A native iOS companion for Flipper Zero — BLE/USB SD file access, screen mirror, Sub-GHz/NFC, a Sber smart-relay failsafe, Marauder log analysis, ESP32 firmware flashing, and live Claude Code status on your Flipper.
- Install
- Screenshots
- Features
- App Bridge (FAB1 / FAB2)
- Firmware packages (atomic updater)
- How the relay state works
- Privacy
- Build from source
- Requirements
Add the source, then install — Feather signs it with your own certificate and auto-updates on each release:
https://raw.githubusercontent.com/squazaryu/TumoCompanion/main/apps.json
Unsigned IPA, sideloaded. Built for the tumoflip firmware (Unleashed-based — its App Bridge BLE service is what most of the integrations talk to). Works as a plain BLE file/screen client on stock firmware too.
Onboarding · Home dashboard · Relay control · Settings (themes + app-icon styles). Home/Relay are shown without a Flipper paired — the live-data screens (device info, files, screen mirror, WiFi/Marauder, AI Radar, Claude Buddy) look best on a connected device.
- Connect over Bluetooth LE for live control, App Bridge, screen mirror and RPC actions.
- Browse the SD card over BLE or USB SD Mode, create folders, upload files and whole folders, multi-select and move items in bulk; one-tap macOS-junk cleanup (
._*,.DS_Store). - USB SD Mode uses iOS file-provider access: select the Flipper SD card folder in Files once, then the app will try to restore that USB channel on later launches.
- Screen mirror with live remote control (D-pad / OK / Back).
- Full Device Info (hardware, firmware, radio stack, battery) at a glance.
- Transmit saved Sub-GHz signals and emulate NFC / RFID via the companion
.fap. - Remotes list for your everyday captures.
- Auto-aggregates every Marauder scan, sniff and Evil Portal log on the SD into one Overview — networks → clients → vendors (OUI-resolved), with channel-distribution and top-vendor charts.
- Opens tumoflip WiFi Mapper GeoJSON exports from
/ext/apps_data/wifi_mapper/exportson an interactive map, with clean/raw support, RSSI filtering, observed points, and estimated AP locations from repeated RSSI observations. - Surfaces Evil Portal captured credentials.
- Compact filter (Useful / Captures / Scans / Portal / All) with the statistics pinned at the top; the (often hundreds-strong) file list is collapsed below — tap any single capture to inspect it on its own.
- Parses classic
.pcap(802.11 / radiotap) and Marauder text logs; finds them in the realpcaps/·logs/·dumps/subfolders automatically.
- Checks ESP32Marauder releases, detects your board from the esp_flasher layout, downloads the matching image and stages a flash folder over BLE or USB SD — with size guard + MD5 verify.
- Archives outdated staged flash folders into
/ext/apps_data/esp_flasher/_archiveso old Marauder builds do not clutter the normal flashing list; archived folders can be restored or deleted from the ESP32 screen. - Shows a per-board-key firmware version manager, so C5/WROOM modules keep separate versioned folders and an older build can be restored before flashing from the Flipper.
- Toggle a Sber smart relay straight from the Flipper via App Bridge events.
- Auto route: local Home Assistant webhook first, automatic failover to the Sber cloud — so the Mac/HA isn't required.
- In-app Sber login (OAuth Authorization Code + PKCE) — tokens live in the iOS Keychain, never in the build.
- Siri App Intents: "toggle the relay."
- Live Claude Code status on the Flipper screen — thinking / running tool / turn complete — plus a session token counter, streamed over BLE serial through a small Mac relay daemon.
- Mic button toggles Claude Code's in-app dictation (⌘D), layout-independent.
- all-the-plugins auto-updater and ~daily background notifications for new plugin packs and ESP32 firmware (local only, no account).
- Live Activity for installs (plugin packs and firmware packages) — live per-file progress on the lock screen and Dynamic Island, with a screen-awake guard so a long BLE install isn't interrupted.
- Home-screen widgets — Quick Actions (deep-link to Files / Screen / Relay / WiFi) and Relay controls. (Live-data widgets — battery, AI Radar, relay state — need an App-Group-capable signer such as SideStore/AltStore; under Feather only the deep-link widgets are shown.)
- Card-based UI; 4 app-icon styles — Light, Dark, Liquid Glass, Liquid Glass · Dark — plus an Auto icon that follows the system appearance; light/dark themes.
Most integrations talk to a small BLE service in the tumoflip firmware. The app negotiates the wire version automatically and shows it in Settings (v2 (FAB2) / v1 (FAB1)):
- FAB2 — correlated request/response. Each request carries a monotonic, nonzero id; replies are matched back to it; ordered chunks are reassembled (≤ 512 B); frames are strictly validated (lengths, flags, reserved byte, UTF-8, exact size); firmware errors surface as typed errors; pending requests are cleaned up on timeout or disconnect. v2 is enabled only on a valid
runtime/capabilitiesresponse, and unknown capability keys are preserved. - FAB1 — legacy single-frame fallback used for unsolicited events (the Relay and AI Radar event path), so stock / older firmware keeps working.
Updates → Firmware packages installs the Base / ARF / Module One / Protocol Pack files from the latest tumoflip release onto the Flipper SD over BLE or USB SD Mode as one crash-consistent transaction:
- the release manifest (schema v2) is validated and every target path is sanitised;
- each file is staged, SHA-256-checked on download and MD5-verified on the device before any live path is touched;
- activation is write-ahead journalled into dual, checksummed state slots — the Flipper's
storage renameis copy + remove (not atomic), so an interrupted install is recovered or fully rolled back; - replaced files and legacy cleanup are reversible, and the connected firmware's target / API / version must match the manifest before any FAP/FAL is written.
Needs a firmware release that publishes
tumoflip-packages.zip; until then the screen shows “no install archive yet”. Firmware (DFU) flashing is a separate, explicit step and is not done here.
The Sber relay doesn't report a reliable steady state back to Home Assistant (the sberdevices entity reverts to off seconds after an on command; the template-switch mirror sticks). So the on/off pill follows your last command — from the app or the Flipper — and is persisted across launches. The optional "Test read state" in Relay Settings is a comparison-only diagnostic.
- No telemetry, no analytics, no account.
- Sber / Home Assistant tokens are stored in the iOS Keychain and entered by you — nothing personal is baked into the build.
- Update notifications are local (
BGAppRefreshTask+ local notifications); they only fetch public GitHub release tags. - Bundles the public Russian Trusted Root CA so Sber's TLS validates — no private keys involved.
The repository contains the complete SwiftUI application, widget extension,
tests, Feather source metadata and release scripts. The internal Xcode target
remains UnleashedCompanion to preserve the existing iOS update identity.
Prerequisites: Xcode 16+, XcodeGen and Swift Protobuf.
brew install xcodegen swift-protobuf protobuf
./scripts/build_ipa.shThe unsigned IPA is written to build/TumoCompanion-unsigned.ipa. Sign it with
your own certificate using Feather, SideStore, AltStore or Sideloadly.
- iPhone on iOS 17+, a Flipper Zero, and (for most integrations) the tumoflip firmware (Unleashed-based) with App Bridge.
- Optional: a Mac running the AI Radar / Claude Buddy relay daemon for the Claude Code features and the HA relay bridge.
See Releases for the changelog and IPAs. apps.json is the Feather source manifest.