kasy-cli 1.31.6 → 1.31.8

package/bin/kasy.js

@@ -602,7 +602,22 @@ function buildProgram(language) {
         ],
       });
       if (sub === 'configure') await runCodemagicConfigure('.', { language });
-      else if (sub === 'release') await runCodemagicRelease('.', { language });
+      else if (sub === 'release') {
+        const platform = await ui.select({
+          message: t('cli.command.codemagic.release.platformPick'),
+          options: [
+            { value: 'both', label: t('cli.command.codemagic.release.platform.both') },
+            { value: 'ios', label: t('cli.command.codemagic.release.platform.ios') },
+            { value: 'android', label: t('cli.command.codemagic.release.platform.android') },
+          ],
+        });
+        if (typeof platform === 'string') {
+          const relOpts = { language };
+          if (platform === 'ios') relOpts.ios = true;
+          else if (platform === 'android') relOpts.android = true;
+          await runCodemagicRelease('.', relOpts);
+        }
+      }
       else if (sub === 'status') {
         const buildId = await ui.text({
           message: 'Build ID',
@@ -625,9 +640,11 @@ function buildProgram(language) {
     codemagicCmd
       .command('release')
       .argument('[directory]', 'Project folder (default: current directory)', '.')
+      .option('--ios', t('cli.command.codemagic.release.iosOption'))
+      .option('--android', t('cli.command.codemagic.release.androidOption'))
       .description(t('cli.command.codemagic.release.description'))
-      .action(async (directory) => {
-        await runCodemagicRelease(directory, { language });
+      .action(async (directory, opts) => {
+        await runCodemagicRelease(directory, { language, ios: opts.ios, android: opts.android });
       }),
     t
   );

package/docs/cli-reference.md

@@ -121,15 +121,17 @@ Atalho: `make release-ios`
 
 ---
 
-### `kasy codemagic` — Release iOS (nuvem)
+### `kasy codemagic` — Release iOS/Android (nuvem)
 
-Dispara build iOS no Codemagic (ideal sem Mac).
+Dispara build **iOS e Android** no Codemagic (ideal sem Mac), levando as chaves do `.env` no disparo.
 
 ```bash
-kasy add ci                  # cria codemagic.yaml (se necessário)
-kasy codemagic configure     # token API + app/workflow ID
-kasy codemagic release       # inicia build na nuvem
-kasy codemagic status <id>   # status do build
+kasy add ci                       # entrega o codemagic.yaml (se necessário)
+kasy codemagic configure          # token API → valida e lista seus apps → branch
+kasy codemagic release            # iOS + Android na nuvem
+kasy codemagic release --ios      # só iOS
+kasy codemagic release --android  # só Android
+kasy codemagic status <id>        # status do build
 ```
 
 Documentação: `docs/codemagic-release.md` (idioma da CLI)

package/lib/commands/codemagic.js

@@ -11,18 +11,39 @@ const {
   codemagicReleaseDocPath,
   writeCodemagicEnv,
   validateCodemagicSetup,
+  loadProjectEnv,
+  listApps,
+  workflowIdFor,
+  resolveReleaseVars,
   triggerBuild,
   getBuildStatus,
   URL_CODEMAGIC_APPS,
   URL_CODEMAGIC_API,
 } = require('../utils/codemagic-release');
 
+// Human label per platform (proper nouns — same across locales).
+const PLATFORM_LABEL = { ios: 'iOS', android: 'Android' };
+
 async function assertProject(projectDir, t) {
   if (!(await isKasyFlutterProject(projectDir))) {
     throw new Error(t('codemagic.error.notProject'));
   }
 }
 
+/**
+ * Decide which platforms to release. Explicit flags win; with no flag we build
+ * both. Returns an ordered list like ['ios', 'android'].
+ */
+function platformsFromOptions(options) {
+  const wantIos = !!options.ios;
+  const wantAndroid = !!options.android;
+  if (!wantIos && !wantAndroid) return ['ios', 'android'];
+  const platforms = [];
+  if (wantIos) platforms.push('ios');
+  if (wantAndroid) platforms.push('android');
+  return platforms;
+}
+
 async function runConfigure(directory, options = {}) {
   const lang = options.language || detectDefaultLanguage();
   const t = createTranslator(lang);
@@ -35,39 +56,62 @@ async function runConfigure(directory, options = {}) {
   ui.log.message(kleur.dim(`${t('codemagic.configure.doc')}: ${codemagicReleaseDocPath(lang)}`));
   ui.log.warn(t('codemagic.configure.checklist'));
 
-  ui.log.info(t('codemagic.configure.openingLinks'));
-  openUrl(URL_CODEMAGIC_API);
-  openUrl(URL_CODEMAGIC_APPS);
-
   const cancel = () => { ui.cancel(t('codemagic.configure.cancelled')); process.exit(0); };
   const required = (v) => (v && String(v).trim().length > 0 ? undefined : t('codemagic.configure.q.required'));
 
-  const token = await ui.password({
+  // 1. API token — open the settings page so the user can copy it.
+  ui.log.info(t('codemagic.configure.openingToken'));
+  openUrl(URL_CODEMAGIC_API);
+  const tokenRaw = await ui.password({
     message: t('codemagic.configure.q.token'),
     validate: required,
     onCancel: cancel,
   });
-  const appId = await ui.text({
-    message: t('codemagic.configure.q.appId'),
-    validate: required,
-    onCancel: cancel,
-  });
-  const workflowId = await ui.text({
-    message: t('codemagic.configure.q.workflowId'),
-    initialValue: 'ios-workflow',
-    onCancel: cancel,
-  });
-  const branch = await ui.text({
+  const token = String(tokenRaw).trim();
+
+  // 2. Validate the token by listing the user's apps.
+  const spinner = ui.spinner();
+  spinner.start(t('codemagic.configure.validating'));
+  let apps;
+  try {
+    apps = await listApps(token);
+    spinner.stop(t('codemagic.configure.validated'));
+  } catch (err) {
+    spinner.stop(`${t('codemagic.configure.tokenInvalid')} (${err.message})`, 2);
+    process.exitCode = 1;
+    return;
+  }
+
+  // 3. Pick the app (or guide the user to connect a repo first).
+  let appId;
+  if (!apps.length) {
+    ui.log.warn(t('codemagic.configure.noApps'));
+    openUrl(URL_CODEMAGIC_APPS);
+    const manual = await ui.text({
+      message: t('codemagic.configure.q.appId'),
+      validate: required,
+      onCancel: cancel,
+    });
+    appId = String(manual).trim();
+  } else {
+    appId = await ui.select({
+      message: t('codemagic.configure.pickApp'),
+      options: apps.map((a) => ({ value: a.id, label: a.name, hint: a.id })),
+    });
+    if (typeof appId === 'symbol') cancel();
+  }
+
+  // 4. Branch that triggers the build.
+  const branchRaw = await ui.text({
     message: t('codemagic.configure.q.branch'),
     initialValue: 'main',
     onCancel: cancel,
   });
 
   await writeCodemagicEnv(projectDir, {
-    token: String(token).trim(),
-    appId: String(appId).trim(),
-    workflowId: String(workflowId).trim() || 'ios-workflow',
-    branch: String(branch).trim() || 'main',
+    token,
+    appId,
+    branch: String(branchRaw).trim() || 'main',
   });
 
   ui.log.success(t('codemagic.configure.success'));
@@ -87,44 +131,64 @@ async function runRelease(directory, options = {}) {
     if (validation.issues.includes('missing_yaml')) {
       ui.log.message(kleur.dim(t('codemagic.error.addCi')));
     }
-    if (validation.issues.includes('missing_env')) {
+    if (validation.issues.includes('missing_env') || validation.issues.includes('missing_token') || validation.issues.includes('missing_app_id')) {
       ui.log.message(kleur.dim(t('codemagic.error.runConfigure')));
     }
     process.exitCode = 1;
     return;
   }
 
