diff --git a/ios/scripts/publish.sh b/ios/scripts/publish.sh
index e2de035..0605e33 100755
--- a/ios/scripts/publish.sh
+++ b/ios/scripts/publish.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 # Publishes an IPA built by build-remote.sh. Run from DevOps with everything committed.
-#   publish.sh dev       on the dev branch: Gitea pre-release ios-v<v>-dev.<build> + Sideload Developer (WHITE-M1 :8097)
+#   publish.sh dev       on the dev branch: Gitea pre-release ios-v<v>-dev.<build> + Sideload Developer (WHITE-M1 :8093, ?source=developer)
 #   publish.sh release   on main, only when the owner says so: Gitea release ios-v<v> + Sideload (:8093), then source.json
 # Release notes come from $NOTES, else the last commit subject. prov builds are never published.
 set -euo pipefail
@@ -13,8 +13,8 @@ BUILD=$(sed -nE 's/^ *CURRENT_PROJECT_VERSION: "(.*)"/\1/p' project.yml)
 BRANCH=$(git rev-parse --abbrev-ref HEAD)
 die() { echo "$*" >&2; exit 1; }
 case $MODE in
-  dev)     WANT=dev;  IPA=build/dev/$NAME-$V-dev.ipa; TAG=$TAGP$V-dev.$BUILD; PRE=true;  UP=http://10.0.0.11:8097 ;;
-  release) WANT=main; IPA=build/release/$NAME-$V.ipa; TAG=$TAGP$V;            PRE=false; UP=http://10.0.0.11:8093 ;;
+  dev)     WANT=dev;  IPA=build/dev/$NAME-$V-dev.ipa; TAG=$TAGP$V-dev.$BUILD; PRE=true;  UP=http://10.0.0.11:8093; Q='?source=developer' ;;
+  release) WANT=main; IPA=build/release/$NAME-$V.ipa; TAG=$TAGP$V;            PRE=false; UP=http://10.0.0.11:8093; Q= ;;
   *) die "usage: $0 dev|release" ;;
 esac
 [ "$BRANCH" = "$WANT" ] || die "$MODE builds publish from $WANT (on $BRANCH)"
@@ -28,7 +28,7 @@ ID=$(jq -n --arg t "$TAG" --arg c "$(git rev-parse HEAD)" --arg b "$BODY" --argj
   '{tag_name:$t, target_commitish:$c, name:$t, body:$b, prerelease:$p}' |
   curl -fsS -H "Authorization: token $T" -H 'Content-Type: application/json' -d @- $API/releases | jq -r .id)
 curl -fsS -o /dev/null -H "Authorization: token $T" -F "attachment=@$IPA" "$API/releases/$ID/assets?name=$(basename $IPA)"
-curl -fsS -o /dev/null -X POST --data-binary @$IPA $UP/api/upload/ipa
+curl -fsS -o /dev/null -X POST --data-binary @$IPA "$UP/api/upload/ipa$Q"
 echo "published $TAG ($(basename $IPA)) to Gitea and $UP"
 if [ $MODE = release ]; then
   GITEA_TOKEN=$T python3 scripts/make-source.py