Fix macOS "damaged" DMG and add delete-model confirmation (v1.2.1)

The macOS build has shipped as "damaged and can't be opened" since
v1.0.0 because electron-builder was producing a hardened-runtime binary
without a matching Apple Developer signature — Gatekeeper treats that
combination as corrupt with no right-click bypass. Drops
hardenedRuntime + entitlements and sets identity: null so the build
falls back to the normal "unidentified developer" prompt users can
bypass, and documents the xattr -cr fallback in the README for
quarantine-blocked downloads.

Also adds a confirm modal before deleting a Whisper model from Settings
so a click on the trash icon no longer wipes the file immediately; the
modal calls out when the target is the currently active model.

Author: Kenshiin13

README.md

@@ -43,7 +43,13 @@ Download the latest installer from the [Releases page](https://github.com/Kenshi
 | Windows 10/11 (x64) | `Echo-Setup-X.Y.Z.exe` |
 | macOS (Apple Silicon) | `Echo-X.Y.Z-arm64.dmg` |
 
-> **macOS note:** the build is unsigned for now. Right-click the app → **Open** on first launch to bypass Gatekeeper.
+> **macOS note:** the build is unsigned (no paid Apple Developer ID). After dragging **Echo** to Applications, right-click the app → **Open** on first launch to bypass Gatekeeper.
+>
+> If macOS still refuses with *"Echo is damaged and can't be opened"*, it's the quarantine flag from the download. Clear it with:
+>
+> ```bash
+> xattr -cr /Applications/Echo.app && open /Applications/Echo.app
+> ```
 
 On first launch, Echo will auto-download the selected whisper model (`base` by default, ~142 MB) with a progress indicator. If you have an NVIDIA GPU and select the **CUDA** backend, it will also download the CUDA-enabled binary.
 

electron/electron-builder.config.js

@@ -69,9 +69,14 @@ module.exports = {
       { target: "dmg", arch: ["arm64"] },
       { target: "dmg", arch: ["x64"] },
     ],
-    entitlements: "build-resources/entitlements.mac.plist",
-    entitlementsInherit: "build-resources/entitlements.mac.plist",
-    hardenedRuntime: true,
+    // We don't have an Apple Developer ID, so we ship unsigned.
+    // `hardenedRuntime: true` with a missing/invalid signature makes Gatekeeper
+    // report the app as "damaged" with no right-click bypass — worse UX than
+    // shipping plain unsigned. `identity: null` tells electron-builder to skip
+    // signing entirely so Gatekeeper falls back to the normal "unidentified
+    // developer" prompt that users can bypass with right-click → Open (and, in
+    // the worst case, by clearing the quarantine xattr — see README).
+    identity: null,
   },
   dmg: {
     contents: [

electron/package.json

@@ -1,6 +1,6 @@
 {
   "name": "echo",
-  "version": "1.2.0",
+  "version": "1.2.1",
   "description": "Local push-to-talk voice-to-text",
   "main": "dist/main/main/index.js",
   "author": "Kenshiin13",

electron/src/renderer/settings/App.tsx

@@ -2,7 +2,7 @@ import React, { useEffect, useRef, useState } from "react";
 import {
   Stack, Group, Text, Button, Select, Switch,
   Badge, Loader, Alert, Box, ScrollArea, ActionIcon,
-  PasswordInput, HoverCard, Anchor,
+  PasswordInput, HoverCard, Anchor, Modal,
 } from "@mantine/core";
 import {
   IconAlertCircle, IconCheck, IconRefresh,
@@ -155,6 +155,7 @@ export function App() {
   const [needsRestart, setNeedsRestart] = useState(false);
   const [downloadedModels, setDownloadedModels] = useState<string[]>([]);
   const [deletingModel, setDeletingModel] = useState<string | null>(null);
+  const [confirmDelete, setConfirmDelete] = useState<string | null>(null);
   const didFireReady = useRef(false);
 
   useEffect(() => {
@@ -171,6 +172,7 @@ export function App() {
 
   async function handleDeleteModel(modelSize: string) {
     setDeletingModel(modelSize);
+    setConfirmDelete(null);
     await window.echo.deleteModel(modelSize);
     const models = await window.echo.listModels();
     setDownloadedModels(models);
@@ -332,7 +334,7 @@ export function App() {
                       radius="sm"
                       loading={deletingModel === m}
                       disabled={deletingModel !== null}
-                      onClick={() => handleDeleteModel(m)}
+                      onClick={() => setConfirmDelete(m)}
                       aria-label={`Delete ${m} model`}
                     >
                       <IconTrash size={13} />
@@ -575,6 +577,44 @@ export function App() {
           </Group>
         </Stack>
       </Box>
+
+      <Modal
+        opened={confirmDelete !== null}
+        onClose={() => setConfirmDelete(null)}
+        title="Delete model?"
+        centered
+        radius="md"
+        overlayProps={{ backgroundOpacity: 0.5, blur: 3 }}
+      >
+        <Stack gap="md">
+          <Text size="sm">
+            Delete{" "}
+            <Text span fw={600} c="echo.4">
+              {confirmDelete ? (MODEL_LABELS[confirmDelete] ?? confirmDelete) : ""}
+            </Text>
+            ? You can re-download it any time, but it'll need to be fetched again.
+          </Text>
+          {confirmDelete === config?.modelSize && (
+            <Alert icon={<IconAlertCircle size={14} />} color="yellow" variant="light" radius="md" p="xs">
+              <Text size="xs">
+                This is your <Text span fw={600}>currently active</Text> model. Transcription will be unavailable until you pick another model or re-download.
+              </Text>
+            </Alert>
+          )}
+          <Group justify="flex-end" gap="sm">
+            <Button variant="default" onClick={() => setConfirmDelete(null)}>
+              Cancel
+            </Button>
+            <Button
+              color="red"
+              leftSection={<IconTrash size={14} />}
+              onClick={() => confirmDelete && handleDeleteModel(confirmDelete)}
+            >
+              Delete
+            </Button>
+          </Group>
+        </Stack>
+      </Modal>
     </Box>
   );
 }