Third Party Patcher

com.gilburns.patcher

Configuration settings for the Third Party Patcher tool

macOS

Configuration Keys (99)

Showing 99 of 99 keys

Key	Type	Description	Default	Range
`PFC_SegmentedControl_0`string required	string	—	Default: —	Range: —
`DeferralCountdownSeconds`integer Deferral Countdown Seconds	integer	Seconds of countdown in the deferral prompt before the automatic action fires.	Default: 300	Range: —
`DeferralAutomaticAction`string Deferral Automatic Action	string	Action when the deferral countdown expires with no user input: "defer" (postpone to next cycle) or "kill" (force-quit blocking app and apply).	Default: "defer"	Range: —
`DeferralTimerDefault`integer Deferral Timer Default	integer	Default deferral duration in minutes applied when the user accepts without choosing a custom time (4 hours).	Default: 240	Range: —
`DeferralTimerMenu`string Deferral Timer Menu	string	Comma-separated list of deferral durations in minutes shown in the pop-up menu.	Default: "5,30,60,120,240,480,1440"	Range: —
`DeferralTimerFocus`string Deferral Timer Focus	string	The number of minutes to defer the update restart dialog automatically if a process has prevented display sleep (for example, during an active meeting) or the user has Focus or Do Not Disturb enabled	Default: —	Range: —
`MonthlyPatchingCadenceEnabled`boolean Monthly Patching Cadence Enabled	boolean	—	Default: —	Range: —
`PatchingWeekday`integer Patching Weekday	integer	Day of the week for the patch window: 1=Sunday, 2=Monday, 3=Tuesday … 7=Saturday.	Default: 3	Range: Sunday (1), Monday (2), Tuesday (3), Wednesday (4), Thursday (5), Friday (6), Saturday (7)
`PatchingWeekOfMonth`integer Patching Week Of Month	integer	Which occurrence of 'PatchingWeekday' in the month: 1=first, 2=second, etc.	Default: 2	Range: First (1), Second (2), Third (3), Fourth (4)
`PatchingStartTime`string Patching Start Time	string	Earliest time to begin applying on patch day (24-hour 'HH:MM'). Empty = no lower bound.	Default: —	Range: —
`PatchingEndTime`string Patching End Time	string	Latest time to begin applying on patch day (24-hour 'HH:MM'). Apply will not start a new run after this time.	Default: —	Range: —
`DialogOnTop`boolean Dialog On Top	boolean	When 'true', the swiftDialog window floats above all other windows.	Default: true	Range: —
`UnattendedExit`boolean Unattended Exit	boolean	When 'true', the apply completion dialog closes automatically after 'UnattendedExitSeconds' if the user does not interact.	Default: true	Range: —
`UnattendedExitSeconds`integer Unattended Exit Seconds	integer	Seconds before the apply completion dialog auto-closes when 'UnattendedExit' is 'true'.	Default: —	Range: —
`BlockingProcessAction`string Blocking Process Action	string	Action when a blocking process is running during apply: 'ignore' (skip the check entirely), 'kill' (force-quit silently), 'notify' (brief notification; skip label if still running), 'prompt' (timed dialog; user can quit or skip), 'defer' (skip silently; retry next cycle).	Default: "prompt"	Range: ignore, kill, notify, prompt, defer
`BlockingProcessCountdownSeconds`integer Blocking Process Countdown Seconds	integer	Seconds of countdown in the blocking process prompt before the automatic action fires.	Default: 120	Range: —
`DialogIcon`string Dialog Icon	string	Path to a custom icon for the apply dialog. Empty = use the system computer icon. Supports absolute paths, 'SF=<symbol>' notation, or an SF Symbol name directly.	Default: —	Range: —
`UseOverlayIcon`boolean Use Overlay Icon	boolean	When 'true', a small overlay icon is composited onto the dialog icon. Automatically disabled when swiftDialog is not installed.	Default: true	Range: —
`OverlayIcon`string Overlay Icon	string	Path to the overlay icon image. Empty = auto-detect from known MDM agents (Jamf, Intune, etc.).	Default: —	Range: —
`DialogBlurscreen`boolean Dialog Blur Screen	boolean	When 'true', all screen content behind the apply dialog is blurred.	Default: false	Range: —
`DialogHideotherapps`boolean Dialog Hide Other Apps	boolean	When 'true', all other running apps are hidden when the apply dialog launches.	Default: false	Range: —
`DialogMoveable`boolean Dialog Moveable	boolean	When 'true', the user can drag the swiftDialog windows (apply, progress, and prompt dialogs) around the screen. Set to 'false' to pin them in place.	Default: true	Range: —
`DialogScreenPosition`string Dialog Screen Position	string	Position of the main apply dialog: 'topleft', 'left', 'bottomleft', 'top', 'center', 'bottom', 'topright', 'right', or 'bottomright'.	Default: "center"	Range: topleft, left, bottomleft, top, center, bottom, topright, right, bottomright
