umpordez 1.3.2 → 1.5.0

package/template/mobile/{{PROJECT_SLUG}}/app.json

@@ -7,24 +7,11 @@
         "orientation": "portrait",
         "icon": "./assets/icon.png",
         "userInterfaceStyle": "automatic",
-        "splash": {
-            "image": "./assets/splash-icon.png",
-            "resizeMode": "contain",
-            "backgroundColor": "{{PRIMARY_COLOR}}"
-        },
         "ios": {
             "supportsTablet": false,
-            "bundleIdentifier": "{{IOS_BUNDLE_ID}}",
-            "usesAppleSignIn": true,
-            "entitlements": {
-                "com.apple.developer.healthkit": true
-            },
+            "bundleIdentifier": "{{IOS_BUNDLE_ID}}",{{IOS_APPLE_SIGNIN_JSON}}
             "infoPlist": {
-                "ITSAppUsesNonExemptEncryption": false,
-                "NSHealthShareUsageDescription":
-                    "{{PROJECT_NAME}} reads activity data to keep your fitness summaries accurate.",
-                "NSHealthUpdateUsageDescription":
-                    "{{PROJECT_NAME}} writes session data so it shows up in Apple Health alongside your other apps."
+                "ITSAppUsesNonExemptEncryption": false
             }
         },
         "android": {
@@ -35,14 +22,22 @@
                 "backgroundColor": "{{PRIMARY_COLOR}}"
             },
             "permissions": [
-                "android.permission.INTERNET",
-                "com.android.vending.BILLING"
+                "android.permission.INTERNET"{{IAP_BILLING_PERMISSION_JSON}}
             ]
         },
         "web": {
             "favicon": "./assets/favicon.png"
         },
         "plugins": [
+            [
+                "expo-splash-screen",
+                {
+                    "image": "./assets/splash-icon.png",
+                    "imageWidth": 200,
+                    "resizeMode": "contain",
+                    "backgroundColor": "{{PRIMARY_COLOR}}"
+                }
+            ],
             [
                 "expo-build-properties",
                 {
@@ -54,23 +49,8 @@
                     }
                 }
             ],
-            "expo-web-browser",
-            "expo-apple-authentication",
-            "expo-sqlite",
-            "react-native-iap",
-            [
-                "react-native-health",
-                {
-                    "healthSharePermission":
-                        "{{PROJECT_NAME}} reads activity data to keep your fitness summaries accurate.",
-                    "healthUpdatePermission":
-                        "{{PROJECT_NAME}} writes session data so it shows up in Apple Health alongside your other apps."
-                }
-            ],
-            [
-                "./plugins/withAndroidHealthConnect",
-                { "permissions": ["READ_STEPS", "WRITE_EXERCISE"] }
-            ]
+            "expo-web-browser",{{APPLE_AUTH_PLUGIN_JSON}}
+            "expo-sqlite"{{IAP_PLUGIN_JSON}}
         ],
         "extra": {
             "eas": {

package/template/mobile/{{PROJECT_SLUG}}/eslint.config.js

@@ -11,7 +11,18 @@ export default [
         rules: {
             "@stylistic/indent": ["error", 4],
             "@stylistic/semi": ["error", "always"],
-            "@stylistic/max-len": ["error", { "code": 80 }],
+            // ignorePattern: SVG path data (brand icons) can't be
+            // wrapped without corrupting the artwork.
+            "@stylistic/max-len": ["error", {
+                "code": 80,
+                "ignorePattern": "\\sd=\""
+            }],
+            // Underscore prefix = intentionally unused (e.g. a screen
+            // that takes navigation props but doesn't read them yet).
+            "@typescript-eslint/no-unused-vars": ["error", {
+                "argsIgnorePattern": "^_",
+                "varsIgnorePattern": "^_"
+            }],
             "curly": ["error", "all"]
         }
     }

package/template/mobile/{{PROJECT_SLUG}}/native/README.md

@@ -89,9 +89,9 @@ these are auto-installed** — copy out what you need:
   `scripts/prebuild.sh` refuses `--clean`. To genuinely reset, move
   customizations into config plugins under `./plugins/` first.
 
