biucingcli 0.9.1__py3-none-any.whl

biucingcli/template_data/apple/template/Makefile

@@ -0,0 +1,128 @@
+SHELL := /bin/zsh
+
+APP_NAME={{PROJECT_NAME}}
+WORKTREE_ROOT ?= $(shell git rev-parse --show-toplevel 2>/dev/null || pwd)
+WORKTREE_LABEL ?= $(shell basename "$(WORKTREE_ROOT)" | tr '[:upper:]' '[:lower:]' | tr -cs 'a-z0-9' '-' | sed 's/^-//; s/-$$//')
+WORKTREE_ID ?= $(shell printf '%s' "$(WORKTREE_ROOT)" | shasum | cut -c1-8)
+WORKTREE_SLUG ?= $(APP_NAME)-$(WORKTREE_ID)
+DERIVED_DATA_PATH ?= $(WORKTREE_ROOT)/DerivedData/$(WORKTREE_ID)
+SWIFTPM_BUILD_PATH ?= $(WORKTREE_ROOT)/.build/$(WORKTREE_ID)
+TUIST_HOME ?= $(WORKTREE_ROOT)/.cache/tuist/$(WORKTREE_ID)/home
+TUIST_XDG_CACHE_HOME ?= $(WORKTREE_ROOT)/.cache/tuist/$(WORKTREE_ID)/xdg-cache
+TUIST_XDG_STATE_HOME ?= $(WORKTREE_ROOT)/.cache/tuist/$(WORKTREE_ID)/xdg-state
+TUIST_XDG_CONFIG_HOME ?= $(WORKTREE_ROOT)/.cache/tuist/$(WORKTREE_ID)/xdg-config
+TUIST_TMPDIR ?= $(WORKTREE_ROOT)/.cache/tuist/$(WORKTREE_ID)/tmp
+SWIFTLINT_CACHE ?= $(WORKTREE_ROOT)/.swiftlint-cache/$(WORKTREE_ID)
+SWIFTFORMAT_CACHE ?= $(WORKTREE_ROOT)/.swiftformat.cache/$(WORKTREE_ID)
+DEBUG_BUNDLE_SUFFIX ?= .$(WORKTREE_ID)
+EFFECTIVE_BUNDLE_IDENTIFIER ?= {{BUNDLE_IDENTIFIER}}$(DEBUG_BUNDLE_SUFFIX)
+RELEASE_BUNDLE_IDENTIFIER := {{BUNDLE_IDENTIFIER}}
+TUIST_DEBUG_BUNDLE_SUFFIX := $(DEBUG_BUNDLE_SUFFIX)
+XCODEBUILD := xcodebuild -derivedDataPath $(DERIVED_DATA_PATH)
+TUIST_ENV := HOME=$(TUIST_HOME) XDG_CACHE_HOME=$(TUIST_XDG_CACHE_HOME) XDG_STATE_HOME=$(TUIST_XDG_STATE_HOME) XDG_CONFIG_HOME=$(TUIST_XDG_CONFIG_HOME) TMPDIR=$(TUIST_TMPDIR)
+TEST_DESTINATION ?= $(shell ./scripts/test-destination {{APPLE_PLATFORM}} 2>/dev/null || printf '%s' '{{XCODEBUILD_DESTINATION}}')
+
+export TUIST_HOME
+export TUIST_XDG_CACHE_HOME
+export TUIST_XDG_STATE_HOME
+export TUIST_XDG_CONFIG_HOME
+export TUIST_TMPDIR
+export DEBUG_BUNDLE_SUFFIX
+export TUIST_DEBUG_BUNDLE_SUFFIX
+
+.PHONY: bootstrap doctor generate release-generate release-identity-check clean build test lint verify format release-doctor archive beta release worktree-info worktree-doctor clean-worktree help
+
+bootstrap:
+	$(TUIST_ENV) WORKTREE_ID=$(WORKTREE_ID) ./scripts/bootstrap
+
+doctor:
+	$(TUIST_ENV) WORKTREE_ID=$(WORKTREE_ID) ./scripts/doctor
+
+generate:
+	mkdir -p "$(TUIST_HOME)" "$(TUIST_XDG_CACHE_HOME)" "$(TUIST_XDG_STATE_HOME)" "$(TUIST_XDG_CONFIG_HOME)" "$(TUIST_TMPDIR)"
+	$(TUIST_ENV) tuist install
+	$(TUIST_ENV) tuist generate --no-open
+
+release-generate:
+	@if [ -n "$(DEBUG_BUNDLE_SUFFIX)" ]; then printf '%s\n' "Release generation ignores DEBUG_BUNDLE_SUFFIX=$(DEBUG_BUNDLE_SUFFIX) and uses $(RELEASE_BUNDLE_IDENTIFIER)."; fi
+	$(MAKE) --no-print-directory DEBUG_BUNDLE_SUFFIX= generate
+
+release-identity-check:
+	./scripts/verify-release-identity workspace
+
+clean:
+	tuist clean
+
+build:
+	$(XCODEBUILD) \
+		-workspace {{PROJECT_NAME}}.xcworkspace \
+		-scheme {{SWIFT_MODULE_NAME}} \
+		-destination '{{XCODEBUILD_DESTINATION}}' \
+		build
+
+test:
+	$(XCODEBUILD) \
+		-workspace {{PROJECT_NAME}}.xcworkspace \
+		-scheme {{SWIFT_MODULE_NAME}} \
+		-destination '$(TEST_DESTINATION)' \
+		test
+
+lint:
+	mkdir -p "$(SWIFTLINT_CACHE)"
+	swiftlint lint --cache-path $(SWIFTLINT_CACHE)
+
+verify: doctor lint test build
+
+format:
