codebyplan 1.5.0 → 1.8.0

package/templates/skills/cbp-ship/scripts/verify-vercel.sh

@@ -0,0 +1,32 @@
+#!/usr/bin/env bash
+# Verify a Vercel deployment is READY and reachable.
+# Usage: verify-vercel.sh <deployment-id-or-url>
+# Exit: 0 ok, 1 fail, 2 verification_pending
+
+set -euo pipefail
+DEPLOY="$1"
+
+STATUS=$(vercel inspect "$DEPLOY" --json 2>/dev/null | jq -r '.readyState // "UNKNOWN"')
+
+case "$STATUS" in
+  READY)
+    URL=$(vercel inspect "$DEPLOY" --json | jq -r '.alias[0] // .url')
+    HTTP=$(curl -sIm 30 "https://$URL" 2>/dev/null | head -1 | awk '{print $2}')
+    case "$HTTP" in
+      200|301|302|401) echo "OK $URL ($HTTP)"; exit 0 ;;
+      *) echo "FAIL: HTTP $HTTP for $URL"; exit 1 ;;
+    esac
+    ;;
+  BUILDING|QUEUED|INITIALIZING)
+    echo "PENDING: build still in progress ($STATUS)"
+    exit 2
+    ;;
+  ERROR|CANCELED)
+    echo "FAIL: deployment $STATUS"
+    exit 1
+    ;;
+  *)
+    echo "PENDING: unknown state $STATUS"
+    exit 2
+    ;;
+esac

package/templates/skills/cbp-ship/scripts/verify-vscode-ext.sh

@@ -0,0 +1,25 @@
+#!/usr/bin/env bash
+# Verify a VS Code extension version is on the Marketplace.
+# Usage: verify-vscode-ext.sh <publisher.name> <version>
+# Exit: 0 ok, 1 fail, 2 pending (marketplace lag)
+
+set -euo pipefail
+EXT_ID="$1"
+VERSION="$2"
+
+RESOLVED=$(npx --yes @vscode/vsce show "$EXT_ID" --json 2>/dev/null | jq -r '.versions[0].version // ""')
+
+if [ "$RESOLVED" = "$VERSION" ]; then
+  EVENTS=$(npx --yes @vscode/vsce show "$EXT_ID" --json | jq -r '.activationEvents | length // 0')
+  [ "$EVENTS" -gt 0 ] || echo "WARN: no activation events declared"
+  echo "OK $EXT_ID@$VERSION"
+  exit 0
+fi
+
+if [ -z "$RESOLVED" ]; then
+  echo "FAIL: extension $EXT_ID not found on marketplace"
+  exit 1
+fi
+
+echo "PENDING: marketplace shows $RESOLVED, expected $VERSION (1-5min propagation lag possible)"
+exit 2

package/templates/skills/cbp-ship/templates/eas.json

@@ -0,0 +1,66 @@
+{
+  "cli": {
+    "version": ">= 5.0.0"
+  },
+  "build": {
+    "development": {
+      "developmentClient": true,
+      "distribution": "internal",
+      "ios": {
+        "simulator": false,
+        "resourceClass": "m-medium"
+      },
+      "android": {
+        "buildType": "apk"
+      },
+      "channel": "development"
+    },
+    "preview": {
+      "distribution": "internal",
+      "ios": {
+        "simulator": false,
+        "resourceClass": "m-medium"
+      },
+      "android": {
+        "buildType": "apk"
+      },
+      "channel": "preview",
+      "autoIncrement": "buildNumber"
+    },
+    "production": {
+      "ios": {
+        "resourceClass": "m-medium"
+      },
+      "android": {
+        "buildType": "app-bundle"
+      },
+      "channel": "production",
+      "autoIncrement": "buildNumber"
+    }
+  },
+  "submit": {
+    "production": {
+      "ios": {
+        "appleId": "REPLACE_WITH_APPLE_ID_EMAIL",
+        "ascAppId": "REPLACE_WITH_APP_STORE_CONNECT_APP_ID",
+        "appleTeamId": "REPLACE_WITH_APPLE_TEAM_ID"
+      },
+      "android": {
+        "serviceAccountKeyPath": "./google-play-service-account.json",
+        "track": "internal",
+        "releaseStatus": "draft"
+      }
+    },
+    "preview": {
+      "ios": {
+        "appleId": "REPLACE_WITH_APPLE_ID_EMAIL",
+        "ascAppId": "REPLACE_WITH_APP_STORE_CONNECT_APP_ID",
+        "appleTeamId": "REPLACE_WITH_APPLE_TEAM_ID"
+      },
+      "android": {
+        "serviceAccountKeyPath": "./google-play-service-account.json",
+        "track": "internal"
+      }
+    }
+  }
+}

