Install on macOS with a package

macOS gets one universal .pkg installer per release, plus a per-architecture .tar.gz. All of them carry the CLI only — public packaging is CLI-only on every artifact, and the Forge is not shipped inside them.

Which download

The installer is architecture-neutral: a single tovio-<version>-universal.pkg built by fusing the Intel and Apple-silicon slices into one universal binary. Do not go looking for an aarch64 .pkg — there is not one, and there does not need to be.

The tarballs are per-architecture: Apple silicon takes the aarch64 build, Intel Macs take x86_64. macOS 13.0 is the declared minimum for both, and neither has been formally certified at that floor yet.

Installing

Open the .pkg and follow the installer, or unpack the .tar.gz and place tovio somewhere on your PATH. The tarball unpacks into a single tovio-<version>-<target>/ directory holding the tovio binary and the licence and readme files — nothing else. The git-credential-tovio helper is not in any public package; a source build is currently the only way to get it.

Verify before you install

The .pkg is signed with an Apple Developer ID installer identity and notarized, so Gatekeeper checks it for you. That is not the same as verifying provenance — check the release's own checksum and build-provenance attestation first, per the verification article. This matters more for a version control system than for most software: the binary you install is the one that will hold your keys.

Confirm it took

tovio --version

Upgrading

Install the newer package over the old one. Your repositories and keychain entries are untouched. Regenerate shell completions afterwards — they are a snapshot of the command surface at the version that produced them.

Uninstalling

Removing the binary does not remove your data, deliberately. Repository history and the sealed identity live in each repository's .tovio/ directory; the wrapping key that unseals that identity lives in your Apple keychain under the service name tovio; git credentials live under ~/.config/tovio/git-credentials. None of it goes away with the package.