78cc3a40ec
fix(macos-pkg): product ID, Verae branding, license Agree in installer
...
The product .pkg was a bare component wrapper with no Installer.app UI.
- Distribution.xml.in: title Verae Print Stamp, org ai.verae, product id
- resources: welcome/license/readme/conclusion HTML + plum brand backgrounds
- license.html requires Agree/Disagree before install continues
- readme.html product identification table (bundle/pkg IDs, version, publisher)
- App bundle: AppIcon.icns, VeraeProductID/VeraeBrand keys, PRODUCT.txt sidecar
- build-pkg.sh uses productbuild --distribution --resources
- SKIP_SIGN=1 for local UI smoke; smoke-installer-ui.sh (15 checks)
Verify: SKIP_SIGN=1 ./platform/macos/pkg/build-pkg.sh
./platform/macos/pkg/smoke-installer-ui.sh
2026-10-14 05:25:28 -04:00
41e079a0ad
docs: PR body for windows-debug (MSI/CERT/statuslang)
...
Summarize MSI dual-ship, CERT-01, and statuslang work for the
windows-debug PR. Links OPERATOR-READY and DUAL-SHIP as canonical
operator paths; external sign/notary/VM legs stay org-blocked.
2026-10-14 04:33:41 -04:00
d822137bbb
fix: align deb/site to HelperVersion 0.3.6 (version audit)
...
todo-list-3 version-audit: fix stale 0.3.4 defaults in build-deb.sh and
printit index deb blurb; document audit in PACKAGING; smoke asserts deb
fallback. CDN last-published 0.3.2/0.1.2 checksums left intentional.
2026-10-14 04:33:32 -04:00
778763737e
docs: OPERATOR-READY package for MSI/notary external legs
...
windows-msi / full-msi-unsigned (push) Has been cancelled
Consolidate Authenticode, Apple notary, VM C, and digest-paste into
platform/windows/wix/OPERATOR-READY.md (runbook + commands + secret
names only). Cross-link from CI-SIGN-NOTARY, VM-C-ONE-PAGER, PACKAGING,
and COMMERCIAL-INSTALLER-BACKLOG. Live enable remains blocked only on
org secret store / clean VM — no secret values invented.
2026-10-14 04:17:07 -04:00
9d17dff73d
docs: commercial MSI/notary dry-run smoke in PACKAGING verification
...
Issue 1 software path is complete in-repo (full MSI StageFull, dual-ship-
smoke, sign/notary dry-runs, fill-manifest, CI unsigned + sign example,
PUBLISH-DIGESTS 0.3.6 TBD). Document the offline dry-run commands under
PACKAGING.md Verification so unit/script smoke is discoverable next to the
day-to-day packaging checks. Live Authenticode/notary/VM C remain external.
2026-10-14 01:57:51 -04:00
3140e6c76f
feat: PUBLISH-DIGESTS.md + commented Authenticode CI paths + EmbedBrandFonts TTF
...
windows-msi / full-msi-unsigned (push) Has been cancelled
windows-msi-sign.yml.example; gofpdf register when EmbedBrandFonts and fonts present.
2026-10-14 01:24:11 -04:00
9f0881ccfc
feat: notary-dry-run.sh for macOS menubar (no submit without NOTARY_SUBMIT=1)
...
windows-msi / full-msi-unsigned (push) Has been cancelled
Prints notarytool recipe with secret env names; links CI and backlog.
2026-10-14 01:08:18 -04:00
6090b41f8f
feat: sign-dry-run.ps1 + CERT LICENSE-FONTS + EmbedBrandFonts default off
...
windows-msi / full-msi-unsigned (push) Has been cancelled
Signtool verify/print sign recipe without secrets; PDF brand embed opt-in only.
2026-10-14 00:55:24 -04:00
86809b27eb
feat: enable-printer-cas.ps1 unlocks deferred printer CAs for VM C
...
windows-msi / full-msi-unsigned (push) Has been cancelled
Toggles Product-Full markers; dual-ship-smoke reports C blocked until enabled.
2026-10-14 00:47:09 -04:00
376bbe188a
feat: dual-ship-smoke.ps1 offline VM A/B/C runner with optional artifact hashes
...
windows-msi / full-msi-unsigned (push) Has been cancelled
Prints checklist steps; -VerifyArtifacts uses fill-manifest-sha256.
2026-10-14 00:39:21 -04:00
da4a0dc4e2
feat: fill-manifest-sha256.ps1 + CERT local font-face first
...
windows-msi / full-msi-unsigned (push) Has been cancelled
Hash helper for DOWNLOADS-MANIFEST; certificate.html prefers fonts/*.woff2 when present.
