codemagic.yaml

definitions:
  instance_mac_mini_m2: &instance_mac_mini_m2
    instance_type: mac_mini_m2
    max_build_duration: 30

  env_versions: &env_versions
    # Flutter version is managed by FVM (Flutter Version Manager) and specified in .fvmrc
    xcode: 26.6
    java: 21

  scripts:
    - &verify_flutter_version
      name: Verify Flutter version
      script: |
        # Verify Flutter version
        echo "Verify Flutter version..."

        REQUIRED_VERSION=$(jq -r '.flutter' .fvmrc)
        echo "REQUIRED_VERSION: $REQUIRED_VERSION"
        CURRENT_VERSION=$(fvm flutter --version | grep -m 1 "^Flutter" | awk '{print $2}')
        echo "CURRENT_VERSION: $CURRENT_VERSION"

        if [ "$CURRENT_VERSION" != "$REQUIRED_VERSION" ]; then
            echo "Error: Flutter version $REQUIRED_VERSION is required (current: $CURRENT_VERSION)"
            exit 1
        else
            echo "Required version: $REQUIRED_VERSION == Current version: $CURRENT_VERSION"
            echo "Flutter version is correct"
        fi
      working_directory: recipients_app

workflows:
  android-staging-workflow:
    name: Android Staging (Google Play Console)
    <<: *instance_mac_mini_m2

    environment:
      android_signing:
        - social_income_upload_keystore.jks
      vars:
        PACKAGE_NAME: "org.socialincome.app.stage"
        GOOGLE_PLAY_TRACK: internal
      groups:
        - slack
        - app-config-stage
        - firebase
        - google-play # <-- (Includes GOOGLE_PLAY_SERVICE_ACCOUNT_CREDENTIALS)
      <<: *env_versions

    cache:
      cache_paths:
        - $HOME/.gradle/caches
        - $HOME/.pub-cache

    scripts:
      - name: Set build number automatically from Google Play
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          # Get the latest build number from Google Play and increment it by 1
          NEW_BUILD_NUMBER=$(($(google-play get-latest-build-number --package-name "$PACKAGE_NAME" --tracks="$GOOGLE_PLAY_TRACK") + 1))
          if [ -z "$NEW_BUILD_NUMBER" ]; then
            echo "Missing build number!"
            exit 1
          fi

          cd $CM_BUILD_DIR/recipients_app
          echo "Change the build number in pubspec.yaml"
          sed -i '' -E "s/(version: [0-9]+\.[0-9]+\.[0-9]+\+)[0-9]+/\1$NEW_BUILD_NUMBER/" "./pubspec.yaml"
      - name: Load Firebase Options file
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          cd $CM_BUILD_DIR/recipients_app/lib
          printf '%s' "$FIREBASE_OPTIONS" > firebase_options_stage.dart
      - name: Load Firebase configuration
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          mkdir -p $CM_BUILD_DIR/recipients_app/android/app/src/stage
          cd $CM_BUILD_DIR/recipients_app/android/app/src/stage
          printf '%s' "$ANDROID_FIREBASE_SECRET" > google-services.json
      # - name: Decode Google credentials
      #   script: |
      #     echo $FIREBASE_APP_DISTRIBUTION_SERVICE_ACCOUNT > $GOOGLE_APPLICATION_CREDENTIALS
      - name: Configure FVM
        script: |
          brew tap leoafarias/fvm && brew install fvm
          cd $CM_BUILD_DIR/recipients_app
          fvm install && fvm use
      - *verify_flutter_version
      - name: Get Flutter packages
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          make get
        working_directory: recipients_app
      - name: Build AAB with Flutter
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          # Build the Flutter app
          fvm flutter build appbundle --release \
            --flavor stage \
            -t lib/main_stage.dart \
            --dart-define=BASE_URL=$BASE_URL \
            --dart-define=SENTRY_URL=$SENTRY_URL
        working_directory: recipients_app
      - name: Generate universal APK from AAB
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          android-app-bundle build-universal-apk \
            --bundle 'build/**/outputs/bundle/stageRelease/**/*.aab' \
            --ks $CM_KEYSTORE_PATH \
            --ks-pass $CM_KEYSTORE_PASSWORD \
            --ks-key-alias $CM_KEY_ALIAS \
            --key-pass $CM_KEY_PASSWORD \
        working_directory: recipients_app

