fix(darwin): sanitize CFBundleIdentifier to comply with Apple requirements

CFBundleIdentifier was generated as com.wails.{{.Name}} which could
contain spaces and special characters, violating Apple's requirement
that bundle identifiers only contain [A-Za-z0-9.-].

Add a safeBundleID template function that lowercases and replaces
non-alphanumeric runs with hyphens, then strips leading/trailing
dashes. Applied to both Info.plist and Info.dev.plist templates.

Fixes #4866

Author: Wails Documentation Agent

v2/pkg/buildassets/build/darwin/Info.dev.plist

@@ -8,7 +8,7 @@
         <key>CFBundleExecutable</key>
         <string>{{.OutputFilename}}</string>
         <key>CFBundleIdentifier</key>
-        <string>com.wails.{{.Name}}</string>
+        <string>com.wails.{{safeBundleID .Name}}</string>
         <key>CFBundleVersion</key>
         <string>{{.Info.ProductVersion}}</string>
         <key>CFBundleGetInfoString</key>

v2/pkg/buildassets/build/darwin/Info.plist

@@ -8,7 +8,7 @@
         <key>CFBundleExecutable</key>
         <string>{{.OutputFilename}}</string>
         <key>CFBundleIdentifier</key>
-        <string>com.wails.{{.Name}}</string>
+        <string>com.wails.{{safeBundleID .Name}}</string>
         <key>CFBundleVersion</key>
         <string>{{.Info.ProductVersion}}</string>
         <key>CFBundleGetInfoString</key>

v2/pkg/buildassets/buildassets.go

@@ -8,6 +8,8 @@ import (
 	iofs "io/fs"
 	"os"
 	"path/filepath"
+	"regexp"
+	"strings"
 	"text/template"
 
 	"github.com/leaanthony/gosod"
@@ -107,8 +109,26 @@ type assetData struct {
 	OutputFilename string
 }
 
+func xmlEscape(s string) string {
+	var buf bytes.Buffer
+	template.HTMLEscape(&buf, []byte(s))
+	return buf.String()
+}
+
+var nonAlphaNum = regexp.MustCompile(`[^A-Za-z0-9]+`)
+
+func safeBundleID(s string) string {
+	result := strings.ToLower(nonAlphaNum.ReplaceAllString(s, "-"))
+	result = strings.Trim(result, "-")
+	return result
+}
+
 func resolveProjectData(content []byte, projectData *project.Project) ([]byte, error) {
-	tmpl, err := template.New("").Parse(string(content))
+	funcMap := template.FuncMap{
+		"xml":          xmlEscape,
+		"safeBundleID": safeBundleID,
+	}
+	tmpl, err := template.New("").Funcs(funcMap).Parse(string(content))
 	if err != nil {
 		return nil, err
 	}

v2/pkg/buildassets/safebundleid_test.go

@@ -0,0 +1,27 @@
+package buildassets
+
+import (
+	"testing"
+)
+
+func TestSafeBundleID(t *testing.T) {
+	tests := []struct {
+		input    string
+		expected string
+	}{
+		{"My Fab Application", "my-fab-application"},
+		{"SimpleApp", "simpleapp"},
+		{"App-With-Dashes", "app-with-dashes"},
+		{"App_With_Underscores", "app-with-underscores"},
+		{"App@#$%^&*()", "app"},
+		{"123App", "123app"},
+		{"  Spaces  ", "spaces"},
+		{"already-lowercase", "already-lowercase"},
+	}
+	for _, tt := range tests {
+		got := safeBundleID(tt.input)
+		if got != tt.expected {
+			t.Errorf("safeBundleID(%q) = %q, want %q", tt.input, got, tt.expected)
+		}
+	}
+}