v2.1.0

New Features

• Grand Slam Authentication (GSA) — Completely reworked sign-in to use Apple's modern GrandSlam authentication. Apple deprecated the legacy username/password endpoint (it now returns empty/403 responses), which had broken login entirely; the new flow restores it.
• Native anisette generation — Required device authentication headers (X-Apple-I-MD, etc.) are produced locally on macOS via Apple's own frameworks. No external anisette server is needed.
• SRP-6a handshake — Implemented Apple's SRP-6a challenge/response (RFC 5054 / NG_2048 / SHA-256) so the password is never transmitted. Cryptography verified against reference test vectors.
• Two-Factor Authentication — Full 2FA support: codes pushed to trusted devices, with automatic SMS fallback for accounts that have no trusted device. The masked trusted phone number is shown on the verification screen, and the code auto-submits once all six digits are entered.

Improvements

• Faster verification — The 2FA code submits automatically when complete; no extra tap required.
• Clearer 2FA screen — Shows whether the code went to your trusted devices or your phone number, including the masked number for SMS.

Bug Fixes

• Fixed a main-thread priority inversion warning when clearing session cookies during logout (cookie cleanup now runs off the main actor at an appropriate QoS).