# Copy values into your shell / CI secrets before `npm run dist -- --mac`. # Do not commit real secrets. Community builds stay ad-hoc without these. # Enable Developer ID signing (required unless CSC_LINK / CSC_NAME is already set) MEDIA_CHIPS_MAC_SIGN=1 # Option A — certificate in Keychain (local Mac after importing .p12) # CSC_NAME=Developer ID Application: Your Name (TEAMID) # Option B — certificate as base64 .p12 (CI) # CSC_LINK=...base64 of Certificates.p12... # CSC_KEY_PASSWORD=... # Notarization — pick ONE auth method # Method 1 (recommended): App Store Connect API key # APPLE_API_KEY=/absolute/path/to/AuthKey_XXXXXXXXXX.p8 # APPLE_API_KEY_ID=XXXXXXXXXX # APPLE_API_ISSUER=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx # Method 2: Apple ID + app-specific password # APPLE_ID=you@example.com # APPLE_APP_SPECIFIC_PASSWORD=xxxx-xxxx-xxxx-xxxx # APPLE_TEAM_ID=XXXXXXXXXX