@livx.cc/appwrap 0.20.3 → 0.20.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@livx.cc/appwrap",
-  "version": "0.20.3",
+  "version": "0.20.4",
   "description": "Wrap any PWA into a native app with native capabilities (appwrap runtime + @livx.cc/native-kit).",
   "license": "MIT",
   "author": "Elya Livshitz",

package/runtime/app/shell/capabilities.manifest.ts

@@ -156,7 +156,14 @@ export const MODULES: ModuleManifest[] = [
     // string + the healthkit entitlement, both module-owned. No background execution — HealthKit
     // already has the steps the OS recorded while the app was killed.
     ios: {
-      permissions: [{ key: 'NSHealthShareUsageDescription', domain: 'health', defaultUsage: 'Read your step count from the Health app.' }],
+      // App Store validation REQUIRES both Share AND Update purpose strings whenever the HealthKit
+      // entitlement is present — even for a read-only app (else upload fails 409 "Missing purpose
+      // string … NSHealthUpdateUsageDescription"). Device debug builds don't validate this; only the
+      // App Store upload does.
+      permissions: [
+        { key: 'NSHealthShareUsageDescription', domain: 'health', defaultUsage: 'Read your step count from the Health app.' },
+        { key: 'NSHealthUpdateUsageDescription', domain: 'health', defaultUsage: 'Read your step count from the Health app.' },
+      ],
       entitlements: { 'com.apple.developer.healthkit': true },
     },
     // Android primary = Health Connect (system store, Wear-inclusive, survives kill — matches iOS).

package/src/cli.ts

@@ -28,8 +28,19 @@ function deriveBuild(version: string): number {
   return maj * 10000 + min * 100 + patch;
 }
 
-/** Resolved monotonic build number: explicit `buildNumber` (e.g. CI run #) wins, else derived. */
+/**
+ * Resolved monotonic build number (iOS CFBundleVersion / Android versionCode).
+ * Precedence: `APPWRAP_BUILD_NUMBER` env (CI run #) > explicit `cfg.buildNumber` > derived from version.
+ * The env override means CI gets a monotonic, collision-free build number for free — no per-app config
+ * plumbing — which is the whole point: the derived default is CONSTANT per version, so repeat uploads
+ * of the same marketing version would 409 ("build already exists") without it.
+ */
 function buildNumberOf(cfg: AppwrapConfig): number {
+  const env = process.env.APPWRAP_BUILD_NUMBER;
+  if (env != null && env !== '') {
+    const n = parseInt(env, 10);
+    if (!Number.isNaN(n)) return n;
+  }
   if (cfg.buildNumber != null) {
     const n = parseInt(String(cfg.buildNumber), 10);
     if (!Number.isNaN(n)) return n;

package/templates/ci/github/workflows/appwrap-release-android.yml

@@ -9,9 +9,15 @@
 #                                  exist on Play with one prior manual upload before supply works)
 name: Release Android
 on:
+  workflow_dispatch:
   push:
     tags: ['v*']
 
+# Monotonic store build number (Android versionCode). appwrap CLI reads APPWRAP_BUILD_NUMBER over the
+# constant derived default — Play rejects a versionCode it has already seen. run_number is increasing.
+env:
+  APPWRAP_BUILD_NUMBER: ${{ github.run_number + 100 }}
+
 jobs:
   play:
     runs-on: ubuntu-latest

package/templates/ci/github/workflows/appwrap-release-ios.yml

@@ -14,6 +14,12 @@ on:
   push:
     tags: ['v*']
 
+# Monotonic store build number (CFBundleVersion). The appwrap CLI reads APPWRAP_BUILD_NUMBER and it wins
+# over the (constant-per-version) derived default — without this, repeat uploads of the same marketing
+# version 409 ("build already exists"). run_number is strictly increasing; +100 clears low derived values.
+env:
+  APPWRAP_BUILD_NUMBER: ${{ github.run_number + 100 }}
+
 jobs:
   testflight:
     runs-on: macos-15