@ahmedsamirelsaka/react-native-local-release 2.0.0-rc.1

package/template/android/proguard-rules.rn-local-release.pro

@@ -0,0 +1,28 @@
+# Base React Native R8 keep rules (conservative).
+# Do not replace project-specific SDK keeps; append project rules after this file.
+
+-keepattributes Signature
+-keepattributes *Annotation*
+-keepattributes InnerClasses
+-keepattributes EnclosingMethod
+-keepattributes SourceFile,LineNumberTable
+-keepattributes Exceptions
+
+-keep class com.facebook.react.** { *; }
+-keep class com.facebook.hermes.** { *; }
+-keep class com.facebook.jni.** { *; }
+-keep class com.facebook.soloader.** { *; }
+-keep class com.facebook.yoga.** { *; }
+-keep class * extends com.facebook.react.bridge.NativeModule { *; }
+-keep class * extends com.facebook.react.bridge.JavaScriptModule { *; }
+-keepclassmembers class * {
+    @com.facebook.react.uimanager.annotations.ReactProp <methods>;
+}
+-keepclassmembers class * {
+    @com.facebook.react.uimanager.annotations.ReactPropGroup <methods>;
+}
+
+-keep class com.facebook.react.turbomodule.** { *; }
+-keep class com.facebook.react.fabric.** { *; }
+
+-dontwarn com.facebook.**

package/template/docs/LOCAL_RELEASE.md

@@ -0,0 +1,85 @@
+# Local Fastlane release (laptop CI/CD)
+
+This project uses **[@ahmedsamirelsaka/react-native-local-release](https://www.npmjs.com/package/@ahmedsamirelsaka/react-native-local-release)** v2:
+a security-first local Fastlane kit for bare React Native iOS + Android.
+
+## Split of concerns
+
+| Kind | Where | Examples |
+|------|-------|----------|
+| Tracked metadata | `fastlane/release.config.json` | package name, team ID, scheme, tracks, version sources, logging, archives |
+| Managed install state | `.rn-local-release/manifest.json` | hashes of managed files (non-secret) |
+| Local credentials | Keychain/vault (default macOS) or `fastlane/.env` + `secrets/` | ASC `.p8`, Play JSON, keystore passwords |
+| Crash logs | `logs/` (gitignored, redacted) | installer / Fastlane failures |
+| Optional upload archive | `versions/` (gitignored, opt-in) | copies of uploaded IPA/AAB |
+
+Never paste private keys, passwords, or JSON credentials into Git, chat, docs, or screenshots.
+
+How to create credentials: see [RELEASE_CREDENTIALS.md](./RELEASE_CREDENTIALS.md).
+
+## Install / reinstall
+
+Prefer an **exact npm version** (do not run floating `github:` HEAD in daily workflows):
+
+```bash
+npx @ahmedsamirelsaka/react-native-local-release@2.0.0 install --project .
+```
+
+Useful flags:
+
+```bash
+--dry-run
+--team-id YOURTEAMID
+--package-name com.example.app
+--ios-scheme YourScheme
+--fixed-ios-build 1
+--store-uploaded-versions / --no-store-uploaded-versions
+--setup-credentials / --skip-credentials
+--credentials-only
+--non-interactive
+```
+
+Interactive install asks:
+
+1. Configure Apple / Play / keystore now?
+2. Store uploaded IPA/AAB copies under `versions/`?
+
+Reinstall merges existing `release.config.json` instead of wiping custom tracks/gates.
+
+## Prerequisites
+
+- macOS with Xcode (iOS)
+- Android SDK / JDK for Gradle
+- Node 18+, Yarn/npm/pnpm
+- Ruby compatible with Fastlane (`bundle install`)
+- ASC API key + Play service account + upload keystore
+
+## Daily commands
+
+```bash
+bundle install
+yarn release:doctor
+yarn release:credentials
+yarn release:compile     # typecheck + IPA + AAB (no bump, no upload)
+yarn release:upload      # upload last compile
+yarn release:beta        # bump + compile + upload
+```
+
+Promote to production requires confirmation:
+
+```bash
+RN_LOCAL_RELEASE_YES=1 yarn release:ios:promote version:x.y.z build:n
+RN_LOCAL_RELEASE_YES=1 yarn release:android:promote version_code:n
+```
+
+## Uninstall
+
+```bash
+npx @ahmedsamirelsaka/react-native-local-release@2.0.0 uninstall --project . --yes
+```
+
+## Troubleshooting
+
+- Check redacted files under `logs/`
+- Run `rn-local-release audit --project .` if credentials look tracked
+- Partial dual-upload failures leave `build/upload-journal.json` describing which store succeeded

