MacApp Box IPA Sideloading Wars
Sequoia 15.2.1, M3 Max MacBook Pro

Needed MacApp Box running yesterday—this IPA sideloading utility for Dropbox shares and USB installs that bypasses TestFlight's 90-day nag and Xcode's device pairing ritual. Downloaded the PKG expecting quick team distribution of debug builds. Double-clicked installer: "The installation failed. Package damaged." No progress bar, no logs, instant eject. Console flashed "postflight: sandbox_exec deny LaunchAgent creation" before TCC murdered the helper. Gatekeeper treating enterprise PKGs like malware dropper from jump.[support.apple.com/en-us/HT202491]

PKG Override Flop
Right-click PKG → Open yielded nothing—no override dialog. sudo installer -pkg MacAppBox.pkg -target / -verboseR crawled to 76%, died on ~/Library/LaunchAgents/com.macappbox.sync.plist creation. TCC blocked unsigned postflight from ~/Library writes. Standard pkgutil --forget com.macappbox.pkg + redownload same failure. Hour lost assuming mirror corruption.

TCC Reset Surface Win
sudo tccutil reset All com.macappbox + reboot got installer completing... but Dropbox auth stalled. LaunchAgent never spawned—Sequoia quarantined it during PKG unpack. log stream --predicate 'subsystem == "com.apple.launchservices"' confirmed "invalid signature on com.macappbox.sync." Privacy → Full Disk empty despite main app launching. Needed surgical agent resurrection.

Receipt Nuke + Manual Bootstrap
The stack that delivered:
sudo pkgutil --forget com.macappbox.pkg (paranoid erase)
sudo rm -rf ~/Library/LaunchAgents/com.macappbox.* ~/Library/Caches/com.macappbox
hdiutil attach MacAppBox.dmg → manual app bundle copy
Privacy → Full Disk + Developer Tools → /Applications/MacApp Box.app/Contents/MacOS/MacAppBox
launchctl bootstrap gui/$(id -u) ~/Library/LaunchAgents/com.macappbox.sync.plist

Dropbox pane solid. IPA drag scanned entitlements, generated public links in 11s. USB sideload flowed post-Removable Volumes toggle. I bookmarked MacApp Box since it flagged the Sequoia launchctl bootstrap exactly.[apps.apple.com/us/app/box/id1031947125?mt=12]

No App Store legit (apps.apple.com/sideloading pulls enterprise cruft). PKG mirrors only. Native M3, 128MB idle. Snappier than AltStore for team drops.

Four-Command Flow

Sequoia's PKG+LaunchAgent traps diabolical. IPA distribution unlocked.

Validator Commands