fastlane-plugin-appstore_precheck 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: b6ff666c33d11e9de5fa7a86e07792dca8200c2104de91553939f9a2ce73da4f
+  data.tar.gz: c06fa42006b34cb39dc19a97c60c38f472af0cbc3c20b5cc0952b8cfd407b335
+SHA512:
+  metadata.gz: 8e7f8a474699c8aa263e58617ec0f73e09627d267bfab3101e9fdb1c101b44e41f28360c533252e1f47c8d71d117f5a876757b7b2ba391930bfb9a14bbdb072a
+  data.tar.gz: 4d6d9f2d80f50ea3924592cf402143e425093458bedc9a773fbf0911486a5eba496f775a89475b320ff3fd17886c03aba48f73f8b92f30e49b570bfba039d556

data/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Berkay Turk
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

data/README.md

@@ -0,0 +1,82 @@
+# fastlane-plugin-appstore_precheck
+
+[![License: MIT](https://img.shields.io/badge/license-MIT-green.svg)](LICENSE)
+
+Run [`appstore-precheck`](https://github.com/berkayturk/appstore-precheck) — a read-only iOS
+App Store pre-submission scan over 42 common rejection vectors — as a fastlane lane gate.
+GREEN passes, RED fails the lane before you waste an upload and a review cycle.
+
+## Getting started
+
+```bash
+fastlane add_plugin appstore_precheck
+```
+
+The plugin shells out to the `appstore-precheck` scanner. Install it once:
+
+```bash
+brew install berkayturk/tap/appstore-precheck   # or: npm i -g appstore-precheck
+```
+
+No install needed if `npx` is on PATH — the plugin falls back to `npx --yes appstore-precheck`.
+
+## Usage
+
+```ruby
+lane :beta do
+  appstore_precheck                 # fails the lane on a RED verdict
+  build_app
+  upload_to_testflight
+end
+```
+
+Options:
+
+```ruby
+appstore_precheck(
+  dir: '.',            # directory to scan (default: current directory)
+  fail_on: 'YELLOW',   # gate at RED (default) or YELLOW
+  fail_build: true,    # false: warn instead of raising, return the verdict
+  cli_path: '/opt/homebrew/bin/appstore-precheck' # explicit binary (optional)
+)
+```
+
+The action returns the verdict as a `String`, so you can route it:
+
+```ruby
+verdict = appstore_precheck(fail_build: false)
+slack(message: "Precheck verdict: #{verdict}") unless verdict == 'GREEN'
+```
+
+## What it checks
+
+42 static rejection vectors: Restore Purchases / Terms / Privacy on the paywall (3.1.2),
+tracking SDKs without ATT (5.1.2), purpose strings (5.1.1), privacy-manifest ↔ Required Reason
+API parity, account deletion (5.1.1(v)), metadata placeholders and length limits (2.1 / 2.3.1),
+export compliance, and more. Full list and methodology:
+[berkayturk/appstore-precheck](https://github.com/berkayturk/appstore-precheck).
+
+The scan is **read-only**, needs **no credentials and no network**, and never edits your files.
+Exit-code contract: `0` ok, `1` gate hit, `64` bad usage, `70` environment error.
+
+## Run tests for this plugin
+
+```bash
+ruby test/runner_test.rb   # dependency-free unit tests for the core logic
+bundle install && bundle exec rspec   # full action specs (needs fastlane)
+```
+
+## Issues and feedback
+
+For scanner findings (false positives, missing checks) file issues on the
+[main repo](https://github.com/berkayturk/appstore-precheck/issues). For plugin/action
+problems, use this repo's issues.
+
+## Using _fastlane_ Plugins
+
+For more information about how the fastlane plugin system works, check out the
+[Plugins documentation](https://docs.fastlane.tools/plugins/create-plugin/).
+
+## License
+
+[MIT](LICENSE) © Berkay Turk