package/template/fastlane/.env.example

@@ -0,0 +1,20 @@
+# Local Fastlane credentials — copy to fastlane/.env and fill in.
+# Never commit real values. Paths may be absolute or relative to the repo root.
+
+# --- Apple App Store Connect API key ---
+# Create at: App Store Connect → Users and Access → Integrations → App Store Connect API
+ASC_KEY_ID=
+ASC_ISSUER_ID=
+ASC_KEY_FILEPATH=secrets/AuthKey_XXXXXXXXXX.p8
+# Optional Apple ID email (only needed for interactive Apple ID auth fallback)
+# APPLE_ID=you@example.com
+
+# --- Google Play service account ---
+# JSON key downloaded after creating a Play Console service account
+PLAY_JSON_KEY_PATH=secrets/play-store-service-account.json
+
+# --- Android upload keystore ---
+MYAPP_UPLOAD_STORE_FILE=keystore.jks
+MYAPP_UPLOAD_KEY_ALIAS=key0
+MYAPP_UPLOAD_STORE_PASSWORD=
+MYAPP_UPLOAD_KEY_PASSWORD=

package/template/fastlane/Appfile

@@ -0,0 +1,10 @@
+# Generated by react-native-local-release. Non-secret identifiers only.
+# Credential paths come from environment / fastlane/.env — never hardcode secrets.
+
+app_identifier("{{bundleIdentifier}}")
+package_name("{{packageName}}")
+team_id("{{teamId}}")
+
+apple_id(ENV["APPLE_ID"]) if ENV["APPLE_ID"] && !ENV["APPLE_ID"].empty?
+
+json_key_file(ENV["PLAY_JSON_KEY_PATH"]) if ENV["PLAY_JSON_KEY_PATH"] && !ENV["PLAY_JSON_KEY_PATH"].empty?

