chore: notarized build

2025-07-14 16:26:56 -04:00
parent d688dd3deb
commit c60c6cfac5
9 changed files with 278 additions and 34 deletions
@@ -0,0 +1,120 @@
+#!/bin/bash
+
+# Verify Code Signing Setup for Meetingnotes
+# This script checks if your Apple Developer credentials are properly configured
+
+set -e
+
+echo "🔍 Code Signing Verification"
+echo "============================"
+echo ""
+
+# Check environment variables
+echo "📋 Environment Variables:"
+
+if [ -n "$DEVELOPER_ID" ]; then
+    echo "   ✅ DEVELOPER_ID: $DEVELOPER_ID"
+else
+    echo "   ❌ DEVELOPER_ID: Not set (REQUIRED)"
+fi
+
+if [ -n "$APPLE_ID" ]; then
+    echo "   ✅ APPLE_ID: $APPLE_ID"
+else
+    echo "   ❌ APPLE_ID: Not set (REQUIRED for notarization)"
+fi
+
+if [ -n "$TEAM_ID" ]; then
+    echo "   ✅ TEAM_ID: $TEAM_ID"
+else
+    echo "   ❌ TEAM_ID: Not set (REQUIRED)"
+fi
+
+if [ -n "$APP_PASSWORD" ]; then
+    echo "   ✅ APP_PASSWORD: $APP_PASSWORD"
+else
+    echo "   ❌ APP_PASSWORD: Not set (REQUIRED for notarization)"
+fi
+
+echo ""
+
+# Check certificates
+echo "🔍 Available Certificates:"
+DEVELOPER_ID_CERTS=$(security find-identity -v -p codesigning | grep "Developer ID Application" || true)
+if [ -n "$DEVELOPER_ID_CERTS" ]; then
+    echo "   ✅ Developer ID Application certificates found:"
+    echo "$DEVELOPER_ID_CERTS" | sed 's/^/      /'
+else
+    echo "   ❌ No Developer ID Application certificates found"
+fi
+
+echo ""
+
+# Validate certificate matches expected
+if [ -n "$DEVELOPER_ID_CERTS" ]; then
+    echo "   ✅ Developer ID Application certificates are available"
+else
+    echo "   ❌ No Developer ID Application certificates found"
+    echo "      Install your certificate from Apple Developer portal"
+fi
+
+echo ""
+
+# Check notarytool
+echo "🔍 Notarization Tools:"
+if command -v xcrun &> /dev/null; then
+    if xcrun --find notarytool &> /dev/null; then
+        echo "   ✅ notarytool available"
+    else
+        echo "   ❌ notarytool not found (requires Xcode 13+)"
+    fi
+else
+    echo "   ❌ xcrun not available"
+fi
+
+echo ""
+
+# Check entitlements file
+echo "🔍 Entitlements File:"
+if [ -f "meetingnotes/meetingnotes.entitlements" ]; then
+    echo "   ✅ meetingnotes.entitlements found"
+else
+    echo "   ❌ meetingnotes.entitlements not found"
+fi
+
+echo ""
+
+# Overall status
+echo "📊 Overall Status:"
+CERT_OK=$(echo "$DEVELOPER_ID_CERTS" | grep -q "Developer ID Application" && echo "true" || echo "false")
+CREDS_OK=$([ -n "$DEVELOPER_ID" ] && [ -n "$APPLE_ID" ] && [ -n "$TEAM_ID" ] && [ -n "$APP_PASSWORD" ] && echo "true" || echo "false")
+
+if [ "$CERT_OK" = "true" ] && [ "$CREDS_OK" = "true" ]; then
+    echo "   🎉 Ready for production builds with notarization!"
+elif [ "$CERT_OK" = "true" ]; then
+    echo "   ⚠️  Certificate installed, but missing environment variables"
+else
+    echo "   ❌ Missing certificate or environment variables"
+fi
+
+echo ""
+echo "🚀 Next Steps:"
+if [ "$CERT_OK" = "false" ]; then
+    echo "   1. Install your Developer ID certificate in Keychain"
+    echo "   2. Run: ./scripts/setup_codesigning.sh"
+    echo "   3. Set up your .env file with credentials"
+elif [ "$CREDS_OK" = "false" ]; then
+    echo "   1. Run: ./scripts/setup_codesigning.sh"
+    echo "   2. Create and configure your .env file"
+    echo "   3. Test: source .env && ./scripts/verify_codesigning.sh"
+else
+    echo "   1. Run: source .env && ./scripts/build_release.sh"
+    echo "   2. Test the resulting DMG on another Mac"
+    echo "   3. Upload to GitHub releases"
+fi
+
+echo ""
+echo "💡 Quick setup with .env file:"
+echo "   1. Copy .env.template to .env: cp .env.template .env"
+echo "   2. Edit .env with your Apple ID and app-specific password"
+echo "   3. Load and verify: source .env && ./scripts/verify_codesigning.sh"