Initial release

scripts/bundle-app.sh

@@ -0,0 +1,47 @@
+#!/usr/bin/env bash
+# Builds Knotchy.app, installs it to ~/Applications and refreshes the Services menu.
+# Signs with the keychain's Developer ID certificate (or KNOTCHY_SIGN_IDENTITY), ad hoc if there is none.
+# --release skips the install and adds the secure timestamp notarization needs; see scripts/release.sh.
+set -euo pipefail
+root="$(cd "$(dirname "$0")/.." && pwd)"
+cd "$root"
+
+release=0
+[[ ${1:-} == --release ]] && release=1
+identity="${KNOTCHY_SIGN_IDENTITY:-$(security find-identity -v -p codesigning | awk '/"Developer ID Application: / && !id { id = $2 } END { print id }')}"
+if (( release )) && [[ -z $identity ]]; then
+    echo "A release needs a Developer ID Application certificate in the keychain." >&2
+    exit 1
+fi
+
+swift build -c release --product Knotchy
+bin="$(swift build -c release --product Knotchy --show-bin-path)/Knotchy"
+
+app="$root/build/Knotchy.app"
+rm -rf "$app"
+mkdir -p "$app/Contents/MacOS" "$app/Contents/Resources"
+cp "$bin" "$app/Contents/MacOS/Knotchy"
+cp Sources/Knotchy/Info.plist "$app/Contents/Info.plist"
+cp assets/AppIcon.icns "$app/Contents/Resources/AppIcon.icns"
+# The image is built from these on the user's Mac.
+cp -R vm "$app/Contents/Resources/vm"
+find "$app" -name .DS_Store -delete
+
+if [[ -z $identity ]]; then
+    codesign --force --sign - "$app"
+elif (( release )); then
+    codesign --force --options runtime --timestamp --sign "$identity" "$app"
+else
+    codesign --force --options runtime --timestamp=none --sign "$identity" "$app"
+fi
+if (( release )); then
+    exit 0
+fi
+
+dest="$HOME/Applications/Knotchy.app"
+mkdir -p "$HOME/Applications"
+pkill -x Knotchy 2>/dev/null || true
+rm -rf "$dest"
+cp -R "$app" "$dest"
+/System/Library/CoreServices/pbs -update
+echo "Installed $dest"