@livx.cc/appwrap 0.19.0

package/templates/ci/fastlane/Fastfile

@@ -0,0 +1,43 @@
+# appwrap fastlane — emitted by `appwrap init` into native/fastlane/.
+# Auth is App Store Connect API key only (headless-safe; no interactive Apple ID).
+
+default_platform(:ios)
+
+platform :ios do
+  desc 'Build the NativeScript wrapper and upload to TestFlight'
+  lane :beta do
+    api_key = app_store_connect_api_key(
+      key_id: ENV['ASC_KEY_ID'],
+      issuer_id: ENV['ASC_ISSUER_ID'],
+      key_content: ENV['ASC_KEY_P8'],
+      is_key_content_base64: true
+    )
+
+    match(type: 'appstore', readonly: true, git_url: ENV['MATCH_GIT_URL'], api_key: api_key)
+
+    sh('cd .. && ns prepare ios --release')
+
+    build_app(
+      workspace: 'platforms/ios/native.xcworkspace',
+      scheme: 'native',
+      export_method: 'app-store'
+    )
+
+    upload_to_testflight(api_key: api_key, skip_waiting_for_build_processing: true)
+  end
+end
+
+platform :android do
+  desc 'Upload the appwrap-built AAB to Play (internal track). Build it first with `appwrap build android --release --aab`.'
+  lane :beta do
+    upload_to_play_store(
+      track: 'internal',
+      aab: 'platforms/android/app/build/outputs/bundle/release/app-release.aab',
+      json_key_data: ENV['PLAY_SERVICE_ACCOUNT_JSON'],
+      # Binary-only upload: listing/screenshots are managed in the Play Console, not CI.
+      skip_upload_metadata: true,
+      skip_upload_images: true,
+      skip_upload_screenshots: true
+    )
+  end
+end

package/templates/ci/fastlane/Matchfile

@@ -0,0 +1,3 @@
+git_url(ENV['MATCH_GIT_URL'])
+storage_mode('git')
+type('appstore')

package/templates/ci/github/workflows/appwrap-pr.yml

@@ -0,0 +1,28 @@
+# appwrap PR checks — emitted by `appwrap init`. Adjust build commands to your project.
+name: PR
+on:
+  pull_request:
+
+jobs:
+  web:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: oven-sh/setup-bun@v2
+      - run: bun install
+      - run: bun test || echo "no tests"
+      - run: bun run build.ts # → dist/ (the PWA bundle the wrapper ships)
+
+  ios-build:
+    runs-on: macos-15
+    needs: web
+    steps:
+      - uses: actions/checkout@v4
+      - uses: oven-sh/setup-bun@v2
+      - uses: actions/setup-node@v4
+        with: { node-version: 22 }
+      - run: bun install && bun run build.ts
+      - run: npm i -g nativescript
+      - run: bunx appwrap init # native/ is generated (gitignored) — regenerate it fresh in CI
+      - working-directory: native
+        run: npm install && ns build ios --emulator

