githubnext/ace2Public

Ace: a collaborative coding environment on the team's own machines

[Meta] Prepare wider desktop distribution

IA

iamnbutler opened ·

Track the remaining work for wider desktop distribution: verifying a published upgrade on another Mac, moving downloads to a custom domain, third-party notices, and completing a source review and secret scan of the repository, which is already public.

Signed canary builds are published through the Sparkle feed described in the [desktop update procedure](https://github.com/githubnext/ace2/blob/main/docs/updates.md). A release can build any clean pushed lane, so a published build contains its pinned source revision; consult its release manifest/workflow and the feed for its version and included changes rather than this issue.

## Release

- [ ] #39 - [ ] #40 - [ ] #41 - [ ] #42

Related release operations work (not a distribution gate): #167 — show release phases and notarization submissions while a build runs.

Migrated from [TODO.md](https://github.com/githubnext/ace2/blob/21ac3df5cf6c963cf20e33b0d470ba45eac40150/TODO.md).

  1. iamnbutlersub-issue-addedlast month on GitHub

  2. iamnbutlerreferenced this in Verify a published desktop upgrade on another Mac #39last month on GitHub

  3. iamnbutlerreferenced this in Move desktop downloads to a custom domain #40last month on GitHub

  4. iamnbutlersub-issue-addedlast month on GitHub

  5. iamnbutlerreferenced this in Add third-party notices to desktop builds #41last month on GitHub

  6. iamnbutlersub-issue-addedlast month on GitHub

  7. iamnbutlersub-issue-addedlast month on GitHub

  8. iamnbutlerreferenced this in Complete the source review and secret scan of the public repository #42last month on GitHub

  9. iamnbutlerreferenced this in [Meta] Dogfood Ace end to end #5last month on GitHub

  10. iamnbutlerreferenced this in Publish a GitHub release with the DMG for each shipped desktop version #197last month on GitHub

  11. IA
    iamnbutler
    Author

    Related release operations work: #197 adds a GitHub release with the signed DMG for every shipped desktop channel/version; R2 remains the Sparkle update host.

  12. iamnbutlerreferenced this in fix(desktop): publish versioned GitHub releases with signed DMGs #198last month on GitHub

  13. iamnbutlerreferenced this in chore(desktop): prepare canary 0.0.18 #199last month on GitHub

  14. iamnbutlerreferenced this in chore(desktop): prepare canary 0.0.21 #212last month on GitHub

  15. IA
    iamnbutler
    Author

    Published [Ace canary 0.0.21](https://github.com/githubnext/ace2/releases/tag/desktop-canary-v0.0.21) from `b35cbbe8d0c3e7ebf9c674e35aa7f5346210bddc` after merging #209, #211, and the version bump #212. Includes the Cmd+Shift+A Agentation shortcut and the four desktop sizing adjustments.

    [Release workflow 37667437911](https://github.com/githubnext/ace2/actions/runs/37667437911) passed type/format/lint checks, signing, both notarizations, artifact upload, GitHub/R2/feed publication, and credential cleanup. The Ace channel downloaded and verified the source revision and manifest checksum. Local Gatekeeper accepted both DMG and contained app as Notarized Developer ID; stapled-ticket checks and deep/strict code signature verification passed, and the contained app reports 0.0.21.

    GitHub's uploaded-asset SHA-256 and a fresh public R2 download both match `b6a235807d9144c2de4071a37018260a8d481e48c0275878d9871910329a4da9`. The public feed exactly matches the signed CI artifact and serves `Cache-Control: no-store`; the versioned DMG serves immutable cache headers. Native source UI behavior was verified before release in #211. This run did not install the canary or perform the separate two-Mac acceptance in #39.