From 49578eea9c616e9405128f9cf849e1db258c4da3 Mon Sep 17 00:00:00 2001 From: Lex Date: Wed, 26 Aug 2026 09:51:26 +0800 Subject: [PATCH 1/3] chore: record delivery binding for ad-hoc-sign --- .specgit.yaml | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/.specgit.yaml b/.specgit.yaml index 1a76cc0ea..be5d5d7db 100644 --- a/.specgit.yaml +++ b/.specgit.yaml @@ -1,9 +1,7 @@ version: 1 -delivery: upgrade-mcp-client +delivery: ad-hoc-sign context: kind: branch - branch: refactor/447-upgrade-mcp-client + branch: fix/454-ad-hoc-sign issues: - - 447 - - 448 -pr: 449 + - 454 From 63521c1121364aaef9b75b7b99033d866f645e0d Mon Sep 17 00:00:00 2001 From: Lex Date: Wed, 26 Aug 2026 09:51:49 +0800 Subject: [PATCH 2/3] chore: record delivery binding for ad-hoc-sign --- .specgit.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/.specgit.yaml b/.specgit.yaml index be5d5d7db..fb943af14 100644 --- a/.specgit.yaml +++ b/.specgit.yaml @@ -5,3 +5,4 @@ context: branch: fix/454-ad-hoc-sign issues: - 454 +pr: 455 From e463690e71030e935700d26894d355ecb0a98d8f Mon Sep 17 00:00:00 2001 From: Lex Date: Wed, 26 Aug 2026 10:28:43 +0800 Subject: [PATCH 3/3] fix(build): ad-hoc sign darwin binaries before smoke test --- packages/opencode/script/build.ts | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/packages/opencode/script/build.ts b/packages/opencode/script/build.ts index 8b2e9cf02..e26402584 100755 --- a/packages/opencode/script/build.ts +++ b/packages/opencode/script/build.ts @@ -209,6 +209,11 @@ for (const item of targets) { }, }) + // macOS kills freshly compiled unsigned darwin binaries (SIGKILL 137) before they can run + if (process.platform === "darwin" && item.os === "darwin" && fs.existsSync("/usr/bin/codesign")) { + await $`codesign --force --sign - dist/${name}/bin/opencode` + } + // Smoke test: only run if binary is for current platform if (item.os === process.platform && item.arch === process.arch && !item.abi) { const binaryPath = `dist/${name}/bin/opencode`