From c3d812603ca9880f67469f72b83aa1f5b6672f0a Mon Sep 17 00:00:00 2001
From: Patrick Fic <patrick@imexsystems.ca>
Date: Wed, 19 Feb 2025 16:04:57 -0800
Subject: [PATCH] Add Mac Signing

---
 assets/entitlements.mac.plist |  25 +++++++++++++++++++++++++
 certificate.p12               | Bin 0 -> 3300 bytes
 package.json                  |  26 ++++++++++++++++++++++----
 3 files changed, 47 insertions(+), 4 deletions(-)
 create mode 100644 assets/entitlements.mac.plist
 create mode 100644 certificate.p12

diff --git a/assets/entitlements.mac.plist b/assets/entitlements.mac.plist
new file mode 100644
index 0000000..0b2a95c
--- /dev/null
+++ b/assets/entitlements.mac.plist
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+  <dict>
+    <!-- Allows Just-In-Time compilation required by V8 JavaScript engine in Electron -->
+    <key>com.apple.security.cs.allow-jit</key>
+    <true/>
+
+    <!-- This is needed for the V8 JavaScript engine to function properly -->
+    <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+    <true/>
+    
+    <!-- Allows network connections -->
+    <key>com.apple.security.network.client</key>
+    <true/>
+
+    <!-- Uncomment to allow read and write access to files explicitly selected by the user through system dialogs -->
+    <!-- <key>com.apple.security.files.user-selected.read-write</key>
+    <true/> -->
+
+    <!-- Uncomment to allow read and write access to the user's Downloads directory -->
+    <!-- <key>com.apple.security.files.downloads.read-write</key>
+    <true/> -->
+  </dict>
+</plist>
\ No newline at end of file
diff --git a/certificate.p12 b/certificate.p12
new file mode 100644
index 0000000000000000000000000000000000000000..47c444c6fa69c1d1781a94a6b799267730dceae6
GIT binary patch
literal 3300
zcmY+FcRU;H`o@DKLSt5~A~9;0*h*XV+I#QW8nt2;Q9Cv@s%lj2QB=*?HJjREwTLQe
zgxXYXb-cgN@0|CXKkm<UKi}(qp69>&LZG3G#6%<rH1r*qj6Yg6`j~=<lqeq!%><&M
zY1cRffd)_iV}bM0;QnibB_;w~OZz_#5rPFw{{JsPiNFX-AjEg1&txqt=!lpY0tiEc
zQ`*k41q-~i!D2bY?S=>Gfb6aQXH4BlNDrA}>^IsER1O`GK3+!8;pUs^#sYiq63RZu
zt|5)7C(WJQQIDE!x8ah(h55w=FKM$hXOOs=X*^QNk|xrXjq{bL<TJZKkrvqy_6m{y
ze(9@qHsLYV&r#dVWjouBRV{=yK}jVL%U(2RV@6Ut>B}Bdvtt-UwW`=Dp>1WSN3ei+
zz%S-^MJG>h02%hdu2_|yHlW%Gx7`*u>0xK}QKz}%cX5SY2KT3`N4Gs_XCAx`l(=B)
zzMJHpYgIsgkA4@Qx&O_{D-#X5{BVGt!6>1H1i7I<aRuvoS1ZtxETZ5)L;P^HK6ADK
zlTfR7<l&$RA~c@$L+d&!drp0TpnyE_AcJlRIg?gWJX<^2WK|f}AD1D3*fwssdbL!?
z5|hbDqjz3eH`%9X`&YFT)3NOBE}9M>z?C$W^nx@J`i~hCO?tGeWC+^(Rqe`NBYl+=
zsyfvBT1T}EZ@4G-Aky!Q=4`itKF|n(VK2(5#rWRM!Od`^@ri;M{H=9?fgq6~39+4w
z)p30vZ}0Ipb~5`G`}H)|izI^!n1U3E6*`#<d)}8uHqCDBu~!LV1hs^bRxVXzMn<JW
zY#B`Pz;t;v=8B%s7Lk&}(=|+DhY}x%TSN!QBvXvvi<oxuy|ul^^=s~E*E{;2!T5+?
