+-----------------------------------------------------------------------------------------+
|                  Enterprise Automated Mobile CI/CD Workflow                             |
+-----------------------------------------------------------------------------------------+

[DEVELOPER MERGES PULL REQUEST TO 'main' OR TAGS 'v2.4.0']
                               |
                               v (Triggers GitHub Actions Workflow)
+-----------------------------------------------------------------+
| GITHUB ACTIONS MATRIX RUNNERS:                                  |
| 1. iOS Job: Dispatches to 'macos-latest' (M2/M3 Apple Silicon)  |
| 2. Android Job: Dispatches to 'ubuntu-latest' (Linux Container) |
+--------------------------------+--------------------------------+
                                 |
        +------------------------+------------------------+
        | (iOS Execution Path)                            | (Android Execution Path)
        v                                                 v
+---------------------------------+             +---------------------------------+
| FASTLANE MATCH CODE SIGNING:    |             | GRADLE BUNDLE & SIGNING:        |
| - Decrypts Certs from Git Repo  |             | - Injects Release Keystore      |
| - Creates Temporary Keychain    |             | - Builds Optimized AAB Bundle   |
| - Builds Signed .IPA Binary     |             | - Runs ProGuard/R8 Obfuscation  |
+----------------+----------------+             +----------------+----------------+
                 |                                               |
                 v (App Store Connect API Key)                   v (Google Play JSON Service Account)
+---------------------------------+             +---------------------------------+
| UPLOAD TO TESTFLIGHT / APP STORE|             | UPLOAD TO PLAY STORE INTERNAL   |
+---------------------------------+             +---------------------------------+
                                 |
                                 v
[QA Testers & Beta Users Receive App Update in 10 Minutes! Zero Human Overhead!]

+-----------------------------------------------------------------------------------------+
|                  Fastlane Match Centralized Cryptographic Repository                    |
+-----------------------------------------------------------------------------------------+

[SECURE PRIVATE GIT REPO: '[email protected]:enterprise/ios-certificates.git']
  ├── certificates/distribution.cer (Encrypted with OpenSSL AES-256)
  └── profiles/distribution.mobileprovision
               |
               +---> [CI Runner (GitHub Actions)]: Decrypts with $MATCH_PASSWORD into temporary keychain!
               |
               +---> [Developer A MacBook]: Decrypts with $MATCH_PASSWORD into local keychain!
               |
               +---> [Developer B MacBook]: Decrypts with $MATCH_PASSWORD into local keychain!

# fastlane/Matchfile
git_url("[email protected]:enterprise-org/mobile-certificates-repo.git")
storage_mode("git")
type("appstore") # 'appstore', 'adhoc', or 'development'
app_identifier(["in.mojostudio.enterpriseapp"])
username("[email protected]")

# fastlane/Fastfile
default_platform(:ios)

platform :ios do
  desc "Build and Deploy to Apple TestFlight"
  lane :beta do
    # 1. Setup CI Keychain & Sync Certificates
    setup_ci
    match(
      type: "appstore",
      readonly: true,
      api_key_path: "fastlane/app_store_key.json"
    )

    # 2. Increment Build Number from TestFlight
    increment_build_number(
      build_number: latest_testflight_build_number + 1
    )

    # 3. Build Signed IPA Binary
    build_app(
      scheme: "EnterpriseApp",
      workspace: "ios/EnterpriseApp.xcworkspace",
      export_method: "app-store",
      output_directory: "./builds/ios"
    )

    # 4. Headless Upload via App Store Connect API
    upload_to_testflight(
      skip_waiting_for_build_processing: true,
      distribute_external: false
    )
  end
end

platform :android do
  desc "Build and Deploy to Google Play Internal Track"
  lane :beta do
    # 1. Increment Version Code
    increment_version_code(
      gradle_file_path: "android/app/build.gradle"
    )

    # 2. Build Release Android App Bundle (AAB)
    gradle(
      task: "bundle",
      build_type: "Release",
      project_dir: "android/"
    )

    # 3. Upload to Google Play Console via Service Account JSON
    upload_to_play_store(
      track: "internal",
      aab: "android/app/build/outputs/bundle/release/app-release.aab",
      json_key: "fastlane/play_store_service_account.json"
    )
  end
end

# .github/workflows/deploy.yaml
name: Continuous Mobile Deployment

on:
  push:
    branches:
      - main
    tags:
      - "v*"
  workflow_dispatch:

jobs:
  # ==========================================
  # JOB 1: iOS TESTFLIGHT AUTOMATION
  # ==========================================
  deploy-ios:
    name: Build & Deploy iOS
    runs-on: macos-14 # Apple Silicon M2/M3 Runner
    steps:
      - name: Checkout Code
        uses: actions/checkout@v4

      - name: Setup Node.js & Dependencies
        uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: "npm"

      - name: Install npm Packages
        run: npm ci

      - name: Setup Ruby for Fastlane
        uses: ruby/setup-ruby@v1
        with:
          ruby-version: "3.3"
          bundler-cache: true

      - name: Install CocoaPods
        run: |
          cd ios && pod install --repo-update

      - name: Deploy iOS via Fastlane
        env:
          MATCH_PASSWORD: ${{ secrets.MATCH_PASSWORD }}
          MATCH_GIT_PRIVATE_KEY: ${{ secrets.MATCH_GIT_PRIVATE_KEY }}
          APP_STORE_CONNECT_API_KEY: ${{ secrets.APP_STORE_CONNECT_API_KEY }}
        run: |
          bundle exec fastlane ios beta

  # ==========================================
  # JOB 2: ANDROID PLAY STORE AUTOMATION
  # ==========================================
  deploy-android:
    name: Build & Deploy Android
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Code
        uses: actions/checkout@v4

      - name: Setup Java JDK 17
        uses: actions/setup-java@v4
        with:
          distribution: "temurin"
          java-version: "17"
          cache: "gradle"

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 20
          cache: "npm"

      - name: Install npm Packages
        run: npm ci

      - name: Setup Ruby for Fastlane
        uses: ruby/setup-ruby@v1
        with:
          ruby-version: "3.3"
          bundler-cache: true

      - name: Decode Android Keystore
        env:
          ANDROID_KEYSTORE_BASE64: ${{ secrets.ANDROID_KEYSTORE_BASE64 }}
        run: |
          echo "$ANDROID_KEYSTORE_BASE64" | base64 --decode > android/app/release.keystore

      - name: Deploy Android via Fastlane
        env:
          PLAY_STORE_JSON_KEY: ${{ secrets.PLAY_STORE_JSON_KEY }}
          KEYSTORE_PASSWORD: ${{ secrets.KEYSTORE_PASSWORD }}
          KEY_ALIAS: ${{ secrets.KEY_ALIAS }}
        run: |
          bundle exec fastlane android beta

       +-------------------------------------------------------------+
       |             Time from Git Merge to TestFlight / Play Store  |
       +-------------------------------------------------------------+
 Manual Archive & Web Portal Upload   | ==================================== [240.0 Mins] (4.0 Hours)
 GitHub Actions + Fastlane Pipeline   | == [11.5 Mins] (20x Faster Release Cycle!)
                                      +-------------------------------------+
                                      0m      60m     120m    180m    240m