    artifacts:
      - recipients_app/build/**/outputs/bundle/stageRelease/**/*.apk
      - recipients_app/build/**/outputs/bundle/stageRelease/**/*.aab
      - recipients_app/build/**/outputs/**/mapping.txt

    publishing:
      google_play:
        credentials: $GOOGLE_PLAY_SERVICE_ACCOUNT_CREDENTIALS
        track: internal
        submit_as_draft: false
      # Firebase App Distribution publishing is disabled because since we use Firebase AppCheck with Play Integrity, we cannot use Firebase App Distribution for our internal testing anymore.
      # When using Play Integrity the app must be distributed by the Google Play Store. So we disabled Firebase App Distribution for now.
      # firebase:
      #   firebase_service_account: $FIREBASE_APP_DISTRIBUTION_SERVICE_ACCOUNT
      #   android:
      #     app_id: 1:51495651779:android:08ef862a962bc041185576
      #     groups:
      #       - internal-testers
      #     artifact_type: "apk"

      # Notifications
      email: # See the following link for details about email publishing - https://docs.codemagic.io/publishing-yaml/distribution/#email
        recipients:
          - sandino@socialincome.org
        notify:
          success: true # To receive a notification when a build succeeds
          failure: false # To not receive a notification when a build fails
      slack: # See the following link about how to connect your Slack account - https://docs.codemagic.io/publishing-yaml/distribution/#slack
        channel: $SLACK_CHANNEL_NAME
        notify_on_build_start: false
        notify:
          success: true # To receive a notification when a build succeeds
          failure: true # To not receive a notification when a build fails

  android-production-workflow:
    name: Android Production
    <<: *instance_mac_mini_m2

    environment:
      android_signing:
        - social_income_upload_keystore.jks
      vars:
        PACKAGE_NAME: "org.socialincome.app"
        GOOGLE_PLAY_TRACK: internal
      groups:
        - slack
        - app-config-prod
        - google-play # <-- (Includes GOOGLE_PLAY_SERVICE_ACCOUNT_CREDENTIALS)
      <<: *env_versions

    cache:
      cache_paths:
        - $HOME/.gradle/caches
        - $HOME/.pub-cache

    scripts:
      - name: Set build number automatically from Google Play
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          # Get the latest build number from Google Play and increment it by 1
          NEW_BUILD_NUMBER=$(($(google-play get-latest-build-number --package-name "$PACKAGE_NAME" --tracks="$GOOGLE_PLAY_TRACK") + 1))
          if [ -z "$NEW_BUILD_NUMBER" ]; then
            echo "Missing build number!"
            exit 1
          fi

          cd $CM_BUILD_DIR/recipients_app
          echo "Change the build number in pubspec.yaml"
          sed -i '' -E "s/(version: [0-9]+\.[0-9]+\.[0-9]+\+)[0-9]+/\1$NEW_BUILD_NUMBER/" "./pubspec.yaml"
      - name: Load Firebase Options file
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          cd $CM_BUILD_DIR/recipients_app/lib
          printf '%s' "$FIREBASE_OPTIONS" > firebase_options_prod.dart
      - name: Load Firebase configuration
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          mkdir -p $CM_BUILD_DIR/recipients_app/android/app/src/prod
          cd $CM_BUILD_DIR/recipients_app/android/app/src/prod
          printf '%s' "$ANDROID_FIREBASE_SECRET" > google-services.json
      - name: Configure FVM
        script: |
          brew tap leoafarias/fvm && brew install fvm
          cd $CM_BUILD_DIR/recipients_app
          fvm install && fvm use
      - *verify_flutter_version
      - name: Get Flutter packages
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command
          make get
        working_directory: recipients_app
      - name: Build AAB with Flutter
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          # Build the Flutter AAB app
          fvm flutter build appbundle --release \
            --flavor prod \
            -t lib/main_prod.dart \
            --dart-define=BASE_URL=$BASE_URL \
            --dart-define=SENTRY_URL=$SENTRY_URL
        working_directory: recipients_app

    artifacts:
      - recipients_app/build/**/outputs/bundle/prodRelease/**/*.aab
      - recipients_app/build/**/outputs/**/mapping.txt

    publishing:
      google_play:
        credentials: $GOOGLE_PLAY_SERVICE_ACCOUNT_CREDENTIALS
        track: internal
        submit_as_draft: false

