macOS build is ad-hoc signed with no Team ID: Accessibility grant does not persist (please ship Developer ID + notarized) #807

Summary

The macOS 0.5.7 build is ad-hoc signed with no Team ID. macOS keys privacy grants (Accessibility, microphone) to the code signature, and an ad-hoc signature has no stable identity, so the Accessibility permission the app needs does not persist for us across app restarts and reboots; we have to re-grant it.

Version

Munder Difflin 0.5.7, packaged macOS app (Electron 32.3.3), macOS 26.6.2 arm64.

What the installed bundle reports

codesign -dv --verbose=2 "/Applications/Munder Difflin.app":

Identifier=in.munderdiffl.app
CodeDirectory v=20400 flags=0x2(adhoc)
Signature=adhoc
TeamIdentifier=not set

With Signature=adhoc and no TeamIdentifier, macOS can only identify the app by its code hash (cdhash), which changes with every build. Developer ID-signed builds are identified by their Team ID and bundle identifier instead, so a grant survives updates and restarts.

Note on our copy

We replaced Contents/Resources/app.asar locally with a one-line fix for #805, so codesign --verify --deep --strict on our copy reports "a sealed resource is missing or invalid". The seal change is ours. The ad-hoc signature with no Team ID is how the build ships, and is what we are reporting here.

Request

Ship a Developer ID-signed and notarized build (hardened runtime plus the entitlements the app needs for audio input), so Accessibility and microphone grants persist and Gatekeeper does not need an override.