v0.1.0-preview.2 (experimental)

Experimental Apple Silicon macOS preview

Preview.2 fixes the Developer ID signed runtime's account-backed Store commands. Preview.1 could not load the checksum-pinned Unicorn dynamic library under macOS library validation; allowing that library exposed a separate JIT restriction. The new signed executable carries the two required hardened-runtime entitlements.

The extracted archive passed codesign --verify --strict, a SHA-256 check, controlled-account purchase history, TouchLink version listing and metadata, and a TouchLink Mac-compatible IPA download with SINF on macOS 27.0.1 ARM64. Apple notarization accepted submission a0b08df0-7978-4ca8-bedc-179fb324641c with zero issues. The archive includes the MIT license, notices, and the DarkPhoenix Apache-2.0 license.

For practical use, prefer the original ipatool and UnfairPlay projects. This is an experimental Rust rewrite.

Install

brew tap everettjf/tap
brew install everettjf/tap/ipatool-rs

Alternatively, download the attached tarball and SHA-256 file, verify with shasum -a 256 -c ipatool-rs-0.1.0-preview.2-macos-arm64.tar.gz.sha256, and extract the archive.

Known limits

• Real 2FA and interactive default-Keychain login and revoke still need end-to-end checks. The user approved an interactive auth info Keychain dialog.
• Successful recovery from an expired Store token remains unverified. The signed CLI download succeeded with a valid saved account; a prior MCP download had failed after token refresh.
• Three authenticated MCP outputs and private FairPlay enrollment/decryption still need live validation.
• macOS x86_64, iOS, Linux, and Windows runtime validation is deferred.

See the remaining work and porting record.