import type { Configuration } from "electron-builder"; const config: Configuration = { appId: "sh.executor.desktop", productName: "Executor", artifactName: "executor-desktop-${os}-${arch}.${ext}", directories: { output: "dist", // Static build inputs live in build/ (icon.png, entitlements.mac.plist). // Runtime resources staged at build time (the bundled executor CLI binary) // live in resources/ and are wired in via `extraResources` below. buildResources: "build", }, files: ["out/**/*", "package.json"], extraResources: [ { from: "resources/executor/", to: "executor/", filter: ["**/*"], }, ], mac: { category: "public.app-category.developer-tools", // Do NOT pin `arch:` inside the target objects. The publish workflow's // matrix passes `--arm64` / `--x64` per leg; a config-level arch list // would override that flag and force every leg to build both archs from // a single per-leg bundled executor binary, shipping mismatched-arch DMGs (errno // -86 / EBADARCH on Apple Silicon). The CLI flag is the source of truth. target: ["dmg", "zip"], hardenedRuntime: true, gatekeeperAssess: false, // electron-builder reads CSC_LINK / CSC_KEY_PASSWORD for the signing // identity and APPLE_API_KEY / APPLE_API_KEY_ID / APPLE_API_ISSUER // (set in publish-desktop.yml from repo secrets) to upload to Apple // for notarization. Locally, with none of those env vars set, // electron-builder skips signing and produces an unsigned build. entitlements: "build/entitlements.mac.plist", entitlementsInherit: "build/entitlements.mac.plist", notarize: true, }, // Same arch rule as mac (see comment above): never pin `arch:` in the // target objects. The win/linux pins used to force both archs out of a // single x64 matrix leg, embedding an x64 executor binary inside the // "arm64" installers — DOA on linux-arm64, emulated on win-arm64. Each // workflow leg's --x64/--arm64 flag decides what gets built, so an arm64 // artifact only exists once a leg stages an arm64 executor for it. win: { target: ["nsis"], }, nsis: { oneClick: true, perMachine: false, }, linux: { category: "Development", target: ["AppImage", "deb", "rpm"], }, publish: { provider: "github", owner: "UsefulSoftwareCo", repo: "executor", },}; export default config;
import type { Configuration } from "electron-builder";
const config: Configuration = {
appId: "sh.executor.desktop",
productName: "Executor",
artifactName: "executor-desktop-${os}-${arch}.${ext}",
directories: {
output: "dist",
// Static build inputs live in build/ (icon.png, entitlements.mac.plist).
// Runtime resources staged at build time (the bundled executor CLI binary)
// live in resources/ and are wired in via `extraResources` below.
buildResources: "build",
},
files: ["out/**/*", "package.json"],
extraResources: [
{
from: "resources/executor/",
to: "executor/",
filter: ["**/*"],
},
],
mac: {
category: "public.app-category.developer-tools",
// Do NOT pin `arch:` inside the target objects. The publish workflow's
// matrix passes `--arm64` / `--x64` per leg; a config-level arch list
// would override that flag and force every leg to build both archs from
// a single per-leg bundled executor binary, shipping mismatched-arch DMGs (errno
// -86 / EBADARCH on Apple Silicon). The CLI flag is the source of truth.
target: ["dmg", "zip"],
hardenedRuntime: true,
gatekeeperAssess: false,
// electron-builder reads CSC_LINK / CSC_KEY_PASSWORD for the signing
// identity and APPLE_API_KEY / APPLE_API_KEY_ID / APPLE_API_ISSUER
// (set in publish-desktop.yml from repo secrets) to upload to Apple
// for notarization. Locally, with none of those env vars set,
// electron-builder skips signing and produces an unsigned build.
entitlements: "build/entitlements.mac.plist",
entitlementsInherit: "build/entitlements.mac.plist",
notarize: true,
},
// Same arch rule as mac (see comment above): never pin `arch:` in the
// target objects. The win/linux pins used to force both archs out of a
// single x64 matrix leg, embedding an x64 executor binary inside the
// "arm64" installers — DOA on linux-arm64, emulated on win-arm64. Each
// workflow leg's --x64/--arm64 flag decides what gets built, so an arm64
// artifact only exists once a leg stages an arm64 executor for it.
win: {
target: ["nsis"],
},
nsis: {
oneClick: true,
perMachine: false,
},
linux: {
category: "Development",
target: ["AppImage", "deb", "rpm"],
},
publish: {
provider: "github",
owner: "UsefulSoftwareCo",
repo: "executor",
},
};
export default config;