feat: Claude Code Monitor — lanes, pipelines and a merged workspace

Internal SmartGift build of a Claude Code monitoring dashboard. Lanes: a durable unit of parallel agent work, one per working directory, tracked across session restarts. Managed lanes are git worktrees the dashboard provisions and can reset or remove behind a three-check destroy guard and a counted preflight; adopted lanes are directories you already own and are never destroyable. Pipelines: a lane moves through pipeline stages. A stage the agent declares with evidence renders green; a stage inferred from the tool-event stream renders dashed amber and never counts as done. Detection is forward-only within a 30-minute window, and never writes the declared stage. Workspace: one page at /run with a lane grid, the selected lane's pipeline, and a full Claude console behind a disclosure.
2026-07-29 17:07:45 +07:00
commit 57dc91585d
783 changed files with 221743 additions and 0 deletions
@@ -0,0 +1,48 @@
+/**
+ * @file electron-builder afterSign hook for Apple notarization.
+ *
+ * This is opt-in: it only does anything when all three Apple credentials
+ * are present as environment variables. In every other case (local builds,
+ * fork CI without secrets) the hook is a no-op. That keeps the default
+ * `npm run dmg` working for contributors without an Apple Developer
+ * account while letting the project maintainer flip a switch later.
+ * @author Nguyễn Ngọc Trí Vĩ <vinnt@smartgift.vn>
+ */
+
+exports.default = async function notarizeIfConfigured(context) {
+  const { electronPlatformName, appOutDir, packager } = context;
+  if (electronPlatformName !== "darwin") return;
+
+  const { APPLE_ID, APPLE_TEAM_ID, APPLE_APP_SPECIFIC_PASSWORD } = process.env;
+  if (!APPLE_ID || !APPLE_TEAM_ID || !APPLE_APP_SPECIFIC_PASSWORD) {
+    console.log("[notarize] Apple credentials not set — skipping notarization (ad-hoc only).");
+    return;
+  }
+
+  // Lazy-require: @electron/notarize is only needed when we actually notarize,
+  // so contributors without Apple credentials don't have to install it.
+  let notarize;
+  try {
+    ({ notarize } = require("@electron/notarize"));
+  } catch {
+    console.log(
+      "[notarize] Apple credentials present but @electron/notarize is not installed. Run `npm install --save-dev @electron/notarize` in desktop/."
+    );
+    return;
+  }
+
+  const appName = packager.appInfo.productFilename;
+  const appPath = `${appOutDir}/${appName}.app`;
+  console.log(`[notarize] notarizing ${appPath}`);
+
+  await notarize({
+    tool: "notarytool",
+    appBundleId: packager.appInfo.id,
+    appPath,
+    appleId: APPLE_ID,
+    appleIdPassword: APPLE_APP_SPECIFIC_PASSWORD,
+    teamId: APPLE_TEAM_ID,
+  });
+
+  console.log("[notarize] done");
+};