-- **NitroModules + Expo Go = crash on import.** Anything using nitro
-  (e.g. react-native-iap v15) needs to be lazy-loaded with
-  `try/require` so Expo Go doesn't blow up. See
+- **Native modules + Expo Go = crash on import.** Anything whose
+  native side isn't in Expo Go (e.g. expo-iap) needs to be
+  lazy-loaded with `try/require` so Expo Go doesn't blow up. See
   `src/services/iap/index.ts` for the pattern.
 
 - **iOS HealthKit needs an entitlement.** It's wired in `app.json`

package/template/mobile/{{PROJECT_SLUG}}/package.json

@@ -12,49 +12,49 @@
         "lint": "eslint src --ext .ts,.tsx",
         "typecheck": "tsc --noEmit"
     },
+    "expo": {
+        "install": {
+            "exclude": ["typescript"]
+        }
+    },
     "dependencies": {
         "@noble/hashes": "^2.2.0",
-        "@react-native-async-storage/async-storage": "^2.2.0",
+        "@react-native-async-storage/async-storage": "2.2.0",
         "@react-navigation/bottom-tabs": "^7.7.3",
         "@react-navigation/native": "^7.1.19",
         "@react-navigation/native-stack": "^7.6.2",
-        "expo": "~57.0.2",
+        "expo": "~57.0.4",
         "expo-apple-authentication": "~57.0.0",
-        "expo-auth-session": "~7.0.10",
+        "expo-auth-session": "~57.0.2",
         "expo-build-properties": "~57.0.3",
         "expo-constants": "~57.0.3",
-        "expo-file-system": "~57.0.0",
-        "expo-linking": "~57.0.1",
+        "expo-file-system": "~57.0.0",{{IAP_DEP_JSON}}
+        "expo-linking": "~57.0.2",
         "expo-localization": "~57.0.0",
-        "expo-share-intent": "^8.0.0",
         "expo-splash-screen": "~57.0.2",
         "expo-sqlite": "~57.0.0",
         "expo-status-bar": "~57.0.0",
         "expo-system-ui": "~57.0.0",
         "expo-web-browser": "~57.0.0",
         "i18next": "^23.16.5",
-        "lucide-react-native": "^1.8.0",
-        "react": "19.1.0",
-        "react-native": "0.83.10",
+        "lucide-react-native": "^1.24.0",
+        "react": "19.2.3",
+        "react-native": "0.86.0",
         "react-i18next": "^15.1.1",
-        "react-native-gesture-handler": "~3.0.2",
-        "react-native-health": "^1.19.0",
-        "react-native-health-connect": "^3.5.0",
-        "react-native-iap": "^15.2.0",
-        "react-native-nitro-modules": "^0.35.4",
-        "react-native-reanimated": "~4.5.1",
-        "react-native-safe-area-context": "^5.8.0",
-        "react-native-screens": "~4.25.2",
-        "react-native-svg": "15.12.1",
+        "react-native-gesture-handler": "~2.32.0",
+        "react-native-reanimated": "4.5.0",
+        "react-native-safe-area-context": "~5.7.0",
+        "react-native-screens": "4.25.2",
+        "react-native-svg": "15.15.4",
         "react-native-toast-message": "^2.3.3",
-        "react-native-worklets": "~0.10.1"
+        "react-native-worklets": "0.10.0"
     },
     "devDependencies": {
         "@stylistic/eslint-plugin": "^2.13.0",
-        "@types/react": "~19.1.0",
-        "babel-preset-expo": "~57.0.1",
+        "@types/react": "~19.2.2",
+        "babel-preset-expo": "~57.0.2",
         "eslint": "^9.20.1",
-        "typescript": "~5.7.0",
+        "typescript": "~5.9.3",
         "typescript-eslint": "^8.24.0"
     }
 }

package/template/mobile/{{PROJECT_SLUG}}/src/components/AnimatedSplash.tsx

@@ -25,6 +25,10 @@ const { width, height } = Dimensions.get('window');
 const BG = DARK.bg;
 const GLOW_COLOR = DARK.primary;
 
