From 2e3cc644c47044eb9fd0adaa3ac2109fd1b93879 Mon Sep 17 00:00:00 2001
From: pvg13 <pablo13vazquez@gmail.com>
Date: Mon, 13 Apr 2026 16:43:56 +0200
Subject: [PATCH 1/2] Signed framework and plugins in IOS

---
 packages/cli/src/build/request.rs | 68 +++++++++++++++++++++++++++++++
 1 file changed, 68 insertions(+)

diff --git a/packages/cli/src/build/request.rs b/packages/cli/src/build/request.rs
index b8214c99c8..949f875cd3 100644
--- a/packages/cli/src/build/request.rs
+++ b/packages/cli/src/build/request.rs
@@ -6605,6 +6605,74 @@ __wbg_init({{module_or_path: "/{}/{wasm_path}"}}).then((wasm) => {{
             }
         }
 
+        // Sign embedded frameworks and dylibs before signing the app bundle.
+        // iOS requires all embedded code to be individually signed.
+        let frameworks_dir = self.frameworks_folder();
+        if frameworks_dir.exists() {
+            for entry in std::fs::read_dir(&frameworks_dir)
+                .context("Failed to read Frameworks directory")?
+            {
+                let entry = entry?;
+                let path = entry.path();
+
+                tracing::debug!("Codesigning embedded framework: {}", path.display());
+
+                let mut cmd = Command::new("codesign");
+                cmd.args(["--force", "--sign", app_dev_name]);
+
+                if path
+                    .extension()
+                    .map(|e| e == "framework" || e == "appex")
+                    .unwrap_or(false)
+                {
+                    cmd.arg("--deep");
+                }
+
+                cmd.arg(&path);
+
+                let output = cmd
+                    .output()
+                    .await
+                    .context("Failed to codesign embedded framework")?;
+
+                if !output.status.success() {
+                    bail!(
+                        "Failed to codesign '{}': {}",
+                        path.display(),
+                        String::from_utf8(output.stderr).unwrap_or_default()
+                    );
+                }
+            }
+        }
+
+        // Sign embedded widget extensions (.appex bundles) in the PlugIns directory.
+        let plugins_dir = self.plugins_folder();
+        if plugins_dir.exists() {
+            for entry in std::fs::read_dir(&plugins_dir)
+                .context("Failed to read PlugIns directory")?
+            {
+                let entry = entry?;
+                let path = entry.path();
+
+                tracing::debug!("Codesigning embedded plugin: {}", path.display());
+
+                let output = Command::new("codesign")
+                    .args(["--force", "--deep", "--sign", app_dev_name])
+                    .arg(&path)
+                    .output()
+                    .await
+                    .context("Failed to codesign embedded plugin")?;
+
+                if !output.status.success() {
+                    bail!(
+                        "Failed to codesign '{}': {}",
+                        path.display(),
+                        String::from_utf8(output.stderr).unwrap_or_default()
+                    );
+                }
+            }
+        }
+
         // codesign the app
         let output = Command::new("codesign")
             .args([

From 83f52953c69838a7ee0abbc21e723847aceee1cc Mon Sep 17 00:00:00 2001
From: pvg13 <pablo13vazquez@gmail.com>
Date: Tue, 14 Apr 2026 09:14:01 +0200
Subject: [PATCH 2/2] Fix fmt

---
 packages/cli/src/build/request.rs | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/packages/cli/src/build/request.rs b/packages/cli/src/build/request.rs
index 949f875cd3..5cfa7f79e0 100644
--- a/packages/cli/src/build/request.rs
+++ b/packages/cli/src/build/request.rs
@@ -6609,8 +6609,8 @@ __wbg_init({{module_or_path: "/{}/{wasm_path}"}}).then((wasm) => {{
         // iOS requires all embedded code to be individually signed.
         let frameworks_dir = self.frameworks_folder();
         if frameworks_dir.exists() {
-            for entry in std::fs::read_dir(&frameworks_dir)
-                .context("Failed to read Frameworks directory")?
+            for entry in
+                std::fs::read_dir(&frameworks_dir).context("Failed to read Frameworks directory")?
             {
                 let entry = entry?;
                 let path = entry.path();
@@ -6648,8 +6648,8 @@ __wbg_init({{module_or_path: "/{}/{wasm_path}"}}).then((wasm) => {{
         // Sign embedded widget extensions (.appex bundles) in the PlugIns directory.
         let plugins_dir = self.plugins_folder();
         if plugins_dir.exists() {
-            for entry in std::fs::read_dir(&plugins_dir)
-                .context("Failed to read PlugIns directory")?
+            for entry in
+                std::fs::read_dir(&plugins_dir).context("Failed to read PlugIns directory")?
             {
                 let entry = entry?;
                 let path = entry.path();