package/templates/ci/github/workflows/appwrap-release-android.yml

@@ -0,0 +1,51 @@
+# appwrap Android release — tag push (v*) → Play internal track.
+# Build is the appwrap CLI (`appwrap build android --release --aab` → signed AAB);
+# upload is fastlane supply. Secrets contract (repo settings → Actions secrets):
+#   ANDROID_KEYSTORE_BASE64        upload keystore, base64-encoded
+#   ANDROID_KEYSTORE_PASSWORD      keystore store password
+#   ANDROID_KEY_ALIAS              key alias
+#   ANDROID_KEY_ALIAS_PASSWORD     key (alias) password
+#   PLAY_SERVICE_ACCOUNT_JSON      Play Developer API service-account JSON (the app must already
+#                                  exist on Play with one prior manual upload before supply works)
+name: Release Android
+on:
+  push:
+    tags: ['v*']
+
+jobs:
+  play:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: oven-sh/setup-bun@v2
+      - uses: actions/setup-node@v4
+        with: { node-version: 22 }
+      - uses: actions/setup-java@v4
+        with: { distribution: temurin, java-version: 17 }
+      - uses: android-actions/setup-android@v3
+      - run: bun install && bun run build.ts        # → dist/ (the PWA bundle the wrapper ships)
+      - run: npm i -g nativescript
+      - run: bunx appwrap init                      # native/ is generated (gitignored) — regenerate fresh in CI
+      - working-directory: native
+        run: npm install
+      - name: Decode upload keystore
+        run: echo "${{ secrets.ANDROID_KEYSTORE_BASE64 }}" | base64 -d > "$RUNNER_TEMP/upload.keystore"
+      - name: Build signed AAB
+        env:
+          APPWRAP_ANDROID_KEYSTORE: ${{ runner.temp }}/upload.keystore
+          APPWRAP_ANDROID_KEYSTORE_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PASSWORD }}
+          APPWRAP_ANDROID_KEYSTORE_ALIAS: ${{ secrets.ANDROID_KEY_ALIAS }}
+          APPWRAP_ANDROID_KEYSTORE_ALIAS_PASSWORD: ${{ secrets.ANDROID_KEY_ALIAS_PASSWORD }}
+        run: bunx appwrap build android --release --aab
+      - uses: actions/upload-artifact@v4            # keep the AAB even if Play upload is skipped
+        with:
+          name: app-release-aab
+          path: native/platforms/android/app/build/outputs/bundle/release/app-release.aab
+      - uses: ruby/setup-ruby@v1
+        with: { ruby-version: '3.3', bundler-cache: false }
+      - run: gem install fastlane
+      - name: Upload to Play (internal)
+        working-directory: native
+        env:
+          PLAY_SERVICE_ACCOUNT_JSON: ${{ secrets.PLAY_SERVICE_ACCOUNT_JSON }}
+        run: fastlane android beta

package/templates/ci/github/workflows/appwrap-release-ios.yml

@@ -0,0 +1,41 @@
+# appwrap iOS release — tag push (v*) → TestFlight via fastlane.
+# Secrets contract (repo settings → Actions secrets):
+#   MATCH_GIT_URL        private repo holding signing certs (fastlane match)
+#   MATCH_PASSWORD       match encryption passphrase
+#   ASC_KEY_ID           App Store Connect API key id
+#   ASC_ISSUER_ID        App Store Connect issuer id
+#   ASC_KEY_P8           App Store Connect .p8 key contents (base64)
+# No interactive Apple ID — API-key auth only (headless-safe).
+name: Release iOS
+on:
+  push:
+    tags: ['v*']
+
+jobs:
+  testflight:
+    runs-on: macos-15
+    steps:
+      - uses: actions/checkout@v4
+      - uses: oven-sh/setup-bun@v2
+      - uses: actions/setup-node@v4
+        with: { node-version: 22 }
+      - run: bun install && bun run build.ts
+      - run: npm i -g nativescript
+      - run: bunx appwrap init # native/ is generated (gitignored) — regenerate it fresh in CI
+      - working-directory: native
+        run: npm install
+      - uses: ruby/setup-ruby@v1
+        with: { ruby-version: '3.3', bundler-cache: false }
+      - run: gem install fastlane
+      - name: Build & upload to TestFlight
+        working-directory: native
+        env:
+          MATCH_GIT_URL: ${{ secrets.MATCH_GIT_URL }}
+          MATCH_PASSWORD: ${{ secrets.MATCH_PASSWORD }}
+          ASC_KEY_ID: ${{ secrets.ASC_KEY_ID }}
+          ASC_ISSUER_ID: ${{ secrets.ASC_ISSUER_ID }}
+          ASC_KEY_P8: ${{ secrets.ASC_KEY_P8 }}
+        run: fastlane ios beta
+
+  # Production promotion is a manual gate: re-run with the `production`
+  # environment approved, or promote the TestFlight build in App Store Connect.