ruby_native 0.8.2 → 0.9.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 48ed2ba9df701df93f8e2f323e2de1a7fd3eecb5bb110be14ca31f2e411e9c36
-  data.tar.gz: 79506084ad07267d3536c30ff281a65bd7c0c20a8851a20556b5a5ba49d165aa
+  metadata.gz: 8f882623a2d70e309c284e7a67a9dd4119579024f5c8da2afbb8cefbf5185127
+  data.tar.gz: e05abee9a75d6f830fa0e575517746bfa0e4bc728aeff5d2da75f893de09289e
 SHA512:
-  metadata.gz: 1953585bc5fc67ad9d2d86de072497695239ec5873d58a7cb8dfa8191b1abfd94173ace3036a7b6442ef04b213f28be7f76ca1ebc6a2c7adf5edd8587cb406e7
-  data.tar.gz: d7cd25a3cc33a9ce35a815f2b9d5a627b8e479d2ebaa6d25ab9ea23b5ebeb759b4e679e412ca347721c9c86a9c78a25848c065fe38a2619f171c509bec83466b
+  metadata.gz: a598a22166379ba712b9b0fb9417434cb94786937085055363bac1eb676c06a684addaecd4537e5b45098a9ed0ca810d0569d4c1af12c5adbe170cad1d0de6b2
+  data.tar.gz: 3fd6fe2454af67d3ea515862dc3161b2a2695dbf1534774baa3afa03e72e8ae564cb147a24d6ff7ad53feebaf1d41520025bdd849a2bb5dc139e583874d2ae0e

data/README.md

@@ -79,6 +79,26 @@ The companion app persists the scanned URL across launches. Long-press the app i
 - `GET /native/config` - returns the YAML config as JSON
 - `POST /native/push/devices` - registers a push notification token (requires `current_user` from host app)
 
+## Push notifications
+
+Delivery uses the companion `action_push_native` gem. Ruby Native owns the registration handshake (the `native_push_tag` helper prompts for permission, `/native/push/devices` stores the token) and the tap-handling conventions on the native side.
+
+When sending a push, two destination keys are supported via `with_data`:
+
+- `path` — internal route appended to your base URL and loaded in the in-app WebView (e.g. `/sources/42`).
+- `url` — full external URL opened in `SFSafariViewController`, leaving the WebView in place behind it (e.g. `https://dashboard.stripe.com/payments/pi_abc`).
+
+If both are present, `url` wins. `http` and `https` URLs open in `SFSafariViewController`; other valid schemes (`mailto:`, `tel:`, `maps:`, third-party app schemes, etc.) hand off to the appropriate app via `UIApplication.open`. Malformed `url` strings are dropped (the tap does not fall back to `path`).
+
+```ruby
+ApplicationPushNotification
+  .with_data(path: source_path(source), url: notification.external_url)
+  .new(title: "New payment", body: "$49.99 from joe@example.com")
+  .deliver_later_to(user.push_devices)
+```
+
+For model/migration setup, see [action_push_native](https://github.com/basecamp/action_push_native).
+
 ## Normal and Advanced Modes
 
 Normal Mode works with any frontend framework and requires no JavaScript. You get tabs, form page marking, push notifications, and history management.

data/app/controllers/ruby_native/screenshots/sessions_controller.rb

@@ -0,0 +1,62 @@
+module RubyNative
+  module Screenshots
+    # Validates the per-app screenshot key, signs in the configured screenshot
+    # user, and sets a session-scoped cookie that the host app can use to
+    # render deterministically (freeze timestamps, hide notifications, etc.).
+    #
+    # The key is accepted via the `X-RubyNative-Screenshot-Key` header or the
+    # `?ruby_native_screenshot_key=` URL parameter. WKWebView drops custom
+    # headers across redirect chains in some iOS versions, so the URL-param
+    # fallback is the primary path used by Ruby Native's screenshot pipeline.
+    class SessionsController < ::ActionController::Base
+      def show
+        # Defense in depth: prevent the URL (which carries the key as a query
+        # param on the way in) from leaking via the Referer header to anything
+        # the redirect target loads.
+        response.headers["Referrer-Policy"] = "no-referrer"
+
+        unless RubyNative.screenshot_key.present? && RubyNative.screenshot_sign_in.present?
+          Rails.logger.info { "[RubyNative] /native/screenshots/session called but screenshot config is not set" }
+          head :not_found
+          return
+        end
+
+        unless valid_key?
+          Rails.logger.info { "[RubyNative] /native/screenshots/session rejected: invalid key" }
+          head :unauthorized
+          return
+        end
+
+        RubyNative.screenshot_sign_in.call(SignInHelper.new(self))
+
+        cookies[:_ruby_native_screenshot_session] = {
+          value: "1",
+          httponly: true,
+          secure: request.ssl?,
+          same_site: :lax
+        }
+
+        redirect_to safe_return_to, allow_other_host: false
+      end
+
+      private
+
+      def valid_key?
+        provided = request.headers["X-RubyNative-Screenshot-Key"].presence || params[:ruby_native_screenshot_key].presence
+        return false unless provided
+        ActiveSupport::SecurityUtils.secure_compare(provided.to_s, RubyNative.screenshot_key.to_s)
+      end
+
+      def safe_return_to
+        target = params[:return_to].to_s
+        return "/" if target.empty?
+        # Reject anything that isn't a single-leading-slash same-host path.
+        # `//evil.com` and `/\evil.com` would be treated as protocol-relative
+        # or backslash-confusing inputs by some browsers.
+        return "/" if target.start_with?("//", "/\\")
+        return "/" unless target.start_with?("/")
+        target
+      end
+    end
+  end
+end

