4 Commits

Include renames

Author	SHA1	Message	Date
fenleon	e44d501ca5	albert: restore the accepted request shapes (ActivationInfoXML as plist data + rustpush UA); AppleTrust.platformTrustManager() for the public-CA endpoints; spec rev 43	2026-10-13 10:41:36 +02:00
fenleon	f6ee0ae323	AppleTrust: expose the embedded root pool for rustls-backed transports ... The ids-bridge (imessage) takes its trust anchors per call from this pool — the VEN endpoint's TLS fingerprint gate (rev 38) requires a rustls-shaped handshake, and the JVM stacks cannot provide one. Pure visibility change.	2026-10-12 22:48:28 +02:00
fenleon	7f960dbdfc	Live-session port (2026-10-02→04): the packed courier codec (C19 closed — ALPN apns-pack-v1:4096:4096 negotiated live, packed chain anchors at the Apple Server Authentication CA intermediate, no TLS client cert on that path), the <Protocol>-span extraction for wrapped activation responses, the accepted Albert shapes (DeviceCertRequest as <data>(base64(PEM)), three-cert FairPlayCertChain), kebab-case sign-in response + client-id parsing, fresh anisette per SRP run and per 2FA call (the 434/-22421 fixes), the GSA postdata liveness client (fired AFTER the delegate sign-in, ptkn + hb-token binding), and the validation-stamp replay guard (one mint = one device record — the 409's true root cause); nullable next-hbi was already end-to-end	2026-10-05 00:22:45 +02:00
fenleon	bc00fa2c3d	Open Madrid: clean-room Kotlin implementation of Apple's madrid (iMessage) protocol ... Engine modules: :codec (binary+XML plists), :courier (APNs push client), :ids (identity lookup), :crypto (the encryption envelope), :registration (GSA login, albert activation, renewal), :engine (integration + live drift probes). 344 offline tests; capture-fixture known-answer vectors for the parsers; live unauthenticated probes validated against Apple. The bundled FairPlay identity is a synthetic placeholder — Apple-derived material is user-staged, never shipped. Apache-2.0.	2026-09-29 00:04:00 +02:00