OpenMake

Desktop / macOS Apple Silicon

OpenMake Desktop 1.6.0

A macOS shell for the OpenMake workspace with a deliberately scoped local-work bridge. It connects to an OpenMake service; it does not bundle the server backend.

Download for macOSRead releases

Before you install

The build targets macOS on Apple Silicon and is unsigned (ad-hoc). Gatekeeper can quarantine it.

xattr -dr com.apple.quarantine /Applications/OpenMake.app

Connect a local folder

Choose a folder from the Desktop local-work menu. The app shows the connected folder locally without sending its full path to the server. Agent tasks can then request work through the bridge.

  • Access is scoped with a fixed RPC allowlist and realpath checks
  • Clearly dangerous commands are denied immediately
  • Every remaining shell command requires non-bypassable user confirmation

Verified updates

The updater accepts HTTPS or loopback origins, reads a server manifest, and verifies SHA-256 before replacement. Sandbox protection limits writes outside the connected folder and reads from secret paths.