Poplist

GitHub repo — one time setup Cursor terminal

Open this file in Cursor. In the terminal panel:

git init git add . git commit -m "Initial commit — Poplist web preview" brew install gh && gh auth login gh repo create poplist-app --private --source=. --push

Daily workflow after changes:

git add . git commit -m "describe change" git push

Firebase project setup console.firebase.google.com

1. New project → poplist-prod
2. Authentication → Enable: Sign In with Apple + Email/Password
3. Firestore → Create database → Production mode
4. Paste the Firestore rules from the HTML comments below
5. App Check → Enable DeviceCheck for iOS
6. Upgrade to Blaze plan (free tier + pay-as-you-go)

Xcode project Cursor prompt

In Cursor, open a new iOS project folder and paste this prompt:

"Create a SwiftUI iOS app called Poplist. Data model: TaskItem(id, text, category, timing, style, colour, createdAt). Categories: Work, Home, Personal, Other. Use Firebase Auth (Sign In with Apple) and Firestore. Store tasks at /users/{uid}/tasks/{taskId}. Match the design tokens in CLAUDE.md exactly. Add App Check with DeviceCheck."

Xcode → Target → Signing & Capabilities → + Sign In with Apple
developer.apple.com → Certificates → your App ID → enable Sign In with Apple
Firebase Console → Auth → Apple → add your Service ID + OAuth callback URL

Security checklist Before shipping

☑ Never commit GoogleService-Info.plist to GitHub
☑ Firestore rules: auth-gated (see HTML comments)
☑ App Check: DeviceCheck enabled in Firebase Console
☑ Input validation before every Firestore write
☑ Get a second engineer to review auth + security logic

# .gitignore additions: GoogleService-Info.plist *.xcconfig .env

TestFlight → App Store Final step

Xcode → Product → Archive → Distribute → App Store Connect
In App Store Connect → TestFlight → add testers
Ask Cursor: "What do I need to prepare for App Store submission? Check my entire codebase."

What's on your mind?