Watch

George Lambert 561acba9fd feat(macos): Developer ID signed .pkg build for Print Stamp

Adds platform/macos/pkg/build-pkg.sh: universal verae-print, Verae Print
Stamp.app, IPP LaunchAgent postinstall, productbuild + notarytool staple.
Uses FlightLookup signing.env (same as Verae Timestamping.app).

2026-10-03 04:30:44 -04:00

3.1 KiB

Raw Blame History

PrintToVeraeTimeStamp

macOS Print → PDF helper that saves {name}.pdf, stamps the digest with Verae, and writes {name}-verae-timestamp-{RECEIPTID}.pdf.

Only the SHA-256 digest is sent to Verae. Document bytes never leave the machine.

Install

cd /Users/marchon/research/PrintToVeraeTimeStamp
go build -o "$HOME/bin/verae-print" ./cmd/verae-print
verae-print install-printer   # Print → Destination → Verae Timestamping

Optional (buried PDF submenu): verae-print install-macos

Ensure $HOME/bin is on your PATH. Refresh Verae Time login when the JWT expires:

uvx verae-mcp-timestamping-server setup
# or session check:
uvx verae-mcp-timestamping-server session

For the Zapier channel, store an xVerae- token from customer.verae.ai / zap.verae.ai Security tab:

mkdir -p ~/.verae
chmod 700 ~/.verae
printenv XVERAE_TOKEN > ~/.verae/xverae-token   # or paste once
chmod 600 ~/.verae/xverae-token

Usage

In any app: File → Print → Destination → Verae Timestamping → Print.

Also: drop a PDF on Verae Print Stamp in /Applications, or Open With.

CLI:

verae-print stamp [--channel=verae|zapier] [--out-dir DIR] [--name STEM] [--open] file.pdf

Default output directory: ~/Documents/Verae Timestamps/

File	Content
`{name}.pdf`	Exact printed bytes (proven artifact)
`{name}-verae-timestamp-{RECEIPTID}.pdf`	Registration / certificate PDF
`{name}.verae.json`	Receipt sidecar

Channels:

verae (default) — api.veraetime.net + JWT in ~/.verae/auth.properties
zapier — zap.verae.ai + xVerae- + attachPdf:true

Signed macOS installer (.pkg)

Same FlightLookup Developer ID + notarization path as Verae Timestamping.app (~/fie/installers/macos/signing.env).

cd /Users/marchon/research/PrintToVeraeTimeStamp
chmod +x platform/macos/pkg/build-pkg.sh
./platform/macos/pkg/build-pkg.sh
# → build/macos-pkg/dist/VeraePrintStamp-0.1.0.pkg
# → build/macos-pkg/dist/VeraePrintStamp-macos.pkg

The pkg installs:

Path	Role
`/Applications/Verae Print Stamp.app`	Drop / Open With
`/Library/Application Support/Verae/PrintStamp/bin/verae-print`	Stamp CLI (universal)
`/usr/local/bin/verae-print`	Symlink
LaunchAgent + CUPS queue	Print → Destination → Verae Timestamping

Requires: Developer ID Application + Developer ID Installer (FlightLookup), App Store Connect API key in signing.env, Node for bundling the registration PDF builder.

Status

macOS Destination printer + branded registration PDF work locally. Signed .pkg build script is under platform/macos/pkg/. Linux and Windows remain per the spec and plan.

Contributing

Open questions and design changes in this repository. Pull requests are accepted for review against the spec.

3.1 KiB Raw Blame History