+	mkdir -p "$(SWIFTFORMAT_CACHE)"
+	swiftformat . --cache $(SWIFTFORMAT_CACHE)
+
+release-doctor:
+	fastlane release_doctor
+
+archive:
+	@if [ -n "$(DEBUG_BUNDLE_SUFFIX)" ]; then printf '%s\n' "Archive ignores DEBUG_BUNDLE_SUFFIX=$(DEBUG_BUNDLE_SUFFIX) and uses $(RELEASE_BUNDLE_IDENTIFIER)."; fi
+	DEBUG_BUNDLE_SUFFIX= fastlane archive
+
+beta:
+	@if [ -n "$(DEBUG_BUNDLE_SUFFIX)" ]; then printf '%s\n' "Beta delivery ignores DEBUG_BUNDLE_SUFFIX=$(DEBUG_BUNDLE_SUFFIX) and uses $(RELEASE_BUNDLE_IDENTIFIER)."; fi
+	DEBUG_BUNDLE_SUFFIX= fastlane beta
+
+release:
+	@if [ -n "$(DEBUG_BUNDLE_SUFFIX)" ]; then printf '%s\n' "App Store delivery ignores DEBUG_BUNDLE_SUFFIX=$(DEBUG_BUNDLE_SUFFIX) and uses $(RELEASE_BUNDLE_IDENTIFIER)."; fi
+	DEBUG_BUNDLE_SUFFIX= fastlane release
+
+worktree-info:
+	@printf '%s\n' "Project: {{PROJECT_NAME}}"
+	@printf '%s\n' "Worktree root: $(WORKTREE_ROOT)"
+	@printf '%s\n' "WORKTREE_LABEL: $(WORKTREE_LABEL)"
+	@printf '%s\n' "WORKTREE_ID: $(WORKTREE_ID)"
+	@printf '%s\n' "WORKTREE_SLUG: $(WORKTREE_SLUG)"
+	@printf '%s\n' "DerivedData: $(DERIVED_DATA_PATH)"
+	@printf '%s\n' "SwiftPM build path: $(SWIFTPM_BUILD_PATH)"
+	@printf '%s\n' "Tuist HOME: $(TUIST_HOME)"
+	@printf '%s\n' "Tuist XDG cache: $(TUIST_XDG_CACHE_HOME)"
+	@printf '%s\n' "Tuist XDG state: $(TUIST_XDG_STATE_HOME)"
+	@printf '%s\n' "Tuist XDG config: $(TUIST_XDG_CONFIG_HOME)"
+	@printf '%s\n' "Tuist tmp: $(TUIST_TMPDIR)"
+	@printf '%s\n' "SwiftLint cache: $(SWIFTLINT_CACHE)"
+	@printf '%s\n' "SwiftFormat cache: $(SWIFTFORMAT_CACHE)"
+	@printf '%s\n' "Debug bundle suffix: $(DEBUG_BUNDLE_SUFFIX)"
+	@printf '%s\n' "Debug bundle identifier: $(EFFECTIVE_BUNDLE_IDENTIFIER)"
+	@printf '%s\n' "Release bundle identifier: $(RELEASE_BUNDLE_IDENTIFIER)"
+	@printf '%s\n' "Test destination: $(TEST_DESTINATION)"
+
+worktree-doctor:
+	@printf '%s\n' "Checking Apple worktree isolation..."
+	@test -n "$(WORKTREE_ID)" || (printf '%s\n' "WORKTREE_ID is empty" && exit 1)
+	@case "$(DERIVED_DATA_PATH)" in "$(WORKTREE_ROOT)"/*) ;; *) printf '%s\n' "DerivedData should stay inside this worktree: $(DERIVED_DATA_PATH)"; exit 1;; esac
+	@case "$(TUIST_HOME)" in "$(WORKTREE_ROOT)"/*) ;; *) printf '%s\n' "Tuist home should stay inside this worktree: $(TUIST_HOME)"; exit 1;; esac
+	@case "$(TUIST_XDG_CACHE_HOME)" in "$(WORKTREE_ROOT)"/*) ;; *) printf '%s\n' "Tuist cache should stay inside this worktree: $(TUIST_XDG_CACHE_HOME)"; exit 1;; esac
+	@if [ -f fastlane/.env ]; then printf '%s\n' "fastlane/.env is local to this worktree and must remain untracked."; fi
+	@printf '%s\n' "Apple worktree isolation looks ready."
+
+clean-worktree:
+	rm -rf "$(DERIVED_DATA_PATH)" "$(SWIFTPM_BUILD_PATH)" "$(TUIST_HOME)" "$(TUIST_XDG_CACHE_HOME)" "$(TUIST_XDG_STATE_HOME)" "$(TUIST_XDG_CONFIG_HOME)" "$(TUIST_TMPDIR)" "$(SWIFTLINT_CACHE)" "$(SWIFTFORMAT_CACHE)"
+
+help:
+	@printf '%s\n' "Common commands:" "  make bootstrap  Prepare project dependencies and tooling" "  make doctor     Check the local environment" "  make lint       Run static checks" "  make test       Run automated tests" "  make verify     Run the template quality gate" "  make build      Build the project" "  make clean      Remove generated build state" "  make help       Show this command contract"