+// Static asset — require() is the RN idiom for bundled images.
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const SPLASH_ICON = require('../../assets/splash-icon.png');
+
 // Glow + ring sit at screen-centre because our generated splash-icon
 // is a trimmed glyph composited onto a transparent square canvas (see
 // icons.mjs renderFromScratch — splash mode). With resizeMode:contain
@@ -177,7 +181,7 @@ export default function AnimatedSplash({ onDone }: Props) {
             />
 
             <Animated.Image
-                source={require('../../assets/splash-icon.png')}
+                source={SPLASH_ICON}
                 style={[
                     s.splash,
                     { opacity: logoOp, transform: [{ scale: logoSc }] }
@@ -193,7 +197,11 @@ const RING_SIZE = width * 0.58;
 
 const s = StyleSheet.create({
     root: {
-        ...StyleSheet.absoluteFillObject,
+        position: 'absolute',
+        top: 0,
+        left: 0,
+        right: 0,
+        bottom: 0,
         backgroundColor: BG,
         alignItems: 'center',
         justifyContent: 'center',

package/template/mobile/{{PROJECT_SLUG}}/src/components/PremiumGate.tsx

@@ -7,6 +7,7 @@ import {
 } from 'react-native';
 import { Lock } from 'lucide-react-native';
 import { useTranslation } from 'react-i18next';
+import config from '../config';
 import { useAuth } from '../contexts/AuthContext';
 import { useTheme } from '../contexts/ThemeContext';
 
@@ -39,7 +40,9 @@ export default function PremiumGate({
     const finalDescription =
         description ?? t('premiumGate.defaultDescription');
 
-    if (user?.is_premium) {
+    // Projects scaffolded without in-app purchases have nothing to
+    // sell — every feature renders unlocked.
+    if (!config.iap || user?.is_premium) {
         return <>{children}</>;
     }
 

package/template/mobile/{{PROJECT_SLUG}}/src/config.ts

@@ -47,6 +47,24 @@ const GOOGLE_IOS_CLIENT_ID = 'TODO_GOOGLE_IOS_CLIENT_ID';
 // appears. Set at scaffold time via `umpordez create`.
 export const SPLASH_ANIMATED = {{SPLASH_ANIMATED}};
 
+// Sign-in providers, chosen at scaffold time via `umpordez create`.
+// Email+password always ships; these gate the extra buttons on
+// AuthLanding. Flipping appleAuth back on also requires restoring
+// `usesAppleSignIn` + the `expo-apple-authentication` plugin in
+// app.json (the scaffold strips them when Apple is disabled so iOS
+// builds don't demand the Sign in with Apple capability).
+const GOOGLE_AUTH_ENABLED = {{AUTH_GOOGLE_ENABLED}};
+const APPLE_AUTH_ENABLED = {{AUTH_APPLE_ENABLED}};
+
+// In-app purchases, chosen at scaffold time via `umpordez create`.
+// When disabled the expo-iap dependency, config plugin and Android
+// BILLING permission were stripped from the scaffold — PremiumGate
+// renders its children unlocked and the iap service no-ops. To turn
+// IAP on later: `npx expo install expo-iap`, add "expo-iap" to
+// app.json plugins, re-add com.android.vending.BILLING, restore the
+// try/require in src/services/iap/index.ts and flip this to true.
+const IAP_ENABLED = {{IAP_ENABLED}};
+
 if (__DEV__) {
     console.log(
         `[config] API: ${baseApiUrl} | prod=${isProdBuild} `
@@ -62,5 +80,8 @@ export default {
     version: APP_VERSION,
     googleClientId: GOOGLE_CLIENT_ID,
     googleIosClientId: GOOGLE_IOS_CLIENT_ID,
+    googleAuth: GOOGLE_AUTH_ENABLED,
+    appleAuth: APPLE_AUTH_ENABLED,
+    iap: IAP_ENABLED,
     scheme: '{{MOBILE_SCHEME}}'
 };

package/template/mobile/{{PROJECT_SLUG}}/src/pages/auth/AuthLanding.tsx

@@ -47,7 +47,7 @@ export default function AuthLandingScreen({ navigation }: Props) {
             })
         ]).start();
 
