@openclaw/facetime 0.0.0 → 2026.9.6

package/scripts/inject-helper.sh

@@ -0,0 +1,219 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+staged_macabi="${HOME}/Library/Containers/com.apple.FaceTime/Data/tmp/FaceTimeHelper.dylib"
+target_app="${FACETIME_HELPER_APP:-FaceTime}"
+repo_root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+
+if [[ "${1:-}" == "--app" ]]; then
+  target_app="${2:-}"
+  shift 2
+fi
+if [[ $# -gt 0 ]]; then
+  echo "Usage: $0 [--app FaceTime|Phone]" >&2
+  exit 2
+fi
+
+case "${target_app}" in
+  FaceTime)
+    target_bundle="com.apple.FaceTime"
+    target_executable="/System/Applications/FaceTime.app/Contents/MacOS/FaceTime"
+    ;;
+  Phone)
+    target_bundle="com.apple.mobilephone"
+    target_executable="/System/Applications/Phone.app/Contents/MacOS/Phone"
+    ;;
+  *)
+    echo "Unsupported helper app: ${target_app}. Use FaceTime or Phone." >&2
+    exit 1
+    ;;
+esac
+
+sip_debugging=unknown
+if sip_status="$(/usr/bin/csrutil status 2>/dev/null)"; then
+  if printf '%s\n' "$sip_status" | grep -Eq \
+    '^[[:space:]]*(System Integrity Protection status|Debugging Restrictions):[[:space:]]*disabled\.?[[:space:]]*$'; then
+    sip_debugging=disabled
+  elif printf '%s\n' "$sip_status" | grep -Eq \
+    '^[[:space:]]*(System Integrity Protection status|Debugging Restrictions):[[:space:]]*enabled\.?[[:space:]]*$'; then
+    sip_debugging=enabled
+  fi
+fi
+
+if [[ "$sip_debugging" == unknown ]]; then
+  cat >&2 <<'EOF'
+Could not verify SIP debugging restrictions. Helper injection was not attempted.
+
+Run this in Terminal and inspect the result before changing security policy:
+
+  /usr/bin/csrutil status
+
+Rerun setup after resolving the status check. SIP status alone does not verify
+Developer Tools authorization or a responding FaceTime helper.
+EOF
+  exit 1
+fi
+
+if [[ "$sip_debugging" == enabled ]]; then
+  cat >&2 <<'EOF'
+System Integrity Protection debugging restrictions are enabled.
+
+This helper uses LLDB to load into Apple's protected FaceTime and Phone apps.
+Apple's SIP runtime protections reject that attach even for root. Disable SIP
+debugging restrictions from macOS Recovery, reboot, and rerun facetime.setup
+before injecting:
+
+  csrutil enable --without debug
+
+This preserves the other SIP protections, but allowing debugger attachment
+still reduces macOS security. This plugin never changes SIP itself.
+
+EOF
+  exit 1
+fi
+
+if ! DevToolsSecurity -status 2>/dev/null | grep -q "enabled"; then
+  cat >&2 <<'EOF'
+Developer Tools mode is disabled.
