chore: release 26.0.57

- Re-enable app-sandbox
- Add network.client entitlement (required for Sparkle updates)
- Keep build script passing entitlements to codesign
- Use ditto for ZIP to preserve code signatures

This is a minimal sandbox configuration focused on security while
keeping updates working.

NOTES.md

@@ -5,5 +5,6 @@
 
 add a marker for "reboot required"
 
-dummy22
+dummy2
+                    
 

Sources/ViewModels/SparkleUpdater.swift

@@ -9,6 +9,8 @@ final class SparkleUpdater: NSObject, ObservableObject {
     }()
     private let logger = Logger(subsystem: "net.24unix.iKeyMon", category: "Sparkle")
     private let verboseLogging: Bool
+    @Published var logMessages: [String] = []
+    @Published var showLogs: Bool = false
 
     override init() {
         self.verboseLogging = ProcessInfo.processInfo.environment["SPARKLE_VERBOSE_LOGGING"] == "1"
@@ -34,6 +36,7 @@ final class SparkleUpdater: NSObject, ObservableObject {
 
     private func log(_ message: String) {
         logger.log("\(message, privacy: .public)")
+        addLogMessage("[INFO] \(message)")
         if verboseLogging {
             print("[Sparkle] \(message)")
         }
@@ -41,11 +44,21 @@ final class SparkleUpdater: NSObject, ObservableObject {
 
     private func logError(_ message: String) {
         logger.error("\(message, privacy: .public)")
+        addLogMessage("[ERROR] \(message)")
         if verboseLogging {
             fputs("[Sparkle][error] \(message)\n", stderr)
         }
     }
 
+    private func addLogMessage(_ message: String) {
+        let timestamp = DateFormatter.localizedString(from: Date(), dateStyle: .none, timeStyle: .medium)
+        let timestampedMessage = "[\(timestamp)] \(message)"
+        logMessages.append(timestampedMessage)
+        if logMessages.count > 100 {
+            logMessages.removeFirst()
+        }
+    }
+
     private func describe(update item: SUAppcastItem) -> String {
         let short = item.displayVersionString
         let build = item.versionString
@@ -53,41 +66,63 @@ final class SparkleUpdater: NSObject, ObservableObject {
     }
 }
 
-@MainActor
 extension SparkleUpdater: SPUUpdaterDelegate {
-    func updater(_ updater: SPUUpdater, didFinishLoading appcast: SUAppcast) {
+    nonisolated func updater(_ updater: SPUUpdater, didFinishLoading appcast: SUAppcast) {
+        Task { @MainActor in
             log("Loaded Sparkle appcast containing \(appcast.items.count) item(s).")
         }
+    }
 
-    func updater(_ updater: SPUUpdater, didFindValidUpdate item: SUAppcastItem) {
+    nonisolated func updater(_ updater: SPUUpdater, didFindValidUpdate item: SUAppcastItem) {
+        Task { @MainActor in
             log("Found valid update \(describe(update: item))")
         }
+    }
 
-    func updaterDidNotFindUpdate(_ updater: SPUUpdater) {
+    nonisolated func updaterDidNotFindUpdate(_ updater: SPUUpdater) {
+        Task { @MainActor in
             log("No updates available.")
         }
+    }
 
-    func updater(_ updater: SPUUpdater, willDownloadUpdate item: SUAppcastItem, with request: NSMutableURLRequest) {
+    nonisolated func updater(_ updater: SPUUpdater, willDownloadUpdate item: SUAppcastItem, with request: NSMutableURLRequest) {
+        Task { @MainActor in
             log("Downloading \(describe(update: item)) from \(request.url?.absoluteString ?? "unknown URL")")
         }
+    }
 
-    func updater(_ updater: SPUUpdater, didDownloadUpdate item: SUAppcastItem) {
+    nonisolated func updater(_ updater: SPUUpdater, didDownloadUpdate item: SUAppcastItem) {
+        Task { @MainActor in
             log("Finished downloading \(describe(update: item))")
         }
+    }
 
