lecodes-cli 0.19.0 → 0.20.0

package/src/commands/appTemplates.ts

@@ -0,0 +1,907 @@
+import { swiftPackageName, type IosPackage } from "./appShared"
+
+/* Templates for `lecodes app init ios` / `lecodes app sync` — distilled 1:1 from the
+ * hand-built, device-verified reference shell (docs/xcode-app-plan.md). Three ownership
+ * tiers: App/ Swift files are USER-owned after generation (init writes once, sync never
+ * touches them); Info.plist, the LeCodesRuntime package, Resources/ and the shell README
+ * are CLI-owned (sync regenerates); the pbxproj is written once at init — sync only restamps the
+ * MARKETING_VERSION / CURRENT_PROJECT_VERSION values (no structural edits, ever). */
+
+export interface ShellIdentity {
+  displayName: string
+  bundleId: string
+  teamId: string
+  version: string
+  buildNumber: number
+}
+
+/** Escape a value for a double-quoted pbxproj string. */
+const pbxStr = (s: string) => s.replace(/[\\"]/g, m => "\\" + m)
+
+export const pbxprojTemplate = ({ displayName, bundleId, teamId, version, buildNumber }: ShellIdentity): string => {
+  const target = `
+				ASSETCATALOG_COMPILER_APPICON_NAME = AppIcon;
+				ASSETCATALOG_COMPILER_GLOBAL_ACCENT_COLOR_NAME = AccentColor;
+				CODE_SIGN_ENTITLEMENTS = "App/App.entitlements";
+				CODE_SIGN_STYLE = Automatic;
+				CURRENT_PROJECT_VERSION = ${buildNumber};
+				DEVELOPMENT_TEAM = "${pbxStr(teamId)}";
+				GENERATE_INFOPLIST_FILE = YES;
+				INFOPLIST_FILE = "App/Info.plist";
+				INFOPLIST_KEY_CFBundleDisplayName = "${pbxStr(displayName)}";
+				INFOPLIST_KEY_UIApplicationSupportsIndirectInputEvents = YES;
+				INFOPLIST_KEY_UILaunchStoryboardName = LaunchScreen;
+				INFOPLIST_KEY_UISupportedInterfaceOrientations_iPad = "UIInterfaceOrientationPortrait UIInterfaceOrientationPortraitUpsideDown UIInterfaceOrientationLandscapeLeft UIInterfaceOrientationLandscapeRight";
+				INFOPLIST_KEY_UISupportedInterfaceOrientations_iPhone = "UIInterfaceOrientationPortrait UIInterfaceOrientationLandscapeLeft UIInterfaceOrientationLandscapeRight";
+				IPHONEOS_DEPLOYMENT_TARGET = 15.6;
+				LD_RUNPATH_SEARCH_PATHS = (
+					"$(inherited)",
+					"@executable_path/Frameworks",
+				);
+				MARKETING_VERSION = ${version};
+				PRODUCT_BUNDLE_IDENTIFIER = "${pbxStr(bundleId)}";
+				PRODUCT_NAME = "$(TARGET_NAME)";
+				STRING_CATALOG_GENERATE_SYMBOLS = YES;
+				SWIFT_APPROACHABLE_CONCURRENCY = YES;
+				SWIFT_DEFAULT_ACTOR_ISOLATION = MainActor;
+				SWIFT_EMIT_LOC_STRINGS = YES;
+				SWIFT_UPCOMING_FEATURE_MEMBER_IMPORT_VISIBILITY = YES;
+				SWIFT_VERSION = 5.0;
+				TARGETED_DEVICE_FAMILY = "1,2";`
+
+  const project = (debug: boolean) => `
+				ALWAYS_SEARCH_USER_PATHS = NO;
+				ASSETCATALOG_COMPILER_GENERATE_SWIFT_ASSET_SYMBOL_EXTENSIONS = YES;
+				CLANG_ANALYZER_NONNULL = YES;
+				CLANG_ANALYZER_NUMBER_OBJECT_CONVERSION = YES_AGGRESSIVE;
+				CLANG_CXX_LANGUAGE_STANDARD = "gnu++20";
+				CLANG_ENABLE_MODULES = YES;
+				CLANG_ENABLE_OBJC_ARC = YES;
+				CLANG_ENABLE_OBJC_WEAK = YES;
+				CLANG_WARN_BLOCK_CAPTURE_AUTORELEASING = YES;
+				CLANG_WARN_BOOL_CONVERSION = YES;
+				CLANG_WARN_COMMA = YES;
+				CLANG_WARN_CONSTANT_CONVERSION = YES;
+				CLANG_WARN_DEPRECATED_OBJC_IMPLEMENTATIONS = YES;
+				CLANG_WARN_DIRECT_OBJC_ISA_USAGE = YES_ERROR;
+				CLANG_WARN_DOCUMENTATION_COMMENTS = YES;
+				CLANG_WARN_EMPTY_BODY = YES;
+				CLANG_WARN_ENUM_CONVERSION = YES;
+				CLANG_WARN_INFINITE_RECURSION = YES;
+				CLANG_WARN_INT_CONVERSION = YES;
+				CLANG_WARN_NON_LITERAL_NULL_CONVERSION = YES;
+				CLANG_WARN_OBJC_IMPLICIT_RETAIN_SELF = YES;
+				CLANG_WARN_OBJC_LITERAL_CONVERSION = YES;
+				CLANG_WARN_OBJC_ROOT_CLASS = YES_ERROR;
+				CLANG_WARN_QUOTED_INCLUDE_IN_FRAMEWORK_HEADER = YES;
+				CLANG_WARN_RANGE_LOOP_ANALYSIS = YES;
+				CLANG_WARN_STRICT_PROTOTYPES = YES;
+				CLANG_WARN_SUSPICIOUS_MOVE = YES;
+				CLANG_WARN_UNGUARDED_AVAILABILITY = YES_AGGRESSIVE;
+				CLANG_WARN_UNREACHABLE_CODE = YES;
+				CLANG_WARN__DUPLICATE_METHOD_MATCH = YES;
+				COPY_PHASE_STRIP = NO;
+				DEBUG_INFORMATION_FORMAT = ${debug ? "dwarf" : "\"dwarf-with-dsym\""};
