diff --git a/.github/workflows/tauri-release.yml b/.github/workflows/tauri-release.yml
index 1754b11..4fa7391 100644
--- a/.github/workflows/tauri-release.yml
+++ b/.github/workflows/tauri-release.yml
@@ -15,17 +15,17 @@ jobs:
       matrix:
         os: [windows-latest, ubuntu-latest, macos-latest]
 
-    steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
+    permissions:
+      contents: write
 
-      - name: Setup Node
-        uses: actions/setup-node@v4
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
         with:
           node-version: 20
 
-      - name: Install Rust
-        uses: dtolnay/rust-toolchain@stable
+      - uses: dtolnay/rust-toolchain@stable
 
       - name: Install dependencies (Linux only)
         if: matrix.os == 'ubuntu-latest'
@@ -42,43 +42,22 @@ jobs:
             libayatana-appindicator3-dev \
             librsvg2-dev
 
-      - name: Install frontend dependencies
-        run: npm install
-
-      - name: Build Tauri app
-        run: npm run tauri build
+      - run: npm install
+      - run: npm run tauri build
 
+      # --- macOS fix ---
       - name: Prepare macOS app
         if: matrix.os == 'macos-latest'
         run: |
-          APP_PATH=$(find src-tauri/target/release/bundle/macos -maxdepth 1 -name "*.app")
-
-          echo "App path: $APP_PATH"
-
-          # Extract app name (without .app)
+          APP_PATH=$(find src-tauri/target/release/bundle/macos -name "*.app")
           APP_NAME=$(basename "$APP_PATH" .app)
 
-          echo "App name: $APP_NAME"
-
-          # Ad-hoc sign
+          xattr -cr "$APP_PATH"
           codesign --deep --force --sign - "$APP_PATH"
 
-          # Zip using app name
-          ditto -c -k --keepParent "$APP_PATH" "$APP_NAME.zip"
+          ditto -c -k --keepParent "$APP_PATH" "$APP_NAME-macos.zip"
 
-      - name: Upload artifacts
-        uses: actions/upload-artifact@v4
-        with:
-          name: tauri-build-${{ matrix.os }}
-          path: |
-            src-tauri/target/release/bundle/**/*.AppImage
-            src-tauri/target/release/bundle/**/*.msi
-            src-tauri/target/release/bundle/**/*.exe
-            src-tauri/target/release/bundle/**/*.deb
-            src-tauri/target/release/bundle/**/*.rpm
-            *.zip
-      
-            - name: Upload to GitHub Release
+      - name: Upload to GitHub Release
         if: github.event_name == 'release'
         uses: softprops/action-gh-release@v2
         with: