" that the licensor provided
|
||||
with the software. For example:
|
||||
The precise terms and conditions for copying, distribution and
|
||||
modification follow.
|
||||
|
||||
Required Notice: Copyright Yoyodyne, Inc. (http://example.com)
|
||||
TERMS AND CONDITIONS
|
||||
|
||||
Changes and New Works License
|
||||
0. Definitions.
|
||||
|
||||
The licensor grants you an additional copyright license to
|
||||
make changes and new works based on the software for any
|
||||
permitted purpose.
|
||||
"This License" refers to version 3 of the GNU Affero General Public License.
|
||||
|
||||
Patent License
|
||||
"Copyright" also means copyright-like laws that apply to other kinds of
|
||||
works, such as semiconductor masks.
|
||||
|
||||
The licensor grants you a patent license for the software that
|
||||
covers patent claims the licensor can license, or becomes able
|
||||
to license, that you would infringe by using the software.
|
||||
"The Program" refers to any copyrightable work licensed under this
|
||||
License. Each licensee is addressed as "you". "Licensees" and
|
||||
"recipients" may be individuals or organizations.
|
||||
|
||||
Noncommercial Purposes
|
||||
To "modify" a work means to copy from or adapt all or part of the work
|
||||
in a fashion requiring copyright permission, other than the making of an
|
||||
exact copy. The resulting work is called a "modified version" of the
|
||||
earlier work or a work "based on" the earlier work.
|
||||
|
||||
Any noncommercial purpose is a permitted purpose.
|
||||
A "covered work" means either the unmodified Program or a work based
|
||||
on the Program.
|
||||
|
||||
Personal Uses
|
||||
To "propagate" a work means to do anything with it that, without
|
||||
permission, would make you directly or secondarily liable for
|
||||
infringement under applicable copyright law, except executing it on a
|
||||
computer or modifying a private copy. Propagation includes copying,
|
||||
distribution (with or without modification), making available to the
|
||||
public, and in some countries other activities as well.
|
||||
|
||||
Personal use for research, experiment, and testing for
|
||||
the benefit of public knowledge, personal study, private
|
||||
entertainment, hobby projects, amateur pursuits, or religious
|
||||
observance, without any anticipated commercial application,
|
||||
is use for a permitted purpose.
|
||||
To "convey" a work means any kind of propagation that enables other
|
||||
parties to make or receive copies. Mere interaction with a user through
|
||||
a computer network, with no transfer of a copy, is not conveying.
|
||||
|
||||
Noncommercial Organizations
|
||||
An interactive user interface displays "Appropriate Legal Notices"
|
||||
to the extent that it includes a convenient and prominently visible
|
||||
feature that (1) displays an appropriate copyright notice, and (2)
|
||||
tells the user that there is no warranty for the work (except to the
|
||||
extent that warranties are provided), that licensees may convey the
|
||||
work under this License, and how to view a copy of this License. If
|
||||
the interface presents a list of user commands or options, such as a
|
||||
menu, a prominent item in the list meets this criterion.
|
||||
|
||||
Use by any charitable organization, educational institution,
|
||||
public research organization, public safety or health
|
||||
organization, environmental protection organization,
|
||||
or government institution is use for a permitted purpose
|
||||
regardless of the source of funding or obligations resulting
|
||||
from the funding.
|
||||
1. Source Code.
|
||||
|
||||
Fair Use
|
||||
The "source code" for a work means the preferred form of the work
|
||||
for making modifications to it. "Object code" means any non-source
|
||||
form of a work.
|
||||
|
||||
You may have "fair use" rights for the software under the
|
||||
law. These terms do not limit them.
|
||||
A "Standard Interface" means an interface that either is an official
|
||||
standard defined by a recognized standards body, or, in the case of
|
||||
interfaces specified for a particular programming language, one that
|
||||
is widely used among developers working in that language.
|
||||
|
||||
No Other Rights
|
||||
The "System Libraries" of an executable work include anything, other
|
||||
than the work as a whole, that (a) is included in the normal form of
|
||||
packaging a Major Component, but which is not part of that Major
|
||||
Component, and (b) serves only to enable use of the work with that
|
||||
Major Component, or to implement a Standard Interface for which an
|
||||
implementation is available to the public in source code form. A
|
||||
"Major Component", in this context, means a major essential component
|
||||
(kernel, window system, and so on) of the specific operating system
|
||||
(if any) on which the executable work runs, or a compiler used to
|
||||
produce the work, or an object code interpreter used to run it.
|
||||
|
||||
These terms do not allow you to sublicense or transfer any of
|
||||
your licenses to anyone else, or prevent the licensor from
|
||||
granting licenses to anyone else. These terms do not imply
|
||||
any other licenses.
|
||||
The "Corresponding Source" for a work in object code form means all
|
||||
the source code needed to generate, install, and (for an executable
|
||||
work) run the object code and to modify the work, including scripts to
|
||||
control those activities. However, it does not include the work's
|
||||
System Libraries, or general-purpose tools or generally available free
|
||||
programs which are used unmodified in performing those activities but
|
||||
which are not part of the work. For example, Corresponding Source
|
||||
includes interface definition files associated with source files for
|
||||
the work, and the source code for shared libraries and dynamically
|
||||
linked subprograms that the work is specifically designed to require,
|
||||
such as by intimate data communication or control flow between those
|
||||
subprograms and other parts of the work.
|
||||
|
||||
Patent Defense
|
||||
The Corresponding Source need not include anything that users
|
||||
can regenerate automatically from other parts of the Corresponding
|
||||
Source.
|
||||
|
||||
If you make any written claim that the software infringes or
|
||||
contributes to infringement of any patent, your patent license
|
||||
for the software granted under these terms ends immediately. If
|
||||
your company makes such a claim, your patent license ends
|
||||
immediately for work on behalf of your company.
|
||||
The Corresponding Source for a work in source code form is that
|
||||
same work.
|
||||
|
||||
Violations
|
||||
2. Basic Permissions.
|
||||
|
||||
The first time you are notified in writing that you have
|
||||
violated any of these terms, or done anything with the software
|
||||
not covered by your licenses, your licenses can nonetheless
|
||||
continue if you come into full compliance with these terms,
|
||||
and take practical steps to correct past violations, within
|
||||
32 days of receiving notice. Otherwise, all your licenses
|
||||
end immediately.
|
||||
All rights granted under this License are granted for the term of
|
||||
copyright on the Program, and are irrevocable provided the stated
|
||||
conditions are met. This License explicitly affirms your unlimited
|
||||
permission to run the unmodified Program. The output from running a
|
||||
covered work is covered by this License only if the output, given its
|
||||
content, constitutes a covered work. This License acknowledges your
|
||||
rights of fair use or other equivalent, as provided by copyright law.
|
||||
|
||||
No Liability
|
||||
You may make, run and propagate covered works that you do not
|
||||
convey, without conditions so long as your license otherwise remains
|
||||
in force. You may convey covered works to others for the sole purpose
|
||||
of having them make modifications exclusively for you, or provide you
|
||||
with facilities for running those works, provided that you comply with
|
||||
the terms of this License in conveying all material for which you do
|
||||
not control copyright. Those thus making or running the covered works
|
||||
for you must do so exclusively on your behalf, under your direction
|
||||
and control, on terms that prohibit them from making any copies of
|
||||
your copyrighted material outside their relationship with you.
|
||||
|
||||
As far as the law allows, the software comes as is, without
|
||||
any warranty or condition, and the licensor will not be liable
|
||||
to you for any damages arising out of these terms or the use
|
||||
or nature of the software, under any kind of legal claim.
|
||||
Conveying under any other circumstances is permitted solely under
|
||||
the conditions stated below. Sublicensing is not allowed; section 10
|
||||
makes it unnecessary.
|
||||
|
||||
Definitions
|
||||
3. Protecting Users' Legal Rights From Anti-Circumvention Law.
|
||||
|
||||
The "licensor" is the individual or entity offering these
|
||||
terms, and the "software" is the software the licensor makes
|
||||
available under these terms.
|
||||
No covered work shall be deemed part of an effective technological
|
||||
measure under any applicable law fulfilling obligations under article
|
||||
11 of the WIPO copyright treaty adopted on 20 December 1996, or
|
||||
similar laws prohibiting or restricting circumvention of such
|
||||
measures.
|
||||
|
||||
"You" refers to the individual or entity agreeing to these
|
||||
terms.
|
||||
When you convey a covered work, you waive any legal power to forbid
|
||||
circumvention of technological measures to the extent such circumvention
|
||||
is effected by exercising rights under this License with respect to
|
||||
the covered work, and you disclaim any intention to limit operation or
|
||||
modification of the work as a means of enforcing, against the work's
|
||||
users, your or third parties' legal rights to forbid circumvention of
|
||||
technological measures.
|
||||
|
||||
"Your company" is any legal entity, sole proprietorship,
|
||||
or other kind of organization that you work for, plus all
|
||||
organizations that have control over, are under the control of,
|
||||
or are under common control with that organization. "Control"
|
||||
means ownership of substantially all the assets of an entity,
|
||||
or the power to direct its management and policies by vote,
|
||||
contract, or otherwise. Control can be direct or indirect.
|
||||
4. Conveying Verbatim Copies.
|
||||
|
||||
"Your licenses" are all the licenses granted to you for the
|
||||
software under these terms.
|
||||
You may convey verbatim copies of the Program's source code as you
|
||||
receive it, in any medium, provided that you conspicuously and
|
||||
appropriately publish on each copy an appropriate copyright notice;
|
||||
keep intact all notices stating that this License and any
|
||||
non-permissive terms added in accord with section 7 apply to the code;
|
||||
keep intact all notices of the absence of any warranty; and give all
|
||||
recipients a copy of this License along with the Program.
|
||||
|
||||
"Use" means anything you do with the software requiring one
|
||||
of your licenses.
|
||||
You may charge any price or no price for each copy that you convey,
|
||||
and you may offer support or warranty protection for a fee.
|
||||
|
||||
5. Conveying Modified Source Versions.
|
||||
|
||||
You may convey a work based on the Program, or the modifications to
|
||||
produce it from the Program, in the form of source code under the
|
||||
terms of section 4, provided that you also meet all of these conditions:
|
||||
|
||||
a) The work must carry prominent notices stating that you modified
|
||||
it, and giving a relevant date.
|
||||
|
||||
b) The work must carry prominent notices stating that it is
|
||||
released under this License and any conditions added under section
|
||||
7. This requirement modifies the requirement in section 4 to
|
||||
"keep intact all notices".
|
||||
|
||||
c) You must license the entire work, as a whole, under this
|
||||
License to anyone who comes into possession of a copy. This
|
||||
License will therefore apply, along with any applicable section 7
|
||||
additional terms, to the whole of the work, and all its parts,
|
||||
regardless of how they are packaged. This License gives no
|
||||
permission to license the work in any other way, but it does not
|
||||
invalidate such permission if you have separately received it.
|
||||
|
||||
d) If the work has interactive user interfaces, each must display
|
||||
Appropriate Legal Notices; however, if the Program has interactive
|
||||
interfaces that do not display Appropriate Legal Notices, your
|
||||
work need not make them do so.
|
||||
|
||||
A compilation of a covered work with other separate and independent
|
||||
works, which are not by their nature extensions of the covered work,
|
||||
and which are not combined with it such as to form a larger program,
|
||||
in or on a volume of a storage or distribution medium, is called an
|
||||
"aggregate" if the compilation and its resulting copyright are not
|
||||
used to limit the access or legal rights of the compilation's users
|
||||
beyond what the individual works permit. Inclusion of a covered work
|
||||
in an aggregate does not cause this License to apply to the other
|
||||
parts of the aggregate.
|
||||
|
||||
6. Conveying Non-Source Forms.
|
||||
|
||||
You may convey a covered work in object code form under the terms
|
||||
of sections 4 and 5, provided that you also convey the
|
||||
machine-readable Corresponding Source under the terms of this License,
|
||||
in one of these ways:
|
||||
|
||||
a) Convey the object code in, or embodied in, a physical product
|
||||
(including a physical distribution medium), accompanied by the
|
||||
Corresponding Source fixed on a durable physical medium
|
||||
customarily used for software interchange.
|
||||
|
||||
b) Convey the object code in, or embodied in, a physical product
|
||||
(including a physical distribution medium), accompanied by a
|
||||
written offer, valid for at least three years and valid for as
|
||||
long as you offer spare parts or customer support for that product
|
||||
model, to give anyone who possesses the object code either (1) a
|
||||
copy of the Corresponding Source for all the software in the
|
||||
product that is covered by this License, on a durable physical
|
||||
medium customarily used for software interchange, for a price no
|
||||
more than your reasonable cost of physically performing this
|
||||
conveying of source, or (2) access to copy the
|
||||
Corresponding Source from a network server at no charge.
|
||||
|
||||
c) Convey individual copies of the object code with a copy of the
|
||||
written offer to provide the Corresponding Source. This
|
||||
alternative is allowed only occasionally and noncommercially, and
|
||||
only if you received the object code with such an offer, in accord
|
||||
with subsection 6b.
|
||||
|
||||
d) Convey the object code by offering access from a designated
|
||||
place (gratis or for a charge), and offer equivalent access to the
|
||||
Corresponding Source in the same way through the same place at no
|
||||
further charge. You need not require recipients to copy the
|
||||
Corresponding Source along with the object code. If the place to
|
||||
copy the object code is a network server, the Corresponding Source
|
||||
may be on a different server (operated by you or a third party)
|
||||
that supports equivalent copying facilities, provided you maintain
|
||||
clear directions next to the object code saying where to find the
|
||||
Corresponding Source. Regardless of what server hosts the
|
||||
Corresponding Source, you remain obligated to ensure that it is
|
||||
available for as long as needed to satisfy these requirements.
|
||||
|
||||
e) Convey the object code using peer-to-peer transmission, provided
|
||||
you inform other peers where the object code and Corresponding
|
||||
Source of the work are being offered to the general public at no
|
||||
charge under subsection 6d.
|
||||
|
||||
A separable portion of the object code, whose source code is excluded
|
||||
from the Corresponding Source as a System Library, need not be
|
||||
included in conveying the object code work.
|
||||
|
||||
A "User Product" is either (1) a "consumer product", which means any
|
||||
tangible personal property which is normally used for personal, family,
|
||||
or household purposes, or (2) anything designed or sold for incorporation
|
||||
into a dwelling. In determining whether a product is a consumer product,
|
||||
doubtful cases shall be resolved in favor of coverage. For a particular
|
||||
product received by a particular user, "normally used" refers to a
|
||||
typical or common use of that class of product, regardless of the status
|
||||
of the particular user or of the way in which the particular user
|
||||
actually uses, or expects or is expected to use, the product. A product
|
||||
is a consumer product regardless of whether the product has substantial
|
||||
commercial, industrial or non-consumer uses, unless such uses represent
|
||||
the only significant mode of use of the product.