biucingcli/template_data/apple/template/Packages/AppServices/Package.swift

@@ -0,0 +1,20 @@
+// swift-tools-version: 6.0
+import PackageDescription
+
+let package = Package(
+    name: "AppServices",
+    platforms: [
+        {{SWIFTPM_SUPPORTED_PLATFORM}}
+    ],
+    products: [
+        .library(
+            name: "AppServices",
+            targets: ["AppServices"]
+        )
+    ],
+    targets: [
+        .target(
+            name: "AppServices"
+        )
+    ]
+)

biucingcli/template_data/apple/template/Packages/AppServices/Sources/AppServices/StarterMetadata.swift

@@ -0,0 +1,52 @@
+import Foundation
+
+public struct StarterFact: Equatable {
+    public let label: String
+    public let systemImage: String
+    public let value: String
+
+    public init(label: String, systemImage: String, value: String) {
+        self.label = label
+        self.systemImage = systemImage
+        self.value = value
+    }
+}
+
+public protocol ReleaseChecklistProviding {
+    func releaseChecklistItems() -> [String]
+}
+
+public struct DefaultReleaseChecklistProvider: ReleaseChecklistProviding {
+    public let bundleIdentifier: String
+    public let developmentTeam: String
+
+    public init(bundleIdentifier: String, developmentTeam: String) {
+        self.bundleIdentifier = bundleIdentifier
+        self.developmentTeam = developmentTeam
+    }
+
+    public func releaseChecklistItems() -> [String] {
+        [
+            "Confirm signing for \(developmentTeam).",
+            "Verify bundle identifier \(bundleIdentifier).",
+            "Run make release-doctor before archiving.",
+            "Upload beta builds through make beta."
+        ]
+    }
+}
+
+public enum StarterFactBuilder {
+    public static func overviewFacts(
+        bundleIdentifier: String,
+        platformName: String,
+        minimumOSVersion: String,
+        developmentTeam: String
+    ) -> [StarterFact] {
+        [
+            StarterFact(label: "Bundle ID", systemImage: "shippingbox", value: bundleIdentifier),
+            StarterFact(label: "Platform", systemImage: "app", value: platformName),
+            StarterFact(label: "Minimum OS", systemImage: "gear", value: minimumOSVersion),
+            StarterFact(label: "Team", systemImage: "person.3", value: developmentTeam)
+        ]
+    }
+}

biucingcli/template_data/apple/template/Packages/DesignSystem/Package.swift

@@ -0,0 +1,20 @@
+// swift-tools-version: 6.0
+import PackageDescription
+
+let package = Package(
+    name: "DesignSystem",
+    platforms: [
+        {{SWIFTPM_SUPPORTED_PLATFORM}}
+    ],
+    products: [
+        .library(
+            name: "DesignSystem",
+            targets: ["DesignSystem"]
+        )
+    ],
+    targets: [
+        .target(
+            name: "DesignSystem"
+        )
+    ]
+)

biucingcli/template_data/apple/template/Packages/DesignSystem/Sources/DesignSystem/Theme.swift

@@ -0,0 +1,8 @@
+import SwiftUI
+
+public enum BiucingTheme {
+    public static let titleFont = Font.system(.title2, design: .rounded).weight(.semibold)
+    public static let sectionTitleFont = Font.system(.headline, design: .rounded).weight(.semibold)
+    public static let bodyFont = Font.system(.body, design: .rounded)
+    public static let captionFont = Font.system(.footnote, design: .rounded)
+}

