@daemux/store-automator 0.1.0

package/templates/codemagic.template.yaml

@@ -0,0 +1,289 @@
+workflows:
+  ios-release:
+    name: iOS Release
+    max_build_duration: 90
+    instance_type: mac_mini_m2
+    environment:
+      flutter: stable
+      xcode: latest
+      vars:
+        BUNDLE_ID: "${BUNDLE_ID}"
+        APP_NAME: "${APP_NAME}"
+        SKU: "${SKU}"
+        APPLE_ID: "${APPLE_ID}"
+        P8_KEY_PATH: "${P8_KEY_PATH}"
+        APPLE_KEY_ID: "${APPLE_KEY_ID}"
+        APPLE_ISSUER_ID: "${APPLE_ISSUER_ID}"
+        PRIMARY_CATEGORY: "${PRIMARY_CATEGORY}"
+        SECONDARY_CATEGORY: "${SECONDARY_CATEGORY}"
+        PRICE_TIER: "${PRICE_TIER}"
+        SUBMIT_FOR_REVIEW: "${SUBMIT_FOR_REVIEW}"
+        AUTOMATIC_RELEASE: "${AUTOMATIC_RELEASE}"
+      ios_signing:
+        distribution_type: app_store
+        bundle_identifier: "${BUNDLE_ID}"
+    cache:
+      cache_paths:
+        - $HOME/.codemagic_keys
+        - $HOME/.gem
+        - ios/vendor/bundle
+    triggering:
+      events:
+        - push
+      branch_patterns:
+        - pattern: main
+          include: true
+    scripts:
+      - name: Ensure CERTIFICATE_PRIVATE_KEY
+        script: |
+          KEY_FILE="$HOME/.codemagic_keys/ios_dist_private_key"
+          mkdir -p "$HOME/.codemagic_keys"
+          if [ -f "$KEY_FILE" ]; then
+            echo "Reusing cached CERTIFICATE_PRIVATE_KEY"
+          else
+            echo "Generating new CERTIFICATE_PRIVATE_KEY"
+            ssh-keygen -t rsa -b 2048 -m PEM -f "$KEY_FILE" -q -N ""
+          fi
+          echo "CERTIFICATE_PRIVATE_KEY<<DELIMITER" >> $CM_ENV
+          cat "$KEY_FILE" >> $CM_ENV
+          echo "DELIMITER" >> $CM_ENV
+
+      - name: Set up App Store Connect API key
+        script: |
+          echo "APP_STORE_CONNECT_KEY_IDENTIFIER=$APPLE_KEY_ID" >> $CM_ENV
+          echo "APP_STORE_CONNECT_ISSUER_ID=$APPLE_ISSUER_ID" >> $CM_ENV
+          echo "APP_STORE_CONNECT_PRIVATE_KEY<<KEYDELIMITER" >> $CM_ENV
+          cat "$CM_BUILD_DIR/$P8_KEY_PATH" >> $CM_ENV
+          echo "KEYDELIMITER" >> $CM_ENV
+
+      - name: Set up iOS code signing
+        script: |
+          app-store-connect fetch-signing-files "$BUNDLE_ID" \
+            --type IOS_APP_STORE --create
+          keychain initialize
+          app-store-connect certificates list \
+            --type IOS_DISTRIBUTION \
+            --certificate-key=@env:CERTIFICATE_PRIVATE_KEY --save
+          keychain add-certificates
+          xcode-project use-profiles
+
+      - name: Manage iOS version
+        script: |
+          pip3 install PyJWT cryptography requests
+          VERSION_JSON=$(python3 scripts/manage_version_ios.py)
+          APP_VERSION=$(echo "$VERSION_JSON" | python3 -c "import sys,json; print(json.load(sys.stdin)['version'])")
+          APP_VERSION_ID=$(echo "$VERSION_JSON" | python3 -c "import sys,json; print(json.load(sys.stdin)['version_id'])")
+          APP_STATUS=$(echo "$VERSION_JSON" | python3 -c "import sys,json; print(json.load(sys.stdin)['state'])")
+          echo "APP_VERSION=$APP_VERSION" >> $CM_ENV
+          echo "APP_VERSION_ID=$APP_VERSION_ID" >> $CM_ENV
+          echo "APP_STATUS=$APP_STATUS" >> $CM_ENV
+          echo "iOS version: $APP_VERSION (state: $APP_STATUS)"
+
+      - name: Set Flutter version
+        script: |
+          BUILD_NUMBER=$(($(app-store-connect get-latest-app-store-build-number "$BUNDLE_ID" 2>/dev/null || echo "0") + 1))
+          sed -i '' "s/^version:.*/version: ${APP_VERSION}+${BUILD_NUMBER}/" pubspec.yaml
+          echo "Building: $APP_VERSION+$BUILD_NUMBER"
+
+      - name: Flutter packages
+        script: flutter pub get
+
+      - name: Build iOS
