CalnFlow Updates

Snap v0.1.10: Drop PDF (⌘⇧P) packages up to 10 stack snaps into one PDF on the clipboard — native page sizes, no save dialog, stack intact. Sound on press; clipboard ready moments later.

Context transfer beats document management. ⌘⇧D drops images; ⌘⇧P drops a PDF — same mental model, paste anywhere.

Coherent behavior ships before polish. The next twenty real pastes will teach more than another week of PDF settings.

Mac stable releases (SSP v0.1.9, UC Pro v0.0.3, EyeC Pro v0.0.3): setup, permission, and restart flows anchor top-right while the workflow shell stays visible in the center during preflight.

First success means seeing the outcome you came for while blockers get cleared — not pausing the product to configure it.

Keeping the shell visible (`showPreflightShell`) matters more than where the utility panel sits. One shared top-right anchor across the suite compounds.

All three Mac apps now guide you to drag into Applications before first launch, block running directly from the mounted DMG, and include clearer open-anyway help when macOS Gatekeeper needs a nudge.

A clean install path means fewer “it opened but nothing works” support threads — especially on first download.

Distribution polish is part of the product. Small install guards compound into a suite that feels trustworthy on day one.

Upload scripts now refuse to push a Mac build to download hosts until codesign verification passes on the built app bundle.

Download links should never point at a build that failed basic integrity checks — customers should not be the first line of defense.

Automating the gate at upload time is cheaper than discovering a bad build after the CTA is live.

Introduced `prove:dist-signing` — a machine check that every Mac release must pass before it can ship. Verifies the app seal and records whether the build is adhoc or notarized.

Signing is invisible when it works and painful when it does not. A repeatable check keeps all three apps on the same release standard.

One shared prove command beats three slightly different release rituals.

UC Pro Mac builds now receive a consistent adhoc codesign seal during packaging, so fresh downloads open without the “app is damaged” dialog.

Voice capture should start with a hotkey — not with Gatekeeper troubleshooting.

When no Developer ID cert is configured, electron-builder still needs an explicit signing identity. Skipping that step ships a broken first impression.

Repaired the Mac packaging step that left EyeC Pro with an invalid signature. New builds verify cleanly and install like the rest of the suite.

Screen capture only helps if the app actually launches. A bad signature blocks the entire engage flow before the viewport ever appears.

Treat signature verification as a ship blocker, not a post-release surprise — the same check now guards every suite upload.