fastlane

Interactive CLI that auto-configures Fastlane for React Native — iOS (App Store Connect API + Match + Provisioning) and Android (Google Play API).

Highlights

• Auto-detects bundle ID, package name, app name, and version from native files (*.pbxproj, Info.plist, build.gradle(.kts)) with app.json fallback — works without Expo
• JWT authentication — connects to App Store Connect API without passwords
• iOS Provisioning — register Bundle IDs, create certificates, manage provisioning profiles
• 24 capabilities auto-detected from .entitlements and Info.plist files (Push, iCloud, Sign in with Apple, HealthKit, NFC, and more)
• Google Play API — validates service account access, uploads AAB bundles, manages track releases with staged rollout
• Single fastlane/ directory — one folder at project root for both iOS and Android config
• All secrets in .env — Appfile and Matchfile read from ENV variables, nothing hardcoded in committed files
• Auto-cleanup — removes build artifacts after upload, cleans up temporary certificate files
• Auto-gitignore — adds fastlane/.env, *.ipa, *.dSYM.zip, *.aab, *.apk to .gitignore
• Xcode signing — auto-sets DEVELOPMENT_TEAM and CODE_SIGN_STYLE in .pbxproj (skips if already configured or conflicts with app.json)
• App record check — detects missing App Store Connect app records and offers to create them via fastlane produce
• Auto version bump — automatically increments patch version (X.Y.Z → X.Y.Z+1) before every build on both platforms
• CocoaPods integration — runs pod install before each build to ensure generated files are up to date
• Smart defaults — detects existing config and offers to reuse credentials, remembers Apple ID across runs
• Finds .p8 keys automatically — scans common locations and extracts Key ID from the filename
• Setup guide — shows step-by-step instructions for generating API keys and finding Issuer ID
• CI-friendly subcommands — bundle-id, certs, provision, upload, release for scripted pipelines

Quick Start

Interactive mode

npx fastlane-init

Or install globally:

npm install -g fastlane-init
fastlane-init

The CLI walks you through everything interactively — pick platforms, enter credentials, and all config files are generated.

Subcommands (CI / scripting)

# iOS provisioning
fastlane-init bundle-id --bundle-id com.example.app --name "My App"
fastlane-init certs --type distribution
fastlane-init provision --type appstore --bundle-id com.example.app

# Android upload & release
fastlane-init upload --platform android --aab ./app.aab --track internal
fastlane-init release --platform android --track production --rollout 0.1

Prerequisites

• Node.js >= 18
• Fastlane installed (brew install fastlane)
• Apple Developer account (for iOS)
• Google Play service account JSON key (for Android)
• openssl available in PATH (for certificate generation)

What You Need

iOS

Three things from App Store Connect:

1. Go to appstoreconnect.apple.com → Users & Access → Integrations → App Store Connect API
2. Click "+" to generate a new key (role: Admin or App Manager)
3. Download the .p8 file — you can only download it once

| Credential | Where to find | |---|---| | Key ID | Listed next to your key name on the Keys page | | Issuer ID | Shown at the top of the Keys page (UUID format) | | .p8 file | Downloaded when the key was created (one-time download) |

Place the .p8 file in one of these directories (auto-detected):

• ./private_keys
• ~/.private_keys
• ~/.appstoreconnect/private_keys

Everything else — Team ID, ITC Team ID, bundle IDs, app list — is fetched automatically from the Apple API.

Android

A Google Play service account JSON key file:

1. Go to Google Play Console → Setup → API access
2. Create or link a Google Cloud project
3. Under Service accounts, click "Create new service account"
4. In Google Cloud Console, create a key (JSON) for that account
5. Back in Play Console, grant the service account access to your app

How It Works

1. Detect — reads native project files (*.pbxproj, Info.plist, .entitlements, build.gradle(.kts)) with app.json fallback to extract identifiers, versions, and capabilities
2. Check existing config — parses any existing fastlane/.env and fastlane/Appfile, offers to reuse credentials
3. Authenticate — generates a JWT token and connects to the App Store Connect API
4. Fetch — pulls Team ID, ITC Team ID, bundle IDs, and apps from Apple
5. Auto-register — if the detected bundle ID doesn't exist in Apple Developer, creates it automatically
6. Check app record — if no app record exists on App Store Connect for the selected bundle ID, offers to create one via fastlane produce (Apple ID login required — the ASC API does not support app creation)
7. Auto-enable capabilities — detects capabilities from .entitlements / Info.plist and enables them without prompting
8. Set Xcode signing — writes DEVELOPMENT_TEAM and CODE_SIGN_STYLE = Automatic into .pbxproj (only if not already set and no conflicting team in app.json)
9. Provision (optional) — creates certificates, auto-selects matching App Store provisioning profile
10. Configure Match — asks for a private Git repo URL and encryption password for certificate storage
11. Validate Android — authenticates with Google Play API and verifies app access
12. Generate — writes all Fastlane files into a single fastlane/ directory
13. Gitignore — adds build artifacts (*.ipa, *.dSYM.zip, *.aab, *.apk) and secrets to .gitignore

Generated Files

fastlane/
├── Appfile       ← reads APP_IDENTIFIER, TEAM_ID, PACKAGE_NAME from ENV
├── Fastfile      ← platform :ios + platform :android lanes
├── Matchfile     ← reads MATCH_GIT_URL, APP_IDENTIFIER from ENV
└── .env          ← all secrets and config values (git-ignored)