package/templates/skills/cbp-ship/templates/railway.toml

@@ -0,0 +1,15 @@
+# Railway service configuration
+# Reference: https://docs.railway.app/reference/config-as-code
+
+[build]
+builder = "DOCKERFILE"
+dockerfilePath = "Dockerfile"
+
+[deploy]
+startCommand = "pnpm start"
+healthcheckPath = "/health"
+healthcheckTimeout = 30
+restartPolicyType = "ON_FAILURE"
+restartPolicyMaxRetries = 3
+numReplicas = 1
+sleepApplication = false

package/templates/skills/cbp-ship/templates/release-please-config.json

@@ -0,0 +1,17 @@
+{
+  "$schema": "https://raw.githubusercontent.com/googleapis/release-please/main/schemas/config.json",
+  "release-type": "node",
+  "include-component-in-tag": false,
+  "bump-minor-pre-major": true,
+  "bump-patch-for-minor-pre-major": false,
+  "draft": false,
+  "prerelease": false,
+  "packages": {
+    ".": {
+      "package-name": "REPLACE_WITH_PACKAGE_NAME",
+      "changelog-path": "CHANGELOG.md",
+      "release-type": "node",
+      "extra-files": []
+    }
+  }
+}

package/templates/skills/cbp-ship/templates/vercel.json

@@ -0,0 +1,19 @@
+{
+  "$schema": "https://openapi.vercel.sh/vercel.json",
+  "framework": "nextjs",
+  "buildCommand": "cd ../.. && pnpm turbo build --filter=REPLACE_WITH_APP_NAME",
+  "installCommand": "cd ../.. && pnpm install --frozen-lockfile",
+  "outputDirectory": ".next",
+  "regions": ["iad1"],
+  "headers": [
+    {
+      "source": "/(.*)",
+      "headers": [
+        { "key": "X-Frame-Options", "value": "SAMEORIGIN" },
+        { "key": "X-Content-Type-Options", "value": "nosniff" },
+        { "key": "Referrer-Policy", "value": "strict-origin-when-cross-origin" },
+        { "key": "Permissions-Policy", "value": "camera=(), microphone=(), geolocation=()" }
+      ]
+    }
+  ]
+}

package/templates/skills/cbp-ship/templates/vscodeignore

@@ -0,0 +1,21 @@
+.vscode/**
+.vscode-test/**
+src/**
+.gitignore
+.yarnrc
+vsc-extension-quickstart.md
+**/tsconfig.json
+**/.eslintrc.*
+**/eslint.config.*
+**/*.map
+**/*.ts
+node_modules
+.git/**
+*.test.*
+*.spec.*
+**/__tests__/**
+**/__mocks__/**
+.github/**
+.claude/**
+docs/**
+CHANGELOG.md

package/templates/skills/cbp-ship/templates/workflow-changesets.yml

@@ -0,0 +1,41 @@
+name: changesets
+
+on:
+  push:
+    branches:
+      - REPLACE_WITH_INTEGRATION_BRANCH
+
+permissions:
+  contents: write
+  pull-requests: write
+  id-token: write
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - uses: pnpm/action-setup@v3
+        with:
+          version: 10
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: pnpm
+          registry-url: https://registry.npmjs.org
+
+      - run: pnpm install --frozen-lockfile
+
+      - uses: changesets/action@v1
+        with:
+          version: pnpm changeset version
+          publish: pnpm changeset publish
+          commit: 'chore(release): version packages'
+          title: 'chore(release): version packages'
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NPM_CONFIG_PROVENANCE: 'true'

