From 95764c7d97b9940c6051c22615363c9e30736272 Mon Sep 17 00:00:00 2001
From: Adrian Castro <22133246+castdrian@users.noreply.github.com>
Date: Wed, 19 Aug 2026 18:27:53 +0200
Subject: [PATCH] fix(build): strip macOS staging metadata before signing

---
 scripts/build.sh | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/scripts/build.sh b/scripts/build.sh
index a110d55c..0cf341fd 100755
--- a/scripts/build.sh
+++ b/scripts/build.sh
@@ -189,6 +189,8 @@ build_mac() {
   /usr/libexec/PlistBuddy -c "Set :CFBundleIconFile OS X AppIcon" "$plist" 2>/dev/null \
     || /usr/libexec/PlistBuddy -c "Add :CFBundleIconFile string 'OS X AppIcon'" "$plist"
 
+  xattr -rc "$out_app"
+
   local id="$IDENTITY"
   if [ -z "$id" ]; then
     id="$(security find-identity -v -p codesigning 2>/dev/null | grep 'Developer ID Application' | head -1 | sed -E 's/^[^"]*"(.*)"$/\1/' || true)"
@@ -221,9 +223,11 @@ build_mac() {
     fi
   fi
 
+  xattr -rc "$out_app"
+
   local zip_out="$DIST/mac/$APP_NAME-macos.zip"
   rm -f "$zip_out"
-  (cd "$WORK" && ditto -c -k --sequesterRsrc --keepParent "$APP_NAME.app" "$zip_out")
+  (cd "$WORK" && ditto -c -k --norsrc --keepParent "$APP_NAME.app" "$zip_out")
   say "macOS build: $zip_out"
 }