From 9d531435b4138f0658abc4b80da1e47bd00ea6de Mon Sep 17 00:00:00 2001
From: "opencode-agent[bot]"
 <219766164+opencode-agent[bot]@users.noreply.github.com>
Date: Tue, 22 Sep 2026 01:35:21 +0000
Subject: [PATCH] fix(desktop): stop signing macOS DMGs (#50469)

Co-authored-by: Brendonovich <14191578+Brendonovich@users.noreply.github.com>
---
 packages/desktop/electron-builder.config.test.ts | 6 ++++++
 packages/desktop/electron-builder.config.ts      | 3 ---
 2 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/packages/desktop/electron-builder.config.test.ts b/packages/desktop/electron-builder.config.test.ts
index 256a3bb2a3c..d4607cd6296 100644
--- a/packages/desktop/electron-builder.config.test.ts
+++ b/packages/desktop/electron-builder.config.test.ts
@@ -17,6 +17,12 @@ const channels = [
   { channel: "prod", appId: "ai.opencode.desktop" },
 ] as const
 
+test("signs the macOS app without signing the DMG", async () => {
+  const config = (await import("./electron-builder.config.ts?mac-signing")).default as Configuration
+  expect(config.mac?.sign).toBeFunction()
+  expect(config.dmg?.sign).not.toBe(true)
+})
+
 for (const channel of channels) {
   test(`disables security code AutoFill by default for ${channel.channel}`, async () => {
     const previous = process.env.OPENCODE_CHANNEL
diff --git a/packages/desktop/electron-builder.config.ts b/packages/desktop/electron-builder.config.ts
index 3188999bacc..3cb1302ee80 100644
--- a/packages/desktop/electron-builder.config.ts
+++ b/packages/desktop/electron-builder.config.ts
@@ -123,9 +123,6 @@ const getBase = (appId: string): Configuration => ({
     notarize: true,
     target: ["dmg", "zip"],
   },
-  dmg: {
-    sign: true,
-  },
   protocols: {
     name: "OpenCode",
     schemes: ["opencode"],