accountLogin returns empty webservices for account flagged hasUnreleasedOS (iOS 27 beta) — ZONE_NOT_FOUND on every operation

Overview

Every icloudpd operation (--list-libraries, plain sync, --recent N --dry-run) fails with:

ERROR Apple iCloud setup is not complete. Please log into https://icloud.com/ to manually finish setting up your iCloud service (ZONE_NOT_FOUND)

Authentication itself succeeds (SRP login, 2FA, device trust all complete normally).

Environment

• icloudpd 1.32.3 (commit 2035bb1) — reproduced identically on two environments: Alpine Linux container (boredazfcuk/docker-icloudpd) and native macOS (venv install)
• Account region: Germany, ADP disabled, "Access iCloud Data on the Web" enabled, no pending Terms & Conditions, icloud.com Photos works normally in a browser
• Account devices run iOS 27 / macOS 27 (beta)

Diagnostic detail

With debug output enabled, the POST https://setup.icloud.com/setup/ws/1/accountLogin response shows the session is fully provisioned — hsaTrustedBrowser: true, pcsServiceIdentitiesIncluded: true, PCS cookies granted for Photos/CloudKit/etc. — yet the service directory is completely empty:

"hasMinimumDeviceForPhotosWeb": true,
"webservices": {},
"configBag": { "urls": {}, "accountCreateEnabled": true },
"pcsEnabled": true,
"termsUpdateNeeded": false,
"isUnderMaintenance": false,
"isRepairNeeded": false

Notably, dsInfo includes "hasUnreleasedOS": true.

So this does not appear to be the usual ZONE_NOT_FOUND causes (incomplete account setup, ADP, terms). Apple returns an empty webservices/configBag.urls to a fully trusted session, which then surfaces as ZONE_NOT_FOUND when the photos service is initialised.

Hypothesis

Accounts flagged with pre-release OS (hasUnreleasedOS: true) may have been migrated to a backend where the legacy web-service directory is no longer served to this API flow. Reporting in case other beta-OS users hit the same wall — happy to run further diagnostics.

Steps to reproduce

1. Account with devices on iOS/macOS 27 beta, ADP off, web access on
2. icloudpd --username <id> --cookie-directory <dir> --directory <dir> --list-libraries
3. Auth + 2FA succeed, then ZONE_NOT_FOUND