@shaykec/app-agent 1.0.5 → 1.0.6

package/templates/shared/ios/SecretsConfig/SETUP.md

@@ -0,0 +1,67 @@
+# SecretsConfig — Setup Guide
+
+This app uses `SecretsConfig` to manage API keys securely. Keys are stored in a local configuration file that is **never committed to git**.
+
+## Quick Start
+
+```bash
+# 1. Copy the template
+cp Secrets.xcconfig.template Secrets.xcconfig
+
+# 2. Open Secrets.xcconfig and fill in your keys
+open Secrets.xcconfig
+```
+
+## Where to Get Your Keys
+
+### Wix (Member / Customer apps)
+
+1. Go to [https://dev.wix.com](https://dev.wix.com)
+2. Create a new Headless project (or open your existing Wix site)
+3. Navigate to **OAuth Apps** and create a new OAuth app
+4. Copy the **Client ID** → paste as `WIX_CLIENT_ID`
+5. Copy your **Site ID** from the site dashboard URL → paste as `WIX_SITE_ID`
+6. Set the redirect URL to `yourapp://oauth/callback` → paste as `WIX_REDIRECT_URL`
+7. Enable the APIs you need (Stores, Bookings, Events, Blog) in the OAuth app permissions
+
+### Wix (Owner / Admin apps)
+
+1. Go to your Wix site **Dashboard > Settings > API Keys**
+2. Click **Generate API Key**
+3. Select the permissions you need (Stores, Bookings, Events, Blog, Site Management)
+4. Copy the **API Key** → paste as `WIX_API_KEY`
+5. Copy your **Site ID** → paste as `WIX_SITE_ID`
+
+### Firebase
+
+Firebase does **not** use `Secrets.xcconfig`. Instead:
+
+1. Go to [https://console.firebase.google.com](https://console.firebase.google.com)
+2. Create a project and register your iOS app (use your bundle ID)
+3. Download `GoogleService-Info.plist`
+4. Drag it into your Xcode project root (ensure "Copy items if needed" is checked)
+5. The Firebase SDK reads this file automatically at startup
+
+### Supabase
+
+1. Go to [https://supabase.com/dashboard](https://supabase.com/dashboard)
+2. Create a new project (or open an existing one)
+3. Go to **Project Settings > API**
+4. Copy the **Project URL** → paste as `SUPABASE_URL`
+5. Copy the **anon/public key** → paste as `SUPABASE_ANON_KEY`
+6. The anon key is safe for client apps — your data is protected by Row Level Security (RLS)
+
+## Verify Your Setup
+
+After filling in keys, build and run the app. Check the Xcode console for warnings:
+
+- `⚠️ SecretsConfig: 'KEY_NAME' is not configured` — this key is missing or still has a placeholder value
+- No warnings = all keys are properly configured
+
+## Security Notes
+
+- `Secrets.xcconfig` is in `.gitignore` — it will **never** be committed
+- `Secrets.xcconfig.template` is safe to commit — it only contains placeholder values
+- Never hardcode API keys directly in Swift source files
+- Supabase anon keys and Wix client IDs are **client-safe** (designed to be in mobile apps)
+- Server-side secrets (database passwords, Stripe secret keys) should **never** be in a mobile app

package/templates/shared/ios/SecretsConfig/Secrets.xcconfig.template

@@ -0,0 +1,30 @@
+// Secrets.xcconfig — API keys and secrets
+// ─────────────────────────────────────────────────────────────
+// SETUP:
+//   1. Copy this file:  cp Secrets.xcconfig.template Secrets.xcconfig
+//   2. Fill in your keys below
+//   3. Secrets.xcconfig is already in .gitignore — never commit it
+//
+// These values are injected into Info.plist at build time.
+// Access them in code via SecretsConfig (e.g., SecretsConfig.wixClientId).
+// ─────────────────────────────────────────────────────────────
+
+// ── Wix (Member / Customer apps) ──
+// Get these from https://dev.wix.com > OAuth Apps
+WIX_CLIENT_ID = YOUR_WIX_CLIENT_ID
+WIX_SITE_ID = YOUR_WIX_SITE_ID
+WIX_REDIRECT_URL = yourapp://oauth/callback
+
+// ── Wix (Owner / Admin apps) ──
+// Get this from Wix Dashboard > Settings > API Keys
+WIX_API_KEY = YOUR_WIX_API_KEY
+
+// ── Supabase ──
+// Get these from https://supabase.com/dashboard > Project Settings > API
+SUPABASE_URL = YOUR_SUPABASE_URL
+SUPABASE_ANON_KEY = YOUR_SUPABASE_ANON_KEY
+
+// ── Firebase ──
+// Firebase does NOT use this file.
+// Instead, download GoogleService-Info.plist from Firebase Console
+// and add it to your Xcode project root.

