2cb1f8ad6e
apps/rebreak-binder-mac/ — neue macOS-App die User durch den kompletten Self-Bind-Prozess führt: Welcome → Preflight → Supervise → Enroll → Configure (MDM-Push + Pre/Post-Check) → Sideload Lock-Profile (AirDrop). 3-Layer Smart-Resume: supervised? + Enrollment-Profil installed (cfgutil Ground-Truth)? + MDM-Ack fresh (NanoMDM-DB via ssh+psql)? Services: DeviceDetector (ideviceinfo + cfgutil), SuperviseRunner (spawnt supervise-magic CLI), MDMClient (PUT /v1/enqueue?push=1, Apple XML-Plist, identisch zum server-watcher-Format), MDMStatus (DB-Real- Check + ManagedApplicationList-Result-Read). Plus: - fix(supervise-magic): EOF nach ProcessMessage Response (ErrorCode=0) ist Success, nicht Error — vermeidet false-fail bei iPhone-Restore- Reboot - feat(mdm-profiles): rebreak-content-filter-mdm.mobileconfig als MDM-Push-Variante (ohne ConsentText, ohne globales allowAppRemoval= false — per-app via managed-state) End-to-End validiert: App-Push via Ad-Hoc-Manifest (silent), Managed- State via ManagedApplicationList-Query, NEFilter-Mode nach App-Force- Quit, Lock-Profile non-removable nach Sideload. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
41 lines
1.8 KiB
Swift
41 lines
1.8 KiB
Swift
import Foundation
|
|
|
|
/// Zentrale Auflösung der system-binaries die der Binder anstößt.
|
|
enum Paths {
|
|
/// libimobiledevice — meist via Homebrew installiert.
|
|
static let ideviceinfoCandidates = [
|
|
"/opt/homebrew/bin/ideviceinfo",
|
|
"/usr/local/bin/ideviceinfo",
|
|
]
|
|
|
|
/// Apple Configurator (heißt seit 2026 ohne „2") liefert cfgutil mit.
|
|
static let cfgutilCandidates = [
|
|
"/Applications/Apple Configurator.app/Contents/MacOS/cfgutil",
|
|
"/Applications/Apple Configurator 2.app/Contents/MacOS/cfgutil",
|
|
]
|
|
|
|
static var cfgutilPath: String? {
|
|
firstExecutable(in: cfgutilCandidates)
|
|
}
|
|
|
|
/// supervise-magic Go-binary aus dem Monorepo. Pfad relativ zur App-Location:
|
|
/// app läuft typischerweise aus DerivedData/Build/Products oder ähnlich, daher
|
|
/// suchen wir mehrere plausible Locations relativ + absolut.
|
|
static let superviseMagicCandidates: [String] = {
|
|
let env = ProcessInfo.processInfo.environment["REBREAK_SUPERVISE_MAGIC_BIN"]
|
|
var candidates: [String] = []
|
|
if let env, !env.isEmpty { candidates.append(env) }
|
|
// Repo-Layout: rebreak-monorepo/apps/rebreak-binder-mac/...
|
|
// supervise-magic liegt in rebreak-monorepo/ops/mdm/supervise-magic/bin/
|
|
let home = FileManager.default.homeDirectoryForCurrentUser.path
|
|
candidates.append("\(home)/mono/rebreak-monorepo/ops/mdm/supervise-magic/bin/rebreak-supervise-magic")
|
|
candidates.append("/usr/local/bin/rebreak-supervise-magic")
|
|
candidates.append("/opt/homebrew/bin/rebreak-supervise-magic")
|
|
return candidates
|
|
}()
|
|
|
|
static func firstExecutable(in candidates: [String]) -> String? {
|
|
candidates.first(where: { FileManager.default.isExecutableFile(atPath: $0) })
|
|
}
|
|
}
|