buildanything 1.7.0 → 1.8.0

package/skills/ios/ios-info-plist-hardening/SKILL.md

@@ -0,0 +1,130 @@
+---
+name: ios-info-plist-hardening
+description: Generates and audits Info.plist defaults (usage-description strings, URL schemes, background modes, scene manifest) AND produces PrivacyInfo.xcprivacy so the app clears App Review and launches cleanly. Use during Phase 4 Foundation on every iOS project.
+version: 0.2.0
+status: ready
+---
+
+# iOS Info.plist Hardening (Phase 4)
+
+## Purpose
+Ensures `Info.plist` carries every required usage-description string, correctly registered URL schemes, declared background modes, and a sane SwiftUI scene manifest. Also emits the iOS 17+ `PrivacyInfo.xcprivacy` manifest. Catches "rejected because NSCameraUsageDescription is missing" before it happens.
+
+## When this fires
+- Phase 4 Foundation (always, for iOS projects)
+- Whenever a new API that requires a usage-description is added
+- Pre-archive audit
+
+## Inputs
+- `ios_features` from `docs/plans/.build-state.md` (boolean flags: camera, microphone, location_when_in_use, location_always, photos, contacts, calendar, reminders, motion, health, bluetooth, localNetwork, tracking, faceID, music, homeKit, siri, nearbyInteraction, speech, appleMusic)
+- `url_schemes` (string[], optional)
+- `background_modes` (string[], optional)
+- `app_lifecycle` (enum: `swiftui_app` | `uikit_appdelegate`, default `swiftui_app`)
+- `tracking_required_reasons` (object, optional) — required-reason API categories in use
+- `collects_tracking_data` (bool, default false)
+
+## Outputs
+- Updated `Info.plist` with merged keys (via XcodeBuildMCP)
+- `PrivacyInfo.xcprivacy` at target root (iOS 17+)
+- Audit report `docs/plans/plist-audit.md`: missing keys, stale keys, weak description strings
+
+## Required usage-description keys
+
+| Info.plist key | Triggered by |
+|---|---|
+| `NSCameraUsageDescription` | Camera / AVFoundation / Vision / ARKit / VisionKit |
+| `NSMicrophoneUsageDescription` | Microphone / Speech / ShazamKit |
+| `NSPhotoLibraryUsageDescription` | PhotoKit read |
+| `NSPhotoLibraryAddUsageDescription` | Writing to photo library |
+| `NSLocationWhenInUseUsageDescription` | CoreLocation foreground |
+| `NSLocationAlwaysAndWhenInUseUsageDescription` | CoreLocation background |
+| `NSContactsUsageDescription` | Contacts |
+| `NSCalendarsUsageDescription` / `NSCalendarsFullAccessUsageDescription` | EventKit (iOS 17+ split) |
+| `NSRemindersUsageDescription` / `NSRemindersFullAccessUsageDescription` | EventKit reminders |
+| `NSMotionUsageDescription` | CoreMotion |
+| `NSHealthShareUsageDescription` | HealthKit read |
+| `NSHealthUpdateUsageDescription` | HealthKit write |
+| `NSSpeechRecognitionUsageDescription` | Speech |
+| `NSBluetoothAlwaysUsageDescription` | CoreBluetooth |
+| `NSLocalNetworkUsageDescription` | Bonjour / Multipeer / Network framework LAN |
+| `NSUserTrackingUsageDescription` | AppTrackingTransparency / IDFA |
+| `NSFaceIDUsageDescription` | LocalAuthentication biometrics |
+| `NSAppleMusicUsageDescription` | MediaPlayer / MusicKit |
+| `NSHomeKitUsageDescription` | HomeKit |
+| `NSSiriUsageDescription` | SiriKit / App Intents w/ Siri |
+| `NSNearbyInteractionUsageDescription` | NearbyInteraction (UWB) |
+
+Usage descriptions must be **specific and user-facing** ("To scan receipts with your camera" beats "Needs camera"). Reject strings under 20 characters or containing placeholder text.
+
+## URL scheme registration template
+```xml
+<key>CFBundleURLTypes</key>