`DialogScreenProgressPosition`string Dialog Screen Progress Position	string	Position of the progress/status window during apply. Same position values as 'DialogScreenPosition'.	Default: "bottomright"	Range: topleft, left, bottomleft, top, center, bottom, topright, right, bottomright
`DialogShowWindowButtons`string Dialog Show Window Buttons	string	When 'true', the apply dialog shows the window close/minimize/maximize buttons.	Default: ""	Range: —
`ApplyDialogSize`string Apply Dialog Size	string	Size/style of the apply-phase progress dialog: 'large' (the full listitem-based progress window) or 'compact' (a smaller "mini" progress window, similar in size to the scan/check/download progress window).	Default: "large"	Range: large, compact
`DownloadBandwidthLimit`string Download Bandwidth Limit	string	curl '--limit-rate' format bandwidth cap for staged downloads (e.g. '500K' for 500 KB/s, '2M' for 2 MB/s). Empty string = unlimited.	Default: ""	Range: —
`StageDownloadFailThreshold`integer Stage Download Fail Threshold	integer	Consecutive download or verification failures before a label is marked broken and skipped by the stage phase.	Default: 3	Range: —
`ApplyFailThreshold`integer Apply Fail Threshold	integer	Consecutive install failures before a staged update is abandoned and that version is blocked from re-staging. Staging resumes automatically when a newer version becomes available.	Default: 3	Range: —
`IgnoreUnknownVersionLabels`boolean Ignore Unknown Version Labels	boolean	When 'true', labels that return no 'appNewVersion' value are skipped entirely during staging.	Default: false	Range: —
`UnknownVersionCheckIntervalDays`integer Unknown Version Check Interval Days	integer	For labels with unknown versions, re-check this many days after the last attempt (instead of the normal 'CheckIntervalHours' cadence).	Default: 7	Range: —
`VersionMismatchThrottleDays`integer Version Mismatch Throttle Days	integer	When a label reports a version that does not match the file actually downloaded, suppress re-staging for this many days. Cleared automatically when the label reports a different 'appNewVersion'.	Default: 7	Range: —
`InitialScanDelayEnabled`boolean Initial Scan Delay Enabled	boolean	When 'true', a one-time random delay is applied before the first scan after initial deployment. Spreads fleet-wide first-scan load across the 'InitialScanDelayMaxSeconds' window.	Default: true	Range: —
`InitialScanDelayMaxSeconds`integer Initial Scan Delay Max Seconds	integer	Maximum jitter for the initial deployment delay in seconds (default: 24 hours). The actual delay is chosen randomly in '[0, max]' on first launch and persisted.	Default: 86400	Range: —
`ScanIntervalDays`integer Scan Interval Days	integer	Days between full application scans. A full scan re-evaluates all Installomator labels to discover installed apps.	Default: 30	Range: —
`ScanOnLabelUpdate`boolean Scan On Label Update	boolean	When 'true', a scan is triggered immediately if the Installomator or Managed Labels have been updated since the last scan, regardless of 'ScanIntervalDays'.	Default: true	Range: —
`LightScanIntervalHours`integer Light Scan Interval Hours	integer	Hours between light scan runs. A light scan checks uninstalled labels for apps that may have been installed by other means, without re-running label scripts or hitting the network for non-installed labels.	Default: 24	Range: —
`CheckIntervalHours`integer Check Interval Hours	integer	Hours between check runs. A check reads installed versions for already-discovered apps to detect whether an update is needed.	Default: 12	Range: —
`StageIntervalHours`integer Stage Interval Hours	integer	Hours between stage runs. The stage phase downloads pending updates.	Default: 12	Range: —
`ApplyIntervalHours`integer Apply Interval Hours	integer	Minimum hours between apply runs in deadline-based patching mode. Prevents apply from running every 10-minute cycle once updates are pending. Not used in monthly patching mode — the patch-day window controls timing.	Default: 4	Range: —
`IgnoredLabels`string Ignored Labels	string	A space-separated list of Installomator labels to ignore for the TPP workflow. Supports wildcards, for example "microsoft". A single "" ignores every Installomator label except those listed in Required Labels and Optional Labels.	Default: —	Range: —