+        script: flutter build ipa --release --export-options-plist=/tmp/export.plist
+
+      - name: Install Fastlane
+        script: |
+          cd ios
+          gem install bundler
+          bundle install
+
+      - name: Create app record (idempotent)
+        script: |
+          cd ios
+          bundle exec fastlane produce create \
+            -u "$APPLE_ID" \
+            -a "$BUNDLE_ID" \
+            --app_name "$APP_NAME" \
+            --sku "$SKU" \
+            || true
+
+      - name: Deploy to App Store
+        script: |
+          cd ios
+          bundle exec fastlane deploy_ios
+
+      - name: Sync IAP and subscriptions
+        script: |
+          if ./scripts/check_changed.sh fastlane/iap_config.json; then
+            cd ios
+            bundle exec fastlane sync_iap
+          else
+            echo "IAP config unchanged - skipping"
+          fi
+
+    artifacts:
+      - build/ios/ipa/*.ipa
+      - /tmp/xcodebuild_logs/*.log
+
+  android-release:
+    name: Android Release
+    max_build_duration: 60
+    instance_type: mac_mini_m2
+    environment:
+      flutter: stable
+      vars:
+        PACKAGE_NAME: "${PACKAGE_NAME}"
+        APP_NAME: "${APP_NAME}"
+        BUNDLE_ID: "${BUNDLE_ID}"
+        GOOGLE_SA_JSON_PATH: "${GOOGLE_SA_JSON_PATH}"
+        KEYSTORE_PASSWORD: "${KEYSTORE_PASSWORD}"
+        TRACK: "${TRACK}"
+        ROLLOUT_FRACTION: "${ROLLOUT_FRACTION}"
+        IN_APP_UPDATE_PRIORITY: "${IN_APP_UPDATE_PRIORITY}"
+        APPLE_KEY_ID: "${APPLE_KEY_ID}"
+        APPLE_ISSUER_ID: "${APPLE_ISSUER_ID}"
+        P8_KEY_PATH: "${P8_KEY_PATH}"
+    cache:
+      cache_paths:
+        - $HOME/.gem
+        - $HOME/.gradle/caches
+        - android/vendor/bundle
+    triggering:
+      events:
+        - push
+      branch_patterns:
+        - pattern: main
+          include: true
+    scripts:
+      - name: Ensure Android upload keystore
+        script: |
+          KEYSTORE_PATH="$CM_BUILD_DIR/android/upload.keystore"
+          if [ -f "$KEYSTORE_PATH" ]; then
+            echo "Using existing upload keystore from repo"
+          else
+            echo "Generating new upload keystore..."
+            keytool -genkey -v \
+              -keystore "$KEYSTORE_PATH" \
+              -storetype JKS \
+              -keyalg RSA \
+              -keysize 2048 \
+              -validity 10000 \
+              -alias upload \
+              -storepass "$KEYSTORE_PASSWORD" \
+              -keypass "$KEYSTORE_PASSWORD" \
+              -dname "CN=Upload Key, O=Developer, C=US"
+            cd "$CM_BUILD_DIR"
+            git add android/upload.keystore
+            git commit -m "chore: add Android upload keystore [skip ci]"
+            git push origin HEAD
+            echo "Upload keystore generated and committed to repo"
+          fi
+          echo "CM_KEYSTORE_PATH=$KEYSTORE_PATH" >> $CM_ENV
+          echo "CM_KEYSTORE_PASSWORD=$KEYSTORE_PASSWORD" >> $CM_ENV
+          echo "CM_KEY_ALIAS=upload" >> $CM_ENV
+          echo "CM_KEY_PASSWORD=$KEYSTORE_PASSWORD" >> $CM_ENV
+
+      - name: Check Google Play readiness
+        script: |
+          echo "Checking Google Play setup status..."
+          pip3 install PyJWT cryptography requests
+          export SA_JSON="$CM_BUILD_DIR/$GOOGLE_SA_JSON_PATH"
+          export PACKAGE_NAME="$PACKAGE_NAME"
+          RESULT=$(python3 scripts/check_google_play.py)
+          READY=$(echo "$RESULT" | python3 -c "import sys,json; print(str(json.load(sys.stdin)['ready']).lower())")
+          if [ "$READY" != "true" ]; then
+            echo "GOOGLE_PLAY_READY=false" >> $CM_ENV
+            MISSING_STEPS=$(echo "$RESULT" | python3 -c "import sys,json; print('\n'.join(json.load(sys.stdin)['missing_steps']))")