|
||||
|
||||
"Installation Information" for a User Product means any methods,
|
||||
procedures, authorization keys, or other information required to install
|
||||
and execute modified versions of a covered work in that User Product from
|
||||
a modified version of its Corresponding Source. The information must
|
||||
suffice to ensure that the continued functioning of the modified object
|
||||
code is in no case prevented or interfered with solely because
|
||||
modification has been made.
|
||||
|
||||
If you convey an object code work under this section in, or with, or
|
||||
specifically for use in, a User Product, and the conveying occurs as
|
||||
part of a transaction in which the right of possession and use of the
|
||||
User Product is transferred to the recipient in perpetuity or for a
|
||||
fixed term (regardless of how the transaction is characterized), the
|
||||
Corresponding Source conveyed under this section must be accompanied
|
||||
by the Installation Information. But this requirement does not apply
|
||||
if neither you nor any third party retains the ability to install
|
||||
modified object code on the User Product (for example, the work has
|
||||
been installed in ROM).
|
||||
|
||||
The requirement to provide Installation Information does not include a
|
||||
requirement to continue to provide support service, warranty, or updates
|
||||
for a work that has been modified or installed by the recipient, or for
|
||||
the User Product in which it has been modified or installed. Access to a
|
||||
network may be denied when the modification itself materially and
|
||||
adversely affects the operation of the network or violates the rules and
|
||||
protocols for communication across the network.
|
||||
|
||||
Corresponding Source conveyed, and Installation Information provided,
|
||||
in accord with this section must be in a format that is publicly
|
||||
documented (and with an implementation available to the public in
|
||||
source code form), and must require no special password or key for
|
||||
unpacking, reading or copying.
|
||||
|
||||
7. Additional Terms.
|
||||
|
||||
"Additional permissions" are terms that supplement the terms of this
|
||||
License by making exceptions from one or more of its conditions.
|
||||
Additional permissions that are applicable to the entire Program shall
|
||||
be treated as though they were included in this License, to the extent
|
||||
that they are valid under applicable law. If additional permissions
|
||||
apply only to part of the Program, that part may be used separately
|
||||
under those permissions, but the entire Program remains governed by
|
||||
this License without regard to the additional permissions.
|
||||
|
||||
When you convey a copy of a covered work, you may at your option
|
||||
remove any additional permissions from that copy, or from any part of
|
||||
it. (Additional permissions may be written to require their own
|
||||
removal in certain cases when you modify the work.) You may place
|
||||
additional permissions on material, added by you to a covered work,
|
||||
for which you have or can give appropriate copyright permission.
|
||||
|
||||
Notwithstanding any other provision of this License, for material you
|
||||
add to a covered work, you may (if authorized by the copyright holders of
|
||||
that material) supplement the terms of this License with terms:
|
||||
|
||||
a) Disclaiming warranty or limiting liability differently from the
|
||||
terms of sections 15 and 16 of this License; or
|
||||
|
||||
b) Requiring preservation of specified reasonable legal notices or
|
||||
author attributions in that material or in the Appropriate Legal
|
||||
Notices displayed by works containing it; or
|
||||
|
||||
c) Prohibiting misrepresentation of the origin of that material, or
|
||||
requiring that modified versions of such material be marked in
|
||||
reasonable ways as different from the original version; or
|
||||
|
||||
d) Limiting the use for publicity purposes of names of licensors or
|
||||
authors of the material; or
|
||||
|
||||
e) Declining to grant rights under trademark law for use of some
|
||||
trade names, trademarks, or service marks; or
|
||||
|
||||
f) Requiring indemnification of licensors and authors of that
|
||||
material by anyone who conveys the material (or modified versions of
|
||||
it) with contractual assumptions of liability to the recipient, for
|
||||
any liability that these contractual assumptions directly impose on
|
||||
those licensors and authors.
|
||||
|
||||
All other non-permissive additional terms are considered "further
|
||||
restrictions" within the meaning of section 10. If the Program as you
|
||||
received it, or any part of it, contains a notice stating that it is
|
||||
governed by this License along with a term that is a further
|
||||
restriction, you may remove that term. If a license document contains
|
||||
a further restriction but permits relicensing or conveying under this
|
||||
License, you may add to a covered work material governed by the terms
|
||||
of that license document, provided that the further restriction does
|
||||
not survive such relicensing or conveying.
|
||||
|
||||
If you add terms to a covered work in accord with this section, you
|
||||
must place, in the relevant source files, a statement of the
|
||||
additional terms that apply to those files, or a notice indicating
|
||||
where to find the applicable terms.
|
||||
|
||||
Additional terms, permissive or non-permissive, may be stated in the
|
||||
form of a separately written license, or stated as exceptions;
|
||||
the above requirements apply either way.
|
||||
|
||||
8. Termination.
|
||||
|
||||
You may not propagate or modify a covered work except as expressly
|
||||
provided under this License. Any attempt otherwise to propagate or
|
||||
modify it is void, and will automatically terminate your rights under
|
||||
this License (including any patent licenses granted under the third
|
||||
paragraph of section 11).
|
||||
|
||||
However, if you cease all violation of this License, then your
|
||||
license from a particular copyright holder is reinstated (a)
|
||||
provisionally, unless and until the copyright holder explicitly and
|
||||
finally terminates your license, and (b) permanently, if the copyright
|
||||
holder fails to notify you of the violation by some reasonable means
|
||||
prior to 60 days after the cessation.
|
||||
|
||||
Moreover, your license from a particular copyright holder is
|
||||
reinstated permanently if the copyright holder notifies you of the
|
||||
violation by some reasonable means, this is the first time you have
|
||||
received notice of violation of this License (for any work) from that
|
||||
copyright holder, and you cure the violation prior to 30 days after
|
||||
your receipt of the notice.
|
||||
|
||||
Termination of your rights under this section does not terminate the
|
||||
licenses of parties who have received copies or rights from you under
|
||||
this License. If your rights have been terminated and not permanently
|
||||
reinstated, you do not qualify to receive new licenses for the same
|
||||
material under section 10.
|
||||
|
||||
9. Acceptance Not Required for Having Copies.
|
||||
|
||||
You are not required to accept this License in order to receive or
|
||||
run a copy of the Program. Ancillary propagation of a covered work
|
||||
occurring solely as a consequence of using peer-to-peer transmission
|
||||
to receive a copy likewise does not require acceptance. However,
|
||||
nothing other than this License grants you permission to propagate or
|
||||
modify any covered work. These actions infringe copyright if you do
|
||||
not accept this License. Therefore, by modifying or propagating a
|
||||
covered work, you indicate your acceptance of this License to do so.
|
||||
|
||||
10. Automatic Licensing of Downstream Recipients.
|
||||
|
||||
Each time you convey a covered work, the recipient automatically
|
||||
receives a license from the original licensors, to run, modify and
|
||||
propagate that work, subject to this License. You are not responsible
|
||||
for enforcing compliance by third parties with this License.
|
||||
|
||||
An "entity transaction" is a transaction transferring control of an
|
||||
organization, or substantially all assets of one, or subdividing an
|
||||
organization, or merging organizations. If propagation of a covered
|
||||
work results from an entity transaction, each party to that
|
||||
transaction who receives a copy of the work also receives whatever
|
||||
licenses to the work the party's predecessor in interest had or could
|
||||
give under the previous paragraph, plus a right to possession of the
|
||||
Corresponding Source of the work from the predecessor in interest, if
|
||||
the predecessor has it or can get it with reasonable efforts.
|
||||
|
||||
You may not impose any further restrictions on the exercise of the
|
||||
rights granted or affirmed under this License. For example, you may
|
||||
not impose a license fee, royalty, or other charge for exercise of
|
||||
rights granted under this License, and you may not initiate litigation
|
||||
(including a cross-claim or counterclaim in a lawsuit) alleging that
|
||||
any patent claim is infringed by making, using, selling, offering for
|
||||
sale, or importing the Program or any portion of it.
|
||||
|
||||
11. Patents.
|
||||
|
||||
A "contributor" is a copyright holder who authorizes use under this
|
||||
License of the Program or a work on which the Program is based. The
|
||||
work thus licensed is called the contributor's "contributor version".
|
||||
|
||||
A contributor's "essential patent claims" are all patent claims
|
||||
owned or controlled by the contributor, whether already acquired or
|
||||
hereafter acquired, that would be infringed by some manner, permitted
|
||||
by this License, of making, using, or selling its contributor version,
|
||||
but do not include claims that would be infringed only as a
|
||||
consequence of further modification of the contributor version. For
|
||||
purposes of this definition, "control" includes the right to grant
|
||||
patent sublicenses in a manner consistent with the requirements of
|
||||
this License.
|
||||
|
||||
Each contributor grants you a non-exclusive, worldwide, royalty-free
|
||||
patent license under the contributor's essential patent claims, to
|
||||
make, use, sell, offer for sale, import and otherwise run, modify and
|
||||
propagate the contents of its contributor version.
|
||||
|
||||
In the following three paragraphs, a "patent license" is any express
|
||||
agreement or commitment, however denominated, not to enforce a patent
|
||||
(such as an express permission to practice a patent or covenant not to
|
||||
sue for patent infringement). To "grant" such a patent license to a
|
||||
party means to make such an agreement or commitment not to enforce a
|
||||
patent against the party.
|
||||
|
||||
If you convey a covered work, knowingly relying on a patent license,
|
||||
and the Corresponding Source of the work is not available for anyone
|
||||
to copy, free of charge and under the terms of this License, through a
|
||||
publicly available network server or other readily accessible means,
|
||||
then you must either (1) cause the Corresponding Source to be so
|
||||
available, or (2) arrange to deprive yourself of the benefit of the
|
||||
patent license for this particular work, or (3) arrange, in a manner
|
||||
consistent with the requirements of this License, to extend the patent
|
||||
license to downstream recipients. "Knowingly relying" means you have
|
||||
actual knowledge that, but for the patent license, your conveying the
|
||||
covered work in a country, or your recipient's use of the covered work
|
||||
in a country, would infringe one or more identifiable patents in that
|
||||
country that you have reason to believe are valid.
|
||||
|
||||
If, pursuant to or in connection with a single transaction or
|
||||
arrangement, you convey, or propagate by procuring conveyance of, a
|
||||
covered work, and grant a patent license to some of the parties
|
||||
receiving the covered work authorizing them to use, propagate, modify
|
||||
or convey a specific copy of the covered work, then the patent license
|
||||
you grant is automatically extended to all recipients of the covered
|
||||
work and works based on it.
|
||||
|
||||
A patent license is "discriminatory" if it does not include within
|
||||
the scope of its coverage, prohibits the exercise of, or is
|
||||
conditioned on the non-exercise of one or more of the rights that are
|
||||
specifically granted under this License. You may not convey a covered
|
||||
work if you are a party to an arrangement with a third party that is
|
||||
in the business of distributing software, under which you make payment
|
||||
to the third party based on the extent of your activity of conveying
|
||||
the work, and under which the third party grants, to any of the
|
||||
parties who would receive the covered work from you, a discriminatory
|
||||
patent license (a) in connection with copies of the covered work
|
||||
conveyed by you (or copies made from those copies), or (b) primarily
|
||||
for and in connection with specific products or compilations that
|
||||
contain the covered work, unless you entered into that arrangement,
|
||||
or that patent license was granted, prior to 28 March 2007.
|
||||
|
||||
Nothing in this License shall be construed as excluding or limiting
|
||||
any implied license or other defenses to infringement that may
|
||||
otherwise be available to you under applicable patent law.
|
||||
|
||||
12. No Surrender of Others' Freedom.
|
||||
|
||||
If conditions are imposed on you (whether by court order, agreement or
|
||||
otherwise) that contradict the conditions of this License, they do not
|
||||
excuse you from the conditions of this License. If you cannot convey a
|
||||
covered work so as to satisfy simultaneously your obligations under this
|
||||
License and any other pertinent obligations, then as a consequence you may
|
||||
not convey it at all. For example, if you agree to terms that obligate you
|
||||
to collect a royalty for further conveying from those to whom you convey
|
||||
the Program, the only way you could satisfy both those terms and this
|
||||
License would be to refrain entirely from conveying the Program.
|
||||
|
||||
13. Remote Network Interaction; Use with the GNU General Public License.
|
||||
|
||||
Notwithstanding any other provision of this License, if you modify the
|
||||
Program, your modified version must prominently offer all users
|
||||
interacting with it remotely through a computer network (if your version
|
||||
supports such interaction) an opportunity to receive the Corresponding
|
||||
Source of your version by providing access to the Corresponding Source
|
||||
from a network server at no charge, through some standard or customary
|
||||
means of facilitating copying of software. This Corresponding Source
|
||||
shall include the Corresponding Source for any work covered by version 3
|
||||
of the GNU General Public License that is incorporated pursuant to the
|
||||
following paragraph.
|
||||
|
||||
Notwithstanding any other provision of this License, you have
|
||||
permission to link or combine any covered work with a work licensed
|
||||
under version 3 of the GNU General Public License into a single
|
||||
combined work, and to convey the resulting work. The terms of this
|
||||
License will continue to apply to the part which is the covered work,
|
||||
but the work with which it is combined will remain governed by version
|
||||
3 of the GNU General Public License.
|
||||
|
||||
14. Revised Versions of this License.
|
||||
|
||||
The Free Software Foundation may publish revised and/or new versions of
|
||||
the GNU Affero General Public License from time to time. Such new versions
|
||||
will be similar in spirit to the present version, but may differ in detail to
|
||||
address new problems or concerns.
|
||||
|
||||
Each version is given a distinguishing version number. If the
|
||||
Program specifies that a certain numbered version of the GNU Affero General
|
||||
Public License "or any later version" applies to it, you have the
|
||||
option of following the terms and conditions either of that numbered
|
||||
version or of any later version published by the Free Software
|
||||
Foundation. If the Program does not specify a version number of the
|
||||
GNU Affero General Public License, you may choose any version ever published
|
||||
by the Free Software Foundation.
|
||||
|
||||
If the Program specifies that a proxy can decide which future
|
||||
versions of the GNU Affero General Public License can be used, that proxy's
|
||||
public statement of acceptance of a version permanently authorizes you
|
||||
to choose that version for the Program.
|
||||
|
||||
Later license versions may give you additional or different
|
||||
permissions. However, no additional obligations are imposed on any
|
||||
author or copyright holder as a result of your choosing to follow a
|
||||
later version.
|
||||
|
||||
15. Disclaimer of Warranty.
|
||||
|
||||
THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
|
||||
APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
|
||||
HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
|
||||
OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
|
||||
THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
|
||||
PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
|
||||
IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
|
||||
ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
|
||||
|
||||
16. Limitation of Liability.
|
||||
|
||||
IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
|
||||
WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
|
||||
THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
|
||||
GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
|
||||
USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
|
||||
DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
|
||||
PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
|
||||
EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
|
||||
SUCH DAMAGES.
