docs: update release script and documentation

- Use certificate SHA-1 instead of name to avoid ambiguity
- Add validation for required environment variables
- Update CLAUDE.md with release process documentation
- Update .env.example with new configuration format

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: Prot10

.env.example

@@ -3,8 +3,9 @@ APPLE_ID=your-apple-id@email.com
 APPLE_APP_SPECIFIC_PASSWORD=xxxx-xxxx-xxxx-xxxx
 APPLE_TEAM_ID=XXXXXXXXXX
 
-# Certificate name (from Keychain Access)
-MACOS_CERTIFICATE_NAME="Developer ID Application: Your Name (XXXXXXXXXX)"
+# Certificate SHA-1 hash (from: security find-identity -v -p codesigning)
+# Use SHA-1 instead of name to avoid ambiguity with duplicate certificates
+MACOS_CERTIFICATE_SHA1=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
 
 # Sparkle EdDSA private key (base64)
 SPARKLE_PRIVATE_KEY=your-sparkle-private-key-here

CLAUDE.md

@@ -11,7 +11,7 @@
 | Target | macOS 14.0+ (Sonoma) |
 | Design | Liquid Glass (native on macOS 26+, material fallback on 14-15) |
 | Architecture | MVVM with Swift actors for services |
-| Status | Complete (v1.0.0 released) |
+| Status | Beta (v0.1.x) |
 
 ## Features
 
@@ -76,6 +76,41 @@ xcodebuild -project MyMacCleaner.xcodeproj -scheme MyMacCleaner build
 xcodebuild test -project MyMacCleaner.xcodeproj -scheme MyMacCleaner
 ```
 
+## Release Process
+
+The release script automates the complete release workflow:
+
+```bash
+./scripts/release.sh <version> "<changelog>"
+# Example: ./scripts/release.sh 0.1.1 "Fixed bug in file scanner"
+```
+
+### What the script does:
+1. Updates version in Xcode project (version string + build number)
+2. Builds and archives the app
+3. Signs with Developer ID certificate
+4. Notarizes with Apple (app + DMG)
+5. Creates DMG and ZIP packages
+6. Signs ZIP for Sparkle auto-updates
+7. Updates `appcast.xml` and `website/public/data/releases.json`
+8. Creates GitHub release with assets
+9. Commits and pushes all changes
+
+### Prerequisites:
+1. Copy `.env.example` to `.env` and fill in credentials
+2. Set up notarization profile: `xcrun notarytool store-credentials "notary-profile" --apple-id YOUR_APPLE_ID --team-id YOUR_TEAM_ID`
+3. Authenticate gh CLI: `gh auth login`
+4. Find certificate SHA-1: `security find-identity -v -p codesigning`
+
+### Environment Variables (.env):
+| Variable | Description |
+|----------|-------------|
+| `APPLE_ID` | Apple Developer email |
+| `APPLE_APP_SPECIFIC_PASSWORD` | App-specific password for notarization |
+| `APPLE_TEAM_ID` | 10-character Team ID |
+| `MACOS_CERTIFICATE_SHA1` | 40-character SHA-1 hash of signing certificate |
+| `SPARKLE_PRIVATE_KEY` | Base64 EdDSA private key for Sparkle updates |
+
 ## Dependencies
 
 | Package | Purpose |

scripts/release.sh

@@ -44,6 +44,23 @@ else
     exit 1
 fi
 
+# Validate required environment variables
+if [ -z "$MACOS_CERTIFICATE_SHA1" ]; then
+    echo -e "${RED}Error: MACOS_CERTIFICATE_SHA1 not set in .env${NC}"
+    echo "Run 'security find-identity -v -p codesigning' to find your certificate SHA-1"
+    exit 1
+fi
+
+if [ -z "$APPLE_TEAM_ID" ]; then
+    echo -e "${RED}Error: APPLE_TEAM_ID not set in .env${NC}"
+    exit 1
+fi
+
+if [ -z "$SPARKLE_PRIVATE_KEY" ]; then
+    echo -e "${RED}Error: SPARKLE_PRIVATE_KEY not set in .env${NC}"
+    exit 1
+fi
+
 # Configuration
 APP_NAME="MyMacCleaner"
 SCHEME="MyMacCleaner"
@@ -103,7 +120,7 @@ xcodebuild archive \
     -scheme "${SCHEME}" \
     -archivePath "build/${APP_NAME}.xcarchive" \
     -configuration Release \
-    CODE_SIGN_IDENTITY="${MACOS_CERTIFICATE_NAME}" \
+    CODE_SIGN_IDENTITY="${MACOS_CERTIFICATE_SHA1}" \
     DEVELOPMENT_TEAM="${APPLE_TEAM_ID}" \
     CODE_SIGN_STYLE=Manual \
     OTHER_CODE_SIGN_FLAGS="--options runtime --timestamp" \
@@ -199,7 +216,7 @@ echo -e "${GREEN}DMG created successfully${NC}"
 echo ""
 echo -e "${YELLOW}[6/10] Signing and notarizing DMG...${NC}"
 
-codesign --force --sign "${MACOS_CERTIFICATE_NAME}" \
+codesign --force --sign "${MACOS_CERTIFICATE_SHA1}" \
     --options runtime --timestamp \
     "build/${APP_NAME}-v${VERSION}.dmg"