From 3dcf5da3a8ad4bbf42cc0bae920e2039dc9fd6cd Mon Sep 17 00:00:00 2001
From: Alex Hancock <alexhancock@block.xyz>
Date: Wed, 15 Jul 2026 14:33:31 -0400
Subject: [PATCH] Trim macOS desktop entitlements (#10490)

---
 ui/desktop/entitlements.plist | 14 --------------
 ui/desktop/forge.config.ts    |  8 ++++----
 2 files changed, 4 insertions(+), 18 deletions(-)

diff --git a/ui/desktop/entitlements.plist b/ui/desktop/entitlements.plist
index 69baf877c..4a31ff7a6 100644
--- a/ui/desktop/entitlements.plist
+++ b/ui/desktop/entitlements.plist
@@ -2,33 +2,19 @@
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
   <dict>
-    <key>com.apple.security.files.user-selected.read-write</key>
-    <true/>
-    <key>com.apple.security.files.downloads.read-write</key>
-    <true/>
-    <key>com.apple.security.files.documents.read-write</key>
-    <true/>
     <key>com.apple.security.cs.allow-jit</key>
     <true/>
     <key>com.apple.security.cs.allow-unsigned-executable-memory</key>
     <true/>
     <key>com.apple.security.cs.allow-dyld-environment-variables</key>
     <true/>
-    <key>com.apple.security.screen-recording</key>
-    <true/>
     <key>com.apple.security.automation.apple-events</key>
     <true/>
     <key>com.apple.security.network.client</key>
     <true/>
     <key>com.apple.security.network.server</key>
     <true/>
-    <key>com.apple.security.device.camera</key>
-    <true/>
     <key>com.apple.security.device.audio-input</key>
     <true/>
-    <key>com.apple.security.personal-information.calendars</key>
-    <true/>
-    <key>com.apple.security.personal-information.reminders</key>
-    <true/>
   </dict>
 </plist>
diff --git a/ui/desktop/forge.config.ts b/ui/desktop/forge.config.ts
index 68c097bf9..5bf33a87f 100644
--- a/ui/desktop/forge.config.ts
+++ b/ui/desktop/forge.config.ts
@@ -35,10 +35,10 @@ let cfg = {
       },
     ],
     // Usage descriptions for macOS TCC (Transparency, Consent, and Control)
-    NSCalendarsUsageDescription:
-      'Goose needs access to your calendars to help manage and query calendar events.',
-    NSRemindersUsageDescription:
-      'Goose needs access to your reminders to help manage and query reminders.',
+    NSMicrophoneUsageDescription:
+      'Goose needs access to your microphone for voice dictation.',
+    NSAppleEventsUsageDescription:
+      'Goose needs access to send Apple Events to control other apps on your behalf.',
   },
 };