fix(ci): fail fast if Developer ID Application cert not found

The identity grep now errors immediately with a diagnostic listing
of available identities instead of silently falling back to an
Apple Development certificate that notarization rejects.

Author: ualtinok

.github/workflows/dashboard-release.yml

@@ -74,8 +74,14 @@ jobs:
           security set-key-partition-list -S apple-tool:,apple: -k "$KEYCHAIN_PASSWORD" $KEYCHAIN_PATH
           security list-keychain -d user -s $KEYCHAIN_PATH
 
-          # Extract signing identity
+          # Extract signing identity — MUST be "Developer ID Application", not "Apple Development"
           IDENTITY=$(security find-identity -v -p codesigning $KEYCHAIN_PATH | grep "Developer ID Application" | head -1 | sed 's/.*"\(.*\)".*/\1/')
+          if [ -z "$IDENTITY" ]; then
+            echo "::error::No 'Developer ID Application' certificate found in keychain. Check APPLE_CERTIFICATE secret."
+            security find-identity -v -p codesigning $KEYCHAIN_PATH
+            exit 1
+          fi
+          echo "Found signing identity: $IDENTITY"
           echo "APPLE_SIGNING_IDENTITY=$IDENTITY" >> $GITHUB_ENV
 
       # macOS: write App Store Connect API key for notarization

packages/dashboard/src-tauri/Cargo.lock

@@ -13,7 +13,6 @@ tauri-build = { version = "2", features = [] }
 
 [dependencies]
 tauri = { version = "2", features = ["tray-icon"] }
-tauri-plugin-shell = "2"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 rusqlite = { version = "0.31", features = ["bundled"] }
@@ -24,6 +23,7 @@ regex = "1"
 lazy_static = "1"
 tokio = { version = "1", features = ["fs", "io-util", "sync", "macros"] }
 reqwest = { version = "0.12", features = ["json"] }
+md5 = "0.7"
 tauri-plugin-updater = "2"
 tauri-plugin-process = "2"
 tauri-plugin-dialog = "2"

packages/dashboard/src-tauri/Cargo.toml

@@ -5,7 +5,6 @@
   "windows": ["*"],
   "permissions": [
     "core:default",
-    "shell:default",
     "updater:default",
     "dialog:default",
     "process:default"

packages/dashboard/src-tauri/capabilities/default.json

@@ -1 +1 @@
-{"default":{"identifier":"default","description":"Capability for the main window","local":true,"windows":["*"],"permissions":["core:default","shell:default","updater:default","dialog:default","process:default"]}}
+{"default":{"identifier":"default","description":"Capability for the main window","local":true,"windows":["*"],"permissions":["core:default","updater:default","dialog:default","process:default"]}}