The hardcoded SHA1 fingerprint (588E3F1724AE018EBA762E42279DAE85B313E3ED) was
added to fix MAS signing with pnpm, but it doesn't match CI's certificate.
When electron-builder can't find the certificate by hash, it falls back to
ad-hoc signing and incorrectly inherits mac.provisioningProfile instead of
mas.provisioningProfile, causing the build to fail.
Removing the identity field entirely to match main branch behavior:
- electron-builder will auto-discover the correct certificate
- Works in CI where proper certificates are installed
- electron-builder 26.3.6 may have fixed the original pnpm signing issue
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
The @nx packages contain native .node binaries that cause universal
macOS builds to fail. These are build tools that should not be
included in the production bundle.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
electron-builder's auto-discovery works for Developer ID but fails for
"3rd Party Mac Developer Application" when running with pnpm. Adding
the explicit identity bypasses this issue.
The CSC_NAME was accidentally added during pnpm conversion. For MAS builds,
electron-builder should auto-discover the "3rd Party Mac Developer Application"
identity from the keychain, not use "Bitwarden Inc" (which is for Developer ID).
Also updates pnpm-lock.yaml to sync with package.json changes.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
* follow existing popout guard pattern to force popout on firefox when filepicker is exposed
* move firefox guard to tools ownership & revert changes to auth owned file
* removed redundant test case
* implement the self-host subscription changes
* Correct few ui changes
* Update to h1
* PR review changes
* Changes for the async cancel
* Resolve the two bug issues
* implement the review comments
* Resolve the Active issue
* Fix the space issues
* Remove the tabs for billing and payment
* revert the self-host changes
* Fix the subtitle issue
* PM-3287 - Remove resetMasterPassword from authResult and identityTokenResponse and replace with userDecryptionOptions where relevant
* PM-3287 - (1) Move SSO code to SSO section (2) Update error scenario conditional + log user out upon error.
* PM-3287 - Fix comment per PR feedback
* PM-3287 - CLI Login with SSO - move MP validation logic back to original location to avoid putting it before 2FA rejection handling.
* PM-3287 - Update returns
