# Release Manifest: PrivateVoice Dictation 2.1.28 build 20260604.0049

## Package Type

- Type: Mac App Store release freeze / local App Store sandbox POC
- Platform: macOS arm64 and x86_64
- Signing: local code signing identity for POC only, not Apple App Store distribution signing
- Generated at: 2026-06-03T16:55:36Z
- Operator: Codex

## Source

- Repository: `/Users/ar/Projects/PrivateVoice`
- Branch: `codex/privatevoice-freeze-2.1.25`
- Commit: `9d3d275dca8e8dc442eb04434c8bd0fdad79bc04`
- Version: `2.1.28`
- Build: `20260604.0049`
- Tag: `v2.1.28-build20260604.0049`

## Scope

- Frozen code for Mac App Store release preparation.
- Updated all app metadata to `2.1.28` and build `20260604.0049`.
- Added Mac App Store `.pkg` build script:
  `privatevoice.src/scripts/build-macappstore-pkg-macos.sh`.
- Prepared App Store Connect metadata, privacy label recommendation, review notes, upload commands, and blocker list:
  `APP_STORE_CONNECT_SUBMISSION.md`.
- Built and verified local App Store sandbox POC DMGs for arm64 and x86_64 using the `appstore` Go build tag and App Sandbox entitlements.

## Build Commands

```bash
git diff --check
bash -n privatevoice.src/scripts/build-macappstore-pkg-macos.sh
npm run build
go test ./... -count=1
./privatevoice.src/scripts/build-macappstore-pkg-macos.sh arm64
./privatevoice.src/scripts/build-appstore-macos.sh arm64
./privatevoice.src/scripts/build-appstore-macos.sh x86_64
```

## Verification

- Version metadata scan for `2.1.28` and `20260604.0049`: PASS.
- `git diff --check`: PASS.
- `bash -n privatevoice.src/scripts/build-macappstore-pkg-macos.sh`: PASS.
- `npm run build`: PASS, with existing Svelte a11y warnings in `UpdateDialog.svelte` and `ToggleSwitch.svelte`.
- `go test ./... -count=1`: PASS.
- Mac App Store `.pkg` script preflight: BLOCKED as expected because Apple signing environment variables and certificates are not available locally.
- App Store sandbox POC build script for arm64: PASS.
- App Store sandbox POC build script for x86_64: PASS.
- App Store sandbox POC app `Info.plist` reports `CFBundleShortVersionString=2.1.28`, `CFBundleVersion=20260604.0049`, and `LSMinimumSystemVersion=13.4` for both arm64 and x86_64: PASS.
- App Store sandbox POC app resources include `en.lproj/InfoPlist.strings` and `zh-Hans.lproj/InfoPlist.strings` for both arm64 and x86_64: PASS.
- App Store sandbox POC x86_64 main binary reports `Mach-O 64-bit executable x86_64`: PASS.
- App Store sandbox POC entitlements include App Sandbox, audio input, user-selected read/write files, and network client: PASS.
- App Store sandbox POC app code signature verification in build script for both arm64 and x86_64: PASS.
- App Store sandbox POC DMG `hdiutil verify` for both arm64 and x86_64: PASS.
- DMG contents include `PrivateVoice Dictation.app` and `Applications -> /Applications` for both arm64 and x86_64: PASS.
- Copied release DMG SHA256 verification: PASS.

## Artifact

```text
Release/PrivateVoice-Dictation-2.1.28-build20260604.0049/PrivateVoice Dictation-2.1.28-build20260604.0049-arm64-appstore-sandbox-poc.dmg
Release/PrivateVoice-Dictation-2.1.28-build20260604.0049/PrivateVoice Dictation-2.1.28-build20260604.0049-x86_64-appstore-sandbox-poc.dmg
```

SHA256:

```text
fcef2154aab52224f55874ea865d6a08efe71a2d09768d7fbc8858d319a64024  PrivateVoice Dictation-2.1.28-build20260604.0049-arm64-appstore-sandbox-poc.dmg
899bf95f579455794f9cffbadc33d1e90dbba4b6fc1b3d237229115691373606  PrivateVoice Dictation-2.1.28-build20260604.0049-x86_64-appstore-sandbox-poc.dmg
```

## Mac App Store Upload Blocker

This machine does not currently have Apple App Store signing assets installed:

- Missing App Store app signing identity:
  `Apple Distribution: <Team> (<TeamID>)` or `3rd Party Mac Developer Application: <Team> (<TeamID>)`.
- Missing installer signing identity:
  `3rd Party Mac Developer Installer: <Team> (<TeamID>)`.
- Missing Mac App Store provisioning profile for bundle ID `com.privatevoice.input`.
- Missing App Store Connect upload credentials or Transporter session.

After those are available, run:

```bash
cd /Users/ar/Projects/PrivateVoice/privatevoice.src

PRIVATEVOICE_APPSTORE_APP_IDENTITY="Apple Distribution: <Team> (<TeamID>)" \
PRIVATEVOICE_APPSTORE_INSTALLER_IDENTITY="3rd Party Mac Developer Installer: <Team> (<TeamID>)" \
PRIVATEVOICE_APPSTORE_PROVISIONING_PROFILE="/absolute/path/to/profile.provisionprofile" \
  ./scripts/build-macappstore-pkg-macos.sh arm64
```

Expected upload package:

```text
/Users/ar/Projects/PrivateVoice/privatevoice.src/build/macappstore/arm64/PrivateVoice-Dictation-2.1.28-build20260604.0049-arm64-macappstore.pkg
/Users/ar/Projects/PrivateVoice/privatevoice.src/build/macappstore/x86_64/PrivateVoice-Dictation-2.1.28-build20260604.0049-x86_64-macappstore.pkg
```

## Known Notes

- The DMG in this folder is a local sandbox POC for QA and review preparation. It is not a Mac App Store upload package.
- The App Store upload artifact must be a signed `.pkg` produced after Apple signing assets are installed.
- Build logs include existing Svelte accessibility warnings in unrelated components.
- Build logs include the existing macOS deployment warning for `libonnxruntime.1.24.4.dylib`, which is built for macOS 14.0 while the App Store sandbox target remains macOS 13.4.