-        if (Platform.OS === 'ios') {
+        if (Platform.OS === 'ios' && config.appleAuth) {
             AppleAuthentication.isAvailableAsync()
                 .then(setAppleAvailable)
                 .catch(() => setAppleAvailable(false));
@@ -279,58 +279,63 @@ export default function AuthLandingScreen({ navigation }: Props) {
                     </TouchableOpacity>
                 )}
 
-                <TouchableOpacity
-                    style={[
-                        s.googleBtn,
-                        {
-                            backgroundColor: colors.card,
-                            borderColor: colors.border
-                        },
-                        busy && s.btnDisabled
-                    ]}
-                    onPress={handleGoogle}
-                    activeOpacity={0.88}
-                    disabled={busy}
-                >
-                    {provider === 'google' ? (
-                        <ActivityIndicator color={colors.text} />
-                    ) : (
-                        <>
-                            <GoogleIcon />
-                            <Text
-                                style={[
-                                    s.googleTxt,
-                                    { color: colors.text }
-                                ]}
-                            >
-                                {t('auth.landing.google')}
-                            </Text>
-                        </>
-                    )}
-                </TouchableOpacity>
-
-                <View style={s.divRow}>
-                    <View
-                        style={[
-                            s.divLine,
-                            { backgroundColor: colors.border }
-                        ]}
-                    />
-                    <Text
+                {config.googleAuth && (
+                    <TouchableOpacity
                         style={[
-                            s.divLabel,
-                            { color: colors.textMuted }
+                            s.googleBtn,
+                            {
+                                backgroundColor: colors.card,
+                                borderColor: colors.border
+                            },
+                            busy && s.btnDisabled
                         ]}
+                        onPress={handleGoogle}
+                        activeOpacity={0.88}
+                        disabled={busy}
                     >
-                        {t('auth.landing.divider')}
-                    </Text>
-                    <View
-                        style={[
-                            s.divLine,
-                            { backgroundColor: colors.border }
-                        ]}
-                    />
-                </View>
+                        {provider === 'google' ? (
+                            <ActivityIndicator color={colors.text} />
+                        ) : (
+                            <>
+                                <GoogleIcon />
+                                <Text
+                                    style={[
+                                        s.googleTxt,
+                                        { color: colors.text }
+                                    ]}
+                                >
+                                    {t('auth.landing.google')}
+                                </Text>
+                            </>
+                        )}
+                    </TouchableOpacity>
+                )}
+
+                {(config.googleAuth
+                    || (Platform.OS === 'ios' && appleAvailable)) && (
+                    <View style={s.divRow}>
+                        <View
+                            style={[
+                                s.divLine,
+                                { backgroundColor: colors.border }
+                            ]}
+                        />
+                        <Text
+                            style={[
+                                s.divLabel,
+                                { color: colors.textMuted }
+                            ]}
+                        >
+                            {t('auth.landing.divider')}
+                        </Text>
+                        <View
+                            style={[
+                                s.divLine,
+                                { backgroundColor: colors.border }
+                            ]}
+                        />
+                    </View>
+                )}
 
                 <TouchableOpacity
                     style={[

package/template/mobile/{{PROJECT_SLUG}}/src/services/content/signing.ts

@@ -19,7 +19,8 @@ import { bytesToHex, utf8ToBytes } from '@noble/hashes/utils.js';
 
