# Vendored `rcodesign` (apple-codesign)

Used by CI on Linux to **seal-sign** macOS **client** artifacts produced on Linux:

- Electron `.app` bundles (forge `postPackage` → `scripts/sign-macos-app.cjs`)

so Gatekeeper does not report them as “damaged / move to Trash”.

PearData **server** binaries are Linux-only and do not need macOS codesign.

| Path | Binary |
|------|--------|
| `linux-x64/rcodesign` | x86_64 musl (ubuntu-latest runners) |
| `linux-arm64/rcodesign` | aarch64 musl |

Upstream: [indygreg/apple-platform-rs](https://github.com/indygreg/apple-platform-rs)  
Release tag: `apple-codesign/0.29.0`

Do **not** re-download in CI — the rolling release workflow installs from these paths.