POROROCA OTA · DOCUMENTATION
Agent setup
Give a coding agent enough context and guardrails to integrate Pororoca correctly.
START AN AGENT HERE
Give context, constraints, and a finish line.
Use llms.txt as the index or llms-full.txt as the complete machine-readable runbook. The prompt below asks for one reviewable vertical slice.
COPY-PASTE PROMPT
Ask for one complete integration.
Read https://pororoca-ota.fly.dev/llms-full.txt and this repository's
existing build, state, navigation, design-token, localization, and test patterns.
Integrate Pororoca OTA for [SwiftUI / Jetpack Compose] on [screen]. Reuse
existing native state and action handlers. Keep a compiled embedded fallback.
Use a stable app-owned install ID. Put only the runtime token and Ed25519 public
key in app configuration; never put the delivery token or private signing key
in the mobile app, prompt, logs, artifacts, or source control.
Create one representative document. Test signature rejection, offline fallback,
rendering, and native actions, then run existing checks. Report exact files
changed and early-access limitations.
Do not publish, change rollout, revoke credentials, or roll back production
without showing the exact app, channel, update ID, and percentage and receiving
my explicit approval.REPOSITORY INSTRUCTIONS
Make safety persistent.
## Pororoca OTA
- Read https://pororoca-ota.fly.dev/llms-full.txt before OTA changes.
- Native code owns state, actions, billing, auth, navigation, and data.
- Every updatable screen keeps a compiled embedded fallback.
- Mobile receives a runtime token and Ed25519 public key only.
- CI/MCP receive a delivery token; CI alone receives the private key.
- Validate/test before publish. Default new production rollout: 10%.
- Get approval before publish, rollout change, rollback, or token revoke.ENVIRONMENT CONTRACT
Name inputs predictably.
| Name | Scope | Destination |
|---|---|---|
POROROCA_API_URL | Public | CI and MCP |
POROROCA_API_TOKEN | Delivery secret | CI and MCP only |
POROROCA_PRIVATE_KEY | Signing secret | CI only |
POROROCA_PUBLIC_KEY | Verification | CI and mobile |
POROROCA_RUNTIME_TOKEN | Runtime secret | Mobile only |
POROROCA_APP_SLUG | Identifier | All integrations |
EXPECTED SEQUENCE
Review checkpoints, not confidence.
- Inspect existing screen, state, effects, tokens, localization, and build.
- Choose one screen and pin the Pororoca revision.
- Add runtime plus embedded document before delivery.
- Map every document action to compiled behavior.
- Add stable identity, public key, and runtime token.
- Test malformed input, wrong signatures, offline launch, and actions.
- Export a platform-specific bundle with a unique update ID.
- Stop for approval before production mutation.
- Publish at 10%, inspect health, stop before widening.