From 84d3aa19628f321166f0bd8056646444b35b32e8 Mon Sep 17 00:00:00 2001
From: Mohamed Boudra <boudra.moha@gmail.com>
Date: Sat, 21 Mar 2026 14:46:26 +0700
Subject: [PATCH] fix(desktop): update release workflow for Electron migration
 and add notarization
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Fix desktop-release workflow to reference correct package path after
Tauri→Electron migration. Add macOS entitlements and notarization config
for electron-builder.
---
 .github/workflows/desktop-release.yml                 |  4 ++--
 packages/desktop/build/entitlements.mac.inherit.plist | 10 ++++++++++
 packages/desktop/build/entitlements.mac.plist         | 10 ++++++++++
 packages/desktop/electron-builder.yml                 |  4 ++++
 4 files changed, 26 insertions(+), 2 deletions(-)
 create mode 100644 packages/desktop/build/entitlements.mac.inherit.plist
 create mode 100644 packages/desktop/build/entitlements.mac.plist

diff --git a/.github/workflows/desktop-release.yml b/.github/workflows/desktop-release.yml
index ba687e63e..e62043e08 100644
--- a/.github/workflows/desktop-release.yml
+++ b/.github/workflows/desktop-release.yml
@@ -31,8 +31,8 @@ concurrency:
 
 env:
   SOURCE_TAG: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.tag || github.ref_name }}
-  DESKTOP_WORKSPACE: '@getpaseo/desktop-electron'
-  DESKTOP_PACKAGE_PATH: 'packages/desktop-electron'
+  DESKTOP_WORKSPACE: '@getpaseo/desktop'
+  DESKTOP_PACKAGE_PATH: 'packages/desktop'
 
 jobs:
   publish-macos:
diff --git a/packages/desktop/build/entitlements.mac.inherit.plist b/packages/desktop/build/entitlements.mac.inherit.plist
new file mode 100644
index 000000000..9ab52e13b
--- /dev/null
+++ b/packages/desktop/build/entitlements.mac.inherit.plist
@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>com.apple.security.cs.allow-jit</key>
+  <true/>
+  <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+  <true/>
+</dict>
+</plist>
diff --git a/packages/desktop/build/entitlements.mac.plist b/packages/desktop/build/entitlements.mac.plist
new file mode 100644
index 000000000..9ab52e13b
--- /dev/null
+++ b/packages/desktop/build/entitlements.mac.plist
@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>com.apple.security.cs.allow-jit</key>
+  <true/>
+  <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
+  <true/>
+</dict>
+</plist>
diff --git a/packages/desktop/electron-builder.yml b/packages/desktop/electron-builder.yml
index 2630eadba..7ca87373f 100644
--- a/packages/desktop/electron-builder.yml
+++ b/packages/desktop/electron-builder.yml
@@ -15,6 +15,10 @@ publish:
 mac:
   category: public.app-category.developer-tools
   icon: assets/icon.icns
+  hardenedRuntime: true
+  notarize: true
+  entitlements: build/entitlements.mac.plist
+  entitlementsInherit: build/entitlements.mac.inherit.plist
   extraFiles:
     - from: scripts/paseo
       to: MacOS/paseo