feat(ios): add native build and TestFlight automation

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

.github/workflows/ios-ci.yml

@@ -0,0 +1,137 @@
+# iOS build gate for pull requests and main.
+#
+# Requires NO Apple/EAS secrets: it validates the Expo config, exports the iOS JS
+# bundle, generates the native project, installs CocoaPods, and compiles an
+# UNSIGNED iPhone Simulator target with xcodebuild. Signing/TestFlight lives in
+# publish-app-store.yml.
+#
+# Cheap platform-neutral checks (typecheck + unit tests) run first on Linux and
+# gate the costly macOS native build.
+
+name: iOS CI
+
+on:
+  pull_request:
+    branches: [main]
+    paths-ignore:
+      - "**/*.md"
+      - "docs/**"
+      - "docs-site/**"
+      - "distribution/**"
+  push:
+    branches: [main]
+    paths-ignore:
+      - "**/*.md"
+      - "docs/**"
+      - "docs-site/**"
+      - "distribution/**"
+
+# Cancel superseded runs for the same ref (e.g. new push to an open PR).
+concurrency:
+  group: ios-ci-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    name: Typecheck and unit tests
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v6
+
+      - uses: actions/setup-node@v6
+        with:
+          # Node >= 23.6 runs the TypeScript test files natively (type-stripping),
+          # matching the local toolchain. No build step or extra deps required.
+          node-version: 24
+          cache: npm
+
+      - name: Install dependencies (deterministic)
+        run: npm ci --legacy-peer-deps
+
+      - name: Typecheck
+        run: npm run typecheck
+
+      - name: Unit tests
+        run: npm test
+
+  ios-build:
+    name: Unsigned iOS Simulator build
+    needs: test
+    # macos-15 ships Xcode 16.x, which React Native 0.81 / Expo SDK 54 require.
+    runs-on: macos-15
+    timeout-minutes: 45
+    env:
+      # No source-map upload from CI (no Sentry auth token here); keep the build hermetic.
+      SENTRY_DISABLE_AUTO_UPLOAD: "true"
+    steps:
+      - uses: actions/checkout@v6
+
+      - uses: actions/setup-node@v6
+        with:
+          node-version: 20
+          cache: npm
+
+      - name: Install dependencies (deterministic)
+        run: npm ci --legacy-peer-deps
+
+      - name: Validate Expo config and plugin resolution
+        run: npx expo config --type introspect --json > expo-config.introspect.json
+
+      - name: Export iOS JavaScript bundle
+        run: npx expo export --platform ios --output-dir dist
+
+      - name: Prebuild native iOS project
+        run: npx expo prebuild --platform ios --no-install
+
+      - name: Install CocoaPods dependencies
+        working-directory: ios
+        run: pod install
+
+      - name: Resolve Xcode workspace and scheme
+        id: xc
+        run: |
+          set -euo pipefail
+          shopt -s nullglob
+          workspaces=(ios/*.xcworkspace)
+          workspace="${workspaces[0]:-}"
+          if [ -z "$workspace" ]; then
+            echo "::error::No .xcworkspace was generated by expo prebuild."
+            exit 1
+          fi
+          scheme=$(xcodebuild -workspace "$workspace" -list -json | node -e "
+            const d = JSON.parse(require('fs').readFileSync(0, 'utf8'));
+            const all = (d.workspace && d.workspace.schemes) || [];
+            const app = all.filter((s) => s !== 'Pods' && !s.startsWith('Pods-'));
+            if (app.length === 0) { console.error('No application scheme found in workspace'); process.exit(1); }
+            process.stdout.write(app[0]);
+          ")
+          echo "workspace=$workspace" >> "$GITHUB_OUTPUT"
+          echo "scheme=$scheme" >> "$GITHUB_OUTPUT"
+          echo "Using workspace='$workspace' scheme='$scheme'"
+
+      - name: Build unsigned iPhone Simulator app
+        run: |
+          set -euo pipefail
+          NSUnbufferedIO=YES xcodebuild \
+            -workspace "${{ steps.xc.outputs.workspace }}" \
+            -scheme "${{ steps.xc.outputs.scheme }}" \
+            -configuration Debug \
+            -sdk iphonesimulator \
+            -destination 'generic/platform=iOS Simulator' \
+            -derivedDataPath ios/build \
+            CODE_SIGNING_ALLOWED=NO \
+            CODE_SIGNING_REQUIRED=NO \
+            CODE_SIGN_IDENTITY="" \
+            build 2>&1 | tee xcodebuild.log
+
+      - name: Upload xcodebuild log
+        if: always()
+        uses: actions/upload-artifact@v7
+        with:
+          name: ios-xcodebuild-log
+          path: xcodebuild.log
+          retention-days: 14
+          if-no-files-found: ignore