Fix DMG code signing with afterPack re-sign hook

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

1 files changed, 9 insertions, 0 deletions

diff --git a/scripts/afterPack.js b/scripts/afterPack.js
new file mode 100644
index 0000000..979ba14
--- /dev/null
+++ b/scripts/afterPack.js
@@ -0,0 +1,9 @@
+const { execSync } = require('child_process')
+const path = require('path')
+
+exports.default = async function (context) {
+  if (context.electronPlatformName !== 'darwin') return
+  const appPath = path.join(context.appOutDir, `${context.packager.appInfo.productFilename}.app`)
+  console.log(`Re-signing ${appPath}`)
+  execSync(`codesign --force --deep --sign - "${appPath}"`)
+}