andrew
0009ee83b0
Adds a macOS post-build step to patch CEF’s keychain service string to a Nebula-specific name, then re-sign the modified framework (with configurable signing identity or ad-hoc). Also enables Chromium’s `use-mock-keychain` switch on Apple builds to prevent repeated local keychain prompts, fixes titlebar traffic-light hit testing in the mac window view, scopes a WM_CLOSE guard to Windows only, and updates `.clangd` to ignore non-mac platform sources during macOS development.
52 lines
1.4 KiB
Python
Executable File
52 lines
1.4 KiB
Python
Executable File
#!/usr/bin/env python3
|
|
"""Replace CEF's shared Chromium keychain service name with a Nebula-specific one.
|
|
|
|
CEF/Chromium stores the OSCrypt cookie-encryption key in the login keychain under
|
|
"Chromium Safe Storage". That item is often owned by another Chromium-based app,
|
|
so unsigned/ad-hoc NebulaBrowser builds get a password prompt on every launch.
|
|
|
|
The replacement must be the same length as the original (embedded C string).
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
import argparse
|
|
import sys
|
|
|
|
OLD = b"Chromium Safe Storage"
|
|
NEW = b"NebulaBrowser Storage"
|
|
|
|
assert len(OLD) == len(NEW), "replacement must be the same length"
|
|
|
|
|
|
def patch(path: str) -> int:
|
|
with open(path, "rb") as handle:
|
|
data = bytearray(handle.read())
|
|
|
|
count = data.count(OLD)
|
|
if count == 0:
|
|
if NEW in data:
|
|
print(f"Already patched: {path}")
|
|
return 0
|
|
print(f"ERROR: {OLD!r} not found in {path}", file=sys.stderr)
|
|
return 1
|
|
|
|
data = data.replace(OLD, NEW)
|
|
with open(path, "wb") as handle:
|
|
handle.write(data)
|
|
|
|
print(f"Patched {count} occurrence(s) in {path}")
|
|
print(f" {OLD.decode()} -> {NEW.decode()}")
|
|
return 0
|
|
|
|
|
|
def main() -> int:
|
|
parser = argparse.ArgumentParser()
|
|
parser.add_argument("framework_binary")
|
|
args = parser.parse_args()
|
|
return patch(args.framework_binary)
|
|
|
|
|
|
if __name__ == "__main__":
|
|
sys.exit(main())
|