kasy-cli 1.20.0 → 1.20.1

package/lib/scaffold/backends/supabase/pubspec.yaml.tpl

@@ -52,6 +52,7 @@ dependencies:
   intl: ^0.20.2
   jiffy: ^6.4.4
   json_annotation: ^4.9.0
+  local_auth: ^3.0.1
   logger: ^2.6.2
   lucide_icons_flutter: ^3.1.10
   mixpanel_flutter: ^2.5.0
@@ -73,6 +74,7 @@ dependencies:
   universal_html: ^2.3.0
   universal_io: ^2.3.1
   url_launcher: ^6.3.2
+  web: ^1.1.1
 
 dev_dependencies:
   build_runner: ^2.11.1

package/lib/scaffold/catalog.js

@@ -50,12 +50,12 @@ const FEATURE_CATALOG = [
   { id: 'revenuecat',          displayName: 'RevenueCat',             status: 'public',   availableIn: ['firebase', 'supabase', 'api'], defaultInPresets: ['saas', 'full'], enhances: 'subscription' },
   // features
   { id: 'onboarding',          displayName: 'Onboarding',             status: 'public',   availableIn: ['firebase', 'supabase', 'api'], defaultInPresets: ['starter', 'saas', 'content', 'full'] },
-  { id: 'web',                 displayName: 'Web Support (PWA)',      status: 'public',   availableIn: ['firebase'],                    defaultInPresets: [], tag: 'firebaseOnly' },
+  { id: 'web',                 displayName: 'Web Support (PWA)',      status: 'public',   availableIn: ['firebase', 'supabase', 'api'], defaultInPresets: ['full'] },
   { id: 'widget',              displayName: 'Home Widget',            status: 'public',   availableIn: ['firebase', 'supabase', 'api'], defaultInPresets: ['full'] },
   { id: 'llm_chat',            displayName: 'AI Chat',                status: 'public',   availableIn: ['firebase', 'supabase', 'api'], defaultInPresets: ['content', 'full'] },
   { id: 'local_notifications', displayName: 'Local Reminders',        status: 'public',   availableIn: ['firebase', 'supabase', 'api'], defaultInPresets: [] },
   // feedback (Firebase/Supabase only)
-  { id: 'feedback',            displayName: 'Feature Requests',       status: 'public',   availableIn: ['firebase', 'supabase'],        defaultInPresets: ['saas', 'full'], tag: 'requiresDb' },
+  { id: 'feedback',            displayName: 'Feature Requests',       status: 'public',   availableIn: ['firebase', 'supabase', 'api'], defaultInPresets: ['saas', 'full'], tag: 'requiresDb' },
   // ci/cd
   { id: 'ci',                  displayName: 'CI/CD',                  status: 'public',   availableIn: ['firebase', 'supabase', 'api'], defaultInPresets: ['full'] },
 ];

package/lib/scaffold/generate.js

@@ -58,6 +58,7 @@ const {
   removeFacebookSigninFromAuthPages,
   removeAndroidFacebookMetadata,
   writeNoOpAdminHomeWidgets,
+  patchLanguageSwitcherNoWidget,
   writeNoOpFeatureRequestRepository,
   writeNoOpSubscriptionStubs,
   writeNoOpSentryUsages,
@@ -67,7 +68,7 @@ const {
   removeDevelopmentTeam,
   localizeReleaseDocs,
 } = require('./shared/generator-utils');
-const { pubGet, slangGenerate, buildRunner, dartFix, flutterfireConfigure, writeGoogleAuthOptions, writeGoogleIosUrlScheme, patchFirebaseServiceWorker } = require('./shared/post-build');
+const { pubGet, slangGenerate, buildRunner, dartFix, flutterfireConfigure, writeGoogleAuthOptions, writeGoogleIosUrlScheme, patchFirebaseServiceWorker, deployFirestoreRules } = require('./shared/post-build');
 const { FIREBASE_SOURCE_DIR } = require('./shared/backend-config');
 
 /**
@@ -264,6 +265,9 @@ async function generateProject(targetDir, backend, options, hooks = {}) {
     // (imports home_widget_mywidget_service which only exists when widget is selected)
     if (!modules.includes('widget')) {
       await writeNoOpAdminHomeWidgets(targetDir);
+      // The language switcher pushes locale changes to the home widget — strip
+      // that hook so it doesn't reference the (now absent) widget provider.
+      await patchLanguageSwitcherNoWidget(targetDir);
       // Remove Android native widget files and unregister the receiver from the manifest
       // so the widget does not appear in the Android widget picker when not selected
       await removeAndroidWidgetArtifacts(targetDir, bundleId);
@@ -341,8 +345,10 @@ async function generateProject(targetDir, backend, options, hooks = {}) {
       });
     }
 
