From daf5844d6afdaa03b56eff133c8a32e944708e29 Mon Sep 17 00:00:00 2001
From: AugustoOM <augustojedamathe@gmail.com>
Date: Tue, 8 Sep 2026 16:40:58 -0300
Subject: [PATCH 1/2] fix(release): apply macOS ad-hoc signature

---
 .github/workflows/desktop-release.yml        | 8 +++++++-
 apps/desktop/src-tauri/tauri.adhoc.conf.json | 8 ++++++++
 2 files changed, 15 insertions(+), 1 deletion(-)
 create mode 100644 apps/desktop/src-tauri/tauri.adhoc.conf.json

diff --git a/.github/workflows/desktop-release.yml b/.github/workflows/desktop-release.yml
index a6f0d40..faa4d62 100644
--- a/.github/workflows/desktop-release.yml
+++ b/.github/workflows/desktop-release.yml
@@ -146,8 +146,14 @@ jobs:
 
       - name: Build universal macOS installer
         if: runner.os == 'macOS'
+        shell: bash
         working-directory: apps/desktop
-        run: pnpm tauri build --target universal-apple-darwin
+        run: |
+          if [[ "$APPLE_SIGNING_MODE" == "developer-id" ]]; then
+            pnpm tauri build --target universal-apple-darwin
+          else
+            pnpm tauri build --target universal-apple-darwin --config src-tauri/tauri.adhoc.conf.json
+          fi
 
       - name: Verify Windows installers and configured signatures
         if: runner.os == 'Windows'
diff --git a/apps/desktop/src-tauri/tauri.adhoc.conf.json b/apps/desktop/src-tauri/tauri.adhoc.conf.json
new file mode 100644
index 0000000..419fa2e
--- /dev/null
+++ b/apps/desktop/src-tauri/tauri.adhoc.conf.json
@@ -0,0 +1,8 @@
+{
+  "$schema": "https://schema.tauri.app/config/2",
+  "bundle": {
+    "macOS": {
+      "signingIdentity": "-"
+    }
+  }
+}

From b181d5bfc016fffd135735c8922742de2a369bce Mon Sep 17 00:00:00 2001
From: AugustoOM <augustojedamathe@gmail.com>
Date: Tue, 8 Sep 2026 16:42:18 -0300
Subject: [PATCH 2/2] ci(release): package desktop builds before merge

---
 .github/workflows/desktop-release.yml | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/.github/workflows/desktop-release.yml b/.github/workflows/desktop-release.yml
index faa4d62..704b425 100644
--- a/.github/workflows/desktop-release.yml
+++ b/.github/workflows/desktop-release.yml
@@ -4,6 +4,15 @@ on:
   push:
     branches:
       - master
+  pull_request:
+    branches:
+      - master
+    paths:
+      - '.github/workflows/desktop-release.yml'
+      - 'apps/desktop/**'
+      - 'packages/**'
+      - 'package.json'
+      - 'pnpm-lock.yaml'
   workflow_dispatch:
 
 env:
@@ -222,6 +231,7 @@ jobs:
 
   publish:
     name: Publish GitHub Release
+    if: github.event_name != 'pull_request'
     runs-on: ubuntu-latest
     needs: build
     env: