Repository navigation

Export AirTags from iCloud, so no Mac is needed - #65

Merged

parawanderer merged 131 commits into

mainfrom

feat/native-tag-fetching

Aug 15, 2026

Merged

Export AirTags from iCloud, so no Mac is needed#65
parawanderer merged 131 commits into
mainfrom
feat/native-tag-fetching

Commits on Aug 13, 2026
- Add clean-room protocol specification for iCloud FindMy key export
  
  parawanderer
  and
  claude
  committed
  b4125f3
- Amend specification from clean-room implementation feedback
  
  parawanderer
  and
  claude
  committed
  4ba4375
- Answer the decrypted-field form from ciphertext sizes
  
  parawanderer
  and
  claude
  committed
  53e23b5
- Specify joining the trust circle after escrow recovery
  
  parawanderer
  and
  claude
  committed
  79a2a52
- Tell implementers not to look for coherence that is not there
  
  parawanderer
  and
  claude
  committed
  1ed2ce9
- Enumerate the trust-circle join messages
  
  parawanderer
  and
  claude
  committed
  a25558f
- Specify what the protection structure's signature covers, and the paging terminator
  
  parawanderer
  and
  claude
  committed
  379b007
- Correct the escrow label, and keep unknown-field reporting
  
  parawanderer
  and
  claude
  committed
  480f878
- Explain the companion escrow record, and make partial a cross-check
  
  parawanderer
  and
  claude
  committed
  5290bc7
- Correct the companion hypothesis, and specify the peer identifier
  
  parawanderer
  and
  claude
  committed
  222fbd0
- Make viability the primary safety rule for escrow deletion
  
  parawanderer
  and
  claude
  committed
  5b655dd
- Tidy the open questions across all six stages
  
  parawanderer
  and
  claude
  committed
  b56fda6
- Record that a deletion which addressed nothing reports success
  
  parawanderer
  and
  claude
  committed
  1ddfb8e
- Say that an escrow cleanup is not a fix
  
  parawanderer
  and
  claude
  committed
  4457c79
- Specify how to write a KeyVault message, not only how to read one
  
  parawanderer
  and
  claude
  committed
  2542fbd
- Disambiguate the two identifiers in escrow recovery
  
  parawanderer
  and
  claude
  committed
  4071873
- Say what persists after joining, and what the passcode buys
  
  parawanderer
  and
  claude
  committed
  c45821f
- Specify fetching key shares, and that joining may be unnecessary to read
  
  parawanderer
  and
  claude
  committed
  0c45c69
- Specify where a peer's public keys come from
  
  parawanderer
  and
  claude
  committed
  c595aea
- Specify what every signature in stage 3 covers
  
  parawanderer
  and
  claude
  committed
  d8895a7
- A received key share is a CloudKit record, not a protobuf message
  
  parawanderer
  and
  claude
  committed
  d93535d
- Say that the peer directory is fetched by paging, not one call
  
  parawanderer
  and
  claude
  committed
  023745c
- Record what a key share's archive actually holds
  parawanderer
  committed
  af21360
- Stop uniform decryption failure reading as evidence for the cipher
  parawanderer
  committed
  6a2412d
- Specify the key share cipher exactly, and correct the view keys
  parawanderer
  committed
  2b6ca4e
Commits on Aug 14, 2026
- Record that the key shares now unwrap, and why the search could not have worked
  
  parawanderer
  and
  claude
  committed
  b3f0d4e
- Narrow the last gap to the step between view keys and keychain items
  
  parawanderer
  and
  claude
  committed
  ba9c5eb
- Specify the step from a view's keys to a keychain item
  parawanderer
  committed
  f2c8dfd
- Say that export is a mode, not a compatibility path
  parawanderer
  committed
  9d6de94
- Correct what cloudKitMetadata holds, and export it
  parawanderer
  committed
  a99dcdd
- Say what each output format loses, since neither contains the other
  parawanderer
  committed
  bd04a70
- Specify the record save path, so an owner can rename their tags
  parawanderer
  committed
  b3adf8d
- Record that Stage 3 now reaches Stage 5's input
  
  parawanderer
  and
  claude
  committed
  499792b
- Choose the export format per accessory, not per bundle
  parawanderer
  committed
  5ce7366
- Mark the mixed-selection case as not reachable yet
  parawanderer
  committed
  2248118
- Record that a compressed public key here is a bare x coordinate
  
  parawanderer
  and
  claude
  committed
  2f7079e
- Ask where a beacon record's protecting key actually lives
  
  parawanderer
  and
  claude
  committed
  83927e7
- Say that a record's key comes from the zone, not the keychain
  parawanderer
  committed
  55c3b52
- Ask where the rest of the zone keys come from
  
  parawanderer
  and
  claude
  committed
  f09634b
- Say which structure the HMAC's third part is, and where zone keys end
  parawanderer
  committed
  bb44961
- Record that the HMAC verifies and the zone still yields one key
  