+            cat > $CM_BUILD_DIR/HOW_TO_GOOGLE_PLAY.md << GUIDE
+          # Google Play Setup - Remaining Manual Steps
+
+          Your Android AAB is in the build artifacts. Complete these steps, then push again:
+
+          $MISSING_STEPS
+
+          ## After completing all steps:
+          Just \`git push\` again - Codemagic will publish automatically.
+          GUIDE
+            echo "Google Play not ready - see HOW_TO_GOOGLE_PLAY.md in artifacts"
+          else
+            echo "GOOGLE_PLAY_READY=true" >> $CM_ENV
+            echo "Google Play ready for automated publishing"
+          fi
+
+      - name: Manage Android version
+        script: |
+          # Read iOS version for consistency (if iOS workflow ran)
+          pip3 install PyJWT cryptography requests
+          echo "APP_STORE_CONNECT_KEY_IDENTIFIER=$APPLE_KEY_ID" >> $CM_ENV
+          echo "APP_STORE_CONNECT_ISSUER_ID=$APPLE_ISSUER_ID" >> $CM_ENV
+          echo "APP_STORE_CONNECT_PRIVATE_KEY<<KEYDELIMITER" >> $CM_ENV
+          cat "$CM_BUILD_DIR/$P8_KEY_PATH" >> $CM_ENV
+          echo "KEYDELIMITER" >> $CM_ENV
+          VERSION_JSON=$(python3 scripts/manage_version_ios.py)
+          APP_VERSION=$(echo "$VERSION_JSON" | python3 -c "import sys,json; print(json.load(sys.stdin)['version'])")
+          echo "APP_VERSION=$APP_VERSION" >> $CM_ENV
+          if [ "$GOOGLE_PLAY_READY" != "true" ]; then
+            LATEST_BUILD=0
+          else
+            LATEST_BUILD=$(google-play get-latest-build-number \
+              --package-name "$PACKAGE_NAME" \
+              --tracks=production,beta,alpha,internal 2>/dev/null || echo "0")
+          fi
+          NEW_BUILD=$(($LATEST_BUILD + 1))
+          sed -i '' "s/^version:.*/version: ${APP_VERSION}+${NEW_BUILD}/" pubspec.yaml
+          echo "ANDROID_VERSION_CODE=$NEW_BUILD" >> $CM_ENV
+          echo "Android versionCode: $NEW_BUILD, versionName: $APP_VERSION"
+
+      - name: Flutter packages
+        script: flutter pub get
+
+      - name: Build Android
+        script: flutter build appbundle --release
+
+      - name: Install Fastlane
+        script: |
+          cd android
+          gem install bundler
+          bundle install
+
+      - name: Deploy to Google Play
+        script: |
+          if [ "$GOOGLE_PLAY_READY" != "true" ]; then
+            echo "Skipping - Google Play setup incomplete"
+            exit 0
+          fi
+          export GOOGLE_PLAY_SERVICE_ACCOUNT_JSON_PATH="$CM_BUILD_DIR/$GOOGLE_SA_JSON_PATH"
+          cd android
+          bundle exec fastlane deploy_android
+
+      - name: Sync subscriptions and IAP
+        script: |
+          if [ "$GOOGLE_PLAY_READY" != "true" ]; then
+            echo "Skipping - Google Play setup incomplete"
+            exit 0
+          fi
+          if ./scripts/check_changed.sh fastlane/iap_config.json; then
+            export GOOGLE_PLAY_SERVICE_ACCOUNT_JSON_PATH="$CM_BUILD_DIR/$GOOGLE_SA_JSON_PATH"
+            cd android
+            bundle exec fastlane sync_google_iap
+          else
+            echo "IAP config unchanged - skipping"
+          fi
+
+      - name: Update data safety form
+        script: |
+          if [ "$GOOGLE_PLAY_READY" != "true" ]; then
+            echo "Skipping - Google Play setup incomplete"
+            exit 0
+          fi
+          if ./scripts/check_changed.sh fastlane/data_safety.csv; then
+            export GOOGLE_PLAY_SERVICE_ACCOUNT_JSON_PATH="$CM_BUILD_DIR/$GOOGLE_SA_JSON_PATH"
+            cd android
+            bundle exec fastlane update_data_safety
+          else
+            echo "Data safety unchanged - skipping"
+          fi
+
+    artifacts:
+      - build/app/outputs/**/*.aab
+      - $CM_BUILD_DIR/HOW_TO_GOOGLE_PLAY.md

package/templates/fastlane/android/Appfile.template

@@ -0,0 +1,2 @@
+package_name ENV["PACKAGE_NAME"]
+json_key_file ENV["GOOGLE_PLAY_SERVICE_ACCOUNT_JSON_PATH"]

package/templates/fastlane/android/Fastfile.template

@@ -0,0 +1,36 @@
+default_platform(:android)
+
+def metadata_changed?(path)
+  !sh("git diff --name-only HEAD~1 -- #{path}").strip.empty?
+rescue StandardError
+  true
+end
+
+platform :android do
+  lane :deploy_android do
+    upload_to_play_store(
+      aab: "../build/app/outputs/bundle/release/app-release.aab",
+      track: ENV.fetch("TRACK", "internal"),
+      json_key: ENV["GOOGLE_PLAY_SERVICE_ACCOUNT_JSON_PATH"],
+      skip_upload_metadata: !metadata_changed?("fastlane/metadata/android/"),
+      skip_upload_screenshots: !metadata_changed?("fastlane/screenshots/android/"),
+      skip_upload_images: !metadata_changed?("fastlane/screenshots/android/"),
+      skip_upload_changelogs: false,
+      metadata_path: "../fastlane/metadata/android",
+      rollout: ENV.fetch("ROLLOUT_FRACTION", "").empty? ? nil : ENV["ROLLOUT_FRACTION"].to_f,
+      in_app_update_priority: ENV.fetch("IN_APP_UPDATE_PRIORITY", "3").to_i
+    )
+  end
+
+  lane :sync_google_iap do
+    manage_google_iap(
+      json_key: ENV["GOOGLE_PLAY_SERVICE_ACCOUNT_JSON_PATH"],
+      package_name: ENV["PACKAGE_NAME"],
+      config_path: "../fastlane/iap_config.json"
+    )
+  end
+
+  lane :update_data_safety do
+    sh("python3", "../scripts/update_data_safety.py") if File.exist?("../fastlane/data_safety.csv")
+  end
+end

