@ramonclaudio/create-vexpo 0.1.0

package/dist/templates/default/scripts/rotate-apple-jwt.mjs

@@ -0,0 +1,80 @@
+#!/usr/bin/env node
+/**
+ * Re-sign the Apple Sign In `client_secret` JWT and push it to a Convex
+ * deployment. Designed for CI: reads everything from env vars, no disk IO,
+ * no prompts.
+ *
+ * Required env:
+ *   APPLE_P8_PRIVATE_KEY   PEM contents of the Sign In with Apple .p8
+ *   APPLE_TEAM_ID          10-char Apple Team id
+ *   APPLE_KEY_ID           10-char Sign In with Apple key id
+ *   APPLE_SERVICES_ID      Services id (e.g. com.you.app.signin)
+ *   CONVEX_DEPLOY_KEY      Convex deploy key for the target deployment
+ *   CONVEX_DEPLOYMENT      (optional) name of the target deployment; defaults to whatever the deploy key is bound to
+ *
+ * Used by `.eas/workflows/rotate-apple-jwt.yml` on a 90-day cadence so Apple's
+ * 180-day JWT cap never bites you. Runs on EAS infrastructure with env vars
+ * read from EAS env (production, secret visibility). no GitHub repo secrets
+ * needed.
+ */
+
+import { createSign } from "node:crypto";
+import { spawnSync } from "node:child_process";
+
+const required = [
+  "APPLE_P8_PRIVATE_KEY",
+  "APPLE_TEAM_ID",
+  "APPLE_KEY_ID",
+  "APPLE_SERVICES_ID",
+  "CONVEX_DEPLOY_KEY",
+];
+const missing = required.filter((k) => !process.env[k]);
+if (missing.length) {
+  console.error(`Missing env: ${missing.join(", ")}`);
+  process.exit(1);
+}
+
+const privateKey = process.env.APPLE_P8_PRIVATE_KEY.replace(/\\n/g, "\n");
+const teamId = process.env.APPLE_TEAM_ID;
+const keyId = process.env.APPLE_KEY_ID;
+const servicesId = process.env.APPLE_SERVICES_ID;
+
+const now = Math.floor(Date.now() / 1000);
+const header = { alg: "ES256", kid: keyId };
+const payload = {
+  iss: teamId,
+  iat: now,
+  exp: now + 180 * 86400,
+  aud: "https://appleid.apple.com",
+  sub: servicesId,
+};
+const headerB64 = Buffer.from(JSON.stringify(header)).toString("base64url");
+const payloadB64 = Buffer.from(JSON.stringify(payload)).toString("base64url");
+const signingInput = `${headerB64}.${payloadB64}`;
+const signer = createSign("SHA256");
+signer.update(signingInput);
+signer.end();
+const signature = signer.sign({ key: privateKey, dsaEncoding: "ieee-p1363" }).toString("base64url");
+const jwt = `${signingInput}.${signature}`;
+
+console.log(
+  `Signed JWT for ${servicesId} (expires ${new Date((now + 180 * 86400) * 1000).toISOString()})`,
+);
+
+const setEnv = (name, value) => {
+  const args = ["convex", "env", "set", name, value];
+  const res = spawnSync("npx", args, { stdio: "inherit" });
+  if (res.status !== 0) {
+    console.error(`convex env set ${name} failed (exit ${res.status})`);
+    process.exit(1);
+  }
+};
+
+setEnv("APPLE_CLIENT_ID", servicesId);
+setEnv("APPLE_TEAM_ID", teamId);
+setEnv("APPLE_KEY_ID", keyId);
+setEnv("APPLE_CLIENT_SECRET", jwt);
+
+console.log(
+  "Pushed APPLE_CLIENT_ID + APPLE_TEAM_ID + APPLE_KEY_ID + APPLE_CLIENT_SECRET to Convex",
+);