|
||||
|
||||
17. Interpretation of Sections 15 and 16.
|
||||
|
||||
If the disclaimer of warranty and limitation of liability provided
|
||||
above cannot be given local legal effect according to their terms,
|
||||
reviewing courts shall apply local law that most closely approximates
|
||||
an absolute waiver of all civil liability in connection with the
|
||||
Program, unless a warranty or assumption of liability accompanies a
|
||||
copy of the Program in return for a fee.
|
||||
|
||||
END OF TERMS AND CONDITIONS
|
||||
|
||||
How to Apply These Terms to Your New Programs
|
||||
|
||||
If you develop a new program, and you want it to be of the greatest
|
||||
possible use to the public, the best way to achieve this is to make it
|
||||
free software which everyone can redistribute and change under these terms.
|
||||
|
||||
To do so, attach the following notices to the program. It is safest
|
||||
to attach them to the start of each source file to most effectively
|
||||
state the exclusion of warranty; and each file should have at least
|
||||
the "copyright" line and a pointer to where the full notice is found.
|
||||
|
||||
<one line to give the program's name and a brief idea of what it does.>
|
||||
Copyright (C) <year> <name of author>
|
||||
|
||||
This program is free software: you can redistribute it and/or modify
|
||||
it under the terms of the GNU Affero General Public License as published by
|
||||
the Free Software Foundation, either version 3 of the License, or
|
||||
(at your option) any later version.
|
||||
|
||||
This program is distributed in the hope that it will be useful,
|
||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
GNU Affero General Public License for more details.
|
||||
|
||||
You should have received a copy of the GNU Affero General Public License
|
||||
along with this program. If not, see <https://www.gnu.org/licenses/>.
|
||||
|
||||
Also add information on how to contact you by electronic and paper mail.
|
||||
|
||||
If your software can interact with users remotely through a computer
|
||||
network, you should also make sure that it provides a way for users to
|
||||
get its source. For example, if your program is a web application, its
|
||||
interface could display a "Source" link that leads users to an archive
|
||||
of the code. There are many ways you could offer source, and different
|
||||
solutions will be better for different programs; see section 13 for the
|
||||
specific requirements.
|
||||
|
||||
You should also get your employer (if you work as a programmer) or school,
|
||||
if any, to sign a "copyright disclaimer" for the program, if necessary.
|
||||
For more information on this, and how to apply and follow the GNU AGPL, see
|
||||
<https://www.gnu.org/licenses/>.
|
||||
@@ -1,4 +1,8 @@
|
||||
Required Notice: Copyright 2026 Ryder-MHumble and Meldwork contributors.
|
||||
Meldwork
|
||||
Copyright 2026 Ryder-MHumble and Meldwork contributors.
|
||||
|
||||
Meldwork Community Edition is licensed under the GNU Affero General Public
|
||||
License v3.0 only. See LICENSE.
|
||||
|
||||
Third-party Agent names, product names, and logos remain the property of their
|
||||
respective owners. They are used only to identify compatible integrations and
|
||||
|
||||
@@ -8,13 +8,13 @@
|
||||
|
||||
# AI agents are interchangeable. Your work should not be.
|
||||
|
||||
**Meldwork is a local-first desktop workspace where one task can move between direct Agent conversations, multi-Agent working groups, and independent review without losing its context or execution history.**
|
||||
**Meldwork is a local-first desktop workspace for persistent direct Agent conversations and bounded multi-Agent review. Each conversation keeps its own context, permissions, attachments, compatible native sessions, and sanitized execution history on your computer.**
|
||||
|
||||
Start with one Agent. Bring in others when the work needs a different capability, a second opinion, or an adversarial review. Meldwork keeps the conversation, participants, permissions, outputs, and sanitized run evidence together on your computer.
|
||||
|
||||
<p align="center">
|
||||
<a href="https://github.com/Ryder-MHumble/Meldwork/releases/latest"><strong>Download the private macOS preview</strong></a>
|
||||
· <a href="LICENSE">Noncommercial license</a>
|
||||
· <a href="LICENSE">AGPL-3.0 license</a>
|
||||
· <a href="COMMERCIAL_USE.md">Commercial use</a>
|
||||
</p>
|
||||
|
||||
@@ -27,13 +27,24 @@ The current private preview is built for Apple silicon Macs.
|
||||
3. Drag Meldwork into Applications and open it.
|
||||
4. Connect the supported Agent CLIs already installed on your computer, or configure an independent Provider profile for an Agent.
|
||||
|
||||
The private preview is ad-hoc signed and not yet Apple-notarized. A public distribution build will require Developer ID signing and notarization.
|
||||
The private preview is ad-hoc signed and not yet Apple-notarized. A public distribution build will require Developer ID signing and notarization; see [the macOS signing guide](docs/macos-signing.md).
|
||||
|
||||
## Start with one repeatable workflow
|
||||
|
||||
The public MVP is built around one workflow: produce a deliverable, have a second Agent challenge it, and let the human decide what to keep.
|
||||
|
||||
1. Create a group with two locally ready Agents.
|
||||
2. Attach only the files needed for the task and keep workspace write access off unless the task requires it.
|
||||
3. Ask one Agent to produce the deliverable and the other to check assumptions, omissions, and evidence in a bounded discussion.
|
||||
4. Inspect the final replies and sanitized run trace before accepting, revising, or discarding the result.
|
||||
|
||||
Other domains are examples, not separate MVP promises. The release is successful when this two-Agent review loop works predictably on a clean Apple silicon Mac.
|
||||
|
||||
## One place to see the work
|
||||
|
||||
|
||||
|
||||
Direct conversations and working groups live in the same desktop workspace. A task can begin as a focused conversation and become a group review without turning into a trail of disconnected windows.
|
||||
Direct conversations and working groups live in the same desktop workspace. Start directly when one Agent is enough; create a group when the task needs an independent check. Meldwork does not currently merge separate conversation histories automatically, so attach or restate the context the group must share.
|
||||
|
||||
## From a first answer to a reviewed decision
|
||||
|
||||
@@ -65,7 +76,7 @@ The goal is not to maximize Agent count. It is to use the right Agent at the rig
|
||||
- Compatible native-session continuity for each conversation and Agent.
|
||||
- Sanitized run traces, completion state, and compact evidence capsules.
|
||||
- Agent-specific Provider profiles and operating-system-backed credential storage where supported.
|
||||
- Skills, images, approved knowledge sources, and opt-in workspace access.
|
||||
- Skills, validated images, media, documents, code, archives, approved knowledge sources, and opt-in workspace access.
|
||||
- Local conversation and orchestration state with no Meldwork cloud account or remote conversation store.
|
||||
|
||||
Model requests still follow the Agent and Provider you choose. Local-first describes Meldwork's workspace and orchestration state; it does not make third-party models offline.
|
||||
@@ -80,7 +91,7 @@ Each Agent keeps its own capabilities, provider configuration, permission model,
|
||||
|
||||
## Private MVP status
|
||||
|
||||
This repository and its Releases are currently private while the MVP is being completed. The macOS Apple silicon client is the only release-validated target in this preview. Windows, Intel Mac, Apple notarization, and broad third-party Agent certification are not yet claimed.
|
||||
This repository and its Releases are currently private while the public MVP release gates are completed. The macOS Apple silicon client is the only release-validated target in this preview. Windows, Intel Mac, Apple notarization, and broad third-party Agent certification are not yet claimed. The remaining release gates are tracked in [the public MVP checklist](docs/public-mvp-release.md).
|
||||
|
||||
<details>
|
||||
<summary><strong>Build from source for development</strong></summary>
|
||||
@@ -99,6 +110,6 @@ Verification commands are documented in [docs/tests.md](docs/tests.md).
|
||||
|
||||
## License
|
||||
|
||||
Meldwork is source-available under the [PolyForm Noncommercial License 1.0.0](LICENSE). It is not Apache-2.0 licensed: Apache 2.0 permits commercial use, while this project currently does not.
|
||||
Meldwork Community Edition is open source under the [GNU Affero General Public License v3.0 only](LICENSE). The AGPL permits commercial use, modification, and redistribution while requiring covered source to remain available when modified versions are distributed or offered over a network.
|
||||
|
||||
Noncommercial use is permitted only under the license terms. Commercial use requires a separate written agreement; see [COMMERCIAL_USE.md](COMMERCIAL_USE.md). Third-party attribution is recorded in [NOTICE](NOTICE).
|
||||
Organizations that need proprietary redistribution, closed-source embedding, or a separately licensed commercial edition can request a commercial license; see [COMMERCIAL_USE.md](COMMERCIAL_USE.md). Third-party attribution is recorded in [NOTICE](NOTICE).
|
||||
+19
-8
@@ -8,13 +8,13 @@
|
||||
|
||||
# Agent 可以换，工作不该断
|
||||
|
||||
**Meldwork 是一个本地优先的多 Agent 桌面工作台。你可以先找一个 Agent 直接开工；当任务需要交叉验证、不同能力或独立审查时，再把其他 Agent 拉进同一个工作群组。上下文、过程和最终判断始终围绕同一项工作展开。**
|
||||
**Meldwork 是一个本地优先的 Agent 桌面工作台，用于持续单聊和有边界的多 Agent 复核。每个会话的上下文、权限、附件、兼容的原生 Session 与脱敏运行记录都保存在你的电脑上。**
|
||||
|
||||
它解决的不是“同时打开更多 AI”，而是让一项复杂工作能够在不同 Agent 之间真正接力：前一个 Agent 留下的结论和证据，后一个可以继续使用；所有人的回答仍然回到同一条任务脉络里，由你决定哪些结果值得接受。
|
||||
|
||||
<p align="center">
|
||||
<a href="https://github.com/Ryder-MHumble/Meldwork/releases/latest"><strong>下载 macOS 私有预览版</strong></a>
|
||||
· <a href="LICENSE">非商用许可证</a>
|
||||
· <a href="LICENSE">AGPL-3.0 开源许可证</a>
|
||||
· <a href="COMMERCIAL_USE.md">商业使用说明</a>
|
||||
</p>
|
||||
|
||||
@@ -27,13 +27,24 @@
|
||||
3. 将 Meldwork 拖入“应用程序”并打开。
|
||||
4. 连接电脑上已经安装的 Agent CLI，或为某个 Agent 单独配置 Provider。
|
||||
|
||||
当前内测包采用临时签名，尚未完成 Apple Developer ID 签名与公证。正式公开分发前会补齐这一环节。
|
||||
当前内测包采用临时签名，尚未完成 Apple Developer ID 签名与公证。申请与配置步骤见 [macOS 签名与公证指南](docs/macos-signing.md)。
|
||||
|
||||
## 先跑通一个可重复的工作流
|
||||
|
||||
公开 MVP 只围绕一个核心闭环：先产出交付物，再由第二个 Agent 质疑和复核，最后由人决定采用什么。
|
||||
|
||||
1. 创建一个只有两个已就绪 Agent 的群组。
|
||||
2. 只附加任务真正需要的文件；除非任务必须修改工作区，否则保持写入权限关闭。
|
||||
3. 明确让一个 Agent 形成交付物，让另一个检查假设、遗漏与证据，并限制讨论轮数。
|
||||
4. 查看最终回答和脱敏运行轨迹，再决定采用、修改或放弃结果。
|
||||
|
||||
研究、产品、开发、写作和运营是使用示例，不是五套独立的 MVP 承诺。首发成功的标准，是这条双 Agent 复核闭环能在一台干净的 Apple 芯片 Mac 上稳定完成。
|
||||
|
||||
## 打开客户端，看到的是完整工作现场
|
||||
|
||||
|
||||
|
||||
单聊、工作群组和最近任务都在同一个桌面工作台里。一个需求可以先由 Codex 起草，再交给 Hermes 补充研究，最后让 OpenCodeReview 做独立审查，不需要在多个窗口之间复制背景、文件和中间结论。
|
||||
单聊、工作群组和最近任务都在同一个桌面工作台里。一个 Agent 足够时使用单聊；需要独立检查时创建群组。Meldwork 当前不会自动合并两个独立会话的历史，因此群组需要的背景和文件仍应由用户明确附加或重述。
|
||||
|
||||
## 一项任务如何在 Meldwork 里推进
|
||||
|
||||
@@ -65,7 +76,7 @@ Meldwork 不鼓励为了“看起来智能”而堆叠 Agent。一个 Agent 足
|
||||
- 在兼容条件下，为每个群组和 Agent 延续原生 Session。
|
||||
- 可复盘但经过脱敏和压缩的运行轨迹与证据摘要。
|
||||
- 每个 Agent 独立的 Provider 档案，以及兼容系统下的安全凭据存储。
|
||||
- Skill、图片、授权知识源和按需开启的工作目录访问。
|
||||
- Skill、经过验证的图片、音视频、文档、代码、压缩包、授权知识源和按需开启的工作目录访问。
|
||||
- 会话与编排状态留在本机，不依赖 Meldwork 云账号或远程会话数据库。
|
||||
|
||||
模型请求仍然会按照你选择的 Agent 和 Provider 发出。“本地优先”指 Meldwork 自己的工作空间和编排状态留在电脑上，并不意味着第三方模型自动变成离线模型。
|
||||
@@ -78,7 +89,7 @@ Meldwork 不鼓励为了“看起来智能”而堆叠 Agent。一个 Agent 足
|
||||
|
||||
## 当前仍是私有 MVP
|
||||
|
||||
仓库和 Release 暂时保持 private，等 MVP 真正达到可公开使用的标准后再开放。目前经过发布验证的目标只有 Apple 芯片 Mac；Windows、Intel Mac、Apple 公证以及所有第三方 Agent 的广泛兼容性还不属于本版本承诺。
|
||||
仓库和 Release 暂时保持 private，直到公开发布门禁完成。目前经过发布验证的目标只有 Apple 芯片 Mac；Windows、Intel Mac、Apple 公证以及所有第三方 Agent 的广泛兼容性还不属于本版本承诺。剩余门禁见 [公开 MVP 发布清单](docs/public-mvp-release.md)。
|
||||
|
||||
<details>
|
||||
<summary><strong>开发者从源码运行</strong></summary>
|
||||
@@ -97,6 +108,6 @@ npm --prefix desktop run dev
|
||||
|
||||
## 许可证
|
||||
|
||||
Meldwork 目前以 [PolyForm Noncommercial 1.0.0](LICENSE) 方式开放源代码，但不允许商业使用。这里不能使用 Apache 2.0 来实现“禁止商用”，因为 Apache 2.0 本身明确允许商业使用。
|
||||
Meldwork 社区版采用 [GNU Affero General Public License v3.0 only](LICENSE) 开源。AGPL 允许个人和公司商用、修改与分发，但分发修改版本或通过网络向用户提供修改版本时，需要按照许可证提供对应源代码。
|
||||
|
||||
符合许可证条款的非商业使用无需额外授权；公司内部业务、收费服务、商业交付、商业分发等用途需要事先取得单独的书面授权，详见 [COMMERCIAL_USE.md](COMMERCIAL_USE.md)。第三方标识归属见 [NOTICE](NOTICE)。
|
||||
需要闭源分发、嵌入专有产品，或使用单独授权商业版的组织，可以申请商业许可证，详见 [COMMERCIAL_USE.md](COMMERCIAL_USE.md)。第三方标识归属见 [NOTICE](NOTICE)。
|
||||
+1
-1
@@ -1,6 +1,6 @@
|
||||
# Security Policy
|
||||
|
||||
Meldwork is a local-first desktop application that invokes local Agent CLIs, stores local conversations, imports image attachments, and manages Provider credentials through the Electron main process.