`IgnoreManagedApps`boolean Ignore Managed Apps	boolean	When 'true', automatically detects apps whose updates are already controlled by MDM policies and excludes their labels from patching. Currently detects Microsoft 365/Office (via MAU), Microsoft Edge, Google Chrome, and Google Drive.	Default: true	Range: —
`IgnoreNonProductionLabels`boolean Ignore Non Production Labels	boolean	When 'true', automatically ignores non-production label variants — labels whose name ends with one of 'NonProductionLabelSuffixes' — but only when a production label of the same base name also exists. E.g. with the default suffixes, 'microsoftedgebeta' and 'microsoftedgedev' are ignored because 'microsoftedge' also exists as a label; a label like 'figma' is untouched, and a hypothetical 'somethingbeta' is left alone if 'something' is not also a known label.	Default: true	Range: —
`NonProductionLabelSuffixes`string Non Production Label Suffixes	string	Space-separated list of suffixes that mark a label as a non-production variant of a base label. Only used when 'IgnoreNonProductionLabels' is 'true'. Does not support wildcards.	Default: "beta canary dev"	Range: —
`PreferPkgLabels`boolean Prefer Pkg Labels	boolean	When a label and its 'pkg'-suffixed counterpart both exist (e.g. 'bbedit' and 'bbeditpkg'), only one should ever be active — they deliver the same app via different installer mechanisms. When 'true', the pkg-suffixed label is preferred and the non-pkg label is ignored. When 'false', the non-pkg label is preferred and the pkg-suffixed label is ignored instead.	Default: true	Range: —
`RequiredLabels`string Required Labels	string	a space-separated list of Installomator labels that are required, regardless if the app is installed or or the latest version. Supports wildcards.	Default: —	Range: —
`OptionalLabels`string Optional Labels	string	Space-separated list of label names made available for user-initiated self-service installation via the Available Software catalog. Does not support wildcards. Labels are presented in the order listed here, allowing you to feature priority apps at the top. Example: 'microsoftword zoom slack'.	Default: —	Range: —
`SwiftDialogEnabled`boolean Swift Dialog Enabled	boolean	Show swiftDialog prompts during the apply phase. If 'false' (or swiftDialog is not installed), blocking process handling falls back to the configured 'BlockingProcessAction'.	Default: true	Range: —
`AppTitle`string App Title	string	Allows you to customize the name of Third Party Patcher to something else	Default: "Third Party Patcher"	Range: —
`BrandColorFont`string Brand Color Font	string	Font color used in dialogs and apps. These values set the accent colors used in swiftDialog prompts. Each accepts a standard Apple color name ('black', 'blue', 'gray', 'green', 'orange', 'pink', 'purple', 'red', 'white', 'yellow') or a hex value (e.g. '#00A4C7').	Default: "white"	Range: —
`BrandColorBackground`string Brand Color Background	string	Background color used in dialogs and apps. These values set the accent colors used in swiftDialog prompts. Each accepts a standard Apple color name ('black', 'blue', 'gray', 'green', 'orange', 'pink', 'purple', 'red', 'white', 'yellow') or a hex value (e.g. '#00A4C7').	Default: "blue"	Range: —
`LogVerbose`boolean Log Verbose	boolean	Enable verbose debug logging. When 'true', per-label key dumps and other low-signal output are included in '/Library/Logs/Patcher/'.	Default: false	Range: —
`LogRetentionDays`integer Log Retention Days	integer	Number of days to retain log files in '/Library/Logs/Patcher/'. Files older than this are deleted during the 'cleanLogs' run. Set to '0' to disable automatic log cleanup.	Default: 90	Range: —
`IgnoreAppsInHomeFolder`boolean Ignore Apps In Home Folder	boolean	Ignore apps found in '/Users/'. If an update is found in '/Users/' and variable is set to false, the app will be updated into the application's default path	Default: true	Range: —
`ConvertAppsInHomeFolder`boolean Convert Apps In Home Folder	boolean	This will convert any apps found in the users home folder to the /Applications folder	Default: false	Range: —
`IgnoreAppsOnExternalVolumes`boolean Ignore Apps On External Volumes	boolean	When 'true', apps found only on external volumes ('/Volumes/*') are excluded from discovery and never updated. Useful in environments where external drives are transient and should not be managed.	Default: false	Range: —
`InstallomatorGitHubAccount`string Installomator GitHub Account	string	GitHub account hosting the Installomator label repository.	Default: "Installomator"	Range: —
`InstallomatorGitHubRepo`string Installomator GitHub Repo	string	GitHub repository name for Installomator labels.	Default: "Installomator"	Range: —