+
+Run this once in an interactive Terminal, then rerun this script:
+
+  sudo /usr/sbin/DevToolsSecurity -enable
+
+EOF
+  exit 1
+fi
+
+dylib="${staged_macabi}"
+
+if [[ -z "${dylib}" || ! -f "${dylib}" ]]; then
+  cat >&2 <<EOF
+FaceTimeHelper.dylib was not found under:
+
+  ${staged_macabi}
+
+Install and stage the signed native helper first:
+
+  brew install openclaw/tap/openclaw-facetime
+
+EOF
+  exit 1
+fi
+
+target_tmp="${HOME}/Library/Containers/${target_bundle}/Data/tmp"
+mkdir -p "${target_tmp}"
+unique_dylib="${target_tmp}/FaceTimeHelper-$(date +%Y%m%d%H%M%S)-$$.dylib"
+cp "${dylib}" "${unique_dylib}"
+dylib="${unique_dylib}"
+ipc_key_file="${HOME}/Library/Application Support/OpenClaw/FaceTime/helper-ipc-key"
+auth_sidecar="${dylib}.auth"
+lldb_pid=""
+watchdog_pid=""
+lldb_log="$(mktemp "${TMPDIR:-/tmp}/openclaw-facetime-lldb.XXXXXX")"
+cleanup_attach() {
+  if [[ -n "${watchdog_pid}" ]] && kill -0 "${watchdog_pid}" 2>/dev/null; then
+    kill "${watchdog_pid}" 2>/dev/null || true
+  fi
+  if [[ -n "${lldb_pid}" ]] && kill -0 "${lldb_pid}" 2>/dev/null; then
+    kill "${lldb_pid}" 2>/dev/null || true
+  fi
+  if [[ -e "${auth_sidecar}" ]]; then
+    # Objective-C +load finishes synchronously inside this dlopen. Reinjection
+    # always uses a new uniquely named dylib and sidecar, so this path is never
+    # reused after LLDB detaches and retaining the credential only adds risk.
+    # Unlink the directory entry without reopening it. The injected target can
+    # write this container and must not be able to redirect cleanup via symlink.
+    /usr/bin/python3 -c \
+      'import os, sys; p=sys.argv[1]; os.unlink(p) if os.path.lexists(p) else None' \
+      "${auth_sidecar}" >/dev/null 2>&1 || true
+  fi
+  if [[ -e "${lldb_log}" ]]; then
+    /usr/bin/python3 -c \
+      'import os, sys; p=sys.argv[1]; os.unlink(p) if os.path.lexists(p) else None' \
+      "${lldb_log}" >/dev/null 2>&1 || true
+  fi
+}
+trap cleanup_attach EXIT HUP INT TERM
+
+"${repo_root}/scripts/ensure-helper-ipc-key.sh" >/dev/null
+ipc_key="$(tr -d '[:space:]' < "${ipc_key_file}")"
+if [[ ! "${ipc_key}" =~ ^[0-9a-f]{64}$ ]]; then
+  echo "FaceTime helper authentication key is malformed." >&2
+  exit 1
+fi
+umask 077
+printf '%s\n' "${ipc_key}" | /usr/bin/python3 -c '
+import os
+import sys
+
+path = sys.argv[1]
+flags = os.O_WRONLY | os.O_CREAT | os.O_EXCL
+if hasattr(os, "O_NOFOLLOW"):
+    flags |= os.O_NOFOLLOW
+descriptor = os.open(path, flags, 0o600)
+try:
+    with os.fdopen(descriptor, "wb", closefd=False) as handle:
+        handle.write(sys.stdin.buffer.read())
+        handle.flush()
+        os.fsync(descriptor)
+finally:
+    os.close(descriptor)
+' "${auth_sidecar}"
+
+target_pid="${FACETIME_HELPER_PID:-}"
+target_name="${target_app} app"
+
+if [[ -z "${target_pid}" ]]; then
+  target_pid="$(pgrep -f "${target_executable}" | head -1 || true)"
+fi
+
+if [[ -z "${target_pid}" ]]; then
+  open -gj -a "${target_app}"
+  sleep 2
+  target_pid="$(pgrep -f "${target_executable}" | head -1 || true)"
+fi
+
+if [[ -z "${target_pid}" && "${target_app}" == "FaceTime" ]]; then
+  target_name="FaceTime conversation service"
+  target_pid="$(pgrep -f '/com.apple.FaceTime.FTConversationService' | head -1 || true)"
+fi
+
+if [[ -z "${target_pid}" ]]; then
+  echo "${target_app} is not running. Open ${target_app}, then rerun this script." >&2
+  exit 1
+fi
+
+echo "Injecting ${dylib}"
+echo "Target ${target_name} PID: ${target_pid}"
+
+lldb -p "${target_pid}" \
+  -o "expr -- (int)({ void *h = (void *)dlopen(\"${dylib}\", 2); int *ready = h ? (int *)(void *)dlsym(h, \"OpenClawFaceTimeHelperInitialized\") : 0; ready && *ready == 1; })" \
+  -o detach \
+  -o quit >"${lldb_log}" 2>&1 &
+lldb_pid=$!
