Enables distributing Galaxy.app to end users without Gatekeeper warnings. Uses Samsung Developer ID Application certificate with hardened runtime. Pipeline: cargo bundle → sign.sh → notarize.sh → package.sh → Galaxy.dmg Entitlements: - network.client (AWS Bedrock API calls) - automation.apple-events (osascript for CLI install) - cs.allow-unsigned-executable-memory (Metal shader compilation) Orchestration scripts: - build-debug.sh: full pipeline with debug build - build-release.sh: full pipeline with release build Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
15 lines
324 B
Bash
Executable File
15 lines
324 B
Bash
Executable File
#!/bin/bash
|
|
set -e
|
|
cd "$(dirname "$0")"
|
|
|
|
echo "=== Galaxy Release Build + Sign + Notarize + Package ==="
|
|
echo ""
|
|
|
|
cargo bundle --release --bin galaxy-oss --package galaxy
|
|
./sign.sh --release
|
|
./notarize.sh --release
|
|
./package.sh --release
|
|
|
|
echo ""
|
|
echo "=== Done. Distributable DMG: target/release/bundle/osx/Galaxy.dmg ==="
|