Files
vnidrop/apple/VniDrop/Resources/VniDrop.entitlements

33 lines
1.4 KiB
XML

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<!-- iOS: NFC reader formats. The iOS 26 SDK requires TAG here and rejects
NDEF at App Store upload (error 90778 "NDEF is disallowed"). Our
NFCNDEFReaderSession usage keeps working under the TAG entitlement. -->
<key>com.apple.developer.nfc.readersession.formats</key>
<array>
<string>TAG</string>
</array>
<!-- macOS App Sandbox: user-selected files for share/receive, and network
client/server for the local P2P transfer. These keys are ignored on iOS. -->
<key>com.apple.security.app-sandbox</key>
<true/>
<key>com.apple.security.files.user-selected.read-write</key>
<true/>
<key>com.apple.security.files.downloads.read-write</key>
<true/>
<key>com.apple.security.network.client</key>
<true/>
<!-- Required, not optional: VniDrop's iroh (QUIC/UDP) endpoint listens for
and ACCEPTS inbound connections from peers — either device can initiate
a transfer. See HandshakeService::accept in crates/vnidrop/src/handshake.rs.
Removing this breaks the receive/serve half of every transfer under the
sandbox. App Store automated review may flag it (no classic TcpListener);
justify via App Review Information rather than removing. -->
<key>com.apple.security.network.server</key>
<true/>
</dict>
</plist>