+(
+  sleep "${FACETIME_HELPER_ATTACH_TIMEOUT_SECONDS:-90}"
+  if kill -0 "${lldb_pid}" 2>/dev/null; then
+    echo "LLDB attach to ${target_app} timed out" >&2
+    kill "${lldb_pid}" 2>/dev/null || true
+  fi
+) &
+watchdog_pid=$!
+
+set +e
+wait "${lldb_pid}"
+lldb_status=$?
+set -e
+lldb_pid=""
+kill "${watchdog_pid}" 2>/dev/null || true
+wait "${watchdog_pid}" 2>/dev/null || true
+watchdog_pid=""
+if [[ "${lldb_status}" -ne 0 ]]; then
+  /bin/cat "${lldb_log}" >&2
+  exit "${lldb_status}"
+fi
+if ! /usr/bin/grep -Eq '^\(int\) \$[0-9]+ = 1$' "${lldb_log}"; then
+  /bin/cat "${lldb_log}" >&2
+  echo "LLDB did not confirm that FaceTimeHelper.dylib initialized" >&2
+  exit 1
+fi

package/scripts/install-driver-root.sh

@@ -0,0 +1,181 @@
+#!/bin/sh
+set -eu
+umask 077
+
+version="0.7.1"
+archive_sha256="e9de179da54ed55ff27876990f3a2dcfefa66e6bd6cfcba448a8564eabdf3e89"
+factory_uuid="A11C0A17-6F8E-4D72-9AF4-0A1D10B21D6E"
+blackhole_factory_uuid="e395c745-4eea-4d94-bb92-46224221047c"
+plugin_type_uuid="443ABAB8-E7B3-491A-B985-BEB9187030DB"
+recipe="facetime-paired-v2"
+bundle_id="ai.openclaw.BlackHoleBridge"
+installed_driver="/Library/Audio/Plug-Ins/HAL/OpenClawBridge.driver"
+driver_parent="/Library/Audio/Plug-Ins/HAL"
+xcode_app="/Applications/Xcode.app"
+xcode_developer="$xcode_app/Contents/Developer"
+xcodebuild="$xcode_developer/usr/bin/xcodebuild"
+toolchain="$xcode_developer/Toolchains/XcodeDefault.xctoolchain/usr/bin"
+clang="$toolchain/clang"
+clangxx="$toolchain/clang++"
+libtool="$toolchain/libtool"
+script_dir=$(CDPATH='' cd -- "$(/usr/bin/dirname -- "$0")" && pwd)
+trust_verifier="$script_dir/verify-xcode-trust.sh"
+transaction="$script_dir/commit-driver-transaction.sh"
+stage=""
+work_dir=""
+
+remove_tree() {
+  target=$1
+  if test -x /usr/bin/trash; then
+    /usr/bin/trash "$target"
+  else
+    /usr/bin/python3 -I -c 'import os, shutil, sys; p=sys.argv[1]; shutil.rmtree(p) if os.path.isdir(p) and not os.path.islink(p) else (os.unlink(p) if os.path.lexists(p) else None)' "$target"
+  fi
+}
+
+cleanup() {
+  if test -n "$stage" && test -e "$stage"; then
+    remove_tree "$stage" >/dev/null 2>&1 || true
+  fi
+  if test -n "$work_dir" && test -e "$work_dir"; then
+    remove_tree "$work_dir" >/dev/null 2>&1 || true
+  fi
+}
+trap cleanup EXIT
+
+restart_core_audio() {
+  for pid in $(/usr/bin/pgrep -x coreaudiod || true); do
+    /bin/kill -9 "$pid"
+  done
+}
+
+verify_driver() {
+  driver=$1
+  test -d "$driver"
+  test ! -L "$driver"
