Revive the build: CI, Apple sign-in, iOS 26, and wireless refresh - #138

Open

Ben-Diehlci wants to merge 96 commits into

NyaMisty:newfrom

Ben-Diehlci:new

Commits on Sep 14, 2026

ci: unbreak GitHub Actions build

bwdiehl
and
claude
committed
df570bd
ci: move first-party and docker actions to node24 majors

bwdiehl
and
claude
committed
6cd382a
ci: replace third-party uploader with actions/upload-artifact@v7

bwdiehl
and
claude
committed
8494e36
buildenv: fix two of three corecrypto build failures (does NOT close #111)

bwdiehl
and
claude
committed
a266861
anisette: make Linux anisette failures legible, and fix two real bugs

bwdiehl
and
claude
committed
b885501
daemon: warn at startup when no anisette server is configured, and add REVIVAL.md

bwdiehl
and
claude
committed
301eb8b
REVIVAL.md: record the actual deployment target

bwdiehl
and
claude
committed
6be911b
REVIVAL.md: fix TODO numbering

bwdiehl
and
claude
committed
d674cd1
REVIVAL.md: network topology resolved -- VM is bridged, same segment as the phone

bwdiehl
and
claude
committed
8674780
REVIVAL.md: multicast confirmed, and mDNS advertisement fails silently

bwdiehl
and
claude
committed
60c2c56
dnssd: detect and report mDNS advertisement failure instead of silently succeeding

bwdiehl
and
claude
committed
04e928a
REVIVAL.md: fill in the commit SHA for the dnssd fix

bwdiehl
and
claude
committed
cc011dd
gitignore: ignore macOS .DS_Store and AppleDouble files

bwdiehl
and
claude
committed
ebfbc5b
REVIVAL.md: record two future goals -- self-contained deploy, and a web UI

bwdiehl
and
claude
committed
fa1a0a0
REVIVAL.md: correct the refresh-path analysis -- #131 is bootstrap-only, and 2 lines

bwdiehl
and
claude
committed
6663597
REVIVAL.md: record the full deployment research -- prereqs and silent failures

bwdiehl
and
claude
committed
d094368
ldid: fix the iOS 26 hash-agility truncation (issue #131)

bwdiehl
and
claude
committed
0e8090b
REVIVAL.md: correct the #131 commit SHA

bwdiehl
and
claude
committed
ca2022c
Clear the last two bootstrap blockers: GSA client-info, and argv parsing

bwdiehl
and
claude
committed
04dd7ee
REVIVAL.md: record the bootstrap-blocker commit SHA

bwdiehl
and
claude
committed
907e7fe
buildenv: fix corecrypto layer 3, and add BOOTSTRAP.md

bwdiehl
and
claude
committed
790973d
REVIVAL.md: corecrypto fully builds -- #111 closed

bwdiehl
and
claude
committed
dbb9977
BOOTSTRAP.md: do not enable usbmuxd on Ubuntu -- it is udev-activated

bwdiehl
and
claude
committed
cd137ba
BOOTSTRAP.md: install jq, which the Phase 2 anisette checks use

bwdiehl
and
claude
committed
bbb3c03
BOOTSTRAP.md: how to get the binary onto the VM, and what belongs in Portainer

bwdiehl
and
claude
committed
6bad8a9
BOOTSTRAP.md: Safari auto-expands the artifact, and how to verify the binary

bwdiehl
and
claude
committed
fe5cda3
argv: register --help as a long option

bwdiehl
and
claude
committed
061af4c
REVIVAL.md: record bootstrap progress -- phases 0, 1 and 3 complete

bwdiehl
and
claude
committed
957f903
BOOTSTRAP.md: the anisette persistence check could report success on no data

bwdiehl
and
claude
committed
b49d922
Phase 2: a Portainer stack for anisette, and the volume path the docs get wrong

bwdiehl
and
claude
committed
3cd30ac
REVIVAL.md: anisette deployed and verified; the GSA sanitizer is load-bearing

bwdiehl
and
claude
committed
2fd4a92
BOOTSTRAP.md: make the Phase 4 command paste-safe, and keep the password out of history

bwdiehl
and
claude
committed
9fbf8b7
altsign: report a non-200 from Apple's auth endpoint instead of "invalid response"

bwdiehl
and
claude
committed
118e9fb
argv: accept credentials from the environment, not only from argv

bwdiehl
and
claude
committed
4f40fdd
Containerise AltServer: image, combined stack, and a publish workflow

bwdiehl
and
claude
committed
1fe89a3
REVIVAL.md: PR #135's GSA client-info block is CONFIRMED against real Apple infra

bwdiehl
and
claude
committed
6e2d81d
web: status dashboard -- slice 1 of the setup portal

bwdiehl
and
claude
committed
5b4fe84
web: pairing wizard, and a draft confirmation for upstream PR #135

bwdiehl
and
claude
committed
af35345
README: correct the parts that were actively wrong, document what is actually needed

bwdiehl
and
claude
committed
725677d
web: pairing wizard detects an existing backup instead of nagging

bwdiehl
and
claude
committed
3f29bcb
altsign: give every GrandSlam request its own connection (the 429 fix)

bwdiehl
and
claude
committed
eb053f1
docs: zero-credential probe for the GrandSlam connection-reuse theory

bwdiehl
and
claude
committed
24fbae9
docs: the probe must skip TLS validation, as AltServer does

bwdiehl
and
claude
committed
1b9b8d5
REVIVAL.md: connection-reuse cause PROVEN, at zero cost to the Apple ID