+				DEVELOPMENT_TEAM = "${pbxStr(teamId)}";${debug ? "" : `
+				ENABLE_NS_ASSERTIONS = NO;`}
+				ENABLE_STRICT_OBJC_MSGSEND = YES;${debug ? `
+				ENABLE_TESTABILITY = YES;` : ""}
+				ENABLE_USER_SCRIPT_SANDBOXING = YES;
+				GCC_C_LANGUAGE_STANDARD = gnu17;${debug ? `
+				GCC_DYNAMIC_NO_PIC = NO;` : ""}
+				GCC_NO_COMMON_BLOCKS = YES;${debug ? `
+				GCC_OPTIMIZATION_LEVEL = 0;
+				GCC_PREPROCESSOR_DEFINITIONS = (
+					"DEBUG=1",
+					"$(inherited)",
+				);` : ""}
+				GCC_WARN_64_TO_32_BIT_CONVERSION = YES;
+				GCC_WARN_ABOUT_RETURN_TYPE = YES_ERROR;
+				GCC_WARN_UNDECLARED_SELECTOR = YES;
+				GCC_WARN_UNINITIALIZED_AUTOS = YES_AGGRESSIVE;
+				GCC_WARN_UNUSED_FUNCTION = YES;
+				GCC_WARN_UNUSED_VARIABLE = YES;
+				IPHONEOS_DEPLOYMENT_TARGET = 15.6;
+				LOCALIZATION_PREFERS_STRING_CATALOGS = YES;
+				MTL_ENABLE_DEBUG_INFO = ${debug ? "INCLUDE_SOURCE" : "NO"};
+				MTL_FAST_MATH = YES;${debug ? `
+				ONLY_ACTIVE_ARCH = YES;` : ""}
+				SDKROOT = iphoneos;${debug ? `
+				SWIFT_ACTIVE_COMPILATION_CONDITIONS = "DEBUG $(inherited)";
+				SWIFT_OPTIMIZATION_LEVEL = "-Onone";` : `
+				SWIFT_COMPILATION_MODE = wholemodule;
+				VALIDATE_PRODUCT = YES;`}`
+
+  return `// !$*UTF8*$!
+{
+	archiveVersion = 1;
+	classes = {
+	};
+	objectVersion = 77;
+	objects = {
+
+/* Begin PBXBuildFile section */
+		B73550812FEBAC710005B4CC /* LeCodesRuntime in Frameworks */ = {isa = PBXBuildFile; productRef = B73550802FEBAC710005B4CC /* LeCodesRuntime */; };
+/* End PBXBuildFile section */
+
+/* Begin PBXFileReference section */
+		B73550672FEBAC0F0005B4CC /* App.app */ = {isa = PBXFileReference; explicitFileType = wrapper.application; includeInIndex = 0; path = App.app; sourceTree = BUILT_PRODUCTS_DIR; };
+/* End PBXFileReference section */
+
+/* Begin PBXFileSystemSynchronizedBuildFileExceptionSet section */
+		B73550792FEBAC100005B4CC /* Exceptions for "App" folder in "App" target */ = {
+			isa = PBXFileSystemSynchronizedBuildFileExceptionSet;
+			membershipExceptions = (
+				App.entitlements,
+				Info.plist,
+			);
+			target = B73550662FEBAC0F0005B4CC /* App */;
+		};
+/* End PBXFileSystemSynchronizedBuildFileExceptionSet section */
+
+/* Begin PBXFileSystemSynchronizedRootGroup section */
+		B73550692FEBAC0F0005B4CC /* App */ = {
+			isa = PBXFileSystemSynchronizedRootGroup;
+			exceptions = (
+				B73550792FEBAC100005B4CC /* Exceptions for "App" folder in "App" target */,
+			);
+			path = App;
+			sourceTree = "<group>";
+		};
+/* End PBXFileSystemSynchronizedRootGroup section */
+
+/* Begin PBXFrameworksBuildPhase section */
+		B73550642FEBAC0F0005B4CC /* Frameworks */ = {
+			isa = PBXFrameworksBuildPhase;
+			buildActionMask = 2147483647;
+			files = (
+				B73550812FEBAC710005B4CC /* LeCodesRuntime in Frameworks */,
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+		};
+/* End PBXFrameworksBuildPhase section */
+
+/* Begin PBXGroup section */
+		B735505E2FEBAC0F0005B4CC = {
+			isa = PBXGroup;
+			children = (
+				B73550692FEBAC0F0005B4CC /* App */,
+				B73550682FEBAC0F0005B4CC /* Products */,
+			);
+			sourceTree = "<group>";
+		};
+		B73550682FEBAC0F0005B4CC /* Products */ = {
+			isa = PBXGroup;
+			children = (
+				B73550672FEBAC0F0005B4CC /* App.app */,
+			);
+			name = Products;
+			sourceTree = "<group>";
+		};
+/* End PBXGroup section */
+
+/* Begin PBXNativeTarget section */
+		B73550662FEBAC0F0005B4CC /* App */ = {
+			isa = PBXNativeTarget;
+			buildConfigurationList = B735507A2FEBAC100005B4CC /* Build configuration list for PBXNativeTarget "App" */;
+			buildPhases = (
+				B73550632FEBAC0F0005B4CC /* Sources */,
+				B73550642FEBAC0F0005B4CC /* Frameworks */,
+				B73550652FEBAC0F0005B4CC /* Resources */,
+			);
+			buildRules = (
+			);
+			dependencies = (
+			);
+			fileSystemSynchronizedGroups = (
+				B73550692FEBAC0F0005B4CC /* App */,
+			);
+			name = App;
+			packageProductDependencies = (
+				B73550802FEBAC710005B4CC /* LeCodesRuntime */,
+			);
+			productName = App;
+			productReference = B73550672FEBAC0F0005B4CC /* App.app */;
+			productType = "com.apple.product-type.application";
