#!/bin/bash

# Builds PitchIt.app into ./build. Usage: ./build.sh [debug|release]

set -euo pipefail

cd "$(dirname "$0")"

CONFIG="${1:-release}"

swift build -c "$CONFIG"

BIN=".build/$CONFIG/PitchIt"

APP="build/PitchIt.app"

rm -rf "$APP"

mkdir -p "$APP/Contents/MacOS" "$APP/Contents/Resources"

cp "$BIN" "$APP/Contents/MacOS/PitchIt"

cp Resources/Info.plist "$APP/Contents/Info.plist"

cp Resources/AppIcon.icns "$APP/Contents/Resources/AppIcon.icns"

# Prefer a real signing identity: its designated requirement is stable across

# rebuilds, so Keychain "Always Allow" and TCC grants persist. Ad-hoc signatures

# change every build, which makes macOS re-prompt on each launch.

IDENTITY=$(security find-identity -v -p codesigning 2>/dev/null \

    | grep -oE '"Apple Development: [^"]+"|"Developer ID Application: [^"]+"' \

    | head -1 | tr -d '"')

if [ -n "$IDENTITY" ]; then

    echo "Signing with: $IDENTITY"

    codesign --force --sign "$IDENTITY" "$APP"

else

    echo "No signing identity found; falling back to ad-hoc signature."

    codesign --force --sign - "$APP"

fi

echo "Built $APP"