v1.0.2: fix strong integrity reverting on hourly refresh

Fold the strong-integrity fix into v1.0.2 (no separate v1.0.3). The hourly
fingerprint refresh regenerated custom.pif.prop via migrate.sh but never
re-applied the STRONG spoof settings (only boot and Action did), so ~1h
after boot the fingerprint reverted to spoofProvider=1 / spoofVendingFinger=0
and STRONG dropped while the WebUI still showed 3 green.

- pif_native_fetch.sh now enforces the STRONG settings itself, so the native
  path is correct no matter who calls it.
- service.sh hourly loop re-enforces the STRONG settings after each refresh
  (covers the autopif4 fallback too).

Author: evoker0

CHANGELOG.md

@@ -1,16 +1,16 @@
 # AlwaysStrong changelog
 
-## v1.0.3
+## v1.0.2
 
-Fixes strong integrity broken in v1.0.2, and hardens ROM-spoof handling.
+New keybox mirror, a far more reliable fetcher, a custom-keybox file picker in the WebUI, strong-integrity fixes, and a faster, steadier Action.
 
-- **Strong integrity fix.** The fingerprint now actually reaches PlayIntegrityFork. In v1.0.2 the native fetch wrote the wrong file (`pif.prop`) in the wrong place, so PIF kept spoofing a stale/default fingerprint and STRONG failed even with a valid keybox (3 green). Every fetch path — native, autopif4, and the shipped fallback — now runs `migrate.sh` to produce `custom.pif.prop` in the module dir (the file PIF reads) and enforces the STRONG spoof settings (`spoofProvider=0`, `spoofVendingFinger=1`).
+**Strong integrity**
+- **The fingerprint reaches PlayIntegrityFork.** PIF's zygisk reads `custom.pif.prop` from the module dir; every fetch path — native, autopif4, and the shipped fallback — now runs `migrate.sh` to produce that file and enforces the STRONG spoof settings (`spoofProvider=0`, `spoofVendingFinger=1`), so STRONG holds with a valid keybox (3 green).
+- **Strong survives the hourly refresh.** The hourly fingerprint refresh regenerated `custom.pif.prop` but skipped re-applying the STRONG spoof settings, so ~1 h after boot the fingerprint silently reverted to a weak config (`spoofProvider=1`, `spoofVendingFinger=0`) and STRONG dropped even though the WebUI still showed 3 green. The native fetch now enforces the STRONG settings itself, and the hourly loop re-enforces them, so every refresh stays strong.
 - **Faster fingerprint.** The fast native crawl (~10s) is primary; autopif4 — whose crawl stalls up to ~1 min on some devices — is the fallback.
-- **ROM spoof handling.** The disable list now matches PlayIntegrityFork's current engines (adds `persist.sys.pp.*`, plus AOSPA / PixelOS / Afterlife detection). Uninstalling AlwaysStrong now restores the ROM's own spoof engines — the persist props it set are cleared on uninstall (only if still unchanged), so removing the module frees PixelProps / pihooks / entryhooks again.
-
-## v1.0.2
 
-New keybox mirror, a far more reliable fetcher, a custom-keybox file picker in the WebUI, and a faster, steadier Action.
+**ROM spoof**
+- The disable list now matches PlayIntegrityFork's current engines (adds `persist.sys.pp.*`, plus AOSPA / PixelOS / Afterlife detection). Uninstalling AlwaysStrong now restores the ROM's own spoof engines — the persist props it set are cleared on uninstall (only if still unchanged), so removing the module frees PixelProps / pihooks / entryhooks again.
 
