kasy-cli 1.31.5 → 1.31.7

package/lib/utils/env-tools.js

@@ -19,6 +19,7 @@
 const os = require('node:os');
 const path = require('node:path');
 const fs = require('node:fs');
+const { spawn, spawnSync } = require('node:child_process');
 
 const isWindows = process.platform === 'win32';
 const PATH_SEP = isWindows ? ';' : ':';
@@ -179,6 +180,68 @@ function augmentedEnv(extraDirs = []) {
   return env;
 }
 
+/**
+ * Spawn `flutter <args>` cross-platform, with the (possibly freshly-installed)
+ * SDK exposed on PATH via augmentedEnv().
+ *
+ * On Windows `flutter` is a .bat, which Node's spawn() refuses to run without a
+ * shell. But passing an ARGS ARRAY *together with* shell:true triggers Node's
+ * DEP0190 deprecation warning — and that warning, emitted asynchronously while a
+ * Clack prompt is on screen, corrupts its redraw (the device picker shows up
+ * duplicated). So on Windows we build ONE command STRING and pass shell:true with
+ * no args array (no array + shell ⇒ no warning); on Unix we pass the plain args.
+ */
+function flutterSpawn(spawnFn, args, options = {}) {
+  const base = { env: augmentedEnv(), ...options };
+  if (!isWindows) return spawnFn('flutter', args, base);
+  const quoted = args.map((a) => (/\s/.test(a) ? `"${a}"` : a));
+  return spawnFn(['flutter', ...quoted].join(' '), { ...base, shell: true });
+}
+
+const spawnFlutter = (args, options) => flutterSpawn(spawn, args, options);
+const spawnSyncFlutter = (args, options) => flutterSpawn(spawnSync, args, options);
+
+// Run the native-assets disable at most once per process — the setting is
+// persisted in Flutter's global config, so re-running it every command would
+// just add ~1s of cold flutter startup for nothing.
+let nativeAssetsHandled = false;
+
+/**
+ * Disable Flutter "native assets" compilation — Windows only.
+ *
+ * Why: `path_provider_foundation` (the Apple impl of `path_provider`, pulled in
+ * transitively by almost everything — google_fonts, home_widget,
+ * flutter_secure_storage…) ships a native-assets build hook for the
+ * `objective_c` package. On Windows, Dart's hook runner builds that compile
+ * command WITHOUT quoting the SDK/project path, so a username containing a
+ * SPACE (e.g. `C:\Users\John Silva`) breaks it — the shell reads only up to the
+ * space: `'C:\Users\John' is not recognized as a command`. It even fires for a
+ * Chrome/web run, where the Apple-only hook is pure dead weight.
+ *
+ * The hook is irrelevant on Windows (no iOS/macOS builds ever happen there), so
+ * turning native assets off removes the broken step at zero cost. `flutter
+ * config` is per-machine and global, so this never touches a Mac's iOS build.
+ *
+ * Idempotent and best-effort: it must never block `kasy run` / `kasy new`.
+ *
+ * @returns {{ ok: boolean, skipped?: boolean, error?: string }}
+ */
+function disableNativeAssetsWindows() {
+  if (!isWindows) return { ok: false, skipped: true };
+  if (nativeAssetsHandled) return { ok: true, skipped: true };
+  nativeAssetsHandled = true;
+  try {
+    const r = spawnSyncFlutter(['config', '--no-enable-native-assets'], {
+      stdio: ['ignore', 'pipe', 'pipe'],
+      encoding: 'utf8',
+      timeout: 120_000,
+    });
+    return { ok: r.status === 0 };
+  } catch (e) {
+    return { ok: false, error: e.message };
+  }
+}
+
 module.exports = {
   isWindows,
   homeDir,
@@ -186,4 +249,7 @@ module.exports = {
   pubCacheBin,
   keytoolBin,
   augmentedEnv,
+  spawnFlutter,
+  spawnSyncFlutter,
+  disableNativeAssetsWindows,
 };

package/lib/utils/flutter-install.js

@@ -106,6 +106,14 @@ if ($LASTEXITCODE -ne 0) {
   throw 'Flutter was installed but its first run failed (Dart SDK bootstrap). Check your internet connection and run this again.'
 }
 