biucingcli/template_data/apple/template/README.md

@@ -0,0 +1,133 @@
+# {{DISPLAY_NAME}}
+
+This project was generated by BiucingCLI as a Tuist-based Apple app starter for a mid-sized team.
+
+## Stack
+
+- Swift
+- SwiftUI
+- Tuist
+- Swift Package Manager
+- fastlane
+
+## Platform
+
+- Target platform: `{{APPLE_PLATFORM_NAME}}`
+- Minimum OS version: `{{MINIMUM_OS_VERSION}}`
+
+## Repository Layout
+
+- `App/`: Tuist project manifests and app targets
+- `Packages/`: internal Swift packages for shared code
+  `Packages/AppServices` holds starter metadata and release-checklist services
+  `Packages/DesignSystem` holds shared fonts and visual primitives
+- `fastlane/`: beta and release automation
+- `docs/release-delivery.md`: signing, TestFlight, and App Store Connect delivery setup
+- `scripts/`: bootstrap and environment checks
+- `.swiftlint.yml`: default lint rules for app and package sources
+- `.swiftformat`: default formatting rules for Swift sources
+
+## Getting Started
+
+```bash
+make bootstrap
+make doctor
+make generate
+make lint
+make test
+make release-doctor
+```
+
+## Worktree Workflow
+
+Each worktree derives a human-readable `WORKTREE_LABEL` from its directory name
+and a hash-based `WORKTREE_ID` from the worktree root path. Override
+`WORKTREE_ID` when you want a shorter or stable value across renamed folders:
+
+```bash
+WORKTREE_ID=feature-a make worktree-info
+WORKTREE_ID=feature-a make generate
+WORKTREE_ID=feature-a make test
+WORKTREE_ID=feature-a make clean-worktree
+```
+
+`make worktree-info` prints the isolated DerivedData, SwiftPM, Tuist, SwiftLint,
+SwiftFormat, and debug bundle identifier values. `make worktree-doctor` checks
+that cache paths stay under this worktree. Debug builds use
+`DEBUG_BUNDLE_SUFFIX` by default so two worktrees can install side by side in
+Simulator; set `DEBUG_BUNDLE_SUFFIX=` to keep the generated bundle identifier.
+
+## Standard Commands
+
+```bash
+make bootstrap
+make doctor
+make generate
+make release-generate
+make release-identity-check
+make build
+make lint
+make format
+make test
+make verify
+make release-doctor
+make archive
+make beta
+make release
+make clean
+make help
+```
+
+`make doctor` validates Xcode selection, `xcodebuild`, Tuist, Swift, SwiftLint, SwiftFormat, fastlane, and simulator/runtime visibility before you spend time on `make generate`, `make build`, or `make test`.
+
+`DEBUG_BUNDLE_SUFFIX` is a local Debug/worktree identity only. Normal `make generate`, `make build`, and `make test` workflows keep the suffix so parallel worktrees can install side by side. `make release-generate`, `make archive`, `make beta`, and `make release` always discard it and use the configured release bundle identifier.
+
+## Configuration
+
+- Platform: `{{APPLE_PLATFORM_NAME}}`
+- Bundle identifier: `{{BUNDLE_IDENTIFIER}}`
+- Minimum OS version: `{{MINIMUM_OS_VERSION}}`
+- Development team: `{{DEVELOPMENT_TEAM}}`
+- Formatting and linting are configured through `.swiftformat` and `.swiftlint.yml`
+- `make doctor` checks simulator readiness as a hard requirement for iOS-family starters and a warning-only signal for macOS starters.
+
+## Release Setup
+
+`development_team` is written into `App/Project.swift` as the `DEVELOPMENT_TEAM` build setting. Replace the starter value with the Apple Developer team that should sign debug, beta, and release builds for this app.
+