|
||||
Meldwork is a local-first desktop application that invokes local Agent CLIs, stores local conversations, imports validated image, media, document, code, and archive attachments, and manages Provider credentials through the Electron main process.
|
||||
|
||||
## Reporting
|
||||
|
||||
|
||||
+15
-12
@@ -28,7 +28,7 @@ Agent 管理面板提供经过白名单约束的安装入口。安装命令和
|
||||
|
||||
## 首次启动与本地 Agent 检测
|
||||
|
||||
首次启动会显示三页引导轮播，依次介绍本地 Agent 检测、多 Agent 协作、Skill 与图片上下文。
|
||||
首次启动会显示三页引导轮播，依次介绍本地 Agent 检测、多 Agent 协作、Skill 与文件上下文。
|
||||
客户端在引导打开时执行唯一一次启动刷新；检测任务真正结束前“开始使用”按钮保持禁用，不会
|
||||
用固定计时器伪装完成。检测成功或失败后才释放按钮。完成或关闭引导后会在渲染层本地记录状态，
|
||||
后续启动直接进入工作台；Agent 仍可在管理面板中重新检测。
|
||||
@@ -41,17 +41,17 @@ Agent 管理面板提供经过白名单约束的安装入口。安装命令和
|
||||
或前端构造的任意路径都会被拒绝。Hermes 使用原生 `--skills` 参数预加载已验证 Skill；其他
|
||||
Agent 只会收到属于自己的 Skill 坐标提示，不会收到其他目标的选择。
|
||||
|
||||
## 图片附件
|
||||
## 文件与多模态附件
|
||||
|
||||
消息输入框支持系统文件选择器和剪贴板粘贴图片。当前接受 PNG、JPEG，单张不超过
|
||||
8 MiB，一条消息最多 4 张。图片会复制到 Electron 用户数据目录下的私有附件存储，工作区
|
||||
消息只保存 `id`、文件名、MIME 类型和大小；渲染层不能读取附件路径，只能按 `id` 请求经过
|
||||
尺寸检查和缩放的预览。
|
||||
消息输入框支持系统文件选择器、剪贴板图片以及把文件拖入输入区。当前接受经过 MIME、扩展名和
|
||||
文件签名交叉校验的 PNG、JPEG、音视频、PDF、文本、Markdown、常见代码与配置文件、Office
|
||||
文档和常见压缩容器；一条消息最多 4 个附件，各格式使用独立大小上限。附件会复制到 Electron
|
||||
用户数据目录下的私有存储，工作区消息只保存 `id`、文件名、MIME 类型和大小；渲染层不能读取
|
||||
附件路径，只能通过窄 IPC 请求预览或使用系统默认应用打开文件。
|
||||
|
||||
当前适配器能力为：Codex 最多 4 张、Hermes 最多 1 张、OpenCode 最多 4 张，其余 Agent
|
||||
不接收图片。发送或启动自动讨论前会先检查所有目标 Agent；任一目标无法接收同一组图片时，
|
||||
整个运行在记录消息或启动进程前失败，避免不同 Agent 在不等上下文下继续讨论。未发送附件、
|
||||
删除会话后的无引用附件和异常导入残留会由主进程回收。
|
||||
Agent 原生支持的图片会按其数量限制直接传递。其他文件，或超过某个 Agent 原生媒体能力的附件，
|
||||
会在运行期间暂存为工作区内的只读输入文件，并在运行结束后清理；提示词明确要求只读取、不得执行
|
||||
附件。未发送附件、删除会话后的无引用附件和异常导入残留由主进程回收。
|
||||
|
||||
## Provider 配置
|
||||
|
||||
@@ -111,7 +111,10 @@ npm run dev
|
||||
npm test
|
||||
npm run pack
|
||||
npm run dist
|
||||
npm run dist:public
|
||||
```
|
||||
|
||||
`pack` 和 `dist` 会先构建桌面前端。发布产物输出到 `desktop/dist/`，其中包含本地前端，
|
||||
不依赖服务器或容器。
|
||||
`pack` 和 `dist` 用于本地验证，会先构建桌面前端。`dist:public` 是公开发布专用命令：它要求
|
||||
Developer ID 证书和完整公证凭据，强制代码签名，在签名后校验永久 Bundle ID、Team ID 与
|
||||
hardened runtime，并调用 Apple 公证；任一条件不满足都会失败。产物输出到 `desktop/dist/`，
|
||||
其中包含本地前端，不依赖服务器或容器。
|
||||
@@ -0,0 +1,11 @@
|
||||
const { build } = require('./package.json')
|
||||
|
||||
module.exports = {
|
||||
...build,
|
||||
forceCodeSigning: true,
|
||||
afterSign: 'scripts/after-sign.cjs',
|
||||
mac: {
|
||||
...build.mac,
|
||||
notarize: true,
|
||||
},
|
||||
}
|
||||
Generated
+1
-1
@@ -7,7 +7,7 @@
|
||||
"": {
|
||||
"name": "meldwork-desktop",
|
||||
"version": "0.1.0",
|
||||
"license": "PolyForm-Noncommercial-1.0.0",
|
||||
"license": "AGPL-3.0-only",
|
||||
"dependencies": {
|
||||
"@agentclientprotocol/sdk": "0.23.0",
|
||||
"@streamparser/json": "0.0.22",
|
||||
|
||||
+18
-3
@@ -4,14 +4,15 @@
|
||||
"private": true,
|
||||
"description": "A local-first desktop workspace for multi-Agent collaboration",
|
||||
"author": "Ryder-MHumble",
|
||||
"license": "PolyForm-Noncommercial-1.0.0",
|
||||
"license": "AGPL-3.0-only",
|
||||
"main": "src/main.cjs",
|
||||
"scripts": {
|
||||
"build:frontend": "npm --prefix ../frontend run build:desktop",
|
||||
"dev": "npm run build:frontend && electron .",
|
||||
"test": "node --test test/*.test.cjs",
|
||||
"pack": "npm run build:frontend && electron-builder --dir",
|
||||
"dist": "npm run build:frontend && electron-builder --mac dmg zip"
|
||||
"dist": "npm run build:frontend && electron-builder --mac dmg zip",
|
||||
"dist:public": "node scripts/public-release-preflight.cjs && npm run build:frontend && electron-builder --config electron-builder.public.cjs --mac dmg zip"
|
||||
},
|
||||
"dependencies": {
|
||||
"@agentclientprotocol/sdk": "0.23.0",
|
||||
@@ -23,7 +24,7 @@
|
||||
"electron-builder": "26.15.3"
|
||||
},
|
||||
"build": {
|
||||
"appId": "com.roundrelay.desktop",
|
||||
"appId": "com.rydersun.meldwork",
|
||||
"productName": "Meldwork",
|
||||
"artifactName": "Meldwork-${version}-${arch}.${ext}",
|
||||
"afterPack": "scripts/after-pack.cjs",
|
||||
@@ -35,6 +36,20 @@
|
||||
"to": "frontend"
|
||||
}
|
||||
],
|
||||
"extraResources": [
|
||||
{
|
||||
"from": "../LICENSE",
|
||||
"to": "LICENSE"
|
||||
},
|
||||
{
|
||||
"from": "../NOTICE",
|
||||
"to": "NOTICE"
|
||||
},
|
||||
{
|
||||
"from": "../COMMERCIAL_USE.md",
|
||||
"to": "COMMERCIAL_USE.md"
|
||||
}
|
||||
],
|
||||
"mac": {
|
||||
"category": "public.app-category.productivity",
|
||||
"icon": "../frontend/public/logos/meldwork-app.png",
|
||||
|
||||
@@ -0,0 +1,43 @@
|
||||
const path = require('node:path')
|
||||
const { spawnSync } = require('node:child_process')
|
||||
|
||||
function releaseError(code) {
|
||||
const error = new Error(code)
|
||||
error.code = code
|
||||
return error
|
||||
}
|
||||
|
||||
function runCodesign(spawn, args) {
|
||||
const result = spawn('/usr/bin/codesign', args, {
|
||||
encoding: 'utf8',
|
||||
stdio: ['ignore', 'pipe', 'pipe'],
|
||||
})
|
||||
if (result?.status !== 0) throw releaseError('PUBLIC_RELEASE_SIGNATURE_INVALID')
|
||||
return `${result.stdout || ''}\n${result.stderr || ''}`
|
||||
}
|
||||
|
||||
function verifyDeveloperIdSignature(context, spawn = spawnSync) {
|
||||
if (context.electronPlatformName !== 'darwin') return
|
||||
const appName = `${context.packager.appInfo.productFilename}.app`
|
||||
const appPath = path.join(context.appOutDir, appName)
|
||||
|
||||
runCodesign(spawn, ['--verify', '--deep', '--strict', '--verbose=2', appPath])
|
||||
const details = runCodesign(spawn, ['-dv', '--verbose=4', appPath])
|
||||
if (!/^Authority=Developer ID Application:/m.test(details)) {
|
||||
throw releaseError('PUBLIC_RELEASE_DEVELOPER_ID_REQUIRED')
|
||||
}
|
||||
const teamId = details.match(/^TeamIdentifier=(.+)$/m)?.[1]?.trim()
|
||||
if (!teamId || teamId === 'not set') throw releaseError('PUBLIC_RELEASE_TEAM_ID_MISSING')
|
||||
if (!/^flags=.*\bruntime\b/m.test(details)) {
|
||||
throw releaseError('PUBLIC_RELEASE_HARDENED_RUNTIME_REQUIRED')
|
||||
}
|
||||
|
||||
const expectedId = String(context.packager.appInfo.id || '')
|
||||
const actualId = details.match(/^Identifier=(.+)$/m)?.[1]?.trim()
|
||||
if (expectedId && actualId !== expectedId) {
|
||||
throw releaseError('PUBLIC_RELEASE_BUNDLE_ID_MISMATCH')
|
||||
}
|
||||
}
|
||||
|
||||
module.exports = verifyDeveloperIdSignature
|
||||
module.exports.verifyDeveloperIdSignature = verifyDeveloperIdSignature
|
||||
@@ -0,0 +1,110 @@
|
||||
const { execFileSync } = require('node:child_process')
|
||||
|
||||
function releaseError(code) {
|
||||
const error = new Error(code)
|
||||
error.code = code
|
||||
return error
|
||||
}
|
||||
|
||||
function hasValue(env, name) {
|
||||
return typeof env[name] === 'string' && env[name].trim().length > 0
|
||||
}
|
||||
|
||||
function completeGroup(env, names) {
|
||||
return names.every(name => hasValue(env, name))
|
||||
}
|
||||
|
||||
function partialGroup(env, names) {
|
||||
return names.some(name => hasValue(env, name))
|
||||
}
|
||||
|
||||
function notarizationStrategy(env) {
|
||||
const appleIdNames = ['APPLE_ID', 'APPLE_APP_SPECIFIC_PASSWORD', 'APPLE_TEAM_ID']
|
||||
if (partialGroup(env, appleIdNames)) {
|
||||
if (!completeGroup(env, appleIdNames)) {
|
||||
throw releaseError('PUBLIC_RELEASE_APPLE_ID_CREDENTIALS_INCOMPLETE')
|
||||
}
|
||||
return 'apple-id'
|
||||
}
|
||||
|
||||
const apiKeyNames = ['APPLE_API_KEY', 'APPLE_API_KEY_ID', 'APPLE_API_ISSUER']
|
||||
if (partialGroup(env, apiKeyNames)) {
|
||||
if (!completeGroup(env, apiKeyNames)) {
|
||||
throw releaseError('PUBLIC_RELEASE_API_KEY_CREDENTIALS_INCOMPLETE')
|
||||
}
|
||||
return 'api-key'
|
||||
}
|
||||
|
||||
if (hasValue(env, 'APPLE_KEYCHAIN') && !hasValue(env, 'APPLE_KEYCHAIN_PROFILE')) {
|
||||
throw releaseError('PUBLIC_RELEASE_KEYCHAIN_PROFILE_INCOMPLETE')
|
||||
}
|
||||
if (hasValue(env, 'APPLE_KEYCHAIN_PROFILE')) return 'keychain-profile'
|
||||
throw releaseError('PUBLIC_RELEASE_NOTARIZATION_CREDENTIALS_MISSING')
|
||||
}
|
||||
|
||||
function signingStrategy(env, execFile = execFileSync) {
|
||||
if (hasValue(env, 'CSC_LINK') || hasValue(env, 'CSC_KEY_PASSWORD')) {
|
||||
if (!hasValue(env, 'CSC_LINK') || !hasValue(env, 'CSC_KEY_PASSWORD')) {
|
||||
throw releaseError('PUBLIC_RELEASE_CERTIFICATE_CREDENTIALS_INCOMPLETE')
|
||||
}
|
||||
return 'certificate-file'
|
||||
}
|
||||
|
||||
if (hasValue(env, 'CSC_NAME')) {
|
||||
if (!env.CSC_NAME.includes('Developer ID Application')) {
|
||||
throw releaseError('PUBLIC_RELEASE_SIGNING_IDENTITY_INVALID')
|
||||
}
|
||||
return 'named-identity'
|
||||
}
|
||||
|
||||
let identities = ''
|
||||
try {
|
||||
identities = execFile('/usr/bin/security', ['find-identity', '-v', '-p', 'codesigning'], {
|
||||
encoding: 'utf8',
|
||||
stdio: ['ignore', 'pipe', 'pipe'],
|
||||
})
|
||||
} catch {
|
||||
throw releaseError('PUBLIC_RELEASE_SIGNING_IDENTITY_MISSING')
|
||||
}
|
||||
if (!String(identities).includes('Developer ID Application:')) {
|
||||
throw releaseError('PUBLIC_RELEASE_SIGNING_IDENTITY_MISSING')
|
||||
}
|
||||
return 'keychain-identity'
|
||||
}
|
||||
|
||||
function assertPublicReleaseEnvironment({
|
||||
platform = process.platform,
|
||||
env = process.env,
|
||||
execFile = execFileSync,
|
||||
} = {}) {
|
||||
if (platform !== 'darwin') throw releaseError('PUBLIC_RELEASE_MACOS_REQUIRED')
|
||||
const signing = signingStrategy(env, execFile)
|
||||
const notarization = notarizationStrategy(env)
|
||||
try {
|
||||
execFile('/usr/bin/xcrun', ['--find', 'notarytool'], {
|
||||
encoding: 'utf8',
|
||||
stdio: ['ignore', 'pipe', 'pipe'],
|
||||
})
|
||||
} catch {
|
||||
throw releaseError('PUBLIC_RELEASE_NOTARYTOOL_MISSING')
|
||||
}
|
||||
return { signing, notarization }
|
||||
}
|
||||
|
||||
if (require.main === module) {
|
||||
try {
|
||||
const result = assertPublicReleaseEnvironment()
|
||||
process.stdout.write(
|
||||
`Public release preflight passed (signing=${result.signing}, notarization=${result.notarization}).\n`,
|
||||
)
|
||||
} catch (error) {
|
||||
process.stderr.write(`${error?.code || 'PUBLIC_RELEASE_PREFLIGHT_FAILED'}\n`)
|
||||
process.exitCode = 1
|
||||
}
|
||||
}
|
||||
|
||||
module.exports = {
|
||||
assertPublicReleaseEnvironment,
|
||||
notarizationStrategy,
|
||||
signingStrategy,
|
||||
}
|
||||
@@ -39,7 +39,7 @@ const SAMPLE_AGENT_CONNECTOR_MANIFEST = createAgentConnectorManifest({
|
||||
},
|
||||
outboundDestinations: [],
|
||||
credentials: { mode: 'none', slots: [] },
|
||||
license: 'PolyForm-Noncommercial-1.0.0',
|
||||
license: 'AGPL-3.0-only',
|
||||
})
|
||||
const SAMPLE_CREDENTIAL_AGENT_CONNECTOR_MANIFEST = createAgentConnectorManifest({
|
||||
connectorId: 'external.codex-provider-sample',
|
||||
@@ -72,7 +72,7 @@ const SAMPLE_CREDENTIAL_AGENT_CONNECTOR_MANIFEST = createAgentConnectorManifest(
|
||||
mode: 'credential-ref',
|
||||
slots: [{ slotId: 'openai-api-key', type: 'api-key', required: true }],
|
||||
},
|
||||
license: 'PolyForm-Noncommercial-1.0.0',
|
||||
license: 'AGPL-3.0-only',
|
||||
})
|
||||
const APPROVED_AGENT_CONNECTOR_MANIFESTS = Object.freeze([
|
||||
SAMPLE_AGENT_CONNECTOR_MANIFEST,
|
||||
|
||||
@@ -0,0 +1,63 @@
|
||||
const test = require('node:test')
|
||||
const assert = require('node:assert/strict')
|
||||
|
||||
const verifyDeveloperIdSignature = require('../scripts/after-sign.cjs')
|
||||
|
||||
function context(platform = 'darwin') {
|
||||
return {
