{ "schema_version": 1, "product": "Clabrate", "generated_at": "2026-08-30T09:07:50Z", "latest": { "version": "0.6.9", "channel": "stable", "platform": "darwin-aarch64", "notes": "- **The overlay can still appear while Secure Keyboard Entry is on.** macOS\n swallows the overlay hotkey (and Escape) while something like 1Password is\n waiting for Touch ID, so the boards used to do nothing — or vanish if they\n were already up. Now a compact banner sits at the top of the screen, names\n the app holding the keyboard, explains that the overlay can't take over, and\n offers a close button (and Reveal, when we know the app) because Escape\n cannot dismiss it. The full boards come back when the hold clears, unless\n you closed the banner first. A 1Password Touch ID sheet is treated the same\n even when macOS never turns on Secure Input (the boards used to stay up\n under it). The banner no longer appears just because Spot is out — that\n path left pads on screen but not clickable until Clabrate was restarted.\n Boards on screen are live (click and type); if we cannot take the screen you\n get the disabled banner, never painted-but-dead pads. The native log records\n `ignoring` / `focusable` / `is_key` / `boards` / `secure_keys` on each overlay\n show, hide, and heal so a miss names the gate, and `toggle cause=… → show|hide`\n so a swallowed ⌘⇧O is distinguishable from a Secure-Input-blind tap. Closing\n the boards while Spot is out now click-throughs immediately, and if AppKit\n moves the overlay after placement the cursor map follows `NSWindow.frame`\n (not a Tauri `Moved` payload that can report 0,0 while the window is still\n constrained — that left pads, the address bar, and terminals painted but\n click-through). Open boards take clicks everywhere, including the gaps\n between pads — window-level click-through was the leftover ambient mode and\n is how chrome went dead. Close the overlay to reach the desktop. If Secure\n Keyboard Entry is on, ⌘⇧O is blind (macOS swallows KeyDown); the compact\n banner still appears via the poller or a live boards collapse, and the\n tray/click path still toggles. A HID tap for that chord was disabling\n every hotkey in `tauri dev`, so it is gone. If macOS disables the session\n tap (callback timeout), it is re-enabled instead of leaving dictation and\n overlay dead until restart. Closing boards that are already down is a\n no-op (hide, never destroy). A first overlay show no longer reloads the\n webview as \"dead\" — that remount was wiping Sticky pads.\n- **Closing the overlay no longer blanks a sticky note.** Hiding the boards\n remounted every pad, and a pad that had not finished loading yet would save its\n still-empty editor over the real note — so notes you had not opened since\n launch came back empty. Pads now keep their contents across a hide and refuse\n to write over a note they never managed to read.\n- **Images you attach now actually reach Codex, Grok, and Agy.** A screenshot\n attached in the HUD — or captured automatically — only ever made it to Claude\n Code. On the other CLIs it was quietly dropped and the model answered as if it\n had been shown nothing. Codex is now handed the file directly, Grok gets it as\n part of the prompt, and Agy is given both the folder and the path. Grok can\n also reach Clabrate's own tools now, so \"show on screen\" works from a Grok\n pane; that part needs grok 1.0.13 or newer.\n- **Reinstalling a CLI extension that failed to load now repairs it.** When an\n installed extension's stored permissions were rejected at startup (grok-cli's\n were), it vanished from the list: Uninstall could not see it, and reinstalling\n left the broken record in place, so the next launch quarantined it all over\n again. A reinstall that verifies now replaces that leftover outright.", "download": { "url": "https://updates.clabrate.com/Clabrate-latest-aarch64.dmg", "versioned_url": "https://updates.clabrate.com/Clabrate_0.6.9_aarch64.dmg", "file_name": "Clabrate_0.6.9_aarch64.dmg", "stable_file_name": "Clabrate-latest-aarch64.dmg", "content_type": "application/x-apple-diskimage", "size_bytes": 27625112, "sha256": "237aa923b2e981527cf334c2db49b389f66148373b3d6b06af8f46252c5fcda1", "sha256_url": "https://updates.clabrate.com/Clabrate_0.6.9_aarch64.dmg.sha256", "stable_sha256_url": "https://updates.clabrate.com/Clabrate-latest-aarch64.dmg.sha256" }, "macos": { "minimum_version": "11.0", "architecture": "Apple silicon", "bundle_id": "com.clabrate.desktop" }, "signing": { "developer_id_signed": true, "apple_notarized": true, "stapled": true, "gatekeeper_assessed": true, "apple_team_id": "26S72F53UH" }, "release_manifest": { "url": "https://updates.clabrate.com/releases.json", "signature_url": "https://updates.clabrate.com/releases.json.sig", "signature_key": "same Ed25519 updater public key pinned in apps/desktop/tauri.conf.json" }, "permissions": [ "Microphone: records your voice while dictating or using voice features.", "Accessibility: types finished text into the app where your cursor is and arranges windows when you ask the assistant to manage them.", "Input Monitoring: detects the hold-to-talk shortcut globally.", "Automation: reads limited front-app context, such as browser URL, only for context-aware dictation features like transforming text for email or chat." ], "network_use": [ "No telemetry.", "Model downloads are fetched from their original providers onto your Mac.", "Cloud enhancement is used only when you add your own provider key and choose it." ], "local_data": [ "Settings, licenses, and downloaded models are stored on the Mac.", "Audio is processed locally unless you explicitly opt into a cloud provider for the feature you are using." ], "links": { "privacy_policy": "https://clabrate.com/privacy/", "terms": "https://clabrate.com/terms/", "third_party_notices": "https://clabrate.com/third-party-notices/" } } }