From 7cd7a4c58b41fd18d353ac10c9987f20c193aef5 Mon Sep 17 00:00:00 2001
From: Lawrence Chen <54008264+lawrencecchen@users.noreply.github.com>
Date: Wed, 28 Jan 2026 22:53:15 -0800
Subject: [PATCH] Codesign embedded CLI for notarization

---
 .github/workflows/release.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 466692be..253e3ff6 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -88,6 +88,10 @@ jobs:
             exit 1
           fi
           APP_PATH="build/Build/Products/Release/cmuxterm.app"
+          CLI_PATH="$APP_PATH/Contents/Resources/bin/cmuxterm"
+          if [ -f "$CLI_PATH" ]; then
+            /usr/bin/codesign --force --options runtime --timestamp --sign "$APPLE_SIGNING_IDENTITY" "$CLI_PATH"
+          fi
           /usr/bin/codesign --force --options runtime --timestamp --sign "$APPLE_SIGNING_IDENTITY" --deep "$APP_PATH"
           /usr/bin/codesign --verify --deep --strict --verbose=2 "$APP_PATH"