Troubleshooting & Safety
Solutions for App Group signing failures, container token errors, SQLite WAL locking, and MobileGestalt plist recovery.
- WQFiles log: Log tab (health: …)
- KAMUI log: Documents/bqtool.log
- Latest fixes: v0.9.5 / v1.0.7

Known symptoms, log messages & verified fixes
Every diagnostic message and solution below is sourced directly from the READMEs, release notes, and issue trackers of kolbicz/WQFiles (v0.9.5), huamidev/GestaltX (v1.0.7), ichitaso/Regitela, murk-sus/kamui-escape, and adnan120hz/WorkTweaks:
| Symptom or Log Error | Root Cause & Verified Fix |
|---|---|
No App Group / no accessible app group / Couldn’t get access to the container (handle -1) | Your sideloader stripped the com.apple.security.application-groups entitlement (common with Sideloadly, KSign, or wildcard * certificates). Re-sign and install the IPA using SideStore, AltStore, Impactor, or iLoader. |
NO TOKEN in WQFiles or token=NO consume=-5 in KAMUI | The container path was found, but wq_grant / containermanagerd did not issue a sandbox extension token. Check Log for grant failed: either the App Group entitlement is missing, the temporary Library/Caches symlink swap failed, or you are querying a SystemGroup container on iOS 26.x (where SystemGroup is unsupported). |
(no label) on folders in WQFiles on iOS 27.2 or iOS 27.3 Beta | On iOS 27.2+, reading com.apple.containermanager.identifier xattr is blocked, and iOS 27.3 Beta changed how app extensions are stored in the LaunchServices database. Update to WQFiles {WQ_TAG} (#50) and pull down to rescan; system/daemon containers without a bundle ID remain browsable by folder name. |
| Apps list in WQFiles is empty or only shows a few apps (Issue #37, #42) | Update to WQFiles v0.8 – {WQ_TAG}, which reads app containers directly from the LaunchServices database in seconds instead of relying solely on a partial inode scan. Pull down on the Apps screen to trigger a fresh scan and inspect health: … and enumerate: … in Log. |
Downloaded .ipa is reported as damaged or cannot be extracted on iOS 27 | Safari on iOS 27 sometimes stops downloading GitHub Release assets early. Verify the file in our WebCrypto SHA-256 checker; if the byte size or hash mismatches, re-download or use another browser. |
| Abnormal display scaling, clipped status bar, or weird zoom after Dynamic Island / artwork tweak (GestaltX #125, WorkTweaks #5) | Applying a newer iPhone Pro Max display subtype or Dynamic Island artwork onto a smaller or notch screen alters SpringBoard’s screen scale. Open GestaltX, tap Revert on the Display / Dynamic Island preset (or restore your initial backup in Backups), and reboot. |
| SQLite database edits disappear or revert when opening the target app | If the target app is still running in the background, SQLite replays its -wal (Write-Ahead Log) over your edited file or overwrites it. Always force-quit the target app in the iOS app switcher before opening and saving its database in WQFiles v0.9.2+ (which then runs an integrity check and empties -wal/-shm automatically). |
| Apple Intelligence download stuck at 0% after enabling flags (GestaltX #113, WorkTweaks #3) | First, if you previously altered Sales Region, restore your original Sales Region (e.g., CH/A), apply, and reboot. Then set only Region Code to United States (LL) while keeping your sales suffix, connect to Wi-Fi and power, and ensure Siri language is set to US English on an A17 Pro / M1+ device. |
WQFiles built-in safety switches & recovery tools
Before overwriting or deleting any regular file, WQFiles copies the original file into Backups (accessible inside the app and in the iOS Files app):
- Recently Deleted (under Backups): Lists every backed-up file or folder whose original was deleted, newest first. Long-press any entry to restore it to its original container path (recreating missing parent folders automatically).
- Allow Deleting (start screen switch, on by default): Turn this switch Off when browsing sensitive system or app containers so nothing can be deleted, cleared, or cleaned while reading, saving, and restoring remain active.
- Keep Data Before Restore (start screen switch, on by default): Before restoring an App Backup or file backup, WQFiles backs up the target’s current state first so a failed or unwanted restore can be undone.
- Startup Health Check (added in v0.9.3): Runs in the background at launch to verify the App Group, container visibility, sandbox token issuance on a sample of folders, and LaunchServices database resolution. Any failure is logged in Log as
health: …with Try Again, Log, and Continue Anyway options.
How to avoid bootloops when editing MobileGestalt
- Keep an off-device copy of
com.apple.MobileGestalt.plist: Export your pristine initial backup from GestaltX or WQFiles to iCloud Drive or your computer before changing a single key. - Never add new
RegionInfokeys that don’t exist on your device: Modify only the existing key or use GestaltX’s Region Code preset so iOS 27 does not invalidate and rebuild the cache at boot. - Do not apply unknown raw keys or iPadOS mode on unsupported iPhones: Stick to verified presets in GestaltX (v1.0.7) and use per-preset Revert to undo individual changes cleanly.



Common questions
What happens if my sideloaded app expires after 7 days while I have backups inside it?
If you delete the expired app instead of refreshing/re-signing it in place with SideStore, AltStore, or Impactor, iOS deletes the app’s data container, including all local backups inside it. Always export your initial MobileGestalt plist backup to iCloud Drive or a computer.
Why does WQFiles refuse to save my SQLite edits if the app was open?
Before writing the edited database back to the target container, WQFiles v0.9.2+ checks whether the target app modified the live database since you opened it and runs SQLite’s PRAGMA integrity_check. If the live file changed, WQFiles refuses the overwrite to prevent database corruption.