fix(ci): add author email for Linux deb, fix macOS cert as file path

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.github/workflows/build.yml

@@ -77,13 +77,6 @@ jobs:
           - arch: x64
             runner: macos-15
             builder_args: --mac --x64
-    env:
-      CSC_LINK: ${{ secrets.MAC_CERTIFICATE_P12_BASE64 }}
-      CSC_KEY_PASSWORD: ${{ secrets.MAC_CERTIFICATE_PASSWORD }}
-      CSC_IDENTITY_AUTO_DISCOVERY: 'true'
-      APPLE_ID: ${{ secrets.APPLE_ID }}
-      APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }}
-      APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
     steps:
       - uses: actions/checkout@v4
       - uses: pnpm/action-setup@v4
@@ -94,10 +87,22 @@ jobs:
           node-version: ${{ env.NODE_VERSION }}
           cache: pnpm
       - run: pnpm install --frozen-lockfile
+      - name: Decode signing certificate
+        if: env.CERT_B64 != ''
+        env:
+          CERT_B64: ${{ secrets.MAC_CERTIFICATE_P12_BASE64 }}
+        run: echo "$CERT_B64" | base64 --decode > /tmp/cert.p12
       - name: Build electron-vite
         run: pnpm exec electron-vite build
       - name: Package & sign
         run: pnpm exec electron-builder ${{ matrix.builder_args }} --config electron-builder.yml --publish never
+        env:
+          CSC_LINK: ${{ secrets.MAC_CERTIFICATE_P12_BASE64 != '' && '/tmp/cert.p12' || '' }}
+          CSC_KEY_PASSWORD: ${{ secrets.MAC_CERTIFICATE_PASSWORD }}
+          CSC_IDENTITY_AUTO_DISCOVERY: ${{ secrets.MAC_CERTIFICATE_P12_BASE64 != '' && 'true' || 'false' }}
+          APPLE_ID: ${{ secrets.APPLE_ID }}
+          APPLE_APP_SPECIFIC_PASSWORD: ${{ secrets.APPLE_APP_SPECIFIC_PASSWORD }}
+          APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
       - uses: actions/upload-artifact@v4
         with:
           name: macos-${{ matrix.arch }}

electron-builder.yml

@@ -23,8 +23,6 @@ mac:
         - arm64
   hardenedRuntime: true
   gatekeeperAssess: false
-  entitlements: assets/entitlements.mac.plist
-  entitlementsInherit: assets/entitlements.mac.plist
   notarize: false
 
 win:

package.json

@@ -4,7 +4,10 @@
   "private": true,
   "type": "module",
   "description": "Cross-platform Electron desktop control plane for local-first AI agent companies.",
-  "author": "AgentCompany",
+  "author": {
+    "name": "AgentCompany",
+    "email": "dev@agentcompany.ai"
+  },
   "main": "out/main/index.js",
   "scripts": {
     "assets:generate": "python3 scripts/generate-icons.py",