From 17bb97a4164677c8a756b3f49dffcba5ad42936f Mon Sep 17 00:00:00 2001
From: Anthony Stirling <77850077+Frooodle@users.noreply.github.com>
Date: Wed, 19 Nov 2025 17:18:32 +0000
Subject: [PATCH] verbose debug

---
 .github/workflows/tauri-build.yml | 24 +++++++++++++++++++++---
 1 file changed, 21 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/tauri-build.yml b/.github/workflows/tauri-build.yml
index 55f1f02f0e..a3948089e6 100644
--- a/.github/workflows/tauri-build.yml
+++ b/.github/workflows/tauri-build.yml
@@ -358,13 +358,30 @@ jobs:
           foreach ($file in $filesToSign) {
             Write-Host "Signing: $($file.Name)"
 
-            # Use smctl to sign with keypair alias
-            $output = & smctl sign --keypair-alias "${{ secrets.SM_KEYPAIR_ALIAS }}" --input "$($file.FullName)" 2>&1
+            # Use smctl to sign with keypair alias (verbose mode)
+            $output = & smctl sign --keypair-alias "${{ secrets.SM_KEYPAIR_ALIAS }}" --input "$($file.FullName)" --verbose 2>&1
             $exitCode = $LASTEXITCODE
 
             Write-Host "Exit code: $exitCode"
             Write-Host "Output: $output"
-            Write-Host ""
+
+            # Check if output contains "FAILED" even with exit code 0
+            if ($output -match "FAILED" -or $output -match "error" -or $output -match "Error") {
+              Write-Host ""
+              Write-Host "[ERROR] Signing failed for $($file.Name)"
+              Write-Host "[ERROR] smctl returned success but output indicates failure"
+              Write-Host ""
+              Write-Host "Possible issues:"
+              Write-Host "  1. Certificate not fully synced to KeyLocker (wait a few minutes)"
+              Write-Host "  2. Incorrect keypair alias"
+              Write-Host "  3. API key lacks signing permissions"
+              Write-Host ""
+              Write-Host "Please verify in DigiCert ONE portal:"
+              Write-Host "  - Certificate status is 'Issued' (not Pending)"
+              Write-Host "  - Keypair status is 'Online'"
+              Write-Host "  - 'Can sign' is set to 'Yes'"
+              exit 1
+            }
 
             if ($exitCode -ne 0) {
               Write-Host "[ERROR] Failed to sign $($file.Name)"
@@ -375,6 +392,7 @@ jobs:
 
             $signedCount++
             Write-Host "[SUCCESS] Signed: $($file.Name)"
+            Write-Host ""
           }
 
           Write-Host "=== Summary ==="