`InstallomatorGitHubBranch`string Installomator GitHub Branch	string	The name of the branch you want to use in your custom repo, typically main.	Default: "main"	Range: —
`InstallomatorLabelsDisable`boolean Installomator Labels Disable	boolean	When 'true', disables all Installomator label management: no initial download, no update checks, and Installomator labels are never used. Only Managed-Labels are used.	Default: false	Range: —
`InstallomatorUpdateDisable`boolean Installomator Update Disable	boolean	When 'true', skips routine label update checks while still using labels already on disk. Has no effect on the initial download when no labels are present. Ignored when 'InstallomatorLabelsDisable' is 'true'.	Default: false	Range: —
`InstallomatorGitHubMetadataAccount`string Installomator GitHub Metadata Account	string	GitHub account hosting the Installomator Metadata repository.	Default: "gilburns"	Range: —
`InstallomatorGitHubMetadataRepo`string Installomator GitHub Metadata Repo	string	GitHub repository name for Installomator Metadata.	Default: "Installomator-Metadata"	Range: —
`InstallomatorGitHubMetadataBranch`string Installomator GitHub Metadata Branch	string	Branch to pull metadata from.	Default: "main"	Range: —
`MetadataSyncEnabled`boolean Metadata Sync Enabled	boolean	When 'true', the scheduler periodically checks the metadata repository for updates and syncs icons and metadata to a local cache.	Default: true	Range: —
`MetadataSyncIntervalDays`integer Metadata Sync Interval Days	integer	Days between metadata repository sync checks.	Default: 10	Range: —
`SupportTeamName`string Support Team Name	string	Display name for your IT team in the Help Message	Default: "IT Support Team"	Range: —
`SupportTeamEmail`string Support Team Email	string	Support email address. Shown as a clickable 'mailto:' link in the Help Message	Default: "support@company.com"	Range: —
`SupportTeamPhone`string Support Team Phone	string	Support phone number in the Help Message. Set to 'None' to hide the field.	Default: "None"	Range: —
`SupportTeamWebsite`string Support Team Website	string	Support portal URL in the Help Message. Set to 'None' to hide the field.	Default: "None"	Range: —
`ShowMenuBarApp`boolean Show Menu Bar App	boolean	When 'true', the scheduler installs and loads the PatcherMenu LaunchAgent for the current console user. When 'false', the LaunchAgent is unloaded and the plist removed. Managed automatically at each scheduler run.	Default: true	Range: —
`MenuBarIcon`string Menu Bar Icon	string	Icon displayed in the menu bar status item. Accepts an SF Symbol name (e.g. 'gear') or an absolute path to a template-mode PNG. A template PNG adapts automatically to light/dark menu bar appearance. Empty = built-in default.	Default: ""	Range: —
`ShowHelpButton`boolean Show Help Button	boolean	When 'true', a Help (?) button is shown in the menu bar popover header. Tapping it displays the support contact information.	Default: true	Range: —
`ShowActivitySection`boolean Show Activity Section	boolean	When 'true', the Last Activity section (scan / check / stage / apply dates) is shown in the menu bar popover.	Default: true	Range: —
`MenuDeferralCountDisplay`string Menu Deferral Count Display	string	Controls how the deferral count line is shown in the popover. 'combined' — one total covering every deferral, including auto-deferrals (timer time-outs and blocking-process skips). 'split' — two figures: deferrals the user actively chose, and auto-deferrals combined. 'userOnly' — only the count of deferrals the user actively chose.	Default: "combined"	Range: combined, split, userOnly
`ShowQuitButton`boolean Show Quit Button	boolean	When 'true', a Quit button is shown in the menu bar popover footer.	Default: false	Range: —
`ShowMenuDownloadAction`boolean Show Menu Download Action	boolean	When 'true', the "Download New Updates" option appears in the Run Now menu.	Default: true	Range: —
`ShowMenuCheckAction`boolean Show Menu Check Action	boolean	When 'true', the "Check for Updates" option appears in the Run Now menu.	Default: true	Range: —
`ShowMenuScanAction`boolean Show Menu Scan Action	boolean	When 'true', the "Full Discovery Scan" option appears in the Run Now menu.	Default: true	Range: —
`ShowScanCheckProgressDialog`boolean Show Scan Check Progress Dialog	boolean	When 'true', scan and check operations triggered from PatcherMenu display a swiftDialog progress window.	Default: true	Range: —
