From 8b54da6adfb5015f45c42dca9a8b5f480f5ab4c2 Mon Sep 17 00:00:00 2001
From: "Tomasz K." <tomaszk8266@proton.me>
Date: Sat, 11 Jul 2026 00:19:02 +0200
Subject: [PATCH] macOS: Sign the patched app before launching and increase
 timeout

---
 index.js | 22 +++++++++++++++++++++-
 1 file changed, 21 insertions(+), 1 deletion(-)

diff --git a/index.js b/index.js
index 6c450f4..3189baa 100644
--- a/index.js
+++ b/index.js
@@ -364,7 +364,7 @@ async function captureIntegrityHashes(executablePath) {
 				child.kill();
 				reject(new Error("Timed out waiting for integrity check output"));
 			}
-		}, 20000);
+		}, 30000);
 
 		const handleData = data => {
 			output += data.toString();
@@ -663,6 +663,26 @@ async function patchApp() {
 		process.exit(1);
 	}
 
+  // macOS: Sign the patched app
+  if (isMac) {
+    const appBundlePath = path.resolve(appPath, '..', '..');
+    console.log(chalk.yellowBright('[+] Signing HTTP Toolkit with ad-hoc signature...'));
+    try {
+      execSync(`codesign --deep --force --sign - "${appBundlePath}"`, {stdio: "pipe"});
+      console.log(chalk.greenBright('[+] HTTP Toolkit signed successfully'));
+      console.log(chalk.yellowBright(`    Make sure to whitelist the app in privacy and security settings!`));
+    } catch (e) {
+      rm(extractPath);
+      console.error(chalk.redBright(`[!] Failed to sign HTTP Toolkit: ${e.message}`));
+      process.exit(1);
+    }
+    try {
+      execSync(`xattr -d com.apple.quarantine "${appBundlePath}" 2>/dev/null`, {stdio: 'pipe'});
+    } catch (e) {
+      console.log(chalk.redBright('[!] Failed to remove the quarantine attribute'));
+    }
+  }
+
 	console.log(chalk.yellowBright('[+] Launching HTTP Toolkit to read integrity hashes...'));
 	let hashes;
 	try {