package/templates/fastlane/android/Pluginfile.template

@@ -0,0 +1 @@
+gem "fastlane-plugin-iap", git: "https://github.com/daemux/fastlane-plugin-iap"

package/templates/fastlane/app_rating_config.json.template

@@ -0,0 +1,17 @@
+{
+  "alcoholTobaccoOrDrugUseOrReferences": "NONE",
+  "contests": "NONE",
+  "gamblingSimulated": "NONE",
+  "medicalOrTreatmentInformation": "NONE",
+  "profanityOrCrudeHumor": "NONE",
+  "sexualContentGraphicAndNudity": "NONE",
+  "sexualContentOrNudity": "NONE",
+  "horrorOrFearThemes": "NONE",
+  "matureOrSuggestiveThemes": "NONE",
+  "unrestrictedWebAccess": false,
+  "violenceCartoonOrFantasy": "NONE",
+  "violenceRealisticProlongedGraphicOrSadistic": "NONE",
+  "violenceRealistic": "NONE",
+  "gamblingAndContests": false,
+  "seventeenPlus": false
+}

package/templates/fastlane/iap_config.json.template

@@ -0,0 +1,53 @@
+{
+  "subscription_groups": [
+    {
+      "reference_name": "Premium",
+      "localizations": {
+        "en-US": { "name": "Premium", "custom_name": "Premium Plans" }
+      },
+      "subscriptions": [
+        {
+          "product_id": "${BUNDLE_ID}.premium.monthly",
+          "reference_name": "Premium Monthly",
+          "duration": "ONE_MONTH",
+          "group_level": 1,
+          "localizations": {
+            "en-US": {
+              "name": "Monthly",
+              "description": "Full access, billed monthly"
+            }
+          },
+          "prices": {
+            "USD": "9.99"
+          },
+          "introductory_offer": {
+            "type": "FREE",
+            "duration": "ONE_WEEK",
+            "periods": 1
+          }
+        },
+        {
+          "product_id": "${BUNDLE_ID}.premium.yearly",
+          "reference_name": "Premium Yearly",
+          "duration": "ONE_YEAR",
+          "group_level": 1,
+          "localizations": {
+            "en-US": {
+              "name": "Yearly",
+              "description": "Full access, billed yearly"
+            }
+          },
+          "prices": {
+            "USD": "69.99"
+          },
+          "introductory_offer": {
+            "type": "FREE",
+            "duration": "ONE_MONTH",
+            "periods": 1
+          }
+        }
+      ]
+    }
+  ],
+  "in_app_purchases": []
+}

package/templates/fastlane/ios/Appfile.template

@@ -0,0 +1,2 @@
+app_identifier ENV["BUNDLE_ID"]
+apple_id ENV["APPLE_ID"]

package/templates/fastlane/ios/Deliverfile.template

@@ -0,0 +1 @@
+app_identifier ENV["BUNDLE_ID"]