package/dist/templates/default/store.config.json

@@ -0,0 +1,58 @@
+{
+  "configVersion": 0,
+  "apple": {
+    "copyright": "YEAR YOUR_NAME",
+    "categories": ["DEVELOPER_TOOLS", "UTILITIES"],
+    "info": {
+      "en-US": {
+        "title": "Your App | Convex on Expo",
+        "subtitle": "Replace before submission",
+        "description": "Replace this with your app's full description before submitting to App Store. Apple allows up to 4,000 characters.",
+        "keywords": ["expo", "convex", "ios"],
+        "marketingUrl": "https://example.com",
+        "supportUrl": "https://example.com",
+        "privacyPolicyUrl": "https://example.com/privacy",
+        "privacyChoicesUrl": ""
+      }
+    },
+    "advisory": {
+      "alcoholTobaccoOrDrugUseOrReferences": "NONE",
+      "contests": "NONE",
+      "gamblingSimulated": "NONE",
+      "horrorOrFearThemes": "NONE",
+      "matureOrSuggestiveThemes": "NONE",
+      "medicalOrTreatmentInformation": "NONE",
+      "profanityOrCrudeHumor": "NONE",
+      "sexualContentGraphicAndNudity": "NONE",
+      "sexualContentOrNudity": "NONE",
+      "violenceCartoonOrFantasy": "NONE",
+      "violenceRealistic": "NONE",
+      "violenceRealisticProlongedGraphicOrSadistic": "NONE",
+      "gambling": false,
+      "unrestrictedWebAccess": false,
+      "kidsAgeBand": null,
+      "ageRatingOverride": "NONE",
+      "koreaAgeRatingOverride": "NONE",
+      "seventeenPlus": false
+    },
+    "review": {
+      "firstName": "YOUR_FIRST_NAME",
+      "lastName": "YOUR_LAST_NAME",
+      "email": "reviewer@example.com",
+      "phone": "+15555555555",
+      "notes": "Run `bunx vexpo rebrand` (or `bunx vexpo full`) before submitting. The wizard replaces every placeholder in this file with your fork's real values.",
+      "demoUsername": "review@example.com",
+      "demoPassword": "REPLACE_BEFORE_SUBMIT"
+    },
+    "release": {
+      "automaticRelease": true,
+      "phasedRelease": true
+    },
+    "releaseNotes": {
+      "en-US": "Initial release."
+    },
+    "promotionalText": {
+      "en-US": "Replace with your app's promotional text before submission."
+    }
+  }
+}

package/dist/templates/default/tsconfig.json

@@ -0,0 +1,13 @@
+{
+  "extends": "expo/tsconfig.base",
+  "compilerOptions": {
+    "strict": true,
+    "allowImportingTsExtensions": true,
+    "noEmit": true,
+    "paths": {
+      "@/*": ["./*"]
+    }
+  },
+  "include": ["**/*.ts", "**/*.tsx", ".expo/types/**/*.ts", "expo-env.d.ts"],
+  "exclude": ["node_modules", "scripts/build-brand.ts"]
+}

package/dist/templates/default/vitest.config.ts

@@ -0,0 +1,21 @@
+import { defineConfig } from "vitest/config";
+import path from "node:path";
+
+export default defineConfig({
+  resolve: {
+    alias: {
+      "@": path.resolve(__dirname),
+    },
+  },
+  test: {
+    environment: "node",
+    globals: true,
+    include: ["**/*.test.{ts,tsx}"],
+    exclude: ["node_modules/**", "ios/**", ".expo/**", "dist/**"],
+    server: {
+      deps: {
+        inline: ["convex-test"],
+      },
+    },
+  },
+});

package/package.json

@@ -0,0 +1,69 @@
+{
+  "name": "@ramonclaudio/create-vexpo",
+  "version": "0.1.0",
+  "description": "Scaffold a new vexpo project. Expo SDK 56 + Convex + Better Auth + Resend, wired for iOS, real auth, real push, real OTA, real App Store submission.",
+  "keywords": [
+    "better-auth",
+    "convex",
+    "create",
+    "expo",
+    "expo-sdk-56",
+    "ios",
+    "react-native",
+    "resend",
+    "scaffold",
+    "starter",
+    "template",
+    "vexpo"
+  ],
+  "homepage": "https://github.com/ramonclaudio/vexpo/tree/main/packages/create-vexpo#readme",
+  "bugs": {
+    "url": "https://github.com/ramonclaudio/vexpo/issues"
+  },
+  "license": "MIT",
+  "author": "Ramon Claudio <hello@ramonclaudio.com> (https://github.com/ramonclaudio)",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ramonclaudio/vexpo.git",
+    "directory": "packages/create-vexpo"
+  },
+  "bin": {
+    "create-vexpo": "./dist/index.js"
+  },
+  "files": [
+    "dist",
+    "templates"
+  ],
+  "type": "module",
+  "exports": {
+    ".": "./dist/index.js",
+    "./package.json": "./package.json"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true,
+    "registry": "https://registry.npmjs.org/"
+  },
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "typecheck": "tsc --noEmit",
+    "test": "echo '(create-vexpo: no per-package tests yet. covered by template e2e)'"
+  },
+  "dependencies": {
+    "commander": "^14.0.3",
+    "execa": "^9.6.1",
+    "kleur": "^4.1.5",
+    "ora": "^9.4.0",
+    "prompts": "^2.4.2"
+  },
+  "devDependencies": {
+    "@types/node": "^25.6.0",
+    "@types/prompts": "^2.4.9",
+    "tsup": "^8.5.1",
+    "typescript": "^6.0.3"
+  },
+  "engines": {
+    "node": ">=20.10"
+  }
+}