-    func updater(_ updater: SPUUpdater, failedToDownloadUpdate item: SUAppcastItem, error: Error) {
+    nonisolated func updater(_ updater: SPUUpdater, failedToDownloadUpdate item: SUAppcastItem, error: Error) {
+        Task { @MainActor in
             logError("Failed to download \(describe(update: item)): \(error.localizedDescription)")
         }
+    }
 
-    func userDidCancelDownload(_ updater: SPUUpdater) {
+    nonisolated func userDidCancelDownload(_ updater: SPUUpdater) {
+        Task { @MainActor in
             log("User cancelled Sparkle download.")
         }
+    }
 
-    func updater(_ updater: SPUUpdater, willInstallUpdate item: SUAppcastItem) {
+    nonisolated func updater(_ updater: SPUUpdater, willInstallUpdate item: SUAppcastItem) {
+        Task { @MainActor in
             log("Will install update \(describe(update: item))")
         }
+    }
 
-    func updater(_ updater: SPUUpdater, didAbortWithError error: Error) {
+    nonisolated func updater(_ updater: SPUUpdater, didAbortWithError error: Error) {
-        logError("Sparkle aborted: \(error.localizedDescription)")
+        Task { @MainActor in
+            let errorDescription = error as NSError
+            let details = "Domain: \(errorDescription.domain), Code: \(errorDescription.code), Description: \(error.localizedDescription)"
+            logError("Sparkle aborted: \(details)")
+            if let underlying = errorDescription.userInfo[NSUnderlyingErrorKey] as? NSError {
+                logError("Underlying error: Domain: \(underlying.domain), Code: \(underlying.code), Description: \(underlying.localizedDescription)")
+            }
+        }
     }
 }

Sources/Views/PreferencesView.swift

@@ -257,11 +257,64 @@ private struct UpdatesPreferencesView: View {
                 .foregroundColor(.secondary)
                 .padding(.top, 4)
 
+            Divider()
+                .padding(.vertical, 8)
+
+            Button(action: { sparkleUpdater.showLogs.toggle() }) {
+                Label(sparkleUpdater.showLogs ? "Hide Logs" : "Show Logs", systemImage: "terminal.fill")
+            }
+
+            if sparkleUpdater.showLogs {
+                logsView
+            }
+
             Spacer()
         }
         .toggleStyle(.switch)
         .frame(maxWidth: .infinity, alignment: .leading)
     }
+
+    private var logsView: some View {
+        VStack(alignment: .leading, spacing: 8) {
+            Text("Update Logs")
+                .font(.caption)
+                .fontWeight(.semibold)
+                .foregroundColor(.secondary)
+
+            ScrollView {
+                VStack(alignment: .leading, spacing: 4) {
+                    if sparkleUpdater.logMessages.isEmpty {
+                        Text("No logs yet. Check for updates to see activity.")
+                            .font(.caption)
+                            .foregroundColor(.secondary)
+                            .italic()
+                    } else {
+                        ForEach(sparkleUpdater.logMessages, id: \.self) { message in
+                            Text(message)
+                                .font(.caption)
+                                .foregroundColor(.secondary)
+                                .lineLimit(3)
+                                .textSelection(.enabled)
+                        }
+                    }
+                }
+                .frame(maxWidth: .infinity, alignment: .leading)
+                .padding(8)
+            }
+            .frame(height: 200)
+            .background(Color(nsColor: .controlBackgroundColor))
+            .cornerRadius(6)
+            .border(.separator, width: 1)
+
+            Button(action: {
+                sparkleUpdater.logMessages.removeAll()
+            }) {
+                Label("Clear Logs", systemImage: "trash")
+                    .font(.caption)
+            }
+            .disabled(sparkleUpdater.logMessages.isEmpty)
+        }
+    }
 }
 
