From 469d95631203687442737d53a50710e60833fbf8 Mon Sep 17 00:00:00 2001
From: iamtoruk <hello@agentseal.org>
Date: Mon, 11 May 2026 11:11:37 -0700
Subject: [PATCH] Preserve menubar bundle seal during install

---
 mac/Scripts/package-app.sh | 2 +-
 src/menubar-installer.ts   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/mac/Scripts/package-app.sh b/mac/Scripts/package-app.sh
index 5de94ed..ee0dc06 100755
--- a/mac/Scripts/package-app.sh
+++ b/mac/Scripts/package-app.sh
@@ -96,7 +96,7 @@ codesign --verify --deep --strict "${BUNDLE}" 2>/dev/null || echo "  (signature
 ZIP_NAME="CodeBurnMenubar-${VERSION}.zip"
 ZIP_PATH="${DIST_DIR}/${ZIP_NAME}"
 echo "▸ Packaging ${ZIP_NAME}..."
-(cd "${DIST_DIR}" && /usr/bin/ditto -c -k --keepParent "${BUNDLE_NAME}" "${ZIP_NAME}")
+(cd "${DIST_DIR}" && COPYFILE_DISABLE=1 /usr/bin/ditto -c -k --norsrc --keepParent "${BUNDLE_NAME}" "${ZIP_NAME}")
 
 CHECKSUM_NAME="${ZIP_NAME}.sha256"
 CHECKSUM_PATH="${DIST_DIR}/${CHECKSUM_NAME}"
diff --git a/src/menubar-installer.ts b/src/menubar-installer.ts
index b176dee..051c12c 100644
--- a/src/menubar-installer.ts
+++ b/src/menubar-installer.ts
@@ -182,7 +182,7 @@ export async function installMenubarApp(options: { force?: boolean } = {}): Prom
     }
 
     console.log('Unpacking...')
-    await runCommand('/usr/bin/unzip', ['-q', archivePath, '-d', stagingDir])
+    await runCommand('/usr/bin/ditto', ['-x', '-k', archivePath, stagingDir])
 
     const unpackedApp = join(stagingDir, APP_BUNDLE_NAME)
     if (!(await exists(unpackedApp))) {