declapract-typescript-ehmpathy 0.49.10 → 0.49.12

package/dist/.test/assets/expo-fullusecase/declarations/practices/cicd-app-react-native-expo/__snapshots__/.declapract.integration.test.ts.snap

@@ -0,0 +1,300 @@
+// Jest Snapshot v1, https://jestjs.io/docs/snapshot-testing
+
+exports[`app-react-native-expo — graceful migration of an app-protools-shaped repo given: [case1] a customized npm expo repo on the deprecated src layers when: [t5c] the expo deploy workflow is migrated npm -> pnpm then: the before + after .deploy-expo.yml match snapshot: .deploy-expo.yml — after migration 1`] = `
+"name: .deploy-expo
+
+on:
+  workflow_call:
+    inputs:
+      access:
+        type: string
+        description: "the access to deploy with (test | prep | prod)"
+        required: true
+      build:
+        type: string
+        description: "the build to deploy (e.g., production, preview, development)"
+        required: true
+      github-environment:
+        type: string
+        description: "github environment for the deploy jobs"
+        required: true
+      creds-aws-region:
+        type: string
+        description: creds for aws, specifies the region
+        required: true
+      creds-aws-role-arn:
+        type: string
+        description: creds for aws, specifies the role to assume via oidc
+        required: true
+      app-web-deployment-s3-bucket:
+        type: string
+        description: the s3 bucket within which the web app is deployed
+        required: false
+
+    secrets:
+      expo-token:
+        required: true
+        description: required credentials to authenticate with expo eas
+
+permissions:
+  id-token: write # required for oidc
+  contents: read
+
+jobs:
+  install:
+    uses: ./.github/workflows/.install.yml
+
+  deploy-os:
+    strategy:
+      fail-fast: false # allow them to independently succeed; an issue on one platform shouldn't block others
+      matrix:
+        platform:
+          - ios
+          - android
+    name: \${{ matrix.platform }}
+    runs-on: ubuntu-24.04
+    environment:
+      # deployment: false keeps the built-in gate but suppresses the auto-Deployment, so no
+      # "deployed to <env>" status accretes on the PR timeline. the environment is ALWAYS
+      # declared — for prep and prod alike.
+      name: \${{ inputs.github-environment }}
+      deployment: false
+    needs: [install]
+    steps:
+      - name: checkout
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+
+      - name: set node-version
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version-file: ".nvmrc"
+
+      - name: configure aws credentials (oidc)
+        uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4
+        with:
+          role-to-assume: \${{ inputs.creds-aws-role-arn }}
+          aws-region: \${{ inputs.creds-aws-region }}
+
+      - name: node-modules cache get
+        uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+        with:
+          path: ./node_modules
+          key: \${{ needs.install.outputs.node-modules-cache-key }}
+          fail-on-cache-miss: true
+
+      - name: setup expo
+        uses: expo/expo-github-action@c7b66a9c327a43a8fa7c0158e7f30d6040d2481e # v8
+        with:
+          eas-version: latest
+          token: \${{ secrets.expo-token }}
+
+      - name: deploy ota update
+        run: eas update --auto --channel \${{ inputs.build }} --platform \${{ matrix.platform }} --non-interactive
+
+      - name: deploy app binary
+        run: eas build --profile \${{ inputs.build }} --platform \${{ matrix.platform }} --non-interactive --no-wait \${{ inputs.build == 'production' && '--auto-submit' || '' }}
+
+  deploy-web:
+    name: web
+    runs-on: ubuntu-24.04
+    environment:
+      # deployment: false keeps the built-in gate but suppresses the auto-Deployment, so no
+      # "deployed to <env>" status accretes on the PR timeline. the environment is ALWAYS
+      # declared — for prep and prod alike.
+      name: \${{ inputs.github-environment }}
+      deployment: false
+    needs: [install]
+    if: \${{ inputs.access == 'prod' && inputs.app-web-deployment-s3-bucket }}
+    steps:
+      - name: checkout
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+
+      - name: set node-version
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version-file: ".nvmrc"
+
+      - name: configure aws credentials (oidc)
+        uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4
+        with:
+          role-to-assume: \${{ inputs.creds-aws-role-arn }}