-  const googleScheme = await validateGoogleIosUrlScheme(projectDir);
-  if (!googleScheme.ok) {
-    printCompactHeader(t);
-    ui.log.error(t('codemagic.error.googleUrlScheme'));
-    ui.log.message(kleur.dim(googleScheme.error));
-    ui.log.info(t('ios.error.googleUrlSchemeHint'));
-    process.exitCode = 1;
-    return;
+  const platforms = platformsFromOptions(options);
+
+  // iOS builds need the Google Sign-In URL scheme to be in sync.
+  if (platforms.includes('ios')) {
+    const googleScheme = await validateGoogleIosUrlScheme(projectDir);
+    if (!googleScheme.ok) {
+      printCompactHeader(t);
+      ui.log.error(t('codemagic.error.googleUrlScheme'));
+      ui.log.message(kleur.dim(googleScheme.error));
+      ui.log.info(t('ios.error.googleUrlSchemeHint'));
+      process.exitCode = 1;
+      return;
+    }
   }
 
   printCompactHeader(t);
   ui.intro(t('codemagic.release.title'));
 
-  const spinner = ui.spinner();
-  spinner.start(t('codemagic.release.spin'));
-  try {
-    const result = await triggerBuild(projectDir, validation.env);
-    spinner.stop(t('codemagic.release.spinDone'));
-    const buildId = result.buildId || result._id;
-    if (buildId) {
-      ui.log.success(t('codemagic.release.triggered'));
-      ui.log.info(`Build ID: ${kleur.cyan(buildId)}`);
-      ui.log.message(kleur.dim(`https://codemagic.io/builds/${buildId}`));
-      ui.outro('');
-    } else {
-      ui.outro(t('codemagic.release.triggered'));
+  // Read the project's keys and carry them with the build.
+  const projectEnv = await loadProjectEnv(projectDir);
+  const variables = resolveReleaseVars(projectEnv);
+
+  if (platforms.includes('ios') && !variables.RC_IOS_PROD_KEY) {
+    ui.log.warn(t('codemagic.release.noIosKey'));
+  }
+  if (platforms.includes('android') && !variables.RC_ANDROID_PROD_KEY) {
+    ui.log.warn(t('codemagic.release.noAndroidKey'));
+  }
+
+  let anyFailed = false;
+  for (const platform of platforms) {
+    const label = PLATFORM_LABEL[platform];
+    const workflowId = workflowIdFor(validation.env, platform);
+    const spinner = ui.spinner();
+    spinner.start(t('codemagic.release.spinPlatform', { platform: label }));
+    try {
+      const result = await triggerBuild(validation.env, { workflowId, variables });
+      const buildId = result.buildId || result._id;
+      spinner.stop(t('codemagic.release.triggeredPlatform', { platform: label }));
+      if (buildId) {
+        ui.log.info(`Build ID: ${kleur.cyan(buildId)}`);
+        ui.log.message(kleur.dim(`https://codemagic.io/app/${validation.env.CODEMAGIC_APP_ID}/build/${buildId}`));
+      }
+    } catch (err) {
+      anyFailed = true;
+      spinner.stop(`${label}: ${err.message}`, 2);
     }
-  } catch (err) {
-    spinner.stop(err.message, 2);
-    process.exitCode = 1;
   }
+
+  if (anyFailed) process.exitCode = 1;
+  ui.outro('');
 }
 
 async function runStatus(buildId, directory, options = {}) {
@@ -168,4 +232,5 @@ module.exports = {
   runConfigure,
   runRelease,
   runStatus,
+  platformsFromOptions,
 };

package/lib/scaffold/backends/api/pubspec.yaml.tpl

@@ -58,6 +58,13 @@ dependencies:
   open_filex: ^4.7.0
   package_info_plus: ^8.3.0
   path_provider: ^2.1.5
+  # Pin the Apple impl of path_provider below 2.6.0/2.5.0. Those versions pull in
+  # objective_c via "native assets", whose build hook is unquoted and breaks every
+  # build on Windows when the username has a space (C:\Users\John Silva) — even a
+  # Chrome/web run, where the Apple-only hook is dead weight. 2.5.1 is the last
+  # release without objective_c (added in 2.5.0, reverted in 2.5.1, re-added in
+  # 2.6.0). Drop this pin once the upstream web-target regression is fixed.
+  path_provider_foundation: 2.5.1
   permission_handler: ^12.0.1
   provider: ^6.1.0
   pub_semver: ^2.2.0

package/lib/scaffold/backends/supabase/pubspec.yaml.tpl

@@ -59,6 +59,13 @@ dependencies:
   open_filex: ^4.7.0
   package_info_plus: ^8.3.0
   path_provider: ^2.1.5
+  # Pin the Apple impl of path_provider below 2.6.0/2.5.0. Those versions pull in
+  # objective_c via "native assets", whose build hook is unquoted and breaks every
+  # build on Windows when the username has a space (C:\Users\John Silva) — even a
+  # Chrome/web run, where the Apple-only hook is dead weight. 2.5.1 is the last
+  # release without objective_c (added in 2.5.0, reverted in 2.5.1, re-added in
+  # 2.6.0). Drop this pin once the upstream web-target regression is fixed.
+  path_provider_foundation: 2.5.1
   permission_handler: ^12.0.1
   provider: ^6.1.0
   pub_semver: ^2.2.0

package/lib/scaffold/engine.js

@@ -27,12 +27,14 @@ const ALWAYS_EXCLUDE = new Set([
   '.cursor',
   '.idea',
   '.claude',       // AI assistant instructions — not for the client
-  // CI/CD configs — delivered only when the user selects the 'ci' module
-  // (these files live in features/ci/ and are applied as a feature patch)
+  // GitHub/GitLab CI pipelines are not shipped to generated projects yet.
   '.github',
   '.gitlab',
   '.gitlab-ci.yml',
-  'codemagic.yaml',
+  // NOTE: codemagic.yaml is intentionally NOT excluded here. It ships in the
+  // base template and generate.js removes it unless the 'ci' module is
+  // selected (see the "Phase B" gating). This is what lets `kasy codemagic`
+  // work in a generated project.
 ]);
 
 // File basenames that should NEVER be copied, regardless of directory depth

package/lib/scaffold/generate.js

@@ -236,6 +236,13 @@ async function generateProject(targetDir, backend, options, hooks = {}) {
     // Remove directories of modules that were NOT selected
     await removeModuleDirs(targetDir, modules);
 
+    // codemagic.yaml ships in the base template (so `kasy codemagic` works out
+    // of the box). It belongs to the 'ci' module — strip it when ci was not
+    // selected, mirroring how the other optional modules are gated above.
+    if (!modules.includes('ci')) {
+      await fs.remove(path.join(targetDir, 'codemagic.yaml'));
+    }
+
     // Write no-op analytics_api.dart if analytics not selected
     if (!modules.includes('analytics')) {
       await writeNoOpAnalyticsApi(targetDir, packageName);

package/lib/utils/codemagic-release.js

@@ -8,18 +8,22 @@ const CODEMAGIC_ENV_REL = path.join('.kasy', 'codemagic.env');
 const CODEMAGIC_API = 'https://api.codemagic.io';
 
 const URL_CODEMAGIC_APPS = 'https://codemagic.io/apps';
-const URL_CODEMAGIC_API = 'https://codemagic.io/settings/integrations';
+// Codemagic API token lives in the account settings → Integrations page.
+const URL_CODEMAGIC_API = 'https://codemagic.io/settings';
+
+// Default workflow ids defined in the codemagic.yaml shipped by the `ci` feature.
+const DEFAULT_IOS_WORKFLOW = 'ios-workflow';
+const DEFAULT_ANDROID_WORKFLOW = 'android-workflow';
 
 function codemagicReleaseDocPath() {
   return 'docs/codemagic-release.md';
 }
 
-async function loadCodemagicEnv(projectDir) {
-  const envPath = path.join(projectDir, CODEMAGIC_ENV_REL);
-  if (!(await fs.pathExists(envPath))) {
-    return null;
-  }
-  const content = await fs.readFile(envPath, 'utf8');
+/**
+ * Parse a simple KEY=VALUE env file into an object. Ignores blanks/comments.
+ * Values keep everything after the first '=' (so URLs with ':' survive).
+ */
+function parseEnvContent(content) {
   const env = {};
   for (const line of content.split('\n')) {
     const trimmed = line.trim();
@@ -31,12 +35,32 @@ async function loadCodemagicEnv(projectDir) {
   return env;
 }
 
