





















@@ -56,17 +56,17 @@ Prereqs:
5656- `xcodegen`
5757- `fastlane`
5858- Apple account signed into Xcode for the canonical OpenClaw team (`FWJYW4S8P8`)
59-- `asc` CLI authenticated for the canonical OpenClaw team
60-- Release-owner access to the encrypted signing repo password (`ASC_MATCH_PASSWORD`)
59+- Fastlane Apple Developer Portal session for the canonical OpenClaw team when creating bundle IDs or enabling services
60+- Release-owner access to the encrypted signing repo password (`MATCH_PASSWORD`)
6161- App Store Connect app already created for `ai.openclawfoundation.app`
62-- App Store Connect API key set up in Keychain via `scripts/ios-asc-keychain-setup.sh` when auto-resolving a build number or uploading to App Store Connect
62+- App Store Connect API key set up in Keychain via `scripts/ios-app-store-connect-keychain-setup.sh` when auto-resolving a build number or uploading to App Store Connect
63636464Release behavior:
65656666- Local development uses the canonical `ai.openclawfoundation.app*` bundle IDs when the OpenClaw team is available, and unique `ai.openclawfoundation.app.test.*` bundle IDs only for non-canonical fallback teams.
6767- App Store release uses canonical `ai.openclawfoundation.app*` bundle IDs through a temporary generated xcconfig in `apps/ios/build/AppStoreRelease.xcconfig`.
6868- App Store release uses manual `Apple Distribution` signing with profile names pinned in `apps/ios/Config/AppStoreSigning.json`.
69-- `asc` owns one-time Developer Portal setup and encrypted signing sync. Fastlane owns release handling after those assets exist.
69+- Fastlane owns one-time Developer Portal setup, encrypted `match` signing sync to the repo/branch pinned in `apps/ios/Config/AppStoreSigning.json`, and release handling.
7070- App Store release also switches the app to `OpenClawPushTransport=relay`, `OpenClawPushDistribution=official`, `OpenClawPushAPNsEnvironment=production`, and a production `aps-environment` entitlement.
7171- `pnpm ios:release:upload` generates App Store screenshots and uploads release notes before archiving and uploading the IPA.
7272- `pnpm ios:release` remains a compatibility alias for `pnpm ios:release:upload`; prefer the explicit upload command in new release docs and automation.
@@ -93,16 +93,16 @@ Signing setup commands:
9393pnpm ios:release:signing:plan
9494pnpm ios:release:signing:check
9595pnpm ios:release:signing:setup
96-ASC_MATCH_PASSWORD=... pnpm ios:release:signing:sync:push
97-ASC_MATCH_PASSWORD=... pnpm ios:release:signing:sync:pull
96+MATCH_PASSWORD=... pnpm ios:release:signing:sync:push
97+MATCH_PASSWORD=... pnpm ios:release:signing:sync:pull
9898```
9999100100Release-owner secrets:
101101102102- App Store Connect API auth uses Keychain for private key material plus non-secret `apps/ios/fastlane/.env` variables.
103-- The encrypted signing repo password lives outside this repo in the release-owner vault and is exposed locally as `ASC_MATCH_PASSWORD`.
103+- The encrypted signing repo password lives outside this repo in the release-owner vault and is exposed locally as `MATCH_PASSWORD`.
104104- Apple Distribution private keys, certificates, provisioning profiles, and decrypted signing sync output stay under `apps/ios/build/` or Keychain and are gitignored.
105-- Rotating release signing means revoking/replacing the Developer Portal certificate or profile with `asc`, then pushing a fresh encrypted sync state.
105+- Rotating release signing means refreshing Fastlane `match` assets and pushing a fresh encrypted sync state.
106106107107Prepare the generated release xcconfig/project without archiving:
108108@@ -142,13 +142,13 @@ fastlane ios auth_check
1421422. If auth is missing, bootstrap it once on this Mac:
143143144144```bash
145-scripts/ios-asc-keychain-setup.sh \
145+scripts/ios-app-store-connect-keychain-setup.sh \
146146 --key-path /absolute/path/to/AuthKey_XXXXXXXXXX.p8 \
147147 --issuer-id YOUR_ISSUER_ID \
148148 --write-env
149149```
150150151-This should create `apps/ios/fastlane/.env` with the non-secret ASC variables while the private key stays in Keychain.
151+This should create `apps/ios/fastlane/.env` with non-secret App Store Connect variables while the private key stays in Keychain.
1521521531533. Confirm the App Store Connect app and Apple Developer identifiers/capabilities exist for:
154154- `ai.openclawfoundation.app`
@@ -157,7 +157,7 @@ This should create `apps/ios/fastlane/.env` with the non-secret ASC variables wh
157157- `ai.openclawfoundation.app.watchkitapp`
158158- `ai.openclawfoundation.app.watchkitapp.extension`
159159160- Use `pnpm ios:release:signing:setup` for the initial portal setup, then `ASC_MATCH_PASSWORD=... pnpm ios:release:signing:sync:push` to publish encrypted signing assets to the shared private repo.
160+ Use `pnpm ios:release:signing:setup` for the initial portal setup, then `MATCH_PASSWORD=... pnpm ios:release:signing:sync:push` to publish encrypted Fastlane match assets to the shared private repo.
1611611621624. Optional: set a custom official relay URL for the build. If unset, the release flow uses `https://ios-push-relay.openclaw.ai`.
163163此内容由惯性聚合(RSS阅读器)自动聚合整理,仅供阅读参考。 原文来自 — 版权归原作者所有。