App Store upload fails: SquareMobilePaymentsSDK.framework contains nested frameworks and invalid signature

[decode-kaku]

Summary

I’m unable to upload my iOS app to App Store Connect when using the Square Mobile Payments SDK for React Native.

The archive fails during validation with code signing and invalid bundle errors related to SquareMobilePaymentsSDK.framework.

---

Environment

• App type: React Native
• Library: mobile-payments-sdk-react-native v2025.11.1
• React Native: 0.79.1
• React: 19.0.0
• Build Configuration: Release
• Distribution: App Store (not Ad-Hoc or Development)

package.json (relevant parts)

{
  "dependencies": {
    "mobile-payments-sdk-react-native": "2025.11.1",
    "react": "19.0.0",
    "react-native": "0.79.1"
  }
}

---

Exact Error from Xcode Organizer

Upload failed
Validation failed

Invalid Signature. Code object is not signed at all.
The file at path:
SalesSync.app/Frameworks/SquareMobilePaymentsSDK.framework/setup
is not properly signed.

Make sure your app is signed with a Distribution certificate,
not a Development or Ad Hoc certificate.

Validation failed

Invalid Bundle. The bundle at:
SalesSync.app/Frameworks/SquareMobilePaymentsSDK.framework
contains disallowed nested bundles.

Validation failed

Invalid Bundle. The bundle at:
SalesSync.app/Frameworks/SquareMobilePaymentsSDK.framework
contains disallowed file 'Frameworks'.

---

Steps to Reproduce

1. Create a new React Native app.
2. Install SDK:

   yarn add mobile-payments-sdk-react-native@2025.11.1

3. Configure iOS according to documentation.
4. Build Archive in Xcode with:
   • Device: Any iOS Device (arm64)
   • Configuration: Release
5. Organizer → Distribute App → App Store Connect → Upload
6. Upload fails with errors above.

---

Expected Result

Archive uploads successfully to App Store Connect.

---

Actual Result

• SquareMobilePaymentsSDK.framework/setup is reported as not signed
• The framework contains a nested Frameworks directory, which is rejected by App Store validation

---

[decode-kaku]

@cesar-sosa-hol Can you help me with this, please?

[brandonjenniges]

@decode-kaku that appears like the setup script is not being invoked. Do you have this run during you release build?

SETUP_SCRIPT=${BUILT_PRODUCTS_DIR}/${FRAMEWORKS_FOLDER_PATH}"/SquareMobilePaymentsSDK.framework/setup"
if [ -f "$SETUP_SCRIPT" ]; then
  "$SETUP_SCRIPT"
fi

[decode-kaku]

Hi @brandonjenniges , I checked and it's already there.

SETUP_SCRIPT=${BUILT_PRODUCTS_DIR}/${FRAMEWORKS_FOLDER_PATH}"/SquareMobilePaymentsSDK.framework/setup" if [ -f "$SETUP_SCRIPT" ]; then "$SETUP_SCRIPT" fi

[decode-kaku]

@brandonjenniges

[brandonjenniges]

@decode-kaku Can you provide more info about where you have that script being run? The setup script deletes itself as well as un-nests those frameworks. So it seems for some reason it's that script isn't being invoked when you do an archive. If possible could you recreate this in a new test app and send that over via Discord? Also can you make sure this run script you added is the last Build Phase, it needs to be after any linking or embedding build phase.