-async function writeCodemagicEnv(projectDir, { token, appId, workflowId, branch }) {
+async function loadCodemagicEnv(projectDir) {
+  const envPath = path.join(projectDir, CODEMAGIC_ENV_REL);
+  if (!(await fs.pathExists(envPath))) {
+    return null;
+  }
+  return parseEnvContent(await fs.readFile(envPath, 'utf8'));
+}
+
+/**
+ * Read the project's runtime `.env` (the app's config). Returns {} when absent.
+ */
+async function loadProjectEnv(projectDir) {
+  const envPath = path.join(projectDir, '.env');
+  if (!(await fs.pathExists(envPath))) {
+    return {};
+  }
+  return parseEnvContent(await fs.readFile(envPath, 'utf8'));
+}
+
+async function writeCodemagicEnv(projectDir, { token, appId, iosWorkflowId, androidWorkflowId, branch }) {
   const lines = [
     '# Generated by kasy codemagic configure — do not commit',
     `CODEMAGIC_API_TOKEN=${token}`,
     `CODEMAGIC_APP_ID=${appId}`,
-    `CODEMAGIC_WORKFLOW_ID=${workflowId || 'ios-workflow'}`,
+    `CODEMAGIC_IOS_WORKFLOW_ID=${iosWorkflowId || DEFAULT_IOS_WORKFLOW}`,
+    `CODEMAGIC_ANDROID_WORKFLOW_ID=${androidWorkflowId || DEFAULT_ANDROID_WORKFLOW}`,
     `CODEMAGIC_BRANCH=${branch || 'main'}`,
     '',
   ];
@@ -83,12 +107,92 @@ function httpsJson(method, urlPath, token, body) {
   });
 }
 
-async function triggerBuild(projectDir, env) {
+/**
+ * List the Codemagic applications the token can access.
+ * Returns [{ id, name }] so the configure wizard can let the user pick one
+ * instead of pasting a raw Mongo id.
+ */
+async function listApps(token) {
+  const result = await httpsJson('GET', '/apps', token);
+  const apps = Array.isArray(result) ? result : (result.applications || []);
+  return apps
+    .map((a) => ({ id: a._id || a.id, name: a.appName || a.name || a.repository?.name || '(unnamed app)' }))
+    .filter((a) => a.id);
+}
+
+/**
+ * Resolve which workflow id to trigger for a platform, honoring custom ids
+ * saved at configure time and falling back to the shipped defaults. The legacy
+ * single CODEMAGIC_WORKFLOW_ID (older configs) is treated as the iOS workflow.
+ */
+function workflowIdFor(env, platform) {
+  if (platform === 'android') {
+    return env.CODEMAGIC_ANDROID_WORKFLOW_ID || DEFAULT_ANDROID_WORKFLOW;
+  }
+  return env.CODEMAGIC_IOS_WORKFLOW_ID || env.CODEMAGIC_WORKFLOW_ID || DEFAULT_IOS_WORKFLOW;
+}
+
+/**
+ * Build the environment variables to inject at trigger time, read from the
+ * project's `.env`. These travel with the build so the cloud has the SAME
+ * production keys you use locally — the user does not have to fill the
+ * Codemagic variable groups by hand.
+ *
+ * RevenueCat SDK keys (appl_/goog_/test_) are public keys, safe to send this
+ * way. Real secrets (keystore, App Store key, service account) stay in the
+ * dashboard and are NOT sent here.
+ */
+function resolveReleaseVars(projectEnv) {
+  const vars = { ENV: 'prod' };
+
+  const passthrough = [
+    'BACKEND_URL',
+    'RC_TEST_KEY',
+    'RC_IOS_PROD_KEY',
+    'RC_ANDROID_PROD_KEY',
+    'MIXPANEL_TOKEN',
+    'SENTRY_DSN',
+  ];
+  for (const key of passthrough) {
+    const value = projectEnv[key];
+    if (value && value.trim()) vars[key] = value.trim();
+  }
+
+  // LLM chat endpoint may be named either way across template versions; the app
+  // reads AI_CHAT_ENDPOINT.
+  const endpoint = projectEnv.AI_CHAT_ENDPOINT || projectEnv.LLM_CHAT_ENDPOINT;
+  if (endpoint && endpoint.trim()) vars.AI_CHAT_ENDPOINT = endpoint.trim();
+
+  // Legacy single-key projects (pre test/prod split): promote a non-test key
+  // into the prod slot so release builds still get a real key.
+  if (!vars.RC_IOS_PROD_KEY && projectEnv.RC_IOS_API_KEY && !projectEnv.RC_IOS_API_KEY.startsWith('test_')) {
+    vars.RC_IOS_PROD_KEY = projectEnv.RC_IOS_API_KEY.trim();
+  }
+  if (!vars.RC_ANDROID_PROD_KEY && projectEnv.RC_ANDROID_API_KEY && !projectEnv.RC_ANDROID_API_KEY.startsWith('test_')) {
+    vars.RC_ANDROID_PROD_KEY = projectEnv.RC_ANDROID_API_KEY.trim();
+  }
+
+  // Numeric App Store id → APP_ID, used by the iOS workflow for build numbering.
+  if (projectEnv.APP_STORE_ID && projectEnv.APP_STORE_ID.trim()) {
+    vars.APP_ID = projectEnv.APP_STORE_ID.trim();
+  }
+
+  return vars;
+}
+
+/**
+ * Trigger one build. `variables` is injected via the build's environment so the
+ * cloud build carries the project's production keys.
+ */
+async function triggerBuild(env, { workflowId, branch, variables }) {
   const body = {
     appId: env.CODEMAGIC_APP_ID,
-    workflowId: env.CODEMAGIC_WORKFLOW_ID,
-    branch: env.CODEMAGIC_BRANCH || 'main',
+    workflowId,
+    branch: branch || env.CODEMAGIC_BRANCH || 'main',
   };
+  if (variables && Object.keys(variables).length > 0) {
+    body.environment = { variables };
+  }
   return httpsJson('POST', '/builds', env.CODEMAGIC_API_TOKEN, body);
 }
 
@@ -109,7 +213,6 @@ async function validateCodemagicSetup(projectDir) {
   }
   if (!env.CODEMAGIC_API_TOKEN) issues.push('missing_token');
   if (!env.CODEMAGIC_APP_ID) issues.push('missing_app_id');
-  if (!env.CODEMAGIC_WORKFLOW_ID) issues.push('missing_workflow');
   return { ok: issues.length === 0, issues, env };
 }
 
