From e658c6c9cf88bc77d7deb0720697c2e6ab2ab43f Mon Sep 17 00:00:00 2001
From: Mathias Beaulieu-Duncan <mathias@svrnty.io>
Date: Tue, 7 Apr 2026 14:14:18 -0400
Subject: [PATCH] fix: add files.user-selected.read-only entitlement for
 file_picker

The file_picker plugin requires com.apple.security.files.user-selected.read-only
to be present in the app's entitlements. It checks this at runtime via
SecTaskCopyValueForEntitlement and throws ENTITLEMENT_NOT_FOUND without it.
This was lost during a previous entitlements cleanup.

Signed, notarized, stapled DMG
---
 macos/Runner/Release.entitlements | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/macos/Runner/Release.entitlements b/macos/Runner/Release.entitlements
index 6eace1e..1a1baee 100644
--- a/macos/Runner/Release.entitlements
+++ b/macos/Runner/Release.entitlements
@@ -4,5 +4,7 @@
 <dict>
 <key>com.apple.security.get-task-allow</key>
 <false/>
+<key>com.apple.security.files.user-selected.read-only</key>
+<true/>
 </dict>
 </plist>