data/config/routes.rb

@@ -15,4 +15,7 @@ RubyNative::Engine.routes.draw do
     post "completions/:uuid", to: "completions#create", as: :completion
     resource :restore, only: :create
   end
+  namespace :screenshots do
+    resource :session, only: :show, controller: "sessions"
+  end
 end

data/lib/generators/ruby_native/install_generator.rb

@@ -25,7 +25,7 @@ module RubyNative
         return unless File.exist?(gitignore)
         return if File.read(gitignore).include?(".ruby_native")
 
-        append_to_file ".gitignore", "\n# Ruby Native (Playwright, screenshots, session data)\n.ruby_native/\n"
+        append_to_file ".gitignore", "\n# Ruby Native\n.ruby_native/\n"
         say "  Added .ruby_native/ to .gitignore", :green
       end
 

data/lib/generators/ruby_native/templates/CLAUDE.md

@@ -129,6 +129,26 @@ The gem auto-mounts at `/native`. No route configuration needed.
 - `GET /native/config` returns the YAML config as JSON
 - `POST /native/push/devices` registers a push notification device token
 
+## Push notifications
+
+Delivery uses the companion `action_push_native` gem. Ruby Native owns the registration (the `native_push_tag` helper prompts for permission, `/native/push/devices` stores the token) and defines the tap conventions on the native side.
+
+Two destination keys are supported via `with_data`:
+
+- `path` — internal route appended to your base URL, loaded in the WebView.
+- `url` — full external URL, opened in `SFSafariViewController`.
+
+If both are present, `url` wins. `http` and `https` open in `SFSafariViewController`; other valid schemes (`mailto:`, `tel:`, `maps:`, third-party app schemes) open via `UIApplication.open`. Malformed `url` does not fall back to `path`.
+
+```ruby
+ApplicationPushNotification
+  .with_data(path: source_path(source), url: notification.external_url)
+  .new(title: "New payment", body: "$49.99 from joe@example.com")
+  .deliver_later_to(user.push_devices)
+```
+
+For model/migration setup, see the [action_push_native](https://github.com/basecamp/action_push_native) README.
+
 ## CLI
 
