# Release Manifest: PrivateVoice Dictation 2.1.28 build 20260605.0216

## Package Type

- Type: Mac App Store signed universal upload package
- Platform: macOS universal, `arm64` + `x86_64`
- Signing: Apple App Store distribution signing with embedded Mac App Store provisioning profile
- Generated at: 2026-06-04T18:22:31Z
- Operator: Codex

## Source

- Repository: `/Users/ar/Projects/PrivateVoice`
- Branch: `codex/privatevoice-freeze-2.1.25`
- Build source commit: `cfe4d647b4d7cc1ae41d7e193d45d546ae15b244`
- Version: `2.1.28`
- Build: `20260605.0216`
- Bundle ID: `com.shanghai3168.privatevoicedictation`
- App Store category UTI: `public.app-category.productivity`

## Scope

- Fixed Transporter/TestFlight validation failure 90886.
- The previous package embedded a provisioning profile with `com.apple.application-identifier`, but the signed app entitlements did not include the same identifier.
- Updated `privatevoice.src/scripts/build-macappstore-pkg-macos.sh` to merge profile entitlements into the signing entitlements:
  - `com.apple.application-identifier`
  - `com.apple.developer.team-identifier`
  - `keychain-access-groups`
- Rebuilt the Mac App Store upload package with a new build number.

## Build Commands

```bash
git diff --check -- privatevoice.src/scripts/build-macappstore-pkg-macos.sh privatevoice.src/app.go privatevoice.src/build/darwin/Info.plist
bash -n privatevoice.src/scripts/build-macappstore-pkg-macos.sh
go test ./internal/startup ./internal/model ./internal/modelselection
./privatevoice.src/scripts/build-macappstore-pkg-macos.sh arm64
./privatevoice.src/scripts/build-macappstore-pkg-macos.sh x86_64
```

The final universal app was assembled from the signed arm64 and x86_64 app bundles with `lipo`, then re-signed with the merged App Store entitlements and packaged with `productbuild`.

## Verification

- `go test ./internal/startup ./internal/model ./internal/modelselection`: PASS.
- `bash -n privatevoice.src/scripts/build-macappstore-pkg-macos.sh`: PASS.
- `npm run build`: PASS, with existing Svelte a11y warnings in `UpdateDialog.svelte` and `ToggleSwitch.svelte`.
- arm64 Mac App Store package build and signature verification: PASS.
- x86_64 Mac App Store package build and signature verification: PASS.
- Universal app executable contains `arm64` and `x86_64`: PASS.
- Bundled `libsherpa-onnx-c-api.dylib` contains `arm64` and `x86_64`: PASS.
- Bundled `libonnxruntime.1.24.4.dylib` contains `arm64` and `x86_64`: PASS.
- Universal app `codesign -vvv --deep --strict`: PASS.
- Universal package `pkgutil --check-signature`: PASS.
- Expanded package app `Info.plist` contains `CFBundleVersion=20260605.0216`: PASS.
- Expanded package app `Info.plist` contains `LSApplicationCategoryType=public.app-category.productivity`: PASS.
- Expanded package app signed entitlements contain `com.apple.application-identifier=CR3J54M8BQ.com.shanghai3168.privatevoicedictation`: PASS.
- Expanded package app signed entitlements contain `com.apple.developer.team-identifier=CR3J54M8BQ`: PASS.
- Expanded package app signed entitlements contain `com.apple.security.app-sandbox=true`: PASS.
- Release, desktop, and operations package SHA256 match: PASS.

## Artifact

```text
Release/PrivateVoice-Dictation-2.1.28-build20260605.0216/PrivateVoice-Dictation-2.1.28-build20260605.0216-universal-macappstore.pkg
/Users/ar/Desktop/PrivateVoice-26.0604上架/02-上传包/PrivateVoice-Dictation-2.1.28-build20260605.0216-universal-macappstore.pkg
/Users/ar/Projects/PrivateVoice/X-运营资料/PrivateVoice-26.0604上架/02-上传包/PrivateVoice-Dictation-2.1.28-build20260605.0216-universal-macappstore.pkg
```

SHA256:

```text
9cb8a5806217219edec49cb88118803c1875cb57cd807335bbe2664e52950424  PrivateVoice-Dictation-2.1.28-build20260605.0216-universal-macappstore.pkg
```

## Upload Note

Use the `20260605.0216` package for Transporter. Do not upload the previous `20260604.2353` package, because it is missing `com.apple.application-identifier` in the signed app entitlements.