Contract: the App Store variant of the bundle

Built by packaging/macos/build.sh --app-store on a Mac, into target/package/macos-app-store/.

Midi Harbor.app/Contents/
├── Info.plist                  as the direct build's, with LSMinimumSystemVersion 13.0 and LSUIElement true
├── MacOS/
│   ├── midi-harbor             the full build, signed with app-store.entitlements
│   └── midi-harbor-daemon      the headless build, signed with helper.entitlements
└── Resources/AppIcon.icns

Both executables are universal when both Rust targets are installed.

packaging/macos/app-store.entitlements

com.apple.security.app-sandbox          true
com.apple.security.network.client       true
com.apple.security.network.server       true
com.apple.security.device.bluetooth     true
com.apple.security.device.usb           true

packaging/macos/helper.entitlements

com.apple.security.app-sandbox          true
com.apple.security.inherit              true

The helper is signed first and the bundle after, each with the hardened runtime, ad hoc unless MIDI_HARBOR_SIGNING_IDENTITY names a certificate. codesign --verify --strict passes on the bundle, and codesign -d --entitlements - on each executable shows exactly the lists above.

The bundle identifier stays com.mrgeckosmedia.MidiHarbor. A disk image is not made for this variant: the App Store takes an installer package built with the owner's certificates.

1.5 KiB Raw Blame History

Contract: the App Store variant of the bundle

1.5 KiB

Raw Blame History