Distributing an application to perform DFU over USB using nrfutil

Our devices are updateable over a usb serial connection.

So far I have been using the "nrfutil dfu usb-serial" command.  

I have created an application that checks current firmware version, then does the update if necessary.  I had embedded the nrfutil app, but am finding on macos that this is very problematic - I can't sandbox it, or create a hardened runtime for it as it essential needs recompiling.

I can't be the first to do this. Is there a recommended approach?

Related