Makefile

# MAC OS ONLY!
#
# This Makefile is only there to help building the MacOS DMG files, codesign them, notarize and staple
# and verify all of this. If you are using a normal, sane OS, you can ignore this Makefile
# and do the regular CMake process. Checkout the .github/workflows files for the authoritative way to build
# for your platform
#

BUILD_DIR?=.builds/universal_again
BUILD_TYPE?=Debug

# Determine the version the same way cmake does
VERSION=$(shell cmake -P The-Orm/gitversion.cmake 2>&1 >/dev/null)

# Make sure to setup a Python that matches the universal build/fat binary or the architecture build
# This can be really messy if you have - like me - multiple versions of Python installed on the Mac.
# Closely watch the build output to detect and inconsistencies during configuration, linking, or bundle fixing!
# Worst case, uninstall all Pythons except the one you want to use.
PYTHON_SOURCE=/Library/Frameworks/Python.framework/Versions/3.12

# Setup variables for the various build artifacts and their names
KNOBKRAFT=KnobKraft_Orm-$(VERSION)-Darwin
KNOBKRAFT_APP=$(BUILD_DIR)/The-Orm/KnobKraftOrm.app
KNOBKRAFT_DMG=$(BUILD_DIR)/$(KNOBKRAFT).dmg
KNOBKRAFT_MOUNT=/Volumes/$(KNOBKRAFT)
KNOBKRAFT_MOUNTED_APP=$(KNOBKRAFT_MOUNT)/KnobKraftOrm.app

# Some more paths
PYTHON_TO_USE=$(PYTHON_SOURCE)/bin/python3


all: configure build sign-dmg verify-signed

apple: notarize staple verify-notarization

configure:
	@echo "Configuring build for type $(BUILD_TYPE) in directory $(BUILD_DIR), using Python from $(PYTHON_TO_USE)"
	cmake -S . -B $(BUILD_DIR) -DCMAKE_BUILD_TYPE=$(BUILD_TYPE) -DPYTHON_EXECUTABLE=$(PYTHON_TO_USE) -DCODESIGN_CERTIFICATE_NAME="$(APPLE_DEVELOPER_IDENTITY)"

.PHONY: build
build $(KNOBKRAFT_DMG):
	cmake --build $(BUILD_DIR) --target package --parallel $(shell sysctl -n hw.ncpu)

$(KNOBKRAFT_MOUNT): $(KNOBKRAFT_DMG)
	hdiutil detach $@ ; true
	yes | PAGER=cat hdiutil attach $<

attach: $(KNOBKRAFT_MOUNT)

detach: $(KNOBKRAFT_MOUNT)/KnobKraftOrm.app
	hdiutil detach $(KNOBKRAFT_MOUNT)

app-signed: attach
	codesign --verify -v --strict $(KNOBKRAFT_MOUNTED_APP)

binary-signed: $(KNOBKRAFT_APP)
	codesign --verify -v --strict $(KNOBKRAFT_APP)

dmg-signed: $(KNOBKRAFT_DMG)
	codesign --verify -v --strict $<

verify-signed: binary-signed app-signed dmg-signed

sign-dmg: $(KNOBKRAFT_DMG)
	codesign --force --verbose=2 --sign "$(TEAM_ID)" $<

show-dmg-signature: $(KNOBKRAFT_DMG)
	codesign -dvvv $<

.PHONY: notarize
# https://developer.apple.com/documentation/security/notarizing-macos-software-before-distribution?language=objc
# https://scriptingosx.com/2021/07/notarize-a-command-line-tool-with-notarytool/
# https://melatonin.dev/blog/how-to-code-sign-and-notarize-macos-audio-plugins-in-ci/ (https://github.com/sudara/pamplejuce/tree/main)
notarize: $(KNOBKRAFT_DMG)
	@xcrun notarytool submit $< \
	    --team-id $(TEAM_ID) \
	    --apple-id $(APPLE_ID) \
		--password $(APPLE_APP_SPECIFIC_PASSWORD) \
 		--wait

staple: $(KNOBKRAFT_DMG)
	xcrun stapler staple $<

verify-notarization: $(KNOBKRAFT_DMG)
	xcrun spctl --assess --type open --context context:primary-signature --ignore-cache --verbose=2 $<
	xcrun spctl --assess --type install --ignore-cache --verbose=2 $<

run-app: $(KNOBKRAFT_APP)
	open $<

run-dmg: attach
	open $(KNOBKRAFT_MOUNTED_APP)

debug-codesign:
	cmake -DPYTHON_SOURCE=$(PYTHON_SOURCE) -DSIGN_DIRECTORY=`pwd`/$(KNOBKRAFT_APP) -DENTITLEMENTS_FILE=./The-Orm/Codesign.entitlements -DCODESIGN_CERTIFICATE_NAME="$(CODESIGN_CERTIFICATE_NAME)" -P cmake/codesign.cmake


kill:
	killall KnobKraftOrm

realclean:
	rm -rf $(BUILD_DIR)