Apple Vision Pro support: wireless pairing + install over an RP tunnel

package.json

@@ -1,7 +1,7 @@
 {
   "name": "iloader",
   "private": true,
-  "version": "2.2.6",
+  "version": "2.2.20",
   "type": "module",
   "scripts": {
     "dev": "vite",

src-tauri/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "iloader"
-version = "2.2.6"
+version = "2.2.20"
 description = "User-friendly sideloader"
 authors = ["nab138"]
 edition = "2024"
@@ -22,7 +22,7 @@ tauri = { version = "2", features = ["devtools"] }
 tauri-plugin-opener = "2"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
-idevice = { version = "0.1.57", features = ["usbmuxd", "house_arrest", "afc", "core_device_proxy", "remote_pairing", "tcp", "tunnel_tcp_stack", "xpc", "rsd", "pair"] }
+idevice = { version = "0.1.65", features = ["usbmuxd", "house_arrest", "afc", "installation_proxy", "core_device_proxy", "remote_pairing", "tcp", "tunnel_tcp_stack", "xpc", "rsd", "pair"] }
 isideload = { version = "0.2.22", features = ["fs-storage"] }
 keyring = { version = "3.6.3", features = ["apple-native", "windows-native", "linux-native-sync-persistent"] }
 tauri-plugin-store = "2"
@@ -44,5 +44,29 @@ rootcause = "0.12.1"
 thiserror = "2.0.18"
 strum = {version = "0.28.0", features = ["derive"] }
 
+# Vision Pro discovery. On macOS we go through the system Bonjour daemon
+# (dns_sd / mDNSResponder) — raw-multicast mDNS is silently dropped by macOS 15+
+# Local Network privacy when the OS fails to attribute it (no prompt, no Settings
+# entry). Elsewhere there is no such gatekeeper and mdns-sd works fine.
+[target.'cfg(target_os = "macos")'.dependencies]
+async-dnssd = "0.5.1"
+
+[target.'cfg(not(target_os = "macos"))'.dependencies]
+mdns-sd = "0.19"
+
 [target.'cfg(not(any(target_os = "android", target_os = "ios")))'.dependencies]
 tauri-plugin-updater = "2"
+
+# Tolerate Apple "device already registered" (developer error 35) during sideload,
+# which fires for a Vision Pro registered under visionOS while isideload queries the
+# iOS device list. Upstream isideload already carries this fix on git; the published
+# 0.2.22 does not, so we vendor a patched copy in-repo (vendor/isideload) with the
+# same one-function change. Replace with the upstream release once published.
+[patch.crates-io]
+isideload = { path = "vendor/isideload" }
+# Vision Pro first-time pairing: published idevice hardcodes PIN "000000" when the
+# device answers `awaitingUserConsent` (a Trust-dialog assumption). A Vision Pro
+# answers that whenever its code screen isn't up yet, so every first pairing attempt
+# failed with "missing server proof in SRP response". The vendored copy waits for the
+# pairing data and asks the callback for the real on-screen code instead.
+idevice = { path = "vendor/idevice" }

src-tauri/Info.plist

@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<!-- iloader browses mDNS for an Apple Vision Pro (which advertises these
+	     services) to reach it over Wi-Fi. macOS requires declaring local-network
+	     usage and the specific Bonjour service types, or it silently blocks the
+	     multicast discovery. -->
+	<key>NSLocalNetworkUsageDescription</key>
+	<string>iloader finds your Apple Vision Pro on your local network to pair with it and install apps over Wi-Fi.</string>
+	<key>NSBonjourServices</key>
+	<array>
+		<string>_remotepairing._tcp</string>
+		<string>_remotepairing-manual-pairing._tcp</string>
+	</array>
+</dict>
+</plist>