 ### Deploy from CI
@@ -154,7 +174,6 @@ Set `RUBY_NATIVE_TOKEN` as an environment variable for CI (no interactive login
 bundle exec ruby_native login         # authenticate (opens browser)
 bundle exec ruby_native deploy        # trigger a build
 bundle exec ruby_native preview       # start a tunnel and display a QR code
-bundle exec ruby_native screenshots   # capture App Store screenshots
 bundle exec ruby_native logout        # remove stored credentials
 ```
 

data/lib/ruby_native/cli/deploy.rb

@@ -16,6 +16,7 @@ module RubyNative
 
       def initialize(argv)
         @if_needed = argv.include?("--if-needed")
+        @platform = parse_platform(argv)
       end
 
       def run
@@ -105,7 +106,7 @@ module RubyNative
         req = Net::HTTP::Post.new(uri)
         req["Authorization"] = "Token #{Credentials.token}"
         req["Content-Type"] = "application/json"
-        req.body = JSON.generate(gem_version: RubyNative::VERSION)
+        req.body = JSON.generate(build_payload)
 
         response = make_request(uri, req)
 
@@ -174,7 +175,7 @@ module RubyNative
             puts "  Version: v#{data["version"]} (#{data["number"]})"
             puts "  Ruby Native: #{data["native_version"]}" if data["native_version"]
             puts ""
-            puts "Your build is being submitted to TestFlight."
+            puts success_destination_message(data)
             break
           when "failure", "failed", "cancelled"
             puts ""
@@ -208,15 +209,59 @@ module RubyNative
       end
 
       def print_status(status)
-        labels = {
-          "queued" => "Queued",
-          "building" => "Building",
-          "processing" => "Submitting to App Store Connect"
-        }
-        label = labels[status]
+        label = status_labels[status]
         puts "  #{label}..." if label
       end
 
+      def status_labels
+        if android?
+          {
+            "queued" => "Queued",
+            "building" => "Building Android AAB",
+            "processing" => "Uploading to Play Internal Testing"
+          }
+        else
+          {
+            "queued" => "Queued",
+            "building" => "Building",
+            "processing" => "Submitting to App Store Connect"
+          }
+        end
+      end
+
+      def success_destination_message(data)
+        platform = data["platform"] || requested_platform
+        case platform
+        when "android"
+          "Your build is being uploaded to Play Internal Testing."
+        else
+          "Your build is being submitted to TestFlight."
+        end
+      end
+
+      def parse_platform(argv)
+        return "android" if argv.include?("--android")
+
+        flag = argv.find { |a| a.start_with?("--platform=") }
+        return flag.split("=", 2).last if flag
+
+        "ios"
+      end
+
+      def requested_platform
+        @platform
+      end
+
+      def android?
+        @platform == "android"
+      end
+
+      def build_payload
+        payload = { gem_version: RubyNative::VERSION }
+        payload[:platform] = @platform unless @platform == "ios"
+        payload
+      end
+
       # --- App linking ---
 
       def link_app

data/lib/ruby_native/cli.rb

@@ -2,7 +2,6 @@ require "ruby_native/cli/credentials"
 require "ruby_native/cli/deploy"
 require "ruby_native/cli/login"
 require "ruby_native/cli/preview"
-require "ruby_native/cli/screenshots"
 
 module RubyNative
   class CLI
@@ -13,22 +12,24 @@ module RubyNative
         RubyNative::CLI::Deploy.new(argv).run
       when "preview"
         RubyNative::CLI::Preview.new(argv).run
-      when "screenshots"
-        RubyNative::CLI::Screenshots.new(argv).run
       when "login"
         RubyNative::CLI::Login.new(argv).run
       when "logout"
         RubyNative::CLI::Credentials.clear
         puts "Logged out of Ruby Native."
+      when "screenshots"
+        warn "ruby_native screenshots was removed in 0.9.0."
+        warn "Screenshots are now captured by rubynative.com against your deployed site."
+        warn "See https://rubynative.com/docs/ship/screenshots for the new flow."
+        exit 1
       else
         puts "Usage: ruby_native <command>"
         puts ""
         puts "Commands:"
-        puts "  deploy        Trigger an iOS build"
+        puts "  deploy        Trigger an iOS build (use --android for Android)"
         puts "  login         Authenticate with Ruby Native"
         puts "  logout        Remove stored credentials"
         puts "  preview       Start a tunnel and display a QR code"
-        puts "  screenshots   Capture web screenshots for App Store images"
       end
     end
   end

data/lib/ruby_native/engine.rb

@@ -9,7 +9,7 @@ module RubyNative
     end
 
     initializer "ruby_native.filter_params" do |app|
-      app.config.filter_parameters += [:signedPayload]
+      app.config.filter_parameters += [:signedPayload, :ruby_native_screenshot_key]
     end
 
     initializer "ruby_native.helpers" do

data/lib/ruby_native/helper.rb

@@ -1,5 +1,18 @@
