ios build items

codemagic.yaml

@@ -92,13 +92,19 @@ workflows:
     environment:
       flutter: 3.44.8
       java: 17
-      # NOTE: intentionally NO `ios_signing` block. That block triggers
-      # Codemagic's *automatic* signing during build initialization, which only
-      # FETCHES existing certs/profiles and fails the build up front ("No
-      # matching profiles found") on a fresh account that has none yet. Instead
-      # we sign fully manually in the scripts below, where we can create the
-      # cert + profile on first run. The `integrations.app_store_connect` above
-      # still injects the ASC API-key env vars the app-store-connect CLI uses.
+      # Reference the signing files you created in Codemagic (Teams → Code
+      # signing identities). Codemagic fetches them by reference name at build
+      # init and sets up the keychain automatically — no keychain/fetch scripts
+      # and no App-ID auto-fetch (which fails when nothing exists yet).
+      #   certificates:         the distribution cert you generated ("troglodyte-timbre")
+      #   provisioning_profiles: an App Store profile for com.troglodyte.timbre —
+      #     generate it in the same UI (Code signing identities → Profiles) and
+      #     put its reference name below.
+      ios_signing:
+        certificates:
+          - troglodyte-timbre
+        provisioning_profiles:
+          - troglodyte-profile
       vars:
         # The app's numeric Apple ID (App Store Connect → your app → App
         # Information → General → Apple ID). Used to auto-bump the build number
@@ -115,26 +121,11 @@ workflows:
       - *get_deps
       - *analyze
       - *unit_tests
-      - name: Initialize keychain
-        # Manual signing: create the build keychain ourselves (the removed
-        # ios_signing block used to do this automatically).
-        script: keychain initialize
-      - name: Fetch signing files
-        # fetch-signing-files --create mints the Apple Distribution cert + the
-        # App Store provisioning profile via the ASC API key and downloads them.
-        # --create also registers the Bundle ID if it isn't already. On the
-        # first build this creates everything; later builds reuse it.
-        script: |
-          app-store-connect fetch-signing-files "com.troglodyte.timbre" \
-            --type IOS_APP_STORE \
-            --create
-      - name: Add certificates to keychain
-        # Load the freshly fetched distribution cert into the build keychain.
-        script: keychain add-certificates
       - name: Set up code signing
-        # Applies the profile to the Xcode project and writes
-        # ~/export_options.plist (= /Users/builder/export_options.plist) that
-        # the build step reads.
+        # The cert + profile referenced in ios_signing above are already fetched
+        # and in the keychain by now. This just applies the profile to the Xcode
+        # project and writes ~/export_options.plist (= /Users/builder/
+        # export_options.plist) that the build step reads.
         script: xcode-project use-profiles
       - name: Build signed IPA
         script: |