mobile-eas-preview.yml

name: Mobile EAS Preview

on:
  pull_request:
    types: [opened, reopened, synchronize, labeled]

jobs:
  preview:
    name: EAS Preview
    if: |
      contains(github.event.pull_request.labels.*.name, '🚀 Mobile Continuous Deployment') &&
      (github.event.action != 'labeled' || github.event.label.name == '🚀 Mobile Continuous Deployment')
    runs-on: ubuntu-24.04
    concurrency:
      group: mobile-eas-preview-${{ github.event.pull_request.number }}
      cancel-in-progress: true
    permissions:
      contents: read
      pull-requests: write
    env:
      APP_VARIANT: preview
      NODE_OPTIONS: --max-old-space-size=8192
      MOBILE_VERSION_POLICY: fingerprint
    steps:
      - id: expo-token
        name: Check for EXPO_TOKEN
        env:
          EXPO_TOKEN: ${{ secrets.EXPO_TOKEN }}
        run: |
          if [ -n "$EXPO_TOKEN" ]; then
            echo "present=true" >> "$GITHUB_OUTPUT"
          else
            echo "present=false" >> "$GITHUB_OUTPUT"
            echo "EXPO_TOKEN is not available; skipping EAS preview."
          fi

      - name: Checkout
        if: steps.expo-token.outputs.present == 'true'
        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
        with:
          fetch-depth: 0
          # No sparse-checkout here: it makes actions/checkout fetch with
          # --filter=blob:none, and eas-cli archives the project via
          # `git clone --depth 1 file://<workspace>`, which fails (exit 128)
          # when the partial clone can't serve the unfetched blobs.

      - name: Setup Vite+
        if: steps.expo-token.outputs.present == 'true'
        uses: voidzero-dev/setup-vp@250f29ce396baf5e8f24498e17c0dfdebabc26eb # v1.15.0
        with:
          node-version-file: package.json
          cache: true
          run-install: |
            args:
              - --filter=@t3tools/mobile...

      - name: Expose pnpm
        if: steps.expo-token.outputs.present == 'true'
        run: |
          pnpm_version="$(node --print "require('./package.json').packageManager.split('@').pop()")"
          vp_pnpm_bin="$HOME/.vite-plus/package_manager/pnpm/$pnpm_version/pnpm/bin"
          echo "$vp_pnpm_bin" >> "$GITHUB_PATH"
          "$vp_pnpm_bin/pnpm" --version

      - name: Setup EAS
        if: steps.expo-token.outputs.present == 'true'
        uses: expo/expo-github-action@c7b66a9c327a43a8fa7c0158e7f30d6040d2481e # 8.2.1
        with:
          # eas-cli 22 renamed `project` to `app` in build JSON, and
          # continuous-deploy-fingerprint still reads `build.project.ownerAccount`.
          # Unpin once https://github.com/expo/expo-github-action/issues/358 is fixed.
          eas-version: 21.8.0
          token: ${{ secrets.EXPO_TOKEN }}
          # npm, not pnpm: this only installs eas-cli into the action's own
          # tool dir, and pnpm 11 hard-fails that install on dtrace-provider's
          # ignored build script (no allowBuilds config outside the repo).
          packager: npm

      - name: Pull preview environment variables
        if: steps.expo-token.outputs.present == 'true'
        working-directory: apps/mobile
        env:
          EXPO_TOKEN: ${{ secrets.EXPO_TOKEN }}
        run: |
          eas env:pull preview --non-interactive
          # EAS Update disables dotenv loading. Keep the downloaded native config
          # in its process environment so Android build and OTA fingerprints match.
          node --input-type=module <<'NODE'
          import { appendFileSync, readFileSync } from "node:fs";
          import { parseEnv } from "node:util";
          const env = parseEnv(readFileSync(".env.local", "utf8"));
          const googleServicesFile = env.T3CODE_ANDROID_GOOGLE_SERVICES_FILE;
          if (googleServicesFile) {
            appendFileSync(process.env.GITHUB_ENV, `T3CODE_ANDROID_GOOGLE_SERVICES_FILE=${googleServicesFile}\n`);
          }
          NODE

      - name: Deploy with fingerprint check
        if: steps.expo-token.outputs.present == 'true'
        uses: expo/expo-github-action/continuous-deploy-fingerprint@eab7a230208c952974db8c3245cfd78402c7b385 # 9.0.0
        env:
          EXPO_TOKEN: ${{ secrets.EXPO_TOKEN }}
          # The Expo action otherwise suppresses the EAS command's failure output.
          RUNNER_DEBUG: "1"
        with:
          profile: preview:dev
          branch: pr-${{ github.event.pull_request.number }}
          platform: all
          environment: preview
          working-directory: apps/mobile
          github-token: ${{ secrets.GITHUB_TOKEN }}