 private struct NotificationsPreferencesView: View {

Sparkle/appcast.xml

@@ -3,28 +3,28 @@
     <channel>
         <title>iKeyMon</title>
         <item>
-            <title>26.0.31</title>
+            <title>26.0.57</title>
-            <pubDate>Sun, 07 Dec 2025 17:52:44 +0100</pubDate>
+            <pubDate>Tue, 30 Dec 2025 19:20:10 +0100</pubDate>
-            <sparkle:version>65</sparkle:version>
+            <sparkle:version>123</sparkle:version>
-            <sparkle:shortVersionString>26.0.31</sparkle:shortVersionString>
+            <sparkle:shortVersionString>26.0.57</sparkle:shortVersionString>
             <sparkle:minimumSystemVersion>15.2</sparkle:minimumSystemVersion>
-            <enclosure url="https://git.24unix.net/tracer/iKeyMon/releases/download/v26.0.31/iKeyMon-26.0.31.zip" length="4811475" type="application/octet-stream" sparkle:edSignature="zFNwVms0WwT5CBYX1GjtVg1qKbxoCVvv2DKXoTGZmwx+crg0B1fk3Ytu9K+6yTfbwQYsRISst9g3InMAlJS6BQ=="/>
+            <enclosure url="https://git.24unix.net/tracer/iKeyMon/releases/download/v26.0.57/iKeyMon-26.0.57.zip" length="3008341" type="application/octet-stream" sparkle:edSignature="CWtvRnfpBpHHN7X2sK/hq1HWC3NgGe9VGuUfcXOeHkLXpylVoTR+jMRG2em2I6hRsZHQmOq0U9pWs3mlx/e8CQ=="/>
         </item>
         <item>
-            <title>26.0.29</title>
+            <title>26.0.56</title>
-            <pubDate>Sun, 07 Dec 2025 17:07:32 +0100</pubDate>
+            <pubDate>Tue, 30 Dec 2025 19:09:34 +0100</pubDate>
-            <sparkle:version>61</sparkle:version>
+            <sparkle:version>121</sparkle:version>
-            <sparkle:shortVersionString>26.0.29</sparkle:shortVersionString>
+            <sparkle:shortVersionString>26.0.56</sparkle:shortVersionString>
             <sparkle:minimumSystemVersion>15.2</sparkle:minimumSystemVersion>
-            <enclosure url="https://git.24unix.net/tracer/iKeyMon/releases/download/v26.0.29/iKeyMon-26.0.29.zip" length="4811507" type="application/octet-stream" sparkle:edSignature="eRH4M8hEYa9gYiyjAVtTpXN3T1o+OGadDRMQu4kHL/dbJ2vj/5pY1+am9/9qG33Qairt3Od/6/WKLyxxs4mWCw=="/>
+            <enclosure url="https://git.24unix.net/tracer/iKeyMon/releases/download/v26.0.56/iKeyMon-26.0.56.zip" length="3007443" type="application/octet-stream" sparkle:edSignature="m6cENPrqaTn3Y2pP+9UTkKFgNuJy7Rbs0pMxKSpNhBPEK2jwUm0cNNdIbpXWgD0kw6U2pTBLzYoWg7FFJQnqDA=="/>
         </item>
         <item>
-            <title>26.0.28</title>
+            <title>26.0.55</title>
-            <pubDate>Sun, 07 Dec 2025 17:02:18 +0100</pubDate>
+            <pubDate>Tue, 30 Dec 2025 18:59:41 +0100</pubDate>
-            <sparkle:version>59</sparkle:version>
+            <sparkle:version>119</sparkle:version>
-            <sparkle:shortVersionString>26.0.28</sparkle:shortVersionString>
+            <sparkle:shortVersionString>26.0.55</sparkle:shortVersionString>
             <sparkle:minimumSystemVersion>15.2</sparkle:minimumSystemVersion>
-            <enclosure url="https://git.24unix.net/tracer/iKeyMon/releases/download/v26.0.28/iKeyMon-26.0.28.zip" length="4811473" type="application/octet-stream" sparkle:edSignature="tF188T0m/j22MStCVbVkrf2JllyZ9wiEmc++kgF4GTKhoAuHURYvT/Euy+ivEodmQ/LzeFolN4lViqaVa3y+DQ=="/>
+            <enclosure url="https://git.24unix.net/tracer/iKeyMon/releases/download/v26.0.55/iKeyMon-26.0.55.zip" length="4842575" type="application/octet-stream" sparkle:edSignature="3xK6KKwXxArmlpuqIgWAQVhAKmv29PB1id/jAMIcwipeGZYcqW9oXvB48tUN6Wu5jyn2QSUjdNmduhfjdWh9CA=="/>
         </item>
     </channel>
 </rss>

