Integrate the native Gate desktop app with stabilized Hellas and macOS CI - #584
Merged
Merged
Conversation
Snapshot of uncommitted work that had been sitting in the working tree since
2026-09-02. Committed as-is on 2026-09-08 to get it into git rather than to
present a finished change -- rewrite or split it freely.
Three things are tangled together here because that is how they were found:
- src-tauri/: a Tauri desktop app (15 files) including the Apple App Attest
implementation, src-tauri/src/apple_app_attest.m and apple.rs. This is the
receiving end of the split; the hellas repo still carries the matching
deletion of crates/attestation/src/apple_app_attest.m and apple_macos.rs
as its own uncommitted change, so that side is not yet committed either.
- ui/ and macos/: the app's frontend and platform scaffolding.
- A large restructure: 386 deletions, mostly crates/chat-ui and the GitHub
workflow definitions. Intent not recorded anywhere; preserved verbatim.
Why this was committed now: the work existed only as untracked files on a
filesystem exported read-write to the whole LAN, in the directory adjacent to
/mnt/Home/src/hellas, which was emptied on 2026-09-05 by something still
unidentified. Untracked files have no git objects to recover from. Copies also
exist on the MacBook Air and at
/mnt/Home/Backups/gate-tauri-rescue/gate-untracked-20260908-1834.tgz.
georgewhewell
enabled auto-merge (squash)
September 16, 2026 19:35
georgewhewell
added a commit
to hellas-ai/hellas
that referenced
this pull request
Sep 16, 2026
The old `macos/package.sh` still packages `hellas-cli` as an attested `Hellas.app`, even though native App Attest enrollment and proof production moved to Gate in e32d23a. Remove that unused packaging script and its `Info.plist`. Point the attestation operating guide to Gate's existing signing instructions with a commit permalink, since the desktop integration is still under review in hellas-ai/gate#584. Hellas retains its portable Apple verifier and requester support; Gate owns the signed app and DeviceCheck producer. Validation: `git diff --check`; confirmed no remaining tracked references to the deleted packaging paths, legacy app output, or legacy bundle identifier; verified the linked Gate signing guide exists. No runtime code changes.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Gate hosts the Hellas SDK in a native Tauri desktop app, replacing the obsolete daemon/web/WASM workspace. The app includes local provider/gateway controls, execution history, a same-user control socket, and the separately provisioned Apple App Attest bridge.
Build and CI
b4cdcd450d555f73fc8b3dd9d1af371917ff3a7cand align Rust to 1.96.1. This includes the executor filesystem lock/deadlock fixes and the Iroh graceful request-close fix; the existing lockfile and SDK interfaces remain compatible.CIcheck. PR builds use no Apple secrets and publish no artifacts.Validation
actionlint, scriptshellcheck, shell syntax, and matching/mismatching release-tag checks: passed during desktop integration.af10a8d: Linux checks, native ARM64 macOS app build and bundle/signature validation, and the aggregate requiredCIcheck.proteccruleset requires the GitHub ActionsCIcheck; existing PR restrictions and admin bypass remain intact. Apple Developer ID and notarization credentials are validated when the first version tag is released.