114 lines
4.2 KiB
Bash
Executable File
114 lines
4.2 KiB
Bash
Executable File
#!/bin/bash
|
||
# ============================================================
|
||
# macOS 开发环境权限设置脚本
|
||
# 用途：为 Electron 开发模式配置摄像头/麦克风权限
|
||
# 使用：npm run setup:macos
|
||
# ============================================================
|
||
|
||
set -e
|
||
|
||
E="node_modules/electron/dist/Electron.app"
|
||
FW="$E/Contents/Frameworks"
|
||
ELECTRON_PLIST="$E/Contents/Info.plist"
|
||
ENTITLEMENTS_FILE="assets/entitlements.plist"
|
||
BUNDLE_ID="com.github.Electron"
|
||
HELPER_BUNDLE_ID="com.github.Electron.helper"
|
||
|
||
echo "=========================================="
|
||
echo " CamTalk macOS 开发权限配置"
|
||
echo "=========================================="
|
||
|
||
# 检查是否在正确的目录
|
||
if [ ! -f "$ELECTRON_PLIST" ]; then
|
||
echo "[ERROR] 未找到 Electron: $ELECTRON_PLIST"
|
||
echo " 请在 desktop/ 目录下运行此脚本"
|
||
exit 1
|
||
fi
|
||
|
||
echo ""
|
||
echo "[1/4] 检查 Info.plist 中的权限描述..."
|
||
|
||
if /usr/libexec/PlistBuddy -c "Print :NSCameraUsageDescription" "$ELECTRON_PLIST" >/dev/null 2>&1; then
|
||
echo " NSCameraUsageDescription 已存在"
|
||
else
|
||
echo " 添加 NSCameraUsageDescription..."
|
||
/usr/libexec/PlistBuddy -c "Add :NSCameraUsageDescription string 'CamTalk 需要使用摄像头进行实时 AI 视觉对话'" "$ELECTRON_PLIST"
|
||
fi
|
||
|
||
if /usr/libexec/PlistBuddy -c "Print :NSMicrophoneUsageDescription" "$ELECTRON_PLIST" >/dev/null 2>&1; then
|
||
echo " NSMicrophoneUsageDescription 已存在"
|
||
else
|
||
echo " 添加 NSMicrophoneUsageDescription..."
|
||
/usr/libexec/PlistBuddy -c "Add :NSMicrophoneUsageDescription string 'CamTalk 需要使用麦克风进行语音对话'" "$ELECTRON_PLIST"
|
||
fi
|
||
|
||
echo ""
|
||
echo "[2/4] 对 Electron 所有组件进行签名（含 entitlements + hardened runtime）..."
|
||
|
||
if [ -f "$ENTITLEMENTS_FILE" ] && [ -d "$E" ]; then
|
||
# 先移除所有签名
|
||
echo " 移除旧签名..."
|
||
codesign --remove-signature "$E" 2>/dev/null || true
|
||
for fw in "$FW"/*.framework; do
|
||
codesign --remove-signature "$fw" 2>/dev/null || true
|
||
done
|
||
for h in "$FW"/*.app; do
|
||
codesign --remove-signature "$h" 2>/dev/null || true
|
||
done
|
||
|
||
# 签名所有 Framework
|
||
echo " 签名 Frameworks..."
|
||
for fw in "$FW"/*.framework; do
|
||
codesign --force --sign - --entitlements "$ENTITLEMENTS_FILE" --options runtime "$fw" 2>/dev/null
|
||
done
|
||
|
||
# 签名所有 Helper Apps（关键：renderer helper 需要 camera entitlement）
|
||
echo " 签名 Helper Apps..."
|
||
for h in "$FW"/*.app; do
|
||
codesign --force --sign - --entitlements "$ENTITLEMENTS_FILE" --options runtime "$h" 2>/dev/null
|
||
done
|
||
|
||
# 签名主 App
|
||
echo " 签名主 App..."
|
||
codesign --force --sign - --entitlements "$ENTITLEMENTS_FILE" --options runtime "$E" 2>/dev/null
|
||
|
||
# 验证
|
||
if codesign --verify --deep --strict "$E" 2>/dev/null; then
|
||
echo " ✅ 签名验证通过"
|
||
else
|
||
echo " ⚠️ 签名验证有警告（通常不影响运行）"
|
||
fi
|
||
else
|
||
echo " 跳过签名（文件不存在）"
|
||
fi
|
||
|
||
echo ""
|
||
echo "[3/4] 重置 TCC 权限..."
|
||
echo " 清除旧的摄像头/麦克风权限记录，使下次启动时重新请求。"
|
||
|
||
tccutil reset Camera "$BUNDLE_ID" 2>/dev/null && echo " Camera ($BUNDLE_ID) 已重置" || true
|
||
tccutil reset Microphone "$BUNDLE_ID" 2>/dev/null && echo " Microphone ($BUNDLE_ID) 已重置" || true
|
||
tccutil reset Camera "$HELPER_BUNDLE_ID" 2>/dev/null && echo " Camera ($HELPER_BUNDLE_ID) 已重置" || true
|
||
tccutil reset Microphone "$HELPER_BUNDLE_ID" 2>/dev/null && echo " Microphone ($HELPER_BUNDLE_ID) 已重置" || true
|
||
|
||
echo ""
|
||
echo "[4/4] 验证签名状态..."
|
||
echo " Main App: $(codesign -dvvv "$E" 2>&1 | grep '^flags=' | head -1)"
|
||
RENDERER_HELPER="$FW/Electron Helper (Renderer).app"
|
||
if [ -d "$RENDERER_HELPER" ]; then
|
||
echo " Renderer Helper: $(codesign -dvvv "$RENDERER_HELPER" 2>&1 | grep '^flags=' | head -1)"
|
||
fi
|
||
|
||
echo ""
|
||
echo "=========================================="
|
||
echo " 配置完成！"
|
||
echo "=========================================="
|
||
echo ""
|
||
echo "下一步："
|
||
echo " npm run dev"
|
||
echo ""
|
||
echo "启动后应用会自动请求摄像头/麦克风权限。"
|
||
echo "如果 macOS 系统弹窗未出现，应用会弹出引导对话框，"
|
||
echo "点击按钮一键打开系统设置，授权后应用会自动检测并启用摄像头。"
|
||
echo ""
|