Unified · Split
| @@ -0,0 +1,30 @@ | |||
| 1 | <?xml version="1.0" encoding="UTF-8"?> | ||
| 2 | <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> | ||
| 3 | <plist version="1.0"> | ||
| 4 | <dict> | ||
| 5 | <!-- Electron's V8 / Chromium needs JIT pages writable+executable --> | ||
| 6 | <key>com.apple.security.cs.allow-jit</key> | ||
| 7 | <true/> | ||
| 8 | <key>com.apple.security.cs.allow-unsigned-executable-memory</key> | ||
| 9 | <true/> | ||
| 10 | <!-- Electron reads NODE_OPTIONS / NODE_PATH at startup; the bundled executor | ||
| 11 | reads EXECUTOR_* env vars. Hardened runtime would strip them | ||
| 12 | without this entitlement. --> | ||
| 13 | <key>com.apple.security.cs.allow-dyld-environment-variables</key> | ||
| 14 | <true/> | ||
| 15 | <!-- The Bun-compiled executor binary inside Resources/executor/ | ||
| 16 | loads dylibs Apple's library validator doesn't recognize as part | ||
| 17 | of the Electron bundle's signing chain. --> | ||
| 18 | <key>com.apple.security.cs.disable-library-validation</key> | ||
| 19 | <true/> | ||
| 20 | <!-- Codex plugins (Messages) drive other apps via Apple Events, and TCC | ||
| 21 | attributes those to the RESPONSIBLE process — this app and the | ||
| 22 | bundled executor daemon, both signed with this file. Under hardened | ||
| 23 | runtime, tccd refuses to even PROMPT without this entitlement | ||
| 24 | ("Policy disallows prompt"): the call is denied silently, no | ||
| 25 | Automation row is created, and there is nothing for the user to | ||
| 26 | enable. --> | ||
| 27 | <key>com.apple.security.automation.apple-events</key> | ||
| 28 | <true/> | ||
| 29 | </dict> | ||
| 30 | </plist> | ||
Binary file not shown.