@@ -118,9 +221,15 @@ module.exports = {
   CODEMAGIC_API,
   URL_CODEMAGIC_APPS,
   URL_CODEMAGIC_API,
+  DEFAULT_IOS_WORKFLOW,
+  DEFAULT_ANDROID_WORKFLOW,
   codemagicReleaseDocPath,
   loadCodemagicEnv,
+  loadProjectEnv,
   writeCodemagicEnv,
+  listApps,
+  workflowIdFor,
+  resolveReleaseVars,
   triggerBuild,
   getBuildStatus,
   validateCodemagicSetup,

package/lib/utils/i18n/messages-en.js

@@ -389,12 +389,18 @@ module.exports = {
     'cli.command.ios.help.before': 'How to publish to the App Store:\n  1) kasy ios configure  → do this once (saves Apple credentials)\n  2) kasy ios release    → run for each new version (build + upload)\n\nUse "build" to only generate the IPA, "clean" if a build fails.\n',
     'cli.command.codemagic.description': 'Build the app in the cloud (no Mac needed)',
     'cli.command.codemagic.configure.description': 'Configure Codemagic API credentials',
-    'cli.command.codemagic.release.description': 'Start a Codemagic iOS workflow build',
+    'cli.command.codemagic.release.description': 'Start a cloud build (iOS, Android, or both)',
+    'cli.command.codemagic.release.iosOption': 'Build only iOS',
+    'cli.command.codemagic.release.androidOption': 'Build only Android',
+    'cli.command.codemagic.release.platformPick': 'Which platform do you want to build?',
+    'cli.command.codemagic.release.platform.both': 'iOS + Android',
+    'cli.command.codemagic.release.platform.ios': 'iOS only',
+    'cli.command.codemagic.release.platform.android': 'Android only',
     'cli.command.codemagic.status.description': 'Show Codemagic build status by ID',
     'cli.command.codemagic.picker.intro': 'Build in the cloud with Codemagic',
     'cli.command.codemagic.picker.message': 'What do you want to do?',
     'cli.command.codemagic.picker.statusHint': 'Asks for the build ID',
-    'cli.command.codemagic.help.before': 'How to build with Codemagic (no Mac needed):\n  1) kasy codemagic configure  → do this once (saves API token)\n  2) kasy codemagic release    → starts a cloud build for each version\n\nUse "status <buildId>" to check the progress of a running build.\n',
+    'cli.command.codemagic.help.before': 'How to build with Codemagic (no Mac needed):\n  1) kasy codemagic configure  → do this once (saves API token + app)\n  2) kasy codemagic release    → cloud build for each version\n       kasy codemagic release --ios       (iOS only)\n       kasy codemagic release --android   (Android only)\n\nUse "status <buildId>" to check the progress of a running build.\n',
 
     'ios.configure.title': 'iOS App Store — setup',
     'ios.configure.bundleId': 'Bundle ID',
@@ -456,19 +462,24 @@ module.exports = {
     'codemagic.configure.title': 'Codemagic — setup',
     'codemagic.configure.doc': 'Guide',
     'codemagic.configure.checklist': 'Complete signing + App Store Connect in the Codemagic dashboard (see guide).',
-    'codemagic.configure.openingLinks': 'Opening Codemagic in your browser…',
+    'codemagic.configure.openingToken': 'Opening Codemagic settings — copy your API token…',
     'codemagic.configure.q.token': 'Codemagic API token',
     'codemagic.configure.q.appId': 'Codemagic App ID',
-    'codemagic.configure.q.workflowId': 'Workflow ID (from codemagic.yaml)',
     'codemagic.configure.q.branch': 'Git branch to build',
     'codemagic.configure.q.required': 'Required',
+    'codemagic.configure.validating': 'Checking token and loading your apps…',
+    'codemagic.configure.validated': 'Token OK',
+    'codemagic.configure.tokenInvalid': 'Could not validate the token',
+    'codemagic.configure.noApps': 'No apps found on this account. Connect your repository in the Codemagic dashboard first.',
+    'codemagic.configure.pickApp': 'Which app do you want to build?',
     'codemagic.configure.cancelled': 'Setup cancelled',
     'codemagic.configure.success': 'Codemagic credentials saved',
     'codemagic.configure.next': 'Next',
     'codemagic.release.title': 'Triggering Codemagic build…',
-    'codemagic.release.triggered': 'Build started',
-    'codemagic.release.spin': 'Starting build on Codemagic…',
-    'codemagic.release.spinDone': 'Build queued on Codemagic',
+    'codemagic.release.spinPlatform': 'Starting {platform} build on Codemagic…',
+    'codemagic.release.triggeredPlatform': '{platform} build queued on Codemagic',
+    'codemagic.release.noIosKey': 'No iOS production RevenueCat key (RC_IOS_PROD_KEY) in .env — subscriptions may not load in the build.',
+    'codemagic.release.noAndroidKey': 'No Android production RevenueCat key (RC_ANDROID_PROD_KEY) in .env — subscriptions may not load in the build.',
     'codemagic.status.title': 'Build status',
     'codemagic.status.usage': 'Usage: kasy codemagic status <buildId>',
     'codemagic.status.spin': 'Fetching build status…',

package/lib/utils/i18n/messages-es.js

@@ -391,12 +391,18 @@ module.exports = {
     'cli.command.ios.help.before': 'Cómo publicar en la App Store:\n  1) kasy ios configure  → hazlo una vez (guarda las credenciales Apple)\n  2) kasy ios release    → ejecuta en cada nueva versión (build + subida)\n\nUsa "build" si solo quieres generar el IPA, "clean" si un build falló.\n',
     'cli.command.codemagic.description': 'Compila la app en la nube (sin necesitar Mac)',
     'cli.command.codemagic.configure.description': 'Configurar credenciales API de Codemagic',
-    'cli.command.codemagic.release.description': 'Iniciar build del workflow iOS en Codemagic',
+    'cli.command.codemagic.release.description': 'Iniciar build en la nube (iOS, Android o ambos)',
+    'cli.command.codemagic.release.iosOption': 'Compilar solo iOS',
+    'cli.command.codemagic.release.androidOption': 'Compilar solo Android',
+    'cli.command.codemagic.release.platformPick': '¿Qué plataforma quieres compilar?',
+    'cli.command.codemagic.release.platform.both': 'iOS + Android',
+    'cli.command.codemagic.release.platform.ios': 'Solo iOS',
+    'cli.command.codemagic.release.platform.android': 'Solo Android',
     'cli.command.codemagic.status.description': 'Estado del build Codemagic por ID',
     'cli.command.codemagic.picker.intro': 'Compilar en la nube con Codemagic',
     'cli.command.codemagic.picker.message': '¿Qué quieres hacer?',
     'cli.command.codemagic.picker.statusHint': 'Pregunta el ID del build',
-    'cli.command.codemagic.help.before': 'Cómo compilar con Codemagic (sin necesitar Mac):\n  1) kasy codemagic configure  → hazlo una vez (guarda el token de la API)\n  2) kasy codemagic release    → inicia un build en la nube por versión\n\nUsa "status <buildId>" para seguir el progreso de un build.\n',
+    'cli.command.codemagic.help.before': 'Cómo compilar con Codemagic (sin necesitar Mac):\n  1) kasy codemagic configure  → hazlo una vez (guarda el token de la API + app)\n  2) kasy codemagic release    → build en la nube por versión\n       kasy codemagic release --ios       (solo iOS)\n       kasy codemagic release --android   (solo Android)\n\nUsa "status <buildId>" para seguir el progreso de un build.\n',
 
