The library already had multi-select for removing apps. The same selection
now also signs and installs, one app after another: every install ends at
the system's own sheet and only one of those can be up at a time, so the
queue is drained in order rather than in parallel, and each app is signed
only once the previous sheet has been dismissed. Signing a whole selection
up front would fill storage with builds nobody has agreed to install yet. A
failure moves the queue on instead of abandoning it, and the companion
updater is never swept into a bulk action.
Two signing options join it. Liquid Glass can now be turned off as well as
on, which is the more useful direction for an app that already looks right
and stops doing so; the two are mutually exclusive because they write one
key. And a bundled fix for the document picker, off by default, copies
whatever is picked into the app's own container first, so importing works
in an app whose resigned build lost the permission to read it. It is built
from source at build time, and a toolchain that cannot produce it leaves the
option unavailable rather than failing the build.
Saved signing options are now decoded field by field. Every one of them
falls back to its own default, so adding an option no longer resets all of
them for anyone who had changed one.
Felitendo
994f38353c