+          aws-region: \${{ inputs.creds-aws-region }}
+
+      - name: node-modules cache get
+        uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+        with:
+          path: ./node_modules
+          key: \${{ needs.install.outputs.node-modules-cache-key }}
+          fail-on-cache-miss: true
+
+      - name: setup expo
+        uses: expo/expo-github-action@c7b66a9c327a43a8fa7c0158e7f30d6040d2481e # v8
+        with:
+          eas-version: latest
+          token: \${{ secrets.expo-token }}
+
+      - name: compile
+        run: npm run build:web
+
+      - name: deploy
+        run: aws s3 sync ./dist \${{ inputs.app-web-deployment-s3-bucket }} --delete --cache-control max-age=60,stale-while-revalidate=604800 # todo: fine tune the cache control; https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cache-Control#stale-while-revalidate
+"
+`;
+
+exports[`app-react-native-expo — graceful migration of an app-protools-shaped repo given: [case1] a customized npm expo repo on the deprecated src layers when: [t5c] the expo deploy workflow is migrated npm -> pnpm then: the before + after .deploy-expo.yml match snapshot: .deploy-expo.yml — before 1`] = `
+"name: .deploy-expo
+
+on:
+  workflow_call:
+    inputs:
+      access:
+        type: string
+        required: true
+
+jobs:
+  deploy-os:
+    name: deploy
+    runs-on: ubuntu-latest
+    steps:
+      - name: checkout
+        uses: actions/checkout@v4
+
+      - name: set node-version
+        uses: actions/setup-node@v4
+        with:
+          node-version-file: ".nvmrc"
+
+      - name: cache node_modules
+        uses: actions/cache@v4
+        with:
+          path: node_modules
+          key: \${{ runner.os }}-node-\${{ hashFiles('package-lock.json') }}
+
+      - name: install
+        run: npm ci
+"
+`;
+
+exports[`app-react-native-expo — graceful migration of an app-protools-shaped repo given: [case1] a customized npm expo repo on the deprecated src layers when: [t6] the migration is re-applied then: the before + settled package.json match snapshot: package.json — after migration 1`] = `
+"{
+  "name": "app-protools-native",
+  "version": "1.0.0",
+  "packageManager": "pnpm@10.34.5",
+  "scripts": {
+    "install:deps": "npm install",
+    "start": "expo start",
+    "start:hot:proxy": "npx local-ssl-proxy --source 3447 --target 8081",
+    "start:hot:prep": "ACCESS=prep npx expo start --clear --dev-client",
+    "start:hot:prep:link": "echo '🚀 https://localhost.protools.prep.ahbode.dev:3447'",
+    "start:hot:prep:proxy": "npm run start:hot:prep:link && npm run start:hot:proxy",
+    "start:hot:prod": "ACCESS=prod npx expo start --clear --dev-client",
+    "start:hot:prod:link": "echo '🚀 https://localhost.protools.ahbode.dev:3447'",
+    "start:hot:prod:proxy": "npm run start:hot:prod:link && npm run start:hot:proxy",
+    "start:cold:proxy": "npx local-ssl-proxy --source 3449 --target 3000",
+    "start:cold:prep": "npm run build:web && npx serve dist --single",
+    "start:cold:prep:link": "echo '🚀 https://localhost.protools.prep.ahbode.dev:3449'",
+    "start:cold:prep:proxy": "echo npm run start:cold:prep:link && npm run start:cold:proxy",
+    "start:cold:prod": "npm run build:web && npx serve dist --single",
+    "start:cold:prod:link": "echo '🚀 https://localhost.protools.ahbode.dev:3449'",
+    "register:device:apple:info": "echo 'learn more here https://docs.expo.dev/build/internal-distribution/'",
+    "register:device:apple:inclusions:rebuild:prod": "npx eas build --platform ios --clear-cache",
+    "register:device:apple:inclusions:rebuild:prep": "npx eas build --profile development --platform ios --clear-cache",
+    "register:device:apple:add": "echo 'register an apple device to allow it to install internal builds' && eas device:create && npm run register:device:apple:inclusions:rebuild",
+    "register:device:apple:list": "eas device:list",
+    "register:device:apple:delete": "eas device:delete",
+    "register:device:apple:rename": "eas device:rename",
+    "register:profile:apple:list": "echo 'see list here https://developer.apple.com/account/resources/profiles/list'",
+    "build:prep:ios": "eas build --profile development --platform ios --non-interactive",
+    "build:prep:android": "eas build --profile development --platform android --non-interactive",
+    "deploy:prod:ios:metadata": "eas metadata:push",
+    "deploy:prod": "echo 'use github actions'",
+    "open:store:android": "https://play.google.com/console/u/0/developers/",
