trying to fix deploy

Author: Lycoon

.github/workflows/deploy-macos.yaml

@@ -28,6 +28,13 @@ jobs:
                   api-key-id: ${{ secrets.APPSTORE_KEY_ID }}
                   api-private-key: ${{ secrets.APPSTORE_API_KEY_P8 }}
 
+            - name: Copy provisioning profile to known path
+              run: |
+                  PROFILE=$(ls "$HOME/Library/MobileDevice/Provisioning Profiles/"*.provisionprofile \
+                               "$HOME/Library/MobileDevice/Provisioning Profiles/"*.mobileprovision \
+                             2>/dev/null | head -n 1)
+                  cp "$PROFILE" src-tauri/embedded.provisionprofile
+
             - uses: actions/setup-node@v4
               with: { node-version: "22" }
             - uses: dtolnay/rust-toolchain@stable
@@ -36,22 +43,10 @@ jobs:
             - name: Install dependencies
               run: npm install
 
-            - name: Build .app with Tauri
+            - name: Build and sign .app with Tauri
               run: npm run tauri build -- --bundles app --target universal-apple-darwin
-
-            - name: Embed provisioning profile
-              run: |
-                  PROFILE=$(ls "$HOME/Library/MobileDevice/Provisioning Profiles/"*.provisionprofile \
-                               "$HOME/Library/MobileDevice/Provisioning Profiles/"*.mobileprovision \
-                             2>/dev/null | head -n 1)
-                  cp "$PROFILE" "$APP_PATH/Contents/embedded.provisionprofile"
-
-            - name: Sign app
-              run: |
-                  codesign --force --deep \
-                    --sign "${{ secrets.APPLE_SIGNING_IDENTITY }}" \
-                    --entitlements src-tauri/Entitlements.plist \
-                    "$APP_PATH"
+              env:
+                  APPLE_SIGNING_IDENTITY: ${{ secrets.APPLE_SIGNING_IDENTITY }}
 
             - name: Build signed .pkg installer
               run: |

.github/workflows/deploy-prod.yaml

@@ -40,8 +40,6 @@ jobs:
                       NEXT_PUBLIC_API_URL=https://scriptio.app
                       NEXT_PUBLIC_COMMIT_SHA=${{ env.COMMIT_SHA }}
                       NEXT_PUBLIC_APP_VERSION=${{ env.APP_VERSION }}
-                  cache-from: type=gha,scope=prod
-                  cache-to: type=gha,mode=max,scope=prod
 
     deploy:
         runs-on: ubuntu-latest

.github/workflows/deploy-staging.yaml

@@ -40,8 +40,6 @@ jobs:
                       NEXT_PUBLIC_API_URL=https://staging.scriptio.app
                       NEXT_PUBLIC_COMMIT_SHA=${{ env.COMMIT_SHA }}
                       NEXT_PUBLIC_APP_VERSION=${{ env.APP_VERSION }}
-                  cache-from: type=gha,scope=staging
-                  cache-to: type=gha,mode=max,scope=staging
 
     deploy:
         runs-on: ubuntu-latest

.gitignore

@@ -45,4 +45,7 @@ yarn-error.log*
 *.tsbuildinfo
 
 # claude
-.claude
+.claude
+# Apple provisioning profiles
+*.provisionprofile
+*.mobileprovision

src-tauri/Entitlements.plist

@@ -2,15 +2,18 @@
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
 <dict>
-    <!-- Required by Mac App Store — without this the upload is rejected -->
+    <key>com.apple.application-identifier</key>
+    <string>G93CJ6PWZH.app.scriptio</string>
+
+    <key>com.apple.developer.team-identifier</key>
+    <string>G93CJ6PWZH</string>
+
     <key>com.apple.security.app-sandbox</key>
     <true/>
 
-    <!-- Outbound HTTP/S to scriptio.app backend and APIs -->
     <key>com.apple.security.network.client</key>
     <true/>
 
-    <!-- File open/save dialogs via Tauri's dialog plugin -->
     <key>com.apple.security.files.user-selected.read-write</key>
     <true/>
 </dict>

src-tauri/tauri.macos.conf.json

@@ -3,7 +3,8 @@
     "bundle": {
         "category": "Productivity",
         "macOS": {
-            "entitlements": "./Entitlements.plist"
+            "entitlements": "./Entitlements.plist",
+            "provisioningProfile": "./embedded.provisionprofile"
         }
     }
 }