Function signDesktopAppIfNeeded

scripts/verify-recording-pipeline.mjs:603–649

()

}

async function signDesktopAppIfNeeded() {
	if (!signDesktopApp || !desktopAppPath || process.platform !== "darwin") {
		return;
	}

	if (!fs.existsSync(desktopAppPath)) {
		throw new Error(`Desktop app path does not exist: ${desktopAppPath}`);
	}

	const signature = await runCommand(
		"desktop-codesign-check",
		"codesign",
		["-dv", "--verbose=4", desktopAppPath],
		{ allowFailure: true },
	);
	const verification = await runCommand(
		"desktop-codesign-verify",
		"codesign",
		["--verify", "--deep", "--strict", desktopAppPath],
		{ allowFailure: true },
	);
	if (
		signature.code === 0 &&
		verification.code === 0 &&
		signature.stderr.includes(`Identifier=${desktopBundleId}`)
	) {
		return;
	}

	if (!fs.existsSync(desktopEntitlementsPath)) {
		throw new Error(
			`Desktop entitlements path does not exist: ${desktopEntitlementsPath}`,
		);
	}

	await runCommand("desktop-codesign", "codesign", [
		"--force",
		"--deep",
		"--sign",
		"-",
		"--identifier",
		desktopBundleId,
		"--entitlements",
		desktopEntitlementsPath,
		desktopAppPath,
	]);
}

async function openDeepLink(name, action) {
	const value = JSON.stringify(action);