Fix macOS publish bundle signing

2026-09-21 02:53:27 +02:00
parent 239e8e9013
commit 4fac7af140
4 changed files with 55 additions and 6 deletions
@@ -24,6 +24,21 @@ public class PublishServerScriptTests
        Assert.Contains("(?:bin|obj)", script);
    }

+    [Fact]
+    public async Task MacPublishPreservesAppEntitlementsAndReplacesBrokenWorkloadBundle()
+    {
+        string root = FindRoot();
+        string script = await File.ReadAllTextAsync(Path.Combine(root, "clients", "apple", "publish-macos.sh"));
+        string entitlements = await File.ReadAllTextAsync(Path.Combine(
+            root, "clients", "apple", "VoiceCat.Mac", "VoiceCat.Mac.entitlements"));
+
+        Assert.Contains("sign_nested_code", script);
+        Assert.Contains("--entitlements \"$entitlements\"", script);
+        Assert.Contains("install_verified_primary_bundle", script);
+        Assert.DoesNotContain("codesign --force --deep", script);
+        Assert.Contains("com.apple.security.cs.allow-jit", entitlements);
+    }
+
    [Fact]
    public async Task DefaultPublishTargetsWindowsAndLinuxWhileRuntimeCanSelectOne()
    {