Prepare local-first App Store launch

.env.example

@@ -1,21 +1,12 @@
 # Authentication
 EXPO_PUBLIC_CLERK_PUBLISHABLE_KEY=your_clerk_key_here
+# Release CLI only. Do not prefix with EXPO_PUBLIC_ and do not expose as plaintext.
+CLERK_SECRET_KEY=sk_live_or_sk_test_for_release_scripts
 
-# Database
-DATABASE_URL=postgresql://username:password@localhost:5432/prepai_db
-
-# External APIs
-KROGER_CLIENT_ID=your_kroger_client_id
-KROGER_CLIENT_SECRET=your_kroger_client_secret
-EDAMAM_APP_ID=your_edamam_app_id
-EDAMAM_APP_KEY=your_edamam_app_key
-OPENAI_API_KEY=your_openai_api_key
-
-# OpenAI Configuration
-OPENAI_BASE_URL=https://api.openai.com/v1
-OPENAI_MODEL=gpt-5.5
+# Local AI
+EXPO_PUBLIC_LOCAL_AI_ENABLED=true
+EXPO_PUBLIC_LOCAL_AI_PROVIDER=executorch
+EXPO_PUBLIC_CLOUD_AI_FALLBACK=false
 
 # App Configuration
 EXPO_PUBLIC_APP_ENV=development
-EXPO_PUBLIC_API_BASE_URL=https://prepai.com
-EXPO_PUBLIC_API_URL=https://prepai.com

.eslintignore

@@ -8,4 +8,6 @@ prisma/generated/
 
 # Build outputs
 dist/
+dist-ios-check/
+dist-web-check/
 build/

.github/actions/setup-node-environment/action.yaml

@@ -1,32 +1,42 @@
-name: "Setup Node environment"
-description: "Checkout, cache and bun install"
-
-inputs:
-  node-version:
-    description: 'The Node.js version to use'
-    required: true
-    default: '18'
-  cache-path:
-    description: 'The path to cache node modules'
-    required: true
-  cache-key:
-    description: 'The key for caching'
-    required: true
-
-runs:
-  using: 'composite'
-  steps:
-    - name: Set up Node.js
-      uses: actions/setup-node@v4
-      with:
-        node-version: ${{ inputs.node-version }}
-    - name: Install Bun
-      shell: bash
-      run: |
-        curl -fsSL https://bun.sh/install | bash
-        echo "$HOME/.bun/bin" >> $GITHUB_PATH
-    - name: Cache Node modules
-      uses: actions/cache@v4
-      with:
-        path: ${{ inputs.cache-path }}
-        key: ${{ inputs.cache-key }}
+name: 'Setup Node environment'
+description: 'Checkout, cache and bun install'
+
+inputs:
+  node-version:
+    description: 'The Node.js version to use'
+    required: false
+    default: ''
+  node-version-file:
+    description: 'The Node.js version file to use'
+    required: false
+    default: '.nvmrc'
+  cache-path:
+    description: 'The path to cache node modules'
+    required: true
+  cache-key:
+    description: 'The key for caching'
+    required: true
+
+runs:
+  using: 'composite'
+  steps:
+    - name: Set up Node.js from explicit version
+      if: ${{ inputs.node-version != '' }}
+      uses: actions/setup-node@v4
+      with:
+        node-version: ${{ inputs.node-version }}
+    - name: Set up Node.js from version file
+      if: ${{ inputs.node-version == '' }}
+      uses: actions/setup-node@v4
+      with:
+        node-version-file: ${{ inputs.node-version-file }}
+    - name: Install Bun
+      shell: bash
+      run: |
+        curl -fsSL https://bun.sh/install | bash
+        echo "$HOME/.bun/bin" >> $GITHUB_PATH
+    - name: Cache Node modules
+      uses: actions/cache@v4
+      with:
+        path: ${{ inputs.cache-path }}
+        key: ${{ inputs.cache-key }}

.github/workflows/ci.yml

@@ -17,7 +17,6 @@ jobs:
 
