@ramonclaudio/create-vexpo 0.1.0

package/dist/templates/default/.eas/workflows/rollback.yml

@@ -0,0 +1,86 @@
+name: Rollback
+
+# Manually trigger a rollback on any branch. Two flavors, matching the
+# canonical eas-cli surface:
+#
+#   "previous"  → republish an earlier update group on the same branch.
+#                 Picks the most recent successful update before the
+#                 currently-active one. Use this when a recent OTA broke
+#                 something users on previous builds didn't see.
+#                 Maps to `eas update:republish`.
+#                 https://docs.expo.dev/eas-update/rollbacks/
+#
+#   "embedded"  → roll back to the build's embedded bundle (the JS that
+#                 shipped with the .ipa). Effectively makes the next-OTA-check
+#                 ignore the current rollout and serve the binary as-is.
+#                 Use this when a broken OTA shouldn't ship to ANYONE on
+#                 that build. Maps to `eas update:roll-back-to-embedded`.
+#                 https://docs.expo.dev/eas-update/rollbacks/
+#
+# Pair with the asc-events workflow's Slack notify so the team knows.
+
+on:
+  workflow_dispatch:
+    inputs:
+      branch:
+        description: Branch to roll back (production | pr-<n>)
+        type: string
+        required: true
+      type:
+        description: Rollback flavor
+        type: select
+        required: true
+        default: previous
+        options:
+          - previous
+          - embedded
+      message:
+        description: Optional message stored on the update group
+        type: string
+        required: false
+
+concurrency:
+  cancel_in_progress: false
+  group: ${{ workflow.filename }}-${{ inputs.branch }}
+
+defaults:
+  tools:
+    bun: latest
+
+jobs:
+  rollback:
+    name: Roll back ${{ inputs.branch }} (${{ inputs.type }})
+    environment: ${{ inputs.branch == 'production' && 'production' || 'development' }}
+    runs_on: linux-medium
+    steps:
+      - uses: eas/checkout
+      - uses: eas/install_node_modules
+      - name: Roll back
+        run: |
+          MSG="${{ inputs.message }}"
+          MSG_ARG=""
+          if [ -n "$MSG" ]; then MSG_ARG="--message \"$MSG\""; fi
+          if [ "${{ inputs.type }}" = "embedded" ]; then
+            eval bunx eas-cli update:roll-back-to-embedded \
+              --branch "${{ inputs.branch }}" \
+              --platform ios \
+              --non-interactive \
+              $MSG_ARG
+          else
+            eval bunx eas-cli update:republish \
+              --branch "${{ inputs.branch }}" \
+              --platform ios \
+              --non-interactive \
+              $MSG_ARG
+          fi
+
+  notify:
+    name: Notify Slack
+    needs: [rollback]
+    type: slack
+    params:
+      webhook_url: https://hooks.slack.com/services/REPLACE/ME/HERE
+      message: |
+        :rewind: Rolled back `${{ inputs.branch }}` to ${{ inputs.type }}.
+        Triggered by: ${{ github.triggering_actor }}
+        Workflow: ${{ workflow.url }}

