- scripts/mac-native-bootstrap.sh: idempotent 13-phase bootstrap that installs brew + fish + fnm + node + mkcert + Claude Code, sets up /etc/synthetic.conf for /workspaces, a scoped NOPASSWD sudoers file, fish as login shell, SSL certs, and smoke-tests ac-site. Uses a GUI askpass helper to avoid sudo friction in non-tty shells. - .devcontainer/config.fish: skip the Codespaces-style ~/aesthetic-computer symlink block on Darwin (macOS uses the reverse direction via synthetic.conf, so the existing block emits a harmless but noisy "File exists" error on every shell start). - plans/MAC-NATIVE-DEVENV-PLAN.md: updated with what actually worked — synthetic.conf (not sudo mkdir), askpass + scoped NOPASSWD for sudo, notes on the ac-session MongoDB chat-load hang, current DoD checklist. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>