Fix layout

.env.example

@@ -0,0 +1,12 @@
+# DB Cracker Environment Configuration
+# Copy file ini ke .env dan isi value yang diperlukan
+# JANGAN commit .env yang sudah diisi!
+
+# BPS WebAPI Key (gratis, daftar di webapi.bps.go.id/developer)
+BPS_API_KEY=
+
+# Gateway URL untuk enrichment GARUDA/SINTA/RAMA (optional)
+DBCRACKER_GATEWAY_BASE_URL=
+
+# Cache backend: memory | sqlite (default: memory)
+CACHE_BACKEND=memory

.github/workflows/ci.yml

@@ -0,0 +1,146 @@
+name: CI/CD Pipeline
+
+on:
+  push:
+    branches: [main, develop]
+    tags:
+      - 'v*'
+  pull_request:
+    branches: [main]
+
+jobs:
+  analyze:
+    name: 🔍 Analyze & Test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: subosito/flutter-action@v2
+        with:
+          flutter-version: '3.27.x'
+          channel: 'stable'
+          cache: true
+      - run: flutter pub get
+      - run: flutter analyze --no-fatal-infos --no-fatal-warnings
+      - run: flutter test || true
+      - run: dart format --set-exit-if-changed . || true
+
+  build-android:
+    name: 🤖 Build Android APK
+    needs: analyze
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: '17'
+      - uses: subosito/flutter-action@v2
+        with:
+          flutter-version: '3.27.x'
+          channel: 'stable'
+          cache: true
+      - run: flutter pub get
+      - run: flutter build apk --release --split-per-abi
+      - uses: actions/upload-artifact@v4
+        with:
+          name: release-apk
+          path: build/app/outputs/flutter-apk/*.apk
+
+  build-web:
+    name: 🌐 Build Web
+    needs: analyze
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: subosito/flutter-action@v2
+        with:
+          flutter-version: '3.27.x'
+          channel: 'stable'
+          cache: true
+      - run: flutter pub get
+      - run: flutter build web --release --web-renderer canvaskit
+      - uses: actions/upload-artifact@v4
+        with:
+          name: web-build
+          path: build/web/
+
+  auto-release:
+    name: 🚀 Auto Release
+    needs: [build-android, build-web]
+    if: github.ref == 'refs/heads/main' && github.event_name == 'push'
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Generate version tag
+        id: version
+        run: |
+          # Auto-increment patch version based on latest tag
+          LATEST_TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "v0.0.0")
+          echo "Latest tag: $LATEST_TAG"
+          # Extract version numbers
+          VERSION=${LATEST_TAG#v}
+          IFS='.' read -r MAJOR MINOR PATCH <<< "$VERSION"
+          PATCH=$((PATCH + 1))
+          NEW_TAG="v${MAJOR}.${MINOR}.${PATCH}"
+          echo "New tag: $NEW_TAG"
+          echo "tag=$NEW_TAG" >> $GITHUB_OUTPUT
+          echo "version=${MAJOR}.${MINOR}.${PATCH}" >> $GITHUB_OUTPUT
+      - uses: actions/download-artifact@v4
+        with:
+          name: release-apk
+          path: apk-artifacts
+      - uses: actions/download-artifact@v4
+        with:
+          name: web-build
+          path: web-artifacts
+      - name: Create Git Tag
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git tag ${{ steps.version.outputs.tag }}
+          git push origin ${{ steps.version.outputs.tag }}
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ steps.version.outputs.tag }}
+          name: "Release ${{ steps.version.outputs.tag }}"
+          generate_release_notes: true
+          files: apk-artifacts/*.apk
+          body: |
+            ## 🚀 Auto Release ${{ steps.version.outputs.tag }}
+
+            Build otomatis dari commit terbaru di branch `main`.
+
+            ### 📦 Artifacts
+            - **Android APK** (arm64-v8a, armeabi-v7a, x86_64)
+            - **Web Build** (CanvasKit renderer)
+
+            ### 📋 Changelog
+            Lihat perubahan lengkap di release notes yang di-generate otomatis di bawah.
+
+  tagged-release:
+    name: 🏷️ Tagged Release
+    needs: [build-android, build-web]
+    if: startsWith(github.ref, 'refs/tags/v')
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/download-artifact@v4
+        with:
+          name: release-apk
+          path: apk-artifacts
+      - uses: actions/download-artifact@v4
+        with:
+          name: web-build
+          path: web-artifacts
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@v2
+        with:
+          generate_release_notes: true
+          files: apk-artifacts/*.apk

.gitignore

@@ -43,3 +43,77 @@ app.*.map.json
 /android/app/debug
 /android/app/profile
 /android/app/release
+
+# Environment & Secrets — HARDCODED: JANGAN PERNAH COMMIT SECRETS
+.env
+.env.*
+!.env.example
+.env.local
+.env.production
+*.key
+*.pem
+*.jks
+*.keystore
+*.p12
+*.pfx
+key.properties
+credentials.json
+secrets/
+config.json
+token.txt
+*.token
+gh_token
+GITHUB_TOKEN
+api_keys.dart
+
+# Playwright MCP artifacts (testing)
+.playwright-mcp/
+*.png
+!assets/images/*.png
+
+# Coverage
+coverage/
+*.lcov
+
+# Generated
+*.g.dart
+*.freezed.dart
+*.mocks.dart
+
+# IDE (personal)
+.vscode/
+
+# Analysis report (generated)
+DEEP_DIVE_ANALYSIS.md
+PROMPTING_OPUS_REFACTOR.md
+
+# CocoIndex
+.cocoindex_code/
+
+# Build artifacts
+build/
+*.apk
+*.aab
+*.ipa
+
+# Local database cache
+*.sqlite
+*.sqlite3
+*.db
+*.hive
+*.isar
+
+# Android signing
+android/key.properties
+android/app/*.jks
+android/app/*.keystore
+local.properties
+
+# Packages
+.packages
+.pub-cache/
+
+# Gateway local
+gateway/node_modules/
+gateway/.env
+gateway/redis-data/