+    "open:store:ios": "browser https://appstoreconnect.apple.com/apps/",
+    "fix": "npm run fix:format && npm run fix:lint",
+    "prepare": "if [ -e .git ] && [ -z \\"\${CI:-}\\" ]; then npm run prepare:husky && npm run prepare:rhachet; fi",
+    "prepush": "npm run test && npm run build",
+    "preversion": "npm run prepush",
+    "postversion": "git push origin HEAD --tags --no-verify",
+    "prepare:rhachet": "rhachet init --keys --hooks --roles mechanic behaver driver reviewer librarian ergonomist architect dispatcher learner achiever telepath operator observer deployer playwright enroller",
+    "upgrade:rhachet": "rhachet upgrade",
+    "test:unit": "set -eu && jest -c ./jest.unit.config.ts --forceExit --verbose --passWithNoTests $([ -n \\"\${CI:-}\\" ] && echo '--ci') $([ \\"\${THOROUGH:-}\\" != \\"true\\" ] && echo '--changedSince=origin/main') $([ \\"\${RESNAP:-}\\" = \\"true\\" ] && echo '--updateSnapshot')",
+    "test:integration": "set -eu && jest -c ./jest.integration.config.ts --forceExit --verbose --passWithNoTests $([ -n \\"\${CI:-}\\" ] && echo '--ci') $([ \\"\${THOROUGH:-}\\" != \\"true\\" ] && echo '--changedSince=origin/main') $([ \\"\${RESNAP:-}\\" = \\"true\\" ] && echo '--updateSnapshot')",
+    "test:acceptance:locally": "set -eu && npm run build && LOCALLY=true jest -c ./jest.acceptance.config.ts --forceExit --verbose --runInBand --passWithNoTests $([ \\"\${RESNAP:-}\\" = \\"true\\" ] && echo '--updateSnapshot')",
+    "test": "set -eu && npm run test:commits && npm run test:types && npm run test:format && npm run test:lint && npm run test:unit && npm run test:integration && npm run test:acceptance:locally",
+    "test:acceptance": "set -eu && npm run build && jest -c ./jest.acceptance.config.ts --forceExit --verbose --runInBand --passWithNoTests $([ -n \\"\${CI:-}\\" ] && echo '--ci') $([ \\"\${RESNAP:-}\\" = \\"true\\" ] && echo '--updateSnapshot')",
+    "test:types": "tsc -p ./tsconfig.json --noEmit",
+    "build": "npm run build:web",
+    "build:web": "npx expo export --platform web"
+  },
+  "devDependencies": {
+    "expo": "54.0.0",
+    "rhachet": "1.47.5",
+    "rhachet-brains-anthropic": "0.4.3",
+    "rhachet-brains-fireworksai": "0.1.6",
+    "rhachet-brains-xai": "0.3.3",
+    "rhachet-roles-bhrain": "0.34.1",
+    "rhachet-roles-bhrowser": "0.1.0",
+    "rhachet-roles-bhuild": "0.21.36",
+    "rhachet-roles-ehmpathy": "1.38.12",
+    "rhachet-roles-ghlitch": "0.3.0",
+    "rhachet-roles-rhachet": "0.1.7",
+    "@jest/globals": "30.2.0",
+    "@types/jest": "30.0.0",
+    "jest": "30.2.0",
+    "esbuild-register": "3.6.0",
+    "test-fns": "1.17.0",
+    "tsx": "4.20.6",
+    "jest-expo": "^54.0.0",
+    "@babel/core": "^7.24.0",
+    "babel-preset-expo": "^12.0.0",
+    "isomorphic-fetch": "^3.0.0",
+    "typescript": "5.4.5"
+  },
+  "dependencies": {
+    "expo": "51.0.22",
+    "expo-dev-client": "4.0.20",
+    "expo-updates": "0.25.21",
+    "domain-objects": "0.34.0",
+    "type-fns": "1.21.4"
+  },
+  "author": "ahbode",
+  "repository": "ahbode/app-protools-native",
+  "homepage": "https://github.com/ahbode/app-protools-native",
+  "bugs": "https://github.com/ahbode/app-protools-native/issues",
+  "pnpm": {
+    "overrides": {
+      "@commitlint/format": "19.9.9",
+      "type-fns": "1.9.9"
+    }
+  }
+}
+"
+`;
+
+exports[`app-react-native-expo — graceful migration of an app-protools-shaped repo given: [case1] a customized npm expo repo on the deprecated src layers when: [t6] the migration is re-applied then: the before + settled package.json match snapshot: package.json — before 1`] = `
+"{
+  "name": "app-protools-shaped",
+  "version": "1.0.0",
+  "packageManager": "pnpm@10.32.1",
+  "scripts": {
+    "install:deps": "npm install",
+    "start": "expo start"
+  },
+  "overrides": {
+    "type-fns": "1.9.9"
+  },
+  "resolutions": {
+    "@commitlint/format": "19.9.9"
+  },
+  "jest": {
+    "preset": "jest-expo",
+    "testEnvironment": "jsdom"
+  },
+  "devDependencies": {
+    "expo": "54.0.0"
+  }
+}
+"
+`;
+
+exports[`cicd-app-react-native-expo — prod test-gate precedence (silent-break clamp) given: [case1] the expo deploy.yml prod job when: [t1] the emitted prod-job gate is snapshotted for review then: the prod job \`if:\` gate matches snapshot: deploy.yml prod job if: (test-gate precedence) 1`] = `"((startsWith(github.ref, 'refs/tags/') && github.event_name != 'workflow_dispatch') || github.event.inputs.access == 'prod') && always() && (needs.test.result == 'success' || needs.test.result == 'skipped')"`;