  parawanderer
  and
  claude
  committed
  4fb89c7
- Do not claim no derivation exists between a zone key and a record's
  parawanderer
  committed
  998fea7
- Rule out the derived key, and report the record's key as unsourced
  
  parawanderer
  and
  claude
  committed
  5afef87
- One key protects all 35 records, and nothing described holds it
  
  parawanderer
  and
  claude
  committed
  9b9933c
- Say that a private key blob is public x first, then the scalar
  parawanderer
  committed
  4ff48df
- Falsify the blob-layout prediction: that half was already read correctly
  
  parawanderer
  and
  claude
  committed
  a388a3f
- Ask whether the zone identity's 32 bytes are a scalar or a public x
  
  parawanderer
  and
  claude
  committed
  62e9738
- The 32 bytes are not the record's key; ask whether they are a key at all
  
  parawanderer
  and
  claude
  committed
  615887b
- Close N: the keyset's checksum was being read as its key
  
  parawanderer
  and
  claude
  committed
  4db1213
- Update the status table, which was three stages out of date
  parawanderer
  committed
  605510d
- Say how a terms failure actually arrives, which section 5.2 never did
  parawanderer
  committed
  b62d26c
- Write down the export zip layout exactly
  parawanderer
  committed
  a4f4011
- Raise the PET lifetime against the terms flow in GAPS
  
  parawanderer
  and
  claude
  committed
  b5cf260
- Settle whether the PET is renewed before accepting terms
  parawanderer
  committed
  9f54a69
- Close O1: the PET renewal is settled in §5.2
  
  parawanderer
  and
  claude
  committed
  4ffc88e
- Say what a rendered alignment record carries, and name the join keys
  parawanderer
  committed
  117cd5a
- Say that cloudKitMetadata's three facts survive as CloudKit fields
  parawanderer
  committed
  b09c9eb
- Doubt that a beacon with no naming record must be exported
  parawanderer
  committed
  9e4d2f2
- Ask P1: the unnamed-beacon check needs a run, and correct a bad note
  
  parawanderer
  and
  claude
  committed
  7d7f7ca
- Make omission the default for an unmatched beacon, not synthesis
  parawanderer
  committed
  a23f54b
- Record that accessories from this route locate
  parawanderer
  committed
  91c10fe
- P3: confirm the model claim, and two things the fixture contradicts
  
  parawanderer
  and
  claude
  committed
  1e68fff
- Stop two single-account observations reading as format facts
  parawanderer
  committed
  ae97748
- Skip a beacon with no privateKey, rather than one with no name
  parawanderer
  committed
  6ef14db
- Q1: the write path is verified against Apple's own Find My
  
  parawanderer
  and
  claude
  committed
  82b2acc
- Q3: the keyset checksum is implemented and does not verify
  
  parawanderer
  and
  claude
  committed
  4c5319f
- Record that the write path is verified against Apple's own client
  parawanderer
  committed
  3f6fa42
- Settle the nested keyset checksum: the rule is right, the encoder is not
  parawanderer
  committed
  250bf98
- Q3 follow-up: not the empty members, probably the application tag
  
  parawanderer
  and
  claude
  committed
  38748ca
- Prefer looking a record up per write to tracking its tag
  parawanderer
  committed
  84d3906
- Round R: four things blocking the join, and what is buildable meanwhile
  
  parawanderer
  and
  claude
  committed
  8895d75
- Specify what a joining client must build for itself
  parawanderer
  committed
  892fbe6
- Name the four escrow roots, and the timestamp format
  parawanderer
  committed
  3b63975
- Record round S: enrolment built, three questions about it open
  parawanderer
  committed
  4682d17
- Correct three metadata key names, and say what the record holds
  parawanderer
  committed
  f318ef1
- Close round S: all four answered, and the code follows
  parawanderer
  committed
  9fce179
- Say that the entropy is enrolment's input, never its invention
  parawanderer
  committed
  4ad85bf
- Stop implying a generated password is a recovery path
  parawanderer
  committed
  0fc984e
- Record round T: the questions a writer has that a reader never asks
  parawanderer
  committed
  79309cf
- Specify the write direction of the join, and fix what R4 got wrong
  parawanderer
  committed
  c8ea97f
- Carry the four escrow roots next to the specification
  parawanderer
  committed
  1eaaff9
- Record round U: the join is built, and the response message is unnamed
  parawanderer
  committed
  0c729c9
- Specify what joinWithVoucher returns, and what restorePoint is
  parawanderer
  committed
  0c0d624
- Close U1 and U2: they were one question, and the reply was specified
  parawanderer
  committed
  67f9043
- Say never to retry a join, and that string and bytes hide each other
  parawanderer
  committed
  142bf4a
- Type the two tables that were left untyped
  parawanderer
  committed
  0160666
- Record round V: what a live preflight run settled
  parawanderer
  committed
  125dca9
- Record what the first live preflight found
  parawanderer
  committed
  a79d123
- Name the one requirement this work does not remove
  parawanderer
  committed
  ad90ea9
- Plan the two exporters and when the app joins the circle
  parawanderer
  committed
  c52cffb
- Correct two things the wizard already settles
  parawanderer
  committed
  ac0f009
- Add the sharee, and say the export is the answer for now
  parawanderer
  committed
  a69d330
- Record round W: the join went through, and what it does not prove
  parawanderer
  committed
  3b15574
- Close W1: the record the join created recovers, and its keys decrypt
  parawanderer
  committed
  241bf7b
- Record round X: device removal is what makes a bottle non-viable
  parawanderer
  committed
  4b6cd80
- Add rule 11: the app is one device
  parawanderer
  committed
  fbefe58
Commits on Aug 15, 2026
- Brief the desktop exporter's move to iCloud
  parawanderer
  committed
  1bf1fe3
- Stop calling the macOS route offline, because it joined too
  parawanderer
  committed
  72ca930
- Make the shared export sink the first stage of the brief
  parawanderer
  committed
  621bb8f
- Correct why records without a private key are skipped
  parawanderer
  committed
  0834d26
- Fix two sanitisation slips in the committed export fixtures
  
