# 2026-06-05 Mac App Store quarantine xattr 修复

## 结论

- 版本: `2.1.28`
- 新 build: `20260605.0236`
- 源码 commit: `8cd205ee7e12a2b46d6beff6e5a6434c4862af24`
- 修复原因: Transporter/TestFlight validation failed 91109。
- 修复内容: 在 App Store 打包脚本中对 `.app` 递归执行 `xattr -cr`，并在 packaging 前断言不存在 `com.apple.quarantine`。

## 产物

- `/Users/ar/Desktop/PrivateVoice-26.0604上架/02-上传包/PrivateVoice-Dictation-2.1.28-build20260605.0236-universal-macappstore.pkg`
- `/Users/ar/Projects/PrivateVoice/X-运营资料/PrivateVoice-26.0604上架/02-上传包/PrivateVoice-Dictation-2.1.28-build20260605.0236-universal-macappstore.pkg`
- `/Users/ar/Projects/PrivateVoice/Release/PrivateVoice-Dictation-2.1.28-build20260605.0236/PrivateVoice-Dictation-2.1.28-build20260605.0236-universal-macappstore.pkg`

SHA256:

```text
a0d01edf950ea69892b14c0f9cd989fc31d6927be4b26d31a4168526fdddd190  PrivateVoice-Dictation-2.1.28-build20260605.0236-universal-macappstore.pkg
```

## 验证

- `go test ./internal/startup ./internal/model ./internal/modelselection`: PASS
- `bash -n privatevoice.src/scripts/build-macappstore-pkg-macos.sh`: PASS
- arm64 App Store signed package build: PASS
- x86_64 App Store signed package build: PASS
- universal app merge and re-sign: PASS
- `codesign -vvv --deep --strict` universal app: PASS
- `pkgutil --check-signature` universal pkg: PASS
- 展开 pkg 后读取 `Info.plist`，`LSApplicationCategoryType=public.app-category.productivity`: PASS
- 展开 pkg 后读取签名 entitlements，`com.apple.application-identifier=CR3J54M8BQ.com.shanghai3168.privatevoicedictation`: PASS
- 展开 pkg 后检查 `com.apple.quarantine`: PASS，无输出
- 三处 `.pkg` SHA256 一致: PASS

## 上传提示

请在 Transporter 中上传 `20260605.0236` 这个新包，不要再上传 `20260605.0216`。