package/dist/.test/assets/expo-fullusecase/declarations/practices/cicd-app-react-native-expo/best-practice/.declapract.readme.md

@@ -0,0 +1,27 @@
+the cicd workflows and gitignore for an expo app
+
+this practice declares `android/` and `ios/` — the build output `expo prebuild` emits, which is
+scratch in a managed-workflow repo.
+
+📖 several practices declare this same `.gitignore`. the contract they share — one shared
+algorithm, the ordered tail, what a new declarer owes — is stated once at
+`.agent/repo=.this/role=any/briefs/howto.declare-the-repo-gitignore.md`. read that before you add
+a line here.
+
+## this declaration once went stale, and that is why it imports
+
+it was authored 2024-09-11, cloned from the `git` practice's shape at the time. `git` gained its
+ordered tail in #404 on 2026-01-31, and this copy never caught up — so it sorted every line,
+which hoisted the `!` negations above their target and turned them inert.
+
+fixed 2026-07-30 (#537) by an import of the shared algorithm rather than a re-derivation.
+consumers saw no content change: an expo repo already received the ordered tail from `git`; what
+changed is that this practice no longer hoists it.
+
+the clamp is `.gitignore.declapract.test.ts` → `convergence with the git practice`, which asserts
+both checks pass once both have run, that the settled file is a fixed point under either, and
+that the negations stay below `node_modules`.
+
+⚠️ its declared set is **disjoint** from git's, so neither practice's output alone satisfies the
+other's check — both must run. this differs from `rhachet`, whose one line is a subset of git's.
+do not copy an assertion between those two suites without that check.

package/dist/.test/assets/expo-fullusecase/declarations/practices/cicd-app-react-native-expo/best-practice/.github/workflows/.deploy-expo.yml

