Switches Linux packaging from .deb to .snap, eliminates the matrix-with-conditionals CI pattern by giving each platform its own job, and adds proper macOS ad-hoc code signing so downloaded DMGs don't trigger Gatekeeper's "app is damaged" warning.

package.json

• Linux target: ["AppImage", "deb"] → ["AppImage", "snap"]
• Added snap section: confinement: classic (required — app spawns external binaries from extraResources), grade: stable

CI workflow — split jobs

Replaced single build job (2-runner matrix + per-step if: guards) with three self-contained jobs, zero conditionals, zero matrix:

build-linux installs snapcraft --classic before invoking electron-builder.

macOS code signing — new files

build/macos/codesign.sh — bottom-up signing (dylibs → Electron helpers → frameworks → executables → top-level .app):

• Defaults to ad-hoc (MACOS_SIGNING_IDENTITY="-") — eliminates Gatekeeper quarantine without a paid certificate
• Adds --timestamp automatically when a real Developer ID is provided via the MACOS_SIGNING_IDENTITY secret

build/macos/entitlements.plist — Electron-appropriate entitlements:

• app-sandbox: false — spawns external binaries (ace-qwen3, dit-vae, neural-codec)
• cs.disable-library-validation + cs.allow-unsigned-executable-memory — bundled unsigned libggml* dylibs + GGML inference
• cs.allow-jit — Metal/GGML JIT kernel compilation

build-mac signing flow (replaces the single electron:build:mac step):

electron-builder --mac --dir   →  release/mac-arm64/<Name>.app  (unsigned)
build/macos/codesign.sh        →  signs .app in-place
hdiutil create                 →  release/<Name>-<version>-arm64.dmg  (signed, with /Applications symlink)

Release notes updated with per-platform install instructions and the xattr -cr fallback for macOS.

💬 Send tasks to Copilot coding agent from Slack and Teams to turn conversations into code. Copilot posts an update in your thread when it's finished.