From bec45c282f8ae7abe6d9c6c1e6780a41a2e7c1a3 Mon Sep 17 00:00:00 2001
From: wangjia <809946525@qq.com>
Date: Mon, 20 Jul 2026 10:25:49 +0800
Subject: [PATCH] =?UTF-8?q?fix(ios):=20=E6=94=B9=E7=94=A8=E8=87=AA?=
 =?UTF-8?q?=E5=8A=A8=E7=AD=BE=E5=90=8D,=E4=BF=AE=E5=A4=8D=20archive/export?=
 =?UTF-8?q?=20=E8=AF=81=E4=B9=A6-profile=20=E4=B8=8D=E9=85=8D=E5=AF=B9?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

本机 login keychain 的 Apple Distribution 证书(2027 有效)与项目里写死的
手动 profile "Jiu App Store"(用另一张/旧证书签发)不配对,archive/export 报
"Provisioning profile doesn't include signing certificate"。

- project.pbxproj:Runner Release 配置 Manual → Automatic(删写死的
  PROVISIONING_PROFILE_SPECIFIER + Apple Distribution identity),与项目其它
  配置、local_test.sh --ios 一致,由 Xcode 现场配对当前证书。
- compile-ios.sh:ExportOptions signingStyle manual → automatic,去掉手动
  profile 发现逻辑(不再依赖会漂移的手动材料)。

验证:本机 sh scripts/ci/compile-ios.sh client-v1.1.9 → 构建 岩美酒库.ipa →
altool 上传成功(build 10109 已上 TestFlight,Delivery UUID 4bda0191)。

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 client/ios/Runner.xcodeproj/project.pbxproj |  4 +--
 scripts/ci/compile-ios.sh                   | 37 ++++++---------------
 2 files changed, 12 insertions(+), 29 deletions(-)

diff --git a/client/ios/Runner.xcodeproj/project.pbxproj b/client/ios/Runner.xcodeproj/project.pbxproj
index 901c5fc..3a6b88b 100644
--- a/client/ios/Runner.xcodeproj/project.pbxproj
+++ b/client/ios/Runner.xcodeproj/project.pbxproj
@@ -697,10 +697,8 @@
 				);
 				PRODUCT_BUNDLE_IDENTIFIER = com.yanmei.jiu;
 				PRODUCT_NAME = "$(TARGET_NAME)";
-				CODE_SIGN_STYLE = Manual;
+				CODE_SIGN_STYLE = Automatic;
 				DEVELOPMENT_TEAM = BYL4KQHMTN;
-				PROVISIONING_PROFILE_SPECIFIER = "Jiu App Store";
-				"CODE_SIGN_IDENTITY[sdk=iphoneos*]" = "Apple Distribution";
 				SWIFT_OBJC_BRIDGING_HEADER = "Runner/Runner-Bridging-Header.h";
 				SWIFT_VERSION = 5.0;
 				VERSIONING_SYSTEM = "apple-generic";
diff --git a/scripts/ci/compile-ios.sh b/scripts/ci/compile-ios.sh
index fe7ad94..bf71236 100755
--- a/scripts/ci/compile-ios.sh
+++ b/scripts/ci/compile-ios.sh
@@ -54,29 +54,16 @@ WORK="$(mktemp -d)"
 # shellcheck disable=SC2064
 trap "rm -rf '$WORK'" EXIT
 
-# --- 自动发现已装的 App Store 分发 profile(AppID=TEAM.BUNDLE、无 ProvisionedDevices)---
-PROFILE_NAME=""
-PDIR="$HOME/Library/MobileDevice/Provisioning Profiles"
-if [ -d "$PDIR" ]; then
-  for p in "$PDIR"/*.mobileprovision; do
-    [ -e "$p" ] || continue
-    plist="$(security cms -D -i "$p" 2>/dev/null)" || continue
-    appid="$(printf '%s' "$plist" | /usr/libexec/PlistBuddy -c 'Print :Entitlements:application-identifier' /dev/stdin 2>/dev/null || true)"
-    # App Store profile:AppID 匹配且无 ProvisionedDevices(区别于开发/AdHoc profile)
-    if [ "$appid" = "${TEAM_ID}.${BUNDLE_ID}" ] \
-       && ! printf '%s' "$plist" | /usr/libexec/PlistBuddy -c 'Print :ProvisionedDevices' /dev/stdin >/dev/null 2>&1; then
-      PROFILE_NAME="$(printf '%s' "$plist" | /usr/libexec/PlistBuddy -c 'Print :Name' /dev/stdin 2>/dev/null || true)"
-      [ -n "$PROFILE_NAME" ] && break
-    fi
-  done
-fi
-[ -n "$PROFILE_NAME" ] || PROFILE_NAME="Jiu App Store"   # 已知已装 profile 名兜底
-echo "==> compile-ios: 使用 provisioning profile '${PROFILE_NAME}'"
-
 # --- 同步版本号 ---
 sed -i '' "s/^version:.*/version: ${VER}+${BUILD}/" client/pubspec.yaml
 
-# --- ExportOptions.plist(manual 签名,app-store 分发)---
+# --- ExportOptions.plist(automatic 签名,app-store 分发)---
+# 本机 login 里的 Apple Distribution 证书与旧的手动 profile 不配对
+# (profile 是用另一张/旧证书签发的 → archive 报 "profile doesn't include
+#  signing certificate")。改用**自动签名**:Xcode 用登录的 Apple ID +
+# App Store Connect API key(见下 xcodebuild -authenticationKeyPath) 现场
+# 生成/更新与当前证书匹配的 App Store profile(-allowProvisioningUpdates),
+# 与 local_test.sh --ios 一致,避免手动材料漂移。
 cat > "$WORK/ExportOptions.plist" <<EOF
 <?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
@@ -84,18 +71,16 @@ cat > "$WORK/ExportOptions.plist" <<EOF
 <dict>
   <key>method</key><string>app-store</string>
   <key>teamID</key><string>${TEAM_ID}</string>
-  <key>signingStyle</key><string>manual</string>
+  <key>signingStyle</key><string>automatic</string>
   <key>uploadBitcode</key><false/>
   <key>uploadSymbols</key><true/>
-  <key>provisioningProfiles</key>
-  <dict>
-    <key>${BUNDLE_ID}</key><string>${PROFILE_NAME}</string>
-  </dict>
 </dict>
 </plist>
 EOF
 
-# --- 构建签名 IPA(用 login keychain 的分发证书 + 上面的 profile)---
+# --- 构建签名 IPA(自动签名;Xcode 现场配对证书+profile)---
+# flutter build ipa 的 archive/export 都会带 -allowProvisioningUpdates(自动签名时),
+# 但云端/无交互登录需用 API key 授权 provisioning 更新 → 传 -authenticationKeyPath 等。
 cd client
 flutter build ipa --release \
   --build-name="${VER}" \