feat: build attestation via signature (#29)

Author: castdrian

.clang-format

@@ -66,3 +66,6 @@ IncludeCategories:
   # Local/Project headers
   - Regex: '^"'
     Priority: 3
+
+# File formatting
+InsertNewlineAtEOF: true

.github/workflows/build.yml

@@ -69,9 +69,9 @@ jobs:
     outputs:
       deb_url: ${{ steps.upload-deb.outputs.artifact-url }}
       deb_filename: ${{ steps.set-deb-filename.outputs.filename }}
-
     env:
       DEB_DOWNLOADED: false
+      UNBOUND_PK: ${{ secrets.UNBOUND_PK }}
 
     steps:
       - name: Checkout code
@@ -162,6 +162,11 @@ jobs:
         with:
           submodules: recursive
 
+      - name: Select Xcode Version
+        uses: maxim-lobanov/setup-xcode@v1
+        with:
+          xcode-version: '16.4'
+
       - name: Download build artifacts
         uses: actions/download-artifact@v5
         with:

.gitignore

@@ -2,6 +2,6 @@
 .theos
 .DS_Store
 packages
-binaries
 venv
 patcher-ios
+private_key.pem

Makefile

@@ -4,13 +4,14 @@ INSTALL_TARGET_PROCESSES = Discord
 
 ARCHS := arm64 arm64e
 TARGET := iphone:clang:latest:15.0
+COMMIT_HASH := $(shell git rev-parse HEAD)
 
 include $(THEOS)/makefiles/common.mk
 
 TWEAK_NAME = Unbound
 $(TWEAK_NAME)_FILES = $(shell find sources -name "*.x*" -o -name "*.m*")
-$(TWEAK_NAME)_CFLAGS =  -fobjc-arc -DPACKAGE_VERSION='@"$(THEOS_PACKAGE_BASE_VERSION)"' -I$(THEOS_PROJECT_DIR)/headers
-$(TWEAK_NAME)_FRAMEWORKS = UIKit Foundation UniformTypeIdentifiers UserNotifications
+$(TWEAK_NAME)_CFLAGS = -fobjc-arc -DPACKAGE_VERSION='@"$(THEOS_PACKAGE_BASE_VERSION)"' -DCOMMIT_HASH='@"$(COMMIT_HASH)"' -I$(THEOS_PROJECT_DIR)/headers
+$(TWEAK_NAME)_FRAMEWORKS = UIKit Foundation UniformTypeIdentifiers UserNotifications Security
 
 BUNDLE_NAME = UnboundResources
 $(BUNDLE_NAME)_INSTALL_PATH = "/Library/Application\ Support/"
@@ -19,17 +20,23 @@ $(BUNDLE_NAME)_RESOURCE_DIRS = "resources"
 include $(THEOS_MAKE_PATH)/tweak.mk
 include $(THEOS_MAKE_PATH)/bundle.mk
 
+SHELL := /bin/bash
+
 before-all::
 	@if [ ! -d "resources" ] || [ -z "$$(ls -A resources 2>/dev/null)" ]; then \
-		echo "Resources folder empty or missing, initializing submodule..."; \
 		git submodule update --init --recursive || exit 1; \
 	fi
 
-	$(ECHO_NOTHING)VERSION_NUM=$$(echo "$(THEOS_PACKAGE_BASE_VERSION)" | cut -d'.' -f1,2) && \
-		sed "s/VERSION_PLACEHOLDER/$$VERSION_NUM/" sources/preload.js > resources/preload.js$(ECHO_END)
+	sed "s/VERSION_PLACEHOLDER/'$(THEOS_PACKAGE_BASE_VERSION)'/" sources/preload.js > resources/preload.js
+	
+	@if [ -n "$$UNBOUND_PK" ]; then \
+		echo -n "$(COMMIT_HASH)" | openssl dgst -sha256 -sign <(printf '%s' "$$UNBOUND_PK" | tr -d '\r') -out resources/signature.bin 2>/dev/null; \
+	elif [ -f "private_key.pem" ]; then \
+		echo -n "$(COMMIT_HASH)" | openssl dgst -sha256 -sign private_key.pem -out resources/signature.bin 2>/dev/null; \
+	fi
 
 after-stage::
-	$(ECHO_NOTHING)find $(THEOS_STAGING_DIR) -name ".DS_Store" -delete$(ECHO_END)
+	find $(THEOS_STAGING_DIR) -name ".DS_Store" -delete
 
 after-package::
-	$(ECHO_NOTHING)rm resources/preload.js$(ECHO_END)
+	rm -f resources/preload.js resources/signature.bin

control

@@ -1,6 +1,6 @@
 Name: Unbound
 Description: Discord mobile client aimed at providing the user control, stability and customizability.
-Version: 1.6.0
+Version: 1.6.1
 Package: app.unbound.ios
 Architecture: iphoneos-arm
 Maintainer: eternal, acquitelol, Adrian Castro

headers/FileSystem.h

@@ -28,4 +28,4 @@
 
 + (NSString *)documents;
 
-@end
+@end

headers/Fonts.h

@@ -23,4 +23,4 @@
 
 + (NSMutableDictionary<NSString *, NSString *> *)overrides;
 
-@end
+@end

headers/Plugins.h

@@ -8,4 +8,4 @@
 + (NSString *)makeJSON;
 + (void)init;
 
-@end
+@end

headers/Discord/RCT.h headers/RCT.hheaders/Discord/RCT.h renamed to headers/RCT.h

@@ -6,4 +6,4 @@
 
 - (void)executeApplicationScript:(NSData *)script url:(NSURL *)url async:(BOOL)async;
 
-@end
+@end

headers/Recovery.h

@@ -26,4 +26,4 @@ extern id gBridge;
 
 @interface                                             UnboundMenuViewController ()
 @property (nonatomic, strong) NSArray<NSDictionary *> *menuSections;
-@end
+@end