diff --git a/.gitea/workflows/ios-release.yaml b/.gitea/workflows/ios-release.yaml
index beb272f..e33e130 100644
--- a/.gitea/workflows/ios-release.yaml
+++ b/.gitea/workflows/ios-release.yaml
@@ -83,7 +83,7 @@ jobs:
           APPLE_TEAM_ID: ${{ secrets.APPLE_TEAM_ID }}
         run: |
           PROFILE_UUID=$(security cms -D -i $RUNNER_TEMP/profile.mobileprovision | plutil -extract UUID raw -)
-          just ios-archive
+          just ios-archive "$PROFILE_UUID"
 
       - name: Export IPA
         run: just ios-export
diff --git a/justfile b/justfile
index 8161b53..16afbf0 100644
--- a/justfile
+++ b/justfile
@@ -130,7 +130,8 @@ ios-test: ios-gen ios-resolve
 # Archive a signed Release build (requires valid signing identity in keychain).
 # Output: {{runner_temp}}/LibNovel.xcarchive
 # Typically called from CI after importing certificate + provisioning profile.
-ios-archive: ios-gen ios-resolve
+# Usage: just ios-archive <profile-uuid>
+ios-archive profile_uuid: ios-gen ios-resolve
     cd {{ios_dir}} && xcodebuild archive \
         -project {{ios_scheme}}.xcodeproj \
         -scheme {{ios_scheme}} \
@@ -139,7 +140,7 @@ ios-archive: ios-gen ios-resolve
         -archivePath {{runner_temp}}/LibNovel.xcarchive \
         CODE_SIGN_STYLE=Manual \
         DEVELOPMENT_TEAM="$APPLE_TEAM_ID" \
-        PROVISIONING_PROFILE="$PROFILE_UUID"
+        PROVISIONING_PROFILE="{{profile_uuid}}"
 
 # Export an IPA from the archive produced by ios-archive.
 # Requires ios/LibNovel/ExportOptions.plist.