  parawanderer
  and
  claude
  committed
  8c1b863
- Add the shared export package that writes the bundle
  
  parawanderer
  and
  claude
  committed
  d574ebe
- Point the exporter at iCloud, and give it a CLI
  
  parawanderer
  and
  claude
  committed
  b4a201b
- Let the app identify an accessory through the shared package
  
  parawanderer
  and
  claude
  committed
  c387de3
- Document the CLI, and what the app has to do to catch up
  
  parawanderer
  and
  claude
  committed
  877db2d
- Choose the export route by what the machine can do
  
  parawanderer
  and
  claude
  committed
  cee9b86
- Rebuild the wizard on the same code the CLI runs
  
  parawanderer
  and
  claude
  committed
  638aada
- Say what an export leaves on the Apple account, and how to remove it
  
  parawanderer
  and
  claude
  committed
  e260ecd
- Rewrite the exporter's README for what it now is
  
  parawanderer
  and
  claude
  committed
  64655f7
- Rebuild the wizard's list as a table, and ask for both credentials at once
  
  parawanderer
  and
  claude
  committed
  17f7ed6
- Stop the dialogs accepting what Apple will only reject
  
  parawanderer
  and
  claude
  committed
  639f048
- Put the windows somewhere a person would look
  
  parawanderer
  and
  claude
  committed
  e911156
- Add sample key files to try the self-generated tag import with
  
  parawanderer
  and
  claude
  committed
  c7618fa
- Say which fixtures belong where
  
  parawanderer
  and
  claude
  committed
  997302c
- Identify a self-generated tag by its key, not by what its file called it
  
  parawanderer
  and
  claude
  committed
  fd6fa13
- Make the frozen binary actually start
  
  parawanderer
  and
  claude
  committed
  74a0bc6
- Ship the data files the keychain session needs, and prove it offline
  
  parawanderer
  and
  claude
  committed
  2a217be
- Build a directory rather than a single file, and start twenty times faster
  
  parawanderer
  and
  claude
  committed
  f776f3f
- Record that the app becomes an exporter, and then most people need no export
  
  parawanderer
  and
  claude
  committed
  6a1a8cb
- Stop every export registering another fake Mac
  
  parawanderer
  and
  claude
  committed
  009aa26
- Point the exporter's help button at the page that describes it
  
  parawanderer
  and
  claude
  committed
  1dce488
- Stop the old decryptor greeting you with "foo"
  parawanderer
  committed
  1a410e9
- Stop the headless CLI needing a window, and let pyright see the shared package
  parawanderer
  committed
  6334438
- Stop a cancelled sign-in leaving the wizard hung for ever
  
  parawanderer
  and
  claude
  committed
  41ea556
- Stop the CLI registering another fake Mac on every export
  
  parawanderer
  and
  claude
  committed
  ffdc12a
- Let the wizard open without an Apple account, and stop it losing your ticks
  
  parawanderer
  and
  claude
  committed
  0fd90fd
- Keep the tags a key file gave you, and let them be the whole export
  
  parawanderer
  and
  claude
  committed
  c5b6bc5
- Say that the app cannot import the shared package yet
  
  parawanderer
  and
  claude
  committed
  9881f8c
- Say which CI job actually runs the Tk tests
  
  parawanderer
  and
  claude
  committed
  02a8d1e
- Colour the rows you ticked, and count them
  
  parawanderer
  and
  claude
  committed
  9229aba
- Stop a finished test's worker aborting the next one
  
  parawanderer
  and
  claude
  committed
  0b0919f

Commits

Commits on Aug 13, 2026

Commits on Aug 14, 2026

Commits on Aug 15, 2026