package/templates/shared/ios/SecretsConfig/SecretsConfig.swift

@@ -0,0 +1,87 @@
+import Foundation
+
+// MARK: - Secrets Configuration
+/// Reads API keys and secrets from Info.plist (injected via Secrets.xcconfig at build time).
+/// All keys are read lazily and cached. A console warning is logged if a key is missing or empty.
+///
+/// Usage:
+///   let clientId = SecretsConfig.wixClientId
+///
+/// Setup:
+///   1. Copy Secrets.xcconfig.template -> Secrets.xcconfig
+///   2. Fill in your API keys
+///   3. Ensure Secrets.xcconfig is in .gitignore
+enum SecretsConfig {
+
+    // MARK: - Wix
+
+    /// Wix OAuth app client ID (for WixMemberBackend)
+    static let wixClientId: String = value(for: "WIX_CLIENT_ID")
+
+    /// Wix site ID
+    static let wixSiteId: String = value(for: "WIX_SITE_ID")
+
+    /// Wix API key (for WixOwnerBackend — site owner/admin access)
+    static let wixApiKey: String = value(for: "WIX_API_KEY")
+
+    /// Wix OAuth redirect URL
+    static let wixRedirectUrl: String = value(for: "WIX_REDIRECT_URL")
+
+    // MARK: - Firebase
+
+    // Firebase uses GoogleService-Info.plist — no keys needed here.
+    // The Firebase SDK reads its configuration automatically.
+
+    // MARK: - Supabase
+
+    /// Supabase project URL (e.g., https://yourproject.supabase.co)
+    static let supabaseUrl: String = value(for: "SUPABASE_URL")
+
+    /// Supabase anonymous/public key (client-safe, protected by RLS)
+    static let supabaseAnonKey: String = value(for: "SUPABASE_ANON_KEY")
+
+    // MARK: - Helpers
+
+    /// Reads a value from Info.plist by key name.
+    /// Returns empty string and logs a warning if the key is missing or empty.
+    private static func value(for key: String) -> String {
+        guard let value = Bundle.main.infoDictionary?[key] as? String,
+              !value.isEmpty,
+              !value.hasPrefix("YOUR_"),
+              !value.hasPrefix("your-") else {
+            #if DEBUG
+            print("⚠️ SecretsConfig: '\(key)' is not configured. See Secrets.xcconfig.template for setup instructions.")
+            #endif
+            return ""
+        }
+        return value
+    }
+
+    /// Returns true if the given key has a non-empty, non-placeholder value configured.
+    static func isConfigured(_ key: String) -> Bool {
+        guard let value = Bundle.main.infoDictionary?[key] as? String,
+              !value.isEmpty,
+              !value.hasPrefix("YOUR_"),
+              !value.hasPrefix("your-") else {
+            return false
+        }
+        return true
+    }
+
+    /// Returns true if Wix member credentials are configured (clientId required, siteId optional).
+    /// Site ID is no longer required here — it can be selected at runtime via WixSiteSelector.
+    static var isWixMemberConfigured: Bool {
+        isConfigured("WIX_CLIENT_ID")
+    }
+
+    /// Returns true if Wix owner credentials are configured (apiKey required, siteId optional).
+    /// Site ID is no longer required here — it can be selected at runtime via WixSiteSelector.
+    static var isWixOwnerConfigured: Bool {
+        isConfigured("WIX_API_KEY")
+    }
+
+    /// Returns true if Supabase credentials are configured (url + anonKey).
+    static var isSupabaseConfigured: Bool {
+        isConfigured("SUPABASE_URL") && isConfigured("SUPABASE_ANON_KEY")
+    }
+}