@@ -0,0 +1,137 @@
+name: .deploy-expo
+
+on:
+  workflow_call:
+    inputs:
+      access:
+        type: string
+        description: "the access to deploy with (test | prep | prod)"
+        required: true
+      build:
+        type: string
+        description: "the build to deploy (e.g., production, preview, development)"
+        required: true
+      github-environment:
+        type: string
+        description: "github environment for the deploy jobs"
+        required: true
+      creds-aws-region:
+        type: string
+        description: creds for aws, specifies the region
+        required: true
+      creds-aws-role-arn:
+        type: string
+        description: creds for aws, specifies the role to assume via oidc
+        required: true
+      app-web-deployment-s3-bucket:
+        type: string
+        description: the s3 bucket within which the web app is deployed
+        required: false
+
+    secrets:
+      expo-token:
+        required: true
+        description: required credentials to authenticate with expo eas
+
+permissions:
+  id-token: write # required for oidc
+  contents: read
+
+jobs:
+  install:
+    uses: ./.github/workflows/.install.yml
+
+  deploy-os:
+    strategy:
+      fail-fast: false # allow them to independently succeed; an issue on one platform shouldn't block others
+      matrix:
+        platform:
+          - ios
+          - android
+    name: ${{ matrix.platform }}
+    runs-on: ubuntu-24.04
+    environment:
+      # deployment: false keeps the built-in gate but suppresses the auto-Deployment, so no
+      # "deployed to <env>" status accretes on the PR timeline. the environment is ALWAYS
+      # declared — for prep and prod alike.
+      name: ${{ inputs.github-environment }}
+      deployment: false
+    needs: [install]
+    steps:
+      - name: checkout
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+
+      - name: set node-version
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version-file: ".nvmrc"
+
+      - name: configure aws credentials (oidc)
+        uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4
+        with:
+          role-to-assume: ${{ inputs.creds-aws-role-arn }}
+          aws-region: ${{ inputs.creds-aws-region }}
+
+      - name: node-modules cache get
+        uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+        with:
+          path: ./node_modules
+          key: ${{ needs.install.outputs.node-modules-cache-key }}
+          fail-on-cache-miss: true
+
+      - name: setup expo
+        uses: expo/expo-github-action@c7b66a9c327a43a8fa7c0158e7f30d6040d2481e # v8
+        with:
+          eas-version: latest
+          token: ${{ secrets.expo-token }}
+
+      - name: deploy ota update
+        run: eas update --auto --channel ${{ inputs.build }} --platform ${{ matrix.platform }} --non-interactive
+
+      - name: deploy app binary
+        run: eas build --profile ${{ inputs.build }} --platform ${{ matrix.platform }} --non-interactive --no-wait ${{ inputs.build == 'production' && '--auto-submit' || '' }}
+
+  deploy-web:
+    name: web
+    runs-on: ubuntu-24.04
+    environment:
+      # deployment: false keeps the built-in gate but suppresses the auto-Deployment, so no
+      # "deployed to <env>" status accretes on the PR timeline. the environment is ALWAYS
+      # declared — for prep and prod alike.
+      name: ${{ inputs.github-environment }}
+      deployment: false
+    needs: [install]
+    if: ${{ inputs.access == 'prod' && inputs.app-web-deployment-s3-bucket }}
+    steps:
+      - name: checkout
+        uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+
+      - name: set node-version
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version-file: ".nvmrc"
+
+      - name: configure aws credentials (oidc)
+        uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4
+        with:
+          role-to-assume: ${{ inputs.creds-aws-role-arn }}
+          aws-region: ${{ inputs.creds-aws-region }}
+
+      - name: node-modules cache get
+        uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+        with:
+          path: ./node_modules
+          key: ${{ needs.install.outputs.node-modules-cache-key }}
+          fail-on-cache-miss: true
+
+      - name: setup expo
+        uses: expo/expo-github-action@c7b66a9c327a43a8fa7c0158e7f30d6040d2481e # v8
+        with:
+          eas-version: latest
+          token: ${{ secrets.expo-token }}
+
+      - name: compile
+        run: npm run build:web
+
+      - name: deploy
+        run: aws s3 sync ./dist ${{ inputs.app-web-deployment-s3-bucket }} --delete --cache-control max-age=60,stale-while-revalidate=604800 # todo: fine tune the cache control; https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cache-Control#stale-while-revalidate

package/dist/.test/assets/expo-fullusecase/declarations/practices/cicd-app-react-native-expo/best-practice/.github/workflows/deploy.yml

