bundle.sh

#!/bin/zsh
# Build PaperPress.app from the SwiftPM executable.
#
# Env overrides (used by CI):
#   VERSION           marketing version (default 0.1.0)
#   CODESIGN_IDENTITY signing identity ("-" for ad-hoc; default: local
#                     Developer ID)
set -e
cd "$(dirname "$0")"

VERSION="${VERSION:-0.1.0}"
IDENTITY="${CODESIGN_IDENTITY:-Developer ID Application: BENJAMIN RICHARD SOUIRE (SZHK3JVH6J)}"

swift build -c release -Xswiftc -Osize
APP=PaperPress.app
rm -rf $APP
mkdir -p $APP/Contents/MacOS $APP/Contents/Resources
cp .build/release/PaperPress $APP/Contents/MacOS/
strip -rSTx $APP/Contents/MacOS/PaperPress
# The MCP helper an assistant launches, beside the app's executable so
# Settings can name its path.
cp .build/release/paperpress-mcp $APP/Contents/MacOS/
strip -rSTx $APP/Contents/MacOS/paperpress-mcp
cp icon/PaperPress.icns $APP/Contents/Resources/
# Info.plist lives as a real file (editor tooling, lintable) with the
# version templated in.
sed "s/@VERSION@/${VERSION}/" scripts/Info.plist.template \
    > $APP/Contents/Info.plist
plutil -lint -s $APP/Contents/Info.plist
# The helper first: sealing the app covers it, and notarisation wants every
# executable signed with the hardened runtime.
codesign --force --options runtime --timestamp --sign "$IDENTITY" \
    $APP/Contents/MacOS/paperpress-mcp
codesign --force --options runtime --timestamp --sign "$IDENTITY" $APP
codesign --verify --strict --deep $APP
echo "built and signed $PWD/$APP (v$VERSION)"