SignDMG codesigns the DMG and verifies it (package/macos.py sign_dmg).

SignFile signs a file with the given key, returning the base64 signature and the file length (the appcast needs both).

SignModule returns the platform sign module name (cli/build.py _get_sign_module).

=== Sparkle ===

Status checks the /status endpoint (REST, not MCP).

StopAllWatchProcessesInDir is StopAllWatchProcesses with an explicit state directory for tests.

UnlockKeychain unlocks the login keychain for non-interactive sessions (macos.py unlock_keychain). Failures only warn.

UploadReleaseArtifacts uploads dist artifacts + release.json (upload.py upload_release_artifacts).

Return True iff `detail` is `{actual_value, expected_value}` with both strings and a non-empty `expected_value` that is contained in `actual_value

Fire-and-forget; we don't wait on the worker to confirm cancellation.

Merges a returned ToolResult into this response during incremental tool migration.

* Lifts a freshly built ACP session into the adapter's full-permission * mode (ACP `session/set_mode`) — the equivalent of `claude * --dangerously-s

* Lifts approve-all sessions into the adapter's full-permission mode via * ACP `session/set_mode` — otherwise the adapter inherits the user's own *

asymmetricInfoPlistArchs returns the archs of a fat file whose slices disagree on an embedded Info.plist (macos.py find_asymmetric_info_plist_archs).

* Attach to an existing turn. Resumes by replaying buffered frames * with seq > `lastSeq`, then tails new ones. Returns null if the * turn is un

Backup providers to BrowserOS prefs (write-only, best-effort)

blobSHA1 hashes content the way git names blobs (SHA-1 object format; SHA-256 repos are out of scope — Chromium uses SHA-1).

Prevents multi-step suites from overwriting a single shared JUnit report path.

Builds a compact browser-tool result after running BrowserSession post-actions.