     'ios.configure.title': 'App Store iOS — configuración',
     'ios.configure.bundleId': 'Bundle ID',
@@ -458,19 +464,24 @@ module.exports = {
     'codemagic.configure.title': 'Codemagic — configuración',
     'codemagic.configure.doc': 'Guía',
     'codemagic.configure.checklist': 'Complete firma + App Store Connect en el panel Codemagic (vea la guía).',
-    'codemagic.configure.openingLinks': 'Abriendo Codemagic en el navegador…',
+    'codemagic.configure.openingToken': 'Abriendo la configuración de Codemagic — copia tu token de la API…',
     'codemagic.configure.q.token': 'Token API de Codemagic',
     'codemagic.configure.q.appId': 'App ID en Codemagic',
-    'codemagic.configure.q.workflowId': 'Workflow ID (de codemagic.yaml)',
     'codemagic.configure.q.branch': 'Rama Git para build',
     'codemagic.configure.q.required': 'Obligatorio',
+    'codemagic.configure.validating': 'Verificando el token y cargando tus apps…',
+    'codemagic.configure.validated': 'Token válido',
+    'codemagic.configure.tokenInvalid': 'No se pudo validar el token',
+    'codemagic.configure.noApps': 'No se encontraron apps en esta cuenta. Conecta tu repositorio en el panel de Codemagic primero.',
+    'codemagic.configure.pickApp': '¿Qué app quieres compilar?',
     'codemagic.configure.cancelled': 'Configuración cancelada',
     'codemagic.configure.success': 'Credenciales Codemagic guardadas',
     'codemagic.configure.next': 'Siguiente paso',
     'codemagic.release.title': 'Disparando build en Codemagic…',
-    'codemagic.release.triggered': 'Build iniciado',
-    'codemagic.release.spin': 'Iniciando build en Codemagic…',
-    'codemagic.release.spinDone': 'Build encolado en Codemagic',
+    'codemagic.release.spinPlatform': 'Iniciando build de {platform} en Codemagic…',
+    'codemagic.release.triggeredPlatform': 'Build de {platform} encolado en Codemagic',
+    'codemagic.release.noIosKey': 'Sin clave de producción iOS de RevenueCat (RC_IOS_PROD_KEY) en .env — las suscripciones pueden no cargar en el build.',
+    'codemagic.release.noAndroidKey': 'Sin clave de producción Android de RevenueCat (RC_ANDROID_PROD_KEY) en .env — las suscripciones pueden no cargar en el build.',
     'codemagic.status.title': 'Estado del build',
     'codemagic.status.usage': 'Uso: kasy codemagic status <buildId>',
     'codemagic.status.spin': 'Consultando estado del build…',

package/lib/utils/i18n/messages-pt.js

@@ -389,12 +389,18 @@ module.exports = {
     'cli.command.ios.help.before': 'Como publicar na App Store:\n  1) kasy ios configure  → faça isso uma vez (salva as credenciais Apple)\n  2) kasy ios release    → rode em cada nova versão (build + envio)\n\nUse "build" se quiser só gerar o IPA, "clean" se um build falhou.\n',
     'cli.command.codemagic.description': 'Compila o app na nuvem (sem precisar de Mac)',
     'cli.command.codemagic.configure.description': 'Configurar credenciais da API Codemagic',
-    'cli.command.codemagic.release.description': 'Iniciar build do workflow iOS no Codemagic',
+    'cli.command.codemagic.release.description': 'Iniciar build na nuvem (iOS, Android ou os dois)',
+    'cli.command.codemagic.release.iosOption': 'Compilar só o iOS',
+    'cli.command.codemagic.release.androidOption': 'Compilar só o Android',
+    'cli.command.codemagic.release.platformPick': 'Qual plataforma você quer compilar?',
+    'cli.command.codemagic.release.platform.both': 'iOS + Android',
+    'cli.command.codemagic.release.platform.ios': 'Só iOS',
+    'cli.command.codemagic.release.platform.android': 'Só Android',
     'cli.command.codemagic.status.description': 'Status do build Codemagic por ID',
     'cli.command.codemagic.picker.intro': 'Compilar na nuvem com Codemagic',
     'cli.command.codemagic.picker.message': 'O que você quer fazer?',
     'cli.command.codemagic.picker.statusHint': 'Pergunta o ID do build',
-    'cli.command.codemagic.help.before': 'Como compilar com Codemagic (sem precisar de Mac):\n  1) kasy codemagic configure  → faça isso uma vez (salva o token da API)\n  2) kasy codemagic release    → inicia um build na nuvem a cada versão\n\nUse "status <buildId>" para acompanhar o progresso de um build.\n',
+    'cli.command.codemagic.help.before': 'Como compilar com Codemagic (sem precisar de Mac):\n  1) kasy codemagic configure  → faça isso uma vez (salva o token da API + app)\n  2) kasy codemagic release    → build na nuvem a cada versão\n       kasy codemagic release --ios       (só iOS)\n       kasy codemagic release --android   (só Android)\n\nUse "status <buildId>" para acompanhar o progresso de um build.\n',
 
     'ios.configure.title': 'App Store iOS — configuração',
     'ios.configure.bundleId': 'Bundle ID',
@@ -456,19 +462,24 @@ module.exports = {
     'codemagic.configure.title': 'Codemagic — configuração',
     'codemagic.configure.doc': 'Guia',
     'codemagic.configure.checklist': 'Conclua assinatura + App Store Connect no painel Codemagic (veja o guia).',
-    'codemagic.configure.openingLinks': 'Abrindo Codemagic no navegador…',
+    'codemagic.configure.openingToken': 'Abrindo as configurações do Codemagic — copie o token da API…',
     'codemagic.configure.q.token': 'Token da API Codemagic',
     'codemagic.configure.q.appId': 'App ID no Codemagic',
-    'codemagic.configure.q.workflowId': 'Workflow ID (do codemagic.yaml)',
     'codemagic.configure.q.branch': 'Branch Git para build',
     'codemagic.configure.q.required': 'Obrigatório',
+    'codemagic.configure.validating': 'Verificando o token e carregando seus apps…',
+    'codemagic.configure.validated': 'Token válido',
+    'codemagic.configure.tokenInvalid': 'Não foi possível validar o token',
+    'codemagic.configure.noApps': 'Nenhum app encontrado nesta conta. Conecte seu repositório no painel do Codemagic primeiro.',
+    'codemagic.configure.pickApp': 'Qual app você quer compilar?',
     'codemagic.configure.cancelled': 'Configuração cancelada',
     'codemagic.configure.success': 'Credenciais Codemagic salvas',
     'codemagic.configure.next': 'Próximo passo',
     'codemagic.release.title': 'Disparando build no Codemagic…',
-    'codemagic.release.triggered': 'Build iniciado',
-    'codemagic.release.spin': 'Iniciando build no Codemagic…',
-    'codemagic.release.spinDone': 'Build enfileirado no Codemagic',
+    'codemagic.release.spinPlatform': 'Iniciando build de {platform} no Codemagic…',
+    'codemagic.release.triggeredPlatform': 'Build de {platform} enfileirado no Codemagic',
+    'codemagic.release.noIosKey': 'Sem chave de produção iOS do RevenueCat (RC_IOS_PROD_KEY) no .env — as assinaturas podem não carregar no build.',
+    'codemagic.release.noAndroidKey': 'Sem chave de produção Android do RevenueCat (RC_ANDROID_PROD_KEY) no .env — as assinaturas podem não carregar no build.',
     'codemagic.status.title': 'Status do build',
     'codemagic.status.usage': 'Uso: kasy codemagic status <buildId>',
     'codemagic.status.spin': 'Consultando status do build…',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kasy-cli",
-  "version": "1.31.6",
+  "version": "1.31.8",
   "description": "CLI for scaffolding production-ready Flutter SaaS apps with Firebase, Supabase, or API REST backends.",
   "bin": {
     "kasy": "./bin/kasy.js"

