feat: add CI and EAS Build workflows, configure expo-updates for OTA updates

Author: Lalit Sharma

.github/workflows/ci.yml

@@ -0,0 +1,43 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  ci:
+    name: Typecheck · Lint · Test
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 9
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: pnpm
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Typecheck
+        run: pnpm typecheck
+
+      - name: Lint
+        run: pnpm lint
+
+      - name: Test
+        run: pnpm test

.github/workflows/eas-build.yml

@@ -0,0 +1,130 @@
+name: EAS Build & Submit
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - "apps/mobile/**"
+      - "packages/**"
+      - "pnpm-lock.yaml"
+  workflow_dispatch:
+    inputs:
+      platform:
+        description: "Platform to build"
+        required: true
+        default: "all"
+        type: choice
+        options:
+          - all
+          - ios
+          - android
+      submit:
+        description: "Submit to stores after build"
+        required: false
+        default: false
+        type: boolean
+
+concurrency:
+  group: eas-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  ci:
+    name: CI checks
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 9
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: pnpm
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Typecheck
+        run: pnpm typecheck
+
+      - name: Lint
+        run: pnpm lint
+
+      - name: Test
+        run: pnpm test
+
+  build:
+    name: EAS Build (${{ github.event.inputs.platform || 'all' }})
+    needs: ci
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 9
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: pnpm
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Setup EAS CLI
+        uses: expo/expo-github-action@v8
+        with:
+          eas-version: latest
+          token: ${{ secrets.EXPO_TOKEN }}
+
+      - name: Build
+        working-directory: apps/mobile
+        run: eas build --profile production --platform ${{ github.event.inputs.platform || 'all' }} --non-interactive
+
+  submit:
+    name: Submit to stores
+    needs: build
+    if: >-
+      github.event_name == 'workflow_dispatch' &&
+      github.event.inputs.submit == 'true'
+    runs-on: ubuntu-latest
+    environment: production # Requires manual approval in GitHub settings
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 9
+
+      - name: Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: pnpm
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Setup EAS CLI
+        uses: expo/expo-github-action@v8
+        with:
+          eas-version: latest
+          token: ${{ secrets.EXPO_TOKEN }}
+
+      - name: Submit to App Store Connect & Google Play
+        working-directory: apps/mobile
+        run: eas submit --platform ${{ github.event.inputs.platform || 'all' }} --non-interactive --latest

apps/mobile/app.json

@@ -73,8 +73,18 @@
           "organization": "__YOUR_SENTRY_ORG__",
           "project": "__YOUR_SENTRY_PROJECT__"
         }
-      ]
+      ],
+      "expo-updates"
     ],
+    "runtimeVersion": {
+      "policy": "appVersion"
+    },
+    "updates": {
+      "url": "https://u.expo.dev/a29a7662-96be-4509-a79e-fbe4b5dac1ff",
+      "enabled": true,
+      "fallbackToCacheTimeout": 0,
+      "checkAutomatically": "ON_LOAD"
+    },
     "extra": {
       "eas": {
         "projectId": "a29a7662-96be-4509-a79e-fbe4b5dac1ff"

apps/mobile/package.json

@@ -26,6 +26,7 @@
     "expo-notifications": "~0.32.16",
     "expo-speech": "^14.0.8",
     "expo-splash-screen": "^31.0.13",
+    "expo-updates": "^29.0.16",
     "react": "19.1.0",
     "react-native": "0.81.5",
     "react-native-maps": "1.20.1",

documents/tech-debt.md

@@ -210,12 +210,12 @@
 | ID | Item | Severity | Details |
 |----|------|----------|---------|
 | CI-00 | **Convert from Expo Go to EAS Build for production releases** | 🔴 Critical | ✅ Resolved 2026-02-16: created `eas.json` with `development`/`preview`/`production` build profiles (EAS project ID `a29a7662-96be-4509-a79e-fbe4b5dac1ff`). |
-| CI-01 | **No CI pipeline** | 🔴 Critical | No GitHub Actions, no GitLab CI, no any CI config. Nothing runs `typecheck`, `lint`, or `test` automatically on push/PR. |
-| CI-02 | **No automated mobile builds in CI** | 🟠 High | Even after EAS setup, there is no CI workflow that runs EAS builds to produce Android and iOS release artifacts automatically. |
+| CI-01 | **No CI pipeline** | 🔴 Critical | ✅ Resolved 2026-02-16: created `.github/workflows/ci.yml` (GitHub Actions) running `pnpm typecheck`, `pnpm lint`, `pnpm test` on push/PR to `main`. |
+| CI-02 | **No automated mobile builds in CI** | 🟠 High | ✅ Resolved 2026-02-16: created `.github/workflows/eas-build.yml` with CI → EAS Build → EAS Submit pipeline. Triggered on `main` push or manual dispatch. Submit job gated behind `environment: production` approval. |
 | CI-03 | **No app signing / keystore management** | 🟠 High | No `eas.json`, no code-signing config. Android `gradle.properties` still references debug keystore only. Required for store distribution. Severity upgraded — this blocks store submission. |
 | CI-04 | **No environment configuration** | 🟡 Medium | No `.env` / `.env.example`, no `expo-constants`, no staging vs. production config. API keys or feature flags have no mechanism. |
 | CI-05 | **No crash reporting / analytics** | 🟠 High | ✅ Resolved 2026-02-16: installed `@sentry/react-native`, configured `app.json` plugin, wrapped root with `Sentry.wrap` + `ErrorBoundary`. DSN placeholder requires replacement before production. |
-| CI-06 | **No OTA update mechanism** | 🟡 Medium | `expo-updates` not installed or configured. Every JS-only fix requires a full store release cycle. |
+| CI-06 | **No OTA update mechanism** | 🟡 Medium | ✅ Resolved 2026-02-16: installed `expo-updates`, configured `runtimeVersion` (appVersion policy) and `updates` URL pointing to EAS project in `app.json`. |
 | CI-07 | **No app store metadata** | 🟡 Medium | No screenshots, store description, keyword list, or promotional assets. Required for both App Store Connect and Google Play Console submission. Severity upgraded — blocks submission. |
 | CI-08 | **iOS `bundleIdentifier` not set** | 🔴 Critical | ✅ Resolved 2026-02-16: set `expo.ios.bundleIdentifier` to `com.lallimaven.eclipse-timer` with `buildNumber: "1"`. |
 | CI-09 | **Android package name is a placeholder** | 🔴 Critical | ✅ Resolved 2026-02-16: set `android.package` to `com.lallimaven.eclipsetimer` with `versionCode: 1`. |
@@ -248,7 +248,7 @@
 | A-01 | ✅ Resolved 2026-02-12: break up the 1 000-line `App.tsx` |
 | C-01 | ✅ Resolved 2026-02-13: fix cross-package deep import in overlay build |
 | CI-00 | ✅ Resolved 2026-02-16: created `eas.json` with development/preview/production build profiles |
-| CI-01 | Set up a CI pipeline |
+| CI-01 | ✅ Resolved 2026-02-16: created GitHub Actions CI workflow (`.github/workflows/ci.yml`) |
 | CI-08 | ✅ Resolved 2026-02-16: set iOS `bundleIdentifier` to `com.lallimaven.eclipse-timer` |
 | CI-09 | ✅ Resolved 2026-02-16: set Android package to `com.lallimaven.eclipsetimer` |
 