iKeyMon-Info.plist

@@ -6,5 +6,7 @@
 	<string>https://git.24unix.net/tracer/iKeyMon/raw/branch/master/Sparkle/appcast.xml</string>
 	<key>SUPublicEDKey</key>
 	<string>EgJgrOGQ79L5me616jA7kDCEOgx+Rg11uYLYLLIyzTI=</string>
+	<key>SUEnableInstallerLauncherService</key>
+	<false/>
 </dict>
 </plist>

iKeyMon.entitlements

@@ -4,8 +4,6 @@
 <dict>
 	<key>com.apple.security.app-sandbox</key>
 	<true/>
-	<key>com.apple.security.files.user-selected.read-only</key>
-	<true/>
 	<key>com.apple.security.network.client</key>
 	<true/>
 </dict>

iKeyMon.xcodeproj/project.pbxproj

@@ -322,7 +322,7 @@
 				CODE_SIGN_ENTITLEMENTS = iKeyMon.entitlements;
 				CODE_SIGN_STYLE = Automatic;
 				COMBINE_HIDPI_IMAGES = YES;
-				CURRENT_PROJECT_VERSION = 65;
+				CURRENT_PROJECT_VERSION = 123;
 				DEVELOPMENT_ASSET_PATHS = "\"Preview Content\"";
 				DEVELOPMENT_TEAM = Q5486ZVAFT;
 				ENABLE_HARDENED_RUNTIME = YES;
@@ -337,7 +337,7 @@
 					"$(inherited)",
 					"@executable_path/../Frameworks",
 				);
-				MARKETING_VERSION = 26.0.31;
+				MARKETING_VERSION = 26.0.57;
 				PRODUCT_BUNDLE_IDENTIFIER = net.24unix.iKeyMon;
 				PRODUCT_NAME = "$(TARGET_NAME)";
 				SWIFT_EMIT_LOC_STRINGS = YES;
@@ -353,7 +353,7 @@
 				CODE_SIGN_ENTITLEMENTS = iKeyMon.entitlements;
 				CODE_SIGN_STYLE = Automatic;
 				COMBINE_HIDPI_IMAGES = YES;
-				CURRENT_PROJECT_VERSION = 65;
+				CURRENT_PROJECT_VERSION = 123;
 				DEVELOPMENT_ASSET_PATHS = "\"Preview Content\"";
 				DEVELOPMENT_TEAM = Q5486ZVAFT;
 				ENABLE_HARDENED_RUNTIME = YES;
@@ -368,7 +368,7 @@
 					"$(inherited)",
 					"@executable_path/../Frameworks",
 				);
-				MARKETING_VERSION = 26.0.31;
+				MARKETING_VERSION = 26.0.57;
 				PRODUCT_BUNDLE_IDENTIFIER = net.24unix.iKeyMon;
 				PRODUCT_NAME = "$(TARGET_NAME)";
 				SWIFT_EMIT_LOC_STRINGS = YES;

scripts/build_release.sh

@@ -189,9 +189,7 @@ print(data.get("marketing_version", "dev"))
 PY
 )"
 ZIP_NAME="iKeyMon-${VERSION}.zip"
-pushd "$(dirname "$APP_PATH")" >/dev/null
+ditto -c -k --keepParent "$APP_PATH" "$ARTIFACTS_DIR/$ZIP_NAME"
-zip -r "$ARTIFACTS_DIR/$ZIP_NAME" "$(basename "$APP_PATH")"
-popd >/dev/null
 
 DMG_NAME="iKeyMon-${VERSION}.dmg"
 hdiutil create -volname "iKeyMon" -srcfolder "$STAGING_DIR" -ov -format UDZO "$ARTIFACTS_DIR/$DMG_NAME"

version.json

@@ -1,3 +1,3 @@
 {
-  "marketing_version": "26.0.31"
+  "marketing_version": "26.0.57"
 }