Automate production mobile EAS releases

[juliusmarminge]

What Changed

• Trigger the mobile EAS production workflow automatically for relevant changes merged into main.
• Serialize production runs to preserve OTA release order.
• Automatically create and submit iOS and Android store builds when the app version changes.
• Publish OTA updates only when a finished production build matches the current native fingerprint.
• Restore package versions from 0.0.32 to 0.0.31.

Why

This makes mobile production releases follow merges automatically while avoiding duplicate builds and incompatible OTA updates. Store builds are created when the app version changes, and JavaScript updates are published only when an installed native binary can apply them. Manual workflow dispatch remains available for retries and forced releases.

Checklist

• This PR is small and focused
• I explained what changed and why
• I included before/after screenshots for any UI changes
• I included a video for animation/interaction changes

---

Note

Medium Risk
Changes production release automation (store submits and OTA channel) on every qualifying merge; misconfigured version or fingerprint logic could skip OTAs or trigger duplicate builds, though serialization and gating reduce blast radius.

Overview
Production mobile releases now run automatically when relevant paths merge to main, while workflow_dispatch stays for manual build/OTA retries.

mobile-eas-production.yml adds path-filtered push triggers and a serialized concurrency group so OTAs stay ordered (bursts collapse to the latest commit). On push it compares app.config.ts version to the latest EAS production build per platform and starts auto-submit store builds when they differ (in-progress builds count, avoiding duplicates). It then fingerprint-gates production OTAs: updates publish only if a finished build matches the current native fingerprint; otherwise the job summary warns and skips.

A new mobile-fingerprint-check.yml runs on PRs, fingerprints merge-result vs base (with pnpm install on base for lockfile accuracy), writes an iOS/Android diff to the job summary, and syncs a 📱 Native Change label on in-repo PRs so native drift is visible before merge. The check is advisory and always passes.

^{Reviewed by Cursor Bugbot for commit 88c9273. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Automate production mobile EAS releases and fingerprint checks on push to main

• On pushes to main touching mobile paths, mobile-eas-production.yml checks the current app version against the latest production build per platform and triggers a new store build + auto-submit if versions differ.
• OTA updates are published to the production channel only when a finished production build with a matching native fingerprint exists; otherwise a warning is written to the job summary.
• Adds mobile-fingerprint-check.yml, which computes and compares native fingerprints for iOS and Android on PRs, writes a diff summary, and adds/removes a 📱 Native Change label on same-repo PRs.
• Manual workflow_dispatch triggers retain the existing build/submit and OTA publish steps unchanged.

^{Macroscope summarized 88c9273.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 37822400-7ede-496c-a8f9-738108203027

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Thread transfer impact

✅ Thread transfer remains within every enforced ceiling.

Provider	Metric	Main baseline	This PR	Impact	PR ceiling
Codex	Total thread wire	11.3 KiB	11.3 KiB	−22 B (−0.2%)	15.1 KiB	✅
Codex	Thread snapshot wire	5.5 KiB	5.5 KiB	+7 B (+0.1%)	7.3 KiB	✅
Codex	Live turn WebSocket wire	5.9 KiB	5.9 KiB	−29 B (−0.5%)	7.8 KiB	✅
Codex	Live turn WebSocket decoded	49.7 KiB	49.7 KiB	0 B (0.0%)	66.4 KiB	✅
Codex	Live turn messages	16	16	0 (0.0%)	21	✅
Claude	Total thread wire	11.3 KiB	11.3 KiB	+28 B (+0.2%)	15.1 KiB	✅
Claude	Thread snapshot wire	5.5 KiB	5.5 KiB	+14 B (+0.3%)	7.3 KiB	✅
Claude	Live turn WebSocket wire	5.8 KiB	5.9 KiB	+14 B (+0.2%)	7.8 KiB	✅
Claude	Live turn WebSocket decoded	50.6 KiB	50.6 KiB	0 B (0.0%)	66.4 KiB	✅
Claude	Live turn messages	16	16	0 (0.0%)	21	✅

Baseline: be1a836 · PR result: 88c9273 · Source CI: success

Scenario and decoded snapshot size

10 historical turns, 5 command tools per turn, 878.9 KiB retained MCP result per historical turn, and a 1.05 MiB retained result in the measured turn.

• Codex decoded thread snapshot: 94.6 KiB
• Claude decoded thread snapshot: 95.4 KiB

Updated in place by a trusted workflow. PR artifacts are strictly validated and never executed.

[macroscopeapp]

Approvability

Verdict: Needs human review

This PR automates production mobile releases (store submissions and OTA updates) on every main merge. Production deployment automation of this scope warrants human review to verify the intended release workflow and safeguards.

^{You can customize Macroscope's approvability policy. Learn more.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{Bugbot Autofix is ON, but a cloud agent failed to start.}

^{Reviewed by Cursor Bugbot for commit a9437f3. Configure here.}