expo-native-build.yml

name: Expo

on:
  pull_request:
    types: [opened, synchronize, reopened, ready_for_review]
    branches:
      - main
    paths:
      - '.github/workflows/expo-native-build.yml'
      - 'integration/templates/expo-native/**'
      - 'packages/expo/**'
      - 'packages/expo-biometrics/**'
      - 'packages/expo-google-signin/**'
      - 'packages/expo-native-components/**'
  workflow_dispatch:

permissions:
  contents: read

concurrency:
  group: expo-native-${{ github.head_ref || github.ref }}
  cancel-in-progress: true

env:
  FIXTURE_DIR: integration/templates/expo-native
  FIXTURE_PUBLISHABLE_KEY: pk_test_ZHVtbXkuY2xlcmsuYWNjb3VudHMuZGV2JA
  SDK_PACK_DIR: /tmp/clerk-expo-pack

jobs:
  native-build:
    if: ${{ github.head_ref != 'changeset-release/main' && (github.event_name == 'workflow_dispatch' || github.event.pull_request.draft == false) }}
    name: Native Build (${{ matrix.platform }}, sdk ${{ matrix.expo-sdk }})
    runs-on: ${{ matrix.runner }}
    timeout-minutes: 45
    strategy:
      fail-fast: false
      matrix:
        include:
          - expo-sdk: 55
            platform: android
            runner: blacksmith-8vcpu-ubuntu-2204
          - expo-sdk: 55
            platform: ios
            runner: blacksmith-6vcpu-macos-26
          - expo-sdk: 58
            platform: android
            runner: blacksmith-8vcpu-ubuntu-2204
          - expo-sdk: 58
            platform: ios
            runner: blacksmith-6vcpu-macos-26

    steps:
      - name: Checkout repo
        uses: actions/checkout@v4.4.0
        with:
          persist-credentials: false

      - name: Compute native build cache key
        id: native-build-key
        env:
          PLATFORM: ${{ matrix.platform }}
        run: |
          build_hash="$(
            git ls-files -s -- \
              .npmrc \
              package.json \
              pnpm-lock.yaml \
              pnpm-workspace.yaml \
              tsconfig.json \
              turbo.json \
              packages/clerk-js \
              packages/expo \
              packages/expo-biometrics \
              packages/expo-google-signin \
              packages/expo-native-components \
              packages/react \
              packages/shared \
              "$FIXTURE_DIR" |
              git hash-object --stdin
          )"
          if [ "$PLATFORM" = "android" ]; then
            artifact="$FIXTURE_DIR/android/app/build/outputs/apk/release/app-release.apk"
          else
            artifact="$FIXTURE_DIR/ios/build/Build/Products/Release-iphonesimulator/ClerkExpoNativeBuildFixture.app"
          fi
          echo "hash=$build_hash" >> "$GITHUB_OUTPUT"
          echo "artifact=$artifact" >> "$GITHUB_OUTPUT"

      - name: Restore native build
        id: native-build-cache
        uses: actions/cache/restore@v4.3.0
        with:
          path: ${{ steps.native-build-key.outputs.artifact }}
          # Bump the version when native build commands change.
          key: expo-native-build-v1-${{ runner.os }}-${{ matrix.expo-sdk }}-${{ matrix.platform }}-${{ steps.native-build-key.outputs.hash }}

      - if: steps.native-build-cache.outputs.cache-hit != 'true'
        uses: pnpm/action-setup@v4.3.0
      - if: steps.native-build-cache.outputs.cache-hit != 'true'
        uses: actions/setup-node@v4.4.0
        with:
          node-version: 24.15.0
          cache: pnpm

      - name: Install monorepo dependencies
        if: steps.native-build-cache.outputs.cache-hit != 'true'
        run: pnpm install --frozen-lockfile

      - name: Build and pack Clerk packages
        if: steps.native-build-cache.outputs.cache-hit != 'true'
        run: |
          pnpm --filter @clerk/expo... --filter @clerk/expo-biometrics build
          mkdir -p "$SDK_PACK_DIR"
          pnpm --filter @clerk/expo pack --pack-destination "$SDK_PACK_DIR"
          pnpm --filter @clerk/expo-google-signin pack --pack-destination "$SDK_PACK_DIR"
          pnpm --filter @clerk/expo-native-components pack --pack-destination "$SDK_PACK_DIR"
          pnpm --filter @clerk/expo-biometrics pack --pack-destination "$SDK_PACK_DIR"