|
||||
electronPlatformName: platform,
|
||||
appOutDir: '/tmp/meldwork-public',
|
||||
packager: {
|
||||
appInfo: {
|
||||
id: 'com.rydersun.meldwork',
|
||||
productFilename: 'Meldwork',
|
||||
},
|
||||
},
|
||||
}
|
||||
}
|
||||
|
||||
function signedResult(details) {
|
||||
return (file, args) => ({
|
||||
status: 0,
|
||||
stdout: '',
|
||||
stderr: args[0] === '-dv' ? details : '',
|
||||
})
|
||||
}
|
||||
|
||||
test('public afterSign accepts only the permanent Developer ID identity', () => {
|
||||
const details = [
|
||||
'Identifier=com.rydersun.meldwork',
|
||||
'flags=0x10000(runtime) hashes=3+7 location=embedded',
|
||||
'Authority=Developer ID Application: Ryder Sun (TEAM123456)',
|
||||
'TeamIdentifier=TEAM123456',
|
||||
].join('\n')
|
||||
|
||||
assert.doesNotThrow(() => verifyDeveloperIdSignature(context(), signedResult(details)))
|
||||
})
|
||||
|
||||
test('public afterSign rejects ad-hoc, unhardened, or mismatched signatures', () => {
|
||||
const base = [
|
||||
'Identifier=com.rydersun.meldwork',
|
||||
'flags=0x10000(runtime) hashes=3+7 location=embedded',
|
||||
'Authority=Developer ID Application: Ryder Sun (TEAM123456)',
|
||||
'TeamIdentifier=TEAM123456',
|
||||
]
|
||||
assert.throws(
|
||||
() => verifyDeveloperIdSignature(context(), signedResult(base.filter(line => !line.startsWith('Authority=')).join('\n'))),
|
||||
{ message: 'PUBLIC_RELEASE_DEVELOPER_ID_REQUIRED' },
|
||||
)
|
||||
assert.throws(
|
||||
() => verifyDeveloperIdSignature(context(), signedResult(base.map(line => line.startsWith('flags=') ? 'flags=0x0(none)' : line).join('\n'))),
|
||||
{ message: 'PUBLIC_RELEASE_HARDENED_RUNTIME_REQUIRED' },
|
||||
)
|
||||
assert.throws(
|
||||
() => verifyDeveloperIdSignature(context(), signedResult(base.map(line => line.startsWith('Identifier=') ? 'Identifier=com.example.other' : line).join('\n'))),
|
||||
{ message: 'PUBLIC_RELEASE_BUNDLE_ID_MISMATCH' },
|
||||
)
|
||||
})
|
||||
|
||||
test('public afterSign ignores non-macOS packages', () => {
|
||||
let called = false
|
||||
verifyDeveloperIdSignature(context('win32'), () => { called = true })
|
||||
assert.equal(called, false)
|
||||
})
|
||||
@@ -1,6 +1,7 @@
|
||||
const test = require('node:test')
|
||||
const assert = require('node:assert/strict')
|
||||
const afterPack = require('../scripts/after-pack.cjs')
|
||||
const publicBuild = require('../electron-builder.public.cjs')
|
||||
|
||||
test('packaged Electron disables runtime injection and enforces app.asar integrity', () => {
|
||||
assert.deepEqual(afterPack.ELECTRON_FUSES, {
|
||||
@@ -12,3 +13,20 @@ test('packaged Electron disables runtime injection and enforces app.asar integri
|
||||
onlyLoadAppFromAsar: true,
|
||||
})
|
||||
})
|
||||
|
||||
test('public release config requires signing, Developer ID verification, and notarization', () => {
|
||||
assert.equal(publicBuild.appId, 'com.rydersun.meldwork')
|
||||
assert.equal(publicBuild.forceCodeSigning, true)
|
||||
assert.equal(publicBuild.afterSign, 'scripts/after-sign.cjs')
|
||||
assert.equal(publicBuild.mac.notarize, true)
|
||||
})
|
||||
|
||||
test('packaged application carries the open-source and commercial licensing notices', () => {
|
||||
const mappings = publicBuild.extraResources
|
||||
assert.equal(mappings.some(entry => entry.from === '../LICENSE' && entry.to === 'LICENSE'), true)
|
||||
assert.equal(mappings.some(entry => entry.from === '../NOTICE' && entry.to === 'NOTICE'), true)
|
||||
assert.equal(
|
||||
mappings.some(entry => entry.from === '../COMMERCIAL_USE.md' && entry.to === 'COMMERCIAL_USE.md'),
|
||||
true,
|
||||
)
|
||||
})
|
||||
@@ -0,0 +1,77 @@
|
||||
const test = require('node:test')
|
||||
const assert = require('node:assert/strict')
|
||||
|
||||
const {
|
||||
assertPublicReleaseEnvironment,
|
||||
notarizationStrategy,
|
||||
signingStrategy,
|
||||
} = require('../scripts/public-release-preflight.cjs')
|
||||
|
||||
test('public release preflight accepts an encrypted certificate and API key credentials', () => {
|
||||
const calls = []
|
||||
const result = assertPublicReleaseEnvironment({
|
||||
platform: 'darwin',
|
||||
env: {
|
||||
CSC_LINK: '/private/certificate.p12',
|
||||
CSC_KEY_PASSWORD: 'secret',
|
||||
APPLE_API_KEY: '/private/AuthKey.p8',
|
||||
APPLE_API_KEY_ID: 'KEY123',
|
||||
APPLE_API_ISSUER: 'issuer-id',
|
||||
},
|
||||
execFile: (file, args) => {
|
||||
calls.push([file, args])
|
||||
return '/usr/bin/notarytool\n'
|
||||
},
|
||||
})
|
||||
|
||||
assert.deepEqual(result, { signing: 'certificate-file', notarization: 'api-key' })
|
||||
assert.deepEqual(calls, [['/usr/bin/xcrun', ['--find', 'notarytool']]])
|
||||
})
|
||||
|
||||
test('public release preflight accepts valid local Developer ID and Keychain profile credentials', () => {
|
||||
const calls = []
|
||||
const result = assertPublicReleaseEnvironment({
|
||||
platform: 'darwin',
|
||||
env: { APPLE_KEYCHAIN_PROFILE: 'meldwork-notary' },
|
||||
execFile: (file, args) => {
|
||||
calls.push([file, args])
|
||||
if (file === '/usr/bin/security') {
|
||||
return '1) ABCDEF "Developer ID Application: Ryder Sun (TEAM123456)"\n'
|
||||
}
|
||||
return '/usr/bin/notarytool\n'
|
||||
},
|
||||
})
|
||||
|
||||
assert.deepEqual(result, { signing: 'keychain-identity', notarization: 'keychain-profile' })
|
||||
assert.equal(calls.length, 2)
|
||||
})
|
||||
|
||||
test('public release preflight rejects non-macOS and incomplete credentials', () => {
|
||||
assert.throws(
|
||||
() => assertPublicReleaseEnvironment({ platform: 'linux', env: {} }),
|
||||
{ message: 'PUBLIC_RELEASE_MACOS_REQUIRED' },
|
||||
)
|
||||
assert.throws(
|
||||
() => signingStrategy({ CSC_LINK: '/private/certificate.p12' }),
|
||||
{ message: 'PUBLIC_RELEASE_CERTIFICATE_CREDENTIALS_INCOMPLETE' },
|
||||
)
|
||||
assert.throws(
|
||||
() => notarizationStrategy({ APPLE_ID: '[email protected]' }),
|
||||
{ message: 'PUBLIC_RELEASE_APPLE_ID_CREDENTIALS_INCOMPLETE' },
|
||||
)
|
||||
assert.throws(
|
||||
() => notarizationStrategy({}),
|
||||
{ message: 'PUBLIC_RELEASE_NOTARIZATION_CREDENTIALS_MISSING' },
|
||||
)
|
||||
})
|
||||
|
||||
test('public release preflight rejects an unrelated or missing signing identity', () => {
|
||||
assert.throws(
|
||||
() => signingStrategy({ CSC_NAME: 'www.dingtalkcs.com' }),
|
||||
{ message: 'PUBLIC_RELEASE_SIGNING_IDENTITY_INVALID' },
|
||||
)
|
||||
assert.throws(
|
||||
() => signingStrategy({}, () => '0 valid identities found\n'),
|
||||
{ message: 'PUBLIC_RELEASE_SIGNING_IDENTITY_MISSING' },
|
||||
)
|
||||
})
|
||||
@@ -17,6 +17,8 @@ Meldwork 是一个本地优先的 Agent 工作系统。当前仓库是一个 Ele
|
||||
|
||||
- [品牌策略](brand-strategy.md)：工作名、阶段化 Slogan、Logo 和传播边界。
|
||||
- [发布与 PR 素材](launch-kit.md)：README、发布帖和演示口径。
|
||||
- [公开 MVP 发布清单](public-mvp-release.md)：首发范围、阻断项、验证和仓库公开步骤。
|
||||
- [macOS 签名与公证](macos-signing.md)：Apple Developer 申请、证书、electron-builder 配置和验收。
|
||||
- [架构](architecture.md)：Electron、Renderer、Main、Connector 边界。
|
||||
- [流程](flows.md)：工作流与状态流转。
|
||||
- [权限边界](permissions.md)：本地执行、Provider、Installer 和写入权限。
|
||||
|
||||
@@ -20,7 +20,7 @@ The supported product surface is the packaged Electron application. The frontend
|
||||
| Human Gate store | Persists permission, budget, and decision requests and their terminal user/system decisions without exposing raw request payloads to the renderer | `desktop/src/human-gate-store.cjs`, `desktop/src/human-gate-coordinator.cjs` |
|
||||
| Scheduling and failure policy | Enforces run budgets, retry policy, per-Agent controls, and global/workspace scheduling | `desktop/src/run-scheduler.cjs`, `desktop/src/failure-policy.cjs` |
|
||||
| Agent Connector registry/runtime | Validates approved manifests and instances, separates CredentialRefs, records Connector/upstream versions, and reduces versioned idempotent Run Events | `desktop/src/agent-connector-manifest.cjs`, `desktop/src/agent-connector-registry.cjs`, `desktop/src/agent-connector-runtime.cjs` |
|
||||
| Attachment store | Imports validated local images into private app-owned storage, verifies metadata/checksums on read, and removes unreferenced entries | `desktop/src/attachment-store.cjs`, `desktop/src/image-dimensions.cjs` |
|
||||
| Attachment store | Imports validated local images, media, documents, code/configuration files, Office files, and archives into private app-owned storage, verifies metadata/checksums on read, and removes unreferenced entries | `desktop/src/attachment-store.cjs`, `desktop/src/image-dimensions.cjs` |
|
||||
| Local Skill catalog | Scans bounded known roots per Agent and returns sanitized Skill coordinates without exposing paths or contents | `desktop/src/local-skill-catalog.cjs` |
|
||||
| Local knowledge-source catalog | Detects and probes code-defined Feishu, DingTalk, and Obsidian access modes, returns sanitized readiness, validates task selections, and exposes reference-only future sources | `desktop/src/local-knowledge-base.cjs` |
|
||||
| Knowledge Connector runtime | Executes main-owned bounded search/fetch/snapshot/citation operations for explicit source selections; the renderer receives only sanitized discovery and selection records | `desktop/src/local-knowledge-connectors.cjs`, `desktop/src/knowledge-connector-filesystem.cjs` |
|
||||
@@ -49,7 +49,7 @@ The supported product surface is the packaged Electron application. The frontend
|
||||
| Bounded run checkpoints | Electron user data: `roundrelay-run-ledger.json` | Atomic private writes; `0600` file, with new parent directories created as `0700`; at most 64 sanitized runs with bounded Agent output/events/source IDs; no raw commands, paths, credentials, or native session references |
|
||||
| Immutable Context Packs, delivery records, content blobs, typed outcomes, and Human Gates | Electron user data under `roundrelay-private/` | Content-addressed or atomically written main-only records; renderer snapshots expose only bounded IDs, provenance summaries, budgets, and pending Gate choices |
|
||||
| Cloud operations and Channel Inbox | Electron user data under `roundrelay-private/` | Private `0600` stores keep opaque remote references, idempotency state, signed-event-derived Task data, delivery cursors, Task mappings, and outbound audit records; raw signatures, headers, credentials, and complete IM history are not exposed to the renderer |
|
||||
| Imported image attachments | Electron user data under `attachments/` | App-owned copy; `0700` directories, `0600` files, magic/MIME/size/dimension validation, metadata checksum, ID-only renderer access |
|
||||
| Imported attachments | Electron user data under `attachments/` | App-owned copy; `0700` directories, `0600` files, type/MIME/size validation, image-dimension checks where applicable, metadata checksum, ID-only renderer access |
|
||||
| Provider metadata and encrypted key | Electron user data: `roundrelay-provider.json` | API key encrypted with `safeStorage`; file written atomically with mode `0600` |
|
||||
| Knowledge-source preference | Electron user data: `roundrelay-knowledge-base.json` | Stores the selected absolute Obsidian Vault path only; written atomically as a private file |
|
||||
| Managed OpenClaw state/config | Electron user data under `openclaw-managed/` | Per-scope directories, mode `0700`; config mode `0600`; API key passed by child environment |
|
||||
@@ -62,7 +62,7 @@ There is no Meldwork-hosted remote data store or application account namespace.