+		};
+/* End PBXNativeTarget section */
+
+/* Begin PBXProject section */
+		B735505F2FEBAC0F0005B4CC /* Project object */ = {
+			isa = PBXProject;
+			attributes = {
+				BuildIndependentTargetsInParallel = 1;
+				LastSwiftUpdateCheck = 2650;
+				LastUpgradeCheck = 2650;
+				TargetAttributes = {
+					B73550662FEBAC0F0005B4CC = {
+						CreatedOnToolsVersion = 26.5;
+					};
+				};
+			};
+			buildConfigurationList = B73550622FEBAC0F0005B4CC /* Build configuration list for PBXProject "App" */;
+			developmentRegion = en;
+			hasScannedForEncodings = 0;
+			knownRegions = (
+				en,
+				Base,
+			);
+			mainGroup = B735505E2FEBAC0F0005B4CC;
+			minimizedProjectReferenceProxies = 1;
+			packageReferences = (
+				B73550822FEBAC720005B4CC /* XCLocalSwiftPackageReference "LeCodesRuntime" */,
+			);
+			preferredProjectObjectVersion = 77;
+			productRefGroup = B73550682FEBAC0F0005B4CC /* Products */;
+			projectDirPath = "";
+			projectRoot = "";
+			targets = (
+				B73550662FEBAC0F0005B4CC /* App */,
+			);
+		};
+/* End PBXProject section */
+
+/* Begin PBXResourcesBuildPhase section */
+		B73550652FEBAC0F0005B4CC /* Resources */ = {
+			isa = PBXResourcesBuildPhase;
+			buildActionMask = 2147483647;
+			files = (
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+		};
+/* End PBXResourcesBuildPhase section */
+
+/* Begin PBXSourcesBuildPhase section */
+		B73550632FEBAC0F0005B4CC /* Sources */ = {
+			isa = PBXSourcesBuildPhase;
+			buildActionMask = 2147483647;
+			files = (
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+		};
+/* End PBXSourcesBuildPhase section */
+
+/* Begin XCBuildConfiguration section */
+		B735507B2FEBAC100005B4CC /* Debug */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {${target}
+			};
+			name = Debug;
+		};
+		B735507C2FEBAC100005B4CC /* Release */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {${target}
+			};
+			name = Release;
+		};
+		B735507D2FEBAC100005B4CC /* Debug */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {${project(true)}
+			};
+			name = Debug;
+		};
+		B735507E2FEBAC100005B4CC /* Release */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {${project(false)}
+			};
+			name = Release;
+		};
+/* End XCBuildConfiguration section */
+
+/* Begin XCConfigurationList section */
+		B73550622FEBAC0F0005B4CC /* Build configuration list for PBXProject "App" */ = {
+			isa = XCConfigurationList;
+			buildConfigurations = (
+				B735507D2FEBAC100005B4CC /* Debug */,
+				B735507E2FEBAC100005B4CC /* Release */,
+			);
+			defaultConfigurationIsVisible = 0;
+			defaultConfigurationName = Release;
+		};
+		B735507A2FEBAC100005B4CC /* Build configuration list for PBXNativeTarget "App" */ = {
+			isa = XCConfigurationList;
+			buildConfigurations = (
+				B735507B2FEBAC100005B4CC /* Debug */,
+				B735507C2FEBAC100005B4CC /* Release */,
+			);
+			defaultConfigurationIsVisible = 0;
+			defaultConfigurationName = Release;
+		};
+/* End XCConfigurationList section */
+
+/* Begin XCLocalSwiftPackageReference section */
+		B73550822FEBAC720005B4CC /* XCLocalSwiftPackageReference "LeCodesRuntime" */ = {
+			isa = XCLocalSwiftPackageReference;
+			relativePath = LeCodesRuntime;
+		};
+/* End XCLocalSwiftPackageReference section */
+
+/* Begin XCSwiftPackageProductDependency section */
+		B73550802FEBAC710005B4CC /* LeCodesRuntime */ = {
+			isa = XCSwiftPackageProductDependency;
+			productName = LeCodesRuntime;
+		};
+/* End XCSwiftPackageProductDependency section */
+	};
+	rootObject = B735505F2FEBAC0F0005B4CC /* Project object */;
+}
+`
+}
+
+export const SCHEME_XML = `<?xml version="1.0" encoding="UTF-8"?>
+<Scheme
+   LastUpgradeVersion = "2650"
+   version = "1.7">
+   <BuildAction
+      parallelizeBuildables = "YES"
+      buildImplicitDependencies = "YES">
+      <BuildActionEntries>
+         <BuildActionEntry
+            buildForTesting = "YES"
+            buildForRunning = "YES"
+            buildForProfiling = "YES"
+            buildForArchiving = "YES"
+            buildForAnalyzing = "YES">
+            <BuildableReference