+  if /usr/bin/find "$driver" ! -type d ! -type f -print -quit | /usr/bin/grep -q .; then
+    echo "OpenClaw paired audio driver contains a non-file entry." >&2
+    exit 1
+  fi
+  if /usr/bin/find "$driver" ! -user root -print -quit | /usr/bin/grep -q .; then
+    echo "OpenClaw paired audio driver is not owned by root." >&2
+    exit 1
+  fi
+  if /usr/bin/find "$driver" \( -perm -020 -o -perm -002 \) -print -quit | /usr/bin/grep -q .; then
+    echo "OpenClaw paired audio driver is group/world writable." >&2
+    exit 1
+  fi
+  plist="$driver/Contents/Info.plist"
+  test "$(/usr/libexec/PlistBuddy -c 'Print :CFBundleIdentifier' "$plist")" = "$bundle_id"
+  test "$(/usr/libexec/PlistBuddy -c 'Print :CFBundleExecutable' "$plist")" = "BlackHole"
+  test "$(/usr/libexec/PlistBuddy -c 'Print :OpenClawDriverRecipe' "$plist")" = "$recipe"
+  test "$(/usr/libexec/PlistBuddy -c 'Print :OpenClawBlackHoleVersion' "$plist")" = "$version"
+  /usr/bin/codesign --verify --strict "$driver"
+  /usr/bin/codesign -dv --verbose=4 "$driver" 2>&1 | /usr/bin/grep -q '^Signature=adhoc$'
+}
+
+build_and_install() {
+  canonical_xcode=$(/usr/bin/python3 -I -c 'import os; print(os.path.realpath("/Applications/Xcode.app"))')
+  if test "$canonical_xcode" != "$xcode_app"; then
+    echo "Trusted Xcode must be installed directly at /Applications/Xcode.app, not through a symlink." >&2
+    exit 1
+  fi
+
+  work_dir=$(/usr/bin/mktemp -d /private/tmp/openclaw-driver-build.XXXXXX)
+  /bin/chmod 700 "$work_dir"
+  archive="$work_dir/BlackHole.tar.gz"
+  source_dir="$work_dir/BlackHole-$version"
+  build_dir="$work_dir/build"
+  driver="$build_dir/BlackHole.driver"
+  /bin/mkdir -m 700 "$work_dir/home" "$work_dir/tmp"
+
+  /usr/bin/curl -q -fsSL \
+    "https://github.com/ExistentialAudio/BlackHole/archive/refs/tags/v$version.tar.gz" \
+    -o "$archive"
+  printf '%s  %s\n' "$archive_sha256" "$archive" | /usr/bin/shasum -a 256 -c -
+  /usr/bin/tar -xzf "$archive" -C "$work_dir"
+
+  plist="$source_dir/BlackHole/BlackHole.plist"
+  /usr/libexec/PlistBuddy -c "Delete :CFPlugInFactories:$blackhole_factory_uuid" "$plist"
+  /usr/libexec/PlistBuddy -c "Add :CFPlugInFactories:$factory_uuid string BlackHole_Create" "$plist"
+  /usr/libexec/PlistBuddy -c "Set :CFPlugInTypes:$plugin_type_uuid:0 $factory_uuid" "$plist"
+
+  # The verified, non-writable Xcode bundle is the trust envelope for every
+  # internal build subprocess. Explicit tool settings pin the compiler and link drivers.
