#!/bin/bash
# Baut Spike D und signiert ihn mit der App-Group-Entitlement.
set -euo pipefail

cd "$(dirname "$0")/.."
export DEVELOPER_DIR=/Applications/Xcode.app/Contents/Developer

OUT=/tmp/appgroup-probe
ENT=/tmp/appgroup-probe.entitlements
IDENTITY="${IDENTITY:-Apple Development: guidoschmit@guidoschmit.com (F586278766)}"

cat > "$ENT" <<'PLIST'
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>com.apple.security.application-groups</key>
    <array>
        <string>PP34X97WS3.group.com.scarriffleservices.calendarr</string>
    </array>
</dict>
</plist>
PLIST

echo "→ kompiliere"
xcrun swiftc -O Spikes/appgroup-probe.swift -o "$OUT"

echo "→ signiere mit: $IDENTITY"
codesign --force --options runtime --entitlements "$ENT" --sign "$IDENTITY" "$OUT"

echo "→ Signatur:"
codesign -d --entitlements - "$OUT" 2>&1 | tail -n +2

echo
echo "→ Lauf:"
"$OUT"