From 60c702d851e28be42e81c687d8bdee8098378aba Mon Sep 17 00:00:00 2001
From: Ashlee Radka <ashlee@vellum.ai>
Date: Fri, 20 Feb 2026 16:56:46 -0500
Subject: [PATCH] fix: use manual code signing for iOS release archives

Automatic signing tries to generate a development provisioning profile
which fails without a registered device. Switch release/archive builds
to manual signing with an explicit distribution profile.

Debug/simulator builds remain unsigned (CODE_SIGNING_ALLOWED=NO).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 clients/ios/build.sh | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/clients/ios/build.sh b/clients/ios/build.sh
index a8efcfab728..175843d45bb 100755
--- a/clients/ios/build.sh
+++ b/clients/ios/build.sh
@@ -128,9 +128,10 @@ xcodebuild archive \
     -destination 'generic/platform=iOS' \
     -archivePath "$ARCHIVE_PATH" \
     -configuration Release \
-    -allowProvisioningUpdates \
     DEVELOPMENT_TEAM="$DEVELOPMENT_TEAM" \
-    CODE_SIGN_STYLE=Automatic \
+    CODE_SIGN_STYLE=Manual \
+    CODE_SIGN_IDENTITY="Apple Distribution" \
+    PROVISIONING_PROFILE_SPECIFIER="Vellum Assistant iOS Distribution" \
     MARKETING_VERSION="$DISPLAY_VERSION" \
     CURRENT_PROJECT_VERSION="$BUILD_VERSION"