+  "$trust_verifier" "$xcode_app"
+  # shellcheck disable=SC2016
+  /usr/bin/env -i \
+    HOME="$work_dir/home" \
+    TMPDIR="$work_dir/tmp" \
+    PATH="/usr/bin:/bin:/usr/sbin:/sbin" \
+    DEVELOPER_DIR="$xcode_developer" \
+    "$xcodebuild" \
+    -quiet \
+    -project "$source_dir/BlackHole.xcodeproj" \
+    -scheme BlackHole \
+    -configuration Release \
+    -derivedDataPath "$work_dir/DerivedData" \
+    CODE_SIGNING_ALLOWED=NO \
+    CONFIGURATION_BUILD_DIR="$build_dir" \
+    PRODUCT_BUNDLE_IDENTIFIER="$bundle_id" \
+    CC="$clang" \
+    CPLUSPLUS="$clangxx" \
+    LD="$clang" \
+    LDPLUSPLUS="$clangxx" \
+    LIBTOOL="$libtool" \
+    'GCC_PREPROCESSOR_DEFINITIONS=$GCC_PREPROCESSOR_DEFINITIONS kNumber_Of_Channels=2 kPlugIn_BundleID=\"ai.openclaw.BlackHoleBridge\" kDriver_Name=\"OpenClawBridge\" kHas_Driver_Name_Format=false kDevice_Name=\"OpenClaw-Mic\" kDevice2_Name=\"OpenClaw-Feed\" kDevice_IsHidden=false kDevice2_IsHidden=false kDevice_HasInput=true kDevice_HasOutput=false kDevice2_HasInput=false kDevice2_HasOutput=true'
+
+  /usr/bin/codesign --force --deep --sign - "$driver"
+  /usr/libexec/PlistBuddy -c "Add :OpenClawDriverRecipe string $recipe" \
+    "$driver/Contents/Info.plist"
+  /usr/libexec/PlistBuddy -c "Add :OpenClawBlackHoleVersion string $version" \
+    "$driver/Contents/Info.plist"
+  /usr/bin/codesign --force --deep --sign - "$driver"
+  /usr/sbin/chown -R root:wheel "$driver"
+  /bin/chmod -R go-w "$driver"
+  verify_driver "$driver"
+
+  /bin/mkdir -p "$driver_parent"
+  stage="$driver_parent/.OpenClawBridge.driver.stage.$$"
+  /usr/bin/ditto "$driver" "$stage"
+  /usr/sbin/chown -R root:wheel "$stage"
+  /bin/chmod -R go-w "$stage"
+  verify_driver "$stage"
+  /bin/sh "$transaction" "$stage" "$installed_driver" /usr/bin/codesign
+  stage=""
+  restart_core_audio
+}
+
+case "${1:-}" in
+  --install)
+    if test "$#" -ne 1; then
+      echo "Usage: $0 --install | --uninstall" >&2
+      exit 2
+    fi
+    ;;
+  --uninstall)
+    if test "$#" -ne 1; then
+      echo "Usage: $0 --install | --uninstall" >&2
+      exit 2
+    fi
+    ;;
+  *)
+    echo "Usage: $0 --install | --uninstall" >&2
+    exit 2
+    ;;
+esac
+
+if test "$(/usr/bin/id -u)" -ne 0; then
+  echo "FaceTime driver installation requires administrator privileges." >&2
+  exit 1
+fi
+
+if test "$1" = "--uninstall"; then
+  if test -e "$installed_driver"; then
+    /bin/rm -rf "$installed_driver"
+    restart_core_audio
+  fi
+  exit 0
+fi
+
+build_and_install

package/scripts/install-driver.applescript

@@ -0,0 +1,29 @@
+on run argv
+	if (count of argv) is not 4 then error "Expected the packaged installer, trust verifier, transaction, and mode"
+	set sourceInstaller to item 1 of argv
+	set sourceVerifier to item 2 of argv
+	set sourceTransaction to item 3 of argv
+	set installMode to item 4 of argv
+	if installMode is not "--install" and installMode is not "--uninstall" then error "Expected --install or --uninstall"