data/lib/fastlane/plugin/appstore_precheck/actions/appstore_precheck_action.rb

@@ -0,0 +1,120 @@
+require 'fastlane/action'
+require 'open3'
+require_relative '../helper/appstore_precheck_runner'
+
+module Fastlane
+  module Actions
+    class AppstorePrecheckAction < Action
+      def self.run(params)
+        runner = Fastlane::AppstorePrecheck::Runner
+
+        unless runner.valid_fail_on?(params[:fail_on])
+          UI.user_error!("appstore_precheck: fail_on must be RED or YELLOW (got '#{params[:fail_on]}')")
+        end
+
+        command = runner.resolve_command(cli_path: params[:cli_path])
+        if command.nil?
+          UI.user_error!(
+            'appstore_precheck: scanner not found. Install it with ' \
+            '`brew install berkayturk/tap/appstore-precheck` or `npm i -g appstore-precheck`, ' \
+            'or pass cli_path.'
+          )
+        end
+
+        argv = command + ['--dir', params[:dir], '--fail-on', params[:fail_on].to_s.upcase]
+        UI.message("appstore_precheck: running #{argv.join(' ')}")
+
+        output, status = Open3.capture2e(*argv)
+        output.each_line { |line| UI.message(line.chomp) }
+
+        verdict = runner.parse_verdict(output)
+        UI.user_error!('appstore_precheck: scanner produced no verdict (see output above)') if verdict.nil?
+
+        # Exit codes: 0 ok, 1 gate hit, 64 bad usage, 70 environment error.
+        if !status.exitstatus.nil? && status.exitstatus > 1
+          UI.user_error!("appstore_precheck: scanner failed (exit #{status.exitstatus}, see output above)")
+        end
+
+        if runner.gate_hit?(verdict, params[:fail_on])
+          message = "appstore_precheck: verdict is #{verdict} (gate: #{params[:fail_on]}) — submission blocked"
+          if params[:fail_build]
+            UI.user_error!(message)
+          else
+            UI.important("#{message} (fail_build: false, continuing)")
+          end
+        else
+          UI.success("appstore_precheck: verdict is #{verdict} 🟢")
+        end
+
+        verdict
+      end
+
+      def self.description
+        'Read-only iOS App Store pre-submission scan (42 rejection vectors) as a lane gate'
+      end
+
+      def self.details
+        'Runs the appstore-precheck static scanner (https://github.com/berkayturk/appstore-precheck) ' \
+        'over the project and fails the lane when the GREEN/YELLOW/RED verdict is at or past fail_on. ' \
+        'The scan is read-only, needs no credentials, and never edits your files.'
+      end
+
+      def self.return_value
+        "The verdict as a String: 'GREEN', 'YELLOW', or 'RED'."
+      end
+
+      def self.authors
+        ['berkayturk']
+      end
+
+      def self.available_options
+        [
+          FastlaneCore::ConfigItem.new(
+            key: :dir,
+            env_name: 'APPSTORE_PRECHECK_DIR',
+            description: 'Directory to scan',
+            type: String,
+            default_value: '.'
+          ),
+          FastlaneCore::ConfigItem.new(
+            key: :fail_on,
+            env_name: 'APPSTORE_PRECHECK_FAIL_ON',
+            description: 'Fail the lane at RED (default) or YELLOW',
+            type: String,
+            default_value: 'RED'
+          ),
+          FastlaneCore::ConfigItem.new(
+            key: :fail_build,
+            env_name: 'APPSTORE_PRECHECK_FAIL_BUILD',
+            description: 'Raise when the gate is hit; set false to only warn and return the verdict',
+            type: Boolean,
+            default_value: true
+          ),
+          FastlaneCore::ConfigItem.new(
+            key: :cli_path,
+            env_name: 'APPSTORE_PRECHECK_CLI_PATH',
+            description: 'Explicit path to the appstore-precheck executable (default: PATH, then npx)',
+            type: String,
+            optional: true
+          )
+        ]
+      end
+
+      def self.example_code
+        [
+          'appstore_precheck',
+          "appstore_precheck(fail_on: 'YELLOW')",
+          "verdict = appstore_precheck(fail_build: false)\n    slack(message: \"Precheck verdict: \#{verdict}\") if verdict != 'GREEN'"
+        ]
+      end
+
+      def self.category
+        :testing
+      end
+
+      def self.is_supported?(platform)
+        [:ios, :mac].include?(platform)
+      end
+    end
+  end
+end

