What

Select the desktop E2E DMG/ZIP artifacts that match the current Mac architecture, accept both nightly and local desktop dist artifact names, and make downloads atomic.

Why

The E2E flow defaulted to arm64 artifacts and then picked the first file in e2e/desktop/artifacts, which caused Intel Macs to launch the wrong app binary and fail smoke runs with Bad CPU type in executable. Interrupted downloads could also leave partial DMGs behind that looked fresh but were not mountable. After fixing arch selection, the resolver also needed to keep supporting local unsigned desktop builds copied from apps/desktop/release/.

How

• detect the current Mac architecture in the download and run scripts
• default nightly artifact URLs to the matching arm64 or x64 release path
• resolve smoke-test artifacts by architecture, accepting both published nightly names (*-mac-<arch>.{dmg,zip}) and local dist names (nexu-<version>-<arch>.{dmg,zip})
• prefer the newest matching artifact when multiple candidates are present
• download to *.partial and rename only after curl succeeds to avoid stale partial artifacts
• clarify in the E2E README when to use nightly artifacts vs local unsigned builds

Affected areas

• Desktop app (Electron shell)
• Controller (backend / API)
• Web dashboard (React UI)
• OpenClaw runtime
• Skills
• Shared schemas / packages
• Build / CI / Tooling

Checklist

• pnpm typecheck passes
• pnpm lint passes
• pnpm test passes
• pnpm generate-types run (if API routes/schemas changed)
• No credentials or tokens in code or logs
• No any types introduced (use unknown with narrowing)

Notes for reviewers

Validated locally on Intel macOS with:

• pnpm test:smoke against downloaded nightly x64 artifacts
• pnpm dist:mac:unsigned:x64 followed by NEXU_DESKTOP_E2E_SKIP_CODESIGN=true pnpm --dir e2e/desktop test:smoke

The local unsigned smoke run selected nexu-0.1.7-x64.dmg / nexu-0.1.7-x64.zip and reached runtime health successfully.