Before you install

Desktop / macOS Apple Silicon

OpenMake Desktop 1.7.1

A macOS shell for the OpenMake workspace with a deliberately narrow local-work bridge. It connects to an OpenMake service — it does not bundle the server, the database, or the GPU backend.

Before you install

The build targets macOS on Apple Silicon and is unsigned (ad-hoc), so Gatekeeper quarantines it on first launch and reports it as damaged. It is not damaged; macOS is saying it does not recognise the signer.

Drag OpenMake.app to /Applications first, then clear the quarantine attribute once. After that it opens normally.

shell
xattr -dr com.apple.quarantine /Applications/OpenMake.app
OpenMake Desktop window on macOS showing the chat workspace with the sidebar and composer
The desktop app opens the same workspace in a native window. By default it connects to the hosted service, and the Backend menu can switch it to a local instance.
NextConnect a local folder

Connect a local folder

Choose a folder from the desktop local-work menu. The app shows which folder is connected without sending its full path to the server, and agent tasks can then request work through the bridge — with a composer toggle and a task-list badge marking runs that execute locally.

  • Access is scoped by a fixed RPC allowlist and realpath checks, so symlinks cannot walk out of the folder
  • Clearly dangerous commands are denied immediately
  • Every remaining shell command requires user confirmation that cannot be bypassed
  • sandbox-exec blocks writes outside the connected folder and reads from secret paths
NextVerified updates

Verified updates

The updater accepts only HTTPS or loopback origins, reads a server-side manifest, and verifies the SHA-256 of the download before it replaces the running application.