      # Notifications
      email: # See the following link for details about email publishing - https://docs.codemagic.io/publishing-yaml/distribution/#email
        recipients:
          #- sandino@socialincome.org
          - karin@karinberg.de
        notify:
          success: true # To receive a notification when a build succeeds
          failure: false # To not receive a notification when a build fails
      slack: # See the following link about how to connect your Slack account - https://docs.codemagic.io/publishing-yaml/distribution/#slack
        channel: $SLACK_CHANNEL_NAME
        notify_on_build_start: false
        notify:
          success: true # To receive a notification when a build succeeds
          failure: true # To not receive a notification when a build fails

  ios-staging-testflight-workflow:
    name: iOS Staging (Test Flight)
    <<: *instance_mac_mini_m2

    integrations:
      app_store_connect: Social Income Recipient App

    environment:
      ios_signing:
        distribution_type: app_store
        bundle_identifier: org.socialincome.app.stage
      groups:
        - slack
        - app-config-stage
        - firebase
      vars:
        APP_STORE_APPLE_ID: 6464113329 # Apple ID of App "Stage Social Income"
      <<: *env_versions

    cache:
      cache_paths:
        - $HOME/.pub-cache
        - $HOME/Library/Caches/org.swift.swiftpm

    scripts:
      - name: Set build number automatically from App Store Connect
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          # Get the latest build number from App Store Connect and increment it by 1
          NEW_BUILD_NUMBER=$(($(app-store-connect get-latest-testflight-build-number --not-expired "$APP_STORE_APPLE_ID") + 1))
          if [ -z "$NEW_BUILD_NUMBER" ]; then
            echo "Missing build number!"
            exit 1
          fi

          cd $CM_BUILD_DIR/recipients_app
          echo "Change the build number in pubspec.yaml"
          sed -i '' -E "s/(version: [0-9]+\.[0-9]+\.[0-9]+\+)[0-9]+/\1$NEW_BUILD_NUMBER/" "./pubspec.yaml"
      - name: Load Firebase Options file
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          cd $CM_BUILD_DIR/recipients_app/lib
          printf '%s' "$FIREBASE_OPTIONS" > firebase_options_stage.dart
      - name: Load Firebase configuration
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          cd $CM_BUILD_DIR/recipients_app/ios
          mkdir -p flavors/stage
          printf '%s' "$IOS_FIREBASE_SECRET" > flavors/stage/GoogleService-Info.plist
      - name: Load Firebase.json
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          cd $CM_BUILD_DIR/recipients_app
          printf '%s' "$firebase_json" > firebase.json
      - name: Set up code signing settings on Xcode project
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          xcode-project use-profiles \
            --archive-method=app-store \
            --export-options-plist=$CM_BUILD_DIR/recipients_app/ios/export_options.plist

          # Print the export options plist
          more $CM_BUILD_DIR/recipients_app/ios/export_options.plist
      - name: Configure FVM
        script: |
          brew tap leoafarias/fvm && brew install fvm
          cd $CM_BUILD_DIR/recipients_app
          fvm install && fvm use
      - *verify_flutter_version
      - name: Install FlutterFire CLI
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          fvm dart pub global activate flutterfire_cli
        working_directory: recipients_app
      - name: Get Flutter packages
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command
          make get
        working_directory: recipients_app
      - name: Flutter build ipa
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          # Build the Flutter iOS app
          fvm flutter build ipa --release \
            --flavor stage \
            -t lib/main_stage.dart \
            --dart-define=BASE_URL=$BASE_URL \
            --dart-define=SENTRY_URL=$SENTRY_URL \
            --export-options-plist=$CM_BUILD_DIR/recipients_app/ios/export_options.plist
        working_directory: recipients_app

    artifacts:
      - recipients_app/build/ios/ipa/*.ipa
      - /tmp/xcodebuild_logs/*.log

    publishing:
      # Publish to Apple's Testflight via AppStore Connect
      app_store_connect:
        # Use referenced App Store Connect API key from above to authenticate binary upload
        auth: integration
        # Whether or not to submit the uploaded build to TestFlight beta review.
        # Note: This action is performed during post-processing.
        submit_to_testflight: false

