# PrivateVoice Dictation 2.1.28 build 20260605.0353

- Type: Mac App Store signed universal upload package
- Platform: macOS universal, `arm64` + `x86_64`
- Source commit: `82ce4aa571dfa74032d4697984cc932257cfa35b`
- Source tag: `v2.1.28-build20260605.0353-appstore-upload`
- Branch: `codex/privatevoice-freeze-2.1.25`
- Created: 2026-06-05 04:07 HKT

## Purpose

This build replaces `20260605.0236` after local package inspection showed macOS provenance metadata being encoded into AppleDouble payload entries and after the App Store/TestFlight `91109` quarantine failure. The hard App Store blocker is `com.apple.quarantine`; this build verifies the final expanded package has no quarantine extended attribute.

## Build Inputs

- Bundle ID: `com.shanghai3168.privatevoicedictation`
- Version: `2.1.28`
- Build: `20260605.0353`
- Category: `public.app-category.productivity`
- Team ID: `CR3J54M8BQ`
- App signing identity: `0D7D5484FDE4EC1CA2C9225F1E71E65A256A1E7C`
- Installer signing identity: `3rd Party Mac Developer Installer: Hainan Wanxing Technology Co., Ltd. (CR3J54M8BQ)`
- Provisioning profile: `X-运营资料/PrivateVoice-26.0604上架/01-证书/PrivateVoice_Dictation_Mac_App_Store.provisionprofile`

## Commands

```bash
bash -n privatevoice.src/scripts/build-macappstore-pkg-macos.sh
git diff --check -- privatevoice.src/scripts/build-macappstore-pkg-macos.sh privatevoice.src/app.go privatevoice.src/build/darwin/Info.plist
go test ./internal/startup ./internal/model ./internal/modelselection

PRIVATEVOICE_MACAPPSTORE_BUILD_ROOT=/Users/ar/Projects/PrivateVoice/privatevoice.src/build/macappstore-final-20260605.0353 \
  ./privatevoice.src/scripts/build-macappstore-pkg-macos.sh arm64

PRIVATEVOICE_MACAPPSTORE_BUILD_ROOT=/Users/ar/Projects/PrivateVoice/privatevoice.src/build/macappstore-final-20260605.0353 \
  ./privatevoice.src/scripts/build-macappstore-pkg-macos.sh x86_64
```

The final universal app was assembled from the signed arm64 and x86_64 app bundles with `lipo`, then re-signed with the App Store entitlements and packaged with `productbuild`.

## Verification

- `bash -n privatevoice.src/scripts/build-macappstore-pkg-macos.sh`: PASS
- `git diff --check`: PASS
- `go test ./internal/startup ./internal/model ./internal/modelselection`: PASS
- arm64 App Store package build: PASS
- x86_64 App Store package build: PASS
- universal app merge and re-sign: PASS
- `codesign -vvv --deep --strict` universal app: PASS
- `pkgutil --check-signature` universal pkg: PASS
- Final expanded desktop pkg has no `com.apple.quarantine`: PASS
- Bundle ID: `com.shanghai3168.privatevoicedictation`
- `CFBundleShortVersionString`: `2.1.28`
- `CFBundleVersion`: `20260605.0353`
- `LSApplicationCategoryType`: `public.app-category.productivity`
- signed `com.apple.application-identifier`: `CR3J54M8BQ.com.shanghai3168.privatevoicedictation`
- signed `com.apple.developer.team-identifier`: `CR3J54M8BQ`
- app executable: universal `x86_64 + arm64`
- `libsherpa-onnx-c-api.dylib`: universal `x86_64 + arm64`
- `libonnxruntime.1.24.4.dylib`: universal `x86_64 + arm64`

## Artifacts

```text
Release/PrivateVoice-Dictation-2.1.28-build20260605.0353/PrivateVoice-Dictation-2.1.28-build20260605.0353-universal-macappstore.pkg
/Users/ar/Desktop/PrivateVoice-26.0604上架/02-上传包/PrivateVoice-Dictation-2.1.28-build20260605.0353-universal-macappstore.pkg
/Users/ar/Projects/PrivateVoice/X-运营资料/PrivateVoice-26.0604上架/02-上传包/PrivateVoice-Dictation-2.1.28-build20260605.0353-universal-macappstore.pkg
```

## SHA256

```text
2d0e4fa7b79b70cc771086bbb124329fd4bb923849061f441d03b7391074d4cc  PrivateVoice-Dictation-2.1.28-build20260605.0353-universal-macappstore.pkg
```

## Notes

- Do not upload `20260605.0236` if this replacement build is available.
- macOS `com.apple.provenance` may appear as AppleDouble `._*` entries in `pkgutil --payload-files`; do not treat that alone as the `91109` failure. The required rejection check is that the expanded final pkg contains no `com.apple.quarantine`.