应用打包公证_packaging-notarization

以下为本文档的中文说明Packaging Notarization 是 OpenAI 开发的一项 macOS 应用打包和公证技能。该技能专注于应用的发布环节而非本地运行——涵盖归档文件、导出的应用包、公证就绪检查、硬运行时Hardened Runtime配置以及分发验证等流程。其工作流程包括四个步骤首先确认分发目标——是本地归档验证、签名可分发的应用还是公证问题排查然后检查产物——验证应用包结构检查嵌套框架、辅助工具和权限配置接着检查签名和运行时先决条件——包括硬运行时是否启用、签名身份是否正确、嵌套代码签名是否完整、所需权限是否配置正确最后解释公证就绪状态或失败原因——区分打包问题与信任策略症状并指出需要的最少后续验证步骤。该技能适用于 macOS 开发者在上架前进行应用打包和发布的场景特别是在 Mac App Store 之外分发应用时需要通过 Apple 的公证检查也适用于排查分发时出现的信任策略相关错误。其核心特点包括系统化的公证问题排查流程、对 macOS 安全机制的深入理解、以及针对常见分发问题的解决方案帮助开发者高效完成从开发到分发的最后一公里。该技能汇聚了 macOS 分发领域的专业知识将复杂的公证流程系统化为可重复的验证步骤帮助开发者避免在应用发布的最后一刻遇到意外问题确保分发过程的顺畅进行。Packaging NotarizationQuick StartUse this skill when the work is about shipping the app rather than merelyrunning it locally: archives, exported app bundles, notarization readiness,hardened runtime, or distribution validation.WorkflowConfirm the distribution goal.Local archive validationSigned distributable appNotarization troubleshootingInspect the artifact.Validate app bundle structure.Check nested frameworks, helper tools, and entitlements.Inspect signing and runtime prerequisites.Hardened runtimeSigning identityNested code signaturesRequired entitlementsExplain notarization readiness or failure.Separate packaging issues from trust-policy symptoms.Point to the minimum follow-up validation commands.GuardrailsDo not present notarization as required for ordinary local debug runs.Call out when you lack the actual exported artifact and are inferring from project settings.Keep advice concrete and verifiable.Output ExpectationsProvide:what artifact or settings were inspectedwhether the app looks distribution-readythe top missing prerequisite or failure modethe next validation or repair step