package/template/fastlane/Fastfile

@@ -0,0 +1,203 @@
+# frozen_string_literal: true
+
+opt_out_usage
+default_platform(:ios)
+
+import("./lib/rn_local_release.rb")
+
+desc "Validate config paths and print current versions (no secrets required)"
+lane :doctor do
+  doctor!
+end
+
+desc "Validate Apple and Google upload credentials"
+lane :credentials do
+  load_asc_api_key
+  UI.success("App Store Connect API key loaded successfully.")
+  validate_play_store_json_key(json_key: play_json_key_path)
+  UI.success("Play Store JSON key validated successfully.")
+end
+
+desc "Run shared JS verification"
+lane :verify do
+  run_verify!
+end
+
+desc "Bump / set marketing version + Android versionCode (and iOS build per strategy)"
+lane :bump_version do |options|
+  bumped = bump_versions!(options)
+  UI.message(
+    "Next store upload will use #{bumped[:version]} " \
+    "(Android #{bumped[:android_build]}, iOS #{bumped[:ios_build]})"
+  )
+end
+
+desc "Alias of bump_version for prepare-before-build workflows"
+lane :prepare do |options|
+  bumped = bump_versions!(options)
+  UI.message(
+    "Prepared #{bumped[:version]} " \
+    "(Android #{bumped[:android_build]}, iOS #{bumped[:ios_build]})"
+  )
+end
+
+desc "Typecheck and compile iOS IPA + Android AAB without uploading"
+lane :compile do
+  compile_all!
+end
+
+desc "Build iOS IPA and Android AAB without uploading"
+lane :build_all do
+  compile_all!
+end
+
+desc "Upload previously compiled IPA + AAB using release-manifest.json"
+lane :upload_all do |options|
+  upload_all_resumable!(options)
+end
+
+desc "Bump (unless skipped), compile both platforms, then upload TestFlight + Play beta track"
+lane :beta_all do |options|
+  unless skip_flag?(options, :skip_bump)
+    bumped = bump_versions!(options)
+    UI.important(
+      "Version is now #{bumped[:version]} " \
+      "(Android #{bumped[:android_build]}, iOS #{bumped[:ios_build]}). Compiling, then uploading."
+    )
+  else
+    UI.important(
+      "Using current version #{current_marketing_version} " \
+      "(Android #{current_android_build}, iOS #{current_ios_build}). " \
+      "Compiling, then uploading."
+    )
+  end
+
+  compile_all!
+  upload_all_resumable!(options)
+end
+
+platform :ios do
+  desc "Validate App Store Connect API credentials"
+  lane :credentials do
+    load_asc_api_key
+    UI.success("App Store Connect API key loaded successfully.")
+  end
+
+  desc "Run lint, TypeScript, and tests"
+  lane :verify do
+    run_verify!
+  end
+
+  desc "Build a signed App Store IPA (no upload)"
+  lane :build do
+    compile_js!
+    build_ios_ipa!
+    write_platform_manifest!(:ios)
+  end
+
+  desc "Compile IPA then upload to TestFlight"
+  lane :beta do |options|
+    bump_versions!(options) unless skip_flag?(options, :skip_bump)
+    compile_js!
+    build_ios_ipa!
+    write_platform_manifest!(:ios)
+    assert_manifest_artifacts!(:ios)
+    upload_ios!(options)
+  end
+
+  desc "Upload an already-compiled IPA from the release manifest"
+  lane :upload do |options|
+    assert_manifest_artifacts!(:ios)
+    upload_ios!(options)
+  end
+
+  desc "Submit an already-uploaded build for App Store review"
+  lane :promote do |options|
+    ensure_clean_git!
+    load_asc_api_key
+    app_version = require_option!(options, :version)
+    build_number = require_option!(options, :build)
+    confirm_promote!(:ios, {
+      "app" => config.dig("app", "bundleIdentifier"),
+      "version" => app_version,
+      "build" => build_number,
+      "action" => "submit_for_review"
+    })
+    UI.user_error!("Set RN_LOCAL_RELEASE_YES=1 to confirm production promote") unless ENV["RN_LOCAL_RELEASE_YES"] == "1" || ENV["CI"] == "true"
+
+    upload_to_app_store(
+      app_version: app_version,
+      build_number: build_number.to_s,
+      submit_for_review: true,
+      automatic_release: false,
+      force: true,
+      skip_binary_upload: true,
+      skip_metadata: true,
+      skip_screenshots: true,
+      precheck_include_in_app_purchases: false
+    )
+  end
+end
+
+platform :android do
+  desc "Validate Google Play service-account credentials"
+  lane :credentials do
+    validate_play_store_json_key(json_key: play_json_key_path)
+    UI.success("Play Store JSON key validated successfully.")
+  end
+
+  desc "Run lint, TypeScript, and tests"
+  lane :verify do
+    run_verify!
+  end
+
+  desc "Build a signed Play App Bundle (no upload)"
+  lane :build do
+    compile_js!
+    build_android_aab!
+    write_platform_manifest!(:android)
+  end
+
+  desc "Compile AAB then upload to the configured Play beta track"
+  lane :beta do |options|
+    bump_versions!(options) unless skip_flag?(options, :skip_bump)
+    compile_js!
+    build_android_aab!
+    write_platform_manifest!(:android)
+    assert_manifest_artifacts!(:android)
+    upload_android!
+  end
+
+  desc "Upload an already-compiled AAB from the release manifest"
+  lane :upload do
+    assert_manifest_artifacts!(:android)
+    upload_android!
+  end
+
+  desc "Promote a specific versionCode from beta track to production"
+  lane :promote do |options|
+    ensure_clean_git!
+    version_code = require_option!(options, :version_code)
+    confirm_promote!(:android, {
+      "package" => config.dig("app", "packageName"),
+      "versionCode" => version_code,
+      "fromTrack" => config.dig("android", "playTrackBeta"),
+      "toTrack" => config.dig("android", "playTrackPromote")
+    })
+    UI.user_error!("Set RN_LOCAL_RELEASE_YES=1 to confirm production promote") unless ENV["RN_LOCAL_RELEASE_YES"] == "1" || ENV["CI"] == "true"
+
+    upload_to_play_store(
+      package_name: config.dig("app", "packageName"),
+      track: config.dig("android", "playTrackBeta"),
+      track_promote_to: config.dig("android", "playTrackPromote"),
+      version_code: version_code.to_i,
+      json_key: play_json_key_path,
+      skip_upload_apk: true,
+      skip_upload_aab: true,
+      skip_upload_metadata: true,
+      skip_upload_images: true,
+      skip_upload_screenshots: true,
+      skip_upload_changelogs: true
+    )
+  end
+end