-    // iOS: register REVERSED_CLIENT_ID as a URL scheme in ios/Runner/Info.plist
-    if (!deferGoogleAuthPatches) {
+    // iOS: register REVERSED_CLIENT_ID as a URL scheme in ios/Runner/Info.plist.
+    // Skip for Supabase — REVERSED_CLIENT_ID isn't present until Google Sign-In is
+    // enabled later in new.js; that flow calls writeGoogleIosUrlSchemeFromClientId instead.
+    if (backend !== 'supabase' && !deferGoogleAuthPatches) {
       const iosSchemeResult = await writeGoogleIosUrlScheme(targetDir);
       steps.push({
         name: 'google-ios-url-scheme',
@@ -367,6 +373,16 @@ async function generateProject(targetDir, backend, options, hooks = {}) {
   // (the dead lib/firebase_options.dart we no longer ship).
   await cleanFirebaseJsonKitRefs(targetDir);
 
+  // Deploy Firestore security rules so the app works immediately after
+  // `kasy new` without needing `kasy deploy` first. Fast (<30s), billing-free.
+  // Without this the project gets Firebase's default deny-all rules, causing
+  // every Firestore read to throw permission-denied and the app to log the user out.
+  if (firebaseProjectId) {
+    onProgress('firestore-rules');
+    const rulesResult = await deployFirestoreRules(targetDir, firebaseProjectId);
+    steps.push({ name: 'firestore-rules', ok: rulesResult.ok, detail: rulesResult.ok ? null : rulesResult.error });
+  }
+
   // ── 3. Post-build específico do backend ────────────────────────────────────
   if (postBuild) {
     try {

package/lib/scaffold/shared/generator-utils.js

@@ -318,12 +318,14 @@ async function writeRouter(projectDir, modules, packageName, defaultPaywall = 'b
   const withOnboarding          = modules.includes('onboarding');
   const withRevenuecat          = modules.includes('revenuecat');
   const withAnalytics           = modules.includes('analytics');
+  const withWidget              = modules.includes('widget');
 
   const fallback = withOnboarding ? '/onboarding' : '/signin';
 
   const lines = [];
 
   // ── Imports ────────────────────────────────────────────────────────────────
+  lines.push(`import 'package:flutter/foundation.dart';`);
   lines.push(`import 'package:flutter/material.dart';`);
   lines.push(`import 'package:flutter_riverpod/flutter_riverpod.dart';`);
   lines.push(`import 'package:go_router/go_router.dart';`);
@@ -340,6 +342,12 @@ async function writeRouter(projectDir, modules, packageName, defaultPaywall = 'b
   if (withFeedback) {
     lines.push(`import 'package:${pkg}/features/feedbacks/ui/feedback_page.dart';`);
   }
+  // Home showcase detail screens — always present (not module-gated).
+  lines.push(`import 'package:${pkg}/features/home/design_system_page.dart';`);
+  lines.push(`import 'package:${pkg}/features/home/home_components_page.dart';`);
+  lines.push(`import 'package:${pkg}/features/home/home_components_preview_page.dart';`);
+  lines.push(`import 'package:${pkg}/features/home/home_components_preview_registry.dart';`);
+  lines.push(`import 'package:${pkg}/features/home/home_features_page.dart';`);
   if (withLlmChat) {
     lines.push(`import 'package:${pkg}/features/llm_chat/llm_chat_page.dart';`);
   }
@@ -349,10 +357,22 @@ async function writeRouter(projectDir, modules, packageName, defaultPaywall = 'b
   if (withOnboarding) {
     lines.push(`import 'package:${pkg}/features/onboarding/ui/onboarding_page.dart';`);
   }
+  // Admin tools: send-push is always available; paywalls/home-widgets only
+  // when their module exists. The screens themselves are gated by kDebugMode.
+  // Kept in alphabetical order to satisfy directives_ordering.
+  if (withWidget) {
+    lines.push(`import 'package:${pkg}/features/settings/ui/components/admin/admin_home_widgets.dart';`);
+  }
+  if (withRevenuecat) {
+    lines.push(`import 'package:${pkg}/features/settings/ui/components/admin/admin_paywalls.dart';`);
+  }
+  lines.push(`import 'package:${pkg}/features/settings/ui/components/admin/admin_routes.dart';`);
+  lines.push(`import 'package:${pkg}/features/settings/ui/components/admin/send_push_notification_page.dart';`);
   if (withRevenuecat) {
     lines.push(`import 'package:${pkg}/features/subscription/ui/component/premium_page_factory.dart';`);
     lines.push(`import 'package:${pkg}/features/subscription/ui/premium_page.dart';`);
   }
+  lines.push(`import 'package:logger/logger.dart';`);
 