+               BuildableIdentifier = "primary"
+               BlueprintIdentifier = "B73550662FEBAC0F0005B4CC"
+               BuildableName = "App.app"
+               BlueprintName = "App"
+               ReferencedContainer = "container:App.xcodeproj">
+            </BuildableReference>
+         </BuildActionEntry>
+      </BuildActionEntries>
+   </BuildAction>
+   <TestAction
+      buildConfiguration = "Debug"
+      selectedDebuggerIdentifier = "Xcode.DebuggerFoundation.Debugger.LLDB"
+      selectedLauncherIdentifier = "Xcode.DebuggerFoundation.Launcher.LLDB"
+      shouldUseLaunchSchemeArgsEnv = "YES">
+      <Testables>
+      </Testables>
+   </TestAction>
+   <LaunchAction
+      buildConfiguration = "Debug"
+      selectedDebuggerIdentifier = "Xcode.DebuggerFoundation.Debugger.LLDB"
+      selectedLauncherIdentifier = "Xcode.DebuggerFoundation.Launcher.LLDB"
+      launchStyle = "0"
+      useCustomWorkingDirectory = "NO"
+      ignoresPersistentStateOnLaunch = "NO"
+      debugDocumentVersioning = "YES"
+      debugServiceExtension = "internal"
+      allowLocationSimulation = "YES">
+      <BuildableProductRunnable
+         runnableDebuggingMode = "0">
+         <BuildableReference
+            BuildableIdentifier = "primary"
+            BlueprintIdentifier = "B73550662FEBAC0F0005B4CC"
+            BuildableName = "App.app"
+            BlueprintName = "App"
+            ReferencedContainer = "container:App.xcodeproj">
+         </BuildableReference>
+      </BuildableProductRunnable>
+   </LaunchAction>
+   <ProfileAction
+      buildConfiguration = "Release"
+      shouldUseLaunchSchemeArgsEnv = "YES"
+      savedToolIdentifier = ""
+      useCustomWorkingDirectory = "NO"
+      debugDocumentVersioning = "YES">
+      <BuildableProductRunnable
+         runnableDebuggingMode = "0">
+         <BuildableReference
+            BuildableIdentifier = "primary"
+            BlueprintIdentifier = "B73550662FEBAC0F0005B4CC"
+            BuildableName = "App.app"
+            BlueprintName = "App"
+            ReferencedContainer = "container:App.xcodeproj">
+         </BuildableReference>
+      </BuildableProductRunnable>
+   </ProfileAction>
+   <AnalyzeAction
+      buildConfiguration = "Debug">
+   </AnalyzeAction>
+   <ArchiveAction
+      buildConfiguration = "Release"
+      revealArchiveInOrganizer = "YES">
+   </ArchiveAction>
+</Scheme>
+`
+
+export const APP_DELEGATE = `//
+//  AppDelegate.swift
+//  Generated by lecodes app init — yours to edit.
+//
+
+import UIKit
+import LeCodesRuntime
+
+@main
+class AppDelegate: UIResponder, UIApplicationDelegate {
+
+    func application(_ application: UIApplication, didFinishLaunchingWithOptions launchOptions: [UIApplication.LaunchOptionsKey: Any]?) -> Bool {
+        // Plugin hook surface: installs the notification-center delegate (must be in
+        // place before the app finishes launching) and buffers launch-time events until
+        // a plugin that needs them registers. Inert if no installed plugin consumes it.
+        LeCodesAppHooks.install()
+        return true
+    }
+
+    // APNs token callbacks → the plugin hook surface (consumed by the push plugin).
+    func application(_ application: UIApplication,
+                     didRegisterForRemoteNotificationsWithDeviceToken deviceToken: Data) {
+        LeCodesAppHooks.remoteNotificationsToken(deviceToken)
+    }
+
+    func application(_ application: UIApplication,
+                     didFailToRegisterForRemoteNotificationsWithError error: Error) {
+        LeCodesAppHooks.remoteNotificationsError(error)
+    }
+
+    // MARK: UISceneSession Lifecycle
+
+    func application(_ application: UIApplication, configurationForConnecting connectingSceneSession: UISceneSession, options: UIScene.ConnectionOptions) -> UISceneConfiguration {
+        return UISceneConfiguration(name: "Default Configuration", sessionRole: connectingSceneSession.role)
+    }
+}
+`
+
+export const SCENE_DELEGATE = `//
+//  SceneDelegate.swift
+//  Generated by lecodes app init — yours to edit.