 module RubyNative
   module Helper
+    # True when the current request is part of a Ruby Native screenshot run.
+    # Use this to render deterministically: freeze relative timestamps, hide
+    # push banners, suppress ads, disable A/B variants, skip notifications.
+    #
+    #   <% if ruby_native_screenshot_session? %>
+    #     Stamped 2 days ago
+    #   <% else %>
+    #     <%= time_ago_in_words(stamp.created_at) %>
+    #   <% end %>
+    def ruby_native_screenshot_session?
+      cookies[:_ruby_native_screenshot_session] == "1"
+    end
+
     def native_tabs_tag(enabled: true)
       return "".html_safe unless enabled
       tag.div(data: { native_tabs: true }, hidden: true)
@@ -40,8 +53,10 @@ module RubyNative
       tag.div(data: { native_navbar: title.to_s }, hidden: true) { builder.to_html }
     end
 
-    def native_fab_tag(icon:, href: nil, click: nil)
-      data = { native_fab: true, native_icon: icon }
+    def native_fab_tag(icon: nil, icons: nil, href: nil, click: nil)
+      resolved = RubyNative::Helper.resolve_icon(icon: icon, icons: icons, platform: try(:native_platform))
+      raise ArgumentError, "native_fab_tag requires an icon" if resolved.nil?
+      data = { native_fab: true, native_icon: resolved }
       data[:native_href] = href if href
       data[:native_click] = click if click
       tag.div(data: data, hidden: true)
@@ -58,16 +73,31 @@ module RubyNative
       data
     end
 
+    # Picks the right icon name for the current native platform. Accepts the
+    # single `icon:` form (applied to every platform) and/or the `icons:` hash
+    # form (`{ ios: "...", android: "..." }`). When both are given, a matching
+    # `icons[platform]` wins; otherwise falls back to `icon`. Returns nil when
+    # nothing resolves.
+    def self.resolve_icon(icon: nil, icons: nil, platform: nil)
+      if icons.is_a?(Hash) && platform
+        key = platform.to_sym
+        per_platform = icons[key] || icons[key.to_s]
+        return per_platform if per_platform
+      end
+      icon
+    end
+
     class NavbarBuilder
       def initialize(context)
         @context = context
         @items = []
       end
 
-      def button(title = nil, icon: nil, href: nil, click: nil, position: :trailing, selected: false, &block)
+      def button(title = nil, icon: nil, icons: nil, href: nil, click: nil, position: :trailing, selected: false, &block)
+        resolved = RubyNative::Helper.resolve_icon(icon: icon, icons: icons, platform: @context.try(:native_platform))
         data = { native_button: "" }
         data[:native_title] = title if title
-        data[:native_icon] = icon if icon
+        data[:native_icon] = resolved if resolved
         data[:native_href] = href if href
         data[:native_click] = click if click
         data[:native_position] = position.to_s
@@ -101,11 +131,12 @@ module RubyNative
         @items = []
       end
 
-      def item(title, href: nil, click: nil, icon: nil, selected: false)
+      def item(title, href: nil, click: nil, icon: nil, icons: nil, selected: false)
+        resolved = RubyNative::Helper.resolve_icon(icon: icon, icons: icons, platform: @context.try(:native_platform))
         data = { native_menu_item: "", native_title: title }
         data[:native_href] = href if href
         data[:native_click] = click if click
-        data[:native_icon] = icon if icon
+        data[:native_icon] = resolved if resolved
         data[:native_selected] = "" if selected
         @items << @context.tag.div(data: data)
       end

data/lib/ruby_native/native_detection.rb

@@ -3,7 +3,7 @@ module RubyNative
     extend ActiveSupport::Concern
 
     included do
-      helper_method :native_app?, :native_version if respond_to?(:helper_method)
+      helper_method :native_app?, :native_version, :native_platform if respond_to?(:helper_method)
     end
 
     def native_app?
@@ -14,5 +14,14 @@ module RubyNative
       match = request.user_agent.to_s.match(/RubyNative\/([\d.]+)/)
       NativeVersion.new(match ? match[1] : "0")
     end
+
+    # Returns "ios" or "android" for native requests, nil for web browsers.
+    # Used by view helpers to pick the right icon from `icons: { ios:, android: }`.
+    def native_platform
+      ua = request.user_agent.to_s
+      return "ios" if ua.include?("Ruby Native iOS")
+      return "android" if ua.include?("Ruby Native Android")
+      nil
+    end
   end
 end

data/lib/ruby_native/screenshots/sign_in_helper.rb

@@ -0,0 +1,26 @@
+module RubyNative
+  module Screenshots
+    # Yielded to the customer's `screenshot_sign_in` lambda. Exposes the
+    # request, session, and cookies as public accessors so the lambda never
+    # touches `ActionController` internals directly. `cookies` in particular
+    # is private on `ActionController::Base` in Rails 8.1+, so customers
+    # would otherwise have to fall back to `controller.send(:cookies)`.
+    class SignInHelper
+      def initialize(controller)
+        @controller = controller
+      end
+