package/templates/shared/ios/SupabaseBackend/INTEGRATION.md

@@ -0,0 +1,335 @@
+# SupabaseBackend Module — Integration Guide
+
+## Overview
+
+The SupabaseBackend module provides a comprehensive wrapper around the official Supabase Swift SDK (`supabase-swift`). It includes:
+
+- **Authentication** — Email/password, magic link (OTP), OAuth (Google, Apple, GitHub, Facebook)
+- **Database** — PostgREST query builder with type-safe Codable models
+- **Storage** — File uploads, downloads, and public URL generation
+- **Realtime** — Postgres Changes subscriptions via AsyncStream
+- **Configuration** — Centralized client initialization from SecretsConfig
+
+## Prerequisites
+
+### 1. Add Supabase Swift SDK
+
+Add the Supabase Swift SDK via Swift Package Manager:
+
+1. In Xcode: **File → Add Packages...**
+2. URL: `https://github.com/supabase/supabase-swift`
+3. Select: `Supabase` package
+4. Version: Latest stable
+
+### 2. Configure SecretsConfig
+
+Add Supabase credentials to `SecretsConfig.swift`:
+
+```swift
+// In SecretsConfig.swift
+static let supabaseUrl: String = value(for: "SUPABASE_URL")
+static let supabaseAnonKey: String = value(for: "SUPABASE_ANON_KEY")
+```
+
+Add these keys to your `Info.plist` (via `Secrets.xcconfig`):
+
+```xcconfig
+SUPABASE_URL = https://yourproject.supabase.co
+SUPABASE_ANON_KEY = your-anon-key-here
+```
+
+### 3. Create Supabase Project
+
+1. Sign up at https://supabase.com
+2. Create a new project
+3. Get your project URL and anon key from **Project Settings → API**
+
+## AppConfig Additions
+
+Add to `AppConfig.Features`:
+
+```swift
+// CUSTOMIZE:FEATURES
+static let enableSupabaseBackend = true
+```
+
+## Service Usage
+
+### Authentication
+
+```swift
+import SupabaseBackend
+
+// Sign in with email/password
+try await SupabaseAuthService.shared.signInWithEmail(
+    email: "user@example.com",
+    password: "password123"
+)
+
+// Sign in with magic link
+try await SupabaseAuthService.shared.signInWithMagicLink(
+    email: "user@example.com"
+)
+
+// Sign in with OAuth
+try await SupabaseAuthService.shared.signInWithOAuth(
+    provider: .google
+)
+
+// Sign out
+try await SupabaseAuthService.shared.signOut()
+
+// Delete account
+try await SupabaseAuthService.shared.deleteAccount()
+```
+
+### Database Queries
+
+```swift
+import SupabaseBackend
+
+// Select all items
+let items: [Item] = try await SupabaseDatabaseService.shared
+    .from("items")
+    .select()
+
+// Select with filters
+let filtered: [Item] = try await SupabaseDatabaseService.shared
+    .from("items")
+    .eq(column: "category", value: "books")
+    .order(column: "created_at", ascending: false)
+    .limit(10)
+    .select()
+
+// Insert
+try await SupabaseDatabaseService.shared
+    .from("items")
+    .insert(newItem)
+
+// Update
+try await SupabaseDatabaseService.shared
+    .from("items")
+    .eq(column: "id", value: itemId)
+    .update(["title": "New Title"])
+
+// Delete
+try await SupabaseDatabaseService.shared
+    .from("items")
+    .eq(column: "id", value: itemId)
+    .delete()
+```
+
+### Storage
+
+```swift
+import SupabaseBackend
+
+// Upload file
+let url = try await SupabaseStorageService.shared.upload(
+    bucket: "avatars",
+    path: "user-123.jpg",
+    data: imageData
+)
+
+// Download file
+let data = try await SupabaseStorageService.shared.download(
+    bucket: "avatars",
+    path: "user-123.jpg"
+)
+
+// Get public URL
+let publicUrl = SupabaseStorageService.shared.getPublicUrl(
+    bucket: "avatars",
+    path: "user-123.jpg"
+)
+
+// Remove files
+try await SupabaseStorageService.shared.remove(
+    bucket: "avatars",
+    paths: ["user-123.jpg", "user-456.jpg"]
+)
+```
+
+### Realtime Subscriptions
+
+```swift
+import SupabaseBackend
+
+// Subscribe to all changes
+let stream = SupabaseRealtimeService.shared.subscribe(
+    table: "items",
+    event: .all
+)
+
+for await change in stream {
+    switch change.event {
+    case .insert:
+        print("New item: \(change.new!)")
+    case .update:
+        print("Updated: \(change.old!) → \(change.new!)")
+    case .delete:
+        print("Deleted: \(change.old!)")
+    case .all:
+        break
+    }
+}
+```
+
+## Screen Integration
+
+### Login Screen
+
+```swift
+import SupabaseBackend
+
+struct AuthView: View {
+    @StateObject private var authService = SupabaseAuthService.shared
+    
+    var body: some View {
+        if authService.isLoggedIn {
+            ContentView()
+        } else {
+            SupabaseLoginScreen(
+                onSuccess: {
