Upload folder using huggingface_hub

app.py

@@ -8,7 +8,7 @@ import re
 app = Flask(__name__)
 CORS(app) 
 
-# Your Hugging Face Space URL
+# Base URL for your Hugging Face Space
 BASE_URL = "https://gabefromsimplebit-simplebit-signer.hf.space"
 
 @app.route('/')
@@ -17,49 +17,54 @@ def home():
 
 @app.route('/sign', methods=['POST'])
 def sign():
+    # 1. Create a unique folder for this signing job
     job_id = str(uuid.uuid4())[:8]
     os.makedirs(job_id, exist_ok=True)
     
-    # Files from your GitHub Pages HTML form
+    # 2. Get files from the form
     ipa = request.files['ipa']
     p12 = request.files['p12']
     prov = request.files['provision']
     password = request.form.get('password', '1234')
 
-    # Define internal paths
+    # 3. Define paths
     ipa_path = os.path.join(job_id, "app.ipa")
     p12_path = os.path.join(job_id, "cert.p12")
     prov_path = os.path.join(job_id, "prov.mobileprovision")
     out_path = os.path.join(job_id, "signed.ipa")
 
-    # Save uploads to the MacBook-Air or Space environment
+    # 4. Save uploaded files
     ipa.save(ipa_path)
     p12.save(p12_path)
     prov.save(prov_path)
 
-    # Use -z 0 for "instant" repacking on the server
+    # 5. Run zsign command with optimizations
+    # -z 0: No compression (Fastest)
+    # -e: Inject entitlements (Fixes "Unable to Install")
     command = [
-        "zsign", 
-        "-k", p12_path, 
-        "-p", password, 
-        "-m", prov_path, 
-        "-o", out_path, 
-        "-z", "0", 
+        "zsign",
+        "-k", p12_path,
+        "-p", password,
+        "-m", prov_path,
+        "-o", out_path,
+        "-z", "0",
+        "-e",
         ipa_path
     ]
     
     try:
-        # Run zsign and capture output to find the real Bundle ID
+        # Run zsign and capture output to extract the real Bundle ID
         result = subprocess.run(command, capture_output=True, text=True, check=True)
         
-        # Regex to find "Bundle Id: com.example.app" in the logs
+        # Regex to find the real Bundle ID in zsign's logs
         match = re.search(r"Bundle Id:\s+([\w\.-]+)", result.stdout)
         bundle_id = match.group(1) if match else "com.simplebit.dynamic"
 
-        # Store the ID so the plist route can access it
+        # Save the Bundle ID to a file so the /plist route can find it
         with open(os.path.join(job_id, "bundle_id.txt"), "w") as f:
             f.write(bundle_id)
 
+        # 6. Redirect to the itms-services protocol
         plist_url = f"{BASE_URL}/plist/{job_id}"
         return redirect(f"itms-services://?action=download-manifest&url={plist_url}")
         
@@ -68,7 +73,7 @@ def sign():
 
 @app.route('/plist/<job_id>')
 def serve_plist(job_id):
-    # Retrieve the dynamic bundle ID
+    # Read the dynamic bundle ID we extracted during signing
     try:
         with open(os.path.join(job_id, "bundle_id.txt"), "r") as f:
             bundle_id = f.read().strip()
@@ -77,6 +82,7 @@ def serve_plist(job_id):
 
     ipa_direct_url = f"{BASE_URL}/download/{job_id}"
     
+    # Manifest required by iOS to install apps over-the-air
     plist_content = f"""<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
@@ -117,7 +123,7 @@ def serve_plist(job_id):
 
 @app.route('/download/<job_id>')
 def download_ipa(job_id):
-    # Set mimetype to octet-stream so iOS knows it is a binary file
+    # Direct link for iOS to grab the signed IPA
     return send_file(
         os.path.join(job_id, "signed.ipa"), 
         mimetype='application/octet-stream',
@@ -125,5 +131,5 @@ def download_ipa(job_id):
     )
 
 if __name__ == "__main__":
-    # Hugging Face standard port
+    # Standard port for Hugging Face Spaces
     app.run(host="0.0.0.0", port=7860)