init

Author: hubab1

.env.example

@@ -0,0 +1,35 @@
+# Apple Ads API credentials
+APPLE_SEARCH_ADS_CLIENT_ID=
+APPLE_SEARCH_ADS_TEAM_ID=
+APPLE_SEARCH_ADS_KEY_ID=
+APPLE_SEARCH_ADS_PRIVATE_KEY=
+APPLE_SEARCH_ADS_ORG_ID=
+
+# App Store Connect API credentials
+# These are documented placeholders for local setup. Enter credentials in the app Settings UI unless environment loading is added.
+APP_STORE_CONNECT_ISSUER_ID=
+APP_STORE_CONNECT_KEY_ID=
+APP_STORE_CONNECT_PRIVATE_KEY=
+
+# Optional analytics configuration for non-OSS builds
+POSTHOG_PROJECT_TOKEN=
+POSTHOG_HOST=
+
+# Release signing and notarization credentials
+# Keep real values in local .env or CI secrets only.
+DEVELOPER_ID_APPLICATION_CERTIFICATE_BASE64=
+DEVELOPER_ID_APPLICATION_CERTIFICATE_PASSWORD=
+APPLE_TEAM_ID=
+APPSTORE_CONNECT_API_KEY_ID=
+APPSTORE_CONNECT_API_ISSUER_ID=
+APPSTORE_CONNECT_API_PRIVATE_KEY_BASE64=
+SPARKLE_PRIVATE_KEY_BASE64=
+
+# Cloudflare R2 release artifact hosting
+CLOUDFLARE_ACCOUNT_ID=
+CLOUDFLARE_R2_ACCESS_KEY_ID=
+CLOUDFLARE_R2_SECRET_ACCESS_KEY=
+CLOUDFLARE_R2_BUCKET=
+R2_PUBLIC_BASE_URL=https://releases.openaso.thirdtechapps.com
+R2_RELEASE_OBJECT_PREFIX=releases
+R2_APPCAST_OBJECT_KEY=appcast.xml

.github/workflows/ci.yml

@@ -0,0 +1,38 @@
+name: CI
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    name: Build and Test
+    runs-on: macos-26
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Select Xcode
+        run: sudo xcode-select -s /Applications/Xcode.app
+
+      - name: Resolve packages
+        run: |
+          xcodebuild -resolvePackageDependencies \
+            -project OpenASO.xcodeproj \
+            -scheme OpenASO \
+            -derivedDataPath Build
+
+      - name: Test
+        run: |
+          xcodebuild test \
+            -project OpenASO.xcodeproj \
+            -scheme OpenASO \
+            -destination 'platform=macOS,arch=arm64' \
+            -derivedDataPath Build \
+            CODE_SIGNING_ALLOWED=NO