---

name: notarize-mac description: >- Build and verify a signed, notarized macOS app or DMG using the project's existing notarization automation. Use when the user asks to notarize a Mac build, produce a release DMG, or verify Gatekeeper.

Notarize macOS Build

Use the project's existing notarization automation. Don't invent a new signing pipeline or expose credentials.

Procedure

1. Confirm the checkout and branch. Default to a clean, current default branch.
2. Locate the existing notarization/release script (e.g. a notarize-*-installer.sh or the release script the project already ships):
   • use a path the user supplies first;
   • otherwise search the repo and nearby release/notary checkouts;
   • if none exists, ask for its location instead of recreating it.
3. Run the script from the environment it expects.
4. Preserve its signing identity, App Store Connect key handling, artifact naming, and notarization flow.
5. Verify the resulting artifact with the script's checks or spctl.
6. Report the artifact path, size, notarization result, and Gatekeeper result.

Never print private key contents, signing credentials, or secret values.