      # Notifications
      email: # See the following link for details about email publishing - https://docs.codemagic.io/publishing-yaml/distribution/#email
        recipients:
          - sandino@socialincome.org
        notify:
          success: true # To receive a notification when a build succeeds
          failure: false # To not receive a notification when a build fails
      slack: # See the following link about how to connect your Slack account - https://docs.codemagic.io/publishing-yaml/distribution/#slack
        channel: $SLACK_CHANNEL_NAME
        notify_on_build_start: false
        notify:
          success: true # To receive a notification when a build succeeds
          failure: true # To not receive a notification when a build fails

  ios-staging-firebase-app-distribution-workflow:
    name: iOS Staging (Firebase App Distribution)
    <<: *instance_mac_mini_m2

    integrations:
      app_store_connect: Social Income Recipient App

    environment:
      ios_signing:
        distribution_type: ad_hoc
        bundle_identifier: org.socialincome.app.stage
      groups:
        - slack
        - app-config-stage
        - firebase
      vars:
        APP_STORE_APPLE_ID: 6464113329 # Apple ID of App "Stage Social Income"
      <<: *env_versions

    cache:
      cache_paths:
        - $HOME/.pub-cache
        - $HOME/Library/Caches/org.swift.swiftpm

    scripts:
      # - name: Set up keychain to be used for code signing using Codemagic CLI 'keychain' command
      #   script: keychain initialize
      # - name: Fetch signing files
      #   script: |
      #     app-store-connect fetch-signing-files "org.socialincome.app.stage" \
      #       --type IOS_APP_ADHOC \
      #       --create
      # - name: Set up signing certificate
      #   script: keychain add-certificates
      - name: Set build number automatically from App Store Connect
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          # Get the latest build number from App Store Connect and increment it by 1
          NEW_BUILD_NUMBER=$(($(app-store-connect get-latest-testflight-build-number --not-expired "$APP_STORE_APPLE_ID") + 1))
          if [ -z "$NEW_BUILD_NUMBER" ]; then
            echo "Missing build number!"
            exit 1
          fi

          cd $CM_BUILD_DIR/recipients_app
          echo "Change the build number in pubspec.yaml"
          sed -i '' -E "s/(version: [0-9]+\.[0-9]+\.[0-9]+\+)[0-9]+/\1$NEW_BUILD_NUMBER/" "./pubspec.yaml"
      - name: Load Firebase Options file
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          cd $CM_BUILD_DIR/recipients_app/lib
          printf '%s' "$FIREBASE_OPTIONS" > firebase_options_stage.dart
      - name: Load Firebase configuration
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          cd $CM_BUILD_DIR/recipients_app/ios
          mkdir -p flavors/stage
          printf '%s' "$IOS_FIREBASE_SECRET" > flavors/stage/GoogleService-Info.plist
      - name: Load Firebase.json
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          cd $CM_BUILD_DIR/recipients_app
          printf '%s' "$firebase_json" > firebase.json
      - name: Set up code signing settings on Xcode project
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          xcode-project use-profiles \
            --archive-method=ad-hoc \
            --export-options-plist=$CM_BUILD_DIR/recipients_app/ios/export_options.plist

          # Print the export options plist
          more $CM_BUILD_DIR/recipients_app/ios/export_options.plist
      - name: Configure FVM
        script: |
          brew tap leoafarias/fvm && brew install fvm
          cd $CM_BUILD_DIR/recipients_app
          fvm install && fvm use
      - *verify_flutter_version
      - name: Install FlutterFire CLI
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          fvm dart pub global activate flutterfire_cli
        working_directory: recipients_app
      - name: Get Flutter packages
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command
          make get
        working_directory: recipients_app
      - name: Flutter build ipa
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          # Build the Flutter iOS app
          fvm flutter build ipa --release \
            --flavor stage \
            -t lib/main_stage.dart \
            --dart-define=BASE_URL=$BASE_URL \
            --dart-define=SENTRY_URL=$SENTRY_URL \
            --export-options-plist=$CM_BUILD_DIR/recipients_app/ios/export_options.plist
        working_directory: recipients_app

    artifacts:
      - recipients_app/build/ios/ipa/*.ipa
      - /tmp/xcodebuild_logs/*.log

    publishing:
      # Publish to Firebase App Distribution
      firebase:
        firebase_service_account: $FIREBASE_APP_DISTRIBUTION_SERVICE_ACCOUNT
        ios:
          app_id: 1:51495651779:ios:d4d28e75065983fb185576
          groups:
            - internal-testers