+# 3b. Disable native assets. path_provider_foundation (Apple impl of
+#     path_provider) ships an objective_c native-assets build hook whose compile
+#     command isn't quoted, so a username with a SPACE (C:\\Users\\John Silva)
+#     breaks every build — even Chrome/web, where the Apple hook is dead weight.
+#     No iOS/macOS builds happen on Windows, so turning it off is free. Best
+#     effort: never fail the install over it.
+& (Join-Path $bin 'flutter.bat') config --no-enable-native-assets 2>&1 | Out-Null
+
 # 4. Persist flutter\\bin on the User PATH so every future terminal finds it.
 $userPath = [Environment]::GetEnvironmentVariable('Path', 'User')
 if (-not $userPath) { $userPath = '' }

package/lib/utils/flutter-run.js

@@ -28,29 +28,9 @@
 
 const path = require('node:path');
 const fs = require('node:fs');
-const { spawn } = require('node:child_process');
 const kleur = require('kleur');
 const ui = require('./ui');
-const { augmentedEnv } = require('./env-tools');
-
-const isWindows = process.platform === 'win32';
-
-// `flutter` runs from an SDK that may have been installed by `kasy new` in this
-// same session — and Windows only refreshes PATH for NEW terminals, so the
-// current one doesn't see it yet. augmentedEnv() exposes %LOCALAPPDATA%\flutter\bin
-// (and the pub-cache bin) so `kasy run` finds flutter exactly like `kasy new` did.
-// On Windows `flutter` is a .bat, which Node's spawn() refuses to run without a
-// shell — hence shell:true there. With shell:true the args become a command line,
-// so any arg with a space must be quoted (our flutter args normally have none,
-// but a dart-define value could).
-function flutterSpawnOptions(extra = {}) {
-  return { env: augmentedEnv(), shell: isWindows, ...extra };
-}
-
-function safeArgs(args) {
-  if (!isWindows) return args;
-  return args.map((a) => (/\s/.test(a) ? `"${a}"` : a));
-}
+const { spawnFlutter } = require('./env-tools');
 
 // Markers that tell us the initial build is done and the app is running.
 const FLUTTER_READY_RE = /Flutter run key commands\.|is listening on|VM Service|Dart VM service|To hot reload|Hot restart/i;
@@ -160,10 +140,10 @@ function spawnFlutterWithSpinner(args, projectDir, t, options = {}) {
  */
 function spawnRaw(args, projectDir, t, log, onReady) {
   return new Promise((resolve, reject) => {
-    const proc = spawn('flutter', safeArgs(args), flutterSpawnOptions({
+    const proc = spawnFlutter(args, {
       cwd: projectDir,
       stdio: ['inherit', 'pipe', 'pipe'],
-    }));
+    });
 
     let readyFired = false;
     const fireReady = () => {
@@ -212,10 +192,10 @@ function spawnRaw(args, projectDir, t, log, onReady) {
  */
 function spawnWithSpinner(args, projectDir, t, log, onReady) {
   return new Promise((resolve, reject) => {
-    const proc = spawn('flutter', safeArgs(args), flutterSpawnOptions({
+    const proc = spawnFlutter(args, {
       cwd: projectDir,
       stdio: ['pipe', 'pipe', 'pipe'],
-    }));
+    });
 
     const spinner = ui.spinner();
     const startTime = Date.now();

package/lib/utils/i18n/messages-en.js

@@ -389,12 +389,18 @@ module.exports = {
     'cli.command.ios.help.before': 'How to publish to the App Store:\n  1) kasy ios configure  → do this once (saves Apple credentials)\n  2) kasy ios release    → run for each new version (build + upload)\n\nUse "build" to only generate the IPA, "clean" if a build fails.\n',
     'cli.command.codemagic.description': 'Build the app in the cloud (no Mac needed)',
     'cli.command.codemagic.configure.description': 'Configure Codemagic API credentials',
-    'cli.command.codemagic.release.description': 'Start a Codemagic iOS workflow build',
+    'cli.command.codemagic.release.description': 'Start a cloud build (iOS, Android, or both)',
+    'cli.command.codemagic.release.iosOption': 'Build only iOS',
+    'cli.command.codemagic.release.androidOption': 'Build only Android',
+    'cli.command.codemagic.release.platformPick': 'Which platform do you want to build?',
+    'cli.command.codemagic.release.platform.both': 'iOS + Android',
+    'cli.command.codemagic.release.platform.ios': 'iOS only',
+    'cli.command.codemagic.release.platform.android': 'Android only',
     'cli.command.codemagic.status.description': 'Show Codemagic build status by ID',
     'cli.command.codemagic.picker.intro': 'Build in the cloud with Codemagic',
     'cli.command.codemagic.picker.message': 'What do you want to do?',
     'cli.command.codemagic.picker.statusHint': 'Asks for the build ID',
-    'cli.command.codemagic.help.before': 'How to build with Codemagic (no Mac needed):\n  1) kasy codemagic configure  → do this once (saves API token)\n  2) kasy codemagic release    → starts a cloud build for each version\n\nUse "status <buildId>" to check the progress of a running build.\n',
+    'cli.command.codemagic.help.before': 'How to build with Codemagic (no Mac needed):\n  1) kasy codemagic configure  → do this once (saves API token + app)\n  2) kasy codemagic release    → cloud build for each version\n       kasy codemagic release --ios       (iOS only)\n       kasy codemagic release --android   (Android only)\n\nUse "status <buildId>" to check the progress of a running build.\n',
 