+      def cookies
+        @controller.send(:cookies)
+      end
+
+      def request
+        @controller.request
+      end
+
+      def session
+        @controller.session
+      end
+    end
+  end
+end

data/lib/ruby_native/version.rb

@@ -1,3 +1,3 @@
 module RubyNative
-  VERSION = "0.8.2"
+  VERSION = "0.9.1"
 end

data/lib/ruby_native.rb

@@ -10,12 +10,21 @@ require "ruby_native/iap/verifiable"
 require "ruby_native/iap/decodable"
 require "ruby_native/iap/normalizable"
 require "ruby_native/iap/apple_webhook_processor"
+require "ruby_native/screenshots/sign_in_helper"
 require "ruby_native/engine"
 
 module RubyNative
   mattr_accessor :config
   mattr_accessor :subscription_callbacks, default: []
 
+  # Screenshot configuration. Set via `RubyNative.configure` in an initializer.
+  mattr_accessor :screenshot_key
+  mattr_accessor :screenshot_sign_in
+
+  def self.configure
+    yield self
+  end
+
   def self.on_subscription_change(&block)
     subscription_callbacks << block
   end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: ruby_native
 version: !ruby/object:Gem::Version
-  version: 0.8.2
+  version: 0.9.1
 platform: ruby
 authors:
 - Joe Masilotti
@@ -70,6 +70,7 @@ files:
 - app/controllers/ruby_native/iap/purchases_controller.rb
 - app/controllers/ruby_native/iap/restores_controller.rb
 - app/controllers/ruby_native/push/devices_controller.rb
+- app/controllers/ruby_native/screenshots/sessions_controller.rb
 - app/controllers/ruby_native/webhooks/apple_controller.rb
 - app/javascript/ruby_native/back.js
 - app/models/ruby_native/iap/purchase_intent.rb
@@ -89,7 +90,6 @@ files:
 - lib/ruby_native/cli/deploy.rb
 - lib/ruby_native/cli/login.rb
 - lib/ruby_native/cli/preview.rb
-- lib/ruby_native/cli/screenshots.rb
 - lib/ruby_native/engine.rb
 - lib/ruby_native/helper.rb
 - lib/ruby_native/iap/apple_webhook_processor.rb
@@ -101,6 +101,7 @@ files:
 - lib/ruby_native/native_detection.rb
 - lib/ruby_native/native_version.rb
 - lib/ruby_native/oauth_middleware.rb
+- lib/ruby_native/screenshots/sign_in_helper.rb
 - lib/ruby_native/tunnel_cookie_middleware.rb
 - lib/ruby_native/version.rb
 homepage: https://github.com/ruby-native/gem

data/lib/ruby_native/cli/screenshots.rb

@@ -1,590 +0,0 @@
-require "json"
-require "open3"
-require "fileutils"
-require "tempfile"
-require "net/http"
-require "uri"
-require "ruby_native/cli/credentials"
-
-module RubyNative
-  class CLI
-    class Screenshots
-      STORAGE_DIR = ".ruby_native"
-      STORAGE_FILE = "screenshots_storage.json"
-      OUTPUT_DIR = ".ruby_native/screenshots"
-      CONFIG_PATH = "config/ruby_native.yml"
-      SCALE = 3
-      WIDTH_PX = 1320
-      HEIGHT_PX = 2868
-      WIDTH_PT = WIDTH_PX / SCALE  # 440
-      HEIGHT_PT = HEIGHT_PX / SCALE # 956
-
-      HOST = ENV.fetch("RUBY_NATIVE_HOST", "https://rubynative.com")
-
-      def initialize(argv)
-        @url = parse_option(argv, "--url", nil)
-        @port = parse_option(argv, "--port", nil)
-        @output = parse_option(argv, "--output", OUTPUT_DIR)
-        @login = argv.delete("--login")
-
-        if @url
-          unless @url.match?(%r{\Ahttps?://})
-            host = @url.split(":", 2).first
-            scheme = (host == "localhost" || host.match?(/\A\d+\.\d+\.\d+\.\d+\z/)) ? "http" : "https"
-            @url = "#{scheme}://#{@url}"
-          end
-          @url = @url.chomp("/")
-          @port = URI(@url).port if @port.nil?
-        else
-          @port = (@port || 3000).to_i
-        end
-      end
-
-      def run
-        load_config!
-        check_node!
-        check_playwright!
-
-        if @login
-          run_login
-        else
-          run_setup unless screenshots_configured?
-          check_server!
-          capture_screenshots
-          upload_screenshots if credentials_available?
-        end
-      end
-
-      private
-
-      def parse_option(argv, flag, default)
-        index = argv.index(flag)
-        if index
-          argv.delete_at(index)
-          argv.delete_at(index) || default
-        else
-          default
-        end
-      end
-
-      # --- Config ---
-
-      def load_config!
-        unless File.exist?(CONFIG_PATH)
-          puts "config/ruby_native.yml not found. Run `rails generate ruby_native:install` first."
-          exit 1
-        end
-
-        require "yaml"
-        @config = YAML.load_file(CONFIG_PATH, symbolize_names: true) || {}
-      end
-
-      def screenshots_configured?
-        paths = @config.dig(:screenshots, :paths)
-        paths.is_a?(Array) && !paths.empty?
-      end
-
-      def screenshot_paths
-        @config.dig(:screenshots, :paths) || []
-      end
-
-      def tab_paths
-        tabs = @config[:tabs] || []
-        tabs.map { |tab| tab[:path] }.compact
-      end
-
-      # --- First-run setup ---
-
-      def run_setup
-        puts "Let's set up screenshots! (one-time)"
-        puts ""
-
-        paths = prompt_for_paths
-        write_paths_to_config(paths)
-        prompt_for_login
-
