From 3e96a6e3949701902ad27c4150f245a6c6d3d2de Mon Sep 17 00:00:00 2001
From: hariel1985 <ariel.hartung@gmail.com>
Date: Fri, 26 Jun 2026 13:34:05 +0200
Subject: [PATCH] Fix microphone under hardened runtime: add audio-input
 entitlement

The v1.2.0 Developer ID re-sign enabled the hardened runtime but the
entitlements were missing com.apple.security.device.audio-input. Under
the hardened runtime tccd refuses to even prompt for the microphone and
denies kTCCServiceMicrophone outright, so the app recorded pure silence
and whisper hallucinated text on the empty audio. Adding the resource
-access entitlement restores the mic permission prompt.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 macos/WhisperDictate.entitlements | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/macos/WhisperDictate.entitlements b/macos/WhisperDictate.entitlements
index 8454dbf..d6f9fed 100644
--- a/macos/WhisperDictate.entitlements
+++ b/macos/WhisperDictate.entitlements
@@ -12,5 +12,12 @@
 	     hardened runtime's same-Team-ID check. -->
 	<key>com.apple.security.cs.disable-library-validation</key>
 	<true/>
+	<!-- Hardened-runtime resource-access entitlement. REQUIRED for microphone
+	     access under the hardened runtime: without it tccd refuses to even
+	     prompt and denies kTCCServiceMicrophone outright, so the app records
+	     silence (and whisper hallucinates on the empty audio). Must be present
+	     on any Developer ID / notarized build. -->
+	<key>com.apple.security.device.audio-input</key>
+	<true/>
 </dict>
 </plist>