root
a9af6c634c
- Move the build config out of package.json into electron-builder.yml so
the mac block can carry hardenedRuntime, entitlements, universal arch,
and usage-description Info.plist keys. Drop identity:null (which
forces unsigned builds) and let CSC_NAME or the keychain decide.
- Add entitlements plist files and three helper scripts: sign-setup.sh
(one-time keychain prep with notarytool store-credentials),
sign-mac.sh (sign + notarize + staple, supports keychain or CI env
vars), and ci-import-cert.sh (CI keychain bootstrap).
- Ignore .env.signing so local credentials don't sneak into the repo,
and pin @emnapi/{core,runtime} as devDependencies so universal builds
resolve them deterministically.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
25 lines
328 B
Plaintext
25 lines
328 B
Plaintext
.DS_Store
|
|
node_modules/
|
|
.pnpm-store/
|
|
coverage/
|
|
dist/
|
|
.env
|
|
.env.local
|
|
.env.signing
|
|
apps/*/.env.signing
|
|
apps/*/dist/
|
|
apps/*/out/
|
|
apps/*/release/
|
|
apps/*/node_modules/
|
|
apps/*/.output/
|
|
apps/*/.wxt/
|
|
apps/*/chrome-mv*/
|
|
apps/*/firefox-mv*/
|
|
.claude
|
|
.superpowers/*
|
|
.playwright-mcp/*
|
|
.playwright-cli/*
|
|
*.log
|
|
*.tmp
|
|
apps/*/stats.html
|
|
ops-api |