package/templates/skills/cbp-ship/templates/workflow-eas-submit.yml

@@ -0,0 +1,53 @@
+name: EAS Build + Submit
+
+on:
+  push:
+    tags:
+      - 'mobile-v*.*.*'
+  workflow_dispatch:
+    inputs:
+      profile:
+        type: choice
+        description: Build profile
+        options: [preview, production]
+        default: preview
+      platform:
+        type: choice
+        description: Platform
+        options: [all, ios, android]
+        default: all
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: pnpm/action-setup@v3
+        with:
+          version: 10
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: pnpm
+
+      - uses: expo/expo-github-action@v8
+        with:
+          eas-version: latest
+          token: ${{ secrets.EXPO_TOKEN }}
+
+      - run: pnpm install --frozen-lockfile
+
+      - name: EAS Build
+        run: |
+          cd apps/mobile
+          eas build --profile ${{ inputs.profile || 'preview' }} \
+                    --platform ${{ inputs.platform || 'all' }} \
+                    --non-interactive --no-wait
+
+      - name: EAS Submit (production only)
+        if: inputs.profile == 'production'
+        run: |
+          cd apps/mobile
+          eas submit --platform ${{ inputs.platform || 'all' }} --latest --non-interactive

package/templates/skills/cbp-ship/templates/workflow-npm-publish.yml

@@ -0,0 +1,36 @@
+name: npm publish
+
+on:
+  push:
+    tags:
+      - 'v*.*.*'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  id-token: write  # required for OIDC trusted publishing
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    environment: release
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - uses: pnpm/action-setup@v3
+        with:
+          version: 10
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: pnpm
+          registry-url: https://registry.npmjs.org
+
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm build
+      - run: pnpm publint
+      - run: pnpm attw --pack
+      - run: npm publish --provenance --access public

package/templates/skills/cbp-ship/templates/workflow-release-please.yml

@@ -0,0 +1,21 @@
+name: release-please
+
+on:
+  push:
+    branches:
+      - REPLACE_WITH_INTEGRATION_BRANCH
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  release-please:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: googleapis/release-please-action@v4
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          release-type: node
+          config-file: release-please-config.json
+          manifest-file: .release-please-manifest.json

package/templates/skills/cbp-ship/templates/workflow-tauri-release.yml

@@ -0,0 +1,69 @@
+name: Release Desktop App
+
+on:
+  push:
+    tags:
+      - 'v*.*.*'
+
+jobs:
+  release:
+    permissions:
+      contents: write
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - platform: macos-14   # Apple Silicon
+            target: aarch64-apple-darwin
+          - platform: macos-13   # Intel
+            target: x86_64-apple-darwin
+
+    runs-on: ${{ matrix.platform }}
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: pnpm/action-setup@v3
+        with:
+          version: 10
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: pnpm
+
+      - uses: dtolnay/rust-toolchain@stable
+        with:
+          targets: ${{ matrix.target }}
+
+      - uses: swatinem/rust-cache@v2
+        with:
+          workspaces: apps/desktop/src-tauri
+
+      - run: pnpm install --frozen-lockfile
+
+      - name: Write Apple API key to file
+        run: |
+          mkdir -p ~/private_keys
+          echo "$APPLE_API_KEY_CONTENT" > ~/private_keys/AuthKey.p8
+        env:
+          APPLE_API_KEY_CONTENT: ${{ secrets.APPLE_API_KEY_CONTENT }}
+
+      - uses: tauri-apps/tauri-action@v0
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
+          TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
+          APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
+          APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
+          APPLE_SIGNING_IDENTITY: ${{ secrets.APPLE_SIGNING_IDENTITY }}
+          APPLE_API_ISSUER: ${{ secrets.APPLE_API_ISSUER }}
+          APPLE_API_KEY: ${{ secrets.APPLE_API_KEY }}
+          APPLE_API_KEY_PATH: ~/private_keys/AuthKey.p8
+        with:
+          projectPath: apps/desktop
+          tagName: ${{ github.ref_name }}
+          releaseName: 'REPLACE_WITH_APP_NAME ${{ github.ref_name }}'
+          releaseDraft: false
+          prerelease: false
+          args: --target ${{ matrix.target }}

package/templates/skills/cbp-ship/templates/workflow-vsce-publish.yml

@@ -0,0 +1,31 @@
+name: VS Code Marketplace publish
+
+on:
+  push:
+    tags:
+      - 'vscode-v*.*.*'
+  workflow_dispatch:
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: pnpm/action-setup@v3
+        with:
+          version: 10
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: pnpm
+
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm --filter REPLACE_WITH_EXT_NAME build
+      - name: Publish to Marketplace
+        env:
+          VSCE_PAT: ${{ secrets.VSCE_PAT }}
+        run: |
+          cd apps/vscode
+          npx @vscode/vsce publish --no-yarn