#!/usr/bin/env bash set -euo pipefailsource script/lib/blob-store.sh build_flag="--release"target_dir="release"open_result=falselocal_arch=falselocal_only=falselocal_install=falsebundle_name=""can_code_sign=false # This must match the team in the provisioning profile.IDENTITY="Zed Industries, Inc."APPLE_NOTARIZATION_TEAM="MQ55VZLNZQ" # Function for displaying help infohelp_info() {  echo "Usage: ${0##*/} [options] [bundle_name]Build the application bundle for macOS. Options:  -d    Compile in debug mode  -l    Compile for local architecture only.  -o    Open dir with the resulting DMG or launch the app itself in local mode.  -i    Install the resulting DMG into /Applications in local mode. Noop without -l.  -h    Display this help and exit.  "} while getopts 'dloih' flagdo    case "${flag}" in        o) open_result=true;;        d)            export CARGO_INCREMENTAL=true            export CARGO_BUNDLE_SKIP_BUILD=true            build_flag="";            target_dir="debug"            ;;        l)            export CARGO_INCREMENTAL=true            export CARGO_BUNDLE_SKIP_BUILD=true            local_arch=true            local_only=true            ;;        i) local_install=true;;        h)           help_info           exit 0           ;;    esacdone shift $((OPTIND-1)) if [[ $# -gt 0 ]]; then    if [ "$1" ]; then        bundle_name=$1    fifi # Get release channelpushd crates/zedchannel=$(<RELEASE_CHANNEL)export ZED_RELEASE_CHANNEL="${channel}"popd export ZED_BUNDLE=true cargo_bundle_version=$(cargo -q bundle --help 2>&1 | head -n 1 || echo "")if [ "$cargo_bundle_version" != "cargo-bundle v0.6.0-zed" ]; then    cargo install cargo-bundle --git https://github.com/zed-industries/cargo-bundle.git --branch zed-deployfi # Deal with versions of macOS that don't include libstdc++ headersexport CXXFLAGS="-stdlib=libc++" version_info=$(rustc --version --verbose)host_line=$(echo "$version_info" | grep host)local_target_triple=${host_line#*: } # Generate the licenses first, so they can be baked into the binariesscript/generate-licenses if [ "$local_arch" = true ]; then    echo "Building for local target only."    cargo build ${build_flag} --package zed --package cli --package remote_serverelse    echo "Compiling zed binaries"    cargo build ${build_flag} --package zed --package cli --target aarch64-apple-darwin --target x86_64-apple-darwin    # Build remote_server in separate invocation to prevent feature unification from other crates    # from influencing dynamic libraries required by it.    cargo build ${build_flag} --package remote_server     --target aarch64-apple-darwin --target x86_64-apple-darwinfi echo "Creating application bundle"pushd crates/zedcp Cargo.toml Cargo.toml.backupsed \    -i.backup \    "s/package.metadata.bundle-${channel}/package.metadata.bundle/" \    Cargo.toml if [ "$local_arch" = true ]; then    app_path=$(cargo bundle ${build_flag} --select-workspace-root | xargs)else    app_path_x64=$(cargo bundle ${build_flag} --target x86_64-apple-darwin --select-workspace-root | xargs)    app_path_aarch64=$(cargo bundle ${build_flag} --target aarch64-apple-darwin --select-workspace-root | xargs)    app_path=$app_path_x64fi mv Cargo.toml.backup Cargo.tomlpopdecho "Bundled ${app_path}" if [[ -n "${MACOS_CERTIFICATE:-}" && -n "${MACOS_CERTIFICATE_PASSWORD:-}" && -n "${APPLE_NOTARIZATION_KEY:-}" && -n "${APPLE_NOTARIZATION_KEY_ID:-}" && -n "${APPLE_NOTARIZATION_ISSUER_ID:-}" ]]; then    can_code_sign=true     echo "Setting up keychain for code signing..."    security create-keychain -p "$MACOS_CERTIFICATE_PASSWORD" zed.keychain || echo ""    security default-keychain -s zed.keychain    security unlock-keychain -p "$MACOS_CERTIFICATE_PASSWORD" zed.keychain    echo "$MACOS_CERTIFICATE" | base64 --decode > /tmp/zed-certificate.p12    security import /tmp/zed-certificate.p12 -k zed.keychain -P "$MACOS_CERTIFICATE_PASSWORD" -T /usr/bin/codesign    rm /tmp/zed-certificate.p12    security set-key-partition-list -S apple-tool:,apple:,codesign: -s -k "$MACOS_CERTIFICATE_PASSWORD" zed.keychain     function cleanup() {        echo "Cleaning up keychain"        security default-keychain -s login.keychain        security delete-keychain zed.keychain    }     trap cleanup EXITfi GIT_VERSION="v2.43.3"GIT_VERSION_SHA="fa29823" function download_and_unpack() {    local url=$1    local path_to_unpack=$2    local target_path=$3     temp_dir=$(mktemp -d)     if ! command -v curl &> /dev/null; then        echo "curl is not installed. Please install curl to continue."        