Add microphone entitlements for macOS

Adds audio-input entitlement and NSMicrophoneUsageDescription so the app
can request microphone access when running as a signed/notarized bundle.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: revmischa

.github/workflows/release-macos.yaml

@@ -156,19 +156,20 @@ jobs:
         run: |
           APP_PATH="${{ github.workspace }}/install/projectM.app"
           IDENTITY="Developer ID Application: Mischa Spiegelmock (5926VBQM6Y)"
+          ENTITLEMENTS="${{ github.workspace }}/frontend-sdl2/src/resources/projectMSDL.entitlements"
 
           # Sign all dylibs first (if PlugIns directory exists)
           if [ -d "$APP_PATH/Contents/PlugIns" ]; then
             find "$APP_PATH/Contents/PlugIns" -name "*.dylib" -exec \
               codesign --force --options runtime --sign "$IDENTITY" {} \;
           fi
 
-          # Sign the main executable
-          codesign --force --options runtime --sign "$IDENTITY" \
+          # Sign the main executable with entitlements
+          codesign --force --options runtime --entitlements "$ENTITLEMENTS" --sign "$IDENTITY" \
             "$APP_PATH/Contents/MacOS/projectM"
 
-          # Sign the entire bundle
-          codesign --force --options runtime --sign "$IDENTITY" "$APP_PATH"
+          # Sign the entire bundle with entitlements
+          codesign --force --options runtime --entitlements "$ENTITLEMENTS" --sign "$IDENTITY" "$APP_PATH"
 
           # Verify
           codesign --verify --deep --strict "$APP_PATH"

src/CMakeLists.txt

@@ -31,6 +31,7 @@ set_target_properties(projectMSDL PROPERTIES
         MACOSX_BUNDLE_GUI_IDENTIFIER "org.projectm.frontend.sdl2"
         MACOSX_BUNDLE_ICON_FILE "projectMSDL.icns"
         MACOSX_BUNDLE_SHORT_VERSION_STRING "${projectMSDL_VERSION}"
+        MACOSX_BUNDLE_INFO_PLIST "${CMAKE_CURRENT_SOURCE_DIR}/resources/Info.plist.in"
         )
 
 if (CMAKE_SYSTEM_NAME STREQUAL "Windows")

src/resources/Info.plist.in

@@ -0,0 +1,30 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>CFBundleDevelopmentRegion</key>
+    <string>en</string>
+    <key>CFBundleExecutable</key>
+    <string>@MACOSX_BUNDLE_EXECUTABLE_NAME@</string>
+    <key>CFBundleIconFile</key>
+    <string>@MACOSX_BUNDLE_ICON_FILE@</string>
+    <key>CFBundleIdentifier</key>
+    <string>@MACOSX_BUNDLE_GUI_IDENTIFIER@</string>
+    <key>CFBundleInfoDictionaryVersion</key>
+    <string>6.0</string>
+    <key>CFBundleName</key>
+    <string>@MACOSX_BUNDLE_BUNDLE_NAME@</string>
+    <key>CFBundlePackageType</key>
+    <string>APPL</string>
+    <key>CFBundleShortVersionString</key>
+    <string>@MACOSX_BUNDLE_SHORT_VERSION_STRING@</string>
+    <key>CFBundleVersion</key>
+    <string>@MACOSX_BUNDLE_BUNDLE_VERSION@</string>
+    <key>NSHumanReadableCopyright</key>
+    <string>@MACOSX_BUNDLE_COPYRIGHT@</string>
+    <key>NSHighResolutionCapable</key>
+    <true/>
+    <key>NSMicrophoneUsageDescription</key>
+    <string>projectM requires microphone access to visualize audio input.</string>
+</dict>
+</plist>

src/resources/projectMSDL.entitlements

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>com.apple.security.device.audio-input</key>
+    <true/>
+</dict>
+</plist>