data/lib/fastlane/plugin/appstore_precheck/helper/appstore_precheck_runner.rb

@@ -0,0 +1,51 @@
+# Pure logic for the appstore_precheck action, kept free of fastlane
+# dependencies so it can be unit-tested with plain Ruby.
+module Fastlane
+  module AppstorePrecheck
+    module Runner
+      VERDICTS = %w[GREEN YELLOW RED].freeze
+      FAIL_ON_LEVELS = %w[RED YELLOW].freeze
+
+      module_function
+
+      # Resolve the scanner command as an argv array, or nil if none is available.
+      # Preference order: explicit cli_path, `appstore-precheck` on PATH
+      # (brew / npm -g), then `npx --yes appstore-precheck`.
+      def resolve_command(cli_path: nil, which: ->(bin) { system_which(bin) })
+        return [cli_path] if cli_path && !cli_path.to_s.empty?
+        return ['appstore-precheck'] if which.call('appstore-precheck')
+        return ['npx', '--yes', 'appstore-precheck'] if which.call('npx')
+
+        nil
+      end
+
+      def system_which(bin)
+        ENV.fetch('PATH', '').split(File::PATH_SEPARATOR).any? do |dir|
+          candidate = File.join(dir, bin)
+          File.executable?(candidate) && !File.directory?(candidate)
+        end
+      end
+
+      # Extract the verdict from scanner output; nil if absent.
+      def parse_verdict(output)
+        match = output.to_s.match(/^VERDICT:\s*(GREEN|YELLOW|RED)/)
+        match && match[1]
+      end
+
+      # True when the verdict is at or past the gate level.
+      def gate_hit?(verdict, fail_on)
+        return false unless VERDICTS.include?(verdict.to_s)
+
+        if fail_on.to_s.upcase == 'YELLOW'
+          verdict != 'GREEN'
+        else
+          verdict == 'RED'
+        end
+      end
+
+      def valid_fail_on?(level)
+        FAIL_ON_LEVELS.include?(level.to_s.upcase)
+      end
+    end
+  end
+end

data/lib/fastlane/plugin/appstore_precheck/version.rb

@@ -0,0 +1,5 @@
+module Fastlane
+  module AppstorePrecheck
+    VERSION = '0.1.0'.freeze
+  end
+end

data/lib/fastlane/plugin/appstore_precheck.rb

@@ -0,0 +1,16 @@
+require 'fastlane/plugin/appstore_precheck/version'
+
+module Fastlane
+  module AppstorePrecheck
+    # Return all .rb files inside the "actions" and "helper" directories
+    def self.all_classes
+      Dir[File.expand_path('**/{actions,helper}/*.rb', File.dirname(__FILE__))]
+    end
+  end
+end
+
+# By default we want to import all available actions and helpers
+# A plugin can contain any number of actions and plugins
+Fastlane::AppstorePrecheck.all_classes.each do |current|
+  require current
+end

metadata

@@ -0,0 +1,106 @@
+--- !ruby/object:Gem::Specification
+name: fastlane-plugin-appstore_precheck
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- Berkay Turk
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2026-07-08 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: fastlane
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.220.0
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.220.0
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+description: 
+email: berkaytrk6@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- LICENSE
+- README.md
+- lib/fastlane/plugin/appstore_precheck.rb
+- lib/fastlane/plugin/appstore_precheck/actions/appstore_precheck_action.rb
+- lib/fastlane/plugin/appstore_precheck/helper/appstore_precheck_runner.rb
+- lib/fastlane/plugin/appstore_precheck/version.rb
+homepage: https://github.com/berkayturk/fastlane-plugin-appstore_precheck
+licenses:
+- MIT
+metadata:
+  rubygems_mfa_required: 'true'
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '2.6'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.0.3.1
+signing_key: 
+specification_version: 4
+summary: Read-only iOS App Store pre-submission scan (42 rejection vectors) as a fastlane
+  lane gate
+test_files: []