+	set expectedInstallerDigest to "6c5955700f1067c5240ad15471d80b9ac25f54547aa7288922439f1eac04d1bb"
+	set expectedVerifierDigest to "4f402898b1b9c8b230bef1c6c26675a26981d2bbccb8ebe25cf2bb3095470eb3"
+	set expectedTransactionDigest to "ddc19e86c01e66a25672a3494a47e24b2ee6c0609dc4d78e37d492522b7609b3"
+	set protectedCommand to "set -eu; umask 077; " & ¬
+		"work=$(/usr/bin/mktemp -d /private/tmp/openclaw-driver-install.XXXXXX); " & ¬
+		"cleanup() { if test -x /usr/bin/trash; then /usr/bin/trash \"$work\"; else /usr/bin/python3 -I -c 'import os, shutil, sys; p=sys.argv[1]; shutil.rmtree(p) if os.path.isdir(p) and not os.path.islink(p) else (os.unlink(p) if os.path.lexists(p) else None)' \"$work\"; fi; }; " & ¬
+		"trap cleanup EXIT; /bin/chmod 700 \"$work\"; " & ¬
+		"/usr/bin/ditto " & quoted form of sourceInstaller & " \"$work/install-driver-root.sh\"; " & ¬
+		"/usr/bin/ditto " & quoted form of sourceVerifier & " \"$work/verify-xcode-trust.sh\"; " & ¬
+		"/usr/bin/ditto " & quoted form of sourceTransaction & " \"$work/commit-driver-transaction.sh\"; " & ¬
+		"/usr/sbin/chown root:wheel \"$work/install-driver-root.sh\" \"$work/verify-xcode-trust.sh\" \"$work/commit-driver-transaction.sh\"; " & ¬
+		"actual=$(/usr/bin/shasum -a 256 \"$work/install-driver-root.sh\" | /usr/bin/awk '{print $1}'); " & ¬
+		"test \"$actual\" = " & quoted form of expectedInstallerDigest & "; " & ¬
+		"verifier_actual=$(/usr/bin/shasum -a 256 \"$work/verify-xcode-trust.sh\" | /usr/bin/awk '{print $1}'); " & ¬
+		"test \"$verifier_actual\" = " & quoted form of expectedVerifierDigest & "; " & ¬
+		"transaction_actual=$(/usr/bin/shasum -a 256 \"$work/commit-driver-transaction.sh\" | /usr/bin/awk '{print $1}'); " & ¬
+		"test \"$transaction_actual\" = " & quoted form of expectedTransactionDigest & "; " & ¬
+		"/bin/chmod 500 \"$work/install-driver-root.sh\" \"$work/verify-xcode-trust.sh\" \"$work/commit-driver-transaction.sh\"; " & ¬
+		"\"$work/install-driver-root.sh\" " & quoted form of installMode
+	set installCommand to "/usr/bin/env -i HOME=/var/root LOGNAME=root USER=root TMPDIR=/private/tmp PATH=/usr/bin:/bin:/usr/sbin:/sbin /bin/sh -c " & quoted form of protectedCommand
+	do shell script installCommand with administrator privileges
+end run

package/scripts/install-driver.sh

@@ -0,0 +1,75 @@
+#!/bin/sh
+set -eu
+
+here=$(CDPATH='' cd -- "$(dirname -- "$0")/.." && pwd)
+installed_driver="/Library/Audio/Plug-Ins/HAL/OpenClawBridge.driver"
+recipe="facetime-paired-v2"
+version="0.7.1"
+
+driver_status_at() {
+  target_driver=$1
+  if ! test -d "$target_driver"; then
+    printf 'missing\n'
+    return
+  fi
+  bundle_id=$(/usr/libexec/PlistBuddy -c 'Print :CFBundleIdentifier' \
+    "$target_driver/Contents/Info.plist" 2>/dev/null || true)
+  installed_recipe=$(/usr/libexec/PlistBuddy -c 'Print :OpenClawDriverRecipe' \
+    "$target_driver/Contents/Info.plist" 2>/dev/null || true)
+  installed_version=$(/usr/libexec/PlistBuddy -c 'Print :OpenClawBlackHoleVersion' \
