| 1 | <?xml version="1.0" encoding="UTF-8"?> |
| 2 | <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> |
| 3 | <plist version="1.0"> |
| 4 | <dict> |
| 5 | <!-- Debug-only (active via project.yml's LChatMac Debug |
| 6 | CODE_SIGN_ENTITLEMENTS; needs a real Development profile — the Mac is |
| 7 | registered in team J5NDF5PCD8). The PLAIN association, deliberately: |
| 8 | macOS's ?mode=developer path never engaged (swcd ignored the app even |
| 9 | with developer-mode on, lsregister forced, and its cache reset — AS |
| 10 | 1004 throughout), while the normal fetch works because home's AASA is |
| 11 | public. iOS Debug keeps its ?mode=developer entitlement. --> |
| 12 | <key>com.apple.developer.associated-domains</key> |
| 13 | <array> |
| 14 | <string>webcredentials:home.elevenmessenger.com</string> |
| 15 | <!-- The dev clone, for builds pointed there via HomeBase's |
| 16 | LCHAT_HOME_BASE / home_base_override. Plain association like the |
| 17 | one above (?mode=developer never engaged on macOS). --> |
| 18 | <string>webcredentials:home.dev.elevenmessenger.com</string> |
| 19 | <!-- Universal links over /join (#1376) — mirrors the ship set |
| 20 | (LChatMac.entitlements), plain association as above. --> |
| 21 | <string>applinks:*.elevenmessenger.com</string> |
| 22 | <string>applinks:11ch.at</string> |
| 23 | <string>applinks:*.11ch.at</string> |
| 24 | </array> |
| 25 | <!-- Everything below mirrors LChatMac.entitlements (the ship set) so dev |
| 26 | builds run under the same sandbox they'll ship with. --> |
| 27 | <key>com.apple.security.app-sandbox</key> |
| 28 | <true/> |
| 29 | <key>com.apple.security.network.client</key> |
| 30 | <true/> |
| 31 | <key>com.apple.security.files.user-selected.read-write</key> |
| 32 | <true/> |
| 33 | <!-- Saving an attachment writes to the REAL ~/Downloads; without it the |
| 34 | sandbox silently redirects to the container's own Downloads (see |
| 35 | LChatMac.entitlements for the full note). --> |
| 36 | <key>com.apple.security.files.downloads.read-write</key> |
| 37 | <true/> |
| 38 | <key>keychain-access-groups</key> |
| 39 | <array> |
| 40 | <string>$(AppIdentifierPrefix)com.elevenmessenger.messenger.shared</string> |
| 41 | </array> |
| 42 | <!-- App group — see LChatMac.entitlements: without it the sandbox denies |
| 43 | both the avatar cache (banners monogram forever) and MessageStore's |
| 44 | local search index (search returns nothing, #1121). --> |
| 45 | <key>com.apple.security.application-groups</key> |
| 46 | <array> |
| 47 | <string>group.com.elevenmessenger.messenger</string> |
| 48 | </array> |
| 49 | <key>com.apple.developer.usernotifications.communication</key> |
| 50 | <true/> |
| 51 | <!-- Sparkle installer mach services — see LChatMac.entitlements. --> |
| 52 | <key>com.apple.security.temporary-exception.mach-lookup.global-name</key> |
| 53 | <array> |
| 54 | <string>$(PRODUCT_BUNDLE_IDENTIFIER)-spks</string> |
| 55 | <string>$(PRODUCT_BUNDLE_IDENTIFIER)-spki</string> |
| 56 | </array> |
| 57 | </dict> |
| 58 | </plist> |
| 59 | |
amadan