   // ── Provider ──────────────────────────────────────────────────────────────
   lines.push('');
@@ -374,7 +394,16 @@ async function writeRouter(projectDir, modules, packageName, defaultPaywall = 'b
   lines.push(`  return GoRouter(`);
   lines.push(`    initialLocation: '/',`);
   lines.push(`    navigatorKey: navigatorKey,`);
-  lines.push(`    errorBuilder: (context, state) => const PageNotFound(),`);
+  // Unknown routes (e.g. a stale deep link) redirect home instead of dead-ending
+  // on a 404. The /404 GoRoute below still serves explicit navigation to it.
+  lines.push(`    onException: (context, state, router) {`);
+  lines.push(`      Logger().w(`);
+  lines.push(`        'GoRouter caught unknown route → "\${state.uri}" '`);
+  lines.push(`        '(matched: "\${state.matchedLocation}", error: \${state.error}). '`);
+  lines.push(`        'Redirecting to "/".',`);
+  lines.push(`      );`);
+  lines.push(`      router.go('/');`);
+  lines.push(`    },`);
   lines.push(`    observers: [`);
   if (withAnalytics) {
     lines.push(`      AnalyticsObserver(analyticsApi: MixpanelAnalyticsApi.instance()),`);
@@ -393,6 +422,42 @@ async function writeRouter(projectDir, modules, packageName, defaultPaywall = 'b
   lines.push(`        ),`);
   lines.push(`      ),`);
 
+  // Home showcase detail screens. TOP-LEVEL routes (siblings of '/', not children
+  // of the BottomMenu shell), so go_router renders them on the root navigator:
+  // full-screen, above the bottom bar, URL-addressable. Returning pops back to
+  // the tab with its menu intact.
+  lines.push(`      GoRoute(`);
+  lines.push(`        name: 'features',`);
+  lines.push(`        path: '/features',`);
+  lines.push(`        builder: (context, state) => const HomeFeaturesPage(),`);
+  lines.push(`      ),`);
+  lines.push(`      GoRoute(`);
+  lines.push(`        name: 'design_system',`);
+  lines.push(`        path: '/design-system',`);
+  lines.push(`        builder: (context, state) => const DesignSystemPage(),`);
+  lines.push(`      ),`);
+  lines.push(`      GoRoute(`);
+  lines.push(`        name: 'components',`);
+  lines.push(`        path: '/components',`);
+  lines.push(`        builder: (context, state) => const HomeComponentsPage(),`);
+  lines.push(`        routes: [`);
+  lines.push(`          GoRoute(`);
+  lines.push(`            name: 'component_preview',`);
+  lines.push(`            path: ':name',`);
+  lines.push(`            builder: (context, state) {`);
+  lines.push(`              final definition = getComponentPreviewDefinition(`);
+  lines.push(`                state.pathParameters['name'] ?? '',`);
+  lines.push(`              );`);
+  lines.push(`              if (definition == null) return const PageNotFound();`);
+  lines.push(`              return HomeComponentsPreviewPage(`);
+  lines.push(`                title: definition.title,`);
+  lines.push(`                variants: definition.variants,`);
+  lines.push(`              );`);
+  lines.push(`            },`);
+  lines.push(`          ),`);
+  lines.push(`        ],`);
+  lines.push(`      ),`);
+
   // Onboarding
   if (withOnboarding) {
     lines.push(`      GoRoute(`);
@@ -458,6 +523,64 @@ async function writeRouter(projectDir, modules, packageName, defaultPaywall = 'b
     lines.push(`      ),`);
   }
 