 // CHANGE THIS to a long random string and keep it in sync with
 // server/.env CONTENT_SECRET. Same value at both ends.
-export const CONTENT_SECRET = '{{CONTENT_SECRET}}';
+export const CONTENT_SECRET =
+    '{{CONTENT_SECRET}}';
 
 interface SignedHeaders {
     'X-Content-Timestamp': string;

package/template/mobile/{{PROJECT_SLUG}}/src/services/iap/index.ts

@@ -1,7 +1,7 @@
 /**
- * In-App Purchase service — wraps `react-native-iap` v15 with:
+ * In-App Purchase service — wraps `expo-iap` (OpenIAP) with:
  *
- *  - Lazy-load via try/require so Expo Go (no NitroModules) gets
+ *  - Lazy-load via try/require so Expo Go (no native module) gets
  *    graceful no-ops instead of crashing on import.
  *  - One source of truth for product IDs (PRODUCT_IDS below — change
  *    them to match what you set up in App Store Connect / Play Console).
@@ -13,6 +13,7 @@
  */
 
 import { Platform } from 'react-native';
+import config from '../../config';
 import { fetchApi } from '../fetch-api';
 import type { ApiUser } from '../api';
 
@@ -35,22 +36,13 @@ interface IAPNative {
         isConsumable: boolean;
     }) => Promise<unknown>;
     getAvailablePurchases: () => Promise<NativePurchase[]>;
-    deepLinkToSubscriptionsIOS?: () => Promise<unknown>;
-    deepLinkToSubscriptions?: (args: {
-        packageNameAndroid: string;
-        skuAndroid: string;
-    }) => Promise<unknown>;
+    deepLinkToSubscriptions?: (args?: {
+        packageNameAndroid?: string;
+        skuAndroid?: string;
+    } | null) => Promise<unknown>;
 }
 
-let _iap: IAPNative | null = null;
-try {
-    // eslint-disable-next-line @typescript-eslint/no-require-imports
-    _iap = require('react-native-iap') as IAPNative;
-} catch {
-    console.info(
-        '[iap] react-native-iap not available (Expo Go) — IAP disabled'
-    );
-}
+{{IAP_REQUIRE_BLOCK}}
 
 const isAvailable = !!_iap;
 
@@ -60,8 +52,8 @@ const isAvailable = !!_iap;
 // product IDs) and Google Play Console (Monetize → Subscriptions). The
 // strings can be anything but must match across all three places.
 export const PRODUCT_IDS = {
-    monthly: '{{PROJECT_SLUG}}_premium_monthly',
-    annual:  '{{PROJECT_SLUG}}_premium_annual'
+    monthly: '{{PROJECT_SLUG_UNDERSCORE}}_premium_monthly',
+    annual:  '{{PROJECT_SLUG_UNDERSCORE}}_premium_annual'
 } as const;
 
 const PRODUCT_ID_LIST = Object.values(PRODUCT_IDS);
@@ -314,7 +306,7 @@ export async function openSubscriptionManagement(): Promise<boolean> {
     }
     try {
         if (Platform.OS === 'ios') {
-            await _iap!.deepLinkToSubscriptionsIOS?.();
+            await _iap!.deepLinkToSubscriptions?.();
             return true;
         }
         await _iap!.deepLinkToSubscriptions?.({
@@ -350,9 +342,9 @@ export async function validateWithServer(
 ): Promise<ValidateResponse> {
     let body: Record<string, unknown>;
     if (Platform.OS === 'ios') {
-        // StoreKit 2 / react-native-iap v15 no longer exposes a
-        // receipt blob — server validates via transactionId using the
-        // App Store Server API.
+        // StoreKit 2 / expo-iap no longer exposes a receipt blob —
+        // server validates via transactionId using the App Store
+        // Server API.
         const originalTransactionId =
             purchase.originalTransactionIdentifierIOS
             ?? purchase.transactionId;
@@ -397,6 +389,9 @@ export async function fetchPremiumStatus(token: string): Promise<{
     ok: boolean;
     is_premium: boolean;
 }> {
+    if (!config.iap) {
+        return { ok: false, is_premium: false };
+    }
     try {
         return await fetchApi('/api/iap/status', { token });
     } catch (err) {