+//
+
+import UIKit
+import LeCodesRuntime
+
+class SceneDelegate: UIResponder, UIWindowSceneDelegate {
+
+    var window: UIWindow?
+
+    func scene(
+        _ scene: UIScene,
+        willConnectTo session: UISceneSession,
+        options connectionOptions: UIScene.ConnectionOptions
+    ) {
+        guard let windowScene = (scene as? UIWindowScene) else { return }
+
+        // Cold-started by a notification tap: buffered by the hooks; a plugin that
+        // consumes it (push) drains the buffer when it registers — before the JS world
+        // boots, because makeKeyAndVisible() runs registerBundledPlugins via viewDidLoad.
+        if let response = connectionOptions.notificationResponse {
+            LeCodesAppHooks.coldStartNotification(response)
+        }
+
+        let window = UIWindow(windowScene: windowScene)
+        window.rootViewController = ViewController()
+        self.window = window
+        window.makeKeyAndVisible()
+    }
+}
+`
+
+export const VIEW_CONTROLLER = `//
+//  ViewController.swift
+//  Generated by lecodes app init — yours to edit.
+//
+//  Runs the bundled app.js (produced by \`lecodes app sync\`) offline: everything the
+//  script needs is provided by the SDK core (_creatorUI / _creatorUtils / console)
+//  plus the plugins registered below via LeCodesRuntime.
+//
+
+import UIKit
+import LeCodesRuntime
+
+class ViewController: LeCodesViewController {
+
+    override func viewDidLoad() {
+        super.viewDidLoad()
+
+        let lang = Locale.preferredLanguages.first.map { String($0.prefix(2)) } ?? "en"
+        engine.setLanguage(lang)
+
+        // \`// preload:\` assets (images, fonts) resolve out of the app bundle.
+        engine.setFetchLocal { path in
+            let ns = path as NSString
+            let ext = ns.pathExtension
+            let name = ns.deletingPathExtension
+            guard let url = Bundle.main.url(forResource: name, withExtension: ext.isEmpty ? nil : ext) else {
+                return nil
+            }
+            return try? Data(contentsOf: url)
+        }
+
+        registerBundledPlugins(in: engine)
+
+        // OTA (native, no JS involved): start the check FIRST — even a bundle that crashes
+        // on boot can never block its own fix — then run the newest local bundle (a
+        // downloaded update, or the embedded app.js). New code applies on the next launch.
+        // Configured via app.json "update" (→ Info.plist LeCodesUpdateURL); offline: no-op.
+        LeCodesUpdater.checkForUpdate()
+        guard let code = LeCodesUpdater.activeBundle() else {
+            print("LeCodes: bundled app.js is missing — run \`lecodes app sync\`")
+            return
+        }
+        engine.run(code)
+    }
+}
+`
+
+/** A JSON value as plist XML — plugin manifests carry plist-typed JSON (push's
+ *  `{"aps-environment": "development"}`, associated-domains arrays, …). */
+const plistValue = (value: unknown, indent: string): string => {
+  if (typeof value === "string") return `<string>${value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;")}</string>`
+  if (typeof value === "boolean") return value ? "<true/>" : "<false/>"
+  if (typeof value === "number") return Number.isInteger(value) ? `<integer>${value}</integer>` : `<real>${value}</real>`
+  if (Array.isArray(value)) {
+    if (value.length === 0) return "<array/>"
+    return `<array>\n${value.map(v => `${indent}\t${plistValue(v, indent + "\t")}`).join("\n")}\n${indent}</array>`
+  }
+  if (value && typeof value === "object") {
+    const entries = Object.entries(value as Record<string, unknown>)
+    if (entries.length === 0) return "<dict/>"
+    return `<dict>\n${entries.map(([k, v]) => `${indent}\t<key>${k}</key>\n${indent}\t${plistValue(v, indent + "\t")}`).join("\n")}\n${indent}</dict>`
+  }
+  return "<string></string>"
+}
+
+/** App/App.entitlements — CLI-owned: the capabilities the installed plugins' manifests declare
+ *  (push's aps-environment, …), sorted for stable diffs. Referenced by CODE_SIGN_ENTITLEMENTS
+ *  in the pbxproj; Xcode's automatic signing enables the matching App ID capabilities from it
+ *  (and archive/export rewrites values like aps-environment to their distribution form). */
+export const entitlementsTemplate = (entries: Record<string, unknown>): string => {
+  const keys = Object.keys(entries).sort()
+  const body = keys.length === 0 ? "" :
+    keys.map(k => `	<key>${k}</key>\n	${plistValue(entries[k], "\t")}`).join("\n") + "\n"
+  return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+${body}</dict>
+</plist>
+`
+}
+
+/** Info.plist — CLI-owned: the scene manifest plus usage-description keys merged from the
+ *  installed plugins' manifests (sorted for stable diffs), plus the native OTA source
+ *  (app.json "update" → LeCodesUpdater reads this key at launch). */
+export const infoPlistTemplate = (pluginKeys: Record<string, string>, updateUrl?: string): string => {
+  const xml = (s: string) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;")
+  const keys = Object.keys(pluginKeys).sort()
+  const pluginBlock = keys.length === 0 ? "" : `
+	<!-- lecodes:plugins — merged from installed plugin manifests by \`lecodes app sync\` -->
+${keys.map(k => `	<key>${k}</key>\n	<string>${pluginKeys[k]}</string>`).join("\n")}`
+  const updateBlock = !updateUrl ? "" : `
+	<!-- lecodes:update — native OTA source (app.json "update"); LeCodesUpdater checks it at launch -->
+	<key>LeCodesUpdateURL</key>
+	<string>${xml(updateUrl)}</string>`
+  return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<!-- Standard-encryption-only (HTTPS/TLS): declares export-compliance exemption
+	     so App Store Connect skips the "Missing Compliance" prompt on every build.
