build-app-local

Building a universal macOS binary requires compiling Rust sidecars for both aarch64-apple-darwin and x86_64-apple-darwin targets, then running pnpm tauri build with the universal-apple-darwin target to produce a single fat binary that runs natively on both architectures.

Local macOS app notarization requires Apple signing and notarization environment variables to be configured before starting the build. These credentials allow xcrun notarytool to submit your DMG to Apple and staple the resulting notarization ticket to the distributed application.

Validating a notarized DMG involves stapling the notarization ticket using xcrun stapler and then running spctl assessment to verify Gatekeeper acceptance. The workflow also checks architecture correctness to ensure the universal binary is properly structured for distribution.

Cleaning stale artifacts before a Tauri universal build involves removing old bundle and dist output directories. This controlled cleanup reduces mismatched artifacts and prevents works on my machine issues by ensuring the notarized DMG is built from a deterministic local state.

A Tauri macOS build fails Gatekeeper validation because Tauri skips DMG notarization during its build process. You must manually notarize the DMG using xcrun notarytool, staple the resulting ticket, and run spctl validation to ensure Gatekeeper accepts the distributed application.