From f70fea638c50a73a360b34b13914c714e6d16ca7 Mon Sep 17 00:00:00 2001 From: VU3ESV Date: Thu, 4 Jun 2026 10:35:42 +0200 Subject: [PATCH] Add sandbox + network.client entitlements to the LP-700 extension ExtensionKit extensions must be sandboxed for macOS to register and load them. Add Xcode/Extension/LP700.entitlements (com.apple.security.app-sandbox + network.client for the LAN WebSocket connection) and wire CODE_SIGN_ENTITLEMENTS + ENABLE_HARDENED_RUNTIME (required for notarization) in project.yml. Mirrors the LP-100A change; lets the suite host LP-700 out-of-process once the .appex is embedded+signed in the app and enabled in the suite. No effect on the standalone app / plain swift build. Co-Authored-By: Claude Opus 4.8 --- Xcode/Extension/LP700.entitlements | 12 ++++++++++++ Xcode/project.yml | 2 ++ 2 files changed, 14 insertions(+) create mode 100644 Xcode/Extension/LP700.entitlements diff --git a/Xcode/Extension/LP700.entitlements b/Xcode/Extension/LP700.entitlements new file mode 100644 index 0000000..eb0df68 --- /dev/null +++ b/Xcode/Extension/LP700.entitlements @@ -0,0 +1,12 @@ + + + + + + com.apple.security.app-sandbox + + + com.apple.security.network.client + + + diff --git a/Xcode/project.yml b/Xcode/project.yml index 68056ba..c9e1ebb 100644 --- a/Xcode/project.yml +++ b/Xcode/project.yml @@ -44,6 +44,8 @@ targets: MARKETING_VERSION: "1.0.0" CODE_SIGN_STYLE: Manual CODE_SIGN_IDENTITY: "-" # ad-hoc for local dev; Developer-ID needed to ship + ENABLE_HARDENED_RUNTIME: YES # required for notarization + CODE_SIGN_ENTITLEMENTS: Extension/LP700.entitlements # app-sandbox + network.client -> macOS registers it dependencies: - package: RadioPluginKit product: RadioPluginKit