Release 1.3.8

Makefile

@@ -8,7 +8,7 @@ DEST := platform=macOS
 # Extract marketing version from project settings
 VERSION := $(shell sed -n 's/.*MARKETING_VERSION = \([0-9.]*\);.*/\1/p' $(PROJECT)/project.pbxproj | head -n1)
 
-.PHONY: all clean build-debug build-release open app package
+.PHONY: all clean build-debug build-release sign-app open app package
 
 all: build-release
 
@@ -31,16 +31,25 @@ open: app
 
 # Path to built app (Release)
 APP_PATH := $(DERIVED)/Build/Products/Release/BusyMirror.app
+SIGNED_APP_PATH := build/ReleaseSigned/BusyMirror.app
 
-app: build-release
+sign-app: build-release
+	@echo "Preparing signed release app…"
+	@rm -rf "$(SIGNED_APP_PATH)"
+	@mkdir -p "$(dir $(SIGNED_APP_PATH))"
+	@ditto "$(APP_PATH)" "$(SIGNED_APP_PATH)"
+	@xattr -rc "$(SIGNED_APP_PATH)"
+	@codesign --force --deep --sign - "$(SIGNED_APP_PATH)"
+	@codesign --verify --deep --strict --verbose=2 "$(SIGNED_APP_PATH)"
+
+app: sign-app
 	@# Ensure the app exists
-	@test -d "$(APP_PATH)" && echo "Built: $(APP_PATH)" || (echo "App not found at $(APP_PATH)" && exit 1)
+	@test -d "$(SIGNED_APP_PATH)" && echo "Built: $(SIGNED_APP_PATH)" || (echo "App not found at $(SIGNED_APP_PATH)" && exit 1)
 	@echo "Version: $(VERSION)"
 	@echo "OK"
 
 package: app
 	@echo "Packaging BusyMirror $(VERSION)…"
-	@zip -qry "BusyMirror-$(VERSION)-macOS.zip" "$(APP_PATH)"
+	@ditto --norsrc -c -k --keepParent "$(SIGNED_APP_PATH)" "BusyMirror-$(VERSION)-macOS.zip"
 	@shasum -a 256 "BusyMirror-$(VERSION)-macOS.zip" | awk '{print $$1}' > "BusyMirror-$(VERSION)-macOS.zip.sha256"
 	@echo "Created BusyMirror-$(VERSION)-macOS.zip and .sha256"
-