From 7a5bc2ebbb071c449d552a192df8d50f330c1540 Mon Sep 17 00:00:00 2001
From: Lovehsigure_520 <1260907335@qq.com>
Date: Sat, 11 Jul 2026 18:29:46 +0800
Subject: [PATCH] ci(steam): strip Godot debug symbols before signing

---
 .github/workflows/release-tamagotchi.yml      | 5 +++++
 .github/workflows/steam-deploy-tamagotchi.yml | 4 ++++
 2 files changed, 9 insertions(+)

diff --git a/.github/workflows/release-tamagotchi.yml b/.github/workflows/release-tamagotchi.yml
index a8a3bc311..355d2d24f 100644
--- a/.github/workflows/release-tamagotchi.yml
+++ b/.github/workflows/release-tamagotchi.yml
@@ -167,6 +167,11 @@ jobs:
         run: |
           mkdir -p build/mac
           godot --headless --export-release "macOS" build/mac/godot-stage.app
+          # NOTICE: SteamPipe excludes *.pdb by default. Delete Godot debug
+          # symbols before Electron signs the parent app so macOS sealed
+          # resources match the content Steam installs.
+          find build/mac/godot-stage.app -name '*.pdb' -delete
+          find build/mac/godot-stage.app -name '._*' -delete
 
       - name: Export Godot Stage (Linux)
         if: matrix.os == 'ubuntu-latest' || matrix.os == 'ubuntu-24.04-arm'
diff --git a/.github/workflows/steam-deploy-tamagotchi.yml b/.github/workflows/steam-deploy-tamagotchi.yml
index f8ee422fd..1f7a3b264 100644
--- a/.github/workflows/steam-deploy-tamagotchi.yml
+++ b/.github/workflows/steam-deploy-tamagotchi.yml
@@ -195,6 +195,10 @@ jobs:
             echo "macOS Steam content still contains AppleDouble files that break codesign."
             exit 1
           fi
+          if find steam-build/macos/AIRI.app -name '*.pdb' -print -quit | grep -q .; then
+            echo "macOS Steam content must not contain PDB files because SteamPipe excludes them after signing."
+            exit 1
+          fi
 
           if ! file steam-build/macos/AIRI.app/Contents/MacOS/airi | grep -q 'arm64'; then
             echo "Steam macOS content currently supports Apple Silicon only."