Publisher and CI

MENTAL MODEL

Author JSON, then sign an immutable bundle.

The publisher validates schema-v1 JSON. It does not compile an arbitrary app view. Author JSON directly, copy a fixture, or run the Swift DSL from a small executable/test that writes DocumentCodec.encode(document) into .pororoca/documents.

.pororoca/
documents/       # one or more input JSON documents
assets/           # optional referenced assets
keys/             # never commit private.key
update/           # immutable signed output

01 · AUTHOR WITH SWIFT

Generate the host contract from the DSL.

import Foundation
import Pororoca

struct WelcomeState: ScreenState {
static let schema: [String: StateType] = ["name": .string]
}
enum WelcomeAction: String, ScreenAction { case continueTapped }

let document = Screen("welcome", platform: .ios, runtime: ">=1.0",
state: WelcomeState.self, actions: WelcomeAction.self) { state, _ in
VStack(spacing: .points(16)) {
Text("Welcome, \(state.name)")
Button(WelcomeAction.continueTapped) { Text("Continue") }
}
}
let url = URL(fileURLWithPath: ".pororoca/documents/welcome.json")
try FileManager.default.createDirectory(
at: url.deletingLastPathComponent(), withIntermediateDirectories: true)
try DocumentCodec.encode(document).write(to: url, options: .atomic)

The generated requires lists all state, actions, slots, tokens, strings, and assets. The native host must provide them. See examples/PaywallSpike/Sources/Screens/PaywallScreen.swift for a full screen.

02 · KEYS, VALIDATION, EXPORT

Fail locally before delivery can fail.

swift run pororoca keys generate --output .pororoca/keys
swift run pororoca validate .pororoca/documents --platform ios
swift run pororoca export .pororoca/documents \
--assets .pororoca/assets \
--output .pororoca/update \
--update-id checkout-copy-2026-09-04-1 \
--message "Clarify checkout copy" \
--git-sha "$GITHUB_SHA" \
--private-key .pororoca/keys/private.key

Omit --assets when unused. Export refuses to replace output; use --force only in a disposable CI workspace. The manifest pins every file by SHA-256 and byte count.

03 · PUBLISH AND CI

Reproduce exactly what reached production.

# CI secrets: POROROCA_API_TOKEN, POROROCA_PRIVATE_KEY, POROROCA_PUBLIC_KEY
mkdir -p .pororoca/keys
printf '%s\n' "$POROROCA_PRIVATE_KEY" > .pororoca/keys/private.key
printf '%s\n' "$POROROCA_PUBLIC_KEY" > .pororoca/keys/public.key

swift run pororoca validate .pororoca/documents --platform ios
swift run pororoca export .pororoca/documents \
--output .pororoca/update --update-id "$GITHUB_SHA" \
--git-sha "$GITHUB_SHA" --private-key .pororoca/keys/private.key
swift run pororoca publish .pororoca/update \
--server https://pororoca-ota.fly.dev --app your-app-slug \
--channel production --rollout 10 \
--public-key .pororoca/keys/public.key

• Pin the repository revision and Swift toolchain.
• Require review for production publish jobs.
• Retain the signed bundle as a CI artifact.
• Publish iOS and Android as separate bundles.

TROUBLESHOOTING

Read failures literally.