      - name: Install fixture dependencies
        if: steps.native-build-cache.outputs.cache-hit != 'true'
        working-directory: ${{ env.FIXTURE_DIR }}
        env:
          EXPO_SDK: ${{ matrix.expo-sdk }}
        run: |
          cp "package.sdk-$EXPO_SDK.json" package.json
          pnpm install --no-frozen-lockfile
          # [0-9] keeps this glob off the other clerk-expo-* tarballs.
          SDK_TARBALL="$(ls "$SDK_PACK_DIR"/clerk-expo-[0-9]*.tgz)"
          GOOGLE_SIGNIN_TARBALL="$(ls "$SDK_PACK_DIR"/clerk-expo-google-signin-*.tgz)"
          NATIVE_TARBALL="$(ls "$SDK_PACK_DIR"/clerk-expo-native-components-*.tgz)"
          BIOMETRICS_TARBALL="$(ls "$SDK_PACK_DIR"/clerk-expo-biometrics-*.tgz)"
          pnpm add "$SDK_TARBALL" "$GOOGLE_SIGNIN_TARBALL" "$NATIVE_TARBALL" "$BIOMETRICS_TARBALL" -w
          pnpm expo install expo-auth-session expo-constants expo-crypto expo-dev-client expo-secure-store expo-web-browser

      - name: Write fixture .env
        if: steps.native-build-cache.outputs.cache-hit != 'true'
        working-directory: ${{ env.FIXTURE_DIR }}
        run: |
          echo "EXPO_PUBLIC_CLERK_PUBLISHABLE_KEY=$FIXTURE_PUBLISHABLE_KEY" > .env

      - name: Set up JDK 17
        if: matrix.platform == 'android'
        uses: actions/setup-java@v4.9.1
        with:
          distribution: temurin
          java-version: 17

      - name: Set up Gradle cache
        if: matrix.platform == 'android' && steps.native-build-cache.outputs.cache-hit != 'true'
        uses: gradle/actions/setup-gradle@v6.3.0
        with:
          # This workflow never runs on main, so the default (write from main
          # only) would never seed the cache.
          cache-read-only: false
          add-job-summary: on-failure

      - name: Prebuild Android fixture
        if: matrix.platform == 'android' && steps.native-build-cache.outputs.cache-hit != 'true'
        working-directory: ${{ env.FIXTURE_DIR }}
        run: pnpm expo prebuild --clean --platform android

      - name: Build Android fixture
        if: matrix.platform == 'android' && steps.native-build-cache.outputs.cache-hit != 'true'
        working-directory: ${{ env.FIXTURE_DIR }}
        run: pnpm build:android

      # The module's Robolectric tests need an Expo host project for expo-modules-core, so they run in the fixture.
      # The packed module leaves out its tests, so they are copied in from the repo.
      - name: Test expo-biometrics Android module
        if: matrix.platform == 'android' && steps.native-build-cache.outputs.cache-hit != 'true'
        working-directory: ${{ env.FIXTURE_DIR }}/android
        run: |
          cp -R "$GITHUB_WORKSPACE/packages/expo-biometrics/android/src/test" "$(readlink -f ../node_modules/@clerk/expo-biometrics)/android/src/"
          ./gradlew :clerk-expo-biometrics:testDebugUnitTest

      - name: Prebuild iOS fixture
        if: matrix.platform == 'ios' && steps.native-build-cache.outputs.cache-hit != 'true'
        working-directory: ${{ env.FIXTURE_DIR }}
        run: pnpm expo prebuild --clean --platform ios

      - name: Build iOS fixture
        if: matrix.platform == 'ios' && steps.native-build-cache.outputs.cache-hit != 'true'
        working-directory: ${{ env.FIXTURE_DIR }}
        run: pnpm build:ios

      - name: Save native build
        if: steps.native-build-cache.outputs.cache-hit != 'true'
        uses: actions/cache/save@v4.3.0
        with:
          path: ${{ steps.native-build-key.outputs.artifact }}
          key: ${{ steps.native-build-cache.outputs.cache-primary-key }}