Commit graph PrintToVeraeTimeStamp/docs
Author SHA1 Message Date
78cc3a40ec fix(macos-pkg): product ID, Verae branding, license Agree in installer
The product .pkg was a bare component wrapper with no Installer.app UI.

- Distribution.xml.in: title Verae Print Stamp, org ai.verae, product id
- resources: welcome/license/readme/conclusion HTML + plum brand backgrounds
- license.html requires Agree/Disagree before install continues
- readme.html product identification table (bundle/pkg IDs, version, publisher)
- App bundle: AppIcon.icns, VeraeProductID/VeraeBrand keys, PRODUCT.txt sidecar
- build-pkg.sh uses productbuild --distribution --resources
- SKIP_SIGN=1 for local UI smoke; smoke-installer-ui.sh (15 checks)

Verify: SKIP_SIGN=1 ./platform/macos/pkg/build-pkg.sh
        ./platform/macos/pkg/smoke-installer-ui.sh
2026-10-14 05:25:28 -04:00
41e079a0ad docs: PR body for windows-debug (MSI/CERT/statuslang)
Summarize MSI dual-ship, CERT-01, and statuslang work for the
windows-debug PR. Links OPERATOR-READY and DUAL-SHIP as canonical
operator paths; external sign/notary/VM legs stay org-blocked.
2026-10-14 04:33:41 -04:00
d822137bbb fix: align deb/site to HelperVersion 0.3.6 (version audit)
todo-list-3 version-audit: fix stale 0.3.4 defaults in build-deb.sh and
printit index deb blurb; document audit in PACKAGING; smoke asserts deb
fallback. CDN last-published 0.3.2/0.1.2 checksums left intentional.
2026-10-14 04:33:32 -04:00
778763737e docs: OPERATOR-READY package for MSI/notary external legs
Some checks failed
windows-msi / full-msi-unsigned (push) Has been cancelled
Consolidate Authenticode, Apple notary, VM C, and digest-paste into
platform/windows/wix/OPERATOR-READY.md (runbook + commands + secret
names only). Cross-link from CI-SIGN-NOTARY, VM-C-ONE-PAGER, PACKAGING,
and COMMERCIAL-INSTALLER-BACKLOG. Live enable remains blocked only on
org secret store / clean VM — no secret values invented.
2026-10-14 04:17:07 -04:00
9d17dff73d docs: commercial MSI/notary dry-run smoke in PACKAGING verification
Issue 1 software path is complete in-repo (full MSI StageFull, dual-ship-
smoke, sign/notary dry-runs, fill-manifest, CI unsigned + sign example,
PUBLISH-DIGESTS 0.3.6 TBD). Document the offline dry-run commands under
PACKAGING.md Verification so unit/script smoke is discoverable next to the
day-to-day packaging checks. Live Authenticode/notary/VM C remain external.
2026-10-14 01:57:51 -04:00
3140e6c76f feat: PUBLISH-DIGESTS.md + commented Authenticode CI paths + EmbedBrandFonts TTF
Some checks failed
windows-msi / full-msi-unsigned (push) Has been cancelled
windows-msi-sign.yml.example; gofpdf register when EmbedBrandFonts and fonts present.
2026-10-14 01:24:11 -04:00
9f0881ccfc feat: notary-dry-run.sh for macOS menubar (no submit without NOTARY_SUBMIT=1)
Some checks failed
windows-msi / full-msi-unsigned (push) Has been cancelled
Prints notarytool recipe with secret env names; links CI and backlog.
2026-10-14 01:08:18 -04:00
6090b41f8f feat: sign-dry-run.ps1 + CERT LICENSE-FONTS + EmbedBrandFonts default off
Some checks failed
windows-msi / full-msi-unsigned (push) Has been cancelled
Signtool verify/print sign recipe without secrets; PDF brand embed opt-in only.
2026-10-14 00:55:24 -04:00
86809b27eb feat: enable-printer-cas.ps1 unlocks deferred printer CAs for VM C
Some checks failed
windows-msi / full-msi-unsigned (push) Has been cancelled
Toggles Product-Full markers; dual-ship-smoke reports C blocked until enabled.
2026-10-14 00:47:09 -04:00
376bbe188a feat: dual-ship-smoke.ps1 offline VM A/B/C runner with optional artifact hashes
Some checks failed
windows-msi / full-msi-unsigned (push) Has been cancelled
Prints checklist steps; -VerifyArtifacts uses fill-manifest-sha256.
2026-10-14 00:39:21 -04:00
da4a0dc4e2 feat: fill-manifest-sha256.ps1 + CERT local font-face first
Some checks failed
windows-msi / full-msi-unsigned (push) Has been cancelled
Hash helper for DOWNLOADS-MANIFEST; certificate.html prefers fonts/*.woff2 when present.