+	     Flip to <true/> only if the app adds its own non-exempt cryptography. -->
+	<key>ITSAppUsesNonExemptEncryption</key>
+	<false/>
+	<key>UIApplicationSceneManifest</key>
+	<dict>
+		<key>UIApplicationSupportsMultipleScenes</key>
+		<false/>
+		<key>UISceneConfigurations</key>
+		<dict>
+			<key>UIWindowSceneSessionRoleApplication</key>
+			<array>
+				<dict>
+					<key>UISceneConfigurationName</key>
+					<string>Default Configuration</string>
+					<key>UISceneDelegateClassName</key>
+					<string>$(PRODUCT_MODULE_NAME).SceneDelegate</string>
+				</dict>
+			</array>
+		</dict>
+	</dict>${pluginBlock}${updateBlock}
+</dict>
+</plist>
+`
+}
+
+export const LAUNCH_STORYBOARD = `<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<document type="com.apple.InterfaceBuilder3.CocoaTouch.Storyboard.XIB" version="3.0" toolsVersion="13122.16" targetRuntime="iOS.CocoaTouch" propertyAccessControl="none" useAutolayout="YES" launchScreen="YES" useTraitCollections="YES" useSafeAreas="YES" colorMatched="YES" initialViewController="01J-lp-oVM">
+    <dependencies>
+        <plugIn identifier="com.apple.InterfaceBuilder.IBCocoaTouchPlugin" version="13104.12"/>
+        <capability name="Safe area layout guides" minToolsVersion="9.0"/>
+        <capability name="documents saved in the Xcode 8 format" minToolsVersion="8.0"/>
+    </dependencies>
+    <scenes>
+        <!--View Controller-->
+        <scene sceneID="EHf-IW-A2E">
+            <objects>
+                <viewController id="01J-lp-oVM" sceneMemberID="viewController">
+                    <view key="view" contentMode="scaleToFill" id="Ze5-6b-2t3">
+                        <rect key="frame" x="0.0" y="0.0" width="375" height="667"/>
+                        <autoresizingMask key="autoresizingMask" widthSizable="YES" heightSizable="YES"/>
+                        <color key="backgroundColor" xcode11CocoaTouchSystemColor="systemBackgroundColor" cocoaTouchSystemColor="whiteColor"/>
+                        <viewLayoutGuide key="safeArea" id="6Tk-OE-BBY"/>
+                    </view>
+                </viewController>
+                <placeholder placeholderIdentifier="IBFirstResponder" id="iYj-Kq-Ea1" userLabel="First Responder" sceneMemberID="firstResponder"/>
+            </objects>
+            <point key="canvasLocation" x="53" y="375"/>
+        </scene>
+    </scenes>
+</document>
+`
+
+export const ASSETS_ROOT_JSON = `{
+  "info" : {
+    "author" : "xcode",
+    "version" : 1
+  }
+}
+`
+
+export const ACCENT_COLOR_JSON = `{
+  "colors" : [
+    {
+      "idiom" : "universal"
+    }
+  ],
+  "info" : {
+    "author" : "xcode",
+    "version" : 1
+  }
+}
+`
+
+export const APP_ICON_JSON = `{
+  "images" : [
+    {
+      "idiom" : "universal",
+      "platform" : "ios",
+      "size" : "1024x1024"
+    },
+    {
+      "appearances" : [
+        {
+          "appearance" : "luminosity",
+          "value" : "dark"
+        }
+      ],
+      "idiom" : "universal",
+      "platform" : "ios",
+      "size" : "1024x1024"
+    },
+    {
+      "appearances" : [
+        {
+          "appearance" : "luminosity",
+          "value" : "tinted"
+        }
+      ],
+      "idiom" : "universal",
+      "platform" : "ios",
+      "size" : "1024x1024"
+    }
+  ],
+  "info" : {
+    "author" : "xcode",
+    "version" : 1
+  }
+}
+`
+
+export interface RuntimePlugin {
+  /** Swift module / target name (manifest ios.module), e.g. "LeCodesCamera". */
+  module: string
+  /** Type exposing `static func register(in: LeCodesEngine)` (manifest ios.register). */
+  register: string
+  /** Plugin id, for the generated comments. */
+  id: string
+  /** Swift packages the target links (manifest ios.packages). */
+  packages?: IosPackage[]
+}
+
+/** The SDK binary products (all vend the same `LeCodesSDK` module): core = UI only,
+ *  2d = + Creator2D, 3d = + CreatorGL/filament with Jolt physics (AR included), full = everything. */
+export type SdkVariant = "core" | "2d" | "3d" | "full"
+
+/** LeCodesRuntime/Package.swift — the CLI-owned dependency graph: the SDK variant + one
+ *  vendored target per installed plugin.
