apple signing ensure with automatic signing only adds capabilities (no profiles or certificates; the dry run says so) and lists unused storebound profiles with the exact delete command, never run; every capability write is read back (lag retries, timeout) and fails with the API answers when one did not stick; apple status, signing status and validate compare the App ID, apple.signing.capabilities and the iOS project's entitlements (CODE_SIGN_ENTITLEMENTS too) and name what is missing where; api writes outside a terminal say TTY by design and name the dedicated command; pitfalls 64-66; tests

cli/data/flags.json

@@ -188,6 +188,8 @@
   ],
   "apple status": [
    "cancel-submission",
+   "keychain",
+   "no-install",
    "timeout",
    "version",
    "wait-review"
@@ -817,8 +819,10 @@
    "include-drafts",
    "issue",
    "jobs",
+   "keychain",
    "lang",
    "no-health",
+   "no-install",
    "no-local",
    "no-scan",
    "out",