diff --git a/.github/workflows/ios.yml b/.github/workflows/ios.yml
index 734deb6..015cd13 100644
--- a/.github/workflows/ios.yml
+++ b/.github/workflows/ios.yml
@@ -22,17 +22,7 @@ jobs:
           extra_nix_config: experimental-features = nix-command flakes flake-self-attrs
 
       - name: Build app
-        run: |
-          nix develop --command bash -c '
-            set -e
-            flutter pub get
-            dart scripts/generate.dart
-            flutter pub run build_runner build
-            # Nix-provided Flutter'"'"'s bundled frameworks are read-only, which
-            # breaks lipo when Flutter thins them into build/ (NixOS/nixpkgs#405066).
-            find "$(dirname "$(dirname "$(readlink -f "$(command -v flutter)")")")" -type d -iname "*.framework" -exec chmod -R u+w {} + 2>/dev/null || true
-            flutter build ios --release --no-codesign
-          '
+        run: nix develop --command bash -c "flutter pub get && dart scripts/generate.dart && flutter pub run build_runner build && flutter build ios --release --no-codesign"
 
       # Unsigned IPA: SideStore/AltStore re-sign this on-device with the
       # user's own Apple ID at install time, so no certificate is needed here.
diff --git a/.github/workflows/macos.yml b/.github/workflows/macos.yml
index ccbd70e..e7040fa 100644
--- a/.github/workflows/macos.yml
+++ b/.github/workflows/macos.yml
@@ -21,17 +21,8 @@ jobs:
         with:
           extra_nix_config: experimental-features = nix-command flakes flake-self-attrs
 
-      - run: |
-          nix develop --command bash -c '
-            set -e
-            flutter pub get
-            dart scripts/generate.dart
-            flutter pub run build_runner build
-            # Nix-provided Flutter'"'"'s bundled frameworks are read-only, which
-            # breaks lipo when Flutter thins them into build/ (NixOS/nixpkgs#405066).
-            find "$(dirname "$(dirname "$(readlink -f "$(command -v flutter)")")")" -type d -iname "*.framework" -exec chmod -R u+w {} + 2>/dev/null || true
-            flutter build macos --release
-          '
+      - name: Build app
+        run: nix develop --command bash -c "flutter pub get && dart scripts/generate.dart && flutter pub run build_runner build && flutter build macos --release"
 
       - name: Upload installer artifact
         uses: actions/upload-artifact@v6
diff --git a/ios/Runner.xcodeproj/project.pbxproj b/ios/Runner.xcodeproj/project.pbxproj
index ddd29ee..57b889d 100644
--- a/ios/Runner.xcodeproj/project.pbxproj
+++ b/ios/Runner.xcodeproj/project.pbxproj
@@ -336,7 +336,7 @@
 			);
 			runOnlyForDeploymentPostprocessing = 0;
 			shellPath = /bin/sh;
-			shellScript = "ebin/sh \"$FLUTTER_ROOT/packages/flutter_tools/bin/xcode_backend.sh\" embed_and_thin;
+			shellScript = "export PATH=\"$PROJECT_DIR/scripts:$PATH\"\n/bin/sh \"$FLUTTER_ROOT/packages/flutter_tools/bin/xcode_backend.sh\" embed_and_thin";
 		};
 		9740EEB61CF901F6004384FC /* Run Script */ = {
 			isa = PBXShellScriptBuildPhase;
@@ -351,7 +351,7 @@
 			);
 			runOnlyForDeploymentPostprocessing = 0;
 			shellPath = /bin/sh;
-			shellScript = "/bin/sh \"$FLUTTER_ROOT/packages/flutter_tools/bin/xcode_backend.sh\" build";
+			shellScript = "export PATH=\"$PROJECT_DIR/scripts:$PATH\"\n/bin/sh \"$FLUTTER_ROOT/packages/flutter_tools/bin/xcode_backend.sh\" build";
 		};
 		EE82EC529EB6C0F1FA480659 /* [CP] Check Pods Manifest.lock */ = {
 			isa = PBXShellScriptBuildPhase;
diff --git a/macos/Runner.xcodeproj/project.pbxproj b/macos/Runner.xcodeproj/project.pbxproj
index 57f7241..3dbb24b 100644
--- a/macos/Runner.xcodeproj/project.pbxproj
+++ b/macos/Runner.xcodeproj/project.pbxproj
@@ -349,7 +349,7 @@
 			);
 			runOnlyForDeploymentPostprocessing = 0;
 			shellPath = /bin/sh;
-			shellScript = "echo \"$PRODUCT_NAME.app\" > \"$PROJECT_DIR\"/Flutter/ephemeral/.app_filename && \"$FLUTTER_ROOT\"/packages/flutter_tools/bin/macos_assemble.sh embed\n"; 
+			shellScript = "export PATH=\"$PROJECT_DIR/scripts:$PATH\"\necho \"$PRODUCT_NAME.app\" > \"$PROJECT_DIR\"/Flutter/ephemeral/.app_filename && \"$FLUTTER_ROOT\"/packages/flutter_tools/bin/macos_assemble.sh embed\n";
 		};
 		33CC111E2044C6BF0003C045 /* ShellScript */ = {
 			isa = PBXShellScriptBuildPhase;
diff --git a/scripts/lipo b/scripts/lipo
new file mode 100755
index 0000000..b27b8f2
--- /dev/null
+++ b/scripts/lipo
@@ -0,0 +1,15 @@
+#!/bin/sh
+
+for arg in "$@"; do
+  case "$arg" in
+    *.framework/*)
+      fw_dir="${arg%.framework/*}.framework"
+      chmod -R u+w "$fw_dir" 2>/dev/null
+      ;;
+    *.lipo)
+      chmod u+w "$(dirname "$arg")" 2>/dev/null
+      ;;
+  esac
+done
+
+exec /usr/bin/lipo "$@"
\ No newline at end of file