ci(mac): enable code signing + notarization; docs: add README and LICENSE

- Wire Developer ID signing and notarization into the mac build. When
  the CSC_LINK / APPLE_* secrets are present the workflow signs and
  notarizes; when absent it falls back to unsigned builds so forks
  keep working.
- Set mac.notarize: true in electron-builder config so @electron/
  notarize runs automatically with the env vars the workflow now
  provides.
- Add README crediting Farza/Clicky as the original inspiration and
  MIT LICENSE.
- Remove the original-source-code/clicky submodule reference.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: pango07

.github/workflows/build.yml

@@ -50,14 +50,24 @@ jobs:
         # Only auto-publish to GitHub Releases on tag pushes; otherwise
         # build the artifact and stop so PR / branch runs don't try to
         # upload to a non-existent draft release.
+        #
+        # Signing + notarization: if the CSC_LINK secret is set on the
+        # mac runner, electron-builder will sign with that cert and
+        # @electron/notarize will notarize using APPLE_ID / APPLE_APP_
+        # SPECIFIC_PASSWORD / APPLE_TEAM_ID. If the secret is absent the
+        # build falls back to the old unsigned behavior so forks and PRs
+        # without secrets still build.
         run: bunx electron-builder --${{ matrix.platform }} --publish ${{ startsWith(github.ref, 'refs/tags/v') && 'always' || 'never' }}
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          # Skip macOS code signing in CI. CSC_LINK="" (empty but defined)
-          # confuses electron-builder into treating cwd as a cert file.
-          # When real signing secrets are added later, swap this for
-          # conditional CSC_LINK/CSC_KEY_PASSWORD/APPLE_* env vars.
-          CSC_IDENTITY_AUTO_DISCOVERY: 'false'
+          CSC_LINK: ${{ matrix.platform == 'mac' && secrets.CSC_LINK || '' }}
+          CSC_KEY_PASSWORD: ${{ matrix.platform == 'mac' && secrets.CSC_KEY_PASSWORD || '' }}
+          APPLE_ID: ${{ matrix.platform == 'mac' && secrets.APPLE_ID || '' }}
+          APPLE_APP_SPECIFIC_PASSWORD: ${{ matrix.platform == 'mac' && secrets.APPLE_APP_SPECIFIC_PASSWORD || '' }}
+          APPLE_TEAM_ID: ${{ matrix.platform == 'mac' && secrets.APPLE_TEAM_ID || '' }}
+          # When no signing cert is available, disable auto-discovery so
+          # electron-builder doesn't try to match an ad-hoc identity.
+          CSC_IDENTITY_AUTO_DISCOVERY: ${{ matrix.platform == 'mac' && secrets.CSC_LINK != '' && 'true' || 'false' }}
 
       - name: Upload artifacts
         if: success()

LICENSE

@@ -0,0 +1,25 @@
+MIT License
+
+Copyright (c) 2026 Julio Vaught and Flicky contributors
+
+Flicky is an independent implementation inspired by Clicky
+(https://github.com/farzaa/clicky) by Farza. No source code from Clicky
+is included or redistributed in this repository.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

README.md

@@ -0,0 +1,67 @@
+# Flicky
+
+A voice-driven, screen-aware AI companion that lives in the corner of your screen. Hold a hotkey, talk to it, and a little blue cursor flies across your display to point at whatever it's referring to.
+
+> **Inspired by [Clicky](https://www.clicky.so/)** by [Farza](https://github.com/farzaa) ([github.com/farzaa/clicky](https://github.com/farzaa/clicky)).
+> Clicky is the original idea — a macOS-only Swift app. Flicky is an independent reimagining built from scratch in Electron so the same experience can run on **Windows, macOS, and Linux**. All credit for the original concept, the pointing-cursor interaction, and the "vibe" goes to Farza. If you're on a Mac, go check out the original — it's great.
+
+---
+
+## What Flicky adds on top of the original idea
+
+- **Cross-platform** — Windows, macOS, and Linux from a single Electron codebase.
+- **A second reasoning provider** — pick between **Anthropic Claude** (Opus / Sonnet 4.6) and **OpenAI** (GPT-5, GPT-5 mini, GPT-4o) on the fly.
+- **More ElevenLabs voices** — full voice catalog, plus per-voice speed and stability sliders.
+- **Local chat history** — every conversation is stored on your machine, browsable from the panel, never uploaded.
+- **Long-running context management** — auto-compacts older messages into a summary near a configurable token budget so a single conversation can run forever without blowing up the context window.
+- **Customizable push-to-talk shortcut** — capture any key combination from the UI; the global shortcut re-registers live.
+- **Three transcription options** — Groq Whisper Large v3 / v3 Turbo with one-click switching.
+- **Multiple reasoning depths** — off / low / medium / high "extended thinking" toggle.
+- **Multi-display aware overlay** — the blue cursor follows your real mouse across monitors.
+- **Provider key management** — separate, encrypted local storage for each provider's API key with one-click validation.
+
+The core loop — hold the hotkey, ask anything, see the blue cursor point — is faithful to Farza's original.
+
+---
+
+## Running locally
+
+Requires [Bun](https://bun.sh) (or npm) and Node 20+.
+
+```bash
+bun install
+bun run dev
+```
+
+That starts the TypeScript watcher for the main process and Vite for the renderer. Launch the Electron app from a separate terminal once the dev servers are up:
+
+```bash
+bun run start
+```
+
+## Building installers
+
+```bash
+bun run package          # current platform
+bun run package:win      # Windows .exe (NSIS)
+bun run package:mac      # macOS .dmg + .zip (universal)
+bun run package:linux    # AppImage + .deb
+```
+
+Releases are also produced automatically by GitHub Actions on every `v*` tag — see [`.github/workflows/build.yml`](.github/workflows/build.yml).
+
+## Configuration
+
+You'll need API keys for the providers you want to use:
+
+- **Anthropic** or **OpenAI** — reasoning
+- **ElevenLabs** — text-to-speech
+- **Groq** — speech-to-text
+
+Add them in the panel under **Mind**, **Voice**, and **Ear**. Keys are stored locally with platform-appropriate encryption — they never leave your machine except in API calls to the relevant provider.
+
+## License
+
+MIT — see [LICENSE](LICENSE).
+
+The original Clicky project is the intellectual seed for this work; Flicky is an independent implementation and does not bundle or redistribute Clicky's source. If you like what's here, please also star [Farza's repo](https://github.com/farzaa/clicky).

original-source-code/clicky

@@ -66,6 +66,7 @@
       ],
       "hardenedRuntime": true,
       "gatekeeperAssess": false,
+      "notarize": true,
       "entitlements": "assets/entitlements.mac.plist",
       "entitlementsInherit": "assets/entitlements.mac.plist",
       "extendInfo": {