zm(1keY0gD|C`czS+Ms5ryIsmd+Rtq|Y~*H3n|=>{<Pc8VJiF&9tF^^d)O5yQe-tGi
zrxcE&3;70xd+D@~x~+^!x|P#Crg=rDd>Ld)I)h^C3b(C(7+kLCav!feNg7E^bg%Ih
zvbDKu1`O-0$u8xdU+=bH9}CjvqpOwpEJahkQ~9R|J#lgx$WqTmRwkf0$l|#o9K0gZ
z5LAXUrX`H{XS|sjc4Hh9lG~FOwY>LQ7cWx!Fz=r0*>~xsD3^Wm-&`Vo%a{|x?{g;d
zm3lLyf{D<9VT5RuDonWb<K{|K22BZ#?R+@A4+aWPe63t0BkM(t3pXCD$LO=Gm88H~
z<&e-a)lCnB89nc@hwa(?CcL87qduCKaJ>G5a6;huS4ZLszcO;Ed1;c686$7uizhgh
z(X`MLz0$Jsz}_{2E9dA@Y3I+6j=ndcEgjPg67OXa65}i7j;=5&e>f+T#<9i5n}WZA
zzFDR1x=A{Fw=d!;IaZ?up}pl-_jYp}{mmI<Qq|EaD7WYm-v-}U@~f6ZQSMh`qS4jb
zjd<!jZ(qvUDfPxI%VFwX*gkald5A9L3#v+;xkg@=rjj)G_1Szn9_%7Ar|`Bf&?4YN
zUtRgY$4EMxgS_-cn5!E|B_P%aR8V$?@}vq28Tn4iRPkc^Rm5HT#oXi=&dxuxM|@U<
zObX{Olgs>8jtyVJs@Hq@1oH!qkf6;)$bqOfSNO0je-{6fHwDGwM}x>YdHv@bA@B$S
zn~~ySeBh1EM@w@W_BHO8<xS%&zoz{VYH1E5jJFYA90qkvGnrS3xBa)4#Dx|F)0}QG
z;^cpTn{6lftK6mH$jzDT%B{IbCb=LyFPfCOA>Gdh@%8*s-MHML_T~N4G!rd#a!p*+
zK*=r~Wj)N?G5+;f`gxw=o?f*NRh1R8xA9YC4<kXj?*02T!jy-y`@nXHUz`U|UpR&m
za>hD{)j6WiO#M!8%IBTJv2h%TVxr=B>xXt@D^tSsy%rd`^%u#PhNcE+ziNMIbjw(b
zZ~9g>IaPWpqiu|qqTo{u3I^ZB))Y&6CGJG{)LW~a(0O-fanW=u)#ei%L+XMb29qy*
z^$Wvs-*H#0HJE4ZU7O`0?QVB2&?r;ym&Y5bw%9dm1yA*8S6<EUn@bhJ>F}b+uc#|v
zpp^shTueofDsIJPj-EHKssNWC7+SVe@Pvt-RK(S4^le2nBH&pzL7l=<p+MdFSYJC!
z^%w8qk$pGY@lt2os+(5JmrPlL_-FnKFR{H7(fbF%gQRo*rSsXBGeHWm&zt`;j|^6+
zTva+X%9i7ml?-J+F<=e(iJC_(!x#P64ri+#72ZUqH>p1D=v+e2jD(d6sMWeJX);cF
ze+aq-UCAtqc+JPr6-7jAwsh*iGto;Q2p7<HW-4Ah?a6M*pO+vYBR0FZ2e0U+dVkEV
zx(YC%V29tVo{t|Y2TYUTZ05mE-S&g#<DYIc1Z>_oFst3ST{f^w8V73LffbV&gKcdB
z3&^YLzkz5yamhBdV=VU(Xi)8c1z0{BR0u?aa<B25>q-aT_;;L<6A|a5fjbB^aN~bc
zj^yu@!=B)|M;U)w{+)6_G_YR{Np6G8?lg8i`yrZ(^?bXQjD6<-v-;`ilYa_tSZ}R^
zt#&Zo!ekKhiJt3l2)>eR-LJyLv6*vE?6(c3KEuo!Qa64G198?AXS3%LZwDz91_?2|
zY@jqJej9AEnf$_es=Y{%4L9BP^siPYAGfH$mxBCVn#Vo`%dso*<<-LtArVxDLm!fV
z=|ZTQ0)cB2qE1UfpNh}EQbFy}@p0&jZt41F=8IB|68ofPl`UIe9-pwo#Yq|4LJ4a1
zlJ((a^&eVA`(Hbxa-}<Uu^s0j@JiV?i<*wYWBRLuWedT54)QaX;)CBS?<=@%u$06K
z#F^P4B4uJ9>HpT7_|lP$Q9R*yisfRV+J)w`!{XKN_4FD!Z1u|zf1*T$m|jX9f7}a6
z$2ln)si)dxdM;d?PnXfs-{CjDA0$@VOPK9C8kHH5HN7I5y?b-&d+8mQ2kE(?3i{6X
z9@kHWH#RuLSr1uLOMP1fvk3&rhf(bGU7R)EQ9LYht!Nswyt|#fFGZ=F8h)2L<&^Kv
z*kKbFe)q~HHL*$M0VLOiFgomSz_2XAX!3h$BxgCN7KLYO6tHl8N=34%K-!Yl6ngRC
z54<+Ah2}~IG_Owz`*6UU%)eN|C&7j}ZKtJE@`C;f;teS*lC=_-R}xU75NzXT>#_^1
zKg*m-LSZd-A9G7z*ni<532I$5Ykqhx_Xf2_@5pC{CsuWG5qJ_4w<>T$<*8Q0Z1F(7
za#U2+DFiY733U`&*f{W@cqWu(b1NabrROFcH;cWOGhnRvqm%E;6&D?0xsA&a8m&=I
z#a-|*&lV$Qn!b+lW|wK>&e;8pJ-i2`QdxhgziE~*9)+wbR5LsB!pLcxWeC1sE9G3O
