[oddessentials]

What

The macOS installer build asks Apple's timestamp service for every signature. One refusal ended the v1.33.0 release run at Installers / macOS installers with The timestamp service is not available., and the release had to be re-run.

installers/macos/build.sh now tries each of its three timestamped signing calls (two codesign, one productbuild) up to five times, a minute apart, when the tool's last stderr line is a timestamp refusal.

• Any other failure returns the tool's own status at once.
• When every try is refused, the build fails with the last try's status.
• --timestamp is on every attempt; there is no fallback.

Tests

tests/installers.test.mjs runs the real build.sh against stand-in tools, with sleep logged instead of waited:

• a refusal followed by success, at all three calls
• five refusals, failing with the last status
• other failures, including ones that mention the timestamp service, failing after one call

Not covered

Real codesign, productbuild and notarization run only in the release-signing environment, which allows main only. The wrapper first runs against Apple's tools in the next release; publishing depends on the installers, so a failure there publishes nothing.

🤖 Generated with Claude Code