electron mac store 应用签名上架求助

我这几天一直在和签名相关的问题搏斗，能做的事情已经全都做了。现在应用一直卡在 testflight 安装后报错。 报错的原因是我们用了 better-sqlite3 这个库，以下是报错信息。

A Javascript error occurred in the main process Uncaught Exception: Error: dlopen(/Users/sergey/Library/Containers/com.slippod.dev1/Data/tmp/.DN5KWP78X9.com.slippod.dev1.3r1lqH, 0x0001): tried: '/Users/sergey/Library/Containers/com.slippod.dev1/Data/tmp/.DN5KWP78X9.com.slippod.dev1.3r1lqH' (code signature invalid in <B7BF9AE3-92D4-3E60-9D1F-E80E213B4689> '/Users/sergey/Library/Containers/com.slippod.dev1/Data/tmp/.DN5KWP78X9.com.slippod.dev1.3r1lqH' (errno=1) slice Offset=0x00204000, codeBlob Offset=0x001D3B50, codeBlobSize=0x0000AD80), '/System/Volumes/Preboot/Cryptexes/OS/Users/sergey/Library/Containers/com.slippod.dev1/Data/tmp/.DN5KWP78X9.com.slippod.dev1.3r1lqH' (no such file), '/Users/sergey/Library/Containers/com.slippod.dev1/Data/tmp/.DN5KWP78X9.com.slippod.dev1.3r1lqH' (code signature invalid in <B7BF9AE3-92D4-3E60-9D1F-E80E213B4689> '/Users/sergey/Library/Containers/com.slippod.dev1/Data/tmp/.DN5KWP78X9.com.slippod.dev1.3r1lqH' (errno=1) slice Offset=0x00204000, code Blob Offset=0x001D3B50, codeBlobSize=0x0000AD80) at process.func [as dlopen] (node:electron/js2c/asar_bundle:2:1869) at Module._extensions..node (node:internal/modules/cjs/loader: 1326:18) at Object.func [as .node] (node: electron/js2c/asar_bundle:2:2096) at Module.load (node:internal/modules/cjs/loader: 1096:32) at Module._load (node:internal/modules/cjs/loader: 937:12) at f._load (node: electron/js2c/asar_bundle:2:13377) at Module.require (node:internal/modules/cjs/loader: 1120:19) at require (node:internal/modules/cjs/helpers:103:18) at bindings (/Applications/slippod-1.localized/slippod.app/Contents/Resources/app.asar/node_modules/bindings/bindings.js:112:48) at new Database (/Applications/slippod-1.localized/slippod.app/Contents/Resources/app.asar/node_modules/better-sqlite3/lib/database.js:48:64) 

我在网上看到有人遇到了类似的问题，他说把 native module 的 .node 文件单独签名就好了。

https://github.com/WiseLibs/better-sqlite3/issues/1110

我自己在构建脚本里面甚至单独的把 asar 解开，然后单独签名，再 asar pack 打包回去都没用。我在 testflight 应用的安装机器里面检查了签名，发现签名是对的。以下是签名用的命令：

xcrun codesign --entitlements ./build/entitlements.mas.plist --sign $identity --timestamp --options runtime --force tmp_app/node_modules/better-sqlite3/build/Release/better_sqlite3.node 

以下是目标安装机器获得的签名信息：

codesign -dv --verbose=4 /tmp/1/node_modules/better-sqlite3/build/Release/better_sqlite3.node Executable=/private/tmp/1/node_modules/better-sqlite3/build/Release/better_sqlite3.node Identifier=better_sqlite3 Format=Mach-O universal (x86_64 arm64) CodeDirectory v=20500 size=15258 flags=0x10000(runtime) hashes=468+5 location=embedded VersiOnPlatform=1 VersiOnMin=720896 VersiOnSDK=852224 Hash type=sha256 size=32 CandidateCDHash sha1=3b6b239e386494b89e02e410599007bc5fadbe86 CandidateCDHashFull sha1=3b6b239e386494b89e02e410599007bc5fadbe86 CandidateCDHash sha256=ede31015cf4d6a33deec42f8e2f96d68ad761b80 CandidateCDHashFull sha256=ede31015cf4d6a33deec42f8e2f96d68ad761b8096973c8dc0e7cf238ae1b542 Hash choices=sha1,sha256 CMSDigest=cc4210ec569d3604c006be3785bf02944ba0e250ce30933be60ab71b09ed851d CMSDigestType=2 Executable Segment base=0 Executable Segment limit=1753088 Executable Segment flags=0x0 Page size=4096 CDHash=ede31015cf4d6a33deec42f8e2f96d68ad761b80 Signature size=9234 Authority=Apple Distribution: Company TECHNOLOGY CO., LTD (*****) Authority=Apple Worldwide Developer Relations Certification Authority Authority=Apple Root CA Timestamp=Aug 15, 2024 at 11:06:17 Info.plist=not bound TeamIdentifier=DN5KWP78X9 Runtime Version=13.1.0 Sealed Resources=none Internal requirements count=1 size=208 

几乎能用的办法都用过了。 应用是用的 electrion-builder 打包的，本来用它自带的签名工具，但一直有问题。后来换了 osx-sign 也同样有问题。 以下是我用的包信息：

 "better-sqlite3": "^8.6.0", "@electron/osx-sign": "^1.3.1", "electron": "^24.2.0", "electron-builder": "25.0.3", 

我看这里有 electron 社区的开发人员， @BlackHole1 能否抽空帮忙看下？