native macOS codings agent orchestrator
preserve app entitlements during re-sign and sign dev builds
+9
-3
+4
-1
.github/workflows/release-tip.yml
+4
-1
.github/workflows/release-tip.yml
···
134
134
SENTRY_FRAMEWORK="$APP_PATH/Contents/Frameworks/Sentry.framework"
135
135
codesign -f -s "$DEVELOPER_ID_IDENTITY_SHA" -o runtime --timestamp -v "$SENTRY_FRAMEWORK/Versions/A/Sentry"
136
136
codesign -f -s "$DEVELOPER_ID_IDENTITY_SHA" -o runtime --timestamp -v "$SENTRY_FRAMEWORK"
137
-
codesign -f -s "$DEVELOPER_ID_IDENTITY_SHA" -o runtime --timestamp -v "$APP_PATH"
137
+
codesign -f -s "$DEVELOPER_ID_IDENTITY_SHA" -o runtime --timestamp --preserve-metadata=entitlements,requirements,flags -v "$APP_PATH"
138
+
139
+
codesign -d --entitlements - "$APP_PATH/Contents/MacOS/supacode" 2>&1 | tee /tmp/supacode-entitlements.txt
140
+
grep -q "com.apple.security.device.audio-input" /tmp/supacode-entitlements.txt
138
141
139
142
codesign -vvv --deep --strict "$APP_PATH"
140
143
- name: Store notarization credentials
+4
-1
.github/workflows/release.yml
+4
-1
.github/workflows/release.yml
···
127
127
SENTRY_FRAMEWORK="$APP_PATH/Contents/Frameworks/Sentry.framework"
128
128
codesign -f -s "$DEVELOPER_ID_IDENTITY_SHA" -o runtime --timestamp -v "$SENTRY_FRAMEWORK/Versions/A/Sentry"
129
129
codesign -f -s "$DEVELOPER_ID_IDENTITY_SHA" -o runtime --timestamp -v "$SENTRY_FRAMEWORK"
130
-
codesign -f -s "$DEVELOPER_ID_IDENTITY_SHA" -o runtime --timestamp -v "$APP_PATH"
130
+
codesign -f -s "$DEVELOPER_ID_IDENTITY_SHA" -o runtime --timestamp --preserve-metadata=entitlements,requirements,flags -v "$APP_PATH"
131
+
132
+
codesign -d --entitlements - "$APP_PATH/Contents/MacOS/supacode" 2>&1 | tee /tmp/supacode-entitlements.txt
133
+
grep -q "com.apple.security.device.audio-input" /tmp/supacode-entitlements.txt
131
134
132
135
codesign -vvv --deep --strict "$APP_PATH"
133
136
codesign -dv --verbose=4 "$APP_PATH" 2>&1 | grep -E "Authority=Developer ID Application|Timestamp="
+1
-1
Makefile
+1
-1
Makefile
···
40
40
rsync -a --delete "$$terminfo_src/" "$$terminfo_dst/"
41
41
42
42
build-app: build-ghostty-xcframework # Build the macOS app (Debug)
43
-
bash -o pipefail -c 'xcodebuild -project supacode.xcodeproj -scheme supacode -configuration Debug build CODE_SIGNING_ALLOWED=NO CODE_SIGNING_REQUIRED=NO CODE_SIGN_IDENTITY="" -skipMacroValidation -clonedSourcePackagesDirPath $(SPM_CACHE_DIR) 2>&1 | mise exec -- xcsift -qw --format toon'
43
+
bash -o pipefail -c 'xcodebuild -project supacode.xcodeproj -scheme supacode -configuration Debug build -skipMacroValidation -clonedSourcePackagesDirPath $(SPM_CACHE_DIR) 2>&1 | mise exec -- xcsift -qw --format toon'
44
44
45
45
run-app: build-app # Build then launch (Debug) with log streaming
46
46
@settings="$$(xcodebuild -project supacode.xcodeproj -scheme supacode -configuration Debug -showBuildSettings -json 2>/dev/null)"; \