From 0d80a0f912d64994233d4fe9492a64b3b600d72b Mon Sep 17 00:00:00 2001
From: Micha <espey@smart-q.de>
Date: Sat, 3 Jan 2026 13:26:37 +0100
Subject: [PATCH] fix: use basic Sparkle updater for sandboxed apps

Disable SUEnableInstallerLauncherService and remove XPC entitlements.
Use Sparkle's standard update mechanism which works with sandboxed apps.
Add file access entitlements for update storage.
---
 iKeyMon-Info.plist   |  2 +-
 iKeyMon.entitlements | 10 ++--------
 2 files changed, 3 insertions(+), 9 deletions(-)

diff --git a/iKeyMon-Info.plist b/iKeyMon-Info.plist
index d6ad33b..eae7147 100644
--- a/iKeyMon-Info.plist
+++ b/iKeyMon-Info.plist
@@ -7,6 +7,6 @@
 	<key>SUPublicEDKey</key>
 	<string>EgJgrOGQ79L5me616jA7kDCEOgx+Rg11uYLYLLIyzTI=</string>
 	<key>SUEnableInstallerLauncherService</key>
-	<true/>
+	<false/>
 </dict>
 </plist>
diff --git a/iKeyMon.entitlements b/iKeyMon.entitlements
index 65c6533..7566a46 100644
--- a/iKeyMon.entitlements
+++ b/iKeyMon.entitlements
@@ -8,13 +8,7 @@
 	<true/>
 	<key>com.apple.security.files.downloads.read-write</key>
 	<true/>
-	<key>com.apple.security.xpc.aConnectionServices</key>
-	<array>
-		<string>com.sparkle-project.InstallerConnection</string>
-	</array>
-	<key>com.apple.security.xpc.aStatusServices</key>
-	<array>
-		<string>com.sparkle-project.InstallerStatus</string>
-	</array>
+	<key>com.apple.security.files.user-selected.read-write</key>
+	<true/>
 </dict>
 </plist>