ipa-resign 0.0.5 → 0.0.6

package/LICENSE

@@ -0,0 +1,47 @@
+Copyright (c) 2026 650 Industries, Inc. All rights reserved.
+
+PROPRIETARY SOFTWARE LICENSE
+
+This software, including the package published as "ipa-resign" and all of its
+source code, compiled bundles, native helper binaries, and accompanying files
+(the "Software"), is the confidential and proprietary property of 650
+Industries, Inc. ("650 Industries").
+
+1. No license granted. No license or right to the Software is granted to you,
+   whether by implication, estoppel, or otherwise, except under a separate
+   written agreement signed by 650 Industries. Absent such an agreement, you may
+   not use, copy, install, execute, or retain the Software.
+
+2. Restrictions. You may not, and may not permit any third party to:
+   (a) reverse engineer, decompile, disassemble, deobfuscate, or otherwise
+       attempt to derive the source code, structure, algorithms, or protocols of
+       the Software, in whole or in part;
+   (b) copy, distribute, republish, sublicense, sell, rent, lease, or otherwise
+       make the Software available to any third party;
+   (c) modify, adapt, translate, or create derivative works of the Software; or
+   (d) remove, obscure, or alter any proprietary notice in the Software.
+
+   Any circumvention or attempted circumvention of the technical protection
+   measures in the Software (including its obfuscation) is a material breach of
+   this license and may violate applicable law.
+
+3. Third-party components. The Software bundles third-party open-source
+   components that remain licensed under their own respective terms. Those terms,
+   and the required copyright and permission notices, are reproduced in
+   dist/THIRD-PARTY-LICENSES.txt. Nothing in this license limits your rights, or
+   enlarges your obligations, under those third-party licenses with respect to
+   those components. The restrictions in Section 2 apply only to the proprietary
+   portions of the Software authored by 650 Industries.
+
+4. Reservation of rights. All rights not expressly granted are reserved by 650
+   Industries. This license does not transfer any ownership, title, or
+   intellectual property right in the Software.
+
+5. No warranty. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+   EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+   MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT.
+
+6. Limitation of liability. IN NO EVENT SHALL 650 INDUSTRIES BE LIABLE FOR ANY
+   CLAIM, DAMAGES, OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT, OR
+   OTHERWISE, ARISING FROM, OUT OF, OR IN CONNECTION WITH THE SOFTWARE OR THE USE
+   OR OTHER DEALINGS IN THE SOFTWARE.

package/README.md

@@ -95,14 +95,16 @@ and re-wrap bytes as `Buffer` for the CLI. Full design:
 
 ```bash
 yarn install
-yarn build   # dist/: bytecode CLI bundle (index.jsc) + the ipa-resign/core and
+yarn build   # dist/: obfuscated CLI bundle (index.js) + the ipa-resign/core and
              # ipa-resign/anisette-browser subpath builds + bundled .d.ts
 ```
 
-`yarn build` is platform-agnostic — it just bundles TypeScript (via esbuild). It runs
-three steps: the bytecode CLI build, then `build:core` and `build:anisette-browser` (the
-two browser-consumable subpaths, which you can also run on their own). The native helper
-binaries are built separately because they require platform-specific toolchains:
+`yarn build` is platform-agnostic — it bundles TypeScript (via esbuild) and runs each
+bundle through `javascript-obfuscator` (`scripts/obfuscate.mjs`). It runs several
+steps: the obfuscated CLI build, then `build:core`, `build:anisette-browser`,
+`build:sign-browser`, and `build:browser` (the browser-consumable subpaths, which you
+can also run on their own). The native helper binaries are built separately because
+they require platform-specific toolchains:
 
 ```bash
 # Build the macOS anisette helper (only works on macOS — needs swiftc, i.e. Xcode CLT).

package/assets/anisette/anisette_rs.js

@@ -9,6 +9,10 @@ async function Module(moduleArg = {}) {
 // include: shell.js
 // include: minimum_runtime_check.js
 (function() {
+  // HAND-PATCHED (re-apply when regenerating this file): emscripten's UA
+  // version check misparses modern Safari/WebKit and throws before the wasm
+  // loads (APPLE-SIGN-20). Skip the whole check.
+  return;
   // "30.0.0" -> 300000
   function humanReadableVersionToPacked(str) {
     str = str.split('-')[0]; // Remove any trailing part from e.g. "12.53.3-alpha"

package/assets/zsign/zsign-wasm.min.js

@@ -22,6 +22,7 @@ var createZsignModule = (() => {
 // include: shell.js
 // include: minimum_runtime_check.js
 (function() {
+  return; // patched by vendor-zsign.mjs: UA version check misparses modern Safari (APPLE-SIGN-20)
   // "30.0.0" -> 300000
   function humanReadableVersionToPacked(str) {
     str = str.split('-')[0]; // Remove any trailing part from e.g. "12.53.3-alpha"

package/dist/THIRD-PARTY-LICENSES.txt

@@ -1,4 +1,4 @@
-Third-party software bundled into index.jsc.
+Third-party software bundled into index.js.
 Generated by scripts/build.mjs. 28 packages.
 
 ========================================================================

package/dist/anisette-browser/index.d.ts

@@ -32,6 +32,32 @@ export type AnisetteSource = {
 export declare function setAnisetteSource(source: AnisetteSource): void;
 export declare function getAnisetteHeadersAsync(): Promise<AnisetteHeaders>;
 export declare function clearAnisetteCache(): void;
+/** How the browser device presents to Apple's account device list. */
+export type AnisetteDeviceConfig = {
+	/** Real Apple model id, e.g. `Macmini9,1` or `MacBookPro18,1`. Unknown ids show as "Mac". */
+	model?: string;
+	/** macOS version shown on the Version line, e.g. `26.5`. Free-form; recorded at registration. */
+	osVersion?: string;
+	/** macOS build paired with the version, e.g. `25F71`. Not displayed; kept for realism. */
+	osBuild?: string;
+};
+/**
+ * Set how browser sign-ins present to Apple's account device list, by part. Merges with the
+ * current config, so `setAnisetteDevice({ osVersion: '26.5' })` changes only the version. The
+ * `model` MUST be a real Apple model id (unknown → generic "Mac"); `osVersion`/`osBuild` are
+ * free-form (probe-verified, 2026-08). Call before the first sign-in — this resets the in-memory
+ * instance so the change takes effect. Note: the OS version only *records* at fresh device
+ * registration; re-authing an already-provisioned device keeps its original version.
+ */
+export declare function setAnisetteDevice(config: AnisetteDeviceConfig): void;
+/**
+ * Escape hatch: set the raw `X-MMe-Client-Info` string directly, e.g.
+ * `<Macmini9,1> <macOS;26.5;25F71> <com.apple.AuthKit/1 (com.apple.dt.Xcode/3594.4.19)>`.
+ * Prefer setAnisetteDevice() for the common case; this is for non-macOS platform strings or
+ * custom app slots. Same rules apply (real model id; version passes through). Call before the
+ * first sign-in.
+ */
+export declare function setAnisetteClientInfo(value: string): void;
 export declare function generateAnisetteHeadersLocallyAsync(onProgress?: SscProgress): Promise<Record<string, string>>;
 export declare function clearLocalAnisetteState(): void;