+<array>
+  <dict>
+    <key>CFBundleURLName</key>
+    <string>com.acme.habitforge</string>
+    <key>CFBundleURLSchemes</key>
+    <array>
+      <string>habitforge</string>
+    </array>
+    <key>CFBundleTypeRole</key>
+    <string>Editor</string>
+  </dict>
+</array>
+```
+
+## UIBackgroundModes enumeration
+Valid values (set only what the app actually uses):
+- `fetch` — background app refresh
+- `remote-notification` — silent push wake
+- `audio` — background audio playback
+- `location` — continuous location updates
+- `bluetooth-central` — BLE central role
+- `bluetooth-peripheral` — BLE peripheral role
+- `voip` — VoIP calls
+- `external-accessory`
+- `processing` — BGProcessingTask (long-running)
+- `nearby-interaction`
+
+## Scene manifest (SwiftUI app lifecycle default)
+```xml
+<key>UIApplicationSceneManifest</key>
+<dict>
+  <key>UIApplicationSupportsMultipleScenes</key>
+  <true/>
+  <key>UISceneConfigurations</key>
+  <dict/>
+</dict>
+```
+
+## PrivacyInfo.xcprivacy (iOS 17+ — this skill owns creation at Phase 4)
+Generate with four top-level keys:
+
+- **`NSPrivacyTracking`** — bool; true only if `collects_tracking_data` is true.
+- **`NSPrivacyTrackingDomains`** — array of tracking domains contacted (only if tracking is true).
+- **`NSPrivacyCollectedDataTypes`** — array of dicts, one per data category collected, each with: `NSPrivacyCollectedDataType`, `NSPrivacyCollectedDataTypeLinked`, `NSPrivacyCollectedDataTypeTracking`, `NSPrivacyCollectedDataTypePurposes`.
+- **`NSPrivacyAccessedAPITypes`** — array of required-reason API declarations. Each entry has `NSPrivacyAccessedAPIType` + `NSPrivacyAccessedAPITypeReasons`. Common categories:
+  - `NSPrivacyAccessedAPICategoryFileTimestamp`
+  - `NSPrivacyAccessedAPICategorySystemBootTime`
+  - `NSPrivacyAccessedAPICategoryDiskSpace`
+  - `NSPrivacyAccessedAPICategoryActiveKeyboards`
+  - `NSPrivacyAccessedAPICategoryUserDefaults`
+
+Detect required-reason API usage by scanning code for patterns (e.g. `FileManager` attributes, `UserDefaults` access, `UIDevice` boot time). Emit a declaration for each detected category with the appropriate reason code.
+
+## Workflow
+1. **Read state** — load `ios_features` flags from `docs/plans/.build-state.md`.
+2. **Select required keys** — for each true flag, resolve to usage-description key(s) from the table above (cross-check `ios-frameworks-map.md §4` column "Info.plist keys").
+3. **Scan code for required-reason APIs** — grep for `FileManager`, `UserDefaults`, `systemUptime`, `.systemFreeSize`, keyboard APIs; build privacy-manifest entries.
+4. **Generate patches** — compute Info.plist additions and PrivacyInfo.xcprivacy content.
+5. **Write via XcodeBuildMCP** — merge Info.plist (never clobber user keys), create/overwrite `PrivacyInfo.xcprivacy` at target root.
+6. **Emit audit report** — `docs/plans/plist-audit.md` listing additions, weak descriptions, and any manual follow-ups (e.g. "add tracking domain list").
+
+## Validation
+- Every usage-description string is ≥ 20 chars and references the concrete app action.
+- No placeholder strings (`TODO`, `lorem`, `test`, `permission required`).
+- Background modes in plist match entitlements and actual runtime usage.
+- PrivacyInfo.xcprivacy includes a required-reason entry for every detected API category — missing entries block App Store submission.
+
+---
+_Part of buildanything iOS mode. See `protocols/ios-context.md` for persona. Cross-references `protocols/ios-frameworks-map.md §4`._