package/templates/fastlane/ios/Fastfile.template

@@ -0,0 +1,47 @@
+default_platform(:ios)
+
+def metadata_changed?(path)
+  !sh("git diff --name-only HEAD~1 -- #{path}").strip.empty?
+rescue StandardError
+  true
+end
+
+def asc_api_key
+  app_store_connect_api_key(
+    key_id: ENV["APP_STORE_CONNECT_KEY_IDENTIFIER"],
+    issuer_id: ENV["APP_STORE_CONNECT_ISSUER_ID"],
+    key_content: ENV["APP_STORE_CONNECT_PRIVATE_KEY"],
+    is_key_content_base64: false
+  )
+end
+
+platform :ios do
+  lane :deploy_ios do
+    deliver(
+      api_key: asc_api_key,
+      ipa: "../build/ios/ipa/*.ipa",
+      skip_metadata: !metadata_changed?("fastlane/metadata/ios/"),
+      skip_screenshots: !metadata_changed?("fastlane/screenshots/ios/"),
+      sync_screenshots: true,
+      metadata_path: "../fastlane/metadata/ios",
+      screenshots_path: "../fastlane/screenshots/ios",
+      submit_for_review: ENV.fetch("SUBMIT_FOR_REVIEW", "true") == "true",
+      automatic_release: ENV.fetch("AUTOMATIC_RELEASE", "true") == "true",
+      force: true,
+      app_rating_config_path: "../fastlane/app_rating_config.json",
+      price_tier: ENV.fetch("PRICE_TIER", "0").to_i,
+      run_precheck_before_submit: true,
+      precheck_include_in_app_purchases: false,
+      primary_category: ENV.fetch("PRIMARY_CATEGORY", "UTILITIES"),
+      secondary_category: ENV.fetch("SECONDARY_CATEGORY", "PRODUCTIVITY")
+    )
+  end
+
+  lane :sync_iap do
+    manage_iap(
+      api_key: asc_api_key,
+      app_id: ENV["BUNDLE_ID"],
+      config_path: "../fastlane/iap_config.json"
+    )
+  end
+end

package/templates/fastlane/ios/Pluginfile.template

@@ -0,0 +1 @@
+gem "fastlane-plugin-iap", git: "https://github.com/daemux/fastlane-plugin-iap"

package/templates/fastlane/ios/Snapfile.template

@@ -0,0 +1,26 @@
+devices([
+  "iPhone 16 Pro Max",
+  "iPhone 16 Pro",
+  "iPad Pro 13-inch (M4)",
+  "iPad Pro 12.9-inch (6th generation)"
+])
+
+languages([
+  "en-US",
+  "ja",
+  "de-DE",
+  "fr-FR",
+  "es-ES",
+  "pt-BR",
+  "zh-Hans",
+  "zh-Hant",
+  "ko",
+  "ru",
+  "ar-SA",
+  "hi"
+])
+
+scheme(ENV.fetch("APP_SCHEME", "Runner"))
+output_directory("../fastlane/screenshots/ios")
+clear_previous_screenshots(false)
+concurrent_simulators(true)

package/templates/scripts/check_changed.sh

@@ -0,0 +1,23 @@
+#!/bin/bash
+# Usage: ./scripts/check_changed.sh <path>
+# Exit 0 if changed, exit 1 if unchanged
+# Used by codemagic.yaml for conditional metadata/screenshot uploads
+
+set -euo pipefail
+
+PATH_TO_CHECK="${1:-}"
+
+if [ -z "$PATH_TO_CHECK" ]; then
+  echo "Usage: $0 <path>"
+  echo "  Exit 0 if path has changes since last commit"
+  echo "  Exit 1 if path is unchanged"
+  exit 2
+fi
+
+if git diff --name-only HEAD~1 -- "$PATH_TO_CHECK" | grep -q .; then
+  echo "CHANGED: $PATH_TO_CHECK"
+  exit 0
+else
+  echo "UNCHANGED: $PATH_TO_CHECK"
+  exit 1
+fi