@@ -269,7 +269,7 @@
 | F-01 | Multi-eclipse switching on timer |
 | F-02 | ✅ Resolved 2026-02-16: persist user preferences via AsyncStorage |
 | F-03 | ✅ Resolved 2026-02-16: implement real alarm scheduling |
-| CI-02 | Automate EAS Build jobs in CI for Android/iOS artifacts |
+| CI-02 | ✅ Resolved 2026-02-16: created EAS Build + Submit workflow (`.github/workflows/eas-build.yml`) |
 | CI-03 | Configure app signing / keystore (blocks store submission) |
 | CI-05 | ✅ Resolved 2026-02-16: integrated @sentry/react-native with Sentry.wrap + ErrorBoundary |
 | SP-02 | ✅ Resolved 2026-02-16: privacy policy written, store privacy declarations documented, iOS privacy manifest added |
@@ -309,7 +309,7 @@
 | AC-04 | Support dynamic font sizing |
 | SP-01 | ✅ Resolved 2026-02-16: added pre-permission rationale Alert dialog before location request |
 | CI-04 | Add env config support |
-| CI-06 | Configure `expo-updates` for OTA |
+| CI-06 | ✅ Resolved 2026-02-16: installed + configured `expo-updates` with runtimeVersion and EAS update URL |
 | CI-07 | ✅ Partially resolved 2026-02-16: store descriptions, content rating answers, and icon fix completed. Screenshots and feature graphic still needed (manual). |
 | CI-10 | ✅ Resolved 2026-02-16: added `expo-splash-screen` with preventAutoHideAsync/hideAsync |
 | CI-11 | ✅ Resolved 2026-02-16: bumped to `1.0.0` with `buildNumber: "1"` and `versionCode: 1` |
@@ -386,10 +386,10 @@
 
 | # | Step | Relates To | Status |
 |---|------|-----------|--------|
-| 5.1 | **Create a GitHub Actions CI workflow** (`.github/workflows/ci.yml`) that runs on push/PR: `pnpm install` → `pnpm typecheck` → `pnpm lint` → `pnpm test`. | CI-01 | ⬜ Not started |
-| 5.2 | **Add an EAS Build workflow** (`.github/workflows/eas-build.yml`) triggered on `main` push or manual dispatch: runs `eas build --profile production --platform all --non-interactive`. | CI-02 | ⬜ Not started |
-| 5.3 | **Add an EAS Submit step** — `eas submit --platform all` to automate upload to App Store Connect and Google Play Console. | CI-02 | ⬜ Not started |
-| 5.4 | **Set up `expo-updates`** for OTA JS bundle updates post-launch (avoids full store review for JS-only fixes). | CI-06 | ⬜ Not started |
+| 5.1 | **Create a GitHub Actions CI workflow** — `.github/workflows/ci.yml` runs on push/PR to `main`: checkout → pnpm install → typecheck → lint → test. Includes concurrency grouping to cancel stale runs. | CI-01 | ✅ Done 2026-02-16 |
+| 5.2 | **Add an EAS Build workflow** — `.github/workflows/eas-build.yml` triggers on `main` push (when `apps/mobile/`, `packages/`, or lockfile change) or manual dispatch. CI checks run first, then `eas build --profile production`. Platform selectable via `workflow_dispatch` input (default: `all`). Requires `EXPO_TOKEN` secret. | CI-02 | ✅ Done 2026-02-16 |
+| 5.3 | **Add an EAS Submit step** — included as a gated `submit` job in `eas-build.yml`. Only runs on manual dispatch with `submit: true`. Uses `environment: production` for manual approval before store upload. Runs `eas submit --platform all --latest`. | CI-02 | ✅ Done 2026-02-16 |
+| 5.4 | **Set up `expo-updates`** — installed `expo-updates`, added `runtimeVersion: { policy: "appVersion" }` and `updates` config (URL, checkAutomatically ON_LOAD, fallbackToCacheTimeout 0) to `app.json`, added `expo-updates` plugin. | CI-06 | ✅ Done 2026-02-16 |
 
 ### Phase 6 — Nice-to-have before v1.0.0