v3.9.6

[3.9.6] - 2026-07-19

Highlights

• Peekaboo 3.9.6 completes the signing migration: the app, CLI, nested helpers, zip payload, and DMG now use the OpenClaw Foundation Developer ID. macOS treats the changed CLI signer as a new TCC identity, so re-grant Screen Recording, Accessibility, and any Automation access you use after updating.

Changed

• Sign and notarize every shipped macOS code object with Developer ID Application: OpenClaw Foundation (FWJYW4S8P8) while preserving bundle identifiers and the existing Sparkle EdDSA update key; 3.8+ bridge hosts continue accepting transition-era personal-team clients, while the 3.9.6 CLI requires a 3.8+ host.

Fixed

• Reopen permission onboarding once for users whose required grants are missing after the signing migration, with direct guidance to re-grant Screen Recording, Accessibility, and Automation access.

Distribution

• npm: @steipete/peekaboo@3.9.6
• Registry tarball: peekaboo-3.9.6.tgz
• npm integrity: sha512-aG2SxlkNVtIgkWNt5SZ5HYT9U1ukO0FfS3u4EcgHmZwLOXYQs1VA8qVJpDXGzfZgKnWhlMyj1RbriCPxGsjkIw==
• Published: 2026-07-19T09:53:08.229Z

Verification

• Built from b1c0ebcb7a111aa4af13600db3af14dc8095db80; macOS CI passed.
• The standalone CLI, npm binary, app bundle and all seven nested Mach-O payloads, zip payload, and DMG verify as Developer ID Application: OpenClaw Foundation (FWJYW4S8P8) and pass strict notarization checks.
• Apple accepted CLI submission 1eb7cfc5-e7fe-4d95-9c27-4b4a12498a9a, app submission 0188aa8b-f610-4ea9-83d7-1cf3a3c1bdf2, and DMG submission 6547dfd1-5c3c-46d7-88bf-1ea7a9e63f85; app and DMG tickets are stapled and validate successfully.
• The 3.9.6 Sparkle enclosure signature and byte length validate with the same public key and bundle identifier shipped in 3.9.5.