주소는 레지스트리에서, 빌드는 TestFlight로

struct MobileSettings: @unchecked Sendable {  // UserDefaults is thread-safe; Foundation just does not say so
    /// Spark's name in the port ledger.
    static let member = "cwkSpark"
    static var defaultEndpoint: EngineEndpoint { FamilyEndpoints.twin(member)! }
    static var defaultLocation: String { FamilyEndpoints.twinURL(member)!.absoluteString }
    private static let locationKey = "spark.engineLocation"
    private static let situationKey = "spark.situation"
    private static let sceneLanguageKey = "spark.sceneLanguage"

    let defaults: UserDefaults

    /// The saved location, with the service host named by an older spelling (its raw
    /// tailnet IP, plain http, the engine's own port) read as Spark's HTTPS
    /// twin and saved that way once (todo #442). Any other host stays.
    var engineLocation: String {
        get {
            guard let saved = defaults.string(forKey: Self.locationKey)?.nonEmpty else { return Self.defaultLocation }
            let canonical = Self.canonicalLocation(saved)
            if canonical != saved { defaults.set(canonical, forKey: Self.locationKey) }
            return canonical
        }
        nonmutating set { defaults.set(newValue, forKey: Self.locationKey) }
    }

    var endpoint: EngineEndpoint {
        EngineEndpoint(location: engineLocation) ?? Self.defaultEndpoint
    }

    /// Follow the Mac this phone is pointed at (cwkPippa todo #549): read the
    /// host profile cwkPippa serves on the engine's host, so a phone pointed at
    /// Pippa's Ark dials the whole family there, and one pointed back at the service host
    /// returns to the ledgers. Best effort. Returns whether the kept profile changed.
    func adoptHostProfile(fetch: @escaping FamilyEndpoints.HostProfileFetch = FamilyEndpoints.fetchHostProfile) async -> Bool {
        guard let base = try? endpoint.baseURL() else { return false }
        return await FamilyEndpoints.adoptHostProfile(near: base, fetch: fetch)
    }

    /// A recognized legacy host spelling becomes Spark's twin; anything else is returned as given.
    static func canonicalLocation(_ raw: String) -> String {
        let trimmed = raw.trimmingCharacters(in: .whitespacesAndNewlines)
        guard !trimmed.isEmpty, let twin = FamilyEndpoints.canonical(host: trimmed, for: member),
              let url = try? twin.baseURL() else { return raw }
        return url.absoluteString
    }

#   scripts/mobile-testflight.sh            # guards → tests → build number → archive → .ipa
#   scripts/mobile-testflight.sh --upload   # …and hand it to App Store Connect
#   scripts/mobile-testflight.sh --plan     # resolve and check every fact; build nothing
#
# Upload is not delivery. Four separate facts: uploaded, Apple processed it, the internal
# group has it, the build is INSTALLED on the device. Only the last one is delivery — say
# which one is true (cwkPippa docs/IOS-NATIVE-DELIVERY.md §1).

# project.yml is the source; the .xcodeproj is generated output. A test file
# added without regenerating is a file the suite silently does not run — so
# regenerate before trusting a green result, never after.
(cd "$mobile" && xcodegen >/dev/null)

# xcodebuild refuses to overwrite a result bundle.
results="$mobile/build/mobile-tests.xcresult"
/bin/mkdir -p "$mobile/build"
/bin/rm -rf "$results"

xcodebuild test \
  -project "$mobile/SparkMobile.xcodeproj" \
  -scheme SparkMobile \
  -destination "platform=iOS Simulator,id=$SPARK_MOBILE_SIMULATOR_ID" \
  -resultBundlePath "$results" \
  > "$mobile/build/mobile-tests.log" 2>&1 || true

# The log's verdict decides, not a filtered pipe (learning #370).
if ! /usr/bin/grep -q "\*\* TEST SUCCEEDED \*\*" "$mobile/build/mobile-tests.log"; then
  /usr/bin/grep -E "error:|failed" "$mobile/build/mobile-tests.log" | /usr/bin/head -30 >&2 || true
  print -u2 "HARD_FAIL the iOS suite did not pass — see $mobile/build/mobile-tests.log"
  exit 1
fi
/usr/bin/grep -E "Executed [0-9]+ tests" "$mobile/build/mobile-tests.log" | /usr/bin/tail -1