$ show WSF-Team/WSF
This repository is the content and configuration backend for the WSF iOS sideloading service, centered on the Portal app. It contains no application source code; instead it stores static distribution assets: an AltStore-compatible app repository manifest (repo/app-repo.json), pre-signed IPA binaries for Portal under various enterprise certificates (portal/signed/), JSON configuration files consumed by the Portal app (portal/configurationfiles/), markdown installation and usage guides (portal/guides/), and DNS allow/deny lists designed to block Apple's certificate-revocation endpoints (documents/dns/). In production, the Portal iOS app fetches updates, downloads, guide listings, and app metadata from this repository via raw GitHub or a Netlify-hosted website, while users sideload the signed IPAs directly. The architecture is a flat static-file distribution model: no servers, no build pipeline, and no runtime logic exist in this repo. The most notable technical asset is the curated DNS filter list that blocks Apple OCSP/CRL/App Attest domains while allowlisting essential services like push notifications, iCloud, and the App Store — a circumvention technique to prevent certificate revocations. The repository also includes legal documents (privacy policy and terms of service) governing the sale of signing certificates, which are processed through Stripe and supported via Discord. As a software asset, this repo has no code to build, test, or refactor; its value lies in the structured JSON, the domain-specific DNS lists, and the curated guides. It is functional and organized for its niche purpose, but has minimal reusability beyond serving as a template for similar sideloading distribution repos.
The LLM identified 3 files worth highlighting for reuse:
A concise AdGuard/uBlock-style filter list that blocks Apple's OCSP, CRL, and App Attest endpoints while allowlisting critical Apple services (push, iCloud, App Store, developer signing). It encodes non-obvious knowledge about which Apple domains must be blocked to prevent certificate revocation checks and which must remain reachable for device functionality. The list is self-contained and can be reused or adapted for any iOS sideloading project or DNS-based revocation protection setup.
A complete, well-formed AltStore/Portal source manifest declaring apps (bundle identifiers, download URLs, icons, screenshots, versions, tint colors) and a news feed. Though the specific apps are project-specific, the structure closely follows the standard AltStore source specification and can serve as a reference or template for anyone publishing their own iOS app repository. It demonstrates correct usage of the source format's required and optional fields.
A small JSON configuration file that the Portal app fetches to populate downloadable files and available apps with certificate options. It is a clean, minimal example of a remote-content pattern for an iOS app: a versioned or updateable config that decouples content changes from app releases. The structure is easily reusable as a lightweight CMS-like configuration schema for other sideloading or content-driven apps.