Build and ship macOS v3.3.1 DMGs (Apple Silicon + Intel)

[jamditis]

Summary

v3.3.1 shipped on 2026-06-21 with Windows and Linux only. The macOS DMGs were not built, so:

• Mac users cannot download v3.3.1 — the download buttons on https://audiobash.app return 404 for both Apple Silicon and Intel (the live site already points at v3.3.1 assets).
• The custom-dictionary fix (Apply custom vocabulary corrections to local transcription models #42) — the entire point of v3.3.1 — has not reached macOS users.

The CI build-mac job ran but produced broken, bloated artifacts (522 MB arm64 DMG), so they were removed from the release rather than shipped. The root cause is tracked in #45.

What to do (next session, on the M1)

Per the established v3.3.0 workaround:

1. git checkout v3.3.1.
2. Build arm64 and x64 locally, single-arch each (edit build.mac.target to one arch per build so electron-builder's per-arch output isn't swept by build.files).
3. Developer ID sign + notarize + staple both.
4. Verify each DMG launches from quarantine and stapler validate <dmg> passes.
5. Upload the 4 Mac assets to the existing v3.3.1 release with --clobber:
   • AudioBash-3.3.1-arm64.dmg
   • AudioBash-3.3.1.dmg
   • AudioBash-3.3.1-arm64-mac.zip
   • AudioBash-3.3.1-mac.zip
6. The v3.3.1 release notes already use the standard Mac filenames, so the download links auto-resolve once the assets exist. Remove the "macOS builds are being finalized" note from the release body afterward.
7. Revert any package.json / build.mac.target edits after.

Acceptance criteria

• Both DMGs uploaded to the v3.3.1 release
• https://audiobash.app Mac download buttons return 200
• arm64 DMG launches from quarantine on Apple Silicon (no SIGKILL)
• stapler validate passes on both DMGs
• "being finalized" note removed from the v3.3.1 release body

Notes

The durable fix that removes this manual step every release is #45.