fix(build): remove pycache symlinks before macOS signing

Author: Ouroboros

build.sh

@@ -94,7 +94,8 @@ cp packaging/cli/install-ouroboros-cli "$CLI_BIN_DIR/install-ouroboros-cli"
 chmod +x "$CLI_BIN_DIR/ouroboros" "$CLI_BIN_DIR/install-ouroboros-cli"
 
 echo "--- Removing Python bytecode caches from app bundle ---"
-find "$APP_PATH" -name "__pycache__" -type d -prune -exec rm -rf {} +
+# PyInstaller may duplicate resource trees with symlinks; remove cache dirs and links before signing.
+find "$APP_PATH" -name "__pycache__" -prune -exec rm -rf {} +
 find "$APP_PATH" -name "*.pyc" -type f -delete
 
 if [ "$SIGN_MODE" != "0" ]; then

tests/test_build_scripts.py

@@ -111,6 +111,18 @@ def test_packaged_cli_wrappers_are_copied_before_signing_and_dmg(self):
         assert cleanup_pos != -1 and cleanup_pos < sign_pos
         assert dmg_pos != -1 and wrapper_pos < dmg_pos
 
+    def test_pycache_cleanup_includes_symlink_entries_before_signing(self):
+        src = _read("build.sh")
+        cleanup_lines = [
+            line.strip()
+            for line in src.splitlines()
+            if 'find "$APP_PATH" -name "__pycache__"' in line
+        ]
+        assert cleanup_lines
+        assert all("-type d" not in line for line in cleanup_lines), (
+            "build.sh must remove __pycache__ symlinks as well as directories before codesign"
+        )
+
     def test_macos_dmg_includes_install_cli_command(self):
         src = _read("build.sh")
         assert "dmg-stage" in src