+ *
+ *  `sdkVersion` is always an exact release and is pinned with `.exact(…)`: the CLI also
+ *  downloads that version's LeCodesSDKResources.bundle (filament assets) into App/Resources/,
+ *  so letting SwiftPM drift to a newer release on its own would pair mismatched halves of one
+ *  SDK. Moving the version is the CLI's job — `lecodes app update` (or app.json ios.sdk). */
+export const runtimePackageTemplate = (sdkVersion: string, variant: SdkVariant, plugins: RuntimePlugin[]): string => {
+  const product = `LeCodesSDK-${variant}`
+  // Third-party Swift packages (manifest ios.packages), one `.package(…)` per url. Two plugins
+  // naming the same url must agree on the pin — SwiftPM has one resolution per package.
+  const packages = new Map<string, IosPackage>()
+  for (const p of plugins) {
+    for (const pkg of p.packages ?? []) {
+      const prior = packages.get(pkg.url)
+      if (prior && (prior.exact !== pkg.exact || prior.from !== pkg.from)) {
+        throw new Error(`Plugin "${p.id}" pins ${pkg.url} at ${pkg.exact ?? `from ${pkg.from}`} but another plugin pins ${prior.exact ?? `from ${prior.from}`} — the shell can link one version.`)
+      }
+      packages.set(pkg.url, pkg)
+    }
+  }
+  const packageDecls = [...packages.values()].map(pkg =>
+    `\n        .package(url: "${pkg.url}", ${pkg.exact ? `exact: "${pkg.exact}"` : `from: "${pkg.from}"`}),`).join("")
+  const pluginTargets = plugins.map(p => {
+    const deps = [
+      `.product(name: "${product}", package: "lecodes-ios-sdk")`,
+      ...(p.packages ?? []).flatMap(pkg => pkg.products.map(name => `.product(name: "${name}", package: "${swiftPackageName(pkg.url)}")`)),
+    ]
+    return `
+        // plugin: ${p.id} (vendored — see plugins.lock.json)
+        .target(
+            name: "${p.module}",
+            dependencies: [${deps.join(", ")}],
+            path: "Sources/${p.module}"
+        ),`
+  }).join("")
+  const runtimeDeps = [`.product(name: "${product}", package: "lecodes-ios-sdk")`, ...plugins.map(p => `"${p.module}"`)]
+  return `// swift-tools-version:5.9
+//
+// GENERATED by lecodes — regenerated by \`lecodes app sync\`; do not edit.
+// Owns the app's native dependency graph: the LeCodesSDK variant (auto-picked from what
+// the compiled bundle uses, or forced via app.json ios.variant), the exact SDK release
+// (app.json ios.sdk — move it with \`lecodes app update\`) and one vendored target per
+// installed plugin (see plugins.lock.json).
+
+import PackageDescription
+
+let package = Package(
+    name: "LeCodesRuntime",
+    platforms: [.iOS(.v15)],
+    products: [
+        .library(name: "LeCodesRuntime", targets: ["LeCodesRuntime"]),
+    ],
+    dependencies: [
+        .package(url: "https://github.com/letary/lecodes-ios-sdk.git", exact: "${sdkVersion}"),${packageDecls}
+    ],
+    targets: [
+        .target(
+            name: "LeCodesRuntime",
+            dependencies: [
+                ${runtimeDeps.join(",\n                ")},
+            ],
+            path: "Sources/LeCodesRuntime"
+        ),${pluginTargets}
+    ]
+)
+`
+}
+
+/** Sources/LeCodesRuntime/LeCodesRuntime.swift — SDK re-export + plugin registration +
+ *  (server-backed projects, SDK ≥ 1.6.0) the baked project identity. Baking it here — in a
+ *  CLI-owned file that runs BEFORE \`engine.run(code)\` — means every shell picks identity up
+ *  from a plain \`lecodes app sync\`, with no edits to the user-owned ViewController. */
+export const runtimeSwiftTemplate = (plugins: RuntimePlugin[], projectUuid?: string): string => {
+  const imports = plugins.map(p => `import ${p.module}\n`).join("")
+  const identity = !projectUuid ? "" : `    // World identity: this shell IS the project — the engine attributes the boot world so
+    // identity-gated services (push registration) see the app's uuid from its first
+    // synchronous statement. Baked from .lecodes/manifest.json by \`lecodes app sync\`.
+    engine.bootProjectUuid = "${projectUuid}"
+`
+  const calls = plugins.map(p => `    ${p.register}.register(in: engine)\n`).join("")
+  const body = identity + calls
+  return `//
+//  LeCodesRuntime.swift
+//  GENERATED by lecodes — regenerated by \`lecodes app sync\`; do not edit.
+//
+//  Re-exports the SDK (so app code needs only \`import LeCodesRuntime\`) and registers
+//  every plugin installed in app.json.