+`bundle_identifier` is used for the main app target, and the template automatically derives the test target as `{{BUNDLE_IDENTIFIER}}.tests`. Choose a reverse-DNS identifier that is unique inside your Apple Developer account before connecting certificates, provisioning profiles, or TestFlight flows.
+
+Before a real beta or release handoff, the team needs to supply:
+
+- a valid Apple Developer team with signing access
+- a bundle identifier registered in the Apple Developer portal
+- certificates and provisioning profiles synced through `fastlane match`
+- an App Store Connect API key JSON file referenced by `APP_STORE_CONNECT_API_KEY_PATH`
+- a private signing repository referenced by `MATCH_GIT_URL`
+
+Copy `fastlane/.env.example` to `fastlane/.env`, place the API key JSON under the ignored `credentials/` directory, and replace the placeholders. Keep real `.env`, API key, private-key, certificate-container, and provisioning-profile files in your CI secret manager or an ignored local directory. See `docs/release-delivery.md` for the full setup path.
+
+`make release-doctor` validates the local release environment before a native archive spends time building. `make release-identity-check` separately verifies that the generated Release workspace resolves the exact configured bundle identifier.
+
+`make archive` regenerates the workspace without a debug suffix, verifies the Release build settings before signing sync, runs lint and tests, builds a signed App Store archive, and verifies the archive bundle identifier before returning the artifact.
+
+`make beta` runs the archive lane and uploads the signed ipa/pkg to TestFlight.
+
+`make release` runs the archive lane and uploads the signed ipa/pkg to App Store Connect. It does not submit for review by default; set `APP_STORE_SUBMIT_FOR_REVIEW=true` only after metadata, screenshots, review information, privacy details, and compliance answers are ready.
+
+## Notes
+
+- `Tuist.swift` is the repo-wide Tuist configuration.
+- `Workspace.swift` defines the generated workspace composition.
+- `App/Project.swift` is the source of truth for the app target graph.
+- `Packages/AppServices` is the shared home for starter facts and release-checklist logic that would otherwise grow inside the app target too quickly.
+- `Packages/DesignSystem` is a local Swift package consumed by the app target.
+- The starter package split is intentionally simple: keep UI-focused primitives in `DesignSystem`, and move metadata, services, or non-UI helpers into `AppServices`.
+- `AppTests` includes starter examples for a small view-model test and a mocked service dependency.
+- `make doctor` is the fastest way to catch missing Xcode, Tuist, fastlane, or simulator setup before native commands fail later.
+- `fastlane/Appfile` reads `FASTLANE_USER` and `DEVELOPMENT_TEAM_ID` while keeping the generated bundle identifier as the stable app identity.
+- `fastlane/Fastfile` owns release credential checks, `match` signing sync, signed archive creation, TestFlight upload, and App Store Connect upload.
+- `scripts/verify-release-identity` prevents a worktree debug suffix from reaching signing or an uploaded archive by checking both Release build settings and the final xcarchive.
+- `.gitignore` protects the recommended `credentials/` and `signing/` directories plus common Apple private-key and provisioning-profile formats. It does not protect files already tracked or force-added with `git add -f`.
+- `{{APPLE_PLATFORM_OUTPUT_NOTE}}`
+- Generated `.xcodeproj` and `.xcworkspace` files should not be edited manually.

