Artifact: ios
Purpose: standalone USB iPhone discovery/info/app-list/install backend for Yabloko
Status: vendored, SHA-256 pinned, packaged only by package_universal_app.sh

Upstream: https://github.com/danielpaulus/go-ios
Tag: v1.3.2
Tag commit: 2fb34682ef12db97c9fafdf99f1dd1d3522604ad
License: MIT (see LICENSE)
Source archive SHA-256: ee5283359650cd7040f785d0eb8c6376b09bca3255cb20bcbfc4e8769f4a25bb
go.sum SHA-256: a0b3d646f23e9eb02552dbf14375672ba7e1afad17a86c76a6eb56d1ba2fa8cd

Compiler: official Go 1.26.5 darwin-arm64 toolchain
Toolchain archive SHA-256: efb87ff28af9a188d0536ef5d42e63dd52ba8263cd7344a993cc48dd11dedb6a
Target OS: macOS 13.5 or newer
Architectures: arm64, x86_64

Build procedure (once for each GOARCH=arm64 and GOARCH=amd64):
  - replace the upstream CLI version string "local-build" with "1.3.2",
    matching the official release workflow
  - MACOSX_DEPLOYMENT_TARGET=13.5
  - CGO_ENABLED=1
  - CC="clang -arch <arch> -mmacosx-version-min=13.5"
  - go build -trimpath -buildvcs=true -ldflags="-s -w -buildid="
  - combine slices with lipo
  - ad-hoc sign the staging binary for local verification

Artifact SHA-256: 64f7de39d239896991291d01142b48f6d34e5b66bb62dd95912099891502dc54
LICENSE SHA-256: d368be6f632f8f928369c6f1923cf2f884a1ae42a5f0dd218acd96f9bcfa75b4

Verification:
  - file/lipo: universal x86_64 + arm64
  - LC_BUILD_VERSION: minos 13.5 in both slices
  - otool dependencies: only macOS system libSystem, libresolv,
    CoreFoundation, and Security
  - codesign --verify --strict: passed (ad-hoc staging signature)
  - arm64 --version: 1.3.2
  - x86_64 --version under Rosetta: 1.3.2
  - arm64 and x86_64 `list`: exit 0 with valid JSON
  - during testing, both slices detected the same physically connected iPhone
    UDID through macOS usbmux without Xcode, Homebrew, or libimobiledevice
  - focused upstream tests: root CLI, installationproxy, and zipconduit passed

Packaging requirement:
  Replace the ad-hoc signature with the same Developer ID Application identity
  used for the containing Yabloko.app before signing the outer application.
  Keep LICENSE and this build-provenance notice in the application bundle.

Why this is rebuilt:
  The official v1.3.2 go-ios-mac.zip is universal, but its arm64 slice has
  LC_BUILD_VERSION minos 26.0. It cannot launch natively on macOS Ventura.
  Its archive SHA-256 is
  100f225bfdd039081bcbdaf45029df3e67032673f3e0ca1fa3c050898c230c57.
