Add signed iOS release workflow

clients/apple/README.md

@@ -26,4 +26,11 @@ ReplayKit extension require signing profiles with App Group `group.me.iamtalon.v
 Hardware validation must cover VoiceOver, background and lock behavior, interruptions, route
 changes, Bluetooth, ReplayKit, and iOS 27 ScreenCaptureKit audio.
 
-The shared ring contract is documented in `docs/broadcast-ring-format.md`.
+App Store builds use the same device builder with `--configuration Release`. Set
+`VOICECAT_BUILD_NUMBER`, `VOICECAT_DISPLAY_VERSION`, `VOICECAT_DEVELOPMENT_TEAM`, the host
+`VOICECAT_CODESIGN_KEY`/`VOICECAT_CODESIGN_PROVISION` pair, and the extension
+`VOICECAT_BROADCAST_CODESIGN_KEY`/`VOICECAT_BROADCAST_CODESIGN_PROVISION` pair. The host and
+extension profiles must both be App Store Connect profiles and include the shared App Group.
+
+The complete TestFlight workflow is documented in `docs/apple-ios-release.md`. The shared ring
+contract is documented in `docs/broadcast-ring-format.md`.

clients/apple/VoiceCat.iOS/Info.plist

@@ -3,8 +3,6 @@
 <plist version="1.0"><dict>
   <key>CFBundleDisplayName</key><string>VoiceCat</string>
   <key>CFBundleIdentifier</key><string>me.iamtalon.voicecat</string>
-  <key>CFBundleShortVersionString</key><string>0.0.1</string>
-  <key>CFBundleVersion</key><string>1</string>
   <key>LSRequiresIPhoneOS</key><true/>
   <key>NSMicrophoneUsageDescription</key><string>VoiceCat needs microphone access to transmit your voice in channels.</string>
   <key>UIBackgroundModes</key><array><string>audio</string></array>

clients/apple/VoiceCat.iOS/build-broadcast-extension.sh

@@ -10,8 +10,19 @@ project="$script_dir/../../../native/apple/broadcast/VoiceCatBroadcast.xcodeproj
 
 mkdir -p "$output"
 signing=()
+versioning=(MARKETING_VERSION="${VOICECAT_DISPLAY_VERSION:-0.0.1}")
+if [[ -n "${VOICECAT_BUILD_NUMBER:-}" ]]; then
+  versioning+=(CURRENT_PROJECT_VERSION="$VOICECAT_BUILD_NUMBER")
+fi
 if [[ "$sdk" == "iphonesimulator" ]]; then
   signing+=(CODE_SIGNING_ALLOWED=NO)
+elif [[ -n "${VOICECAT_BROADCAST_CODESIGN_KEY:-}" && -n "${VOICECAT_BROADCAST_CODESIGN_PROVISION:-}" ]]; then
+  signing+=(
+    DEVELOPMENT_TEAM="${VOICECAT_DEVELOPMENT_TEAM:?VOICECAT_DEVELOPMENT_TEAM is required for distribution signing}"
+    CODE_SIGN_STYLE=Manual
+    CODE_SIGN_IDENTITY="$VOICECAT_BROADCAST_CODESIGN_KEY"
+    PROVISIONING_PROFILE_SPECIFIER="$VOICECAT_BROADCAST_CODESIGN_PROVISION"
+  )
 elif [[ -n "${VOICECAT_DEVELOPMENT_TEAM:-}" ]]; then
   signing+=(DEVELOPMENT_TEAM="$VOICECAT_DEVELOPMENT_TEAM" CODE_SIGN_STYLE=Automatic)
   if [[ "${VOICECAT_ALLOW_PROVISIONING_UPDATES:-}" == "1" ]]; then
@@ -26,6 +37,7 @@ xcodebuild \
   -arch "$architecture" \
   -derivedDataPath "$output/derived" \
   CONFIGURATION_BUILD_DIR="$output" \
+  "${versioning[@]}" \
   "${signing[@]}" \
   build
 

clients/apple/build-ios-device.sh

@@ -12,7 +12,8 @@ while [ "$#" -gt 0 ]; do
         --output) output="$2"; shift 2 ;;
         -h|--help)
             echo "usage: $0 [--configuration Debug|Release] [--output DIR]"
-            echo "optional env: VOICECAT_DOTNET, VOICECAT_CODESIGN_KEY, VOICECAT_CODESIGN_PROVISION"
+            echo "optional env: VOICECAT_DOTNET, VOICECAT_BUILD_NUMBER, VOICECAT_DISPLAY_VERSION, VOICECAT_CODESIGN_KEY, VOICECAT_CODESIGN_PROVISION"
+            echo "distribution extension env: VOICECAT_DEVELOPMENT_TEAM, VOICECAT_BROADCAST_CODESIGN_KEY, VOICECAT_BROADCAST_CODESIGN_PROVISION"
             exit 0 ;;
         *) echo "unknown argument: $1" >&2; exit 2 ;;
     esac
@@ -29,6 +30,7 @@ set -- build "$project" -c "$configuration" -r ios-arm64 --no-restore -m:1 \
     -p:NuGetLockFilePath="$device_lock"
 if [ -n "${VOICECAT_CODESIGN_KEY:-}" ]; then set -- "$@" -p:CodesignKey="$VOICECAT_CODESIGN_KEY"; fi
 if [ -n "${VOICECAT_CODESIGN_PROVISION:-}" ]; then set -- "$@" -p:CodesignProvision="$VOICECAT_CODESIGN_PROVISION"; fi
+if [ -n "${VOICECAT_BUILD_NUMBER:-}" ]; then set -- "$@" -p:ApplicationVersion="$VOICECAT_BUILD_NUMBER"; fi
 "$dotnet_host" "$@"
 
 app="$root/clients/apple/VoiceCat.iOS/bin/$configuration/net10.0-ios27.0/ios-arm64/VoiceCat.iOS.app"