     'ios.configure.title': 'iOS App Store — setup',
     'ios.configure.bundleId': 'Bundle ID',
@@ -456,19 +462,24 @@ module.exports = {
     'codemagic.configure.title': 'Codemagic — setup',
     'codemagic.configure.doc': 'Guide',
     'codemagic.configure.checklist': 'Complete signing + App Store Connect in the Codemagic dashboard (see guide).',
-    'codemagic.configure.openingLinks': 'Opening Codemagic in your browser…',
+    'codemagic.configure.openingToken': 'Opening Codemagic settings — copy your API token…',
     'codemagic.configure.q.token': 'Codemagic API token',
     'codemagic.configure.q.appId': 'Codemagic App ID',
-    'codemagic.configure.q.workflowId': 'Workflow ID (from codemagic.yaml)',
     'codemagic.configure.q.branch': 'Git branch to build',
     'codemagic.configure.q.required': 'Required',
+    'codemagic.configure.validating': 'Checking token and loading your apps…',
+    'codemagic.configure.validated': 'Token OK',
+    'codemagic.configure.tokenInvalid': 'Could not validate the token',
+    'codemagic.configure.noApps': 'No apps found on this account. Connect your repository in the Codemagic dashboard first.',
+    'codemagic.configure.pickApp': 'Which app do you want to build?',
     'codemagic.configure.cancelled': 'Setup cancelled',
     'codemagic.configure.success': 'Codemagic credentials saved',
     'codemagic.configure.next': 'Next',
     'codemagic.release.title': 'Triggering Codemagic build…',
-    'codemagic.release.triggered': 'Build started',
-    'codemagic.release.spin': 'Starting build on Codemagic…',
-    'codemagic.release.spinDone': 'Build queued on Codemagic',
+    'codemagic.release.spinPlatform': 'Starting {platform} build on Codemagic…',
+    'codemagic.release.triggeredPlatform': '{platform} build queued on Codemagic',
+    'codemagic.release.noIosKey': 'No iOS production RevenueCat key (RC_IOS_PROD_KEY) in .env — subscriptions may not load in the build.',
+    'codemagic.release.noAndroidKey': 'No Android production RevenueCat key (RC_ANDROID_PROD_KEY) in .env — subscriptions may not load in the build.',
     'codemagic.status.title': 'Build status',
     'codemagic.status.usage': 'Usage: kasy codemagic status <buildId>',
     'codemagic.status.spin': 'Fetching build status…',

package/lib/utils/i18n/messages-es.js

@@ -391,12 +391,18 @@ module.exports = {
     'cli.command.ios.help.before': 'Cómo publicar en la App Store:\n  1) kasy ios configure  → hazlo una vez (guarda las credenciales Apple)\n  2) kasy ios release    → ejecuta en cada nueva versión (build + subida)\n\nUsa "build" si solo quieres generar el IPA, "clean" si un build falló.\n',
     'cli.command.codemagic.description': 'Compila la app en la nube (sin necesitar Mac)',
     'cli.command.codemagic.configure.description': 'Configurar credenciales API de Codemagic',
-    'cli.command.codemagic.release.description': 'Iniciar build del workflow iOS en Codemagic',
+    'cli.command.codemagic.release.description': 'Iniciar build en la nube (iOS, Android o ambos)',
+    'cli.command.codemagic.release.iosOption': 'Compilar solo iOS',
+    'cli.command.codemagic.release.androidOption': 'Compilar solo Android',
+    'cli.command.codemagic.release.platformPick': '¿Qué plataforma quieres compilar?',
+    'cli.command.codemagic.release.platform.both': 'iOS + Android',
+    'cli.command.codemagic.release.platform.ios': 'Solo iOS',
+    'cli.command.codemagic.release.platform.android': 'Solo Android',
     'cli.command.codemagic.status.description': 'Estado del build Codemagic por ID',
     'cli.command.codemagic.picker.intro': 'Compilar en la nube con Codemagic',
     'cli.command.codemagic.picker.message': '¿Qué quieres hacer?',
     'cli.command.codemagic.picker.statusHint': 'Pregunta el ID del build',
-    'cli.command.codemagic.help.before': 'Cómo compilar con Codemagic (sin necesitar Mac):\n  1) kasy codemagic configure  → hazlo una vez (guarda el token de la API)\n  2) kasy codemagic release    → inicia un build en la nube por versión\n\nUsa "status <buildId>" para seguir el progreso de un build.\n',
+    'cli.command.codemagic.help.before': 'Cómo compilar con Codemagic (sin necesitar Mac):\n  1) kasy codemagic configure  → hazlo una vez (guarda el token de la API + app)\n  2) kasy codemagic release    → build en la nube por versión\n       kasy codemagic release --ios       (solo iOS)\n       kasy codemagic release --android   (solo Android)\n\nUsa "status <buildId>" para seguir el progreso de un build.\n',
 
