Imported from PhantomBeast2090/Crave_IOS (.opencode/skills/crave-release/SKILL.md). Install upstream with npx skills add PhantomBeast2090/Crave_IOS --skill crave-release. Copyright stays with the author.

Crave Release

Name: crave-release
Author: PhantomBeast2090

Audit before every release. Never claim release readiness without evidence — each check below needs a verified result, not an assumption.

Audit checklist

Production configuration: Supabase URL/anon key point at production; Secrets.swift present via secure provisioning, never committed; AppConfig.isBackendConfigured true; no staging/test endpoints.
Secrets: no keys in source, logs, screenshots, or crash reports; Razorpay uses production key material server-side only.
Entitlements/capabilities match usage (camera for vendor QR scan with NSCameraUsageDescription set and justified).
Privacy: permission strings accurate; privacy manifests and required-API reasons current; notification usage matches what is configured.
Payments: production Razorpay/Edge Function configuration verified with a real (reversible) transaction path; failure and refund paths reachable.
Supabase: production RLS/migrations applied (001–012 verified, including the 012_ admin-stats fix); realtime and Edge Functions healthy.
Quality gates: clean build, full test suite green (crave-testing), QA pass (crave-qa), security pass (crave-security), performance sanity (crave-performance).
Crash risks: force-unwraps on network/decode paths, fatalError on ModelContainer creation (degraded-launch path?), unhandled End-of-flow states.
App Store: version/build numbers, icons, launch screen, screenshots/metadata if requested; route review-policy depth to app-store-review.

Rules

Produce a go/no-go with P0 blockers listed first and evidence per item.
Any release-blocker fix re-enters through crave-muse-protocol (implement → validate → audit), not as a hot tweak.

{ "ocm": "1", "id": "phantombeast2090-crave-ios-crave-release", "kind": "skill", "name": "crave-release", "description": "Production and App Store readiness audits for Crave. Use when preparing TestFlight or App Store releases, checking production configuration, secrets, entitlements, privacy manifests, payments, notifications, or release regressions.", "publisher": "PhantomBeast2090", "version": "1.0.0", "capabilities": { "domains": [ "general" ], "tags": [ "skill-md", "github" ], "languages": [ "en" ] }, "quality_prior": 0.6, "examples": [ "Production and App Store readiness audits for Crave. Use when preparing TestFlight or App Store releases, checking production configuration, secrets, entitlements, privacy manifests, payments, notifications, or release regressions." ], "primary": false, "metadata": { "source": { "provider": "github", "repository": "https://github.com/PhantomBeast2090/Crave_IOS", "path": ".opencode/skills/crave-release/SKILL.md", "ref": "671609dd0f7a5e9a441ebbaad7b557c0fd59d1f8", "url": "https://github.com/PhantomBeast2090/Crave_IOS/blob/671609dd0f7a5e9a441ebbaad7b557c0fd59d1f8/.opencode/skills/crave-release/SKILL.md", "key": "PhantomBeast2090/Crave_IOS/.opencode/skills/crave-release/SKILL.md" } }, "instructions": "# Crave Release\n\nAudit before every release. Never claim release readiness without evidence —\neach check below needs a verified result, not an assumption.\n\n## Audit checklist\n\n- Production configuration: Supabase URL/anon key point at production;\n `Secrets.swift` present via secure provisioning, never committed;\n `AppConfig.isBackendConfigured` true; no staging/test endpoints.\n- Secrets: no keys in source, logs, screenshots, or crash reports; Razorpay\n uses production key material server-side only.\n- Entitlements/capabilities match usage (camera for vendor QR scan with\n `NSCameraUsageDescr", "cost": { "context_tokens": 434 } }

crave-release

About

Crave Release

Audit checklist

Rules

Use it

Manifest

Reviews