+  // Notifications + Settings: open the BottomMenu shell on the right tab.
+  // These also back the deep links from the settings/admin UI.
+  lines.push(`      GoRoute(`);
+  lines.push(`        name: 'notifications',`);
+  lines.push(`        path: '/notifications',`);
+  lines.push(`        builder: (context, state) => const UserInfosGuard(`);
+  lines.push(`          fallbackRoute: '${fallback}',`);
+  lines.push(`          child: BottomMenu(initialRoute: 'notifications'),`);
+  lines.push(`        ),`);
+  lines.push(`      ),`);
+  lines.push(`      GoRoute(`);
+  lines.push(`        name: 'settings',`);
+  lines.push(`        path: '/settings',`);
+  lines.push(`        builder: (context, state) => const UserInfosGuard(`);
+  lines.push(`          fallbackRoute: '${fallback}',`);
+  lines.push(`          child: BottomMenu(initialRoute: 'settings'),`);
+  lines.push(`        ),`);
+  lines.push(`      ),`);
+
+  // Send push notification (admin tool — always routable; the entry point in
+  // the settings admin sheet is itself debug-gated).
+  lines.push(`      GoRoute(`);
+  lines.push(`        name: 'send_push',`);
+  lines.push(`        path: adminRouteSendPush,`);
+  lines.push(`        builder: (context, state) => const SendPushNotificationPage(),`);
+  lines.push(`      ),`);
+
+  // Debug-only admin screens (paywall preview / home widgets preview).
+  if (withRevenuecat || withWidget) {
+    lines.push(`      if (kDebugMode) ...[`);
+    if (withRevenuecat) {
+      lines.push(`        GoRoute(`);
+      lines.push(`          name: 'admin_paywalls',`);
+      lines.push(`          path: adminRoutePaywalls,`);
+      lines.push(`          builder: (context, state) => const AdminPaywalls(),`);
+      lines.push(`        ),`);
+    }
+    if (withWidget) {
+      lines.push(`        GoRoute(`);
+      lines.push(`          name: 'admin_home_widgets',`);
+      lines.push(`          path: adminRouteHomeWidgets,`);
+      lines.push(`          builder: (context, state) => const AdminHomeWidgets(),`);
+      lines.push(`        ),`);
+    }
+    if (withRevenuecat) {
+      lines.push(`        GoRoute(`);
+      lines.push(`          name: 'admin_premium_preview',`);
+      lines.push(`          path: '/admin/premium/:variant',`);
+      lines.push(`          builder: (context, state) {`);
+      lines.push(`            final paywall = paywallFactoryFromAdminRoute(state.pathParameters['variant']);`);
+      lines.push(`            if (paywall == null) return const PageNotFound();`);
+      lines.push(`            return PremiumPage(paywall: paywall);`);
+      lines.push(`          },`);
+      lines.push(`        ),`);
+    }
+    lines.push(`      ],`);
+  }
+
   // Recover password + 404 (always)
   lines.push(`      GoRoute(`);
   lines.push(`        name: 'recover_password',`);
@@ -750,19 +873,28 @@ async function writeMainDart(projectDir, backend, modules, packageName, options
   const withWidget = modules.includes('widget');
   const withRevenuecat = modules.includes('revenuecat');
   const withSupabase = backend === 'supabase';
-  const withFirebase = backend === 'firebase' || backend === 'supabase'; // Firebase used for auth/notifications in all backends currently
+  // Firebase powers push notifications (FCM) and remote config in EVERY backend
+  // (Supabase additionally uses it for Google Sign-In). Every backend runs
+  // `flutterfire configure` during generation (see generate.js), so
+  // firebase_options_dev.dart and the google-services files always exist, which
+  // makes Firebase.initializeApp safe to call in all of them.
+  const withFirebase = true;
 
   const lines = [];
 
   // ── Imports ────────────────────────────────────────────────────────────────
+  lines.push(`import 'package:device_preview/device_preview.dart';`);
   if (withFirebase) {
     lines.push(`import 'package:firebase_core/firebase_core.dart';`);
+    lines.push(`import 'package:firebase_messaging/firebase_messaging.dart';`);
   }
   lines.push(`import 'package:flutter/foundation.dart';`);
   lines.push(`import 'package:flutter/material.dart';`);
   lines.push(`import 'package:flutter/services.dart';`);
   lines.push(`import 'package:flutter_localizations/flutter_localizations.dart';`);
+  lines.push(`import 'package:flutter_native_splash/flutter_native_splash.dart';`);
   lines.push(`import 'package:flutter_riverpod/flutter_riverpod.dart';`);
+  lines.push(`import 'package:jiffy/jiffy.dart';`);
   lines.push(`import 'package:logger/logger.dart';`);
   lines.push(`import 'package:${pkg}/core/config/app_env.dart';`);
   lines.push(`import 'package:${pkg}/core/data/api/analytics_api.dart';`);
@@ -772,9 +904,12 @@ async function writeMainDart(projectDir, backend, modules, packageName, options
     lines.push(`import 'package:${pkg}/core/home_widgets/home_widget_service.dart';`);
   }
   lines.push(`import 'package:${pkg}/core/initializer/onstart_widget.dart';`);
+  lines.push(`import 'package:${pkg}/core/keyboard_fix/keyboard_flicker_fix.dart';`);
   lines.push(`import 'package:${pkg}/core/shared_preferences/shared_preferences.dart';`);
   lines.push(`import 'package:${pkg}/core/states/user_state_notifier.dart';`);
+  lines.push(`import 'package:${pkg}/core/dev_inspector/dev_inspector.dart';`);
   lines.push(`import 'package:${pkg}/core/theme/theme.dart';`);
+  lines.push(`import 'package:${pkg}/core/web_device_preview/web_device_preview.dart';`);
   lines.push(`import 'package:${pkg}/environnements.dart';`);
   if (withFirebase) {
     lines.push(`import 'package:${pkg}/firebase_options_dev.dart' as firebase_dev;`);
@@ -782,6 +917,9 @@ async function writeMainDart(projectDir, backend, modules, packageName, options
   lines.push(`import 'package:${pkg}/i18n/translations.g.dart';`);
   lines.push(`import 'package:${pkg}/features/authentication/api/authentication_api.dart';`);
   lines.push(`import 'package:${pkg}/features/notifications/api/local_notifier.dart';`);
+  if (withFirebase) {
+    lines.push(`import 'package:${pkg}/features/notifications/repositories/background_notification_handler.dart';`);
+  }
   lines.push(`import 'package:${pkg}/features/notifications/repositories/notifications_repository.dart';`);
   if (withRevenuecat) {
     lines.push(`import 'package:${pkg}/features/subscription/repositories/subscription_repository.dart';`);
@@ -798,7 +936,8 @@ async function writeMainDart(projectDir, backend, modules, packageName, options
 