package/templates/firebase/codemagic.yaml

@@ -0,0 +1,211 @@
+# Codemagic CI/CD — shipped by the Kasy `ci` feature.
+#
+# iOS and Android run as SEPARATE workflows (ios-workflow / android-workflow),
+# so you can build and publish each platform on its own. `kasy codemagic release`
+# triggers them: `--ios`, `--android`, or both.
+#
+# App keys (RevenueCat, backend URL, Sentry, Mixpanel, App Store id) arrive as
+# ENVIRONMENT VARIABLES, two ways:
+#   1. `kasy codemagic release` injects them automatically from your local .env, or
+#   2. you store them in the Codemagic UI as variable groups.
+# The "Generate .env" step below rebuilds the app's .env asset from those vars,
+# so the build always has the production RevenueCat keys (appl_/goog_) — never
+# the test_ key. ENV=prod is also passed as a dart-define (compile-time const).
+#
+# What you still set up ONCE in the Codemagic dashboard (UI-only, by design):
+#   - Connect your Git repository (Add application)
+#   - iOS: App Store Connect integration (the Apple API key)
+#   - Android: upload the keystore + the Google Play service account JSON
+
+workflows:
+  android-workflow:
+    name: Android Workflow
+    instance_type: mac_mini_m1
+    max_build_duration: 120
+    environment:
+      android_signing:
+        - keystore_reference # <-- Reference name of the keystore you upload in the Codemagic UI
+      groups:
+        - google_play # <-- Group holding GOOGLE_PLAY_SERVICE_ACCOUNT_CREDENTIALS (and any app keys)
+      vars:
+        PACKAGE_NAME: com.aicrus.firebase.kit # <-- Your Android applicationId
+        GOOGLE_PLAY_TRACK: "internal" # <-- internal | alpha | beta | production
+      flutter: stable
+    triggering:
+      cancel_previous_builds: true
+      events:
+        - push
+      branch_patterns:
+        - pattern: '*'
+          include: false
+          source: false
+        - pattern: 'main'
+          include: true
+          source: true
+    scripts:
+      - name: Set up local.properties
+        script: |
+          echo "flutter.sdk=$HOME/programs/flutter" > "$CM_BUILD_DIR/android/local.properties"
+      - name: Get Flutter packages
+        script: |
+          flutter packages pub get
+      - name: Generate .env from build environment
+        script: |
+          # The app reads its config from a bundled .env asset at runtime. That
+          # file is gitignored (never in the repo), so recreate it here from the
+          # environment variables provided by `kasy codemagic release` or by a
+          # Codemagic variable group. In a release build the app uses the
+          # production RevenueCat key (appl_/goog_) from RC_*_PROD_KEY.
+          cat > "$CM_BUILD_DIR/.env" <<EOF
+          ENV=prod
+          BACKEND_URL=${BACKEND_URL:-}
+          AI_CHAT_ENDPOINT=${AI_CHAT_ENDPOINT:-}
+          RC_TEST_KEY=${RC_TEST_KEY:-}
+          RC_IOS_PROD_KEY=${RC_IOS_PROD_KEY:-}
+          RC_ANDROID_PROD_KEY=${RC_ANDROID_PROD_KEY:-}
+          MIXPANEL_TOKEN=${MIXPANEL_TOKEN:-}
+          SENTRY_DSN=${SENTRY_DSN:-}
+          APP_STORE_ID=${APP_STORE_ID:-}
+          EOF
+      - name: Unit tests
+        script: |
+          mkdir -p test-results
+          flutter test --machine > test-results/flutter.json
+        test_report: test-results/flutter.json
+      - name: Build AAB with Flutter
+        script: |
+          BUILD_NUMBER=$(($(google-play get-latest-build-number --package-name "$PACKAGE_NAME" --tracks="$GOOGLE_PLAY_TRACK") + 1))
+          flutter build appbundle --release \
+            --dart-define=ENV=prod \
+            --build-name=1.0.$BUILD_NUMBER \
+            --build-number=$BUILD_NUMBER
+    artifacts:
+      - build/**/outputs/**/*.aab
+      - build/**/outputs/**/mapping.txt
+      - flutter_drive.log
+    publishing:
+      email:
+        recipients:
+          -  # <-- Put your email here or add others recipients
+        notify:
+          success: true
+          failure: true
+      google_play:
+        credentials: $GOOGLE_PLAY_SERVICE_ACCOUNT_CREDENTIALS
+        track: $GOOGLE_PLAY_TRACK
+        submit_as_draft: true
+  ios-workflow:
+    name: iOS Workflow
+    instance_type: mac_mini_m1
+    max_build_duration: 120
+    integrations:
+      app_store_connect: codemagic # <-- Name of your App Store Connect integration (Codemagic UI)
+    environment:
+      ios_signing:
+        distribution_type: app_store
+        bundle_identifier: com.aicrus.firebase.kit # <-- Your iOS bundle identifier
+      # APP_ID (numeric App Store Connect id) and the app keys arrive as
+      # environment variables: `kasy codemagic release` sends them from your .env.
+      # No variable group is required for iOS (App Store auth uses the integration
+      # above). For dashboard/push-triggered builds, add the keys as environment
+      # variables in the Codemagic app settings and a `groups:` entry here.
+      flutter: stable
+      xcode: latest # <-- set to specific version e.g. 15.0 to avoid unexpected updates.
+      cocoapods: default
+    triggering:
+      cancel_previous_builds: true
+      events:
+        - push
+      branch_patterns:
+        - pattern: '*'
+          include: false
+          source: false
+        - pattern: 'main'
+          include: true
+          source: true
+    scripts:
+      - name: Set up code signing settings on Xcode project
+        script: |
+          xcode-project use-profiles
+      - name: Get Flutter packages
+        script: |
+          flutter packages pub get
+      - name: Install pods
+        script: |
+          find . -name "Podfile" -execdir pod install \;
+      - name: Validate Google Sign-In iOS URL scheme
+        script: |
+          GOOGLE_PLIST="ios/Runner/GoogleService-Info.plist"
+          INFO_PLIST="ios/Runner/Info.plist"
+          if [ -f "$GOOGLE_PLIST" ]; then
+            REVERSED_CLIENT_ID=$(/usr/libexec/PlistBuddy -c "Print :REVERSED_CLIENT_ID" "$GOOGLE_PLIST" 2>/dev/null || true)
+            if [ -z "$REVERSED_CLIENT_ID" ]; then
+              echo "REVERSED_CLIENT_ID not found in $GOOGLE_PLIST"
+              exit 1
+            fi
+            if ! /usr/libexec/PlistBuddy -c "Print :CFBundleURLTypes" "$INFO_PLIST" 2>/dev/null | grep -Fq "$REVERSED_CLIENT_ID"; then
+              echo "Google Sign-In iOS URL scheme mismatch."
+              echo "Expected CFBundleURLSchemes to include: $REVERSED_CLIENT_ID"
+              echo "Run flutterfire configure/project setup before building."
+              exit 1
+            fi
+          fi
+      - name: Generate .env from build environment
+        script: |
+          # See the Android workflow note above — recreate the bundled .env asset
+          # from environment variables so the release build gets the production
+          # RevenueCat key (appl_) instead of the test_ key.
+          cat > "$CM_BUILD_DIR/.env" <<EOF
+          ENV=prod
+          BACKEND_URL=${BACKEND_URL:-}
+          AI_CHAT_ENDPOINT=${AI_CHAT_ENDPOINT:-}
+          RC_TEST_KEY=${RC_TEST_KEY:-}
+          RC_IOS_PROD_KEY=${RC_IOS_PROD_KEY:-}
+          RC_ANDROID_PROD_KEY=${RC_ANDROID_PROD_KEY:-}
+          MIXPANEL_TOKEN=${MIXPANEL_TOKEN:-}
+          SENTRY_DSN=${SENTRY_DSN:-}
+          APP_STORE_ID=${APP_STORE_ID:-}
+          EOF
+      - name: Flutter analyze # <-- remove if you don't like flutter analyze
+        script: |
+          flutter analyze
+      - name: Flutter unit tests
+        script: |
+          flutter test
+        ignore_failure: false  # You should never build an app that has failing tests.
+      - name: Flutter build ipa and automatic versioning
+        script: |
+          flutter build ipa --release \
+            --dart-define=ENV=prod \
+            --build-name=1.0.0 \
+            --build-number=$(($(app-store-connect get-latest-app-store-build-number "$APP_ID") + 1)) \
+            --export-options-plist=/Users/builder/export_options.plist
+    artifacts:
+      - build/ios/ipa/*.ipa
+      - /tmp/xcodebuild_logs/*.log
+      - flutter_drive.log
+    publishing:
+      # See the following link for details about email publishing - https://docs.codemagic.io/publishing-yaml/distribution/#email
+      email:
+        recipients:
+          -  # <-- Put your email here or add others recipients
+        notify:
+          success: true
+          failure: true
+      app_store_connect:
+        # Use codemagic integration (easier)
+        auth: integration
+        # ====================================
+        ## Or push all keys manually here
+        ## ====================================
+        #api_key: $APP_STORE_CONNECT_PRIVATE_KEY
+        #key_id: $APP_STORE_CONNECT_KEY_IDENTIFIER
+        #issuer_id: $APP_STORE_CONNECT_ISSUER_ID
+        ## ====================================
+        submit_to_app_store: false # Set true to send to App Store review automatically
+        release_type: MANUAL
+        # Configuration related to TestFlight (optional)
+        # Note: This action is performed during post-processing.
+        submit_to_testflight: true
+        beta_groups: # Specify the names of beta tester groups that will get access to the build once it has passed beta review.
+          - kasy # <-- Put your beta group name here