2026-10-14 00:27:11 -04:00
042342bd69 docs: DOWNLOADS-MANIFEST 0.3.6 TBD + VM-DUAL-SHIP-CHECKLIST + CERT spacing
Some checks failed
windows-msi / full-msi-unsigned (push) Has been cancelled
Manifest placeholders until signed upload; printable VM A/B/C sheet.
2026-10-14 00:20:58 -04:00
dcee1918dc docs: thin-NSIS exit checklist + menubar ci-notarize.yml.example
Some checks failed
windows-msi / full-msi-unsigned (push) Has been cancelled
DUAL-SHIP exit criteria A–E; notary CI sketch with secret names only.
2026-10-14 00:13:54 -04:00
1d6ce81a54 ci: unsigned windows-msi workflow + DUAL-SHIP CI artifact section
Some checks failed
windows-msi / full-msi-unsigned (push) Has been cancelled
GitHub Actions builds full MSI when WiX present; sign step commented (secret names only).
2026-10-14 00:06:41 -04:00
1e0152c7af docs: DUAL-SHIP runbook + deferred CA stubs in Product-Full.wxs
NSIS+MSI validation matrix; site version 0.3.6 string; no Authenticode claim.
2026-10-13 23:56:39 -04:00
7768562517 feat: P0 build-full-msi.ps1 StageFull candle/light path
Product-Full File components; HelperVersion 0.3.6 defaults; no Authenticode claim.
2026-10-13 23:48:59 -04:00
8a8db16da1 feat: TODO-7 A1/A7 — Product-Full.wxs stub, CI-SIGN-NOTARY, CERT spacing + font fetch example
Commercial installer and CERT-01 layout next slice; no elevated MSI claim.
2026-10-13 23:38:34 -04:00
46fa1aa0d4 feat: MSI full outline, silent props, HelperVersion NSIS sync, CERT fonts plan
TODO-6 L1/I1/L7/I7 — commercial + CERT next-level scaffolds.
2026-10-13 23:23:45 -04:00
f766e537ba feat: WiX ProductVersion from HelperVersion + build-tray-msi + CERT live QR
- build-tray-msi.ps1 candle/light or tip; version from common.ps1
- certificate.html final QR via qrcode CDN when digest present
2026-10-13 23:08:55 -04:00
b72324edc4 feat: commercial installer scaffold — WiX tray MSI skeleton + notarize checklist
Non-elevated tray shortcuts wxs; NOTARIZE-CHECKLIST; backlog scaffold section.
2026-10-13 22:25:50 -04:00
14132e1782 feat: CERT Fraunces title fonts and statuslang Label tests
- certificate.html Fraunces CDN + print fallbacks
- TestLabel covers all brand chip states
2026-10-13 22:03:30 -04:00
1b357f6e87 docs: COMMERCIAL-INSTALLER-BACKLOG for MSI and notarized macOS 2026-10-13 21:52:19 -04:00
5cfb92c82a docs+site: CERT-01 web certificate viewer and packaging links
- certificate.html brand kit preview with multihash when present
- PACKAGING.md CERT section residual
2026-10-13 21:50:36 -04:00
c2c87274be docs: PACKAGING.md for tray, menubar, CERT, and statuslang
Document HelperVersion packaging paths and evidence rules.
2026-10-13 21:46:33 -04:00
Grok Bot (for George)
e960883a0a 0.3.1: never overwrite outputs (seconds + -N suffix); OpenOnComplete (folder|pdf|none) on Windows+macOS; hold jobs on missing/invalid key (401/403) with one native sign-in prompt and auto-retry; macOS pkg in-installer key flow (mac-key-setup); Windows release installer (no debug naming, errors-only log, options page); VERAE_LOG_LEVEL=debug switch 2026-10-03 19:40:08 -04:00
Grok Bot (for George)
1317bea604 installer API: reference handler (internal/installapi), SMTP mailer with STARTTLS, plain+HTML code template, rate limits; verae-mailtest; user-token.ps1 validates via Go; stricter key masking 2026-10-03 19:20:28 -04:00
Grok Bot (for George)
6e76bc7b0e windows-debug: elevated GUI installer with Verae key pages (sign in / create account + email code / paste / skip), hidden scripts, per-step finish page, user-scoped key save + helper scheduled task; installer registration API spec 2026-10-03 19:14:49 -04:00
46f2bcd43e feat(macos): PDF Services stamp helper with dual-channel Verae auth
Implements macOS v0: verae-print stamp + install-macos PDF menu items.
Saves {name}.pdf, {name}-verae-timestamp-{RECEIPTID}.pdf, and .verae.json.
Channels: verae (api.veraetime.net JWT) and zapier (zap.verae.ai xVerae- + attachPdf).
2026-10-03 03:56:27 -04:00
e91275a67c docs: initial spec and implementation plan for PrintToVeraeTimeStamp 2026-10-03 02:59:16 -04:00