fix: add proper entitlements (#151)

Author: jonathanlab

build/entitlements.mac.plist

@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<!--
+	For forking the process (the shell does this for example)
+	- https://www.electronjs.org/de/docs/latest/api/utility-process#utilityprocessforkmodulepath-args-options -->
+	<key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+	<true/>
+	<key>com.apple.security.cs.disable-library-validation</key>
+	<true/>
+
+	<!-- Enable JIT compilation for V8 -->
+	<key>com.apple.security.cs.allow-jit</key>
+	<true/>
+</dict>
+</plist>

forge.config.ts

@@ -65,6 +65,13 @@ const notarizeConfig =
 const osxSignConfig = shouldSignMacApp
   ? ({
       identity: appleCodesignIdentity!,
+      optionsForFile: (_filePath) => {
+        // Entitlements for all binaries/frameworks
+        return {
+          hardenedRuntime: true,
+          entitlements: "build/entitlements.mac.plist",
+        };
+      },
     } satisfies Record<string, unknown>)
   : undefined;
 

package.json

@@ -1,6 +1,6 @@
 {
   "name": "array",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Array - PostHog desktop task manager",
   "main": ".vite/build/index.js",
   "versionHash": "dynamic",