+    "$target_driver/Contents/Info.plist" 2>/dev/null || true)
+  if test "$bundle_id" != "ai.openclaw.BlackHoleBridge" ||
+     test "$installed_recipe" != "$recipe" ||
+     test "$installed_version" != "$version"; then
+    printf 'outdated\n'
+    return
+  fi
+  if ! /usr/bin/codesign --verify --strict "$target_driver" >/dev/null 2>&1; then
+    printf 'invalid\n'
+    return
+  fi
+  printf 'current\n'
+}
+
+driver_status() {
+  driver_status_at "$installed_driver"
+}
+
+case "${1:-}" in
+  --status)
+    driver_status
+    exit 0
+    ;;
+  --uninstall)
+    /usr/bin/osascript "$here/scripts/install-driver.applescript" \
+      "$here/scripts/install-driver-root.sh" \
+      "$here/scripts/verify-xcode-trust.sh" \
+      "$here/scripts/commit-driver-transaction.sh" --uninstall
+    /bin/sh "$here/scripts/remove-user-artifacts.sh" "${HOME}" "${TMPDIR:-/tmp}"
+    printf 'Removed FaceTime audio and helper artifacts. Quit and reopen FaceTime and Phone before re-enabling the plugin.\n'
+    exit 0
+    ;;
+  ""|--ensure)
+    ;;
+  *)
+    echo "Usage: $0 [--status|--ensure|--uninstall]" >&2
+    exit 2
+    ;;
+esac
+
+if test "$(driver_status)" = "current"; then
+  printf 'OpenClaw-Mic and OpenClaw-Feed are already current.\n'
+  exit 0
+fi
+
+/usr/bin/osascript "$here/scripts/install-driver.applescript" \
+  "$here/scripts/install-driver-root.sh" \
+  "$here/scripts/verify-xcode-trust.sh" \
+  "$here/scripts/commit-driver-transaction.sh" \
+  --install
+if test "$(driver_status)" != "current"; then
+  echo "OpenClaw paired audio driver installation did not verify successfully." >&2
+  exit 1
+fi
+
+printf 'Installed OpenClaw-Mic and OpenClaw-Feed. Reconnect any active FaceTime call.\n'

package/scripts/remove-user-artifacts.sh

@@ -0,0 +1,21 @@
+#!/bin/sh
+set -eu
+
+if test "$#" -ne 2 || test -z "$1" || test "$1" = / || test -z "$2" || test "$2" = /; then
+  echo "Usage: $0 <user-home> <temporary-root>" >&2
+  exit 2
+fi
+
+user_home=$1
+temporary_root=$2
+/bin/rm -rf "$user_home/Library/Caches/OpenClaw/FaceTime/driver/OpenClawBridge.driver"
+/bin/rm -f \
+  "$user_home/Library/Application Support/OpenClaw/FaceTime/helper-ipc-key" \
+  "$user_home/Library/Application Support/OpenClaw/FaceTime/helper-build.sha256"
+for container in com.apple.FaceTime com.apple.mobilephone; do
+  staged="$user_home/Library/Containers/$container/Data/tmp"
+  if test -d "$staged"; then
+    /usr/bin/find "$staged" -maxdepth 1 -type f -name 'FaceTimeHelper*.dylib' -delete
+  fi
+done
+/bin/rm -rf "$temporary_root/openclaw-facetime-macabi"

package/scripts/stage-helper.sh

@@ -0,0 +1,56 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+repo_root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+staged_dir="${HOME}/Library/Containers/com.apple.FaceTime/Data/tmp"
+staged_dylib="${staged_dir}/FaceTimeHelper.dylib"
+auth_dir="${HOME}/Library/Application Support/OpenClaw/FaceTime"
+build_stamp_file="${auth_dir}/helper-build.sha256"
+native_dirs=(
+  "/opt/homebrew/opt/openclaw-facetime/libexec"
