cli-pulse-helper-releases

Public release artifacts for the CLI Pulse Companion CLI Helper. The macOS Mac App Store app downloads .pkg artifacts from this repo's GitHub Releases when the user clicks "Install Companion CLI" in the Pairing settings.

Contents

Each release tag (v1.16.0, v1.16.1, …) carries:

• cli-pulse-helper-<ver>-<arch>.pkg — Developer ID notarized installer
• cli-pulse-helper-<ver>-<arch>.pkg.sha256 — sha256 of the pkg (also embedded in the manifest)

The latest tag carries:

• latest.json — manifest the MAS app fetches at:

  https://github.com/JasonYeYuhe/cli-pulse-helper-releases/releases/download/latest/latest.json
  

Manifest schema:

{
  "version": "1.16.0",
  "arch": "arm64",
  "url": "https://github.com/JasonYeYuhe/cli-pulse-helper-releases/releases/download/v1.16.0/cli-pulse-helper-1.16.0-arm64.pkg",
  "sha256": "...",
  "size_bytes": 12592561,
  "min_os_version": "13.0",
  "release_notes_url": "https://github.com/JasonYeYuhe/cli-pulse-helper-releases/releases/tag/v1.16.0"
}

Why this lives outside the main app

The Mac App Store sandbox prevents the main CLI Pulse app from spawning unsandboxed children (the claude / codex / gemini CLIs need filesystem and process freedom that App Sandbox doesn't grant). The Companion CLI Helper is a separate Developer ID notarized binary that runs unsandboxed in the user's home folder. Installation is opt-in, one-click from inside the MAS app, no admin password.

Verifying a release manually

shasum -a 256 cli-pulse-helper-<ver>-arm64.pkg
spctl --assess --type install --verbose cli-pulse-helper-<ver>-arm64.pkg
# Expected: accepted, source=Notarized Developer ID

License

The helper source itself is closed. These pre-built artifacts are distributed for installation via the MAS app's auto-installer flow.