mirror of
https://github.com/morluto/rea.git
synced 2026-10-27 18:05:45 +00:00
morluto
4acda94b76
Verify the native helper's sealed identifier and pinned Apple signing team in BridgeLauncher, then carry that provenance to HopperClient. Only a verified native helper's complete not-found exit confirms no document handoff, allowing runtime and target-lease cleanup and retry; wrappers retain unknown document state. Share publisher identity with setup through the domain contract. Correct fixture teardown ordering and parameterized MCP coverage. Validation: 54 focused tests passed across boundary, CLI, MCP acceptance, diagnostics and installer coverage (one Linux-only case skipped); check:fast passed. Real codesign verification accepted the installed official Hopper helper; Spotlight failures and bridge recovery used process fixtures.
8 lines
306 B
TypeScript
8 lines
306 B
TypeScript
/** Require a sealed identifier and Apple Developer ID signing team together. */
|
|
export const macDeveloperIdRequirement = (
|
|
identifier: string,
|
|
teamIdentifier: string,
|
|
): string =>
|
|
`= identifier "${identifier}" and anchor apple generic` +
|
|
` and certificate leaf[subject.OU] = "${teamIdentifier}"`;
|