project.yml

name: graffito
options:
  bundleIdPrefix: com.objsal
  createIntermediateGroups: true
settings:
  base:
    MARKETING_VERSION: "1.0"
    CURRENT_PROJECT_VERSION: "66"
targets:
  graffito:
    type: application
    platform: iOS
    deploymentTarget: "16.0"
    settings:
      base:
        PRODUCT_BUNDLE_IDENTIFIER: com.byteapps.graffito
        PRODUCT_NAME: graffito
        EXECUTABLE_NAME: graffito
        CODE_SIGN_STYLE: Automatic
        # Set via env at `xcodegen generate` time (not committed) — see
        # ../private/graffito/signing.env for the local value.
        DEVELOPMENT_TEAM: ${DEVELOPMENT_TEAM}
        GENERATE_INFOPLIST_FILE: NO
        # Single-size 1024px icon in Assets.xcassets/AppIcon.appiconset,
        # rendered from the full-bleed variant of assets/icon/icon.svg
        # (iOS applies its own corner mask).
        ASSETCATALOG_COMPILER_APPICON_NAME: AppIcon
        # iCloud-contacts feature (2026-07-20): NSUbiquitousKeyValueStore
        # needs the ubiquity-kvstore-identifier capability — same identifier
        # as the macOS target (graffito-mac.entitlements) so the two
        # platforms share one KV store.
        CODE_SIGN_ENTITLEMENTS: graffito-ios.entitlements
        # iPhone ONLY (Sal 2026-07-26). Without this xcodegen defaults an iOS
        # app to "1,2" (iPhone + iPad), and App Store submission then demands a
        # full iPad Pro 12.9" screenshot set for a UI that is phone-shaped and
        # portrait-only anyway (STATE_ERROR.SCREENSHOT_REQUIRED
        # .APP_IPAD_PRO_3GEN_129). Widening this back to iPad means shipping
        # iPad screenshots with it.
        TARGETED_DEVICE_FAMILY: "1"
    info:
      path: Info.plist
      properties:
        CFBundleDisplayName: Graffito
        CFBundleExecutable: graffito
        # xcodegen regenerates Info.plist from these properties on every
        # `generate` — without an explicit entry here it defaults
        # CFBundleVersion to "1" every time, silently discarding
        # settings.base.CURRENT_PROJECT_VERSION above (which nothing else
        # references). Point it at that setting so bumping it up top is the
        # one place that actually takes effect.
        CFBundleVersion: "$(CURRENT_PROJECT_VERSION)"
        NSCameraUsageDescription: "Scan QR codes (keys, addresses, PSBTs, sync bundles)."
        NSFaceIDUsageDescription: "Unlock your notes key to reveal your backup."
        # Dark launch background (matches Pal.bg) so the cold-start flash isn't
        # white — the colour lives in Assets.xcassets/LaunchBackground.colorset.
        UILaunchScreen:
          UIColorName: LaunchBackground
        ITSAppUsesNonExemptEncryption: false
        # Portrait-only, phone-shaped UI. UIRequiresFullScreen opts out of iPad
        # multitasking so a single-orientation set is allowed (App Store
        # validation rejects portrait-only universal apps otherwise — code 90474).
        UIRequiresFullScreen: true
        UISupportedInterfaceOrientations:
          - UIInterfaceOrientationPortrait
    sources:
      - Assets.xcassets
      # Required-reason API declarations (mandatory for iOS since 2024-05-01).
      # Must be bundled at the .app root, which is what a plain source entry
      # does. Shared verbatim with the macOS target below.
      - PrivacyInfo.xcprivacy
    postCompileScripts:
      - name: Build Rust binary with cargo
        script: |
          bash "${SRCROOT}/build_ios.bash" graffito
        outputFiles:
          - $(TARGET_BUILD_DIR)/$(EXECUTABLE_PATH)

  # macOS Mac App Store build. Same bundle id as iOS → Universal Purchase.
  # App-Sandboxed (graffito-mac.entitlements) and Mac-App-Store-signed.
  # The Rust bin is built (universal, per $ARCHS) and code-signed by Xcode
  # via the build_mac.bash post-compile step — mirrors build_ios.bash.
  graffito-mac:
    type: application
    platform: macOS
    deploymentTarget: "12.0"
    settings:
      base:
        PRODUCT_BUNDLE_IDENTIFIER: com.byteapps.graffito
        # Bundle is "Graffito.app" (user-visible in Finder/switcher). The
        # Unix executable stays graffito so build_mac.bash keeps copying
        # the Rust binary to Contents/MacOS/graffito.
        PRODUCT_NAME: Graffito
        EXECUTABLE_NAME: graffito
        CODE_SIGN_STYLE: Automatic
        DEVELOPMENT_TEAM: ${DEVELOPMENT_TEAM}
        GENERATE_INFOPLIST_FILE: NO
        # Separate mac-idiom icon set (16–512 @1x/@2x) so the iOS AppIcon
        # (single 1024, ios platform) is untouched.
        ASSETCATALOG_COMPILER_APPICON_NAME: AppIcon-mac
        # App Sandbox + camera/files/network/keychain-access-groups.
        CODE_SIGN_ENTITLEMENTS: graffito-mac.entitlements
        # Hardened Runtime (audit M5). App Sandbox and Hardened Runtime cover
        # different things: the sandbox limits what this process may reach,
        # Hardened Runtime stops another process running as the same user from
        # attaching a debugger or injecting a dylib INTO it. That matters here
        # because the notes key is cached in memory for the whole session
        # (there is no idle re-lock yet -- audit M4), so process memory is a
        # standing target. Not required for the Mac App Store, but free: the
        # app loads no third-party plug-ins and needs no JIT (femtovg renders
        # through OpenGL), so none of the com.apple.security.cs.* relaxations
        # are needed -- and none should be added without re-reading M5.
        ENABLE_HARDENED_RUNTIME: YES
    info:
      path: Info-mac.plist
      properties:
        CFBundleDisplayName: Graffito
        CFBundleName: Graffito
        CFBundleExecutable: graffito
        CFBundlePackageType: APPL
        # Same trap as the iOS target above: without this entry xcodegen
        # defaults CFBundleVersion to "1" on every generate — which is how
        # the first org-account macOS upload went out as "build 1" while
        # CURRENT_PROJECT_VERSION said 61. Track the shared setting so one
        # bump moves both platforms.
        CFBundleVersion: "$(CURRENT_PROJECT_VERSION)"
        NSCameraUsageDescription: "Scan QR codes (keys, addresses, PSBTs, sync bundles)."
        NSHighResolutionCapable: true
        ITSAppUsesNonExemptEncryption: false
        # Mac App Store requires an app category; mirrors the iOS PRODUCTIVITY listing.
        LSApplicationCategoryType: public.app-category.productivity
    sources:
      - Assets.xcassets
      # Not enforced on macOS, but shipped for parity so the two platforms make
      # the same privacy claims from one file (Contents/Resources here).
      - PrivacyInfo.xcprivacy
    postCompileScripts:
      - name: Build Rust binary with cargo
        script: |
          bash "${SRCROOT}/build_mac.bash" graffito
        outputFiles:
          - $(TARGET_BUILD_DIR)/$(EXECUTABLE_PATH)