package/dist/templates/default/.eas/workflows/rollout.yml

@@ -0,0 +1,84 @@
+name: Rollout
+
+# Manually run a gradual rollout: publish a fresh OTA at a non-100%
+# percentage, or bump/lower the % of the most recent rollout group on a
+# branch. Mirrors the canonical EAS Update rollout flow:
+#   https://docs.expo.dev/eas-update/rollouts/
+#
+# Two paths, controlled by `action`:
+#
+#   "publish"  → `eas update --branch <b> --rollout-percentage <%>`
+#                Publishes a fresh OTA from the current HEAD at the given %.
+#                Use to start a new rollout (e.g. 5% → 25% → 100%).
+#
+#   "edit"     → `eas update:edit --branch <b> --rollout-percentage <%>`
+#                Bumps the percentage of the currently-active rollout group
+#                on the branch. Use to ramp an existing rollout.
+#
+# After confirming adoption looks healthy on the Insights dashboard, set
+# the rollout to 100. To kill a bad rollout, use the `rollback` workflow.
+
+on:
+  workflow_dispatch:
+    inputs:
+      branch:
+        description: Branch (production | pr-<n>)
+        type: string
+        required: true
+        default: production
+      action:
+        description: Publish a new rollout, or edit the % of the existing one
+        type: select
+        required: true
+        default: edit
+        options:
+          - edit
+          - publish
+      percentage:
+        description: Rollout percentage (1-100)
+        type: number
+        required: true
+        default: 25
+
+concurrency:
+  cancel_in_progress: false
+  group: ${{ workflow.filename }}-${{ inputs.branch }}
+
+defaults:
+  tools:
+    bun: latest
+
+jobs:
+  rollout:
+    name: ${{ inputs.action }} → ${{ inputs.percentage }}% on ${{ inputs.branch }}
+    environment: ${{ inputs.branch == 'production' && 'production' || 'development' }}
+    runs_on: linux-medium
+    steps:
+      - uses: eas/checkout
+      - uses: eas/install_node_modules
+      - name: Roll out
+        run: |
+          if [ "${{ inputs.action }}" = "publish" ]; then
+            bunx eas-cli update \
+              --branch "${{ inputs.branch }}" \
+              --platform ios \
+              --rollout-percentage "${{ inputs.percentage }}" \
+              --non-interactive \
+              --message "Rollout publish @ ${{ inputs.percentage }}%"
+          else
+            bunx eas-cli update:edit \
+              --branch "${{ inputs.branch }}" \
+              --rollout-percentage "${{ inputs.percentage }}" \
+              --non-interactive
+          fi
+
+  notify:
+    name: Notify Slack
+    needs: [rollout]
+    type: slack
+    params:
+      webhook_url: https://hooks.slack.com/services/REPLACE/ME/HERE
+      message: |
+        :chart_with_upwards_trend: Rollout ${{ inputs.action }} on `${{ inputs.branch }}` → ${{ inputs.percentage }}%
+        Triggered by: ${{ github.triggering_actor }}
+        Workflow: ${{ workflow.url }}

package/dist/templates/default/.eas/workflows/rotate-apple-jwt.yml

@@ -0,0 +1,42 @@
+name: Rotate Apple Sign In JWT
+
+# Apple caps client_secret JWTs at 180 days. We re-sign every 90 days so
+# we always have plenty of headroom and never get caught with an expired
+# token. Replaces the GitHub Actions equivalent. runs on EAS infrastructure
+# and reads secrets from EAS env vars (production, secret visibility) rather
+# than GitHub repo secrets.
+#
+# Required EAS env vars (production environment, secret visibility):
+#   APPLE_P8_PRIVATE_KEY    PEM contents of the Sign In with Apple .p8
+#   APPLE_TEAM_ID           10-char Apple Team id
+#   APPLE_KEY_ID            10-char Sign In with Apple key id
+#   APPLE_SERVICES_ID       Services id (e.g. com.you.app.signin)
+#   CONVEX_DEPLOY_KEY       Production Convex deploy key
+#
+# Set them once with:
+#   eas env:create --name APPLE_P8_PRIVATE_KEY --value-file <path-to-.p8> \
+#     --environment production --visibility secret
+#   eas env:create --name APPLE_TEAM_ID --value <value> \
+#     --environment production --visibility secret
+#   ...etc
+
+on:
+  schedule:
+    - cron: "0 12 1 */3 *" # 12:00 UTC on the 1st, every 3rd month
+  workflow_dispatch: {}
+
+defaults:
+  tools:
+    bun: latest
+
+jobs:
+  rotate:
+    name: Sign + push fresh client_secret
+    type: custom
+    runs_on: linux-medium
+    environment: production # pulls EAS env vars from production
+    steps:
+      - uses: eas/checkout
+      - uses: eas/install_node_modules
+      - name: Sign + push to Convex
+        run: node scripts/rotate-apple-jwt.mjs

