Use neutral macOS CLI identifier

Author: Pyiner

AGENTS.md

@@ -104,7 +104,7 @@ needs installed-app validation.
 - On macOS, do not treat a matching hash as sufficient after copying a locally
   built `garyx` binary into a launchd-managed path such as
   `/opt/homebrew/bin/garyx`. Clear removable target-file xattrs, ad-hoc re-sign
-  the installed file with the stable identifier `com.bytedance.garyx` (or use
+  the installed file with the stable identifier `com.garyx.cli` (or use
   `bash scripts/codesign-macos-cli.sh <path-to-garyx>`), and verify it executes
   before restarting, otherwise launchd/AMFI may kill it with
   `OS_REASON_CODESIGNING`. `com.apple.provenance` can be inherited or protected

CLAUDE.md

@@ -104,7 +104,7 @@ needs installed-app validation.
 - On macOS, do not treat a matching hash as sufficient after copying a locally
   built `garyx` binary into a launchd-managed path such as
   `/opt/homebrew/bin/garyx`. Clear removable target-file xattrs, ad-hoc re-sign
-  the installed file with the stable identifier `com.bytedance.garyx` (or use
+  the installed file with the stable identifier `com.garyx.cli` (or use
   `bash scripts/codesign-macos-cli.sh <path-to-garyx>`), and verify it executes
   before restarting, otherwise launchd/AMFI may kill it with
   `OS_REASON_CODESIGNING`. `com.apple.provenance` can be inherited or protected

Cargo.lock

@@ -13,7 +13,7 @@ members = [
 resolver = "2"
 
 [workspace.package]
-version = "0.1.20"
+version = "0.1.21"
 edition = "2024"
 license = "MIT"
 repository = "https://github.com/Pyiner/garyx"

Cargo.toml

@@ -97,7 +97,7 @@ const CLAUDE_OAUTH_ENV: &str = "CLAUDE_CODE_OAUTH_TOKEN";
 const CODEX_API_KEY_ENV: &str = "OPENAI_API_KEY";
 const GITHUB_RELEASE_REPO: &str = "Pyiner/garyx";
 #[cfg(any(target_os = "macos", test))]
-const MACOS_CLI_CODESIGN_IDENTIFIER: &str = "com.bytedance.garyx";
+const MACOS_CLI_CODESIGN_IDENTIFIER: &str = "com.garyx.cli";
 const DEFAULT_CHANNEL_AGENT_ID: &str = "claude";
 
 #[derive(Debug, Deserialize)]

garyx/src/commands.rs

@@ -1167,7 +1167,7 @@ fn macos_cli_codesign_args_use_stable_identifier() {
             "--sign",
             "-",
             "--identifier",
-            "com.bytedance.garyx",
+            "com.garyx.cli",
             "/tmp/garyx"
         ]
     );

garyx/src/commands/tests.rs

@@ -131,7 +131,7 @@ verify_checksum() {
 
 codesign_macos_cli() {
   local binary="$1"
-  local identifier="com.bytedance.garyx"
+  local identifier="com.garyx.cli"
 
   if [ "$(uname -s)" != "Darwin" ]; then
     return 0

install.sh

@@ -14,7 +14,7 @@ if [[ $# -ne 1 ]]; then
 fi
 
 binary="$1"
-identifier="com.bytedance.garyx"
+identifier="com.garyx.cli"
 
 if [[ ! -f "$binary" ]]; then
   echo "Error: binary does not exist: $binary" >&2