fix(build): make ds_tunnel_fd.c compile on iPhoneOS SDK (beta.39)

Drop private Darwin headers unavailable in the iOS SDK so Shared/C
utun FD scan archives in CI.

Author: decoder-dev

CHANGELOG.md

@@ -4,6 +4,11 @@ All notable changes to **decoder sec.** are documented here.
 
 ## [Unreleased]
 
+## [0.1.0-beta.39] — 2026-08-12
+
+### Fixed
+- **iOS compile**: `ds_tunnel_fd.c` no longer includes `sys/sys_domain.h` / `net/if_utun.h` (not in iPhoneOS SDK). Uses Darwin constants only so IPA CI can archive.
+
 ## [0.1.0-beta.38] — 2026-08-12
 
 ### Added (Xray docs gaps — Claude audit)

DecoderSec.xcodeproj/project.pbxproj

@@ -443,7 +443,7 @@
 				ASSETCATALOG_COMPILER_GLOBAL_ACCENT_COLOR_NAME = AccentColor;
 				CODE_SIGN_ENTITLEMENTS = DecoderSec/DecoderSec.entitlements;
 				CODE_SIGN_STYLE = Automatic;
-				CURRENT_PROJECT_VERSION = 38;
+				CURRENT_PROJECT_VERSION = 39;
 				DEVELOPMENT_TEAM = C7AS5D38Q8;
 				ENABLE_PREVIEWS = YES;
 				GENERATE_INFOPLIST_FILE = YES;
@@ -486,7 +486,7 @@ PRODUCT_BUNDLE_IDENTIFIER = com.decodersec.app;
 				ASSETCATALOG_COMPILER_GLOBAL_ACCENT_COLOR_NAME = AccentColor;
 				CODE_SIGN_ENTITLEMENTS = DecoderSec/DecoderSec.entitlements;
 				CODE_SIGN_STYLE = Automatic;
-				CURRENT_PROJECT_VERSION = 38;
+				CURRENT_PROJECT_VERSION = 39;
 				DEVELOPMENT_TEAM = C7AS5D38Q8;
 				ENABLE_PREVIEWS = YES;
 				GENERATE_INFOPLIST_FILE = YES;
@@ -527,7 +527,7 @@ PRODUCT_BUNDLE_IDENTIFIER = com.decodersec.app;
 			buildSettings = {
 				CODE_SIGN_ENTITLEMENTS = DecoderSecTunnel/DecoderSecTunnel.entitlements;
 				CODE_SIGN_STYLE = Automatic;
-				CURRENT_PROJECT_VERSION = 38;
+				CURRENT_PROJECT_VERSION = 39;
 				DEVELOPMENT_TEAM = C7AS5D38Q8;
 				GENERATE_INFOPLIST_FILE = YES;
 				INFOPLIST_FILE = DecoderSecTunnel/Info.plist;
@@ -562,7 +562,7 @@ PRODUCT_BUNDLE_IDENTIFIER = com.decodersec.app.PacketTunnel;
 			buildSettings = {
 				CODE_SIGN_ENTITLEMENTS = DecoderSecTunnel/DecoderSecTunnel.entitlements;
 				CODE_SIGN_STYLE = Automatic;
-				CURRENT_PROJECT_VERSION = 38;
+				CURRENT_PROJECT_VERSION = 39;
 				DEVELOPMENT_TEAM = C7AS5D38Q8;
 				GENERATE_INFOPLIST_FILE = YES;
 				INFOPLIST_FILE = DecoderSecTunnel/Info.plist;

DecoderSec/Core/TunnelManager.swift

@@ -463,7 +463,7 @@ final class TunnelManager: ObservableObject {
             if attempt >= 4 {
                 let extensionSilent = !tunnelLogs.contains(where: { !$0.contains("[app]") })
                 if extensionSilent {
-                    lastError = String(localized: "Packet Tunnel did not start (no extension logs). Large config is now passed via VPN profile only — reinstall 0.1.0 (38), or check NE signing in ESign.")
+                    lastError = String(localized: "Packet Tunnel did not start (no extension logs). Large config is now passed via VPN profile only — reinstall 0.1.0 (39), or check NE signing in ESign.")
                     ClientLogBuffer.shared.append("FATAL: extension never logged — likely killed before startTunnel or wrong PacketTunnel bundle id")
                 } else {
                     lastError = String(localized: "Connection failed before the tunnel came up. Open Log console in Settings for details.")

Shared/C/ds_tunnel_fd.c

@@ -1,14 +1,14 @@
 #include "ds_tunnel_fd.h"
 
 #include <errno.h>
+#include <stdint.h>
 #include <string.h>
 #include <unistd.h>
 #include <sys/socket.h>
-#include <sys/sys_domain.h>
-#include <sys/kern_control.h>
-#include <net/if_utun.h>
+#include <sys/types.h>
 
-// AF_SYSTEM = 32 on Darwin; sockaddr_ctl layout uses ss_family at offset 1 for getpeername buffer.
+// iOS SDK does not ship sys/sys_domain.h, sys/kern_control.h, or net/if_utun.h.
+// Constants match Darwin (same values the old Swift TunnelFD used).
 #ifndef AF_SYSTEM
 #define AF_SYSTEM 32
 #endif