feat(ios): add --no-sign and --archive-only flags to ios build (#15061)

* feat(cli): add --no-sign and --archive-only to tauri ios build

* feat(cli): fix manual IPA packaging for --no-sign

* feat(cli): add explicit Payload/ directory to IPA zip

* separate fn

* fmt

---------

Co-authored-by: Lucas Nogueira <lucas@tauri.app>

Author: PixPMusic

.changes/ios-skip-codesign.md

@@ -0,0 +1,5 @@
+---
+'tauri-cli': 'minor:feat'
+---
+
+Add `--no-sign` and `--archive-only` flags to `tauri ios build`.

crates/tauri-cli/src/mobile/ios/build.rs

@@ -36,7 +36,7 @@ use rand::distr::{Alphanumeric, SampleString};
 use std::{
   env::{set_current_dir, var, var_os},
   fs,
-  path::PathBuf,
+  path::{Path, PathBuf},
 };
 
 #[derive(Debug, Clone, Parser)]
@@ -94,6 +94,12 @@ pub struct Options {
   /// Only use this when you are sure the mismatch is incorrectly detected as version mismatched Tauri packages can lead to unknown behavior.
   #[clap(long)]
   pub ignore_version_mismatches: bool,
+  /// Skip code signing when bundling the app
+  #[clap(long)]
+  pub no_sign: bool,
+  /// Only archive the app, skip generating the IPA.
+  #[clap(long)]
+  pub archive_only: bool,
   /// Target device of this build
   #[clap(skip)]
   pub target_device: Option<TargetDevice>,
@@ -154,7 +160,7 @@ impl From<Options> for BuildOptions {
       ci: options.ci,
       skip_stapling: false,
       ignore_version_mismatches: options.ignore_version_mismatches,
-      no_sign: false,
+      no_sign: options.no_sign,
     }
   }
 }
@@ -423,20 +429,26 @@ fn run_build(
       }
 
       let credentials = auth_credentials_from_env()?;
-      let skip_signing = credentials.is_some();
+      let skip_signing = options.no_sign || credentials.is_some();
 
-      let mut build_config = BuildConfig::new().allow_provisioning_updates();
-      if let Some(credentials) = &credentials {
-        build_config = build_config
-          .authentication_credentials(credentials.clone())
-          .skip_codesign();
-      }
+      if !(options.archive_only || options.no_sign) {
+        let mut build_config = BuildConfig::new().allow_provisioning_updates();
+        if let Some(credentials) = &credentials {
+          build_config = build_config.authentication_credentials(credentials.clone());
+        }
+        if skip_signing {
+          build_config = build_config.skip_codesign();
+        }
 
-      target
-        .build(None, config, env, noise_level, profile, build_config)
-        .context("failed to build iOS app")?;
+        target
+          .build(None, config, env, noise_level, profile, build_config)
+          .context("failed to build iOS app")?;
+      }
 
-      let mut archive_config = ArchiveConfig::new();
+      let mut archive_config = ArchiveConfig::new().allow_provisioning_updates();
+      if let Some(credentials) = &credentials {
+        archive_config = archive_config.authentication_credentials(credentials.clone());
+      }
       if skip_signing {
         archive_config = archive_config.skip_codesign();
       }
@@ -452,6 +464,15 @@ fn run_build(
         )
         .context("failed to archive iOS app")?;
 
+      if options.archive_only {
+        out_files.push(
+          config
+            .archive_dir()
+            .join(format!("{}.xcarchive", config.scheme())),
+        );
+        return Ok(());
+      }
+
       let out_dir = config.export_dir().join(target.arch);
 
       if target.sdk == "iphonesimulator" {
@@ -469,6 +490,23 @@ fn run_build(
         let path = out_dir.join(app_path.file_name().unwrap());
         fs::rename(&app_path, &path).fs_context("failed to rename app", app_path)?;
         out_files.push(path);
+      } else if options.no_sign {
+        fs::create_dir_all(&out_dir)
+          .fs_context("failed to create Xcode output directory", out_dir.clone())?;
+
+        let app_path = config
+          .archive_dir()
+          .join(format!("{}.xcarchive", config.scheme()))
+          .join("Products")
+          .join("Applications")
+          .join(config.app().stylized_name())
+          .with_extension("app");
+
+        let ipa_path = out_dir
+          .join(config.app().stylized_name())
+          .with_extension("ipa");
+        create_ipa(&app_path, &ipa_path)?;
+        out_files.push(ipa_path);
       } else {
         // if we skipped code signing, we do not have the entitlements applied to our exported IPA
         // we must force sign the app binary with a dummy certificate just to preserve the entitlements
@@ -545,6 +583,62 @@ fn run_build(
   Ok(handle)
 }
 
+fn create_ipa(app_path: &Path, ipa_path: &Path) -> Result<()> {
+  let ipa_file =
+    fs::File::create(ipa_path).fs_context("failed to create IPA file", ipa_path.to_path_buf())?;
+  let mut zip = zip::ZipWriter::new(ipa_file);
+  let options = zip::write::SimpleFileOptions::default()
+    .compression_method(zip::CompressionMethod::Deflated)
+    .unix_permissions(0o755);
+
+  zip
+    .add_directory("Payload/", options)
+    .context("failed to add Payload directory to zip")?;
+
+  let mut app_files = Vec::new();
+  let mut stack = vec![app_path.to_path_buf()];
+  while let Some(path) = stack.pop() {
+    if path.is_dir() {
+      app_files.push(path.clone());
+      for entry in fs::read_dir(&path).fs_context("failed to read directory", path.clone())? {
+        stack.push(
+          entry
+            .fs_context("failed to read directory entry", path.clone())?
+            .path(),
+        );
+      }
+    } else {
+      app_files.push(path);
+    }
+  }
+
+  for file_path in app_files {
+    let name = file_path.strip_prefix(app_path.parent().unwrap()).unwrap();
+    let mut name_str = name.to_string_lossy().to_string();
+    // zip expects forward slashes
+    if std::path::MAIN_SEPARATOR == '\\' {
+      name_str = name_str.replace('\\', "/");
+    }
+    let mut name_in_zip = format!("Payload/{name_str}");
+
+    if file_path.is_dir() {
+      name_in_zip.push('/');
+      zip
+        .add_directory(name_in_zip, options)
+        .context("failed to add directory to zip")?;
+    } else {
+      zip
+        .start_file(name_in_zip, options)
+        .context("failed to start file in zip")?;
+      let mut f = fs::File::open(&file_path).fs_context("failed to open file", file_path)?;
+      std::io::copy(&mut f, &mut zip).context("failed to copy file to zip")?;
+    }
+  }
+
+  zip.finish().context("failed to finish zip")?;
+  Ok(())
+}
+
 fn auth_credentials_from_env() -> Result<Option<cargo_mobile2::apple::AuthCredentials>> {
   match (
     var("APPLE_API_KEY"),

crates/tauri-cli/src/mobile/ios/run.rs

@@ -88,6 +88,8 @@ pub fn command(options: Options, noise_level: NoiseLevel) -> Result<()> {
       export_method: None,
       args: options.args,
       ignore_version_mismatches: options.ignore_version_mismatches,
+      no_sign: false,
+      archive_only: false,
       target_device: device.as_ref().map(|d| TargetDevice {
         id: d.id().to_string(),
         name: d.name().to_string(),