   // ── main() ────────────────────────────────────────────────────────────────
   lines.push(`void main() async {`);
-  lines.push(`  WidgetsFlutterBinding.ensureInitialized();`);
+  lines.push(`  final widgetsBinding = KasyBinding.ensureInitialized();`);
+  lines.push(`  FlutterNativeSplash.preserve(widgetsBinding: widgetsBinding);`);
   lines.push(`  await AppEnv.load();`);
   lines.push(`  final env = Environment.fromEnv();`);
   lines.push(`  final logger = Logger();`);
@@ -853,6 +992,13 @@ async function writeMainDart(projectDir, backend, modules, packageName, options
     lines.push(`    ),`);
     lines.push(`  };`);
     lines.push('');
+    lines.push(`  // Jiffy locale must be set AFTER Firebase init because Firebase resets`);
+    lines.push(`  // Intl.defaultLocale internally, which would override our setting.`);
+    lines.push(`  await Jiffy.setLocale(LocaleSettings.instance.currentLocale.languageCode);`);
+    lines.push('');
+    lines.push(`  // MUST be registered at the top-level BEFORE runApp().`);
+    lines.push(`  FirebaseMessaging.onBackgroundMessage(onBackgroundMessage);`);
+    lines.push('');
   }
 
   if (withSentry) {
@@ -895,73 +1041,102 @@ async function writeMainDart(projectDir, backend, modules, packageName, options
   lines.push(`//   mode: ThemeMode.dark,`);
   lines.push(`// ),`);
   lines.push(`// See ./docs/theme.md for more details`);
-  lines.push(`class MyApp extends ConsumerWidget {`);
+  lines.push(`class MyApp extends ConsumerStatefulWidget {`);
   lines.push(`  final SharedPreferences sharedPreferences;`);
   lines.push('');
   lines.push(`  const MyApp({super.key, required this.sharedPreferences});`);
   lines.push('');
+  lines.push(`  @override`);
+  lines.push(`  ConsumerState<MyApp> createState() => _MyAppState();`);
+  lines.push(`}`);
+  lines.push('');
+  lines.push(`class _MyAppState extends ConsumerState<MyApp> {`);
+  lines.push(`  late final AppTheme _appTheme;`);
+  lines.push('');
+  lines.push(`  @override`);
+  lines.push(`  void initState() {`);
+  lines.push(`    super.initState();`);
+  lines.push(`    _appTheme = AppTheme.uniform(`);
+  lines.push(`      sharedPreferences: widget.sharedPreferences,`);
+  lines.push(`      themeFactory: const UniversalThemeFactory(),`);
+  lines.push(`      lightColors: KasyColors.light(),`);
+  lines.push(`      darkColors: KasyColors.dark(),`);
+  lines.push(`      textTheme: KasyTextTheme.build(),`);
+  lines.push(`      defaultMode: ThemeMode.system,`);
+  lines.push(`    );`);
+  lines.push(`  }`);
+  lines.push('');
+  lines.push(`  @override`);
+  lines.push(`  void dispose() {`);
+  lines.push(`    _appTheme.dispose();`);
+  lines.push(`    super.dispose();`);
+  lines.push(`  }`);
+  lines.push('');
   lines.push(`  // This widget is the root of your application.`);
   lines.push(`  @override`);
-  lines.push(`  Widget build(BuildContext context, WidgetRef ref) {`);
+  lines.push(`  Widget build(BuildContext context) {`);
   lines.push(`    ErrorWidget.builder = (FlutterErrorDetails details) {`);
   lines.push(`      return AppErrorWidget(error: details);`);
   lines.push(`    };`);
   lines.push(`    final goRouter = ref.watch(goRouterProvider);`);
   lines.push('');
   lines.push(`    return ThemeProvider(`);
-  lines.push(`      notifier: AppTheme.uniform(`);
-  lines.push(`        sharedPreferences: sharedPreferences,`);
-  lines.push(`        themeFactory: const UniversalThemeFactory(),`);
-  lines.push(`        lightColors: KasyColors.light(),`);
-  lines.push(`        darkColors: KasyColors.dark(),`);
-  lines.push(`        textTheme: KasyTextTheme.build(),`);
-  lines.push(`        defaultMode: ThemeMode.light,`);
-  lines.push(`      ),`);
+  lines.push(`      notifier: _appTheme,`);
   lines.push(`      child: Builder(`);
   lines.push(`        builder: (context) {`);
-  lines.push(`          return MaterialApp.router(`);
-  lines.push(`            title: 'Kasy',`);
-  lines.push(`            theme: ThemeProvider.of(context).light,`);
-  lines.push(`            darkTheme: ThemeProvider.of(context).dark,`);
-  lines.push(`            themeMode: ThemeProvider.of(context).mode,`);
-  lines.push(`            routerConfig: goRouter,`);
-  lines.push(`            localizationsDelegates: const [`);
-  lines.push(`              GlobalMaterialLocalizations.delegate,`);
-  lines.push(`              GlobalWidgetsLocalizations.delegate,`);
-  lines.push(`              GlobalCupertinoLocalizations.delegate,`);
-  lines.push(`            ],`);
-  lines.push(`            locale: TranslationProvider.of(context).flutterLocale,`);
-  lines.push(`            supportedLocales: AppLocaleUtils.supportedLocales,`);
-  lines.push(`            // Initializer is a widget that allows us to run some code before the app is ready`);
-  lines.push(`            builder: (context, child) => Initializer(`);
-  lines.push(`              services: [`);