biucingcli/template_data/apple/template/Tuist.swift

@@ -0,0 +1,8 @@
+import ProjectDescription
+
+let config = Config(
+    project: .tuist(
+        compatibleXcodeVersions: .all,
+        swiftVersion: "6.0"
+    )
+)

biucingcli/template_data/apple/template/Workspace.swift

@@ -0,0 +1,11 @@
+import ProjectDescription
+
+let workspace = Workspace(
+    name: "{{PROJECT_NAME}}",
+    projects: [
+        "App"
+    ],
+    additionalFiles: [
+        "README.md"
+    ]
+)

biucingcli/template_data/apple/template/docs/release-delivery.md

@@ -0,0 +1,55 @@
+# Release Delivery
+
+The generated starter includes fastlane lanes for release credential checks, signed archive creation, TestFlight upload, and App Store Connect upload.
+
+## One-Time Setup
+
+1. Register `{{BUNDLE_IDENTIFIER}}` in Apple Developer and App Store Connect.
+2. Create an App Store Connect API key with access to manage builds for the app.
+3. Save the fastlane API key JSON as `credentials/app-store-connect-api-key.json` locally and keep it untracked.
+4. Create a private certificate repository for `fastlane match`.
+5. Copy `fastlane/.env.example` to `fastlane/.env` and replace the placeholders.
+6. Run the first certificate/profile sync from a trusted machine:
+
+```bash
+MATCH_ALLOW_WRITE=true fastlane match appstore
+```
+
+After the first sync, keep `MATCH_ALLOW_WRITE=false` on developer and CI machines so release jobs consume known signing material instead of mutating it.
+
+## Commands
+
+```bash
+make release-doctor
+make release-generate
+make release-identity-check
+make archive
+make beta
+make release
+```
+
+- `make release-doctor` validates local release credentials and signing configuration.
+- `make release-generate` regenerates the workspace with the configured release bundle identifier and ignores any `DEBUG_BUNDLE_SUFFIX` inherited from a worktree or shell.
+- `make release-identity-check` verifies the Release target's resolved `PRODUCT_BUNDLE_IDENTIFIER` before signing material is requested.
+- `make archive` generates and verifies the Release workspace, lints, tests, syncs App Store signing, builds a signed archive, and verifies the xcarchive bundle identifier.
+- `make beta` runs `archive` and uploads the signed ipa/pkg to TestFlight.
+- `make release` runs `archive` and uploads the signed ipa/pkg to App Store Connect.
+
+By default, `make release` uploads the binary but does not submit it for review. Set `APP_STORE_SUBMIT_FOR_REVIEW=true` only after metadata, screenshots, review information, privacy details, and compliance answers are ready.
+
+## Release Identity Boundary
+
+`DEBUG_BUNDLE_SUFFIX` belongs only to local Debug/worktree workflows. Archive, beta, and release lanes always clear it, even when a caller exports a non-empty value. The delivery pipeline compares both the generated Release build settings and `Info.plist` inside the final xcarchive with `{{BUNDLE_IDENTIFIER}}`; any missing or different value stops the lane before upload.
+
+## Local Secrets
+
+Keep these files local or in your CI secret store:
+
+- `fastlane/.env`
+- `credentials/app-store-connect-api-key.json`
+- `.p8`, `.p12`, and `.pfx` private-key containers
+- `.mobileprovision` and `.provisionprofile` files
+
+The template also ignores the legacy root name `app-store-connect-api-key.json` and credential JSON files directly under `fastlane/`. Keep `.env.example` as placeholders only. Do not commit API keys, certificate repository credentials, provisioning profiles, or Apple ID sessions.
+
+Ignore rules only protect untracked files and do not override `git add -f`. If real credentials have already been committed, revoke or rotate them first, remove them from the index, and assess whether repository history must be rewritten.