|
||||
## Network Surface
|
||||
|
||||
- Agent CLIs may call their own configured model providers.
|
||||
- Selected images and Skill-influenced prompts may be sent by an Agent CLI to its configured model provider after local validation.
|
||||
- Selected attachments and Skill-influenced prompts may be sent by an Agent CLI to its configured model provider after local validation and capability checks.
|
||||
- Compatible Agents may receive the user-configured Provider URL/model/key from main.
|
||||
- Feishu and DingTalk readiness probes may invoke their configured local CLIs; a selected Agent may then use those CLI connections with read-only instructions.
|
||||
- An explicit Obsidian selection is searched and fetched through the main-owned read-only filesystem Connector, then captured as an immutable snapshot or explicit live reference before Agent invocation.
|
||||
@@ -101,3 +101,5 @@ There is no Meldwork-hosted remote data store or application account namespace.
|
||||
- [Variables And Secrets](variables.md)
|
||||
- [Test Coverage](tests.md)
|
||||
- [Automation](automation.md)
|
||||
- [Public MVP Release Checklist](public-mvp-release.md)
|
||||
- [macOS Signing And Notarization](macos-signing.md)
|
||||
+11
-11
@@ -1,48 +1,48 @@
|
||||
# Meldwork Launch Kit
|
||||
|
||||
This document contains draft public-relations and repository-launch copy for the current MVP. `Meldwork` still requires trademark, domain, and user-understanding checks. Publish only copy that matches the repository's non-commercial license and policy docs.
|
||||
This document contains draft public-relations and repository-launch copy for the current MVP. `Meldwork` still requires trademark, domain, and user-understanding checks. Publish only copy that matches the repository's AGPL Community Edition and commercial-license policy docs.
|
||||
|
||||
## Positioning
|
||||
|
||||
**Current MVP category:** Local-first desktop workspace for supported general-purpose Agent CLIs
|
||||
**Current MVP category:** Local-first desktop workspace for a bounded two-Agent produce-and-review loop
|
||||
|
||||
**Current product line:** Agents change. Work continues.
|
||||
|
||||
**Chinese:** Agent 可切换，工作不断线。
|
||||
|
||||
**Current one sentence:** Meldwork brings supported local Agent CLIs and explicitly selected knowledge sources into one persistent workspace, so conversations, compatible native sessions, and task context can continue when work moves between Agents.
|
||||
**Current one sentence:** Meldwork lets two supported local Agents produce and challenge one deliverable in a persistent local workspace, with explicit context, permissions, and reviewable execution state.
|
||||
|
||||
**Chinese:** Meldwork 把已支持的本地 Agent CLI 和用户明确选择的知识来源带进一个持续工作空间，让工作在不同 Agent 之间流转时，对话、兼容条件下的原生 Session 和任务上下文仍然保留。
|
||||
**Chinese:** Meldwork 让两个已支持的本地 Agent 在同一个持续存在的本地工作空间里产出并复核一份交付物，同时保留明确的上下文、权限和可复盘运行状态。
|
||||
|
||||
**Target product category:** An open, local-first work system for compatible Agents and knowledge sources across vendors.
|
||||
|
||||
**Target architecture line:** Agents and knowledge sources should join through explicit capabilities, permissions, events, and egress declarations.
|
||||
|
||||
The target category and architecture line describe product direction. The current MVP still uses a fixed set of local CLI adapters.
|
||||
The target category and architecture line describe product direction. The current MVP still uses a fixed set of local CLI adapters and does not automatically merge separate direct and group conversation histories.
|
||||
|
||||
## Launch headline
|
||||
|
||||
Introducing Meldwork: a persistent workspace for the Agents you already use
|
||||
|
||||
After a license and public connector contract are added, use:
|
||||
After the public connector contract is added, use:
|
||||
|
||||
Introducing Meldwork: an open, local-first workspace for Agents and knowledge
|
||||
|
||||
## Short announcement
|
||||
|
||||
Meldwork is a local-first desktop workspace for general-purpose AI agents. The current MVP discovers supported local Agent CLIs, keeps direct and group conversations persistent, resumes compatible native sessions, runs bounded discussions, and lets users explicitly select ready Feishu, DingTalk, or Obsidian knowledge sources. It is not a coding-only Agent aggregator or a knowledge-base engine: coding, research, planning, creation, operations, and review share one cross-Agent workspace, while source access and Provider traffic still follow the selected local tools and Agent configuration.
|
||||
Meldwork is a local-first desktop workspace for a bounded two-Agent review loop. The current MVP discovers supported local Agent CLIs, keeps direct and group conversations persistent, resumes compatible native sessions, accepts validated task files, and records sanitized execution state. Its first public workflow is simple: one Agent produces a deliverable, a second challenges assumptions and evidence, and the human decides what to adopt. Other domains and future Connector capabilities remain examples or roadmap items.
|
||||
|
||||
## Chinese announcement
|
||||
|
||||
Meldwork 是面向通用 AI Agent 的本地优先桌面工作空间。当前 MVP 可以发现已支持的本地 Agent CLI、持久保存直接与群组会话、在兼容条件下恢复原生 Session、运行有界讨论，并让用户显式选择已就绪的飞书、钉钉或 Obsidian 知识来源。它既不是 Coding Agent 聚合器，也不是知识库引擎：开发、研究、规划、创作、运营和审查共享同一个跨 Agent 工作空间，知识访问和 Provider 流量仍遵循所选本地工具与 Agent 配置。
|
||||
Meldwork 是面向双 Agent 有界复核的本地优先桌面工作空间。当前 MVP 可以发现已支持的本地 Agent CLI、持久保存单聊与群组会话、在兼容条件下恢复原生 Session、接收经过验证的任务文件，并记录脱敏运行状态。公开首发只承诺一个闭环：一个 Agent 形成交付物，第二个检查假设与证据，最后由人决定是否采用。其他业务领域和未来 Connector 能力仍属于示例或路线图。
|
||||
|
||||
## Story structure
|
||||
|
||||
1. People and teams increasingly use several capable Agents and many knowledge sources, but their context, sessions, permissions, and outputs remain fragmented.
|
||||
2. Meldwork gives supported local Agents and explicitly selected knowledge sources one persistent workspace without asking users to replace their Agent, Provider, or content platform relationships.
|
||||
3. The current MVP demo should show discovery, persistent conversations, compatible session continuity, Agent-specific capabilities, and bounded collaboration only where verified.
|
||||
4. The next architecture milestone is a public Agent and Knowledge Connector contract with capability, permission, event, and egress manifests.
|
||||
5. The next product milestone is an explicit Context Pack -> Task -> Run -> Artifact -> Evidence -> Human decision loop.
|
||||
3. The current MVP demo should show one clean-profile two-Agent produce-and-review task from Agent readiness through human review.
|
||||
4. Connector contracts, Cloud transport, and Channel ingress are platform capabilities, not required public-MVP demo claims until a production implementation is configured.
|
||||
5. Task, Context Pack, Run, Artifact, Evidence, and human Adoption records support durability and review, but the launch story should stay focused on the user-visible produce-and-review loop.
|
||||
6. The product difference must come from continuity, open connection, evidence, acceptance, and explicit permission boundaries, not from displaying more Agent avatars.
|
||||
7. Local-first does not mean every model is offline; selected Providers may still use the network.
|
||||
|
||||
|
||||
@@ -0,0 +1,119 @@
|
||||
# macOS Developer ID Signing And Notarization
|
||||
|
||||
The current private preview is ad-hoc signed. Public DMG and ZIP distribution should use a Developer ID Application certificate and Apple notarization so Gatekeeper accepts the app on a clean Mac.
|
||||
|
||||
## 1. Enroll With Apple
|
||||
|
||||
1. Sign in at [developer.apple.com/programs/](https://developer.apple.com/programs/) with the Apple ID that will own the release.
|
||||
2. Enable two-factor authentication and enroll in the Apple Developer Program. Apple currently charges an annual membership fee; confirm the current local price and organization-verification requirements on Apple's enrollment page.
|
||||
3. If publishing as an organization, enroll the legal entity rather than a personal account. Apple may request a D-U-N-S number and authority to bind the organization.
|
||||
4. Record the ten-character Apple Team ID from the Membership page.
|
||||
|
||||
Approval may take from hours to several business days depending on identity or organization verification. This repository cannot automate enrollment.
|
||||
|
||||
## 2. Choose The Permanent App Identity
|
||||
|
||||
The public Bundle ID is `com.rydersun.meldwork`. Register this exact identifier before the first notarized Release and keep it stable afterward; changing it later can affect macOS identity, permissions, Keychain access, and update continuity.
|
||||
|
||||
Register the chosen identifier under Certificates, Identifiers & Profiles. Use one stable reverse-DNS value and keep it unchanged after public release.
|
||||
|
||||
## 3. Create The Signing Certificate
|
||||
|
||||
Recommended local setup:
|
||||
|
||||
1. Install the latest stable Xcode supported by the release Mac.
|
||||
2. Open Xcode Settings, select Accounts, add the enrolled Apple ID, and choose the correct Team.
|
||||
3. Open Manage Certificates and create a `Developer ID Application` certificate.
|
||||
4. Confirm the certificate and private key exist in the login Keychain:
|
||||
|
||||
```bash
|
||||
security find-identity -v -p codesigning
|
||||
```
|
||||
|
||||
DMG and ZIP distribution needs `Developer ID Application`. `Developer ID Installer` is only needed when distributing a signed `.pkg` installer.
|
||||
|
||||
Back up the certificate and private key as an encrypted `.p12` stored outside the repository. Never commit certificates, passwords, API keys, or notarization profiles.
|
||||
|
||||
## 4. Create Notarization Credentials
|
||||
|
||||
The preferred CI path is an App Store Connect API key:
|
||||
|
||||
1. Open App Store Connect, then Users and Access, Integrations, App Store Connect API.
|
||||
2. Create a key with the minimum role that can submit notarization jobs for the Team.
|
||||
3. Download the `.p8` file once and record its Key ID and Issuer ID.
|
||||
|
||||
For local-only use, `notarytool` can store credentials in Keychain:
|
||||
|
||||
```bash
|
||||
xcrun notarytool store-credentials "meldwork-notary" \
|
||||
--apple-id "YOUR_APPLE_ID" \
|
||||
--team-id "YOUR_TEAM_ID" \
|
||||
--password "YOUR_APP_SPECIFIC_PASSWORD"
|
||||
```
|
||||
|
||||
Create the app-specific password at appleid.apple.com. Do not use the normal Apple ID password.
|
||||
|
||||
## 5. Configure electron-builder
|
||||
|
||||
The repository now uses `com.rydersun.meldwork` and AGPL-3.0-only for the Community Edition. The public release configuration must keep hardened runtime enabled and allow electron-builder to sign and notarize after the existing `afterPack` fuse hardening.
|
||||
|
||||
For a local Keychain certificate, electron-builder can discover the valid `Developer ID Application` identity. In CI, export the certificate as an encrypted `.p12` and provide secrets such as:
|
||||
|
||||
```text
|
||||
CSC_LINK
|
||||
CSC_KEY_PASSWORD
|
||||
APPLE_API_KEY
|
||||
APPLE_API_KEY_ID
|
||||
APPLE_API_ISSUER
|
||||
```
|
||||
|
||||
`APPLE_API_KEY` must point to the private `.p8` file in the runner. An Apple ID alternative uses `APPLE_ID`, `APPLE_APP_SPECIFIC_PASSWORD`, and `APPLE_TEAM_ID`.
|
||||
|
||||
For a local Keychain profile, set `APPLE_KEYCHAIN_PROFILE=meldwork-notary`; `APPLE_KEYCHAIN` is optional when the profile is stored in the default Keychain.
|
||||
|
||||
The `dist:public` command runs `scripts/public-release-preflight.cjs`, uses `electron-builder.public.cjs` with `forceCodeSigning: true` and `mac.notarize: true`, and then runs `scripts/after-sign.cjs`. The post-sign hook rejects ad-hoc identities, a missing Team ID, a missing hardened-runtime flag, or any Bundle ID other than `com.rydersun.meldwork`.
|
||||
|
||||
Do not add plaintext fallbacks. A public release without signing or notarization credentials fails before packaging instead of publishing an ad-hoc artifact.
|
||||
|
||||
## 6. Build And Verify
|
||||
|
||||
Build the distribution artifacts:
|
||||
|
||||
```bash
|
||||
npm --prefix frontend ci
|
||||
npm --prefix desktop ci
|
||||
npm --prefix desktop run dist:public
|
||||
```
|
||||
|
||||
Use `npm --prefix desktop run dist` only for local package validation. It is intentionally not a public-release command.
|
||||
|
||||
Verify the exact output before publishing:
|
||||
|
||||
```bash
|
||||
codesign --verify --deep --strict --verbose=2 \
|
||||
desktop/dist/mac-arm64/Meldwork.app
|
||||
|
||||
spctl --assess --type execute --verbose=4 \
|
||||
desktop/dist/mac-arm64/Meldwork.app
|
||||
|
||||
xcrun stapler validate desktop/dist/mac-arm64/Meldwork.app
|
||||
xcrun stapler validate desktop/dist/Meldwork-0.1.0-arm64.dmg
|
||||
```
|
||||
|
||||
Install the DMG on a clean Apple silicon Mac user account and launch it normally, without right-click bypasses or `xattr` removal. Gatekeeper acceptance on that clean account is the release gate.