+//
+
+@_exported import LeCodesSDK
+${imports}
+public func registerBundledPlugins(in engine: LeCodesEngine) {
+${body === "" ? "\n" : body}}
+`
+}
+
+/** ios/README.md — orientation for whoever opens the shell: what this folder is, who owns
+ *  which files, and the daily workflow. CLI-owned: init writes it, sync regenerates it. */
+export const IOS_README = `# ios/ — native Xcode shell
+
+Generated by \`lecodes app init ios\` for the LeCodes project one folder up. The app runs the
+compiled bundle in \`App/Resources/app.js\` — fully offline, nothing fetched at launch. This
+folder is ignored by the platform (\`ios/\` in \`.lecodesignore\`) and is never pushed to LeCodes.
+
+## Daily workflow
+
+Edit the app's code at the project root (\`main.ts\` …), then:
+
+\`\`\`
+lecodes app sync     # recompile app.js + assets into the shell, vendor plugins
+lecodes app open     # open App.xcodeproj in Xcode — build & run from there
+\`\`\`
+
+\`lecodes app doctor\` preflights builds; \`lecodes app build ios\` archives and exports an
+.ipa; \`lecodes app upload ios\` sends the archive to App Store Connect.
+
+## SDK version
+
+\`../app.json\` \`ios.sdk\` is the exact \`lecodes-ios-sdk\` release this shell links —
+\`lecodes app init\` pinned the newest one at the time, so builds stay reproducible.
+
+\`\`\`
+lecodes app update           # → newest SDK release + newest plugin tags, then sync
+lecodes app update --check   # what's available, writes nothing
+lecodes app update --sdk 1.3.0
+\`\`\`
+
+Set \`"sdk": "latest"\` instead of a version to re-resolve on every sync (needs network;
+offline it keeps whatever the shell already links). The pin is exact rather than a range
+because the CLI also downloads that release's filament resources bundle into
+\`App/Resources/\` — the two halves of one SDK must not drift apart.
+
+## Who owns what
+
+Yours — \`lecodes app sync\` never touches these:
+
+- \`App/*.swift\` (AppDelegate, SceneDelegate, ViewController) — customize freely, add files.
+  App-local native code goes here too: add a Swift file that calls
+  \`engine.registerCallback\` / \`registerService\`, and invoke it from ViewController.
+- \`App/Assets.xcassets/\` — the app icon. Easy path: set \`app.json\` \`"icon"\` to a square
+  ≥1024px image and every sync renders AppIcon.png from it (flattened over \`"iconBackground"\`,
+  default white — App Store icons must be opaque). Or leave the key unset and drop a
+  1024×1024 PNG into AppIcon.appiconset/ yourself — sync never touches it then.
+- \`App/Base.lproj/LaunchScreen.storyboard\`
+
+CLI-owned — regenerated on every sync, hand edits are overwritten:
+
+- \`App/Resources/\` — the compiled app.js + every asset it references (fonts included), so
+  the app runs fully offline. Globs in app.json \`"resources": {"remote": [...]}\` opt heavy
+  assets (videos, big models) back into streaming from the server instead.
+- \`App/Info.plist\` — template + the installed plugins' usage keys
+- \`App/App.entitlements\` — the capabilities the installed plugins declare (e.g. push)
+- \`LeCodesRuntime/\` — local Swift package: the LeCodesSDK dependency, vendored plugin
+  sources (Sources/<Module>/), and the registerBundledPlugins entry point
+- the version values inside \`App.xcodeproj/project.pbxproj\` (from app.json)
+- this README
+
+## SDK variant
+
+Sync links the smallest SDK product that covers what the compiled bundle actually uses:
+\`core\` (UI only), \`2d\` (+ 2D engine with physics), \`3d\` (+ 3D/AR engine with physics,
+~17 MB heavier), or \`full\` (everything). Adding your first 3D scene or 2D game to the
+project switches it automatically on the next sync; set \`ios.variant\` in \`../app.json\`
+to pin one instead.
+
+## Over-the-air updates
+
+With \`"update": true\` in \`../app.json\` (server-backed projects; or
+\`"update": {"url": "https://…/app.js"}\` for any static hosting), the app checks that URL
+at launch — natively, before any JS runs, so a broken bundle can never block its own fix.
+Unchanged code costs a ~0-byte 304; new code downloads in the background and runs on the
+NEXT launch. Offline it's a silent no-op — the app always launches from a local bundle.
+An App Store update always beats a cached OTA bundle. JS only: adding/removing native
+plugins still needs a store release.
+
+Shipping an update is just \`lecodes push --publish\` — no rebuild, no store review:
+running apps download the new code on their next launch and run it on the launch after.
+
+Shells generated before OTA support have a \`ViewController.swift\` that reads app.js from
+\`Bundle.main\` directly, so downloaded updates would never run — and since \`App/*.swift\`
+is yours, sync won't rewrite it (\`lecodes app doctor\` flags this). Replace the
+\`Bundle.main\` load with:
+
+\`\`\`swift
+LeCodesUpdater.checkForUpdate()
+guard let code = LeCodesUpdater.activeBundle() else {
+    print("LeCodes: bundled app.js is missing — run \`lecodes app sync\`")
+    return
+}
+engine.run(code)
+\`\`\`
+
+## Config
+
+Identity lives in \`../app.json\` (name, version, plugins, ios.bundleId / teamId / variant /
+buildNumber) — edit it there, then re-run \`lecodes app sync\`. Plugins are managed with
+\`lecodes app plugin add <id | github:owner/repo[@tag]>\` and pinned in \`../plugins.lock.json\`.
+`