microverse/Microverse.entitlements at dev · ashwch/microverse · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <!-- Enable App Sandbox for security and App Store compliance -->
    <key>com.apple.security.app-sandbox</key>
    <true/>

    <!-- Required for IOKit battery information access -->
    <!-- IOPMPowerSource is accessible in sandbox without special entitlements -->
    <!-- The app uses IOPSCopyPowerSourcesInfo which works in sandbox -->

    <!-- Network access for secure auto-updates via Sparkle framework -->
    <key>com.apple.security.network.client</key>
    <true/>

    <!-- File system access for update downloads -->
    <key>com.apple.security.files.downloads.read-write</key>
    <true/>

    <!-- Location access for current-location weather -->
    <key>com.apple.security.personal-information.location</key>
    <true/>

    <!-- Bluetooth access for AirPods battery monitoring -->
    <key>com.apple.security.device.bluetooth</key>
    <true/>

    <!-- CRITICAL: Sparkle XPC service entitlements for sandboxed apps -->
    <key>com.apple.security.temporary-exception.mach-lookup.global-name</key>
    <array>
        <string>com.microverse.app-spks</string>
        <string>com.microverse.app-spki</string>
    </array>

    <!-- No special entitlements needed for:
         - Menu bar apps (LSUIElement)
         - UserDefaults preferences
         - Standard UI operations
         - IOKit power source queries
    -->
</dict>
</plist>