What changed

• make IPA capture validate archives before and after copying, ignore stale files, avoid overwrites, and handle multiple/incomplete candidates fairly
• harden install/uninstall behavior and add clear preflight/help output
• improve terminal states, cleanup, keyboard guidance, no-color behavior, and non-interactive errors
• rewrite the README around requirements and limitations
• add framework-free macOS shell tests, GitHub Actions CI, and reviewed launch/release copy

Why

The original watcher could report incomplete copies, reuse stale cache entries, overwrite collisions, block controls while files grew, and let invalid candidates starve valid downloads. Installation and first-run behavior also needed explicit safety checks and documentation.

Impact

Users get collision-safe validated IPA copies, clearer terminal guidance, safer install/uninstall behavior, and documented macOS/Configurator/USB/ownership/FairPlay limitations. No landing-page files are included.

Validation

• bash -n ipagrab install.sh tests/test.sh
• bash tests/test.sh
• NO_COLOR=1 ./ipagrab --help
• git diff --check
• workflow YAML parse check

Automated tests use temporary cache/destination fixtures. Real Apple Configurator and device testing was not performed.