From 425c5a164f04cb66460142d599b5b53019e1078e Mon Sep 17 00:00:00 2001
From: Michael Sakaluk <michael.sakaluk@datavant.com>
Date: Fri, 9 Jan 2026 14:48:24 -0500
Subject: [PATCH] Fix macOS app launch issues with ad-hoc signing

Add missing entitlements required for Electron's crashpad to work
properly on macOS when the app is ad-hoc signed (not notarized):
- com.apple.security.cs.disable-library-validation
- com.apple.security.get-task-allow

Also add the entitlements config to electron-builder so entitlements
are applied to the main app bundle, not just inherited by child processes.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---
 build/mac/entitlements.mac.plist | 4 ++++
 electron-builder.yml             | 1 +
 2 files changed, 5 insertions(+)

diff --git a/build/mac/entitlements.mac.plist b/build/mac/entitlements.mac.plist
index 38c887b211..ca8bc867b4 100644
--- a/build/mac/entitlements.mac.plist
+++ b/build/mac/entitlements.mac.plist
@@ -8,5 +8,9 @@
     <true/>
     <key>com.apple.security.cs.allow-dyld-environment-variables</key>
     <true/>
+    <key>com.apple.security.cs.disable-library-validation</key>
+    <true/>
+    <key>com.apple.security.get-task-allow</key>
+    <true/>
   </dict>
 </plist>
diff --git a/electron-builder.yml b/electron-builder.yml
index c5e86cff1a..f3543004bf 100755
--- a/electron-builder.yml
+++ b/electron-builder.yml
@@ -73,6 +73,7 @@ nsis:
   include: windows/installer.nsh
 mac:
   artifactName: 'marktext-mac-${arch}-${version}.${ext}'
+  entitlements: build/mac/entitlements.mac.plist
   entitlementsInherit: build/mac/entitlements.mac.plist
   extendInfo:
     - NSCameraUsageDescription: Application requests access to the device's camera.