Memex v0.1.2 - signed and notarized macOS DMG

macOS distribution fix

This patch release replaces the v0.1.1 macOS distribution path with a properly signed and notarized Apple Silicon DMG.

There are no user-facing feature changes from v0.1.1. The app version was bumped so the public release history remains immutable and users can distinguish the signed/notarized build from the earlier unsigned artifact.

Fixed

• Builds the macOS DMG with the GUI feature enabled and WebKit Inspector disabled.
• Signs the app with Developer ID Application credentials.
• Notarizes and staples the final DMG.
• Verifies the uploaded DMG with codesign, spctl, and stapler.
• Hardens the release workflow by pinning GitHub Actions to commit SHAs, disabling checkout credential persistence, avoiding workflow-dispatch shell injection, requiring an existing tag, and refusing to overwrite existing release assets.

Verification

• GitHub Actions release workflow: https://github.com/Two-Weeks-Team/memex/actions/runs/26633383174
• Uploaded asset digest: sha256:d6d69df15005d963ad9e1831768d1899e456f52b0cf23e21e576cfb58d66f57d
• codesign --verify --verbose=2 Memex_0.1.2_aarch64.dmg
• spctl --assess --type open --context context:primary-signature --verbose=4 Memex_0.1.2_aarch64.dmg
• xcrun stapler validate Memex_0.1.2_aarch64.dmg

Upgrade note

Use this release instead of v0.1.1 on macOS. The v0.1.1 release originally shipped with an unsigned/unnotarized DMG.

Memex v0.1.1 - superseded by v0.1.2

Superseded by v0.1.2

This release is kept for historical reference. The original macOS Apple Silicon DMG for v0.1.1 was published without Developer ID signing and notarization, which can trigger Gatekeeper warnings such as "Memex.app is damaged and can't be opened."

Use v0.1.2 or newer for the signed and notarized macOS DMG.

The dependency and toolchain changes originally described in this release are included in later releases.

Memex v0.1.0 — AI session history as navigable spatial memory

Memex turns your AI session history (~/.claude/projects + ~/.codex/sessions) into a navigable spatial memory — seven surfaces, zero chat windows, no LLM in the runtime loop. Built for Qdrant Vector Space Day 2026 under the "Think Outside the Bot" prompt.

⬇️ Download (macOS, Apple Silicon)

Asset	Platform	Size
Memex_0.1.0_aarch64.dmg	macOS 12+ · Apple Silicon (arm64)	~16 MB

sha256: 3408f62250bc052b13b9583ca126d4dd057a59141f68407037f8047c81206a68

⚠️ First launch (Gatekeeper)

This is an unsigned MVP — the app is ad-hoc signed only, with no Apple notarization. macOS Gatekeeper will refuse a normal double-click on first run. To open it:

1. Open the .dmg and drag Memex.app to /Applications.
2. Right-click (or Control-click) → Open the app, then confirm Open in the dialog. (A plain double-click will be blocked — you must use right-click → Open the first time.)
3. Alternatively, clear the quarantine flag from a terminal:

   xattr -dr com.apple.quarantine /Applications/Memex.app

You only need to do this once. Memex makes zero network calls after launch — every embedding and similarity query runs locally in Rust + Qdrant.

Prerequisite — Qdrant on localhost:6334

Memex talks to a local Qdrant (gRPC 6334). It self-heals if you start Qdrant after Memex.

mkdir -p .qdrant && curl -sL https://github.com/qdrant/qdrant/releases/download/v1.18.0/qdrant-aarch64-apple-darwin.tar.gz | tar xz -C .qdrant
./.qdrant/qdrant   # leave running; REST :6333 / gRPC :6334

Then index your sessions once with the bundled CLI (same binary as the GUI):

/Applications/Memex.app/Contents/MacOS/memex scan --index

✨ What ships

• 🪟 Time Machine layered 3D card stack on boot (browse, no query)
• 🌌 Topology galaxy — 3D force-directed graph, cluster auto-labels + gap insights (Distance Matrix API)
• 🧪 Mix & Match recommendation (Discovery API, positives/negatives)
• 🔔 Proactive recall banner — 12 s poll over ~/.claude/projects (error named-vector + payload filter)
• 🔮 Predict next-action — neighbor-vector pivot walk + tool-call aggregation
• ⏯ Replay engine — turn-by-turn Bash / Edit-diff / Read / Task playback at 1×–8×
• 🔍 Lens slider — weighted multi-named-vector search
• 📦 Snapshot export/import via Qdrant HTTP API

🔧 Build from source

git clone https://github.com/Two-Weeks-Team/memex && cd memex
npm install
npm run tauri:dist   # → src-tauri/target/release/bundle/dmg/Memex_0.1.0_aarch64.dmg (devtools OFF)

tauri:dist passes --no-default-features, which drops the devtools feature so the shipped build has no WebKit Inspector.

Known limitations (MVP)

• macOS Apple Silicon only — no Linux / Windows / Intel build yet.
• Unsigned (ad-hoc) — see Gatekeeper note above.
• Requires a local Qdrant instance; not bundled.
• Code signing / notarization deferred to post-MVP.

---

Verified: npm run tauri:dist green · cargo test 228 passed / 0 failed (run serially).