应用打包公证_packaging-notarization
以下为本文档的中文说明
Packaging & Notarization 是 OpenAI 开发的一项 macOS 应用打包和公证技能。该技能专注于应用的发布环节而非本地运行——涵盖归档文件、导出的应用包、公证就绪检查、硬运行时（Hardened Runtime）配置以及分发验证等流程。其工作流程包括四个步骤：首先确认分发目标——是本地归档验证、签名可分发的应用，还是公证问题排查；然后检查产物——验证应用包结构，检查嵌套框架、辅助工具和权限配置；接着检查签名和运行时先决条件——包括硬运行时是否启用、签名身份是否正确、嵌套代码签名是否完整、所需权限是否配置正确；最后解释公证就绪状态或失败原因——区分打包问题与信任策略症状，并指出需要的最少后续验证步骤。该技能适用于 macOS 开发者在上架前进行应用打包和发布的场景，特别是在 Mac App Store 之外分发应用时需要通过 Apple 的公证检查，也适用于排查分发时出现的信任策略相关错误。其核心特点包括系统化的公证问题排查流程、对 macOS 安全机制的深入理解、以及针对常见分发问题的解决方案，帮助开发者高效完成从开发到分发的最后一公里。该技能汇聚了 macOS 分发领域的专业知识，将复杂的公证流程系统化为可重复的验证步骤，帮助开发者避免在应用发布的最后一刻遇到意外问题，确保分发过程的顺畅进行。
Packaging & Notarization
Quick Start
Use this skill when the work is about shipping the app rather than merely
running it locally: archives, exported app bundles, notarization readiness,
hardened runtime, or distribution validation.
Workflow
Confirm the distribution goal.
- Local archive validation
- Signed distributable app
- Notarization troubleshooting
Inspect the artifact.
- Validate app bundle structure.
- Check nested frameworks, helper tools, and entitlements.
Inspect signing and runtime prerequisites.
- Hardened runtime
- Signing identity
- Nested code signatures
- Required entitlements
Explain notarization readiness or failure.
- Separate packaging issues from trust-policy symptoms.
- Point to the minimum follow-up validation commands.
Guardrails
- Do not present notarization as required for ordinary local debug runs.
- Call out when you lack the actual exported artifact and are inferring from project settings.
- Keep advice concrete and verifiable.
Output Expectations
Provide:
- what artifact or settings were inspected
- whether the app looks distribution-ready
- the top missing prerequisite or failure mode
- the next validation or repair step