package/templates/firebase/docs/codemagic-release.en.md

@@ -1,43 +1,64 @@
-# Publish iOS with Codemagic (no Mac)
+# Publish to the cloud with Codemagic (no Mac)
+
+Publishes **iOS** and **Android** through the Codemagic cloud. Each platform has
+its own workflow, so you can ship them separately or both together.
 
 ## Prerequisites
 
-- [Codemagic](https://codemagic.io) account
-- Git repository connected to Codemagic
-- Apple Developer account + app in App Store Connect
+- A [Codemagic](https://codemagic.io) account
+- A Git repository connected to Codemagic
+- iOS: Apple Developer account + app in App Store Connect
+- Android: app in Google Play Console + a signing keystore
 
-## 1. Add CI to the project (if missing)
+## 1. Add CI to the project (if you don't have it yet)
 
 ```bash
 kasy add ci
 ```
 
-Creates `codemagic.yaml` at the project root.
+This creates `codemagic.yaml` at the project root (`ios-workflow` and
+`android-workflow`).
+
+## 2. Set up in the Codemagic dashboard (once)
+
+These are secrets and can only be done in the dashboard — one time:
 
-## 2. Configure in the Codemagic dashboard
+1. Open [codemagic.io/apps](https://codemagic.io/apps) and **connect your repository**.
+2. **iOS** — *Integrations → App Store Connect*: connect the Apple API key. Its
+   name goes in `integrations: app_store_connect:` in `codemagic.yaml`.
+3. **Android** — *Code signing identities → Android keystores*: upload the
+   keystore with **Reference name** `keystore_reference` (matching `codemagic.yaml`).
+4. **Android** — upload the **Google Play service account** JSON as the secret
+   variable `GOOGLE_PLAY_SERVICE_ACCOUNT_CREDENTIALS` (group `google_play`).
 
-1. Open [codemagic.io/apps](https://codemagic.io/apps) and add your repository.
-2. **Code signing (iOS):** set up App Store distribution certificate and profile.
-3. **Integrations → App Store Connect:** link your Apple account.
-4. **Environment variables:** add to your variable group (e.g. `appstore_credentials`):
-   - `BACKEND_URL`, `SENTRY_DSN`, `RC_IOS_API_KEY`, `RC_ANDROID_API_KEY`, `MIXPANEL_TOKEN`
-5. In `codemagic.yaml`, set `APP_ID` (numeric App Store Connect app ID from the app URL).
+> The **app keys** (RevenueCat, backend, etc.) do **not** need to be filled in
+> the dashboard: `kasy codemagic release` sends them automatically from your
+> `.env`. If you'd rather trigger from the dashboard/push, add them to the
+> variable groups instead.
 
-## 3. Configure from the terminal
+## 3. Set up in the terminal (once)
 
 ```bash
 kasy codemagic configure
 ```
 
-Enter **API token** (Settings → Codemagic API), **App ID**, and **Workflow ID** (default `ios-workflow`).
+The wizard opens the **API token** page (Settings → Codemagic API), validates the
+token and **lists your apps** to pick from — no IDs to type. It saves everything
+to `.kasy/codemagic.env` (gitignored).
 
 ## 4. Trigger a build
 
 ```bash
-kasy codemagic release
+kasy codemagic release            # iOS + Android
+kasy codemagic release --ios      # iOS only
+kasy codemagic release --android  # Android only
 ```
 
-The cloud build runs and may upload to TestFlight per `codemagic.yaml`.
+The command reads your `.env` and carries the production keys (including the
+RevenueCat production key, `appl_`/`goog_`) with the trigger. A step in
+`codemagic.yaml` recreates the `.env` in the cloud before building, so the build
+ships with the right keys. Per `codemagic.yaml`, iOS goes to TestFlight and
+Android to the configured track (`internal` by default).
 
 ## Build status
 
@@ -45,6 +66,12 @@ The cloud build runs and may upload to TestFlight per `codemagic.yaml`.
 kasy codemagic status <buildId>
 ```
 
+## Can I use the Mac and Codemagic at the same time?
+
+Yes. They are two paths to the same store; they don't conflict. The build number
+is computed by the cloud (latest in the store + 1), so it rarely collides. For
+day-to-day, pick one main path.
+
 ## Local Mac
 
-If you have a Mac: [ios-release.md](./ios-release.md) and `kasy ios release`.
+If you have a Mac: see [ios-release.md](./ios-release.md) and `kasy ios release`.

package/templates/firebase/docs/codemagic-release.es.md

@@ -1,10 +1,14 @@
-# Publicar iOS con Codemagic (sin Mac)
+# Publicar en la nube con Codemagic (sin Mac)
+
+Publica **iOS** y **Android** por la nube de Codemagic. Cada plataforma tiene su
+propio workflow, así que puedes enviarlas por separado o las dos juntas.
 
 ## Requisitos
 
 - Cuenta [Codemagic](https://codemagic.io)
 - Repositorio Git conectado a Codemagic
-- Cuenta Apple Developer + app en App Store Connect
+- iOS: cuenta Apple Developer + app en App Store Connect
+- Android: app en Google Play Console + un keystore de firma
 
 ## 1. Agregar CI al proyecto (si falta)
 
@@ -12,32 +16,48 @@
 kasy add ci
 ```
 
-Crea `codemagic.yaml` en la raíz del proyecto.
+Crea `codemagic.yaml` en la raíz del proyecto (workflows `ios-workflow` y
+`android-workflow`).
+
+## 2. Configurar en el panel Codemagic (una vez)
+
+Estos elementos son secretos y solo se hacen en el panel — una vez:
 
-## 2. Configurar en el panel Codemagic
+1. Abre [codemagic.io/apps](https://codemagic.io/apps) y **conecta el repositorio**.
+2. **iOS** — *Integrations → App Store Connect*: conecta la clave de Apple. Su
+   nombre va en `integrations: app_store_connect:` en `codemagic.yaml`.
+3. **Android** — *Code signing identities → Android keystores*: sube el keystore
+   con el **Reference name** `keystore_reference` (igual que en `codemagic.yaml`).
+4. **Android** — sube el JSON de la **service account de Google Play** como
+   variable secreta `GOOGLE_PLAY_SERVICE_ACCOUNT_CREDENTIALS` (grupo `google_play`).
 
-1. Abre [codemagic.io/apps](https://codemagic.io/apps) y agrega el repositorio.
-2. **Code signing (iOS):** certificado y perfil de distribución App Store.
-3. **Integrations → App Store Connect:** vincula la cuenta Apple.
-4. **Environment variables:** en el grupo del app (ej. `appstore_credentials`):
-   - `BACKEND_URL`, `SENTRY_DSN`, `RC_IOS_API_KEY`, `RC_ANDROID_API_KEY`, `MIXPANEL_TOKEN`
-5. En `codemagic.yaml`, completa `APP_ID` (ID numérico del app en App Store Connect).
+> Las **claves del app** (RevenueCat, backend, etc.) **no** hace falta cargarlas
+> en el panel: `kasy codemagic release` las envía automáticamente desde tu `.env`.
+> Si prefieres disparar desde el panel/push, agrégalas a los grupos de variables.
 