|
||||
|
||||
Generate checksums only after signing, notarization, and stapling are complete:
|
||||
|
||||
```bash
|
||||
shasum -a 256 \
|
||||
desktop/dist/Meldwork-0.1.0-arm64.dmg \
|
||||
desktop/dist/Meldwork-0.1.0-arm64.zip
|
||||
```
|
||||
|
||||
## 7. Common Failures
|
||||
|
||||
- `CSSMERR_TP_NOT_TRUSTED`: the certificate chain is invalid, expired, missing its private key, or not trusted in the active Keychain.
|
||||
- `no identity found`: the Developer ID certificate is not installed or electron-builder cannot access its Keychain.
|
||||
- Notarization rejects the binary: inspect the `notarytool` log for unsigned nested code, missing hardened runtime, invalid entitlements, or bundled executable content.
|
||||
- `spctl` rejects an otherwise signed app: notarization or stapling is missing, the ticket is invalid, or the tested app differs from the submitted artifact.
|
||||
- A signed release opens with a fresh data directory: the Bundle ID or product identity changed after the preview; stop and define an explicit migration before publishing.
|
||||
@@ -0,0 +1,53 @@
|
||||
# Public MVP Release Checklist
|
||||
|
||||
Meldwork's public MVP is one Apple silicon macOS workflow: two locally ready Agents produce and review one deliverable in a bounded group, while the human controls context, workspace access, and adoption.
|
||||
|
||||
## Public MVP Contract
|
||||
|
||||
- Supported release target: Apple silicon macOS only.
|
||||
- Required workflow: create a two-Agent group, attach task files, complete a bounded discussion, inspect final replies and run state, then make a human adoption decision.
|
||||
- Required local capability: at least two release-certified Agent CLIs can be detected, authenticated, invoked, cancelled, and resumed where their native protocol supports it.
|
||||
- Data boundary: conversations, attachments, run state, Provider profiles, and selections remain in Electron-owned local storage; third-party Agent and Provider traffic follows the user's selected tools.
|
||||
- Explicit absences: no Windows or Intel Mac release claim, no production Cloud Agent, no production Channel ingress, no automatic merge of separate conversation histories, and no claim that every listed Agent is release-certified.
|
||||
|
||||
## Blocking Decisions
|
||||
|
||||
- [x] Use AGPL-3.0-only for the Community Edition and preserve a separate commercial-license path for proprietary redistribution, embedding, and future commercial editions.
|
||||
- [x] Use the stable macOS Bundle ID `com.rydersun.meldwork` before registering the first public binary.
|
||||
- [ ] Confirm the public project name after trademark, domain, and account checks documented in `brand-strategy.md`.
|
||||
|
||||
## Distribution Gates
|
||||
|
||||
- [ ] Enroll the release owner or organization in the Apple Developer Program.
|
||||
- [ ] Create and install a Developer ID Application certificate.
|
||||
- [ ] Configure notarization credentials without committing them to the repository.
|
||||
- [ ] Produce DMG and ZIP artifacts from a clean tagged commit with `npm --prefix desktop run dist:public`.
|
||||
- [ ] Verify Developer ID signatures, Gatekeeper acceptance, notarization, stapling, archive contents, and SHA-256 checksums.
|
||||
- [ ] Install the DMG on a clean Apple silicon Mac user account with no prior Meldwork data.
|
||||
|
||||
## Product Acceptance
|
||||
|
||||
- [ ] Complete the two-Agent produce-and-review workflow on the exact release package with two certified Agent/version combinations.
|
||||
- [ ] Verify first-run detection, missing-auth guidance, Provider configuration, cancellation, restart recovery, file drag-and-drop, attachment opening, and deletion cleanup.
|
||||
- [ ] Confirm that a failed or unavailable Agent does not erase history or make the remaining result look fully verified.
|
||||
- [ ] Capture English and Chinese screenshots from the exact release package.
|
||||
- [ ] Record every known limitation in the Release notes.
|
||||
|
||||
## Repository Gates
|
||||
|
||||
- [ ] Update README download links and remove private-preview wording only after the public Release exists.
|
||||
- [ ] Make CI checks required for `main` after the repository is public; the current private repository plan returns HTTP 403 for branch protection.
|
||||
- [x] Enable GitHub dependency vulnerability alerts.
|
||||
- [ ] Enable GitHub private vulnerability reporting and confirm the reporting path after the repository is public; the endpoint is unavailable while this repository remains private.
|
||||
- [x] Verify README, contribution, security, notice, commercial-use, and license links.
|
||||
- [ ] Put a reviewed contributor-license agreement process in place before merging external code intended for separately licensed commercial builds.
|
||||
- [ ] Publish `v0.1.0` release notes, DMG, ZIP, and `SHA256SUMS.txt` from the same commit.
|
||||
- [ ] Change repository visibility only after the tagged Release and public documentation agree.
|
||||
|
||||
## Not Required For The First Public MVP
|
||||
|
||||
- Windows or Intel Mac packages.
|
||||
- A production Cloud or Channel Connector.
|
||||
- Certification of every Agent shown in the catalog.
|
||||
- A server, account system, telemetry, automatic updater, or hosted conversation storage.
|
||||
- A separate workflow for every business domain.
|
||||
+15
-12
@@ -1,26 +1,28 @@
|
||||
# Verification And Test Coverage
|
||||
|
||||
Verification evidence below spans 2026-07-29 through 2026-08-05 on macOS arm64. Repository tooling and CI support Node.js 20.19 or newer; the packaged desktop runs on Electron's bundled Node.js runtime. On 2026-08-05, the Harness runtime working tree completed the current frontend and desktop suites, both renderer builds, arm64 package validation, and strict ad-hoc signature verification. Unchanged distribution, smoke, compatibility, and audit rows retain their earlier executed baseline.
|
||||
Verification evidence below spans 2026-07-29 through 2026-08-06 on macOS arm64. Repository tooling and CI support Node.js 20.19 or newer; the packaged desktop runs on Electron's bundled Node.js runtime. On 2026-08-06, the current working tree completed the frontend and desktop suites, both renderer builds, arm64 package validation, and strict ad-hoc signature verification. Packaged direct/group attachment acceptance retains its 2026-08-05 executed baseline. Unchanged distribution, compatibility, and audit rows retain their earlier executed baseline.
|
||||
|
||||
## Executed Verification
|
||||
|
||||
| Check | Evidence | Result |
|
||||
| --- | --- | --- |
|
||||
| Frontend unit suite | `npm --prefix frontend test` | 30 files and 233/233 tests passed on 2026-08-05 |
|
||||
| Desktop unit suite | `npm --prefix desktop test` | 826/826 tests passed on 2026-08-05 |
|
||||
| Frontend unit suite | `npm --prefix frontend test` | 30 files and 237/237 tests passed on 2026-08-06 |
|
||||
| Desktop unit suite | `npm --prefix desktop test` | 842/842 tests passed on 2026-08-06 |
|
||||
| CI Node adapter compatibility | `npx -y [email protected] --test desktop/test/cli-adapters.test.cjs` | 71/71 tests passed |
|
||||
| Renderer builds | `npm --prefix frontend run build` and `npm --prefix frontend run build:desktop` | Both Vite builds passed on 2026-08-05; the existing chunk-size warning remains non-fatal |
|
||||
| Current desktop package validation | `npm --prefix desktop run pack` and `codesign --verify --deep --strict desktop/dist/mac-arm64/Meldwork.app` | Electron 39.8.5 arm64 packaging passed on 2026-08-05. The exact bundle is `com.roundrelay.desktop` version `0.1.0`; `app.asar` SHA-256 is `82f7a617725a235025876615ee2427ec5b252707c0260001140c06ed59e678da`. Strict verification passed with an ad-hoc signature. This is not Developer ID signing or notarization |
|
||||
| Harness / Run Ledger automated regression coverage | `frontend/src/__tests__/roundrelay/App.conversation-trace.spec.js`; `frontend/src/__tests__/roundrelay/App.run-trace.spec.js`; `desktop/test/run-harness.test.cjs`; `desktop/test/run-ledger.test.cjs`; `desktop/test/local-workspace-harness.test.cjs` | Included in the passing 2026-08-05 suites: direct inline and group-panel trace contracts, streamed terminal conclusions, compact evidence handoff, sanitized checkpoints, provenance conflict rejection, durable restart recovery, no overall Run deadline, per-Agent watchdog cleanup, retryable transactions, and stale run-ID stop rejection |
|
||||
| Renderer builds | `npm --prefix frontend run build` and `npm --prefix frontend run build:desktop` | Both Vite builds passed on 2026-08-06. The largest JavaScript chunk was 354.72 kB, so the previous 500 kB warning did not appear |
|
||||
| Current desktop package validation | `npm --prefix desktop run pack`, `codesign --verify --deep --strict desktop/dist/mac-arm64/Meldwork.app`, and `spctl --assess --type execute --verbose=4 desktop/dist/mac-arm64/Meldwork.app` | Electron 39.8.5 arm64 packaging passed on 2026-08-06 with permanent Bundle ID `com.rydersun.meldwork`, version `0.1.0`, and `app.asar` SHA-256 `551aeccf3aabc53e0f4af4fe39bf5acaaf5b5ae0a66b2e5d32ebb93cea02f0dd`. Strict integrity verification passed with an ad-hoc signature; Gatekeeper rejected the app because real Developer ID signing and notarization are still unavailable |
|
||||
| Public release fail-closed check | `npm --prefix desktop run dist:public` without release credentials | Exited before frontend build or packaging with `PUBLIC_RELEASE_SIGNING_IDENTITY_MISSING`; no ad-hoc public artifact was produced |
|
||||
| Harness / Run Ledger automated regression coverage | `frontend/src/__tests__/roundrelay/App.conversation-trace.spec.js`; `frontend/src/__tests__/roundrelay/App.run-trace.spec.js`; `desktop/test/run-harness.test.cjs`; `desktop/test/run-ledger.test.cjs`; `desktop/test/local-workspace-harness.test.cjs` | Included in the passing 2026-08-06 suites: direct inline and group-panel trace contracts, streamed terminal conclusions, compact evidence handoff, sanitized checkpoints, provenance conflict rejection, durable restart recovery, no overall Run deadline, per-Agent watchdog cleanup, retryable transactions, and stale run-ID stop rejection |
|
||||
| Runtime interruption and Human Gate recovery | `desktop/test/local-workspace-human-gate-recovery.test.cjs`; `desktop/test/human-gate-coordinator.test.cjs`; `desktop/test/local-workspace-run-coordinator.test.cjs`; `desktop/test/local-workspace-manual-controls.test.cjs`; `desktop/test/local-workspace.test.cjs` | Replay-safe final Agent slots can recover; legacy Role Review continuations fail closed with `LOCAL_WORKFLOW_UNSUPPORTED`, and non-final multi-Agent slots without a durable orchestration cursor fail closed with `LOCAL_RUN_ORCHESTRATION_RESUME_UNAVAILABLE`. Initial or resume checkpoint failures roll pending continuation state back, parallel Gates are exposed serially, waiter/listener cleanup is bounded, and shutdown still settles when a waiting checkpoint fails |
|
||||
| Agent, Knowledge, and mock Cloud runtime coverage | `desktop/test/agent-connector-manifest.test.cjs`; `desktop/test/agent-connector-registry.test.cjs`; `desktop/test/agent-connector-instance-store.test.cjs`; `desktop/test/agent-connector-runtime.test.cjs`; `desktop/test/run-event-protocol.test.cjs`; `desktop/test/knowledge-connector-registry.test.cjs`; `desktop/test/local-knowledge-connectors.test.cjs`; `desktop/test/cloud-agent-runtime.test.cjs` | Approved Agent Manifests/instances, two Knowledge implementations, mock asynchronous Cloud execution, Human Gates, and fail-fast 401/403 handling that retains the configured Agent are included in the passing desktop suite. Production Channel and Cloud connectors are not configured |
|
||||
| Electron Hermes SQLite smoke | Temporary Hermes-shaped `state.db` queried through Electron with `ELECTRON_RUN_AS_NODE=1` | Electron 39.8.5 / Node.js 22.22.1 loaded `node:sqlite`; the watermark excluded the previous turn and `tool_calls`, a post-watermark `length` result was accepted, and a later `stop` result took precedence |
|
||||
| macOS distribution | `npm --prefix desktop run dist` | arm64 `.app`, DMG, and ZIP produced |
|
||||
| Current macOS distribution | `npm --prefix desktop run dist`; inspect ZIP and read-only mounted DMG | arm64 `.app`, DMG, and ZIP produced on 2026-08-06. ZIP and DMG both contain `com.rydersun.meldwork` plus byte-matching `LICENSE`, `NOTICE`, and `COMMERCIAL_USE.md`. DMG SHA-256 is `e419a4df22c4d40cb0921f3e4810d6486a955e0cc54e99464043bf019933ae8c`; ZIP SHA-256 is `6bd7ed680ff9aee22ce948a892b189bf71534200b5e91a60ce7b0f9afc1e21a5` |
|
||||
| Production dependency audit | `npm --prefix desktop audit --omit=dev` and `npm --prefix frontend audit --omit=dev` | 0 known vulnerabilities in both production dependency sets |
|
||||
| ACP runtime packaging | Inspect and extract packaged `app.asar`, then dynamically import its production modules | `@agentclientprotocol/sdk` 0.23.0, `zod` 4.4.3, the ACP client, and both inbound Zod validators loaded successfully |
|
||||
| Current packaged startup and quit smoke | Launch the exact `desktop/dist/mac-arm64/Meldwork.app` with fresh profile `/tmp/meldwork-role-review-smoke.R6owYX` and CDP port `9585` | The packaged page reached `complete`, rendered one populated root with 1,143 visible-text characters and 30 visible buttons, contained no Role Review text, entry, or form, and had no horizontal overflow. Closing through the browser debugging endpoint removed the app process and CDP listener |
|
||||
| Current packaged startup and quit smoke | Launch the exact `desktop/dist/mac-arm64/Meldwork.app` with fresh profile `/tmp/meldwork-public-id-smoke.FMzqmx` and CDP port `9673` | The exact package exposed one `Meldwork` page at its bundled `file:` URL, the packaged plist reported `com.rydersun.meldwork`, and stopping the test process removed both the isolated-profile process and CDP listener. The temporary profile was deleted afterward |
|
||||
| Packaged Harness group acceptance (pre-final edge-fix package) | Launch the packaged app with isolated profile `/private/tmp/meldwork-final-harness-profile.xVSai5`; inspect group `efcf61d5-2875-419d-a285-0c7b01171d8d`, run `ccae01a8-89c0-4088-9da2-ff8b77cec9b1`, and Task/thread root `7c25e3f7-aa88-47cb-a87f-daa6b5aa12c6` | Two rounds completed with no failures or 401 retries. Hermes and Codex both retained `turns: 2`; Hermes used one Task-scoped `legacy` Session with complete provenance. Live preload capture observed 14 events including four `answer_delta` events; the group showed no inline process details and opened a 380 CSS px right-side panel. Hermes truthfully reported `connector_limited` where legacy transport could not expose structured tool details. Ledger state retained the compacted durable trace rather than every live event |
|
||||
| Historical packaged Harness direct acceptance | In the earlier exact packaged app/profile, inspect direct conversation `e85c04a5-6029-4c68-91aa-2696b759f64a` during and after a real Codex run | While running, conclusion and tool/status details streamed inline with no right panel. After completion, marker `DIRECT_LIVE_CAPTURE_OK` remained, execution details collapsed with two durable tool events, and no right panel appeared. The app then quit cleanly and both its PID and CDP listener were gone |