+                    // Navigate to main app
+                },
+                onSignUp: {
+                    // Navigate to sign up
+                }
+            )
+        }
+    }
+}
+```
+
+### Profile Screen
+
+```swift
+import SupabaseBackend
+
+struct ProfileView: View {
+    var body: some View {
+        SupabaseProfileScreen()
+    }
+}
+```
+
+## Deep Link Setup
+
+For magic link and OAuth callbacks, configure deep links in your app:
+
+### 1. Add URL Scheme
+
+In `Info.plist`:
+
+```xml
+<key>CFBundleURLTypes</key>
+<array>
+    <dict>
+        <key>CFBundleURLSchemes</key>
+        <array>
+            <string>com.yourapp</string>
+        </array>
+    </dict>
+</array>
+```
+
+### 2. Handle Deep Links
+
+In your app delegate or scene delegate:
+
+```swift
+func scene(_ scene: UIScene, openURLContexts URLContexts: Set<UIOpenURLContext>) {
+    guard let url = URLContexts.first?.url else { return }
+    
+    // Handle Supabase OAuth callback
+    Task {
+        try? await SupabaseAuthService.shared.client.auth.session(from: url)
+    }
+}
+```
+
+### 3. Configure Supabase Redirect URL
+
+In Supabase Dashboard → **Authentication → URL Configuration**:
+
+- Add redirect URL: `com.yourapp://auth/callback`
+- Add site URL: `com.yourapp://`
+
+## Database Schema
+
+Create tables in Supabase SQL Editor:
+
+```sql
+-- Example: Items table
+CREATE TABLE items (
+    id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+    title TEXT NOT NULL,
+    description TEXT,
+    "userId" UUID REFERENCES auth.users(id),
+    "createdAt" TIMESTAMPTZ DEFAULT now()
+);
+
+-- Enable Row Level Security
+ALTER TABLE items ENABLE ROW LEVEL SECURITY;
+
+-- Policy: Users can only see their own items
+CREATE POLICY "Users can view own items"
+    ON items FOR SELECT
+    USING (auth.uid() = "userId");
+
+-- Policy: Users can insert their own items
+CREATE POLICY "Users can insert own items"
+    ON items FOR INSERT
+    WITH CHECK (auth.uid() = "userId");
+```
+
+## String Merge
+
+Add `Strings.Supabase` enum to your app's `Strings.swift` file. All strings are defined in the module's `Strings.swift`.
+
+## Test IDs
+
+| Test ID | Element |
+|---------|---------|
+| `supabase_login_title` | Login screen title |
+| `supabase_login_email_field` | Email text field |
+| `supabase_login_password_field` | Password text field |
+| `supabase_login_magic_link_toggle` | Magic link toggle |
+| `supabase_login_sign_in_button` | Sign in button |
+| `supabase_login_forgot_password_button` | Forgot password button |
+| `supabase_login_google_button` | Google OAuth button |
+| `supabase_login_apple_button` | Apple OAuth button |
+| `supabase_login_github_button` | GitHub OAuth button |
+| `supabase_signup_title` | Sign up screen title |
+| `supabase_signup_email_field` | Email text field |
+| `supabase_signup_password_field` | Password text field |
+| `supabase_signup_confirm_password_field` | Confirm password field |
+| `supabase_signup_create_account_button` | Create account button |
+| `supabase_forgot_password_title` | Forgot password title |
+| `supabase_forgot_password_email_field` | Email text field |
+| `supabase_forgot_password_send_button` | Send reset link button |
+| `supabase_magic_link_icon` | Magic link sent icon |
+| `supabase_magic_link_title` | Magic link sent title |
+| `supabase_magic_link_open_email_button` | Open email button |
+| `supabase_magic_link_resend_button` | Resend magic link button |
+| `supabase_profile_avatar` | Profile avatar |
+| `supabase_profile_email` | Profile email |
+| `supabase_profile_provider` | Provider badge |
+| `supabase_profile_sign_out_button` | Sign out button |
+| `supabase_profile_delete_account_button` | Delete account button |
+
+## Module Dependencies
+
+- **SecretsConfig** — Required for Supabase URL and anon key
+- **ErrorHandling** (optional) — For displaying auth errors
+- **NetworkBanner** (optional) — For connectivity awareness
+
+## Usage Notes
+
+- **Row-Level Security:** Always enable RLS on tables and create policies for user isolation
+- **Magic Links:** Magic link authentication sends an email. Handle the deep link in your app
+- **OAuth Setup:** Configure OAuth providers in Supabase Dashboard → Authentication → Providers
+- **Storage Buckets:** Create storage buckets in Supabase Dashboard → Storage
+- **Realtime:** Realtime subscriptions require WebSocket connection. Handle disconnections gracefully
+- **Session Management:** The auth service automatically checks for existing sessions on initialization