Signing & notarization

Official builds (the GitHub Releases DMG and the Homebrew cask) are signed with a Developer ID, notarized by Apple and stapled. They open on first launch with no Gatekeeper warning and no xattr -cr.

Built from source

A ./build.sh build is not notarized. For its first launch: right-click -> Open, or System Settings -> Privacy & Security -> Open Anyway.

Updates

In-app updates are verified (EdDSA signature, Developer ID, notarization) before install. The privileged install step runs a script shipped inside the signed app, which is why the app must sit at the top level of /Applications. Hardened in 5.12.1 after GHSA-jxvp-49pc-jjg9, thanks to Mike Graff.

No helper

There is no helper or LaunchAgent: TokenEater reads the Claude Code token itself through /usr/bin/security. macOS asks once, click Always Allow (see Keychain access).

Coming from v4.x? On first launch the old helper, its plist and keychain-token.json are removed, and your theme, onboarding state, pinned metrics and popover layout carry over into Studio.