package/templates/scripts/check_google_play.py

@@ -0,0 +1,139 @@
+#!/usr/bin/env python3
+"""
+Check Google Play readiness for automated publishing.
+
+Reads a service account JSON file and verifies that the app exists on Google Play,
+has at least one uploaded bundle, and has completed track setup.
+
+Required env vars:
+  SA_JSON       - Path to Google service account JSON file
+  PACKAGE_NAME  - Android package name (e.g. com.example.app)
+
+Output:
+  Prints JSON with keys: ready (bool), missing_steps (list of strings)
+  Exit code 0 on success (even if not ready), non-zero on fatal error.
+"""
+import json
+import os
+import sys
+import time
+
+try:
+    import jwt
+    import requests
+except ImportError:
+    print("Installing dependencies...", file=sys.stderr)
+    import subprocess
+    subprocess.check_call(
+        [sys.executable, "-m", "pip", "install", "PyJWT", "cryptography", "requests"],
+        stdout=subprocess.DEVNULL,
+    )
+    import jwt
+    import requests
+
+API_BASE = "https://androidpublisher.googleapis.com/androidpublisher/v3/applications"
+TIMEOUT = (10, 30)
+
+
+def get_access_token(sa_path: str) -> str:
+    """Obtain an OAuth2 access token using the service account credentials."""
+    with open(sa_path, "r") as fh:
+        sa = json.load(fh)
+    now = int(time.time())
+    payload = {
+        "iss": sa["client_email"],
+        "scope": "https://www.googleapis.com/auth/androidpublisher",
+        "aud": "https://oauth2.googleapis.com/token",
+        "iat": now,
+        "exp": now + 3600,
+    }
+    signed = jwt.encode(payload, sa["private_key"], algorithm="RS256")
+    resp = requests.post(
+        "https://oauth2.googleapis.com/token",
+        data={
+            "grant_type": "urn:ietf:params:oauth:grant_type:jwt-bearer",
+            "assertion": signed,
+        },
+        timeout=TIMEOUT,
+    )
+    resp.raise_for_status()
+    return resp.json()["access_token"]
+
+
+def check_readiness(package_name: str, access_token: str) -> dict:
+    """Check whether the Google Play app is ready for automated publishing."""
+    headers = {"Authorization": f"Bearer {access_token}"}
+    missing_steps: list[str] = []
+
+    # Create an edit session
+    edit_resp = requests.post(
+        f"{API_BASE}/{package_name}/edits",
+        headers={**headers, "Content-Type": "application/json"},
+        json={},
+        timeout=TIMEOUT,
+    )
+
+    if edit_resp.status_code == 404:
+        return {
+            "ready": False,
+            "missing_steps": ["1. CREATE APP: Go to Play Console > Create app"],
+        }
+
+    edit_resp.raise_for_status()
+    edit_id = edit_resp.json()["id"]
+
+    try:
+        # Check for uploaded bundles
+        bundles_resp = requests.get(
+            f"{API_BASE}/{package_name}/edits/{edit_id}/bundles",
+            headers=headers,
+            timeout=TIMEOUT,
+        )
+        bundles_resp.raise_for_status()
+        if not bundles_resp.json().get("bundles"):
+            missing_steps.append("2. UPLOAD FIRST AAB via Play Console")
+
+        # Check for track releases
+        tracks_resp = requests.get(
+            f"{API_BASE}/{package_name}/edits/{edit_id}/tracks",
+            headers=headers,
+            timeout=TIMEOUT,
+        )
+        tracks_resp.raise_for_status()
+        has_release = any(
+            release.get("versionCodes")
+            for track in tracks_resp.json().get("tracks", [])
+            for release in track.get("releases", [])
+        )
+        if not has_release:
+            missing_steps.append("3. COMPLETE SETUP: Content rating + pricing")
+    finally:
+        # Always clean up the edit
+        requests.delete(
+            f"{API_BASE}/{package_name}/edits/{edit_id}",
+            headers=headers,
+            timeout=TIMEOUT,
+        )
+
+    return {"ready": not missing_steps, "missing_steps": missing_steps}
+
+
+def main() -> None:
+    sa_json = os.environ.get("SA_JSON", "")
+    package_name = os.environ.get("PACKAGE_NAME", "")
+
+    if not sa_json or not package_name:
+        print("ERROR: SA_JSON and PACKAGE_NAME env vars are required", file=sys.stderr)
+        sys.exit(1)
+
+    if not os.path.isfile(sa_json):
+        print(f"ERROR: Service account file not found: {sa_json}", file=sys.stderr)
+        sys.exit(1)
+
+    access_token = get_access_token(sa_json)
+    result = check_readiness(package_name, access_token)
+    print(json.dumps(result))
+
+
+if __name__ == "__main__":
+    main()