-  lines.push(`                authenticationApiProvider,`);
-  lines.push(`                // shared preferences must be loaded`);
-  lines.push(`                sharedPreferencesProvider,`);
-  lines.push(`                // remote config api`);
-  lines.push(`                remoteConfigApiProvider,`);
-  lines.push(`                // notifications`);
-  lines.push(`                notificationsSettingsProvider,`);
-  lines.push(`                notificationRepositoryProvider,`);
-  lines.push(`                // user state`);
+  // WebDevicePreview + DevInspector wrap the app so the in-app dev tools work:
+  //   • Cmd/Ctrl + Shift + P → widget inspector
+  //   • Cmd/Ctrl + Shift + D → device preview (web)
+  // Both are no-ops in release builds.
+  lines.push(`          return WebDevicePreview.wrap(`);
+  lines.push(`            child: DevInspector.wrap(`);
+  lines.push(`              child: MaterialApp.router(`);
+  lines.push(`                title: 'Kasy',`);
+  lines.push(`                scaffoldMessengerKey: devInspectorRootScaffoldMessengerKey,`);
+  lines.push(`                theme: ThemeProvider.of(context).light,`);
+  lines.push(`                darkTheme: ThemeProvider.of(context).dark,`);
+  lines.push(`                themeMode: ThemeProvider.of(context).mode,`);
+  lines.push(`                themeAnimationDuration: Duration.zero,`);
+  lines.push(`                routerConfig: goRouter,`);
+  lines.push(`                localizationsDelegates: const [`);
+  lines.push(`                  GlobalMaterialLocalizations.delegate,`);
+  lines.push(`                  GlobalWidgetsLocalizations.delegate,`);
+  lines.push(`                  GlobalCupertinoLocalizations.delegate,`);
+  lines.push(`                ],`);
+  lines.push(`                locale: TranslationProvider.of(context).flutterLocale,`);
+  lines.push(`                supportedLocales: AppLocaleUtils.supportedLocales,`);
+  lines.push(`                // Initializer is a widget that allows us to run some code before the app is ready`);
+  lines.push(`                builder: (context, child) => Initializer(`);
+  lines.push(`                  services: [`);
+  lines.push(`                    authenticationApiProvider,`);
+  lines.push(`                    // shared preferences must be loaded`);
+  lines.push(`                    sharedPreferencesProvider,`);
+  lines.push(`                    // remote config api`);
+  lines.push(`                    remoteConfigApiProvider,`);
+  lines.push(`                    // notifications`);
+  lines.push(`                    notificationsSettingsProvider,`);
+  lines.push(`                    notificationRepositoryProvider,`);
+  lines.push(`                    // user state`);
   if (withRevenuecat) {
-    lines.push(`                subscriptionRepositoryProvider,`);
+    lines.push(`                    subscriptionRepositoryProvider,`);
   }
-  lines.push(`                userStateNotifierProvider.notifier,`);
+  lines.push(`                    userStateNotifierProvider.notifier,`);
   if (withWidget) {
-    lines.push(`                homeWidgetsManagerProvider,`);
+    lines.push(`                    homeWidgetsManagerProvider,`);
   }
-  lines.push(`                // analytics`);
-  lines.push(`                analyticsApiProvider,`);
-  lines.push(`                facebookEventApiProvider,`);
-  lines.push(`              ],`);
-  lines.push(`              onReady: child!,`);
-  lines.push(`              onError: (_, error) => InitializationErrorPage(error: error),`);
-  lines.push(`              onLoading: Scaffold(`);
-  lines.push(`                body: Center(`);
-  lines.push(`                  child: CircularProgressIndicator.adaptive(`);
-  lines.push(`                    valueColor: AlwaysStoppedAnimation<Color>(`);
-  lines.push(`                      context.colors.primary,`);
+  lines.push(`                    // analytics`);
+  lines.push(`                    analyticsApiProvider,`);
+  lines.push(`                    facebookEventApiProvider,`);
+  lines.push(`                  ],`);
+  lines.push(`                  onReady: DevicePreview.appBuilder(context, child),`);
+  lines.push(`                  onError: (_, error) => InitializationErrorPage(error: error),`);
+  lines.push(`                  onLoading: Scaffold(`);
+  lines.push(`                    body: Center(`);
+  lines.push(`                      child: CircularProgressIndicator.adaptive(`);
+  lines.push(`                        valueColor: AlwaysStoppedAnimation<Color>(`);
+  lines.push(`                          context.colors.primary,`);
+  lines.push(`                        ),`);
+  lines.push(`                      ),`);
   lines.push(`                    ),`);
   lines.push(`                  ),`);
   lines.push(`                ),`);
@@ -1185,6 +1360,30 @@ class AdminHomeWidgets extends StatelessWidget {
   );
 }
 