      # Notifications
      email: # See the following link for details about email publishing - https://docs.codemagic.io/publishing-yaml/distribution/#email
        recipients:
          - sandino@socialincome.org
        notify:
          success: true # To receive a notification when a build succeeds
          failure: false # To not receive a notification when a build fails
      slack: # See the following link about how to connect your Slack account - https://docs.codemagic.io/publishing-yaml/distribution/#slack
        channel: $SLACK_CHANNEL_NAME
        notify_on_build_start: false
        notify:
          success: true # To receive a notification when a build succeeds
          failure: true # To not receive a notification when a build fails

  ios-production-workflow:
    name: iOS Production
    <<: *instance_mac_mini_m2

    integrations:
      app_store_connect: Social Income Recipient App

    environment:
      ios_signing:
        distribution_type: app_store
        bundle_identifier: org.socialincome.app
      groups:
        - slack
        - app-config-prod
        - firebase
      vars:
        APP_STORE_APPLE_ID: 6444860109 # Apple ID of Prod App "Social Income"
      <<: *env_versions

    cache:
      cache_paths:
        - $HOME/.pub-cache
        - $HOME/Library/Caches/org.swift.swiftpm

    scripts:
      - name: Set build number automatically from App Store Connect
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          # Get the latest build number from App Store Connect and increment it by 1
          NEW_BUILD_NUMBER=$(($(app-store-connect get-latest-testflight-build-number "$APP_STORE_APPLE_ID") + 1))
          if [ -z "$NEW_BUILD_NUMBER" ]; then
            echo "Missing build number!"
            exit 1
          fi

          cd $CM_BUILD_DIR/recipients_app
          echo "Change the build number in pubspec.yaml"
          sed -i '' -E "s/(version: [0-9]+\.[0-9]+\.[0-9]+\+)[0-9]+/\1$NEW_BUILD_NUMBER/" "./pubspec.yaml"
      - name: Load Firebase Options file
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          cd $CM_BUILD_DIR/recipients_app/lib
          printf '%s' "$FIREBASE_OPTIONS" > firebase_options_prod.dart
      - name: Load Firebase configuration
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          cd $CM_BUILD_DIR/recipients_app/ios
          mkdir -p flavors/prod
          printf '%s' "$IOS_FIREBASE_SECRET" > flavors/prod/GoogleService-Info.plist
      - name: Load Firebase.json
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          cd $CM_BUILD_DIR/recipients_app
          printf '%s' "$firebase_json" > firebase.json
      - name: Set up code signing settings on Xcode project
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          xcode-project use-profiles \
            --archive-method=app-store \
            --export-options-plist=$CM_BUILD_DIR/recipients_app/ios/export_options.plist

          # Print the export options plist
          more $CM_BUILD_DIR/recipients_app/ios/export_options.plist
      - name: Configure FVM
        script: |
          brew tap leoafarias/fvm && brew install fvm
          cd $CM_BUILD_DIR/recipients_app
          fvm install && fvm use
      - *verify_flutter_version
      - name: Install FlutterFire CLI
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          fvm dart pub global activate flutterfire_cli
        working_directory: recipients_app
      - name: Get Flutter packages
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command
          make get
        working_directory: recipients_app
      - name: Flutter build ipa
        script: |
          #!/usr/bin/env sh
          set -e # exit on first failed command

          # Build the Flutter iOS app
          fvm flutter build ipa --release \
            --flavor prod \
            -t lib/main_prod.dart \
            --dart-define=BASE_URL=$BASE_URL \
            --dart-define=SENTRY_URL=$SENTRY_URL \
            --export-options-plist=$CM_BUILD_DIR/recipients_app/ios/export_options.plist
        working_directory: recipients_app

    artifacts:
      - recipients_app/build/ios/ipa/*.ipa
      - /tmp/xcodebuild_logs/*.log

    publishing:
      # Publish to Apple's Testflight via AppStore Connect
      app_store_connect:
        # Use referenced App Store Connect API key from above to authenticate binary upload
        auth: integration
        # Whether or not to submit the uploaded build to TestFlight beta review.
        # Note: This action is performed during post-processing.
        submit_to_testflight: false

      # Notifications
      email: # See the following link for details about email publishing - https://docs.codemagic.io/publishing-yaml/distribution/#email
        recipients:
          - sandino@socialincome.org
        notify:
          success: true # To receive a notification when a build succeeds
          failure: false # To not receive a notification when a build fails
      slack: # See the following link about how to connect your Slack account - https://docs.codemagic.io/publishing-yaml/distribution/#slack
        channel: $SLACK_CHANNEL_NAME
        notify_on_build_start: false
        notify:
          success: true # To receive a notification when a build succeeds
          failure: true # To not receive a notification when a build fails