-        puts ""
-      end
-
-      def prompt_for_paths
-        tabs = tab_paths
-
-        if tabs.any?
-          puts "Which paths do you want to capture?"
-          puts "Your tabs: #{tabs.join(", ")}"
-          puts "Enter paths (comma-separated) or press Enter to use tab paths:"
-        else
-          puts "Which paths do you want to capture?"
-          puts "Enter paths (comma-separated):"
-        end
-
-        print "> "
-        input = $stdin.gets&.strip || ""
-
-        if input.empty?
-          if tabs.any?
-            tabs
-          else
-            puts "No paths entered and no tabs configured."
-            exit 1
-          end
-        else
-          input.split(",").map(&:strip).reject(&:empty?).map { |p| p.start_with?("/") ? p : "/#{p}" }
-        end
-      end
-
-      def write_paths_to_config(paths)
-        raw = File.read(CONFIG_PATH)
-
-        yaml_paths = paths.map { |p| "    - #{p}" }.join("\n")
-        screenshot_block = "\nscreenshots:\n  paths:\n#{yaml_paths}\n"
-
-        File.write(CONFIG_PATH, raw.rstrip + "\n" + screenshot_block)
-
-        # Reload config
-        require "yaml"
-        @config = YAML.load_file(CONFIG_PATH, symbolize_names: true) || {}
-
-        puts ""
-        puts "Added to #{CONFIG_PATH}:"
-        puts ""
-        puts "  screenshots:"
-        puts "    paths:"
-        paths.each { |p| puts "      - #{p}" }
-      end
-
-      def prompt_for_login
-        puts ""
-        puts "Does your app require sign-in? (y/n)"
-        print "> "
-        input = $stdin.gets&.strip&.downcase || ""
-
-        if input == "y" || input == "yes"
-          puts ""
-          run_login
-        end
-      end
-
-      # --- Checks ---
-
-      def check_node!
-        _, _, status = Open3.capture3("node", "--version")
-        unless status.success?
-          puts "Node.js is required for screenshots. Install it from https://nodejs.org"
-          exit 1
-        end
-      end
-
-      def check_server!
-        uri = URI("#{base_url}/")
-        http = Net::HTTP.new(uri.host, uri.port)
-        http.use_ssl = uri.scheme == "https"
-        http.open_timeout = 5
-        http.request(Net::HTTP::Head.new(uri))
-      rescue Errno::ECONNREFUSED, Errno::ECONNRESET, SocketError, Net::OpenTimeout
-        if @url
-          puts "Could not reach #{@url}."
-        else
-          puts "No server running on port #{@port}."
-          puts ""
-          puts "Start your Rails server first:"
-          puts "  bin/rails server#{" -p #{@port}" if @port != 3000}"
-        end
-        puts ""
-        puts "Then run this command again."
-        exit 1
-      end
-
-      def check_playwright!
-        FileUtils.mkdir_p(STORAGE_DIR)
-        add_to_gitignore
-
-        playwright_dir = File.join(STORAGE_DIR, "node_modules", "playwright")
-        unless File.exist?(playwright_dir)
-          puts "Playwright is required for screenshots."
-          puts "Install it now? (y/n)"
-          print "> "
-          input = $stdin.gets&.strip&.downcase || ""
-          exit 0 unless input == "y" || input == "yes"
-
-          puts ""
-          puts "Installing Playwright..."
-          system("npm", "install", "--prefix", STORAGE_DIR, "playwright", out: File::NULL, err: File::NULL)
-
-          puts "Installing WebKit browser..."
-          system("npx", "--prefix", STORAGE_DIR, "playwright", "install", "webkit", out: File::NULL)
-
-          unless File.exist?(playwright_dir)
-            puts ""
-            puts "Failed to install Playwright. Install it manually:"
-            puts "  npm install playwright"
-            puts "  npx playwright install webkit"
-            exit 1
-          end
-
-          puts ""
-        end
-      end
-
-      def base_url
-        @url || "http://localhost:#{@port}"
-      end
-
-      # --- Login ---
-
-      def run_login
-        puts "Opening browser to #{base_url}..."
-        puts "Sign in to your app, then close the browser window."
-        puts ""
-
-        script = login_script
-        run_playwright(script)
-
-        if File.exist?(storage_path)
-          puts ""
-          puts "Session saved."
-        else
-          puts ""
-          puts "No session saved. Try again with `ruby_native screenshots --login`."
-          exit 1
-        end
-      end
-
-      # --- Capture ---
-
-      def capture_screenshots
-        paths = screenshot_paths
-
-        if paths.empty?
-          puts "No screenshot paths configured in #{CONFIG_PATH}."
-          puts "Run `ruby_native screenshots` to set them up, or add manually:"
-          puts ""
-          puts "  screenshots:"
-          puts "    paths:"
-          puts "      - /inbox"
-          puts "      - /profile"
-          exit 1
-        end
-
-        FileUtils.mkdir_p(@output)
-
-        puts "Capturing #{paths.length} screenshot#{"s" if paths.length > 1} at #{WIDTH_PX}x#{HEIGHT_PX} (#{WIDTH_PT}x#{HEIGHT_PT}pt @#{SCALE}x)..."
-        puts ""
-
-        script = capture_script(paths)