exit 1    fi     curl --silent --fail --location "$url" | tar -xvz -C "$temp_dir" -f - $path_to_unpack     mv "$temp_dir/$path_to_unpack" "$target_path"     rm -rf "$temp_dir"} function download_git() {    local architecture=$1    local target_binary=$2     tmp_dir=$(mktemp -d)    pushd "$tmp_dir"     case "$architecture" in        aarch64-apple-darwin)            download_and_unpack "https://github.com/desktop/dugite-native/releases/download/${GIT_VERSION}/dugite-native-${GIT_VERSION}-${GIT_VERSION_SHA}-macOS-arm64.tar.gz" bin/git ./git            ;;        x86_64-apple-darwin)            download_and_unpack "https://github.com/desktop/dugite-native/releases/download/${GIT_VERSION}/dugite-native-${GIT_VERSION}-${GIT_VERSION_SHA}-macOS-x64.tar.gz" bin/git ./git            ;;        *)            echo "Unsupported architecture: $architecture"            exit 1            ;;    esac     popd     mv "${tmp_dir}/git" "${target_binary}"    rm -rf "$tmp_dir"} function prepare_binaries() {    local architecture=$1    local app_path=$2     echo "Unpacking dSYMs for $architecture"    if ! dsymutil --flat target/${architecture}/${target_dir}/Zed 2> target/dsymutil.log; then        echo "dsymutil failed"        cat target/dsymutil.log        exit 1    fi    version="$(cargo metadata --no-deps --manifest-path crates/zed/Cargo.toml --offline --format-version=1 | jq -r '.packages | map(select(.name == "zed"))[0].version')"    if [ "$channel" == "nightly" ]; then        version="$version-$(git rev-parse --short HEAD)"    fi     echo "Removing existing gzipped dSYMs for $architecture"    rm -f target/${architecture}/${target_dir}/Zed.dwarf.gz     echo "Gzipping dSYMs for $architecture"    gzip -f target/${architecture}/${target_dir}/Zed.dwarf     echo "Uploading dSYMs for $architecture"    upload_to_blob_store_public \        "zed-debug-symbols" \        target/${architecture}/${target_dir}/Zed.dwarf.gz \        "$channel/Zed-$version-${architecture}.dwarf.gz"     cp target/${architecture}/${target_dir}/zed "${app_path}/Contents/MacOS/zed"    cp target/${architecture}/${target_dir}/cli "${app_path}/Contents/MacOS/cli"} function sign_app_binaries() {    local app_path=$1    local architecture=$2    local architecture_dir=$3    echo "Copying WebRTC.framework into the frameworks folder"    rm -rf "${app_path}/Contents/Frameworks"    mkdir -p "${app_path}/Contents/Frameworks"    if [ "$local_arch" = false ]; then        cp -R target/${local_target_triple}/${target_dir}/WebRTC.framework "${app_path}/Contents/Frameworks/"    else        cp -R target/${target_dir}/WebRTC.framework "${app_path}/Contents/Frameworks/"        cp -R target/${target_dir}/cli "${app_path}/Contents/MacOS/"    fi     echo "Downloading git binary"    download_git "${architecture}" "${app_path}/Contents/MacOS/git"     # Note: The app identifier for our development builds is the same as the app identifier for nightly.    cp crates/zed/contents/$channel/embedded.provisionprofile "${app_path}/Contents/"     if [[ $can_code_sign = true ]]; then        echo "Code signing binaries"        # sequence of codesign commands modeled after this example: https://developer.apple.com/forums/thread/701514        /usr/bin/codesign --deep --force --timestamp --sign "$IDENTITY" "${app_path}/Contents/Frameworks/WebRTC.framework" -v        /usr/bin/codesign --deep --force --timestamp --options runtime --sign "$IDENTITY" "${app_path}/Contents/MacOS/cli" -v        /usr/bin/codesign --deep --force --timestamp --options runtime --sign "$IDENTITY" "${app_path}/Contents/MacOS/git" -v        /usr/bin/codesign --deep --force --timestamp --options runtime --entitlements crates/zed/resources/zed.entitlements --sign "$IDENTITY" "${app_path}/Contents/MacOS/zed" -v        /usr/bin/codesign --force --timestamp --options runtime --entitlements crates/zed/resources/zed.entitlements --sign "$IDENTITY" "${app_path}" -v    else        echo "One or more of the following variables are missing: MACOS_CERTIFICATE, MACOS_CERTIFICATE_PASSWORD, APPLE_NOTARIZATION_KEY, APPLE_NOTARIZATION_KEY_ID, APPLE_NOTARIZATION_ISSUER_ID"        if [[ "$local_only" = false ]]; then            echo "To create a self-signed local build use ./scripts/build.sh -ldf"            exit 1        fi         echo "====== WARNING ======"        echo "This bundle is being signed without all entitlements, some features (e.g. universal links) will not work"        echo "====== WARNING ======"         # NOTE: if you need to test universal links you have a few paths forward:        # - create a PR and tag it with the `run-bundling` label, and download the .dmg file from there.        # - get a signing key for the MQ55VZLNZQ team from Nathan.        # - create your own signing key, and update references to MQ55VZLNZQ to your own team ID        # then comment out this line.        cat crates/zed/resources/zed.entitlements | sed '/com.apple.developer.associated-domains/,+1d' > "${app_path}/Contents/Resources/zed.entitlements"         codesign --force --deep --entitlements "${app_path}/Contents/Resources/zed.entitlements" --sign ${MACOS_SIGNING_KEY:- -} "${app_path}" -v    fi     if [[ "$target_dir" = "debug" && "$local_only" = false ]]; then        if [ "$open_result" = true ]; then            open "$app_path"        else            echo "Created application bundle:"            echo "$app_path"        fi        exit 0    fi     # If bundle_name is not set or empty, use the basename of $app_path    if [ -z "$bundle_name" ]; then        bundle_name=$(basename "$app_path")    else        # If bundle_name doesn't end in .app, append it        if [[ "$bundle_name" != *.app ]]; then            bundle_name="$bundle_name.app"        fi    fi     if [ "$local_only" = true ]; then        if [ "$local_install" = true ]; then            rm -rf "/Applications/$bundle_name"            mv "$app_path" "/Applications/$bundle_name"            echo "Installed application bundle: /Applications/$bundle_name"            if [ "$open_result" = true ]; then                echo "Opening /Applications/$bundle_name"                open "/Applications/$bundle_name"            fi        else            if [ "$open_result" = true ]; then                echo "Opening $app_path"                open "$app_path"            fi        fi    else        dmg_target_directory="target/${architecture_dir}/${target_dir}"        dmg_source_directory="${dmg_target_directory}/dmg"        dmg_file_path="${dmg_target_directory}/Zed.dmg"        xcode_bin_dir_path="$(xcode-select -p)/usr/bin"         rm -rf ${dmg_source_directory}        mkdir -p ${dmg_source_directory}        mv "${app_path}" "${dmg_source_directory}"        notarization_key_file=$(mktemp)         echo "Adding symlink to /Applications to ${dmg_source_directory}"        ln -s /Applications ${dmg_source_directory}         echo "Creating final DMG at ${dmg_file_path} using ${dmg_source_directory}"        hdiutil create -volname Zed -srcfolder "${dmg_source_directory}" -ov -format UDZO "${dmg_file_path}"         # If someone runs this bundle script locally, a symlink will be placed in `dmg_source_directory`.        # This symlink causes CPU issues with Zed if the Zed codebase is the project being worked on, so we simply remove it for now.        echo "Removing symlink to /Applications from ${dmg_source_directory}"        rm ${dmg_source_directory}/Applications         echo "Adding license agreement to DMG"        npm install --global dmg-license minimist        dmg-license script/terms/terms.json "${dmg_file_path}"         if [[ $can_code_sign = true ]]; then            echo "Notarizing DMG with Apple"            /usr/bin/codesign --deep --force --timestamp --options runtime --sign "$IDENTITY" "$(pwd)/${dmg_file_path}" -v            echo "$APPLE_NOTARIZATION_KEY" > "$notarization_key_file"            "${xcode_bin_dir_path}/notarytool" submit --wait --key "$notarization_key_file" --key-id "$APPLE_NOTARIZATION_KEY_ID" --issuer "$APPLE_NOTARIZATION_ISSUER_ID" "${dmg_file_path}"            rm "$notarization_key_file"            "${xcode_bin_dir_path}/stapler" staple "${dmg_file_path}"        fi         if [ "$open_result" = true ]; then            open $dmg_target_directory        fi    fi} function sign_binary() {    local binary_path=$1     if [[ $can_code_sign = true ]]; then        echo "Code signing executable $binary_path"        /usr/bin/codesign --deep --force --timestamp --options runtime --entitlements crates/zed/resources/zed.entitlements --sign "$IDENTITY" "${binary_path}" -v    fi} if [ "$local_arch" = true ]; then    sign_app_binaries "$app_path" "$local_target_triple" "$local_target_triple"     sign_binary "target/release/remote_server"else    # Create universal binary    prepare_binaries "aarch64-apple-darwin" "$app_path_aarch64"    prepare_binaries "x86_64-apple-darwin" "$app_path_x64"      sign_app_binaries "$app_path_x64" "x86_64-apple-darwin" "x86_64-apple-darwin"    sign_app_binaries "$app_path_aarch64" "aarch64-apple-darwin" "aarch64-apple-darwin"     sign_binary "target/x86_64-apple-darwin/release/remote_server"    sign_binary "target/aarch64-apple-darwin/release/remote_server"    gzip -f --stdout --best target/x86_64-apple-darwin/release/remote_server > target/zed-remote-server-macos-x86_64.gz    gzip -f --stdout --best target/aarch64-apple-darwin/release/remote_server > target/zed-remote-server-macos-aarch64.gzfi