     'ios.configure.title': 'App Store iOS — configuración',
     'ios.configure.bundleId': 'Bundle ID',
@@ -458,19 +464,24 @@ module.exports = {
     'codemagic.configure.title': 'Codemagic — configuración',
     'codemagic.configure.doc': 'Guía',
     'codemagic.configure.checklist': 'Complete firma + App Store Connect en el panel Codemagic (vea la guía).',
-    'codemagic.configure.openingLinks': 'Abriendo Codemagic en el navegador…',
+    'codemagic.configure.openingToken': 'Abriendo la configuración de Codemagic — copia tu token de la API…',
     'codemagic.configure.q.token': 'Token API de Codemagic',
     'codemagic.configure.q.appId': 'App ID en Codemagic',
-    'codemagic.configure.q.workflowId': 'Workflow ID (de codemagic.yaml)',
     'codemagic.configure.q.branch': 'Rama Git para build',
     'codemagic.configure.q.required': 'Obligatorio',
+    'codemagic.configure.validating': 'Verificando el token y cargando tus apps…',
+    'codemagic.configure.validated': 'Token válido',
+    'codemagic.configure.tokenInvalid': 'No se pudo validar el token',
+    'codemagic.configure.noApps': 'No se encontraron apps en esta cuenta. Conecta tu repositorio en el panel de Codemagic primero.',
+    'codemagic.configure.pickApp': '¿Qué app quieres compilar?',
     'codemagic.configure.cancelled': 'Configuración cancelada',
     'codemagic.configure.success': 'Credenciales Codemagic guardadas',
     'codemagic.configure.next': 'Siguiente paso',
     'codemagic.release.title': 'Disparando build en Codemagic…',
-    'codemagic.release.triggered': 'Build iniciado',
-    'codemagic.release.spin': 'Iniciando build en Codemagic…',
-    'codemagic.release.spinDone': 'Build encolado en Codemagic',
+    'codemagic.release.spinPlatform': 'Iniciando build de {platform} en Codemagic…',
+    'codemagic.release.triggeredPlatform': 'Build de {platform} encolado en Codemagic',
+    'codemagic.release.noIosKey': 'Sin clave de producción iOS de RevenueCat (RC_IOS_PROD_KEY) en .env — las suscripciones pueden no cargar en el build.',
+    'codemagic.release.noAndroidKey': 'Sin clave de producción Android de RevenueCat (RC_ANDROID_PROD_KEY) en .env — las suscripciones pueden no cargar en el build.',
     'codemagic.status.title': 'Estado del build',
     'codemagic.status.usage': 'Uso: kasy codemagic status <buildId>',
     'codemagic.status.spin': 'Consultando estado del build…',