+  "/usr/local/opt/openclaw-facetime/libexec"
+)
+
+if [[ $# -gt 0 && "${1}" != "--if-needed" ]]; then
+  echo "Usage: $0 [--if-needed]" >&2
+  exit 2
+fi
+
+installed_dir=""
+for native_dir in "${native_dirs[@]}"; do
+  if [[ -f "${native_dir}/FaceTimeHelper.dylib" &&
+        -f "${native_dir}/FaceTimeHelper.build-id" &&
+        -f "${native_dir}/native-protocol.env" ]]; then
+    installed_dir="${native_dir}"
+    break
+  fi
+done
+if [[ -z "${installed_dir}" ]]; then
+  echo "FaceTime native helpers are missing. Install them with: brew install openclaw/tap/openclaw-facetime" >&2
+  exit 1
+fi
+
+source_dylib="${installed_dir}/FaceTimeHelper.dylib"
+source_hash="$(tr -d '[:space:]' < "${installed_dir}/FaceTimeHelper.build-id")"
+protocol="$(tr -d '[:space:]' < "${installed_dir}/native-protocol.env")"
+if [[ ! "${source_hash}" =~ ^[0-9a-f]{64}$ ]] ||
+   [[ "${protocol}" != "NATIVE_PROTOCOL_VERSION=1" ]] ||
+   ! "${repo_root}/scripts/verify-native-helper.sh" "${source_dylib}" >/dev/null 2>&1 ||
+   ! /usr/bin/strings "${source_dylib}" | /usr/bin/grep -Fx "${source_hash}" >/dev/null; then
+  echo "Installed FaceTime native helpers failed compatibility or signature validation. Reinstall openclaw/tap/openclaw-facetime." >&2
+  exit 1
+fi
+
+mkdir -p "${staged_dir}" "${auth_dir}"
+"${repo_root}/scripts/ensure-helper-ipc-key.sh" >/dev/null
+if [[ "${1:-}" == "--if-needed" && -f "${staged_dylib}" && -f "${build_stamp_file}" &&
+      "$(tr -d '[:space:]' < "${build_stamp_file}")" == "${source_hash}" ]] &&
+   "${repo_root}/scripts/verify-native-helper.sh" "${staged_dylib}" >/dev/null 2>&1; then
+  echo "${staged_dylib}"
+  exit 0
+fi
+
+/usr/bin/ditto "${source_dylib}" "${staged_dylib}"
+"${repo_root}/scripts/verify-native-helper.sh" "${staged_dylib}"
+printf '%s\n' "${source_hash}" > "${build_stamp_file}"
+echo "${staged_dylib}"

package/scripts/verify-native-helper.sh

@@ -0,0 +1,29 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+expected_team_id="FWJYW4S8P8"
+expected_authority="Developer ID Application: OpenClaw Foundation (${expected_team_id})"
+
+if [[ $# -ne 1 ]]; then
+  echo "Usage: $0 <FaceTimeHelper.dylib>" >&2
+  exit 2
+fi
+
+helper_path=$1
+if [[ -L "${helper_path}" || ! -f "${helper_path}" ]]; then
+  echo "FaceTime helper must be a regular non-symlink file: ${helper_path}" >&2
+  exit 1
+fi
+
+developer_id_requirement="anchor apple generic and certificate leaf[field.1.2.840.113635.100.6.1.13] exists and certificate leaf[subject.OU] = \"${expected_team_id}\" and certificate leaf[subject.CN] = \"${expected_authority}\""
+if ! /usr/bin/codesign --verify --strict \
+  --test-requirement="=${developer_id_requirement}" "${helper_path}"; then
+  echo "FaceTime helper is not signed by ${expected_authority}" >&2
+  exit 1
+fi
+
+if ! /usr/bin/codesign --verify --strict --check-notarization \
+  -R=notarized "${helper_path}"; then
+  echo "FaceTime helper does not have an accepted Apple notarization ticket" >&2
+  exit 1
+fi