From 0a1104a262893c95246fae38fcfeaca68a37955c Mon Sep 17 00:00:00 2001
From: Rian Stockbower <rstockbower@gmail.com>
Date: Thu, 4 Jun 2026 06:05:08 -0400
Subject: [PATCH] chore: align darwin codesign hook to the fail-loud form
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

slck carried the original simple darwin codesign hook; the other five
family CLIs (cfl/jtk/gro/nrq/cr) use the hardened fail-loud form, where
CODESIGN_DARWIN_SCRIPT set-but-missing or non-executable errors instead
of silently skipping. Make slck's hook byte-identical to theirs so the
convention is uniform. YAML-only — not a gated release path.
---
 .goreleaser.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
index d5efb2d..f905419 100644
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@@ -48,7 +48,7 @@ builds:
     # local builds → signing skipped.
     hooks:
       post:
-        - cmd: bash -c 'f="${CODESIGN_DARWIN_SCRIPT:-}"; [ -n "$f" ] && [ -x "$f" ] && exec "$f" "$0" "$1"; echo "skip codesign (no CODESIGN_DARWIN_SCRIPT)"' "{{ .Path }}" "{{ .Os }}"
+        - cmd: bash -c 'f="${CODESIGN_DARWIN_SCRIPT:-}"; if [ -z "$f" ]; then echo "skip codesign (CODESIGN_DARWIN_SCRIPT unset, local build)"; exit 0; fi; [ -x "$f" ] || { echo "CODESIGN_DARWIN_SCRIPT not executable ($f)" >&2; exit 1; }; exec "$f" "$0" "$1"' "{{ .Path }}" "{{ .Os }}"
   - id: slck-unix-win
     main: ./cmd/slck
     binary: slck