diff --git a/scripts/ci/compile-macos.sh b/scripts/ci/compile-macos.sh
index f46033d..551d3b5 100755
--- a/scripts/ci/compile-macos.sh
+++ b/scripts/ci/compile-macos.sh
@@ -223,8 +223,12 @@ PLIST
 
 echo "==> compile-macos: inside-out codesign (sysext -> frameworks -> app)"
 xattr -cr "$APP"
-cp "$SYSEXT_PROFILE" "${SE}/Contents/embedded.provisionprofile"
-cp "$APP_PROFILE" "${APP}/Contents/embedded.provisionprofile"
+# 从 WORK 临时目录复制(不是 PROF_DIR):flutter build macos 期间 xcodebuild 会
+# 修剪 ~/Library/Developer/Xcode/UserData/Provisioning Profiles,把[3/7]构建前
+# 装进去的 profile 清掉,构建后再从那目录 cp 会扑空(No such file → 本步失败)。
+# WORK 是 mktemp 目录、xcodebuild 不碰,里面的原始 .provisionprofile 全程留存。
+cp "${WORK}/sysext.provisionprofile" "${SE}/Contents/embedded.provisionprofile"
+cp "${WORK}/app.provisionprofile" "${APP}/Contents/embedded.provisionprofile"
 
 # sysext first — libbox is linked (not embedded) into the sysext binary
 # itself (see CLAUDE.md), so signing the sysext bundle re-covers its statically