@@ -0,0 +1,76 @@
+name: deploy
+
+on:
+  push:
+    tags:
+      - v*
+    branches:
+      - 'main'
+      - 'master'
+  workflow_dispatch:
+    inputs:
+      access:
+        description: 'which access do you want to deploy with?'
+        type: choice
+        options:
+          - prep
+          - prod
+        required: true
+        default: 'prep'
+      thoroughly:
+        description: 'should we run tests before this deployment?'
+        type: choice
+        required: true
+        default: 'true'
+        options:
+          - 'true'
+          - 'false'
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}-${{ github.event_name }} # per [workflow] x [branch, tag] x [event]
+  cancel-in-progress: true # only cancel work flows on non-latest commits
+
+permissions:
+  id-token: write # required for oidc; a called workflow cannot exceed its caller's grant
+  contents: read
+
+jobs:
+  test:
+    uses: ./.github/workflows/.test.yml
+    if: github.event_name != 'workflow_dispatch' || github.event.inputs.thoroughly == 'true'
+    with:
+      creds-aws-region: us-east-1
+      creds-aws-role-arn: ${{ vars.CREDS_CICD_AWS_PREP_OIDC_ROLE_ARN }} # use aws auth via oidc, if this repo supplies it
+    secrets: inherit # keyrack firewall in .test.yml filters to declared keys
+
+  prep:
+    uses: ./.github/workflows/.deploy-expo.yml
+    needs: [test]
+    # dont deploy on merge to main by default, since builds are expensive
+    if: |
+      ((github.ref == 'refs/heads/main' && github.event_name != 'workflow_dispatch' && false) || github.event.inputs.access == 'prep') &&
+      always() && (needs.test.result == 'success' || needs.test.result == 'skipped')
+    with:
+      access: prep
+      github-environment: preparation # deployment:false keeps the gate and suppresses the PR-timeline spam
+      build: development
+      creds-aws-region: us-east-1
+      creds-aws-role-arn: ${{ vars.CREDS_CICD_AWS_PREP_OIDC_ROLE_ARN }}
+    secrets:
+      expo-token: ${{ secrets.EXPO_TOKEN }}
+
+  prod:
+    uses: ./.github/workflows/.deploy-expo.yml
+    needs: [test]
+    if: |
+      ((startsWith(github.ref, 'refs/tags/') && github.event_name != 'workflow_dispatch') || github.event.inputs.access == 'prod') &&
+      always() && (needs.test.result == 'success' || needs.test.result == 'skipped')
+    with:
+      access: prod
+      build: production
+      github-environment: ${{ (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/')) && 'production-on-main' || 'production-on-else-apply' }} # main/tag => on-main; else => on-else-apply (actor_id-gated writer)
+      creds-aws-region: us-east-1
+      creds-aws-role-arn: ${{ vars.CREDS_CICD_AWS_PROD_OIDC_APPLY_ROLE_ARN }}
+      app-web-deployment-s3-bucket: s3://@declapract{variable.projectName}-@declapract{variable.infrastructureNamespaceId}-prod
+    secrets:
+      expo-token: ${{ secrets.EXPO_TOKEN }}

package/dist/.test/assets/expo-fullusecase/declarations/practices/cicd-app-react-native-expo/best-practice/.github/workflows/test.yml

@@ -0,0 +1,25 @@
+name: test
+
+on:
+  workflow_call:
+  push:
+    branches-ignore:
+      - 'main' # exclude main branch, since deploy workflow triggers on main, and calls the test workflow inside of it already
+    tags-ignore:
+      - v* # exclude tags, since deploy workflow triggers on tags, and calls the test workflow inside of it already
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }} # per [workflow] x [branch, tag]
+  cancel-in-progress: true #  cancel workflows for non-latest commits
+
+permissions:
+  id-token: write # required for oidc; a called workflow cannot exceed its caller's grant
+  contents: read
+
+jobs:
+  suite:
+    uses: ./.github/workflows/.test.yml
+    with:
+      creds-aws-region: us-east-1
+      creds-aws-role-arn: ${{ vars.CREDS_CICD_AWS_PREP_OIDC_ROLE_ARN }} # use aws auth via oidc, if this repo supplies it
+    secrets: inherit # keyrack firewall in .test.yml filters to declared keys

package/dist/.test/assets/expo-fullusecase/declarations/practices/cicd-app-react-native-expo/best-practice/.gitignore.declapract.ts