|
||||
| Packaged attachment acceptance (2026-08-05 package) | Launch the exact package with the existing local profile and CDP port `9241`; drag HTML, JavaScript, and ZIP files into a group and a Codex direct conversation | All three files appeared in both composers with no unsupported-type or lower-limit error. Test drafts and private attachment copies were removed afterward; current attachment behavior is additionally pinned by the full 2026-08-06 regression suite |
|
||||
| Logo packaging | Compare source, Vite output, and packaged asar hashes; inspect generated `icon.icns` and packaged UI | The final 3D Relay Fold app/product PNGs match source byte-for-byte in the package, and the packaged renderer loads the 1024x1024 brand asset |
|
||||
| Idle startup network | Inspect the Meldwork process tree with `lsof` after disconnecting CDP | No established TCP or UDP connection; only the explicitly enabled loopback CDP listener remained |
|
||||
| Empty-store secure-storage behavior | Unit tests plus a one-second process sample | No `SecItemCopyMatching`, `SecKeychain`, `CSSM_Decrypt`, or decrypt call observed without a stored Provider |
|
||||
@@ -43,7 +45,7 @@ The broader first-run, group creation, Skill IPC, clipboard attachment, real Her
|
||||
| Channel ingress framework and outbound audit | Test connectors verify signatures, reject stale/replayed/cross-scope events, map one durable Delivery to one Task through an injected `taskSink`, preserve cursor order, and replay outbound replies idempotently without renderer ownership. Production bootstrap intentionally has `connectors: []` and no `taskSink`, so no task-oriented Channel is shipped | `desktop/test/channel-ingress-contract.test.cjs`; `desktop/test/channel-inbox-store.test.cjs`; `desktop/test/channel-ingress-runtime.test.cjs`; `desktop/test/main-security.test.cjs` | Framework passed locally; production Channel not configured |
|
||||
| Composer Skill routing | Loads Skills only for selected targets, supports `@` selection, and sends structured target-scoped coordinates | `frontend/src/__tests__/roundrelay/App.spec.js`; `desktop/test/local-skill-catalog.test.cjs`; `desktop/test/agent-installer.test.cjs`; `desktop/test/local-workspace.test.cjs` | Passed locally |
|
||||
| Legacy knowledge-base hint routing | Separates ready/planned Feishu, DingTalk, and Obsidian hints, requires readable access, scopes selections to target Agents, persists only the selected Vault path, and rejects stale or unauthorized hints | `frontend/src/__tests__/roundrelay/App.spec.js`; `desktop/test/local-knowledge-base.test.cjs`; `desktop/test/knowledge-base-store.test.cjs`; `desktop/test/local-workspace.test.cjs`; `desktop/test/main-security.test.cjs` | Passed locally |
|
||||
| Image attachment UI | Imports picker/paste images, permits image-only messages, blocks send and concurrent paste batches during import, keeps accepted all-failed messages out of the composer, discards unsent/overflow/stale imports, and sends metadata without paths or preview data | `frontend/src/__tests__/roundrelay/App.spec.js` | Passed locally |
|
||||
| Attachment composer UI | Imports picker, paste, Finder drag, and `DataTransfer.items` files; supports image, media, document, code, and archive metadata; blocks concurrent imports; discards unsent/overflow/stale imports; and sends metadata without paths or preview data | `frontend/src/__tests__/roundrelay/App.attachments.spec.js`; `frontend/src/__tests__/roundrelay/App.spec.js` | Passed locally |
|
||||
| Attachment preview cache | Loads visible previews only, limits concurrent main-process requests to two, and evicts non-visible least-recent entries from the bounded cache | `frontend/src/__tests__/roundrelay/attachmentPreviews.spec.js` | Passed locally |
|
||||
| Renderer bridge normalization | Uses only `window.roundrelayDesktop` services and normalizes missing data | `frontend/src/__tests__/roundrelay/desktop.spec.js` | Passed locally |
|
||||
| Renderer i18n | Chinese/English keys and interpolation remain consistent | `frontend/src/__tests__/roundrelay/i18n.spec.js` | Passed locally |
|
||||
@@ -52,10 +54,11 @@ The broader first-run, group creation, Skill IPC, clipboard attachment, real Her
|
||||
| Electron navigation, lifecycle, and shutdown gate | Loads bundled frontend, denies in-window remote navigation, serializes refresh, rejects every trusted IPC call after shutdown starts, then waits for workspace/installer cleanup before quitting | `desktop/test/main-security.test.cjs` | Passed locally |
|
||||
| Narrow preload API | Local documents get only named workspace, installer, Skill snapshot, attachment, Provider, local Agent Connector, Knowledge lifecycle, Cloud continuation/cancel, Outcome/Adoption, Human Gate, and per-Agent control methods. Attachment APIs expose no file read or path resolution; non-local documents get no privileged API | `desktop/test/preload-security.test.cjs` | Passed locally |
|
||||
| Packaged Electron hardening | Fuses disable Node/runtime injection and require ASAR integrity | `desktop/test/package-security.test.cjs` | Passed locally |
|
||||
| Public macOS release gate | `dist:public` requires a Developer ID source and one complete Apple notarization credential strategy; public config forces signing/notarization; the post-sign hook rejects ad-hoc signatures, missing Team ID, missing hardened runtime, and a Bundle ID other than `com.rydersun.meldwork` | `desktop/test/public-release-preflight.test.cjs`; `desktop/test/after-sign.test.cjs`; `desktop/test/package-security.test.cjs` | Passed locally; live Apple signing is still pending |
|
||||
| Provider secret storage | Complete payload required; URL constrained; key encrypted; failures/corruption fail closed; delete works | `desktop/test/provider-store.test.cjs` | Passed locally |
|
||||
| Agent readiness | Detects native credentials without returning values and scopes forwarded credential variables by Agent | `desktop/test/local-agent-readiness.test.cjs` | Passed locally |
|
||||
| Installer allowlist and lifecycle | Fixed recipes, URL/command rejection, environment filtering, verification, cancellation, and single-task behavior | `desktop/test/agent-installer.test.cjs` | Passed locally |
|
||||
| Image storage and validation | Validates PNG/JPEG signatures, MIME/name agreement, 8 MiB/four-image limits, image dimensions, private storage, checksums, tamper resistance, cleanup, bounded previews, and referenced-attachment deletion guards | `desktop/test/attachment-store.test.cjs`; `desktop/test/image-dimensions.test.cjs`; `desktop/test/main-security.test.cjs` | Passed locally |
|
||||
| Attachment storage and validation | Validates image, media, document, code, Office, and archive signatures or bounded UTF-8 content; enforces MIME/name agreement and per-type limits; preserves private storage, checksums, tamper resistance, cleanup, bounded previews, and referenced-attachment deletion guards | `desktop/test/attachment-store.test.cjs`; `desktop/test/image-dimensions.test.cjs`; `desktop/test/main-security.test.cjs`; `desktop/test/preload-security.test.cjs` | Passed locally |
|
||||
| CLI invocation and Hermes final-result safety | Per-Agent read-only/write arguments, Kimi ACP lifecycle, image limits, Hermes native Skill preload, guarded ACP-to-legacy fallback, invalid-session classification, best-effort pre-run message watermark, post-watermark `assistant` `stop`/`length` selection, official stdout fallback, early session persistence, environment scoping, secret redaction, and process-tree cancellation | `desktop/test/cli-adapters.test.cjs`; `desktop/test/cli-adapters-agent-protocols.test.cjs` | Passed locally |
|
||||
| Workspace state and automation | Explicit persisted-field allowlists, path stripping, visual Task roots, Task-and-Agent group sessions, conversation-and-Agent direct sessions, exact legacy migration, workdir invalidation, bounded shared conclusions, target-scoped Skills, equal attachment context, cancellation-aware preflight, final-only downstream relay, failure isolation, complete rounds, strict consensus, no overall Run deadline, and per-Agent watchdog bounds | `desktop/test/local-workspace.test.cjs`; `desktop/test/local-workspace-auto.test.cjs`; `desktop/test/local-workspace-harness.test.cjs`; `desktop/test/run-scheduler.test.cjs` | Passed locally |
|
||||
| Terminal run lifecycle | Completion events are transient and best-effort, listener failures do not change results, all-failed automatic runs keep the round-limit diagnostic, notification payloads are content-free, notification clicks open the target conversation, background successful direct runs receive completion markers, and shutdown suppresses new notifications | `desktop/test/local-workspace.test.cjs`; `desktop/test/main-security.test.cjs` | Passed locally |
|
||||
@@ -90,8 +93,8 @@ The workflow file exists, but branch protection and successful required checks a
|
||||
|
||||
| Priority | Rule with no current verification | Exposure | Status |
|
||||
| --- | --- | --- | --- |
|
||||
| High | Public release signing/notarization is not exercised | Distributed macOS artifacts can be rejected by Gatekeeper | None |
|
||||
| High | No concrete production Channel Connector or Task sink is configured | The Channel framework cannot yet receive a real external Task or deliver a production reply | Test Connector/taskSink coverage only; Epic #14 and Issue #5 remain open |
|
||||
| High | Public release signing/notarization is not exercised with real Apple credentials | Distributed macOS artifacts can be rejected by Gatekeeper | Fail-closed preflight, forced signing/notarization config, and post-sign identity checks exist; live Developer ID and clean-machine acceptance remain pending |
|
||||
| Medium | No concrete production Channel Connector or Task sink is configured | The Channel framework cannot yet receive a real external Task or deliver a production reply | Framework acceptance is complete and its tracking issues are closed; production configuration is outside the public MVP contract |
|
||||
| Medium | No real Cloud Agent provider acceptance | Provider-specific authentication, polling, callback, and Artifact semantics may diverge from the mock contract | Mock Cloud Connector coverage only |
|
||||
| Medium | No single automated Connector -> main -> persistence -> preload -> renderer test | Individually tested boundaries may still disagree when composed | Contract, main/preload, persistence, and renderer tests exist separately |
|
||||
| Medium | No automated packaged preload/Agent end-to-end suite | Unit mocks may miss real IPC, attachment/Skill routing, or Agent process integration faults | Historical guarded live Harness/direct acceptance plus a current packaged startup/quit smoke; no automated suite |
|
||||
|
||||
@@ -50,6 +50,22 @@ Main derives these at invocation time; users should not set them as Meldwork con
|
||||
|
||||
The API key is intentionally absent from generated OpenClaw JSON and supplied only through the child environment.
|
||||
|
||||
## Release Signing And Notarization
|
||||
|
||||
These variables are used only by `npm --prefix desktop run dist:public`. They must come from the local Keychain or the release system's encrypted secret store and must never reach the renderer or packaged application.
|
||||
|
||||
| Name | Used by | Source and scope | Persistence / rotation | Risk and handling |
|
||||
| --- | --- | --- | --- | --- |
|
||||
| `CSC_LINK` | electron-builder signing | Encrypted CI secret containing or pointing to the Developer ID `.p12` | Replace when the certificate is renewed or revoked | Secret certificate material; must be paired with `CSC_KEY_PASSWORD` |
|
||||
| `CSC_KEY_PASSWORD` | electron-builder signing | Encrypted CI secret | Rotate with the exported `.p12` | Secret; never print or store in repository files |
|
||||
| `CSC_NAME` | Local Keychain signing | Optional local identity selector | Update when the certificate identity changes | Non-secret name, but `dist:public` accepts only a Developer ID Application identity |
|
||||
| `APPLE_API_KEY` | Apple notarization | Path to the private App Store Connect `.p8` key | Revoke and replace in App Store Connect | Secret file; `*.p8` is ignored by Git |
|
||||
| `APPLE_API_KEY_ID`, `APPLE_API_ISSUER` | Apple notarization | App Store Connect identifiers stored with release secrets | Replace when the API key changes | Treat as release metadata and keep out of renderer state |
|
||||
| `APPLE_ID`, `APPLE_APP_SPECIFIC_PASSWORD`, `APPLE_TEAM_ID` | Alternative Apple notarization | Encrypted release secrets | Rotate the app-specific password and update Team membership as needed | The app-specific password is secret; the normal Apple ID password must never be used |
|
||||
| `APPLE_KEYCHAIN_PROFILE`, `APPLE_KEYCHAIN` | Local `notarytool` profile | Local Keychain profile name and optional Keychain path | Recreate when Apple credentials rotate | References only; underlying credentials remain in Keychain |
|
||||
|
||||
The public-release preflight requires one complete signing source and one complete notarization strategy. Partial credential groups fail before packaging, and the post-sign hook rejects ad-hoc or mismatched identities.
|
||||
|
||||
## Non-Secret System Environment
|
||||
|
||||
Agent children receive an allowlist of operating-system identity/path/locale/temp/certificate variables plus a constructed `PATH`. Meldwork does not forward the entire Electron environment.
|
||||
@@ -61,4 +77,6 @@ Agent children receive an allowlist of operating-system identity/path/locale/tem
|
||||
- Confirm Provider status never returns the API key and credential files remain mode `0600`.
|
||||
- Confirm child-process environment tests cover newly supported Agents or variables.
|
||||
- Confirm installer logs/state never expose command output or ambient secrets.
|
||||
- Confirm `dist:public` passes with the intended Developer ID and fails when signing or notarization credentials are removed.
|
||||
- Confirm no `.p8`, `.p12`, certificate password, or notarization profile is present in Git history or release archives.
|
||||
- Rotate any credential used during guarded live testing before distributing artifacts.
|
||||
Generated
+1
-1
@@ -7,7 +7,7 @@
|
||||
"": {
|
||||
"name": "meldwork-frontend",
|
||||
"version": "0.1.0",
|
||||
"license": "PolyForm-Noncommercial-1.0.0",
|
||||
"license": "AGPL-3.0-only",
|
||||
"dependencies": {
|
||||
"@vicons/ionicons5": "^0.12.0",
|
||||
"dompurify": "^3.4.11",
|
||||
|
||||
@@ -4,7 +4,7 @@
|
||||
"private": true,
|
||||
"description": "Meldwork local-first multi-Agent collaboration workspace",
|
||||
"author": "Ryder-MHumble",
|
||||
"license": "PolyForm-Noncommercial-1.0.0",
|
||||
"license": "AGPL-3.0-only",
|
||||
"engines": {
|
||||
"node": ">=20.19.0"
|
||||
},
|
||||
|
||||
Reference in new issue
Block a user