package/dist/templates/default/.eas/workflows/testflight.yml

@@ -0,0 +1,57 @@
+name: TestFlight
+
+# Builds and distributes to TestFlight using the dedicated `testflight` job
+# (https://docs.expo.dev/eas/workflows/pre-packaged-jobs/#testflight). Unlike a
+# plain `submit`, this job lets us name internal/external groups, attach a
+# changelog, and gate on Beta App Review.
+
+on:
+  push:
+    branches: ["beta/*"]
+  workflow_dispatch:
+    inputs:
+      changelog:
+        type: string
+        required: false
+        description: 'What to test ("Bug fixes" if omitted)'
+
+concurrency:
+  cancel_in_progress: true
+  group: ${{ workflow.filename }}-${{ github.ref }}
+
+defaults:
+  tools:
+    bun: latest
+
+jobs:
+  precheck:
+    name: Precheck
+    type: custom
+    runs_on: linux-medium
+    steps:
+      - uses: eas/checkout
+      - uses: eas/install_node_modules
+      - name: Typecheck
+        run: bun run typecheck
+      - name: Lint
+        run: bun run lint
+      - name: Test
+        run: bun run test
+
+  build_ios:
+    name: Build iOS
+    needs: [precheck]
+    type: build
+    params:
+      platform: ios
+      profile: production
+
+  testflight:
+    name: Distribute to TestFlight
+    needs: [build_ios]
+    type: testflight
+    params:
+      build_id: ${{ needs.build_ios.outputs.build_id }}
+      profile: testflight
+      internal_groups: ["Internal"]
+      changelog: ${{ inputs.changelog || github.event.head_commit.message || 'Bug fixes' }}

package/dist/templates/default/.github/workflows/check.yml

@@ -0,0 +1,28 @@
+name: Check
+
+on:
+  pull_request:
+    branches: [main]
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: oven-sh/setup-bun@v2
+      - run: bun install
+      - run: bunx expo-doctor
+      - run: bun run typecheck
+      - run: bun run lint
+      - run: bun run format:check
+      - run: bun run test
+
+  fingerprint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: oven-sh/setup-bun@v2
+      - run: bun install
+      - run: bun run fp:diff

package/dist/templates/default/.maestro/launch.yaml

@@ -0,0 +1,18 @@
+# Smoke test: app launches and the welcome screen renders.
+#
+# Maestro auto-derives the appId from the build's bundle id, so the same
+# flow runs against the dev simulator binary (`com.example.<pkg>` fallback
+# in app.config.ts) and the production binary (`com.<your-team>.<app>`)
+# without edits.
+#
+# Run locally: `maestro test .maestro/launch.yaml`
+# Run on EAS:  triggered by `.eas/workflows/e2e-tests.yml` on every PR.
+appId: ${MAESTRO_APP_ID}
+---
+- launchApp:
+    clearState: true
+- assertVisible:
+    text: "Welcome"
+    timeout: 30000
+- assertVisible: "Your new app starts here."
+- takeScreenshot: welcome