@@ -0,0 +1,28 @@
+import type { FileCheckFunction, FileFixFunction } from 'declapract';
+import expect from 'expect';
+
+import { defineExpectedGitignoreContents } from '../../../utils/defineExpectedGitignoreContents';
+
+/**
+ * .what = the ignores this practice declares — the build output an expo app emits
+ * .why  = `android/` and `ios/` are generated by `expo prebuild`, so they are scratch
+ *         in a managed-workflow repo.
+ * .note = this list is NOT sorted here, and that is deliberate.
+ *         `defineExpectedGitignoreContents` sorts the union of these lines with the
+ *         repo's own, so a `.sort()` at this site would be a second sort that changes
+ *         no output -- while it mutates a module-cached array in place. `readonly`
+ *         forbids that mutation outright.
+ */
+const ignoresSortable: readonly string[] = ['android/', 'ios/'];
+
+export const check: FileCheckFunction = (contents) => {
+  expect(contents).toEqual(
+    defineExpectedGitignoreContents({ contents, ignoresSortable }),
+  );
+};
+
+export const fix: FileFixFunction = (contents) => {
+  return {
+    contents: defineExpectedGitignoreContents({ contents, ignoresSortable }),
+  };
+};

package/dist/.test/assets/expo-fullusecase/declarations/practices/cicd-app-react-native-expo/best-practice/package.json

@@ -0,0 +1,36 @@
+{
+  "dependencies": {
+    "expo": "@declapract{check.minVersion('51.0.22')}",
+    "expo-dev-client": "@declapract{check.minVersion('4.0.20')}",
+    "expo-updates": "@declapract{check.minVersion('0.25.21')}"
+  },
+  "scripts": {
+    "start:hot:proxy": "npx local-ssl-proxy --source 3447 --target 8081",
+    "start:hot:prep": "ACCESS=prep npx expo start --clear --dev-client",
+    "start:hot:prep:link": "echo '🚀 https://localhost.@declapract{variable.app.web.domain.prep}:@declapract{variable.app.web.port.hot}'",
+    "start:hot:prep:proxy": "npm run start:hot:prep:link && npm run start:hot:proxy",
+    "start:hot:prod": "ACCESS=prod npx expo start --clear --dev-client",
+    "start:hot:prod:link": "echo '🚀 https://localhost.@declapract{variable.app.web.domain.prod}:@declapract{variable.app.web.port.hot}'",
+    "start:hot:prod:proxy": "npm run start:hot:prod:link && npm run start:hot:proxy",
+    "start:cold:proxy": "npx local-ssl-proxy --source 3449 --target 3000",
+    "start:cold:prep": "npm run build:web && npx serve dist --single",
+    "start:cold:prep:link": "echo '🚀 https://localhost.@declapract{variable.app.web.domain.prep}:@declapract{variable.app.web.port.cold}'",
+    "start:cold:prep:proxy": "echo npm run start:cold:prep:link && npm run start:cold:proxy",
+    "start:cold:prod": "npm run build:web && npx serve dist --single",
+    "start:cold:prod:link": "echo '🚀 https://localhost.@declapract{variable.app.web.domain.prod}:@declapract{variable.app.web.port.cold}'",
+    "register:device:apple:info": "echo 'learn more here https://docs.expo.dev/build/internal-distribution/'",
+    "register:device:apple:inclusions:rebuild:prod": "npx eas build --platform ios --clear-cache",
+    "register:device:apple:inclusions:rebuild:prep": "npx eas build --profile development --platform ios --clear-cache",
+    "register:device:apple:add": "echo 'register an apple device to allow it to install internal builds' && eas device:create && npm run register:device:apple:inclusions:rebuild",
+    "register:device:apple:list": "eas device:list",
+    "register:device:apple:delete": "eas device:delete",
+    "register:device:apple:rename": "eas device:rename",
+    "register:profile:apple:list": "echo 'see list here https://developer.apple.com/account/resources/profiles/list'",
+    "build:prep:ios": "eas build --profile development --platform ios --non-interactive",
+    "build:prep:android": "eas build --profile development --platform android --non-interactive",
+    "deploy:prod:ios:metadata": "eas metadata:push",
+    "deploy:prod": "echo 'use github actions'",
+    "open:store:android": "https://play.google.com/console/u/0/developers/",
+    "open:store:ios": "browser https://appstoreconnect.apple.com/apps/"
+  }
+}

package/dist/.test/assets/expo-fullusecase/declarations/practices/cicd-app-react-native-expo/best-practice/package.json.declapract.ts

@@ -0,0 +1,3 @@
+import { FileCheckType } from 'declapract';
+
+export const check = FileCheckType.CONTAINS;