PC-free SideStore refresh via official LocalDevVPN + CoreDevice - standalone v1.0.3, combined v2.1.0, upstream progress

[NRG-Wardog]

Update - September 2026

This project has progressed significantly since the original post.

Current standalone release

Standalone SideStore is now available as v1.0.3, based on SideStore 0.7.0 nightly.

It retains the same-device refresh path:

LocalDevVPN -> Lockdown -> CoreDeviceProxy/TLS -> CDTunnel -> RSD -> AFC / InstallationProxy -> SideStore refresh

The current standalone build also includes:

• manual refresh
• six-hour, daily, and weekly scheduled refresh
• preferred refresh time
• persistent refresh history
• retry and recovery logic
• run-correlated refresh verification
• updated SideStore 0.7 pairing handling
• the newer SideSign authentication path
• the upstream GSA 5XX authentication fix

Release:
https://github.com/NRG-Wardog/sidestore-auto-refresh/releases/tag/v1.0.3

LiveContainer + SideStore

The combined LiveContainer + embedded SideStore build is currently at v2.1.0.

It includes the same refresh infrastructure together with:

• host-level refresh coordination
• shared result verification
• embedded SideStore integration
• Guest Return controls
• Start Collapsed
• custom Return icon/background colors

Release:
https://github.com/NRG-Wardog/sidestore-auto-refresh/releases/tag/v2.1.0

The combined build is still waiting on the upstream LiveContainer/SideStore SideSign backport for the latest GSA 5XX authentication fix:

LiveContainer#11

Current status

Standalone SideStore:
✅ GSA 5XX fix included

LiveContainer + SideStore:
⏳ Waiting for upstream PR approval/merge

Stable refresh still requires Wi-Fi + the official App Store LocalDevVPN.

Cellular-only refresh remains experimental.

Repository:
https://github.com/NRG-Wardog/sidestore-auto-refresh

I’ve implemented and verified a SideStore refresh path that uses the official App Store LocalDevVPN together with Apple’s CoreDevice stack for same-device refresh.

Current transport path:

LocalDevVPN → Lockdown → CoreDeviceProxy/TLS → CDTunnel → RSD → AFC / InstallationProxy → SideStore refresh

The implementation also adds native BGProcessingTask scheduling, configurable refresh frequency, persistent refresh history, and manual/scheduled source tracking.

Verified on real hardware:

iPhone 12
iOS 26.6.1
Manual Refresh All
Native scheduled background refresh
Full scheduled refresh with PC/USB disconnected

The LocalDevVPN peer is discovered from the active route/interface rather than being hardcoded to a specific private IPv4 range.

Repository:
https://github.com/NRG-Wardog/sidestore-auto-refresh

Latest release:
https://github.com/NRG-Wardog/sidestore-auto-refresh/releases/latest

The repository includes the complete build pipeline, pinned upstream revisions, prebuilt IPA, SHA-256, build provenance, screenshots, verification notes, and a compatibility-reporting template.

I’m looking for additional device/iOS/network compatibility results and would also appreciate maintainer feedback on which parts, if any, would make sense to upstream separately.