package/dist/templates/default/AGENTS.md

@@ -0,0 +1,79 @@
+# AGENTS
+
+Guidance for AI coding assistants (Claude Code, Cursor, Aider, etc.) working in
+a scaffolded vexpo project. The same content applies to humans reading by
+hand. These are conventions, not magic.
+
+## Stack at a glance
+
+- **Backend.** Convex. Reactive queries, real-time sync, storage. No raw DB
+  calls. Everything goes through `convex/` (server) and `convex/react`
+  (client). After running `npx convex ai-files install`, read
+  `convex/_generated/ai/guidelines.md` before touching anything in `convex/`.
+- **Auth.** Better Auth via `@convex-dev/better-auth`. Patched locally with
+  PR #368 until upstream merges (`patches/`). Email verification is gated on
+  the `REQUIRE_EMAIL_VERIFICATION` Convex env var.
+- **Mobile.** Expo SDK 56 canary, RN 0.85, React 19. **iOS only today.**
+  Native UI exclusively via `@expo/ui/swift-ui`. No NativeWind, no Tailwind,
+  no `react-native-paper`.
+- **CI/CD.** EAS Workflows (`.eas/workflows/*.yml`) for everything
+  Expo-shaped. GitHub Actions (`.github/workflows/check.yml`) only for
+  general-purpose checks (typecheck, lint, format, tests, fingerprint).
+
+## Conventions
+
+- **TypeScript:** `strict: true`. Don't add `any` casts. If a type is hard,
+  ask before reaching for `any`.
+- **Imports:** Path alias `@/` resolves to the template root. No deep
+  relative imports (`../../../`).
+- **Files:** Lowercase, kebab-case filenames. One component per file. Default
+  export the component, named exports for everything else.
+- **State:** Convex `useQuery`/`useMutation` for server state. React `useState`
+  for local UI state. No Redux, no Zustand, no Jotai.
+- **Styling:** `@expo/ui/swift-ui` primitives + `modifiers`. The chassis is
+  SwiftUI, not RN. `<Host>` boundary tells you you're crossing into native.
+- **Validation:** Zod on the client (`lib/schemas.ts`), Convex validators on
+  the server (`convex/validators.ts`). Don't pick one. Both, at each
+  boundary.
+- **Errors:** Throw real `Error` instances. Wrap server errors with
+  `formatError` from `components/ui/convex-error.tsx`. Don't swallow.
+- **Tests:** Vitest. `templates/default/__tests__/` covers Convex constants,
+  validators, and deep-link parsing. Add tests for new validator logic and
+  new HTTP handlers.
+
+## What requires extra care
+
+- **Convex functions**: every query/mutation needs both server-side
+  validators and matching client types. The `convex/_generated/` directory is
+  the contract. Run `bunx convex codegen` after schema or function changes.
+- **HTTP routes** (`convex/http.ts`): every public endpoint must use
+  `convex/webhook.ts` `withWebhook()` factory for HMAC verification + body
+  cap + structured logging, or document why it doesn't. Inbound webhooks are
+  untrusted by default.
+- **Apple SIWA JWT**: rotates every 90 days via
+  `.eas/workflows/rotate-apple-jwt.yml`. Don't break the env-var contract
+  that cron depends on (`APPLE_P8_PRIVATE_KEY`, `APPLE_TEAM_ID`,
+  `APPLE_KEY_ID`, `APPLE_SERVICES_ID`, `CONVEX_DEPLOY_KEY`).
+- **Push notifications**: only work on a physical device. iOS Simulator does
+  not deliver APNs. Don't try to test push flows in the simulator.
+- **`store.config.json`**: ships with placeholder values. `bunx vexpo
+rebrand` fills them in. App Review will reject builds with placeholder
+  contact info.
+
+## When in doubt
+
+- Run `bunx vexpo doctor` to check that `.env.local`, Convex env, EAS env,
+  and `app.config.ts` agree.
+- Use `bunx eas <subcommand>` for canonical EAS operations. **Don't reinvent
+  EAS.** That's the vexpo design principle.
+- Read `SETUP.md` for the long-form orchestration walkthrough.
+
+<!-- convex-ai-start -->
+
+This project uses [Convex](https://convex.dev) as its backend.
+
+When working on Convex code, **always read `convex/_generated/ai/guidelines.md` first** for important guidelines on how to correctly use Convex APIs and patterns. The file contains rules that override what you may have learned about Convex from training data.
+
+Convex agent skills for common tasks can be installed by running `npx convex ai-files install`.
+
+<!-- convex-ai-end -->