desktop 다운로드 수정

scripts/prepare-tauri-build.sh

@@ -41,3 +41,15 @@ else
   unset TAURI_SIGNING_PRIVATE_KEY 2>/dev/null || true
   echo "[prepare-tauri-build] updater signing skipped (no key)"
 fi
+
+# macOS: ad-hoc codesign by default (Apple Silicon requires signing).
+# Override with Developer ID for production: export APPLE_SIGNING_IDENTITY="Developer ID Application: ..."
+# Notarization (optional): APPLE_ID, APPLE_PASSWORD, APPLE_TEAM_ID or APPLE_API_KEY*
+if [[ "$(uname -s)" == "Darwin" ]]; then
+  : "${APPLE_SIGNING_IDENTITY:=-}"
+  export APPLE_SIGNING_IDENTITY
+  echo "[prepare-tauri-build] APPLE_SIGNING_IDENTITY=${APPLE_SIGNING_IDENTITY}"
+  if [[ -n "${APPLE_ID:-}" && -n "${APPLE_TEAM_ID:-}" ]]; then
+    echo "[prepare-tauri-build] Apple notarization env detected — tauri will notarize if credentials are valid"
+  fi
+fi

scripts/server-install-desktop-jenkins.sh

@@ -6,6 +6,7 @@ export PATH="/opt/homebrew/bin:/opt/homebrew/sbin:/usr/local/bin:${PATH:-/usr/bi
 
 JENKINS_HOME="${JENKINS_HOME:-$HOME/.jenkins}"
 JENKINS_JOB="goldenChart-Desktop-Pipeline"
+JENKINS_TRIGGER_TOKEN="${JENKINS_DESKTOP_TRIGGER_TOKEN:-${GC_DESKTOP_JENKINS_TRIGGER_TOKEN:-goldenchart-desktop-build}}"
 GIT_DIR="${GIT_DIR:-/Volumes/ADATA/git/goldenChart.git}"
 WORK_TREE="${WORK_TREE:-/Users/aidev/apps/goldenChart}"
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
@@ -42,6 +43,7 @@ cat > "${JENKINS_HOME}/jobs/${JENKINS_JOB}/config.xml" << JENKINS_XML
   <disabled>false</disabled>
   <blockBuildWhenDownstreamBuilding>false</blockBuildWhenDownstreamBuilding>
   <blockBuildWhenUpstreamBuilding>false</blockBuildWhenUpstreamBuilding>
+  <authToken>${JENKINS_TRIGGER_TOKEN}</authToken>
   <triggers/>
   <concurrentBuild>false</concurrentBuild>
   <builders>
@@ -78,6 +80,8 @@ if curl -sf -o /dev/null "http://127.0.0.1:8090/login" 2>/dev/null; then
 fi
 
 log "완료: http://127.0.0.1:8090/job/${JENKINS_JOB}/"
+log "원격 트리거 토큰: $JENKINS_TRIGGER_TOKEN"
+log "backend env: GC_DESKTOP_JENKINS_TRIGGER_TOKEN=$JENKINS_TRIGGER_TOKEN"
 log ""
 log "Jenkins Credentials (Secret file):"
 log "  ID: tauri-signer-key  →  \$HOME/.tauri/goldenchart.key"

scripts/trigger-desktop-jenkins-build.sh

@@ -6,6 +6,7 @@ JENKINS_URL="${JENKINS_URL:-${GC_DESKTOP_JENKINS_URL:-http://127.0.0.1:8090}}"
 JENKINS_JOB="${JENKINS_JOB:-${GC_DESKTOP_JENKINS_JOB:-goldenChart-Desktop-Pipeline}}"
 JENKINS_USER="${JENKINS_USER:-${GC_DESKTOP_JENKINS_USER:-}}"
 JENKINS_TOKEN="${JENKINS_TOKEN:-${GC_DESKTOP_JENKINS_TOKEN:-}}"
+JENKINS_TRIGGER_TOKEN="${JENKINS_TRIGGER_TOKEN:-${GC_DESKTOP_JENKINS_TRIGGER_TOKEN:-goldenchart-desktop-build}}"
 LOG_TAG="[trigger-desktop]"
 
 log() { echo "$(date '+%Y-%m-%d %H:%M:%S') $LOG_TAG $*"; }
@@ -51,6 +52,12 @@ if [[ -n "$CRUMB_JSON" ]]; then
   fi
 fi
 
+if curl_post "${CRUMB_HDR[@]}" -H "Content-Type: application/x-www-form-urlencoded" \
+    "${JOB_API}/build?token=${JENKINS_TRIGGER_TOKEN}"; then
+  log "빌드 큐 등록 완료 (token)"
+  exit 0
+fi
+
 if curl_post "${CRUMB_HDR[@]}" -H "Content-Type: application/x-www-form-urlencoded" "${JOB_API}/build"; then
   log "빌드 큐 등록 완료"
   exit 0