fix: strip quarantine flag via cask preflight on install

Adds preflight block to Homebrew cask to automatically remove the
quarantine attribute before app is moved to /Applications, preventing
the "damaged" warning on macOS without requiring code signing.

Also documents manual xattr fix in README for zip-based installs.

Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>

Author: mathiasconradt

Casks/screen-cursor.rb

@@ -16,5 +16,11 @@
 
   app "Screen Cursor.app"
 
+  preflight do
+    system_command "/usr/bin/xattr",
+                   args: ["-cr", "#{staged_path}/Screen Cursor.app"],
+                   sudo: false
+  end
+
   zap trash: "~/Library/Preferences/com.local.ScreenCursor.plist"
 end

Makefile

@@ -10,19 +10,21 @@ VERSION := $(shell /usr/libexec/PlistBuddy -c "Print :CFBundleShortVersionString
 ZIP_NAME := Screen-Cursor-$(VERSION).zip
 ZIP_PATH := $(DIST_DIR)/$(ZIP_NAME)
 
-.PHONY: all clean dist run icon
+.PHONY: all clean dist zip run icon
 
 all: $(SOURCES) $(INFO_PLIST)
 	mkdir -p "$(APP_BUNDLE)/Contents/MacOS" "$(APP_BUNDLE)/Contents/Resources"
 	swiftc -O -target arm64-apple-macos13.0 -framework Cocoa -framework Carbon "$(SOURCES)" -o "$(EXECUTABLE)"
 	cp "$(INFO_PLIST)" "$(APP_BUNDLE)/Contents/Info.plist"
 	cp "Resources/AppIcon.icns" "$(APP_BUNDLE)/Contents/Resources/"
 
-dist: clean all
+zip:
 	mkdir -p "$(DIST_DIR)"
 	ditto -c -k --keepParent "$(APP_BUNDLE)" "$(ZIP_PATH)"
 	shasum -a 256 "$(ZIP_PATH)"
 
+dist: clean all zip
+
 run: all
 	open "$(APP_BUNDLE)"
 

README.md

@@ -48,6 +48,12 @@ brew tap mathiasconradt/screencursor https://github.com/mathiasconradt/screencur
 brew install --cask screen-cursor
 ```
 
+If you downloaded the zip manually and macOS says the app is damaged, run:
+
+```sh
+xattr -cr "/Applications/Screen Cursor.app"
+```
+
 Settings are saved with `UserDefaults`:
 
 - Highlight enabled