package/lib/utils/i18n/messages-pt.js

@@ -389,12 +389,18 @@ module.exports = {
     'cli.command.ios.help.before': 'Como publicar na App Store:\n  1) kasy ios configure  → faça isso uma vez (salva as credenciais Apple)\n  2) kasy ios release    → rode em cada nova versão (build + envio)\n\nUse "build" se quiser só gerar o IPA, "clean" se um build falhou.\n',
     'cli.command.codemagic.description': 'Compila o app na nuvem (sem precisar de Mac)',
     'cli.command.codemagic.configure.description': 'Configurar credenciais da API Codemagic',
-    'cli.command.codemagic.release.description': 'Iniciar build do workflow iOS no Codemagic',
+    'cli.command.codemagic.release.description': 'Iniciar build na nuvem (iOS, Android ou os dois)',
+    'cli.command.codemagic.release.iosOption': 'Compilar só o iOS',
+    'cli.command.codemagic.release.androidOption': 'Compilar só o Android',
+    'cli.command.codemagic.release.platformPick': 'Qual plataforma você quer compilar?',
+    'cli.command.codemagic.release.platform.both': 'iOS + Android',
+    'cli.command.codemagic.release.platform.ios': 'Só iOS',
+    'cli.command.codemagic.release.platform.android': 'Só Android',
     'cli.command.codemagic.status.description': 'Status do build Codemagic por ID',
     'cli.command.codemagic.picker.intro': 'Compilar na nuvem com Codemagic',
     'cli.command.codemagic.picker.message': 'O que você quer fazer?',
     'cli.command.codemagic.picker.statusHint': 'Pergunta o ID do build',
-    'cli.command.codemagic.help.before': 'Como compilar com Codemagic (sem precisar de Mac):\n  1) kasy codemagic configure  → faça isso uma vez (salva o token da API)\n  2) kasy codemagic release    → inicia um build na nuvem a cada versão\n\nUse "status <buildId>" para acompanhar o progresso de um build.\n',
+    'cli.command.codemagic.help.before': 'Como compilar com Codemagic (sem precisar de Mac):\n  1) kasy codemagic configure  → faça isso uma vez (salva o token da API + app)\n  2) kasy codemagic release    → build na nuvem a cada versão\n       kasy codemagic release --ios       (só iOS)\n       kasy codemagic release --android   (só Android)\n\nUse "status <buildId>" para acompanhar o progresso de um build.\n',
 
     'ios.configure.title': 'App Store iOS — configuração',
     'ios.configure.bundleId': 'Bundle ID',
@@ -456,19 +462,24 @@ module.exports = {
     'codemagic.configure.title': 'Codemagic — configuração',
     'codemagic.configure.doc': 'Guia',
     'codemagic.configure.checklist': 'Conclua assinatura + App Store Connect no painel Codemagic (veja o guia).',
-    'codemagic.configure.openingLinks': 'Abrindo Codemagic no navegador…',
+    'codemagic.configure.openingToken': 'Abrindo as configurações do Codemagic — copie o token da API…',
     'codemagic.configure.q.token': 'Token da API Codemagic',
     'codemagic.configure.q.appId': 'App ID no Codemagic',
-    'codemagic.configure.q.workflowId': 'Workflow ID (do codemagic.yaml)',
     'codemagic.configure.q.branch': 'Branch Git para build',
     'codemagic.configure.q.required': 'Obrigatório',
+    'codemagic.configure.validating': 'Verificando o token e carregando seus apps…',
+    'codemagic.configure.validated': 'Token válido',
+    'codemagic.configure.tokenInvalid': 'Não foi possível validar o token',
+    'codemagic.configure.noApps': 'Nenhum app encontrado nesta conta. Conecte seu repositório no painel do Codemagic primeiro.',
+    'codemagic.configure.pickApp': 'Qual app você quer compilar?',
     'codemagic.configure.cancelled': 'Configuração cancelada',
     'codemagic.configure.success': 'Credenciais Codemagic salvas',
     'codemagic.configure.next': 'Próximo passo',
     'codemagic.release.title': 'Disparando build no Codemagic…',
-    'codemagic.release.triggered': 'Build iniciado',
-    'codemagic.release.spin': 'Iniciando build no Codemagic…',
-    'codemagic.release.spinDone': 'Build enfileirado no Codemagic',
+    'codemagic.release.spinPlatform': 'Iniciando build de {platform} no Codemagic…',
+    'codemagic.release.triggeredPlatform': 'Build de {platform} enfileirado no Codemagic',
+    'codemagic.release.noIosKey': 'Sem chave de produção iOS do RevenueCat (RC_IOS_PROD_KEY) no .env — as assinaturas podem não carregar no build.',
+    'codemagic.release.noAndroidKey': 'Sem chave de produção Android do RevenueCat (RC_ANDROID_PROD_KEY) no .env — as assinaturas podem não carregar no build.',
     'codemagic.status.title': 'Status do build',
     'codemagic.status.usage': 'Uso: kasy codemagic status <buildId>',
     'codemagic.status.spin': 'Consultando status do build…',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kasy-cli",
-  "version": "1.31.5",
+  "version": "1.31.7",
   "description": "CLI for scaffolding production-ready Flutter SaaS apps with Firebase, Supabase, or API REST backends.",
   "bin": {
     "kasy": "./bin/kasy.js"

package/templates/firebase/codemagic.yaml

@@ -0,0 +1,213 @@
+# Codemagic CI/CD — shipped by the Kasy `ci` feature.
+#
+# iOS and Android run as SEPARATE workflows (ios-workflow / android-workflow),
+# so you can build and publish each platform on its own. `kasy codemagic release`
+# triggers them: `--ios`, `--android`, or both.
+#
+# App keys (RevenueCat, backend URL, Sentry, Mixpanel, App Store id) arrive as
+# ENVIRONMENT VARIABLES, two ways:
+#   1. `kasy codemagic release` injects them automatically from your local .env, or
+#   2. you store them in the Codemagic UI as variable groups.
+# The "Generate .env" step below rebuilds the app's .env asset from those vars,
+# so the build always has the production RevenueCat keys (appl_/goog_) — never
+# the test_ key. ENV=prod is also passed as a dart-define (compile-time const).
+#
+# What you still set up ONCE in the Codemagic dashboard (UI-only, by design):
+#   - Connect your Git repository (Add application)
+#   - iOS: App Store Connect integration (the Apple API key)
+#   - Android: upload the keystore + the Google Play service account JSON
+
+workflows:
+  android-workflow:
+    name: Android Workflow
+    instance_type: mac_mini_m1
+    max_build_duration: 120
+    environment:
+      android_signing:
+        - keystore_reference # <-- Reference name of the keystore you upload in the Codemagic UI
+      groups:
+        - google_play # <-- Group holding GOOGLE_PLAY_SERVICE_ACCOUNT_CREDENTIALS (and any app keys)
+      vars:
+        PACKAGE_NAME: com.aicrus.firebase.kit # <-- Your Android applicationId
+        GOOGLE_PLAY_TRACK: "internal" # <-- internal | alpha | beta | production
+      flutter: stable
+    triggering:
+      cancel_previous_builds: true
+      events:
+        - push
+      branch_patterns:
+        - pattern: '*'
+          include: false
+          source: false
+        - pattern: 'main'
+          include: true
+          source: true
+    scripts:
+      - name: Set up local.properties
+        script: |
+          echo "flutter.sdk=$HOME/programs/flutter" > "$CM_BUILD_DIR/android/local.properties"
+      - name: Get Flutter packages
+        script: |
+          flutter packages pub get
+      - name: Generate .env from build environment
+        script: |
+          # The app reads its config from a bundled .env asset at runtime. That
+          # file is gitignored (never in the repo), so recreate it here from the
+          # environment variables provided by `kasy codemagic release` or by a
+          # Codemagic variable group. In a release build the app uses the
+          # production RevenueCat key (appl_/goog_) from RC_*_PROD_KEY.
+          cat > "$CM_BUILD_DIR/.env" <<EOF
+          ENV=prod
+          BACKEND_URL=${BACKEND_URL:-}
+          AI_CHAT_ENDPOINT=${AI_CHAT_ENDPOINT:-}
+          RC_TEST_KEY=${RC_TEST_KEY:-}
+          RC_IOS_PROD_KEY=${RC_IOS_PROD_KEY:-}
+          RC_ANDROID_PROD_KEY=${RC_ANDROID_PROD_KEY:-}
+          MIXPANEL_TOKEN=${MIXPANEL_TOKEN:-}
+          SENTRY_DSN=${SENTRY_DSN:-}
+          APP_STORE_ID=${APP_STORE_ID:-}
+          EOF
+      - name: Unit tests
+        script: |
+          mkdir -p test-results
+          flutter test --machine > test-results/flutter.json
+        test_report: test-results/flutter.json
+      - name: Build AAB with Flutter
+        script: |
+          BUILD_NUMBER=$(($(google-play get-latest-build-number --package-name "$PACKAGE_NAME" --tracks="$GOOGLE_PLAY_TRACK") + 1))
+          flutter build appbundle --release \
+            --dart-define=ENV=prod \
+            --build-name=1.0.$BUILD_NUMBER \
+            --build-number=$BUILD_NUMBER
+    artifacts:
+      - build/**/outputs/**/*.aab
+      - build/**/outputs/**/mapping.txt
+      - flutter_drive.log
+    publishing:
+      email:
+        recipients:
+          -  # <-- Put your email here or add others recipients
+        notify:
+          success: true
+          failure: true
+      google_play:
+        credentials: $GOOGLE_PLAY_SERVICE_ACCOUNT_CREDENTIALS
+        track: $GOOGLE_PLAY_TRACK
+        submit_as_draft: true
+  ios-workflow:
+    name: iOS Workflow
+    instance_type: mac_mini_m1
+    max_build_duration: 120
+    integrations:
+      app_store_connect: codemagic # <-- Name of your App Store Connect integration (Codemagic UI)
+    environment:
+      groups:
+          - appstore_credentials # <-- Group holding APP_ID (and any app keys)
+      ios_signing:
+        distribution_type: app_store
+        bundle_identifier: com.aicrus.firebase.kit # <-- Your iOS bundle identifier
+      vars:
+        # APP_ID = the numeric App Store Connect app id. `kasy codemagic release`
+        # sends it automatically (read from APP_STORE_ID in your .env); or define
+        # it in the appstore_credentials group.
+        APP_ID: $APP_ID
+      flutter: stable
+      xcode: latest # <-- set to specific version e.g. 15.0 to avoid unexpected updates.
+      cocoapods: default
+    triggering:
+      cancel_previous_builds: true
+      events:
+        - push
+      branch_patterns:
+        - pattern: '*'
+          include: false
+          source: false
+        - pattern: 'main'
+          include: true
+          source: true
+    scripts:
+      - name: Set up code signing settings on Xcode project
+        script: |
+          xcode-project use-profiles
+      - name: Get Flutter packages
+        script: |
+          flutter packages pub get
+      - name: Install pods
+        script: |
+          find . -name "Podfile" -execdir pod install \;
+      - name: Validate Google Sign-In iOS URL scheme
+        script: |
+          GOOGLE_PLIST="ios/Runner/GoogleService-Info.plist"
+          INFO_PLIST="ios/Runner/Info.plist"
+          if [ -f "$GOOGLE_PLIST" ]; then
+            REVERSED_CLIENT_ID=$(/usr/libexec/PlistBuddy -c "Print :REVERSED_CLIENT_ID" "$GOOGLE_PLIST" 2>/dev/null || true)
+            if [ -z "$REVERSED_CLIENT_ID" ]; then
+              echo "REVERSED_CLIENT_ID not found in $GOOGLE_PLIST"
+              exit 1
+            fi
+            if ! /usr/libexec/PlistBuddy -c "Print :CFBundleURLTypes" "$INFO_PLIST" 2>/dev/null | grep -Fq "$REVERSED_CLIENT_ID"; then
+              echo "Google Sign-In iOS URL scheme mismatch."
+              echo "Expected CFBundleURLSchemes to include: $REVERSED_CLIENT_ID"
+              echo "Run flutterfire configure/project setup before building."
+              exit 1
+            fi
+          fi
+      - name: Generate .env from build environment
+        script: |
+          # See the Android workflow note above — recreate the bundled .env asset
+          # from environment variables so the release build gets the production
+          # RevenueCat key (appl_) instead of the test_ key.
+          cat > "$CM_BUILD_DIR/.env" <<EOF
+          ENV=prod
+          BACKEND_URL=${BACKEND_URL:-}
+          AI_CHAT_ENDPOINT=${AI_CHAT_ENDPOINT:-}
+          RC_TEST_KEY=${RC_TEST_KEY:-}
+          RC_IOS_PROD_KEY=${RC_IOS_PROD_KEY:-}
+          RC_ANDROID_PROD_KEY=${RC_ANDROID_PROD_KEY:-}
+          MIXPANEL_TOKEN=${MIXPANEL_TOKEN:-}
+          SENTRY_DSN=${SENTRY_DSN:-}
+          APP_STORE_ID=${APP_STORE_ID:-}
+          EOF
+      - name: Flutter analyze # <-- remove if you don't like flutter analyze
+        script: |
+          flutter analyze
+      - name: Flutter unit tests
+        script: |
+          flutter test
+        ignore_failure: false  # You should never build an app that has failing tests.
+      - name: Flutter build ipa and automatic versioning
+        script: |
+          flutter build ipa --release \
+            --dart-define=ENV=prod \
+            --build-name=1.0.0 \
+            --build-number=$(($(app-store-connect get-latest-app-store-build-number "$APP_ID") + 1)) \
+            --export-options-plist=/Users/builder/export_options.plist
+    artifacts:
+      - build/ios/ipa/*.ipa
+      - /tmp/xcodebuild_logs/*.log
+      - flutter_drive.log
+    publishing:
+      # See the following link for details about email publishing - https://docs.codemagic.io/publishing-yaml/distribution/#email
+      email:
+        recipients:
+          -  # <-- Put your email here or add others recipients
+        notify:
+          success: true
+          failure: true
+      app_store_connect:
+        # Use codemagic integration (easier)
+        auth: integration
+        # ====================================
+        ## Or push all keys manually here
+        ## ====================================
+        #api_key: $APP_STORE_CONNECT_PRIVATE_KEY
+        #key_id: $APP_STORE_CONNECT_KEY_IDENTIFIER
+        #issuer_id: $APP_STORE_CONNECT_ISSUER_ID
+        ## ====================================
+        submit_to_app_store: false # Set true to send to App Store review automatically
+        release_type: MANUAL
+        # Configuration related to TestFlight (optional)
+        # Note: This action is performed during post-processing.
+        submit_to_testflight: true
+        beta_groups: # Specify the names of beta tester groups that will get access to the build once it has passed beta review.
+          - kasy # <-- Put your beta group name here

