mac signing

.gitignore

@@ -308,3 +308,7 @@ GitHub.sublime-settings
 #Service Worker mappings
 src/renderer/sw.js.map
 src/renderer/workbox-962786f2.js.map
+
+#Mac certs
+*.p12
+keys.sh

build/afterPack.js

@@ -0,0 +1,16 @@
+exports.default = function(context) {
+    const { execSync } = require('child_process')
+
+    console.log('Castlabs-evs update start')
+    execSync('python3 -m pip install --upgrade castlabs-evs')
+    console.log('Castlabs-evs update complete')
+
+    if (process.platform !== 'darwin')
+        return
+
+    console.log('VMP signing start')
+
+    execSync('python3 -m castlabs_evs.vmp -n sign-pkg dist/mac',{stdio: 'inherit'})
+    
+    console.log('VMP signing complete')
+}

build/entitlements.mac.plist

@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+  <dict>
+    <!-- https://github.com/electron/electron-notarize#prerequisites -->
+    <key>com.apple.security.cs.allow-jit</key>
+    <true/>
+    <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+    <true/>
+    <!-- https://github.cm/electron-userland/electron-builder/issues/3940 -->
+    <key>com.apple.security.cs.disable-library-validation</key>
+    <true/>
+  </dict>
+</plist>

build/notarize.js

@@ -0,0 +1,9 @@
+exports.default = function(context) {
+  const { execSync } = require('child_process')
+  
+  if (process.platform === "win32") {
+      console.log('VMP signing start')
+      execSync('python3 -m castlabs_evs.vmp sign-pkg ' + context.appOutDir,{stdio: 'inherit'})
+      console.log('VMP signing complete')
+  }
+}

package.json

@@ -81,6 +81,7 @@
       "mirror": "https://github.com/castlabs/electron-releases/releases/download/v"
     },
     "appId": "cider",
+    "afterPack": "./build/afterPack.js",
     "protocols": [
       {
         "name": "Cider",
@@ -132,8 +133,12 @@
     "mac": {
       "icon": "./resources/icons/icon.icns",
       "category": "public.app-category.music",
-      "entitlements": "resources/entitlements.mac.plist",
+      "entitlements": "build/entitlements.mac.plist",
-      "darkModeSupport": true
+      "entitlementsInherit": "build/entitlements.mac.plist",
+      "darkModeSupport": true,
+      "target": [
+        "dmg"
+      ]
     }
   }
 }