mirror of
https://github.com/actualbudget/actual.git
synced 2026-11-09 10:45:04 -06:00
2ccf885b42
* [AI] Add a sandboxed Mac App Store build and publish it from CI The Mac App Store build of Electron must run inside the App Sandbox with an app-group entitlement, otherwise it aborts on launch. Configure the mas and mas-dev targets with the required entitlements, add a release script that uploads the signed package, and run it from CI on every master push and release. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> * [AI] Fix the Mac App Store build number and package path Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> --------- Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
Mac App Store build
Mac App Store builds run inside the App Sandbox, which needs the entitlements
in this folder plus an app-group entitlement that electron-builder derives
from the provisioning profile at signing time. Without the app group Electron
aborts on launch (bootstrap_check_in ... MachPortRendezvousServer: Permission denied).
yarn workspace desktop-electron build:masproduces the App Store-signed.pkgindist/. It needs the "Apple Distribution" and "Mac Installer Distribution" certificates in the keychain and the Mac App Store provisioning profile forcom.actualbudget.actualsaved here asembedded.provisionprofile. App Store-signed builds only launch when installed from TestFlight or the App Store.yarn workspace desktop-electron build:mas-devproduces the same sandboxed app signed with the "Apple Development" certificate so it launches locally. It needs a macOS App Development provisioning profile that lists this Mac, saved here asdevelopment.provisionprofile.
Both profiles are git-ignored; download them from developer.apple.com/account/resources/profiles.