notarize.sh

#!/bin/bash

set -e

echo "🍎 Notarizing Snap with Apple"
echo "============================="

if [ $# -eq 0 ]; then
    echo "Usage: $0 <apple_id_email> [app_specific_password]"
    echo ""
    echo "Example: $0 your.email@icloud.com"
    echo ""
    echo "Note: You'll need an App-Specific Password from your Apple ID account."
    echo "Generate one at: https://appleid.apple.com/account/manage"
    exit 1
fi

APPLE_ID="$1"
APP_SPECIFIC_PASSWORD="$2"
APP_PATH="./build/Release/snap.app"
DMG_PATH="./build/Snap-1.0.dmg"

if [ ! -d "$APP_PATH" ]; then
    echo "❌ Error: App not found. Run build_distribution.sh first."
    exit 1
fi

if [ -z "$APP_SPECIFIC_PASSWORD" ]; then
    echo "🔐 Enter your App-Specific Password:"
    read -s APP_SPECIFIC_PASSWORD
fi

echo "📤 Uploading app for notarization..."

xcrun notarytool submit "$DMG_PATH" \
    --apple-id "$APPLE_ID" \
    --password "$APP_SPECIFIC_PASSWORD" \
    --team-id "Z8988US23Z" \
    --wait

echo "🔍 Checking notarization status..."

SUBMISSION_ID=$(xcrun notarytool history \
    --apple-id "$APPLE_ID" \
    --password "$APP_SPECIFIC_PASSWORD" \
    --team-id "Z8988US23Z" \
    --output-format json | \
    jq -r '.submissions[0].id')

xcrun notarytool log "$SUBMISSION_ID" \
    --apple-id "$APPLE_ID" \
    --password "$APP_SPECIFIC_PASSWORD" \
    --team-id "Z8988US23Z"

echo "📎 Stapling notarization ticket to app..."
xcrun stapler staple "$APP_PATH"

echo "📎 Stapling notarization ticket to DMG..."
xcrun stapler staple "$DMG_PATH"

echo "✅ Verifying stapled app..."
xcrun stapler validate "$APP_PATH"
xcrun stapler validate "$DMG_PATH"

echo "🎉 Notarization complete!"
echo "Your app is now fully notarized and ready for distribution."
echo "Users will not see any security warnings when running your app."