Enables distributing Galaxy.app to end users without Gatekeeper warnings. Uses Samsung Developer ID Application certificate with hardened runtime. Pipeline: cargo bundle → sign.sh → notarize.sh → package.sh → Galaxy.dmg Entitlements: - network.client (AWS Bedrock API calls) - automation.apple-events (osascript for CLI install) - cs.allow-unsigned-executable-memory (Metal shader compilation) Orchestration scripts: - build-debug.sh: full pipeline with debug build - build-release.sh: full pipeline with release build Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
15 lines
280 B
Bash
Executable File
15 lines
280 B
Bash
Executable File
#!/bin/bash
|
|
set -e
|
|
cd "$(dirname "$0")"
|
|
|
|
echo "=== Galaxy Debug Build + Sign + Notarize + Package ==="
|
|
echo ""
|
|
|
|
cargo bundle --bin galaxy-oss --package galaxy
|
|
./sign.sh
|
|
./notarize.sh
|
|
./package.sh
|
|
|
|
echo ""
|
|
echo "=== Done. Distributable DMG: target/debug/bundle/osx/Galaxy.dmg ==="
|