docs(macos): sandboxed vs non-sandboxed builds and the minimum macOS version
Maintainers usually reply within 1 day
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 1-2 days
- Newbie friendliness
- 43/100
Research direction
Read docs/macos-signing.md, the README and contributor docs, then check the Xcode project’s Release.entitlements and MACOSX_DEPLOYMENT_TARGET settings. Determine how the sandboxed and signed builds differ and check the plugins’ macOS requirements. Done means the unsigned build behavior and limitations are documented or its sandbox choice is resolved, and the documented minimum macOS version matches the supported configuration.
Written by the indexing model from the issue text.
Description
Problem
The shipped macOS app is one of two different programs depending on CI secrets:
- Signed builds use
ReleaseSigned.entitlements: no App Sandbox, hardened runtime. - Without
MACOS_*secrets (forks, localflutter build macos) the Xcode project'sRelease.entitlementsapplies: App Sandbox on, onlynetwork.client/serverandfiles.user-selected.read-write.
In the sandboxed build ~/.querya, extension processes (sandbox-exec inside a sandbox), in-place updates into /Applications, the MCP socket and previously chosen SQLite file paths (no security-scoped bookmarks) do not behave like the signed build. docs/macos-signing.md mentions it; README and the contributor docs do not.
Also MACOSX_DEPLOYMENT_TARGET = 10.15 in all configurations while the docs target macOS 14+ for ProMotion; the minimum is not checked against the plugins' requirements.
Tasks
- Decide: ship the unsigned build without the sandbox too, or document the limitations in README / CONTRIBUTING.
- Align and document the minimum macOS version.
- Dominant language
- Dart
- Stars
- 23
- Forks
- 1
- Avg merge
- 49m
- Merged PRs (30d)
- 496
Getting set up
Starts the project's dev container in your browser, under your own GitHub account.
- No Dockerfile or Docker Compose file
- Has a pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from QueryaHub/Querya-Desktop
-
bug P3 ux
Difficulty 2/5 1-3 hours Newbie friendliness 79/100
QueryaHub/Querya-Desktop#1837 ·
Maintainers usually reply within 1 day
-
enhancement P3
Difficulty 4/5 3-5 days Newbie friendliness 50/100
QueryaHub/Querya-Desktop#1838 ·
Maintainers usually reply within 1 day
-
enhancement
Difficulty 5/5 Over a week Newbie friendliness 45/100
QueryaHub/Querya-Desktop#1690 ·
Maintainers usually reply within 1 day
-
enhancement
Difficulty 4/5 1-2 days Newbie friendliness 55/100
QueryaHub/Querya-Desktop#1683 ·
Maintainers usually reply within 1 day
-
enhancement
Difficulty 5/5 Over a week Newbie friendliness 20/100
QueryaHub/Querya-Desktop#1625 · 2 comments ·
Maintainers usually reply within 1 day
All issues in QueryaHub/Querya-Desktop
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
-
Docs: correct the unbuilt "full re-verify" claim and three untrue sync commentsPossibly taken @ibanner56 claimed this today. Openarea: sync priority: low severity: trivial type: docs
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
ibanner56/CallersCompendium#1942 ·
Maintainers usually reply within 1 day
-
[Bug]: 编辑器替换栏关闭按钮错位Openbug
Difficulty 2/5 1-3 hours Newbie friendliness 64/100
appshubcc/Bettbox#584 · 1 comment ·
Maintainers usually reply within 1 day
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
transistorsoft/flutter_background_geolocation#1724 · 1 comment ·
-
bug UI: Fluent
Difficulty 2/5 1-3 hours Newbie friendliness 67/100
Notsfsssf/pixez-flutter#1430 ·
Maintainers usually reply within 1 day