+/**
+ * Strips the home-widget hook from language_switcher.dart when the widget module
+ * is not selected. The switcher pushes the new locale to the home widget via
+ * myWidgetHomeWidgetProvider, which only exists with the widget module — without
+ * this the generated project fails to compile (undefined provider + dead import).
+ *
+ * @param {string} projectDir
+ */
+async function patchLanguageSwitcherNoWidget(projectDir) {
+  const filePath = path.join(
+    projectDir, 'lib', 'features', 'settings', 'ui', 'components', 'language_switcher.dart',
+  );
+  if (!(await fs.pathExists(filePath))) return;
+  let content = await fs.readFile(filePath, 'utf8');
+  // Drop the home-widget service import.
+  content = content.replace(/^import 'package:[^']*home_widget_mywidget_service\.dart';\n/m, '');
+  // Drop the unawaited(...) block that updates the home widget on locale change.
+  content = content.replace(
+    /\n\s*unawaited\(\s*ref[\s\S]*?myWidgetHomeWidgetProvider[\s\S]*?\);/,
+    '',
+  );
+  await fs.outputFile(filePath, content, 'utf8');
+}
+
 /**
  * Writes a NoOp feature_request_repository.dart when the feedback module is not selected.
  * premium_page_provider.dart imports this provider — without it the project won't compile.
@@ -1286,7 +1485,12 @@ async function writeNoOpSentryUsages(projectDir) {
     if (!(await fs.pathExists(filePath))) continue;
     let content = await fs.readFile(filePath, 'utf8');
     content = content.replace(sentryImport, '');
-    content = content.replace(/^[ \t]*Sentry\.captureException\([^)]*\);\n/gm, '');
+    // Replace the Sentry call with a comment (not nothing) so the catch block
+    // isn't left empty — an empty catch trips the empty_catches lint.
+    content = content.replace(
+      /^([ \t]*)Sentry\.captureException\([^)]*\);\n/gm,
+      '$1// Error not reported — Sentry is disabled. Run: kasy add sentry.\n',
+    );
     await fs.outputFile(filePath, content, 'utf8');
   }
 }
@@ -1466,9 +1670,13 @@ sealed class Subscription with _$Subscription {
   }
 
   // 1. No-op subscription_repository.dart (used by user_repository, onboarding, home_widget_background_task)
+  // The constructor keeps subscriptionApi/inAppSubscriptionApi/prefs params (unused
+  // here) for source-compat with the bundled tests. ignore_for_file stops
+  // `dart fix` from stripping them via avoid_unused_constructor_parameters.
   await fs.outputFile(
     path.join(projectDir, 'lib', 'features', 'subscription', 'repositories', 'subscription_repository.dart'),
-    `import 'package:flutter_riverpod/flutter_riverpod.dart';
+    `// ignore_for_file: avoid_unused_constructor_parameters
+import 'package:flutter_riverpod/flutter_riverpod.dart';
 import 'package:${pkg}/core/data/models/subscription.dart';
 import 'package:${pkg}/core/initializer/onstart_service.dart';
 // No-op subscription repository. Run: kasy add revenuecat to activate.
@@ -1561,7 +1769,8 @@ enum PaywallFactory { basic, basicRow, minimal, withSwitch }
   // 5. No-op subscription_entity.dart (used by test_utils, fake_subscription_api)
   await fs.outputFile(
     path.join(projectDir, 'lib', 'features', 'subscription', 'api', 'entities', 'subscription_entity.dart'),
-    `// No-op subscription entity. Run: kasy add revenuecat to activate.
+    `// ignore_for_file: constant_identifier_names
+// No-op subscription entity. Run: kasy add revenuecat to activate.
 enum SubscriptionStatus { ACTIVE, PAUSED, EXPIRED, LIFETIME, CANCELLED }
 
 class SubscriptionEntity {
@@ -1736,6 +1945,7 @@ module.exports = {
   removeFacebookSigninFromAuthPages,
   removeAndroidFacebookMetadata,
   writeNoOpAdminHomeWidgets,
+  patchLanguageSwitcherNoWidget,
   writeNoOpFeatureRequestRepository,
   writeNoOpSubscriptionStubs,
   writeNoOpSentryUsages,

package/lib/scaffold/shared/post-build.js

@@ -864,6 +864,16 @@ async function getGoogleClientSecretViaGcloud(firebaseProjectId) {
   }
 }
 
