<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>NSBonjourServices</key>
	<array>
		<string>_nucleic._tcp</string>
	</array>
	<!-- iOS 14+ gates ALL local-network access — both Bonjour discovery (_nucleic._tcp above)
	     and a direct NWConnection to the Mac's LAN IP from the pairing QR — behind the
	     local-network permission, which only prompts if this usage string is present. Without
	     it the grant never happens and every LAN connection fails silently, so pairing and
	     reconnect appear to "do nothing." -->
	<key>NSLocalNetworkUsageDescription</key>
	<string>Nucleic connects to your Mac on the local network to pair and to sync your sessions and approvals.</string>
	<key>NucleicChannel</key>
	<string>$(NUCLEIC_CHANNEL)</string>
	<!-- The short git commit this build came from, shown in the non-release banner to match
	     the Mac. Left empty here and overwritten in the built product by the NucleicRemote
	     target's "Stamp git commit into Info.plist" build phase (git rev-parse --short HEAD). -->
	<key>NucleicCommit</key>
	<string></string>
	<!-- Wake the app in the background for the relay's silent "clear" push, which recalls the
	     "waiting for your approval" tickle once the approval is resolved on another device
	     (docs/CLOUD_INFRA.md §3). Without this mode iOS drops the content-available push and the
	     stale notification lingers until the next launch. -->
	<key>UIBackgroundModes</key>
	<array>
		<string>remote-notification</string>
	</array>
	<key>NSSupportsLiveActivities</key>
	<true/>
	<!-- Let the Macs' APNs pushes refresh the glance promptly while the phone is locked — without
	     this, iOS budget-throttles frequent Live Activity updates and the lock screen lags
	     (UX_IOS §5.3). -->
	<key>NSSupportsLiveActivitiesFrequentUpdates</key>
	<true/>
	<!-- The `nucleic://` deep-link scheme the Live Activity taps through on: `nucleic://session/<id>`
	     opens a waiting session; `nucleic://sessions` surfaces the sessions list. Handled by
	     `.onOpenURL` → `RemoteStore.handleDeepLink`. -->
	<key>CFBundleURLTypes</key>
	<array>
		<dict>
			<key>CFBundleTypeRole</key>
			<string>Editor</string>
			<key>CFBundleURLName</key>
			<string>com.nucleic.remote</string>
			<key>CFBundleURLSchemes</key>
			<array>
				<string>nucleic</string>
			</array>
		</dict>
	</array>
	<!-- Export compliance: the app ships a Noise-Protocol secure channel (X25519 /
	     ChaCha20-Poly1305 / SHA-256 via CryptoKit). App Store Connect's export-compliance
	     questionnaire classified this as EXEMPT (standard algorithms / mass-market, no
	     documentation required), so this is false ("uses no non-exempt encryption"). That
	     suppresses the per-submission encryption prompt; no compliance code is needed. -->
	<key>ITSAppUsesNonExemptEncryption</key>
	<false/>
</dict>
</plist>
