fix(release): isolate macOS dmg arch per matrix entry

.github/workflows/release.yml

@@ -195,6 +195,8 @@ jobs:
 
       # macOS-only because .app is a directory bundle the CLI can read
       # directly. AppImage / deb / rpm / NSIS would need archive extractors.
+      # electron-builder emits arm64 under release/mac-arm64/ and x64 under
+      # release/mac/; pick the directory that matches the matrix arch.
       - name: verify packaged macOS app embedded CLI arch
         if: runner.os == 'macOS'
         shell: bash
@@ -203,9 +205,13 @@ jobs:
           MATRIX_GO_ARCH: ${{ matrix.go-arch }}
         run: |
           set -euo pipefail
-          app=$(find desktop/release -maxdepth 2 -type d -name 'Devsy.app' | head -n1)
-          if [ -z "$app" ]; then
-            echo "::error::no Devsy.app bundle found under desktop/release/"
+          case "$MATRIX_GO_ARCH" in
+            arm64) app=desktop/release/mac-arm64/Devsy.app ;;
+            amd64) app=desktop/release/mac/Devsy.app ;;
+            *) echo "::error::unsupported matrix arch: $MATRIX_GO_ARCH"; exit 1 ;;
+          esac
+          if [ ! -d "$app" ]; then
+            echo "::error::Devsy.app bundle missing for $MATRIX_GO_ARCH at $app"
             ls -la desktop/release || true
             exit 1
           fi

desktop/electron-builder.yml

@@ -22,15 +22,12 @@ mac:
   category: public.app-category.developer-tools
   icon: resources/icon.icns
   artifactName: Devsy_${os}_${arch}.${ext}
+  # Architecture is selected by the CLI flag (--arm64 / --x64) at the
+  # invocation in .github/workflows/release.yml so each matrix entry
+  # produces exactly one .dmg + .zip pair for its arch.
   target:
-    - target: dmg
-      arch:
-        - x64
-        - arm64
-    - target: zip
-      arch:
-        - x64
-        - arm64
+    - dmg
+    - zip
   hardenedRuntime: true
   gatekeeperAssess: false
   entitlements: build/entitlements.mac.plist