biucingcli/template_data/apple/template/fastlane/.env.example

@@ -0,0 +1,20 @@
+DEVELOPMENT_TEAM_ID={{DEVELOPMENT_TEAM}}
+FASTLANE_USER=developer@example.com
+
+# JSON format supported by fastlane api_key_path. Store it in the ignored credentials directory.
+APP_STORE_CONNECT_API_KEY_PATH=credentials/app-store-connect-api-key.json
+
+# Private git repository used by fastlane match for certificates and profiles.
+MATCH_GIT_URL=git@github.com:your-org/apple-certificates.git
+MATCH_GIT_BRANCH=main
+MATCH_TYPE=appstore
+
+# Keep release machines read-only by default. Set true only during first-time certificate/profile setup.
+MATCH_ALLOW_WRITE=false
+
+# Optional delivery controls.
+TESTFLIGHT_SKIP_WAITING=true
+TESTFLIGHT_CHANGELOG=
+APP_STORE_SKIP_METADATA=true
+APP_STORE_SKIP_SCREENSHOTS=true
+APP_STORE_SUBMIT_FOR_REVIEW=false

biucingcli/template_data/apple/template/fastlane/Appfile

@@ -0,0 +1,3 @@
+app_identifier("{{BUNDLE_IDENTIFIER}}")
+apple_id(ENV.fetch("FASTLANE_USER", "developer@example.com"))
+team_id(ENV.fetch("DEVELOPMENT_TEAM_ID", "{{DEVELOPMENT_TEAM}}"))