-## 3. Configurar en la terminal
+## 3. Configurar en la terminal (una vez)
 
 ```bash
 kasy codemagic configure
 ```
 
-Indica **API token** (Settings → Codemagic API), **App ID** y **Workflow ID** (`ios-workflow` por defecto).
+El asistente abre la página del **API token** (Settings → Codemagic API), valida
+el token y **lista tus apps** para elegir — sin escribir IDs. Guarda todo en
+`.kasy/codemagic.env` (no versionado).
 
 ## 4. Disparar build
 
 ```bash
-kasy codemagic release
+kasy codemagic release            # iOS + Android
+kasy codemagic release --ios      # solo iOS
+kasy codemagic release --android  # solo Android
 ```
 
-El build en la nube puede subir a TestFlight según `codemagic.yaml`.
+El comando lee tu `.env` y lleva las claves de producción (incluida la clave de
+producción de RevenueCat, `appl_`/`goog_`) junto al disparo. Un paso del
+`codemagic.yaml` recrea el `.env` en la nube antes de compilar, así el build sale
+con las claves correctas. Según `codemagic.yaml`, iOS va a TestFlight y Android al
+track configurado (`internal` por defecto).
 
 ## Estado del build
 
@@ -45,6 +65,12 @@ El build en la nube puede subir a TestFlight según `codemagic.yaml`.
 kasy codemagic status <buildId>
 ```
 
+## ¿Puedo usar el Mac y Codemagic a la vez?
+
+Sí. Son dos caminos hacia la misma tienda; no entran en conflicto. El número de
+build lo calcula la nube (último en la tienda + 1), por lo que rara vez choca.
+Para el día a día, elige un camino principal.
+
 ## Mac local
 
 Si tienes Mac: [ios-release.md](./ios-release.md) y `kasy ios release`.

package/templates/firebase/docs/codemagic-release.pt.md

@@ -1,10 +1,14 @@
-# Publicar iOS com Codemagic (sem Mac)
+# Publicar na nuvem com Codemagic (sem Mac)
+
+Publica **iOS** e **Android** pela nuvem do Codemagic. Cada plataforma tem seu
+próprio workflow, então você envia separado ou os dois juntos.
 
 ## Pré-requisitos
 
 - Conta [Codemagic](https://codemagic.io)
 - Repositório Git conectado ao Codemagic
-- Conta Apple Developer + app no App Store Connect
+- iOS: conta Apple Developer + app no App Store Connect
+- Android: app no Google Play Console + keystore de assinatura
 
 ## 1. Adicionar CI ao projeto (se ainda não tiver)
 
@@ -12,32 +16,49 @@
 kasy add ci
 ```
 
-Isso cria `codemagic.yaml` na raiz do projeto.
+Isso cria o `codemagic.yaml` na raiz do projeto (workflows `ios-workflow` e
+`android-workflow`).
+
+## 2. Configurar no painel Codemagic (uma vez)
+
+Estes itens são secretos e só podem ser feitos no painel — uma vez:
 
-## 2. Configurar no painel Codemagic
+1. Abra [codemagic.io/apps](https://codemagic.io/apps) e **conecte o repositório**.
+2. **iOS** — *Integrations → App Store Connect*: conecte a chave da Apple. No
+   `codemagic.yaml`, o nome dela vai em `integrations: app_store_connect:`.
+3. **Android** — *Code signing identities → Android keystores*: suba o keystore
+   com o **Reference name** `keystore_reference` (o mesmo usado no `codemagic.yaml`).
+4. **Android** — suba o JSON da **service account do Google Play** como variável
+   secreta `GOOGLE_PLAY_SERVICE_ACCOUNT_CREDENTIALS` (grupo `google_play`).
 
-1. Abra [codemagic.io/apps](https://codemagic.io/apps) e adicione o repositório.
-2. **Code signing (iOS):** configure certificado e perfil de distribuição App Store.
-3. **Integrations → App Store Connect:** conecte a conta Apple (recomendado).
-4. **Environment variables:** adicione no grupo do app (ex.: `appstore_credentials`):
-   - `BACKEND_URL`, `SENTRY_DSN`, `RC_IOS_API_KEY`, `RC_ANDROID_API_KEY`, `MIXPANEL_TOKEN`
-5. No `codemagic.yaml`, preencha `APP_ID` (ID numérico do app no App Store Connect — aparece na URL do app).
+> As **chaves do app** (RevenueCat, backend, etc.) **não** precisam ser
+> preenchidas no painel: o `kasy codemagic release` as envia automaticamente a
+> partir do seu `.env`. Se preferir disparar pelo painel/push, aí sim cadastre-as
+> nos grupos de variáveis.
 
-## 3. Configurar no terminal
+## 3. Configurar no terminal (uma vez)
 
 ```bash
 kasy codemagic configure
 ```
 
-Informe o **API token** (Settings → Codemagic API), **App ID** e **Workflow ID** (`ios-workflow` por padrão).
+O assistente abre a página do **token da API** (Settings → Codemagic API), valida
+o token e **lista os seus apps** para você escolher — sem digitar IDs. Salva tudo
+em `.kasy/codemagic.env` (não versionado).
 
 ## 4. Disparar build
 
 ```bash
-kasy codemagic release
+kasy codemagic release            # iOS + Android
+kasy codemagic release --ios      # só iOS
+kasy codemagic release --android  # só Android
 ```
 
-O build roda na nuvem e, conforme o `codemagic.yaml`, pode enviar para TestFlight automaticamente.
+O comando lê o seu `.env` e leva as chaves de produção (incluindo a chave de
+produção do RevenueCat, `appl_`/`goog_`) junto no disparo. Um passo do
+`codemagic.yaml` recria o `.env` na nuvem antes de compilar, então o build sai
+com as chaves certas. Conforme o `codemagic.yaml`, o iOS vai para o TestFlight e
+o Android para o track configurado (`internal` por padrão).
 
 ## Status do build
 
@@ -45,6 +66,12 @@ O build roda na nuvem e, conforme o `codemagic.yaml`, pode enviar para TestFligh
 kasy codemagic status <buildId>
 ```
 
+## Posso usar o Mac e o Codemagic ao mesmo tempo?
+
+Pode. São dois caminhos para a mesma loja, não conflitam. O número do build é
+calculado pela própria nuvem (último na loja + 1), então dificilmente colide.
+No dia a dia, escolha um caminho principal.
+
 ## Mac local
 
-Se tiver Mac: [ios-release.md](./ios-release.md) e `kasy ios release`.
+Se tiver Mac: veja [ios-release.md](./ios-release.md) e `kasy ios release`.

package/templates/firebase/pubspec.yaml

@@ -79,6 +79,13 @@ dependencies:
   open_filex: ^4.7.0
   package_info_plus: ^8.3.0
   path_provider: ^2.1.5
+  # Pin the Apple impl of path_provider below 2.6.0/2.5.0. Those versions pull in
+  # objective_c via "native assets", whose build hook is unquoted and breaks every
+  # build on Windows when the username has a space (C:\Users\John Silva) — even a
+  # Chrome/web run, where the Apple-only hook is dead weight. 2.5.1 is the last
+  # release without objective_c (added in 2.5.0, reverted in 2.5.1, re-added in
+  # 2.6.0). Drop this pin once the upstream web-target regression is fixed.
+  path_provider_foundation: 2.5.1
   permission_handler: ^12.0.1
   provider: ^6.1.0
   pub_semver: ^2.2.0