feat: implement macOS notarization and ad-hoc signing in afterSign script

feat: add run-server script to manage server execution and compatibility checks feat: create main application logic for desktop with window management, server handling, and auto-updater test: add unit tests for desktop runtime helpers feat: implement desktop server environment configuration and health check test: add tests for server configuration and desktop routes feat: add native module guard for better-sqlite3 compatibility test: add tests for native module guard functionality test: add comprehensive tests for account verification feedback handling feat: implement account verification feedback helpers chore: add TypeScript configuration for desktop builds
2026-03-06 16:24:41 +08:00
parent acdc846b13
commit 2a810facb8
45 changed files with 6712 additions and 405 deletions
@@ -0,0 +1,46 @@
+import { notarize } from '@electron/notarize';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+
+const execFileAsync = promisify(execFile);
+
+async function hasSignature(appPath) {
+  try {
+    await execFileAsync('codesign', ['--verify', '--deep', '--strict', appPath]);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+async function adHocSign(appPath) {
+  await execFileAsync('codesign', ['--force', '--deep', '--sign', '-', appPath]);
+}
+
+export default async function afterSign(context) {
+  if (context.electronPlatformName !== 'darwin') return;
+
+  const appPath = `${context.appOutDir}/${context.packager.appInfo.productFilename}.app`;
+  const appleId = process.env.APPLE_ID || process.env.APPLEID;
+  const appleIdPassword = process.env.APPLE_APP_SPECIFIC_PASSWORD || process.env.APPLEIDPASS;
+  const teamId = process.env.APPLE_TEAM_ID;
+
+  const signed = await hasSignature(appPath);
+  if (!signed) {
+    console.log('[metapi-desktop] No macOS signing identity detected, applying ad-hoc signature.');
+    await adHocSign(appPath);
+  }
+
+  if (!appleId || !appleIdPassword || !teamId) {
+    console.log('[metapi-desktop] Skipping notarization: APPLE_ID / APPLE_APP_SPECIFIC_PASSWORD / APPLE_TEAM_ID not fully configured.');
+    return;
+  }
+
+  console.log('[metapi-desktop] Notarizing macOS build...');
+  await notarize({
+    appPath,
+    appleId,
+    appleIdPassword,
+    teamId,
+  });
+}