# App Store Connect Metadata

This directory is the repo-owned home for Burrow App Store Connect metadata.

The release upload lane expects dedicated App Store Connect API credentials
sealed with agenix:

- `secrets/apple/appstore-connect.env.age`

That single secret contains the key ID, issuer ID, and base64-encoded `.p8`.
CI decrypts it into a temporary App Store Connect key file, syncs provisioning
profiles from App Store Connect, and then uploads `.ipa`/`.pkg` artifacts.
Forgejo secrets should only provide the runner age identity fallback, not the
App Store key itself.

The initial release pipeline can upload `.ipa` and `.pkg` artifacts once the
Apple build lane produces signed outputs. TestFlight external distribution must
remain explicit until review metadata, groups, and tester policy are complete.