biucingcli/template_data/apple/template/fastlane/Fastfile

@@ -0,0 +1,126 @@
+default_platform(:{{FASTLANE_PLATFORM}})
+
+APP_IDENTIFIER = "{{BUNDLE_IDENTIFIER}}"
+APP_STORE_PLATFORM = "{{APP_STORE_PLATFORM}}"
+TEAM_ID = ENV.fetch("DEVELOPMENT_TEAM_ID", "{{DEVELOPMENT_TEAM}}")
+PROJECT_ROOT = File.expand_path("..", __dir__)
+WORKSPACE = "{{PROJECT_NAME}}.xcworkspace"
+SCHEME = "{{SWIFT_MODULE_NAME}}"
+ARCHIVE_PATH = "build/release/{{SWIFT_MODULE_NAME}}.xcarchive"
+OUTPUT_DIRECTORY = "build/release"
+
+def env_true?(name, default: false)
+  value = ENV[name]
+  return default if value.nil? || value.empty?
+
+  %w[1 true yes y].include?(value.downcase)
+end
+
+def require_env_file(name)
+  value = ENV[name]
+  UI.user_error!("Set #{name}. See fastlane/.env.example.") if value.to_s.empty?
+  path = File.expand_path(value, PROJECT_ROOT)
+  UI.user_error!("#{name} does not exist: #{path}") unless File.file?(path)
+  path
+end
+
+def require_env_value(name)
+  value = ENV[name]
+  UI.user_error!("Set #{name}. See fastlane/.env.example.") if value.to_s.empty?
+  value
+end
+
+def app_store_api_key_path
+  require_env_file("APP_STORE_CONNECT_API_KEY_PATH")
+end
+
+def signing_git_url
+  require_env_value("MATCH_GIT_URL")
+end
+
+def built_artifact_options
+  ipa_path = Actions.lane_context[SharedValues::IPA_OUTPUT_PATH]
+  pkg_path = Actions.lane_context[SharedValues::PKG_OUTPUT_PATH]
+
+  return { ipa: ipa_path } if ipa_path && File.exist?(ipa_path)
+  return { pkg: pkg_path } if pkg_path && File.exist?(pkg_path)
+
+  UI.user_error!("No signed ipa/pkg was produced by build_app.")
+end
+
+def sync_app_store_signing
+  match(
+    type: ENV.fetch("MATCH_TYPE", "appstore"),
+    app_identifier: APP_IDENTIFIER,
+    team_id: TEAM_ID,
+    git_url: signing_git_url,
+    git_branch: ENV.fetch("MATCH_GIT_BRANCH", "main"),
+    readonly: !env_true?("MATCH_ALLOW_WRITE", default: false),
+    api_key_path: app_store_api_key_path
+  )
+end
+
+def build_signed_app
+  build_app(
+    workspace: WORKSPACE,
+    scheme: SCHEME,
+    clean: true,
+    configuration: "Release",
+    export_method: "app-store",
+    export_team_id: TEAM_ID,
+    derived_data_path: ENV.fetch("DERIVED_DATA_PATH", "DerivedData/release"),
+    archive_path: ARCHIVE_PATH,
+    output_directory: OUTPUT_DIRECTORY,
+    xcodebuild_formatter: ENV.fetch("XCODEBUILD_FORMATTER", "xcbeautify")
+  )
+end
+
+platform :{{FASTLANE_PLATFORM}} do
+  desc "Validate release credentials and signing configuration"
+  lane :release_doctor do
+    app_store_api_key_path
+    signing_git_url
+    UI.user_error!("Set DEVELOPMENT_TEAM_ID or replace the template development_team value.") if TEAM_ID == "DEVELOPMENT_TEAM_ID"
+    UI.success("Release credentials and signing configuration are present.")
+  end
+
+  desc "Build a signed App Store archive without uploading"
+  lane :archive do
+    release_doctor
+    sh("make release-generate")
+    sh("make release-identity-check")
+    sh("make lint")
+    sh("make test")
+    sync_app_store_signing
+    build_signed_app
+    sh("./scripts/verify-release-identity", "archive", ARCHIVE_PATH)
+  end
+
+  desc "Build, sign, and upload a beta build to TestFlight"
+  lane :beta do
+    archive
+    upload_to_testflight(
+      api_key_path: app_store_api_key_path,
+      app_identifier: APP_IDENTIFIER,
+      app_platform: APP_STORE_PLATFORM,
+      skip_waiting_for_build_processing: env_true?("TESTFLIGHT_SKIP_WAITING", default: true),
+      changelog: ENV["TESTFLIGHT_CHANGELOG"],
+      **built_artifact_options
+    )
+  end
+
+  desc "Build, sign, and upload an App Store Connect release build"
+  lane :release do
+    archive
+    upload_to_app_store(
+      api_key_path: app_store_api_key_path,
+      app_identifier: APP_IDENTIFIER,
+      platform: APP_STORE_PLATFORM,
+      force: true,
+      skip_metadata: env_true?("APP_STORE_SKIP_METADATA", default: true),
+      skip_screenshots: env_true?("APP_STORE_SKIP_SCREENSHOTS", default: true),
+      submit_for_review: env_true?("APP_STORE_SUBMIT_FOR_REVIEW", default: false),
+      **built_artifact_options
+    )
+  end
+end

biucingcli/template_data/apple/template/fastlane/Matchfile

@@ -0,0 +1,7 @@
+git_url(ENV.fetch("MATCH_GIT_URL", "git@github.com:your-org/apple-certificates.git"))
+git_branch(ENV.fetch("MATCH_GIT_BRANCH", "main"))
+storage_mode("git")
+type(ENV.fetch("MATCH_TYPE", "appstore"))
+app_identifier(["{{BUNDLE_IDENTIFIER}}"])
+team_id(ENV.fetch("DEVELOPMENT_TEAM_ID", "{{DEVELOPMENT_TEAM}}"))
+readonly(ENV.fetch("MATCH_ALLOW_WRITE", "false") != "true")

biucingcli/template_data/apple/template/scripts/bootstrap

@@ -0,0 +1,9 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+./scripts/setup-xcode
+brew bundle
+mise install
+tuist install
+tuist generate --no-open
+./scripts/doctor