Repository and structure

# Private repository under Imad's account, default branch dev
gh repo create hoco-mobile --private \
  --description "HOCO B2B — reseller and delegate Flutter apps" --clone
cd hoco-mobile
git checkout -b master && git commit --allow-empty -m "chore: initial commit" && git push -u origin master
git checkout -b dev && git push -u origin dev
gh repo edit --default-branch dev --enable-squash-merge --enable-merge-commit \
  --enable-rebase-merge=false --delete-branch-on-merge

# Collaborators (personal repositories give collaborators write access)
gh api -X PUT repos/{owner}/hoco-mobile/collaborators/AnisBetehi
gh api -X PUT repos/{owner}/hoco-mobile/collaborators/<akram-github-handle>

# Labels used by PR rules and triage
for l in contract reseller delegate design-qa pilot hotfix mobile-impact; do gh label create "$l"; done

name: hoco_core
publish_to: none
resolution: workspace

environment:
  sdk: ^3.10.0
  flutter: ">=3.38.0"

dependencies:
  flutter:
    sdk: flutter
  dio: ^5.8.0
  flutter_riverpod: ^3.0.0
  riverpod_annotation: ^3.0.0
  freezed_annotation: ^3.0.0
  json_annotation: ^4.9.0
  flutter_secure_storage: ^9.2.0
  connectivity_plus: ^6.1.0
  package_info_plus: ^8.3.0
  sentry_flutter: ^9.0.0
  sentry_dio: ^9.0.0
  uuid: ^4.5.0
  intl: any            # pinned by flutter_localizations
  logging: ^1.3.0

dev_dependencies:
  build_runner: ^2.4.0
  freezed: ^3.0.0
  json_serializable: ^6.9.0
  riverpod_generator: ^3.0.0
  mocktail: ^1.0.4
  very_good_analysis: ^7.0.0

{
  "HOCO_ENV": "staging",
  "API_BASE_URL": "https://api-staging.hoco.dz/v1",
  "WEB_BASE_URL": "https://app-staging.hoco.dz",
  "SENTRY_DSN": "https://examplePublicKey@o0.ingest.sentry.io/0",
  "MOCK_BASE_URL": ""
}

import java.util.Properties

val keystoreProperties = Properties().apply {
    val file = rootProject.file("key.properties")
    if (file.exists()) file.inputStream().use { load(it) }
}
val secrets = Properties().apply {
    val file = rootProject.file("secrets.properties") // MAPS_API_KEY_DEV=…, git-ignored, CI writes it
    if (file.exists()) file.inputStream().use { load(it) }
}

android {
    namespace = "dz.hoco.reseller"
    compileSdk = flutter.compileSdkVersion

    defaultConfig {
        applicationId = "dz.hoco.reseller"
        minSdk = 24
        targetSdk = flutter.targetSdkVersion
        versionCode = flutter.versionCode
        versionName = flutter.versionName
    }

    flavorDimensions += "env"
    productFlavors {
        create("dev") {
            dimension = "env"
            applicationIdSuffix = ".dev"
            versionNameSuffix = "-dev"
            resValue("string", "app_name", "HOCO Rev DEV")
            manifestPlaceholders["mapsApiKey"] = secrets.getProperty("MAPS_API_KEY_DEV", "")
            manifestPlaceholders["appLinkHost"] = "app-dev.hoco.dz"
        }
        create("staging") {
            dimension = "env"
            applicationIdSuffix = ".staging"
            versionNameSuffix = "-stg"
            resValue("string", "app_name", "HOCO Rev STG")
            manifestPlaceholders["mapsApiKey"] = secrets.getProperty("MAPS_API_KEY_STAGING", "")
            manifestPlaceholders["appLinkHost"] = "app-staging.hoco.dz"
        }
        create("prod") {
            dimension = "env"
            resValue("string", "app_name", "HOCO Revendeur")
            manifestPlaceholders["mapsApiKey"] = secrets.getProperty("MAPS_API_KEY_PROD", "")
            manifestPlaceholders["appLinkHost"] = "app.hoco.dz"
        }
    }

    signingConfigs {
        create("release") {
            keyAlias = keystoreProperties.getProperty("keyAlias")
            keyPassword = keystoreProperties.getProperty("keyPassword")
            storeFile = keystoreProperties.getProperty("storeFile")?.let { file(it) }
            storePassword = keystoreProperties.getProperty("storePassword")
        }
    }

    buildTypes {
        release {
            signingConfig = signingConfigs.getByName("release")
            isMinifyEnabled = true
            isShrinkResources = true
        }
    }
}

<?xml version="1.0" encoding="utf-8"?>
<network-security-config>
  <domain-config cleartextTrafficPermitted="true">
    <domain includeSubdomains="false">10.0.2.2</domain>
    <domain includeSubdomains="false">127.0.0.1</domain>
    <domain includeSubdomains="false">localhost</domain>
  </domain-config>
</network-security-config>

cd apps/reseller
flutter run --flavor dev --dart-define-from-file=env/mock.json
flutter run --flavor staging --dart-define-from-file=env/staging.json
flutter build apk --flavor staging --release --dart-define-from-file=env/staging.json
flutter build appbundle --flavor prod --release --dart-define-from-file=env/prod.json \
  --obfuscate --split-debug-info=build/symbols

dart pub global activate flutterfire_cli
cd apps/reseller
flutterfire configure --project=hoco-dev --platforms=android \
  --android-package-name=dz.hoco.reseller.dev \
  --out=lib/firebase_options_dev.dart \
  --android-out=android/app/src/dev/google-services.json
# repeat for staging and prod, then for apps/delegate

keytool -genkeypair -v -keystore upload-reseller.jks -alias upload \
  -keyalg RSA -keysize 2048 -validity 10000

storeFile=C:/keys/hoco/upload-reseller.jks
storePassword=…
keyAlias=upload
keyPassword=…