The hardcoded SHA1 fingerprint (588E3F1724AE018EBA762E42279DAE85B313E3ED) was
added to fix MAS signing with pnpm, but it doesn't match CI's certificate.
When electron-builder can't find the certificate by hash, it falls back to
ad-hoc signing and incorrectly inherits mac.provisioningProfile instead of
mas.provisioningProfile, causing the build to fail.
Removing the identity field entirely to match main branch behavior:
- electron-builder will auto-discover the correct certificate
- Works in CI where proper certificates are installed
- electron-builder 26.3.6 may have fixed the original pnpm signing issue
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
The @nx packages contain native .node binaries that cause universal
macOS builds to fail. These are build tools that should not be
included in the production bundle.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
electron-builder's auto-discovery works for Developer ID but fails for
"3rd Party Mac Developer Application" when running with pnpm. Adding
the explicit identity bypasses this issue.
* follow existing popout guard pattern to force popout on firefox when filepicker is exposed
* move firefox guard to tools ownership & revert changes to auth owned file
* removed redundant test case
* implement the self-host subscription changes
* Correct few ui changes
* Update to h1
* PR review changes
* Changes for the async cancel
* Resolve the two bug issues
* implement the review comments
* Resolve the Active issue
* Fix the space issues
* Remove the tabs for billing and payment
* revert the self-host changes
* Fix the subtitle issue
* PM-3287 - Remove resetMasterPassword from authResult and identityTokenResponse and replace with userDecryptionOptions where relevant
* PM-3287 - (1) Move SSO code to SSO section (2) Update error scenario conditional + log user out upon error.
* PM-3287 - Fix comment per PR feedback
* PM-3287 - CLI Login with SSO - move MP validation logic back to original location to avoid putting it before 2FA rejection handling.
* PM-3287 - Update returns
Added tw-ml-1 class to shared (bwi-collection-shared) and attachment
(bwi-paperclip) icons in report tables to add spacing between the
item name and icons.
Affected reports:
- Weak passwords
- Exposed passwords
- Reused passwords
- Unsecured websites
- Inactive two-factor
- Emergency access view
(PM-29488)
* Disable phishing detection if safari is detected
* Apply suggestion from @claude[bot]
Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>
* Move order of safari vs account checks
---------
Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>
* Fix master key not being set to state after kdf update
* Fix cli build
* Fix test error
* Fix hash purpose
* Add test for master key being set
* Fix incorrect variable name
* [PM-27675] Integrate dialogs into VaultItemTransferService
* [PM-27675] Update tests for new dialogs
* [PM-27675] Center dialogs and prevent closing with escape or pointer events
* [PM-27675] Add transferInProgress$ observable to VaultItemsTransferService
* [PM-27675] Hook vault item transfer service into browser vault component
* [PM-27675] Move defaultUserCollection$ to collection service
* [PM-27675] Cleanup dialog styles
* [PM-27675] Introduce readySubject to popup vault component to keep prevent flashing content while item transfer is in progress
* [PM-27675] Fix vault-v2 tests
* Desktop Autotype toggle on vault lock/unlock
* lint
* add back disable on will-quit signal
* improve IPC message args
* claude: takeUntilDestroyed
* claude: try/catch
* claude: multiple listeners
* claude: ===
* claude: concatMap
* claude: IPC Handler Registration in Constructor
* claude: helper function
* claude: Type Safety for IPC Messages
* fix claude suggestion?
* bit by commit hook file write again
* remove the type qualifier
* add log svc dep
* move the initialized ipcs back to constructor
* frageele?
* try disable premium check
* replace takeUntilDestroy with takeUntil(destroy)
* add import
* create separate observable for premium check
* clean up and remove distinctUntilChanged
* re-add distinctUntilChanged
* ipc handlers in init
* check double initialization
* Revert "check double initialization"
This reverts commit 8488b8a613.
* Revert "ipc handlers in init"
This reverts commit a23999edcf.
* ipc out of constructor
* claude suggestion does not compile, awesome
* add a dispose method for cleanup of ipc handlers
* claude: remove of(false) on observable initializing
* claude: remove the init/init'd
* claude: remove takeUntil on isPremiumAccount
* Revert "claude: remove takeUntil on isPremiumAccount"
This reverts commit 9fc32c5fcf.
* align models file name with interface name
* rename ipc listeners function
* improve debug log message
* improve debug log message
* remove reference to not present observable in unit test
* add function comment
* make `autotypeKeyboardShortcut` private
* [PM-28181] Open send dialog in drawer instead of popup in refreshed UI
* Fix types
* [PM-28181] Use drawer to edit sends with refreshed UI
* [PM-28181] Address bug where multiple Sends could not be navigated between
pnpm runs the postinstall script for apps/desktop, the electron-rebuild
binary isn't in PATH. The binary is at root node_modules/.bin/, but the
script runs from apps/desktop/.