 **Keybox & status**
 - Moved to the new mirror: keybox from `http://evoker.qzz.io/key`, status from `/status`.

module/module.prop

@@ -1,7 +1,7 @@
 id=tricky_store
 name=AlwaysStrong
-version=v1.0.3
-versionCode=103
+version=v1.0.2
+versionCode=102
 author=Evokerr, JingMatrix, Enginex0, osm0sis
 description=Strong Play Integrity in one drop-in module. TEE-Simulator-RS + PlayIntegrityFork, auto-refreshed. Tap Action.
 updateJson=https://raw.githubusercontent.com/evoker0/AlwaysStrong/main/update.json

module/pif_native_fetch.sh

@@ -199,5 +199,20 @@ sh "$SELF_DIR/migrate.sh" -i -a "$SELF_DIR/pif.prop" >/dev/null 2>&1
 if [ ! -s "$SELF_DIR/custom.pif.prop" ]; then
     log "migrate.sh did not produce custom.pif.prop."; exit 1
 fi
+
+# migrate.sh defaults to spoofProvider=1 / spoofVendingFinger=0, which asks for
+# a WEAK attestation and breaks STRONG. Enforce the STRONG settings here so the
+# native path is correct no matter who calls it (boot, hourly, Action) — the
+# hourly loop has no separate enforce step, so self-enforcing is essential.
+for kv in spoofProvider=0 spoofVendingFinger=1 spoofBuild=1 \
+          spoofProps=1 spoofSignature=0 spoofVendingSdk=0; do
+    k="${kv%=*}"; v="${kv#*=}"
+    if grep -qE "^${k}=" "$SELF_DIR/custom.pif.prop"; then
+        sed -i "s|^${k}=.*|${k}=${v}|" "$SELF_DIR/custom.pif.prop"
+    else
+        echo "${k}=${v}" >> "$SELF_DIR/custom.pif.prop"
+    fi
+done
+
 log "installed custom.pif.prop ($FP)"
 exit 0

module/service.sh

@@ -259,6 +259,23 @@ fi
                 sh "$MODDIR/autopif4.sh" -s -m 2>&1 | log -t "AlwaysStrong-hourly"
             fi
             [ -f "$MODDIR/sync_patch.sh" ] && sh "$MODDIR/sync_patch.sh" 2>&1 | log -t "AlwaysStrong-hourly"
+            # enforce STRONG spoof settings — migrate.sh (run by native fetch /
+            # autopif4) resets them to spoofProvider=1 / spoofVendingFinger=0,
+            # which breaks STRONG. Without this the hourly refresh silently
+            # reverts the fingerprint to a WEAK config an hour after boot.
+            for CPIF in "$MODDIR/custom.pif.prop" "$MODDIR/pif.prop" \
+                        /data/adb/tricky_store/custom.pif.prop /data/adb/tricky_store/pif.prop; do
+                [ -f "$CPIF" ] || continue
+                for kv in "spoofProvider=0" "spoofVendingFinger=1" "spoofBuild=1" \
+                          "spoofProps=1" "spoofSignature=0" "spoofVendingSdk=0"; do
+                    k="${kv%=*}"; v="${kv#*=}"
+                    if grep -qE "^${k}=" "$CPIF"; then
+                        sed -i "s|^${k}=.*|${k}=${v}|" "$CPIF"
+                    else
+                        echo "${k}=${v}" >> "$CPIF"
+                    fi
+                done
+            done
         fi
         if [ ! -f "$CFG/custom_keybox" ] && [ ! -f "$CFG/no_auto_keybox" ] && [ -x "$MODDIR/keybox_fetch.sh" ]; then
             kbout=$(sh "$MODDIR/keybox_fetch.sh" 2>&1)

update.json

@@ -1,6 +1,6 @@
 {
-  "version": "v1.0.3",
-  "versionCode": 103,
-  "zipUrl": "https://github.com/evoker0/AlwaysStrong/releases/latest/download/AlwaysStrong-v1.0.3.zip",
+  "version": "v1.0.2",
+  "versionCode": 102,
+  "zipUrl": "https://github.com/evoker0/AlwaysStrong/releases/latest/download/AlwaysStrong-v1.0.2.zip",
   "changelog": "https://raw.githubusercontent.com/evoker0/AlwaysStrong/main/CHANGELOG.md"
 }