From 5c29ddaf235118687a6e78d75986a63fa16f89ca Mon Sep 17 00:00:00 2001
From: Macbook <macbook@Macbookui-MacBookPro.local>
Date: Sun, 14 Jun 2026 11:43:16 +0900
Subject: [PATCH] fix: desktop updater signing in non-interactive CI

Use --ci for key generation and pass empty password to tauri signer sign
so Jenkins/SSH builds can sign updater bundles without a TTY.

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 scripts/prepare-tauri-build.sh        | 1 +
 scripts/publish-desktop-update.sh     | 2 +-
 scripts/setup-desktop-updater-keys.sh | 2 +-
 3 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/scripts/prepare-tauri-build.sh b/scripts/prepare-tauri-build.sh
index 1f2905e..fd451b3 100755
--- a/scripts/prepare-tauri-build.sh
+++ b/scripts/prepare-tauri-build.sh
@@ -38,6 +38,7 @@ console.log('[prepare-tauri-build] createUpdaterArtifacts=' + enable);
 
 if [[ "$enable" == "true" ]]; then
   export TAURI_SIGNING_PRIVATE_KEY="$(tr -d '\n\r' < "$KEY_PATH")"
+  export TAURI_SIGNING_PRIVATE_KEY_PASSWORD="${TAURI_SIGNING_PRIVATE_KEY_PASSWORD-}"
   echo "[prepare-tauri-build] updater signing enabled"
 else
   unset TAURI_SIGNING_PRIVATE_KEY 2>/dev/null || true
diff --git a/scripts/publish-desktop-update.sh b/scripts/publish-desktop-update.sh
index 956dcb4..2572e90 100755
--- a/scripts/publish-desktop-update.sh
+++ b/scripts/publish-desktop-update.sh
@@ -52,7 +52,7 @@ if [[ -f "$KEY_PATH" ]]; then
     [[ -f "$bundle" ]] || continue
     [[ "$bundle" == *.sig ]] && continue
     log "Signing $(basename "$bundle")"
-    (cd "$DESKTOP_DIR" && npx tauri signer sign -f "$KEY_PATH" "$bundle")
+    (cd "$DESKTOP_DIR" && npx tauri signer sign -f "$KEY_PATH" -p "${TAURI_SIGNING_PRIVATE_KEY_PASSWORD-}" "$bundle")
   done
   shopt -u nullglob
 else
diff --git a/scripts/setup-desktop-updater-keys.sh b/scripts/setup-desktop-updater-keys.sh
index acc7246..39be0eb 100755
--- a/scripts/setup-desktop-updater-keys.sh
+++ b/scripts/setup-desktop-updater-keys.sh
@@ -17,7 +17,7 @@ if [[ -f "$KEY_PATH" ]]; then
   echo "기존 private key: $KEY_PATH"
 else
   echo "새 updater 키 생성: $KEY_PATH"
-  GEN_OUT="$(cd "$DESKTOP_DIR" && npx tauri signer generate -w "$KEY_PATH" -f 2>&1)" || true
+  GEN_OUT="$(cd "$DESKTOP_DIR" && CI=1 npx tauri signer generate -w "$KEY_PATH" -f --ci 2>&1)" || true
   echo "$GEN_OUT"
   if [[ ! -f "$KEY_PATH" ]]; then
     echo "키 생성 실패. Rust/tauri-cli 확인 후 재시도."