`CompanyName`string Company Name	string	Organization name shown in the Available Software sidebar header above the app title.	Default: "Patcher Corp."	Range: —
`CustomAppIconPath`string Custom App Icon Path	string	Absolute path to a PNG or ICNS file used as the Available Software app icon, overriding the built-in icon in the Dock, Finder, and app switcher. Empty = use the default built-in icon.	Default: ""	Range: —
`AddToDockOnSelfServiceInstall`boolean Add To Dock On Self Service Install	boolean	When 'true', apps successfully installed via self-service are automatically added to the current user's Dock if not already present.	Default: true	Range: —
`WebhookFeature`string Webhook Feature	string	Controls when scheduled webhook reports are sent: 'FALSE' (never), 'FAILURES' (failures only), 'ALL' (successes and failures).	Default: "FAILURES"	Range: FALSE, FAILURES, ALL
`WebhookURLTeams`string Teams Webhook URL	string	Microsoft Teams incoming webhook URL.	Default: —	Range: —
`WebhookURLSlack`string Slack Webhook URL	string	Slack incoming webhook URL.	Default: —	Range: —
`WebhookAttributes`string Webhook Attributes	string	Comma-separated list of device attributes included in webhook payloads, in display order. MDM info is always appended if detected. Supported values: 'deviceName', 'hostname', 'serial', 'osVersion', 'osBuild', 'osName', 'model', 'hardwareModel', 'user', 'patcherVersion', 'installomatorVersion'.	Default: "deviceName,serial,osVersion,user"	Range: —
`WebhookSchedule`string Webhook Schedule	string	When to send accumulated webhook reports: 'immediate', 'daily', 'weekly', 'monthly', or 'patchDay'.	Default: "immediate"	Range: immediate, daily, weekly, monthly, patchDay
`WebhookScheduleWeekday`integer Webhook Schedule Weekday	integer	For 'weekly' schedule: day of week to send (0=Sunday … 6=Saturday).	Default: 1	Range: Sunday (0), Monday (1), Tuesday (2), Wednesday (3), Thursday (4), Friday (5), Saturday (6)
`WebhookScheduleMonthDay`integer Webhook Schedule Month Day	integer	For 'monthly' schedule: day of month to send (1–31).	Default: 1	Range: —
`WebhookScheduleHour`integer Webhook Schedule Hour	integer	For 'daily', 'weekly', and 'monthly' schedules: hour of day (0–23) at which to send.	Default: 8	Range: —
`WebhookStageFailureThreshold`integer Webhook Stage Failure Threshold	integer	Minimum consecutive stage failures for a label before it is included in webhook notifications.	Default: 2	Range: —
`WebhookSelfServiceFeature`string Webhook Self Service Feature	string	Controls whether an immediate webhook is sent after a user-initiated self-service install, regardless of 'WebhookSchedule'. Options: 'FALSE' (never), 'FAILURES' (failed installs only), 'ALL' (success and failure).	Default: "FALSE"	Range: FALSE, FAILURES, ALL
`QuietApplyEnabled`boolean Quiet Apply Enabled	boolean	When 'true', the scheduler runs a silent apply pass before the interactive apply phase. Apps whose blocking process is not running are installed without prompting. Items skipped in the silent pass are shown in the interactive dialog as usual.	Default: false	Range: —
`DeadlineDaysFocus`integer Deadline Days Focus	integer	Days a pending update must be present before Focus/DND auto-deferral is disabled and the user must be prompted regardless of Focus state. '0' means Focus is always respected.	Default: 4	Range: —
`DeadlineDaysHard`integer Deadline Days Hard	integer	Days a pending update must be present before no further deferrals are offered and the update is applied at the next opportunity. '0' disables hard deadlines.	Default: 10	Range: —
`FocusCheckEnabled`boolean Focus Check Enabled	boolean	When 'false', Focus/DND and display assertions (e.g. active screen sharing) are never checked. The prompt is shown regardless of the user's Focus state.	Default: true	Range: —
`FocusIgnoredProcesses`string Focus Ignored Processes	string	Space-separated list of process names to ignore when checking for display-sleep assertions ('pmset -g assertions'). If the process holding the assertion resolves to a name that matches an entry here (case-insensitive), the assertion is not treated as a blocker and patching may proceed.	Default: —	Range: —
`AggressivePatchDayDeferral`boolean Aggressive Patch Day Deferral	boolean	When 'true', deferral options are progressively capped as the patching window closes. Options shrink from 2 hours early in the day to 5 minutes near window end, then deferral is removed entirely once the window closes. When 'false', the full 'DeferralTimerMenu' list is always shown. Applies to both monthly and deadline mode on the final patch day.	Default: true	Range: —