package/skills/ios/ios-maestro-flow-author/SKILL.md

@@ -0,0 +1,68 @@
+---
+name: ios-maestro-flow-author
+description: Generates Maestro .yaml E2E flow files from natural-language user journeys. Use during /verify iOS branch whenever a critical user journey needs automated coverage.
+version: 0.2.0
+status: ready
+---
+
+# iOS Maestro Flow Author (Phase 6, /verify twin)
+
+## Purpose
+Converts a plain-English user journey ("sign up, create first habit, mark complete") into a runnable Maestro flow YAML, ready to execute against a booted simulator via `maestro test`.
+
+## When this fires
+- `/verify` iOS branch
+- A new critical user journey needs E2E coverage
+- Regression: existing flow drifted from current UI
+
+## Inputs
+- `journey_nl` (string) — natural-language user journey
+- `app_id` (string) — bundle identifier under test (e.g. `com.acme.HabitForge`)
+- `test_name` (string, optional) — defaults to slugified journey
+
+## Outputs
+- `maestro/<test_name>.yaml`
+- Dry-run summary (commands emitted, accessibility-id assumptions, skipped steps)
+
+## Workflow
+1. Parse `journey_nl` into ordered discrete user actions (one sentence = one action group).
+2. Match each action to a Maestro command pattern from the cheat-sheet below; prefer accessibility IDs over visible text when the app exposes them.
+3. Emit YAML with `appId: {app_id}` header and one command per step.
+4. Write to `maestro/<test_name>.yaml`.
+5. Validate via `maestro test maestro/<test_name>.yaml` on a booted simulator (Maestro has no true `--dry-run`; shortest validation is to run it once against the sim).
+
+## Maestro cheat-sheet (10 core commands)
+
+```yaml
+- launchApp                                   # launches the appId declared in the header
+- tapOn: "Sign Up"                            # tap element by visible text
+- tapOn:
+    id: "emailField"                          # tap by accessibility identifier (preferred)
+- assertVisible: "Welcome back"               # assert text/element visible, fails flow if not
+- inputText: "alice@example.com"              # types into currently focused field
+- scroll                                      # scroll down on current screen
+- swipe:
+    direction: LEFT                           # swipe: LEFT | RIGHT | UP | DOWN
+- hideKeyboard                                # dismiss soft keyboard
+- back                                        # system back / pop navigation
+- pressKey: Enter                             # hardware key: Enter, Backspace, Home, Lock
+```
+
+See `references/` for five copy-and-adapt templates covering the 90% cases.
+
+## Authoring rules
+- Always start with `- launchApp`.
+- Prefer `id:` selectors (stable) over raw text (fragile to copy changes).
+- After every `inputText`, insert `hideKeyboard` before the next `tapOn` to avoid the keyboard intercepting taps.
+- End every flow with at least one `assertVisible` that confirms the user reached the destination screen.
+- Keep flows single-purpose — one user journey per file. Compose with `runFlow:` in a parent flow if needed.
+
+## Reference templates
+- `references/onboarding-flow.yaml` — launch → splash → signup → main screen
+- `references/tap-and-assert.yaml` — minimal tap + assertVisible pattern
+- `references/input-and-scroll.yaml` — form input + scroll + tap
+- `references/modal-and-dismiss.yaml` — open sheet, interact, dismiss
+- `references/tab-navigation.yaml` — switch tabs, verify each screen
+
+---
+_Part of buildanything iOS mode. See `protocols/ios-context.md` for Senior iOS Engineer persona._

package/skills/ios/ios-maestro-flow-author/references/input-and-scroll.yaml

@@ -0,0 +1,17 @@
+# Form fill + scroll + submit
+appId: com.acme.HabitForge
+---
+- launchApp
+- tapOn: "Add Habit"
+- assertVisible: "New Habit"
+- tapOn:
+    id: "habitNameField"
+- inputText: "Drink water"
+- hideKeyboard
+- tapOn:
+    id: "notesField"
+- inputText: "Eight glasses per day, spread across mornings and afternoons"
+- hideKeyboard
+- scroll
+- tapOn: "Save"
+- assertVisible: "Drink water"

package/skills/ios/ios-maestro-flow-author/references/modal-and-dismiss.yaml

@@ -0,0 +1,14 @@
+# Open modal sheet, interact, dismiss
+appId: com.acme.HabitForge
+---
+- launchApp
+- tapOn: "Settings"
+- assertVisible: "Preferences"
+- tapOn: "Appearance"
+- assertVisible: "Theme"
+- tapOn: "Dark"
+- swipe:
+    direction: DOWN
+- assertVisible: "Preferences"
+- back
+- assertVisible: "Your Habits"

package/skills/ios/ios-maestro-flow-author/references/onboarding-flow.yaml

@@ -0,0 +1,16 @@
+# Onboarding: launch -> splash -> sign up -> main screen
+appId: com.acme.HabitForge
+---
+- launchApp
+- assertVisible: "Welcome"
+- tapOn: "Sign Up"
+- assertVisible: "Create your account"
+- tapOn:
+    id: "emailField"
+- inputText: "alice@example.com"
+- tapOn:
+    id: "passwordField"
+- inputText: "hunter2hunter2"
+- hideKeyboard
+- tapOn: "Continue"
+- assertVisible: "Your Habits"

package/skills/ios/ios-maestro-flow-author/references/tab-navigation.yaml

@@ -0,0 +1,13 @@
+# Tab bar navigation — verify each tab loads its root screen
+appId: com.acme.HabitForge
+---
+- launchApp
+- assertVisible: "Your Habits"
+- tapOn: "Stats"
+- assertVisible: "Weekly Progress"
+- tapOn: "Journal"
+- assertVisible: "Entries"
+- tapOn: "Settings"
+- assertVisible: "Preferences"
+- tapOn: "Habits"
+- assertVisible: "Your Habits"

package/skills/ios/ios-maestro-flow-author/references/tap-and-assert.yaml

@@ -0,0 +1,9 @@
+# Minimal tap + assert pattern
+appId: com.acme.HabitForge
+---
+- launchApp
+- assertVisible: "Your Habits"
+- tapOn: "Add Habit"
+- assertVisible: "New Habit"
+- tapOn: "Cancel"
+- assertVisible: "Your Habits"

package/skills/ios/swift-accessibility/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Pasquale Vittoriosi
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.