native macOS codings agent orchestrator
fix(release): codesign bundled prowl CLI with hardened runtime
The prowl binary at Resources/prowl-cli/prowl was missing hardened
runtime, causing Apple notarization to reject the DMG.
+8
+8
doc-onevcat/scripts/release.sh
+8
doc-onevcat/scripts/release.sh
···
198
198
codesign -f -s "$IDENTITY_SHA" -o runtime --timestamp -v "$SENTRY_FRAMEWORK"
199
199
fi
200
200
201
+
# ── Re-sign bundled CLI ─────────────────────────────────────────────────────
202
+
203
+
PROWL_CLI="$APP_PATH/Contents/Resources/prowl-cli/prowl"
204
+
if [[ -f "$PROWL_CLI" ]]; then
205
+
log "re-signing bundled prowl CLI with hardened runtime..."
206
+
codesign -f -s "$IDENTITY_SHA" -o runtime --timestamp -v "$PROWL_CLI"
207
+
fi
208
+
201
209
# ── Re-sign app ─────────────────────────────────────────────────────────────
202
210
203
211
log "re-signing app..."