2026-10-14 00:27:11 -04:00
042342bd69
docs: DOWNLOADS-MANIFEST 0.3.6 TBD + VM-DUAL-SHIP-CHECKLIST + CERT spacing
...
windows-msi / full-msi-unsigned (push) Has been cancelled
Manifest placeholders until signed upload; printable VM A/B/C sheet.
2026-10-14 00:20:58 -04:00
dcee1918dc
docs: thin-NSIS exit checklist + menubar ci-notarize.yml.example
...
windows-msi / full-msi-unsigned (push) Has been cancelled
DUAL-SHIP exit criteria A–E; notary CI sketch with secret names only.
2026-10-14 00:13:54 -04:00
1d6ce81a54
ci: unsigned windows-msi workflow + DUAL-SHIP CI artifact section
...
windows-msi / full-msi-unsigned (push) Has been cancelled
GitHub Actions builds full MSI when WiX present; sign step commented (secret names only).
2026-10-14 00:06:41 -04:00
1e0152c7af
docs: DUAL-SHIP runbook + deferred CA stubs in Product-Full.wxs
...
NSIS+MSI validation matrix; site version 0.3.6 string; no Authenticode claim.
2026-10-13 23:56:39 -04:00
7768562517
feat: P0 build-full-msi.ps1 StageFull candle/light path
...
Product-Full File components; HelperVersion 0.3.6 defaults; no Authenticode claim.
2026-10-13 23:48:59 -04:00
8a8db16da1
feat: TODO-7 A1/A7 — Product-Full.wxs stub, CI-SIGN-NOTARY, CERT spacing + font fetch example
...
Commercial installer and CERT-01 layout next slice; no elevated MSI claim.
2026-10-13 23:38:34 -04:00
46fa1aa0d4
feat: MSI full outline, silent props, HelperVersion NSIS sync, CERT fonts plan
...
TODO-6 L1/I1/L7/I7 — commercial + CERT next-level scaffolds.
2026-10-13 23:23:45 -04:00
f766e537ba
feat: WiX ProductVersion from HelperVersion + build-tray-msi + CERT live QR
...
- build-tray-msi.ps1 candle/light or tip; version from common.ps1
- certificate.html final QR via qrcode CDN when digest present
2026-10-13 23:08:55 -04:00
b72324edc4
feat: commercial installer scaffold — WiX tray MSI skeleton + notarize checklist
...
Non-elevated tray shortcuts wxs; NOTARIZE-CHECKLIST; backlog scaffold section.
2026-10-13 22:25:50 -04:00
14132e1782
feat: CERT Fraunces title fonts and statuslang Label tests
...
- certificate.html Fraunces CDN + print fallbacks
- TestLabel covers all brand chip states
2026-10-13 22:03:30 -04:00
1b357f6e87
docs: COMMERCIAL-INSTALLER-BACKLOG for MSI and notarized macOS
2026-10-13 21:52:19 -04:00
5cfb92c82a
docs+site: CERT-01 web certificate viewer and packaging links
...
- certificate.html brand kit preview with multihash when present
- PACKAGING.md CERT section residual
2026-10-13 21:50:36 -04:00
c2c87274be
docs: PACKAGING.md for tray, menubar, CERT, and statuslang
...
Document HelperVersion packaging paths and evidence rules.
2026-10-13 21:46:33 -04:00
Grok Bot (for George)
e960883a0a
0.3.1: never overwrite outputs (seconds + -N suffix); OpenOnComplete (folder|pdf|none) on Windows+macOS; hold jobs on missing/invalid key (401/403) with one native sign-in prompt and auto-retry; macOS pkg in-installer key flow (mac-key-setup); Windows release installer (no debug naming, errors-only log, options page); VERAE_LOG_LEVEL=debug switch
2026-10-03 19:40:08 -04:00
Grok Bot (for George)
1317bea604
installer API: reference handler (internal/installapi), SMTP mailer with STARTTLS, plain+HTML code template, rate limits; verae-mailtest; user-token.ps1 validates via Go; stricter key masking
2026-10-03 19:20:28 -04:00
Grok Bot (for George)
6e76bc7b0e
windows-debug: elevated GUI installer with Verae key pages (sign in / create account + email code / paste / skip), hidden scripts, per-step finish page, user-scoped key save + helper scheduled task; installer registration API spec
2026-10-03 19:14:49 -04:00
46f2bcd43e
feat(macos): PDF Services stamp helper with dual-channel Verae auth
...
Implements macOS v0: verae-print stamp + install-macos PDF menu items.
Saves {name}.pdf, {name}-verae-timestamp-{RECEIPTID}.pdf, and .verae.json.
Channels: verae (api.veraetime.net JWT) and zapier (zap.verae.ai xVerae- + attachPdf).
2026-10-03 03:56:27 -04:00
e91275a67c
docs: initial spec and implementation plan for PrintToVeraeTimeStamp
2026-10-03 02:59:16 -04:00