more release stuff

apps/mobile/.release-it.ts

@@ -32,7 +32,7 @@ export default {
 
 	hooks: {
 		'before:init': ['turbo run lint:check'],
-		'before:github:release': 'pnpm run build:signed:apk',
+		'before:github:release': 'turbo run build:signed:apk',
 
 		'after:release': 'echo "Released ${npm.name} v${version}"',
 	},

apps/mobile/scripts/signed-build.ts

@@ -13,6 +13,14 @@ async function getSecrets(): Promise<{
 	keystoreAlias: string;
 	keystorePassword: string;
 }> {
+	const isBwUnlocked = await cmd(`bw status`, { stdio: 'pipe' }).then(
+		({ stdout }) => {
+			const bwStatus = JSON.parse(stdout) as { status: string };
+			return bwStatus.status === 'unlocked';
+		},
+	);
+	if (!isBwUnlocked) throw new Error('Bitwarden is not unlocked');
+
 	const { stdout: rawBwItemString } = await cmd(
 		`bw get item "fressh keystore" --raw`,
 		{

apps/mobile/turbo.jsonc

@@ -28,5 +28,6 @@
 		// Special tasks
 		"expo:doctor": {},
 		"test:e2e": {},
+		"build:signed:apk": {},
 	},
 }

turbo.jsonc

@@ -6,6 +6,7 @@
 		"ANDROID_*",
 		"SSL_CERT_FILE",
 		"GRADLE_OPTS",
+		"BW_SESSION",
 	],
 	"tasks": {
 		// Defaults