fix(release): materialize notarization key file

Author: dvlin-dev

.github/workflows/release-pc.yml

@@ -74,7 +74,7 @@ jobs:
     env:
       CSC_LINK: ${{ secrets.CSC_LINK }}
       CSC_KEY_PASSWORD: ${{ secrets.CSC_KEY_PASSWORD }}
-      APPLE_API_KEY: ${{ secrets.APPLE_API_KEY }}
+      APPLE_API_KEY_CONTENT: ${{ secrets.APPLE_API_KEY }}
       APPLE_API_KEY_ID: ${{ secrets.APPLE_API_KEY_ID }}
       APPLE_API_ISSUER: ${{ secrets.APPLE_API_ISSUER }}
     steps:
@@ -85,6 +85,17 @@ jobs:
       - uses: actions/setup-node@v4
         with:
           node-version: ${{ env.NODE_VERSION }}
+      - name: Prepare Apple notarization key
+        shell: bash
+        run: |
+          KEY_PATH="${RUNNER_TEMP}/AuthKey_${APPLE_API_KEY_ID}.p8"
+          if [[ "${APPLE_API_KEY_CONTENT}" == *"BEGIN PRIVATE KEY"* ]]; then
+            printf '%s\n' "${APPLE_API_KEY_CONTENT}" > "${KEY_PATH}"
+          else
+            printf '%s' "${APPLE_API_KEY_CONTENT}" | base64 --decode > "${KEY_PATH}"
+          fi
+          chmod 600 "${KEY_PATH}"
+          echo "APPLE_API_KEY=${KEY_PATH}" >> "${GITHUB_ENV}"
       - run: pnpm install --frozen-lockfile --prefer-offline --config.node-linker=isolated
       - name: Build workspace dependencies
         run: pnpm --filter "@moryflow/pc..." --filter "!@moryflow/pc" --if-present build
@@ -105,7 +116,7 @@ jobs:
     env:
       CSC_LINK: ${{ secrets.CSC_LINK }}
       CSC_KEY_PASSWORD: ${{ secrets.CSC_KEY_PASSWORD }}
-      APPLE_API_KEY: ${{ secrets.APPLE_API_KEY }}
+      APPLE_API_KEY_CONTENT: ${{ secrets.APPLE_API_KEY }}
       APPLE_API_KEY_ID: ${{ secrets.APPLE_API_KEY_ID }}
       APPLE_API_ISSUER: ${{ secrets.APPLE_API_ISSUER }}
     steps:
@@ -116,6 +127,17 @@ jobs:
       - uses: actions/setup-node@v4
         with:
           node-version: ${{ env.NODE_VERSION }}
+      - name: Prepare Apple notarization key
+        shell: bash
+        run: |
+          KEY_PATH="${RUNNER_TEMP}/AuthKey_${APPLE_API_KEY_ID}.p8"
+          if [[ "${APPLE_API_KEY_CONTENT}" == *"BEGIN PRIVATE KEY"* ]]; then
+            printf '%s\n' "${APPLE_API_KEY_CONTENT}" > "${KEY_PATH}"
+          else
+            printf '%s' "${APPLE_API_KEY_CONTENT}" | base64 --decode > "${KEY_PATH}"
+          fi
+          chmod 600 "${KEY_PATH}"
+          echo "APPLE_API_KEY=${KEY_PATH}" >> "${GITHUB_ENV}"
       - run: pnpm install --frozen-lockfile --prefer-offline --config.node-linker=isolated
       - name: Build workspace dependencies
         run: pnpm --filter "@moryflow/pc..." --filter "!@moryflow/pc" --if-present build