enricobuehler
fb709d68ce
Each client learns a host's MAC from the mDNS `mac` TXT while it's awake, persists it on the saved-host record, and — when reconnecting to an offline host — sends a magic packet before connecting, plus an explicit "Wake host" action. Apple wraps the C-ABI; linux/windows call the core fn directly (linux also gains a --wake CLI mode); android via a new nativeWakeOnLan JNI export (the mDNS browse record gains a 7th mac field); decky shells out to the linux client's --wake before launching the stream. iOS/tvOS need the managed com.apple.developer.networking.multicast entitlement (pending Apple approval), so the wake path + UI are gated off via PunktfunkConnection.wakeOnLANAvailable and the entitlement is commented out — keeping iOS/tvOS releasable. MAC-learning stays active on every platform so it lights up the moment it's ungated. macOS works today. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
33 lines
1.8 KiB
XML
33 lines
1.8 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
|
|
<plist version="1.0">
|
|
<dict>
|
|
<!-- Keychain Sharing: a team-scoped access group so the punktfunk/1 client identity in
|
|
the data-protection keychain is gated by the app's entitlement (team + bundle id),
|
|
not a per-binary ACL. That is what makes Keychain access persist across rebuilds
|
|
with NO prompt — see ClientIdentityStore. $(AppIdentifierPrefix) expands to the
|
|
team prefix at signing time. -->
|
|
<key>keychain-access-groups</key>
|
|
<array>
|
|
<string>$(AppIdentifierPrefix)io.unom.punktfunk</string>
|
|
</array>
|
|
<!-- Wake-on-LAN needs to send a UDP broadcast magic packet (a sleeping host has no ARP
|
|
entry, so unicast can't wake it). Since iOS 14 / tvOS 14 the OS blocks sending to
|
|
broadcast/multicast addresses unless the app carries this managed entitlement — it must
|
|
be requested from and approved by Apple for the App ID, then enabled in the provisioning
|
|
profile. macOS is not gated by this (its App Sandbox network.client/server cover it).
|
|
|
|
GATED pending Apple's approval of the request (form filed) — an unauthorized managed
|
|
entitlement breaks iOS/tvOS signing, so it's commented out to keep those apps releasable.
|
|
ON APPROVAL: (1) uncomment the two lines below, and (2) flip
|
|
PunktfunkConnection.wakeOnLANAvailable (PunktfunkConnection.swift) to enable the iOS/tvOS
|
|
wake path + UI. Until then iOS/tvOS Wake-on-LAN is a clean no-op — MACs are still learned
|
|
from mDNS so it works immediately once ungated. macOS is unaffected (separate entitlements
|
|
file, no multicast entitlement needed). -->
|
|
<!--
|
|
<key>com.apple.developer.networking.multicast</key>
|
|
<true/>
|
|
-->
|
|
</dict>
|
|
</plist>
|