-        run_playwright(script)
-
-        puts ""
-        puts "Screenshots saved to #{@output}/."
-      end
-
-      # --- Upload ---
-
-      def credentials_available?
-        if Credentials.token
-          true
-        else
-          puts ""
-          puts "Run `ruby_native login` to upload screenshots to Ruby Native."
-          false
-        end
-      end
-
-      def upload_screenshots
-        begin
-          app_id = @config.dig(:ruby_native, :app_id)
-          app_id = link_app unless app_id
-          return unless app_id
-
-          files = Dir.glob(File.join(@output, "*.png")).sort
-          if files.empty?
-            puts "No screenshots to upload."
-            return
-          end
-
-          puts ""
-          puts "Uploading #{files.length} screenshot#{"s" if files.length > 1}..."
-
-          api_delete("/api/v1/apps/#{app_id}/web_screenshots")
-
-          files.each_with_index do |file, index|
-            path = screenshot_paths[index] || File.basename(file, ".png")
-            config = compositor_config_for(path)
-            api_upload("/api/v1/apps/#{app_id}/web_screenshots", file, screenshot_path: path, position: index, total: files.length, compositor_config: config)
-            puts "  #{File.basename(file)}"
-          end
-
-          puts ""
-          puts "Uploaded to Ruby Native."
-        rescue TokenExpiredError
-          puts "Token expired. Run `ruby_native login` again."
-        rescue => e
-          puts "Upload failed: #{e.message}"
-          puts "Screenshots are saved locally in #{@output}/."
-        end
-      end
-
-      def link_app
-        apps = fetch_apps
-        return unless apps
-
-        if apps.empty?
-          puts "No apps found on your account."
-          return
-        end
-
-        app = if apps.length == 1
-          puts "Using app: #{apps[0]["name"]}"
-          apps[0]
-        else
-          puts "Which app?"
-          apps.each_with_index do |a, i|
-            puts "  #{i + 1}. #{a["name"]}"
-          end
-          print "> "
-          choice = ($stdin.gets&.strip || "").to_i
-          unless choice.between?(1, apps.length)
-            puts "Invalid choice."
-            return
-          end
-          apps[choice - 1]
-        end
-
-        app_id = app["public_id"]
-        write_app_id_to_config(app_id)
-        app_id
-      end
-
-      def write_app_id_to_config(app_id)
-        raw = File.read(CONFIG_PATH)
-
-        if raw.match?(/^ruby_native:/)
-          # Append under existing ruby_native key
-          raw = raw.gsub(/^(ruby_native:\s*\n)/, "\\1  app_id: #{app_id}\n")
-        else
-          raw = raw.rstrip + "\n\nruby_native:\n  app_id: #{app_id}\n"
-        end
-
-        File.write(CONFIG_PATH, raw)
-
-        require "yaml"
-        @config = YAML.load_file(CONFIG_PATH, symbolize_names: true) || {}
-      end
-
-      def fetch_apps
-        uri = URI("#{HOST}/api/v1/apps")
-        req = Net::HTTP::Get.new(uri)
-        req["Authorization"] = "Token #{Credentials.token}"
-
-        response = make_request(uri, req)
-
-        case response
-        when Net::HTTPUnauthorized
-          raise TokenExpiredError
-        when Net::HTTPSuccess
-          JSON.parse(response.body)
-        else
-          puts "Failed to fetch apps: #{response.code}"
-          nil
-        end
-      end
-
-      TokenExpiredError = Class.new(StandardError)
-
-      def api_delete(path)
-        uri = URI("#{HOST}#{path}")
-        req = Net::HTTP::Delete.new(uri)
-        req["Authorization"] = "Token #{Credentials.token}"
-
-        response = make_request(uri, req)
-        raise TokenExpiredError if response.is_a?(Net::HTTPUnauthorized)
-        response
-      end
-
-      def compositor_config_for(path)
-        tabs = (@config[:tabs] || []).map { |tab|
-          {title: tab[:title], icon: tab[:icon], selected: tab[:path] == path}
-        }
-
-        appearance = @config[:appearance] || {}
-        {
-          tabs: tabs,
-          tint_color: resolve_color(appearance[:tint_color]),
-          background_color: resolve_color(appearance[:background_color])
-        }.compact
-      end
-
-      def resolve_color(value)
-        case value
-        when Hash then value[:light] || value["light"]
-        when String then value
-        end
-      end
-
-      def api_upload(endpoint, file_path, screenshot_path:, position:, total:, compositor_config: nil)
-        uri = URI("#{HOST}#{endpoint}")
-        boundary = "RubyNative#{SecureRandom.hex(16)}"
-
-        body = build_multipart_body(boundary, file_path, screenshot_path, position, total, compositor_config)
-
-        req = Net::HTTP::Post.new(uri)
-        req["Authorization"] = "Token #{Credentials.token}"
-        req["Content-Type"] = "multipart/form-data; boundary=#{boundary}"
-        req.body = body
-
-        response = make_request(uri, req)
-        raise TokenExpiredError if response.is_a?(Net::HTTPUnauthorized)
-
-        if response.is_a?(Net::HTTPNotFound)