       - uses: ./.github/actions/setup-node-environment
         with:
-          node-version: '20'
           cache-path: 'node_modules'
           cache-key: ${{ runner.os }}-bun-${{ hashFiles('bun.lock') }}
 
@@ -30,18 +29,68 @@ jobs:
       - name: Lint
         run: bun run lint
 
+      - name: Startup module-work guard
+        run: bun run guard:startup
+
+      - name: Module work advisory report
+        env:
+          MODULE_WORK_REPORT_OUTPUT: dist/module-work-report.json
+        run: bun run report:module-work
+
+      - name: Upload module work report
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: module-work-report
+          path: dist/module-work-report.json
+          if-no-files-found: ignore
+
       - name: Test
         run: bun run test -- --runInBand
 
       - name: Expo Doctor
         run: bun run doctor
 
       - name: Verify iOS export
-        run: |
-          bunx expo export --platform ios --output-dir dist-ios-check
-          rm -rf dist-ios-check
+        run: rm -f .expo/atlas.jsonl && EXPO_ATLAS=true NODE_ENV=production METRO_MAX_WORKERS=1 bunx expo export --platform ios --output-dir dist-ios-check
 
       - name: Verify web export
-        run: |
-          bunx expo export --platform web --output-dir dist-web-check
-          rm -rf dist-web-check
+        run: METRO_MAX_WORKERS=1 bunx expo export --platform web --output-dir dist-web-check
+
+      - name: Production readiness guardrails
+        run: bun run verify:production
+
+      - name: Expo Atlas bundle report
+        env:
+          ATLAS_SUMMARY_OUTPUT: dist/atlas-summary.json
+        run: bun run report:atlas
+
+      - name: Upload Expo Atlas artifacts
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: expo-atlas
+          path: |
+            dist/atlas-summary.json
+            .expo/atlas.jsonl
+          if-no-files-found: ignore
+
+      - name: Performance baseline report
+        env:
+          PERFORMANCE_BASELINE_OUTPUT: dist/performance-baseline.json
+        run: bun run perf:baseline:report
+
+      - name: Upload performance baseline
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: performance-baseline
+          path: dist/performance-baseline.json
+          if-no-files-found: ignore
+
+      - name: Dead code and dependency audit
+        run: bun run knip:check
+
+      - name: Cleanup export artifacts
+        if: always()
+        run: rm -rf dist-ios-check dist-web-check

.github/workflows/release-dev.yaml

@@ -22,7 +22,6 @@ jobs:
 
       - uses: ./.github/actions/setup-node-environment
         with:
-          node-version: '20'
           cache-path: 'node_modules'
           cache-key: ${{ runner.os }}-bun-${{ hashFiles('bun.lock') }}
 

.github/workflows/release-ipa.yml

@@ -19,7 +19,6 @@ jobs:
 
       - uses: ./.github/actions/setup-node-environment
         with:
-          node-version: '20'
           cache-path: 'node_modules'
           cache-key: ${{ runner.os }}-bun-${{ hashFiles('bun.lock') }}
 
@@ -30,13 +29,14 @@ jobs:
       - name: Install dependencies
         run: bun install --frozen-lockfile
 
-      - name: Verify release candidate
-        run: bun run verify
+      - name: Verify EAS production environment
+        run: bun run verify:release-env
 
-      - name: Verify iOS bundle export
-        run: |
-          bunx expo export --platform ios --output-dir dist-ios-check
-          rm -rf dist-ios-check
+      - name: Verify App Store URLs
+        run: bun run verify:appstore-urls
+
+      - name: Verify App Store release candidate
+        run: bun run test:readiness
 
       - name: Build production iOS app
         run: eas build --platform ios --profile production --non-interactive --wait

.gitignore

@@ -5,8 +5,10 @@ node_modules/
 # Expo
 .expo/
 dist/
+dist-*-check/
 web-build/
 android
+builds/
 