.env contents

# iOS
APP_IDENTIFIER="com.example.app"
APPLE_ID="[email protected]"
TEAM_ID="ABC123"
ITC_TEAM_ID="ABC123"

# App Store Connect API
ASC_KEY_ID="..."
ASC_ISSUER_ID="..."
ASC_KEY_CONTENT_BASE64="..."

# Match
MATCH_PASSWORD="..."
MATCH_GIT_URL="[email protected]:..."

# Android
PACKAGE_NAME="com.example.app"
SUPPLY_JSON_KEY="/path/to/key.json"

Detected Capabilities

Capabilities are auto-detected from ios/**/*.entitlements, ios/**/Info.plist, and app.json plugins:

| Entitlements key | Capability | |---|---| | aps-environment | Push Notifications | | com.apple.developer.associated-domains | Associated Domains | | com.apple.developer.applesignin | Sign in with Apple | | com.apple.developer.in-app-payments | In-App Purchase | | com.apple.developer.game-center | Game Center | | com.apple.developer.icloud-container-identifiers | iCloud | | com.apple.security.application-groups | App Groups | | com.apple.developer.siri | SiriKit | | com.apple.developer.pass-type-identifiers | Wallet | | com.apple.developer.healthkit | HealthKit | | com.apple.developer.homekit | HomeKit | | com.apple.developer.nfc.readersession.formats | NFC Tag Reading | | com.apple.developer.networking.vpn.api | Personal VPN | | com.apple.developer.networking.networkextension | Network Extensions | | com.apple.developer.networking.wifi-info | Access WiFi Information | | com.apple.developer.ClassKit-environment | ClassKit | | com.apple.developer.authentication-services.autofill-credential-provider | Autofill Credential Provider | | com.apple.developer.networking.multipath | Multipath | | com.apple.developer.networking.HotspotConfiguration | Hotspot | | com.apple.developer.default-data-protection | Data Protection | | inter-app-audio | Inter-App Audio | | com.apple.developer.font-installation | Font Installation | | com.apple.external-accessory.wireless-configuration | Wireless Accessory |

Also detected from Info.plist: remote-notification in UIBackgroundModes → Push Notifications.

Auto-Detection Sources

All project metadata is detected automatically — app.json is optional:

| Data | Primary source (native) | Fallback (app.json) | |---|---|---| | iOS bundle ID | *.pbxproj → PRODUCT_BUNDLE_IDENTIFIER | ios.bundleIdentifier | | iOS version | Info.plist → CFBundleShortVersionString | version | | iOS build number | *.pbxproj → CURRENT_PROJECT_VERSION | ios.buildNumber | | App display name | Info.plist → CFBundleDisplayName / CFBundleName | name | | Android package | build.gradle(.kts) → applicationId | android.package | | Android version | build.gradle(.kts) → versionName / versionCode | — | | Capabilities | *.entitlements + Info.plist | plugins + ios.entitlements | | Xcode project | ios/*.xcodeproj | — | | Development team | *.pbxproj → DEVELOPMENT_TEAM | ios.appleTeamId / ios.teamId |

CLI Subcommands

bundle-id — Register & configure Bundle IDs

fastlane-init bundle-id --bundle-id com.example.app --name "My App"
fastlane-init bundle-id --bundle-id com.example.app --capabilities push,domains,appleid,icloud,nfc

certs — Create & manage certificates

fastlane-init certs --type distribution
fastlane-init certs --type distribution --force
fastlane-init certs --output ./my-certs

Generates CSR via openssl, creates certificate through ASC API. Temporary files are cleaned up after use.

provision — Create & install provisioning profiles

fastlane-init provision --type appstore --bundle-id com.example.app
fastlane-init provision --type development --bundle-id com.example.app --install
fastlane-init provision --type adhoc --bundle-id com.example.app

When --bundle-id is provided, auto-selects App Store type and the matching profile.

upload — Upload AAB to Google Play

fastlane-init upload --platform android --aab ./app.aab --track internal
fastlane-init upload --platform android --track beta --json-key ./key.json --package-name com.example.app

release — Release to a Google Play track

fastlane-init release --platform android --track production
fastlane-init release --platform android --track production --rollout 0.1

Available Lanes

iOS

fastlane ios certs      # Fetch certificates and profiles via Match
fastlane ios beta       # pod install → bump version patch → increment build number → build → upload to TestFlight → cleanup
fastlane ios release    # pod install → bump version patch → increment build number → build → submit to App Store → cleanup

Android

fastlane android beta       # Bump version patch → build AAB → upload to Play Store (internal track)
fastlane android release    # Bump version patch → build AAB → release to production

Configuration Reuse

When run in a project that already has Fastlane configured, the CLI:

• Detects existing credentials and config from fastlane/.env
• Shows a summary of what's already set up
• Offers to reuse existing credentials or enter new ones
• Pre-fills form fields with existing values for easy updating

Credentials are persisted locally:

• Apple: ~/.appstoreconnect/fastlane-cli.json
• Google: ~/.googleplay/fastlane-cli.json

Tech Stack

• TypeScript — full type safety
• Inquirer — interactive prompts
• jsonwebtoken — JWT signing for ASC API
• google-auth-library — Google Play service account authentication
• ora — spinners for async operations
• chalk — colored terminal output

License

MIT