zlUj=@nYIb21Hx3!MB5FGRTX8^GOE+9+DbgJWwV)+fe=?)HI?KrdtamMwa22|QCSNH
zpQz29(gvL%3AXSQ_7EBk^9^8DP5xBTGz?|`f-CzrF<D1kze_;GR_zk@qb}J7Gox2O
z;KDr%sK8Hsb&jt4<$`&g8b<B$Y=z0{hFf%y5x515HGF~S79LFv=D4DL6nzFdt4#2*
zIJe(4*O*VWSUUe{<|%2<lfv1`5q>4m=tw%VJcKuXs9R@liTblgizWGm4o_3s9E0KY
z7!(hu#ZoH`j7(%_Yr~?Q20I?T&GNm_;K(_u`>jXy>u@L$4pVaxqiJj{zszyld7Y~f
z6ttbkUC<%;zWl!aT8^+Hxwq(}NG3rbe2t`fcH&N@7;7BX(sA{ZIUVyH1}0?RAx90p
zXv*QLs?ui6ORw+lN))CF6yH=1z*^)O7$+9eGG*W*fp$ouAM*ngDy0kOnO$Ilv`2bW
zI`H<oH~>Ws<1;_<$1*;BmtaBRY}OWzsQ7#qb;iZK($TTT(35Sqx}jlQv<g{I^0&sI
z500!k4duWKvHh(XbkZOD_{;pQy0j=&pMHHZ@7Y#3W1p_PKo+~exqg{I?US}~_wBP%
zb>q5`mR;~!X^oJPrm@^ZRhx$RuNE4bS77~-x%(5R2Yzb^SMJ|+lJGoQN(QiOm|Q7+
zCOfle`c}j)E3;y~Zd7N{s>%;!YJu4g-6ny!%l>6XzlnH)Nig><Tx876Kx#{o@H7PS
zKkJc<PQ;eY8lVMu46p;h0g3<zfZuhw0XzVn*Xn)E)UGKUAb)-Kyyni=bB_VfuGItJ
z4v_gj9|=$bm|k}VfB=BcwdVjpUhCgC-LI#G5S;&fcT0pGNLQF~w_RApUW6<%y7U(w
z<^gW-1|bj#b_5w1BtS_*%nSkm=`=)!Pt$Z*Bc`LJ+Rn%ZE-)QlBtVE{vAMpTuDAp-
H5z)T@KkY7<

literal 0
HcmV?d00001

diff --git a/package.json b/package.json
index 78ee4f3..d32e5b3 100644
--- a/package.json
+++ b/package.json
@@ -59,6 +59,7 @@
     "pack": "electron-builder --dir",
     "dist": "npm run build && electron-builder",
     "distp": "npm run build && electron-builder --publish always",
+    "distnopublish": "npm run build && electron-builder --publish never",
     "distpnb": "lectron-builder --publish always",
     "postinstall": "electron-builder install-app-deps",
     "sentry:sourcemaps": "sentry-cli sourcemaps inject --org imex --project rps ./build && sentry-cli sourcemaps upload --org imex --project rps ./build"
@@ -113,15 +114,32 @@
       "target": "nsis",
       "icon": "src/icons/win/icon.ico"
     },
+    "mac": {
+      "category": "public.app-category.business",
+      "target": [
+        {
+          "target": "default",
+          "arch": [
+            "universal"
+          ]
+        }
+      ],
+      "artifactName": "${productName}.${ext}",
+      "type": "distribution",
+      "hardenedRuntime": true,
+      "entitlements": "assets/entitlements.mac.plist",
+      "entitlementsInherit": "assets/entitlements.mac.plist",
+      "gatekeeperAssess": false
+    },
     "dmg": {
       "contents": [
         {
-          "x": 110,
-          "y": 150
+          "x": 130,
+          "y": 220
         },
         {
-          "x": 240,
-          "y": 150,
+          "x": 410,
+          "y": 220,
           "type": "link",
           "path": "/Applications"
         }