 # Native
 *.orig.*

.nvmrc

@@ -0,0 +1 @@
+20.19.3

README.md

@@ -906,10 +906,10 @@ bun run test -- src/components/Button.test.tsx
 
 ```bash
 # Validate production readiness
-bunx expo-doctor
-./node_modules/.bin/tsc --noEmit --pretty false
-bun run lint
-bun run test -- --runInBand
+bun run test:readiness
+
+# Inspect the production iOS bundle graph with Expo Atlas
+bun run analyze:atlas
 
 # Deploy web
 bun run deploy:web:prod
@@ -919,7 +919,7 @@ eas build --platform ios --profile production --non-interactive
 eas submit --platform ios --latest
 ```
 
-See [docs/ios-app-store-release.md](docs/ios-app-store-release.md) for the iOS App Store checklist, required production secrets, HealthKit review notes, and the required $4.99 App Store Connect price.
+See [docs/ios-app-store-release.md](docs/ios-app-store-release.md) for the iOS App Store checklist, required production secrets, HealthKit review notes, and the required $4.99 App Store Connect price. See [docs/production-performance.md](docs/production-performance.md) for the release profiling and guardrail workflow.
 
 ## 🤝 Contributing
 

app.json

@@ -27,12 +27,27 @@
       "expo-secure-store",
       "expo-asset",
       "expo-background-task",
+      [
+        "expo-build-properties",
+        {
+          "android": {
+            "enableProguardInReleaseBuilds": true,
+            "enableShrinkResourcesInReleaseBuilds": true,
+            "networkInspector": false
+          },
+          "ios": {
+            "deploymentTarget": "16.4",
+            "networkInspector": false
+          }
+        }
+      ],
+      "./plugins/with-fmt-xcode26-fix",
       [
         "@kingstinct/react-native-healthkit",
         {
           "NSHealthShareUsageDescription": "PrepAI imports activity, workouts, sleep, hydration, and body measurements from Apple Health to personalize your nutrition and fitness plan.",
-          "NSHealthUpdateUsageDescription": "PrepAI can save health and fitness updates you explicitly choose to sync.",
-          "background": true
+          "NSHealthUpdateUsageDescription": false,
+          "background": false
         }
       ]
     ],
@@ -44,19 +59,20 @@
       "resizeMode": "contain",
       "backgroundColor": "#000000"
     },
-    "assetBundlePatterns": ["**/*"],
+    "assetBundlePatterns": [
+      "**/*"
+    ],
     "web": {
       "bundler": "metro",
-      "output": "server",
+      "output": "static",
       "favicon": "./src/assets/favicon.png"
     },
     "ios": {
-      "supportsTablet": true,
+      "supportsTablet": false,
       "bundleIdentifier": "com.jongan69.prepai",
       "infoPlist": {
         "ITSAppUsesNonExemptEncryption": false,
-        "NSHealthShareUsageDescription": "PrepAI imports activity, workouts, sleep, hydration, and body measurements from Apple Health to personalize your nutrition and fitness plan.",
-        "NSHealthUpdateUsageDescription": "PrepAI can save health and fitness updates you explicitly choose to sync."
+        "NSHealthShareUsageDescription": "PrepAI imports activity, workouts, sleep, hydration, and body measurements from Apple Health to personalize your nutrition and fitness plan."
       }
     },
     "android": {
@@ -72,11 +88,10 @@
       "eas": {
         "projectId": "30d0bb01-8e31-4a5f-8de4-549fd39256b9"
       },
-      "apiBaseUrl": "https://prepai.com",
       "appInfo": {
         "name": "PrepAI",
-        "tagline": "Transform Your Fitness Journey with AI",
-        "description": "PrepAI combines artificial intelligence with personalized nutrition and workout planning to help you achieve your health goals faster and more effectively.",
+        "tagline": "Local-first health intelligence",
+        "description": "PrepAI keeps nutrition, workouts, hydration, sleep, body metrics, supplement logs, and Apple Health imports organized in a private local-first health tracker.",
         "version": "1.0.0",
         "socialMedia": {
           "twitter": "https://twitter.com/prepai",