package/templates/firebase/docs/codemagic-release.en.md

@@ -1,43 +1,64 @@
-# Publish iOS with Codemagic (no Mac)
+# Publish to the cloud with Codemagic (no Mac)
+
+Publishes **iOS** and **Android** through the Codemagic cloud. Each platform has
+its own workflow, so you can ship them separately or both together.
 
 ## Prerequisites
 
-- [Codemagic](https://codemagic.io) account
-- Git repository connected to Codemagic
-- Apple Developer account + app in App Store Connect
+- A [Codemagic](https://codemagic.io) account
+- A Git repository connected to Codemagic
+- iOS: Apple Developer account + app in App Store Connect
+- Android: app in Google Play Console + a signing keystore
 
-## 1. Add CI to the project (if missing)
+## 1. Add CI to the project (if you don't have it yet)
 
 ```bash
 kasy add ci
 ```
 
-Creates `codemagic.yaml` at the project root.
+This creates `codemagic.yaml` at the project root (`ios-workflow` and
+`android-workflow`).
+
+## 2. Set up in the Codemagic dashboard (once)
+
+These are secrets and can only be done in the dashboard — one time:
 
-## 2. Configure in the Codemagic dashboard
+1. Open [codemagic.io/apps](https://codemagic.io/apps) and **connect your repository**.
+2. **iOS** — *Integrations → App Store Connect*: connect the Apple API key. Its
+   name goes in `integrations: app_store_connect:` in `codemagic.yaml`.
+3. **Android** — *Code signing identities → Android keystores*: upload the
+   keystore with **Reference name** `keystore_reference` (matching `codemagic.yaml`).
+4. **Android** — upload the **Google Play service account** JSON as the secret
+   variable `GOOGLE_PLAY_SERVICE_ACCOUNT_CREDENTIALS` (group `google_play`).
 
-1. Open [codemagic.io/apps](https://codemagic.io/apps) and add your repository.
-2. **Code signing (iOS):** set up App Store distribution certificate and profile.
-3. **Integrations → App Store Connect:** link your Apple account.
-4. **Environment variables:** add to your variable group (e.g. `appstore_credentials`):
-   - `BACKEND_URL`, `SENTRY_DSN`, `RC_IOS_API_KEY`, `RC_ANDROID_API_KEY`, `MIXPANEL_TOKEN`
-5. In `codemagic.yaml`, set `APP_ID` (numeric App Store Connect app ID from the app URL).
+> The **app keys** (RevenueCat, backend, etc.) do **not** need to be filled in
+> the dashboard: `kasy codemagic release` sends them automatically from your
+> `.env`. If you'd rather trigger from the dashboard/push, add them to the
+> variable groups instead.
 
-## 3. Configure from the terminal
+## 3. Set up in the terminal (once)
 
 ```bash
 kasy codemagic configure
 ```
 
-Enter **API token** (Settings → Codemagic API), **App ID**, and **Workflow ID** (default `ios-workflow`).
+The wizard opens the **API token** page (Settings → Codemagic API), validates the
+token and **lists your apps** to pick from — no IDs to type. It saves everything
+to `.kasy/codemagic.env` (gitignored).
 
 ## 4. Trigger a build
 
 ```bash
-kasy codemagic release
+kasy codemagic release            # iOS + Android
+kasy codemagic release --ios      # iOS only
+kasy codemagic release --android  # Android only
 ```
 
-The cloud build runs and may upload to TestFlight per `codemagic.yaml`.
+The command reads your `.env` and carries the production keys (including the
+RevenueCat production key, `appl_`/`goog_`) with the trigger. A step in
+`codemagic.yaml` recreates the `.env` in the cloud before building, so the build
+ships with the right keys. Per `codemagic.yaml`, iOS goes to TestFlight and
+Android to the configured track (`internal` by default).
 
 ## Build status
 
@@ -45,6 +66,12 @@ The cloud build runs and may upload to TestFlight per `codemagic.yaml`.
 kasy codemagic status <buildId>
 ```
 
+## Can I use the Mac and Codemagic at the same time?
+
+Yes. They are two paths to the same store; they don't conflict. The build number
+is computed by the cloud (latest in the store + 1), so it rarely collides. For
+day-to-day, pick one main path.
+
 ## Local Mac
 
-If you have a Mac: [ios-release.md](./ios-release.md) and `kasy ios release`.
+If you have a Mac: see [ios-release.md](./ios-release.md) and `kasy ios release`.