bwdiehl
and
claude
committed
887d459
ci: do not cancel sibling build legs when one fails

bwdiehl
and
claude
committed
38bddab
deploy: named volumes, so the stack needs no host prep at all

bwdiehl
and
claude
committed
7f2032e
image: fetch the current AltStore IPA automatically on start

bwdiehl
and
claude
committed
215885a
web: install flow with 2FA entry -- slice 3, the setup portal is complete

bwdiehl
and
claude
committed
5e41eee
ci: build amd64 only on branch pushes, all four on tags

bwdiehl
and
claude
committed
023755c
deploy: run the web UI as a stack service, reachable at http://<host>:8099

bwdiehl
and
claude
committed
663cfaf
README: rewrite for the current state of the fork

bwdiehl
and
claude
committed
f6e98de
web: serve concurrently, and make install errors visible

bwdiehl
and
claude
committed
9baa62b
web: auto-populate the device UDID on the install page

bwdiehl
and
claude
committed
d7e3da5
web: fix two status checks that were reporting nonsense

bwdiehl
and
claude
committed
a79aab5
deploy: mDNS from a container needs AppArmor rules -- ship a tested profile

bwdiehl
and
claude
committed
70b646e
REVIVAL.md: bring the log up to date through the AppArmor finding

bwdiehl
and
claude
committed
45486e5
web: fix a JavaScript syntax error that broke every page script

bwdiehl
and
claude
committed
501e40f
ci: rebuild the image when web/, the entrypoint or the submodule change

bwdiehl
and
claude
committed
f7f3130
REVIVAL.md: record the stale-image and JS-escape findings

bwdiehl
and
claude
committed
503225f
Add two CI guards for the failures that reported success

bwdiehl
and
claude
committed
cfda5b2
Add netmuxd: wireless device transport for unattended refresh

bwdiehl
and
claude
committed
e21b261
Bump runtime base to trixie: netmuxd needs glibc 2.38

bwdiehl
and
claude
committed
3cefd9e
REVIVAL.md: record the refresh-path investigation

bwdiehl
and
claude
committed
06f0314
Fix duplicate depends_on key, and guard against the class

bwdiehl
and
claude
committed
3616c91

Commits on Sep 15, 2026

Fix wireless refresh: parse usbmux network addresses in both sockaddr layouts

bwdiehl
and
claude
committed
033cb73
Rebuild the image when libraries/ changes, and derive that rule from the makefiles

bwdiehl
and
claude
committed
55bf6be
Require a bare filter entry for submodules that are themselves compile inputs

bwdiehl
and
claude
committed
25cc99e
Wireless refresh confirmed working on the deployed stack

bwdiehl
and
claude
committed
ef5deec
Fix a reachability check that could never pass, and put nav tabs on every page

bwdiehl
and
claude
committed
b7da4ea
Drop the 4-hourly scheduled build

bwdiehl
and
claude
committed
dbd1df2
Merge pull request #2 from Ben-Diehlci/bd/revival
Ben-Diehlci
authored
9eca755
REVIVAL.md: record the post-merge repository audit as a tracked checklist

bwdiehl
and
claude
committed
b4767eb
Redact the anisette identifiers the install page was printing, and scrub personal data

bwdiehl
and
claude
committed
9b6d0c0
Repair the commit SHAs the history rewrite invalidated

bwdiehl
and
claude
committed
e6f3d2d
REVIVAL.md: record where credentials actually live, on the server not in the repo

bwdiehl
and
claude
committed
ccb2489
gitignore: refuse the file classes that would leak credentials or identity

bwdiehl
and
claude
committed
9cd0399
Rewrite BOOTSTRAP.md as a guide someone else can actually follow

bwdiehl
and
claude
committed
2f07f58
Close the remaining audit items, and tidy the repository layout

bwdiehl
and
claude
committed
5db98d1
REVIVAL.md: close the wireless-refresh TODO, which was confirmed two days ago

bwdiehl
and
claude
committed
5702f8a
Make rewrite_altserver_source.py fail loudly, the last rewriter that did not

bwdiehl
and
claude
committed
e991c23
Build the sub-make once, give Linux recovery advice, and ship a credential-hygiene tool

bwdiehl
and
claude
committed
326bbc6
credential-hygiene: fix a double-counted grep result, and label skipped sections

bwdiehl
and
claude
committed
94493ed
buildenv: push to the repo owner's namespace, not a hardcoded one

bwdiehl
and
claude
committed
eccd51b
buildenv: build amd64 first, so a QEMU failure does not cost the image CI needs

bwdiehl
and
claude
committed
adce684
Build against this fork's own toolchain images, not another account's

bwdiehl
and
claude
committed
b1ec101
Stop credentials reaching docker logs, and bound the logs that remain

bwdiehl
and
claude
committed
39b2263
credential-hygiene: stop counting redacted lines as leaks

bwdiehl
and
claude
committed
104a98c
stack: select the AppArmor profile by variable instead of by editing the file

bwdiehl
and
claude
committed
2c7109f
apparmor: verify the profile loaded against the kernel, not against a count

bwdiehl
and
claude
committed
14e3bde
tests: use synthetic fixtures -- the old ones were a real anisette identity

bwdiehl
and
claude
committed
27b0d33
web: look for the phone on both transports, not just USB

bwdiehl
and
claude
committed
c94b31f
web: live log view on the status page, for watching a refresh happen

bwdiehl
and
claude
committed
fbcd9ca

Commits on Sep 16, 2026