Unified · Split
| @@ -0,0 +1,30 @@ | ||
| 1 | +<?xml version="1.0" encoding="UTF-8"?> | |
| 2 | +<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> | |
| 3 | +<plist version="1.0"> | |
| 4 | +<dict> | |
| 5 | + <!-- Electron's V8 / Chromium needs JIT pages writable+executable --> | |
| 6 | + <key>com.apple.security.cs.allow-jit</key> | |
| 7 | + <true/> | |
| 8 | + <key>com.apple.security.cs.allow-unsigned-executable-memory</key> | |
| 9 | + <true/> | |
| 10 | + <!-- Electron reads NODE_OPTIONS / NODE_PATH at startup; the bundled executor | |
| 11 | + reads EXECUTOR_* env vars. Hardened runtime would strip them | |
| 12 | + without this entitlement. --> | |
| 13 | + <key>com.apple.security.cs.allow-dyld-environment-variables</key> | |
| 14 | + <true/> | |
| 15 | + <!-- The Bun-compiled executor binary inside Resources/executor/ | |
| 16 | + loads dylibs Apple's library validator doesn't recognize as part | |
| 17 | + of the Electron bundle's signing chain. --> | |
| 18 | + <key>com.apple.security.cs.disable-library-validation</key> | |
| 19 | + <true/> | |
| 20 | + <!-- Codex plugins (Messages) drive other apps via Apple Events, and TCC | |
| 21 | + attributes those to the RESPONSIBLE process — this app and the | |
| 22 | + bundled executor daemon, both signed with this file. Under hardened | |
| 23 | + runtime, tccd refuses to even PROMPT without this entitlement | |
| 24 | + ("Policy disallows prompt"): the call is denied silently, no | |
| 25 | + Automation row is created, and there is nothing for the user to | |
| 26 | + enable. --> | |
| 27 | + <key>com.apple.security.automation.apple-events</key> | |
| 28 | + <true/> | |
| 29 | +</dict> | |
| 30 | +</plist> | |
Binary file not shown.
