客户端问题修改

2026-09-07 14:53:36 +08:00
parent b19d5b5dd3
commit 61272b75e9
32 changed files with 1023 additions and 95 deletions
@@ -56,9 +56,19 @@ test -f "$APP/Contents/Resources/assets/asset_index.txt"

 echo "== 4. 签名（默认 ad-hoc；CODESIGN_IDENTITY 可切正式证书）=="
 CODESIGN_IDENTITY="${CODESIGN_IDENTITY:--}"
-find "$APP/Contents" -type f \( -name '*.dylib' -o -name '*.so' -o -name '*.a' \) -exec \
-  codesign --force --options runtime --timestamp=none --sign "$CODESIGN_IDENTITY" {} \; 2>/dev/null || true
-codesign --force --options runtime --timestamp=none --sign "$CODESIGN_IDENTITY" "$APP" 2>/dev/null || true
+ENTITLEMENTS="$REPO/macos.entitlements"
+test -f "$ENTITLEMENTS"
+
+# The exported Godot executable loads the GDExtension from Contents/Frameworks.
+# Because this package uses hardened runtime, the main executable must carry
+# disable-library-validation or macOS rejects the ad-hoc/formally signed dylib
+# at runtime even when the bundle passes a static codesign verification.
+find "$APP/Contents/Frameworks" -type f \( -name '*.dylib' -o -name '*.so' \) -exec \
+  codesign --force --options runtime --timestamp=none --sign "$CODESIGN_IDENTITY" {} \;
+codesign --force --options runtime --timestamp=none --entitlements "$ENTITLEMENTS" \
+  --sign "$CODESIGN_IDENTITY" "$APP/Contents/MacOS/mtgodot-poc"
+codesign --force --options runtime --timestamp=none --entitlements "$ENTITLEMENTS" \
+  --sign "$CODESIGN_IDENTITY" "$APP"
 xattr -dr com.apple.quarantine "$APP" 2>/dev/null || true

 echo