Add Android beta build workflow (#622)

## Summary
- Add beta build type
- Builds beta build type signed AAB on every push to main.


🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Co-authored-by: Claude <noreply@anthropic.com>

Author: runningcode

.github/workflows/android_beta_build.yml

@@ -0,0 +1,51 @@
+name: Android Beta Build
+
+on:
+  push:
+    branches: [main]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    defaults:
+      run:
+        working-directory: ./android
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+
+      - name: Set up JDK
+        uses: actions/setup-java@v5
+        with:
+          java-version: "17"
+          distribution: "adopt"
+
+      - name: Setup Gradle build action
+        uses: gradle/actions/setup-gradle@v5
+
+      - name: Decode Keystore
+        env:
+          ENCODED_KEYSTORE: ${{ secrets.ANDROID_RELEASE_KEYSTORE_BASE64 }}
+        run: |
+          echo $ENCODED_KEYSTORE > keystore_base64.txt
+          base64 -d keystore_base64.txt > ${{ runner.temp }}/keystore.jks
+
+      - name: Build Beta APK
+        env:
+          DECODED_KEYSTORE_PATH: ${{ runner.temp }}/keystore.jks
+          RELEASE_KEY_ALIAS: ${{ secrets.ANDROID_RELEASE_KEY_ALIAS }}
+          RELEASE_KEY_PASSWORD: ${{ secrets.ANDROID_RELEASE_KEY_PASSWORD }}
+          RELEASE_STORE_PASSWORD: ${{ secrets.ANDROID_RELEASE_STORE_PASSWORD }}
+          EMERGE_API_TOKEN: ${{ secrets.EMERGE_API_KEY }}
+          REAPER_API_KEY: ${{ secrets.REAPER_API_KEY }}
+          SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
+        run: ./gradlew :app:assembleBeta
+
+      - name: Upload APK
+        uses: actions/upload-artifact@v4
+        with:
+          path: ./android/app/build/outputs/apk/beta/app-beta.apk
+          name: hackernews-beta-${{github.sha}}.apk
+          if-no-files-found: error

.github/workflows/android_emerge_upload.yml

@@ -28,7 +28,6 @@ jobs:
         run: ./gradlew :app:bundleRelease :app:emergeUploadReleaseAab
         env:
           EMERGE_API_TOKEN: ${{ secrets.EMERGE_API_KEY }}
-          ANDROID_DISTRIBUTION_API_KEY: ${{ secrets.ANDROID_DISTRIBUTION_API_KEY}}
           SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
           GITHUB_BASE_SHA: ${{ github.event.pull_request.base.sha }}
           SENTRY_SHA: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}

.github/workflows/android_release_build.yml

@@ -38,22 +38,20 @@ jobs:
 
       - name: Build AAB
         env:
-          RUNNING_ENV: release_workflow
           DECODED_KEYSTORE_PATH: ${{ runner.temp }}/keystore.jks
           RELEASE_KEY_ALIAS: ${{ secrets.ANDROID_RELEASE_KEY_ALIAS }}
           RELEASE_KEY_PASSWORD: ${{ secrets.ANDROID_RELEASE_KEY_PASSWORD }}
           RELEASE_STORE_PASSWORD: ${{ secrets.ANDROID_RELEASE_STORE_PASSWORD }}
           EMERGE_API_TOKEN: ${{ secrets.EMERGE_API_KEY }}
           REAPER_API_KEY: ${{ secrets.REAPER_API_KEY }}
-          ANDROID_DISTRIBUTION_API_KEY: ${{ secrets.ANDROID_DISTRIBUTION_API_KEY }}
           SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_SENTRY_AUTH_TOKEN }}
-        run: ./gradlew :app:bundleRelease
+        run: ./gradlew :app:bundlePlayStoreRelease
 
       - name: Convert AAB to APK
         run: |
           java -jar /usr/local/bin/bundletool.jar build-apks \
             --mode=universal \
-            --bundle=./app/build/outputs/bundle/release/app-release.aab \
+            --bundle=./app/build/outputs/bundle/playStoreRelease/app-playStoreRelease.aab \
             --output=${{ runner.temp }}/app-release.apks \
             --ks=${{ runner.temp }}/keystore.jks \
             --ks-pass=pass:${{ secrets.ANDROID_RELEASE_STORE_PASSWORD }} \
@@ -91,4 +89,4 @@ jobs:
           AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
           AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
         run: |
-          aws s3 cp app/build/outputs/bundle/release/app-release.aab s3://hn-artifacts/app-release-${{ env.VERSION_NAME }}.aab
+          aws s3 cp app/build/outputs/bundle/playStoreRelease/app-playStoreRelease.aab s3://hn-artifacts/app-release-${{ env.VERSION_NAME }}.aab

android/app/build.gradle.kts

@@ -10,8 +10,6 @@ plugins {
   alias(libs.plugins.androidx.room)
 }
 
-val runningEnv: String? = System.getenv("RUNNING_ENV")
-
 android {
   namespace = "com.emergetools.hackernews"
   compileSdk = 36
@@ -33,9 +31,10 @@ android {
   }
 
   signingConfigs {
-    if (runningEnv == "release_workflow") {
+    val keystorePath = System.getenv("DECODED_KEYSTORE_PATH")
+    if (keystorePath != null) {
       create("release") {
-        storeFile = file(System.getenv("DECODED_KEYSTORE_PATH"))
+        storeFile = file(keystorePath)
         keyAlias = System.getenv("RELEASE_KEY_ALIAS")
         keyPassword = System.getenv("RELEASE_KEY_PASSWORD")
         storePassword = System.getenv("RELEASE_STORE_PASSWORD")
@@ -55,14 +54,16 @@ android {
       proguardFiles(
         getDefaultProguardFile("proguard-android-optimize.txt"), "proguard-rules.pro"
       )
-      if (runningEnv == "release_workflow") {
-        manifestPlaceholders["emerge.distribution.apiKey"] = ""
-        manifestPlaceholders["emerge.distribution.tag"] = "release"
-        signingConfig = signingConfigs.getByName("release")
-      } else {
-        manifestPlaceholders["emerge.distribution.apiKey"] = System.getenv("ANDROID_DISTRIBUTION_API_KEY") ?: ""
-        signingConfig = signingConfigs.getByName("debug")
-      }
+      signingConfig = signingConfigs.getByName("debug")
+    }
+    create("playStoreRelease") {
+      initWith(getByName("release"))
+      signingConfig = signingConfigs.findByName("release")
+    }
+    create("beta") {
+      initWith(getByName("release"))
+      applicationIdSuffix = ".beta"
+      signingConfig = signingConfigs.findByName("release")
     }
   }
   buildFeatures {
@@ -100,10 +101,7 @@ emerge {
   }
 
   reaper {
-    // Only enable reaper on release workflow
-    if (runningEnv == "release_workflow") {
-      enabledVariants.set(listOf("release"))
-    }
+    enabledVariants.set(listOf("playStoreRelease"))
     publishableApiKey.set(System.getenv("REAPER_API_KEY"))
   }