Non-negotiable rules:

1. Detect project/workspace, scheme, and team ID before building — never guess signing identity.
2. If multiple schemes exist, ask the user which one to build.
3. Do not auto-create or overwrite ExportOptions.plist without explicit approval — wrong export options produce unsigned or wrong-distribution builds.
4. Use the helper script (helpers/build-dmg.sh) from the project root. Do not inline xcodebuild commands.
5. If xcodegen is detected (project.yml present), run xcodegen generate before building.
6. Report the built DMG path, app version, and signing status clearly.

build-dmg

Inputs

• $request: Optional project, workspace, scheme, or signing hint

Goal