-          puts "App not found. Clearing app_id from config."
-          clear_app_id_from_config
-          return
-        end
-
-        response
-      end
-
-      def build_multipart_body(boundary, file_path, path, position, total, compositor_config)
-        parts = []
-
-        parts << "--#{boundary}\r\n"
-        parts << "Content-Disposition: form-data; name=\"path\"\r\n\r\n"
-        parts << "#{path}\r\n"
-
-        parts << "--#{boundary}\r\n"
-        parts << "Content-Disposition: form-data; name=\"position\"\r\n\r\n"
-        parts << "#{position}\r\n"
-
-        parts << "--#{boundary}\r\n"
-        parts << "Content-Disposition: form-data; name=\"total\"\r\n\r\n"
-        parts << "#{total}\r\n"
-
-        if compositor_config
-          parts << "--#{boundary}\r\n"
-          parts << "Content-Disposition: form-data; name=\"compositor_config\"\r\n\r\n"
-          parts << "#{JSON.generate(compositor_config)}\r\n"
-        end
-
-        parts << "--#{boundary}\r\n"
-        parts << "Content-Disposition: form-data; name=\"file\"; filename=\"#{File.basename(file_path)}\"\r\n"
-        parts << "Content-Type: image/png\r\n\r\n"
-        parts << File.binread(file_path)
-        parts << "\r\n"
-
-        parts << "--#{boundary}--\r\n"
-        parts.join
-      end
-
-      def make_request(uri, req)
-        http = Net::HTTP.new(uri.host, uri.port)
-        http.use_ssl = uri.scheme == "https"
-        http.open_timeout = 10
-        http.read_timeout = 30
-        http.request(req)
-      end
-
-      def clear_app_id_from_config
-        raw = File.read(CONFIG_PATH)
-        raw = raw.gsub(/^  app_id: .+\n/, "")
-        File.write(CONFIG_PATH, raw)
-
-        require "yaml"
-        @config = YAML.load_file(CONFIG_PATH, symbolize_names: true) || {}
-      end
-
-      # --- Playwright ---
-
-      def add_to_gitignore
-        gitignore = ".gitignore"
-        return unless File.exist?(gitignore)
-        return if File.read(gitignore).include?(".ruby_native")
-
-        File.open(gitignore, "a") { |f| f.puts "\n# Ruby Native\n.ruby_native/" }
-      end
-
-      def storage_path
-        File.join(STORAGE_DIR, STORAGE_FILE)
-      end
-
-      def run_playwright(script)
-        FileUtils.mkdir_p(STORAGE_DIR)
-        script_path = File.join(STORAGE_DIR, "capture.js")
-        File.write(script_path, script)
-
-        node_path = File.expand_path(File.join(STORAGE_DIR, "node_modules"))
-        env = {"NODE_PATH" => node_path}
-
-        stdout, stderr, status = Open3.capture3(env, "node", script_path)
-        puts stdout unless stdout.empty?
-
-        unless status.success?
-          puts stderr unless stderr.empty?
-        end
-      ensure
-        File.delete(script_path) if script_path && File.exist?(script_path)
-      end
-
-      def login_script
-        <<~JS
-          const { webkit } = require('playwright');
-
-          (async () => {
-            const browser = await webkit.launch({ headless: false });
-            const context = await browser.newContext();
-            const page = await context.newPage();
-
-            await page.goto('#{base_url}/');
-            console.log('Sign in to your app, then close the browser window.');
-
-            await page.waitForEvent('close', { timeout: 0 }).catch(() => {});
-            await context.storageState({ path: '#{storage_path}' });
-            await browser.close();
-          })();
-        JS
-      end
-
-      def capture_script(paths)
-        storage_opt = if File.exist?(storage_path)
-          "storageState: '#{storage_path}',"
-        else
-          ""
-        end
-
-        screenshots_js = paths.map.with_index { |path, i|
-          safe_name = path.gsub(/[^a-z0-9]/i, "_").gsub(/^_+|_+$/, "")
-          safe_name = "root" if safe_name.empty?
-          output_path = File.join(@output, "#{"%02d" % (i + 1)}_#{safe_name}.png")
-
-          <<~CAPTURE
-            const response_#{i} = await page.goto('#{base_url}#{path}', { waitUntil: 'networkidle' });
-            if (response_#{i} && response_#{i}.status() >= 400) {
-              console.log('  #{path} -> ERROR ' + response_#{i}.status() + ' (skipped)');
-            } else {
-              await page.screenshot({ path: '#{output_path}' });
-              console.log('  #{path} -> #{output_path}');
-            }
-          CAPTURE
-        }.join("\n")
-
-        <<~JS
-          const { webkit } = require('playwright');
-
-          (async () => {
-            const browser = await webkit.launch();
-            const context = await browser.newContext({
-              #{storage_opt}
-              viewport: { width: #{WIDTH_PT}, height: #{HEIGHT_PT} },
-              deviceScaleFactor: #{SCALE},
-              userAgent: 'Ruby Native iOS/1.0 Screenshot',
-            });
-            const page = await context.newPage();
-
-            #{screenshots_js}
-
-            await browser.close();
-          })();
-        JS
-      end
-    end
-  end
-end