+// Deploys only Firestore security rules so the generated app works immediately
+// without needing `kasy deploy`. Fast (<30s) and billing-free.
+async function deployFirestoreRules(projectDir, firebaseProjectId) {
+  return run(
+    `firebase deploy --only firestore:rules --project ${firebaseProjectId}`,
+    projectDir,
+    120_000, // 2 min
+  );
+}
+
 module.exports = {
   pubGet,
   slangGenerate,
@@ -880,6 +890,7 @@ module.exports = {
   validateFacebookAndroidStrings,
   validateRevenueCat,
   patchFirebaseServiceWorker,
+  deployFirestoreRules,
   readSupabaseGoogleCredentials,
   getGoogleClientSecretViaGcloud,
   // Exported for focused unit tests; not part of the public CLI surface.

package/lib/utils/i18n/messages-en.js

@@ -524,7 +524,7 @@ module.exports = {
     'new.firebase.module.sentry': '🚨 Crash Reports (Sentry)',
     'new.firebase.module.analytics': '📊 Analytics (Mixpanel)',
     'new.firebase.module.facebook': '👤 Facebook (Login + Ads)',
-    'new.firebase.module.web': '🌐 Web Support (PWA, Firebase only)',
+    'new.firebase.module.web': '🌐 Web Support (PWA)',
     'new.firebase.module.widget': '📱 Home Widget (iOS/Android)',
     'new.firebase.module.llm_chat': '🤖 AI Chat (OpenAI/Gemini)',
     'new.firebase.module.local_notifications': '🔔 Local Reminders (no server)',
@@ -692,6 +692,10 @@ module.exports = {
     'new.google.refreshConfigs': 'Updating google-services.json and GoogleService-Info.plist with Google Client IDs…',
     'new.google.manualHint': 'Google Sign-In: enable manually in the Console (Google provider):',
     'new.google.manualHint.noEmail': 'Google Sign-In: could not detect a support email (gcloud has no account). Enable manually in the Console:',
+    'new.google.supabaseManual': 'Google Sign-In: client created, but the secret was not available yet. Enable it later in the Supabase dashboard (Authentication > Providers > Google).',
+    'new.fcm.ok': 'generated automatically',
+    'new.fcm.failSupabase': 'not generated (GCP permission still propagating); set FIREBASE_SERVICE_ACCOUNT_JSON in your Supabase secrets',
+    'new.fcm.failApi': 'not generated (GCP permission still propagating); run the command again in a few minutes',
     'new.sha1.registering': 'Registering SHA-1 for Google Sign-In (Android)…',
     'new.sha1.failed': 'SHA-1 not added automatically: {error}',
     'new.sha1.manual': 'Add it manually so Google Sign-In works on Android:',

package/lib/utils/i18n/messages-es.js

@@ -524,7 +524,7 @@ module.exports = {
     'new.firebase.module.sentry': '🚨 Crash Reports (Sentry)',
     'new.firebase.module.analytics': '📊 Analytics (Mixpanel)',
     'new.firebase.module.facebook': '👤 Facebook (Login + Ads)',
-    'new.firebase.module.web': '🌐 Web Support (PWA, solo Firebase)',
+    'new.firebase.module.web': '🌐 Web Support (PWA)',
     'new.firebase.module.widget': '📱 Home Widget (iOS/Android)',
     'new.firebase.module.llm_chat': '🤖 AI Chat (OpenAI/Gemini)',
     'new.firebase.module.local_notifications': '🔔 Local Reminders (sin servidor)',
@@ -692,6 +692,10 @@ module.exports = {
     'new.google.refreshConfigs': 'Actualizando google-services.json y GoogleService-Info.plist con los Client IDs de Google…',
     'new.google.manualHint': 'Inicio de sesión con Google: actívalo manualmente en la consola (proveedor Google):',
     'new.google.manualHint.noEmail': 'Inicio de sesión con Google: no detecté un email de soporte (gcloud sin cuenta). Actívalo manualmente en la consola:',
+    'new.google.supabaseManual': 'Inicio de sesión con Google: cliente creado, pero el secret aún no estaba disponible. Actívalo luego en el panel de Supabase (Authentication > Providers > Google).',
+    'new.fcm.ok': 'generada automáticamente',
+    'new.fcm.failSupabase': 'no generada (permiso de GCP aún propagando); define FIREBASE_SERVICE_ACCOUNT_JSON en los secrets de Supabase',
+    'new.fcm.failApi': 'no generada (permiso de GCP aún propagando); ejecuta el comando de nuevo en unos minutos',
     'new.sha1.registering': 'Registrando SHA-1 para Google Sign-In (Android)…',
     'new.sha1.failed': 'SHA-1 no añadido automaticamente: {error}',
     'new.sha1.manual': 'Agregalo manualmente para que Google Sign-In funcione en Android:',