@daemux/store-automator 0.10.72 → 0.10.74

package/.claude-plugin/marketplace.json

@@ -5,14 +5,14 @@
   },
   "metadata": {
     "description": "App Store & Google Play automation for Flutter apps",
-    "version": "0.10.72"
+    "version": "0.10.74"
   },
   "plugins": [
     {
       "name": "store-automator",
       "source": "./plugins/store-automator",
       "description": "3 agents for app store publishing: reviewer, meta-creator, media-designer",
-      "version": "0.10.72",
+      "version": "0.10.74",
       "keywords": [
         "flutter",
         "app-store",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@daemux/store-automator",
-  "version": "0.10.72",
+  "version": "0.10.74",
   "description": "Full App Store & Google Play automation for Flutter apps with Claude Code agents",
   "type": "module",
   "bin": {

package/plugins/store-automator/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "store-automator",
-  "version": "0.10.72",
+  "version": "0.10.74",
   "description": "App Store & Google Play automation agents for Flutter app publishing",
   "author": {
     "name": "Daemux"

package/templates/ci.config.yaml.template

@@ -57,3 +57,8 @@ web:
   jurisdiction: "State of California, United States"
   app_store_url: ""
   google_play_url: ""
+
+# -----------------------------------------------------------------------------
+# For native iOS apps (Swift/SwiftUI without Flutter), use
+# ios-native-ci.config.yaml.template instead of this file.
+# -----------------------------------------------------------------------------

package/templates/github/IOS_NATIVE_CI_SETUP.md

@@ -0,0 +1,80 @@
+# iOS Native TestFlight CI — Setup Guide
+
+Drop-in TestFlight automation for native Swift/SwiftUI iOS apps. One workflow, one config file, one credential file. All logic lives in the shared composite action `daemux/daemux-plugins/.github/actions/ios-native-testflight`.
+
+## Prerequisites
+
+- **Private GitHub repo** (holds the ASC API key `.p8` file).
+- **Apple Developer Program** membership with an App Store Connect user that can create API keys.
+- **ASC API Key** with `App Manager` role, downloaded as `AuthKey_<KEY_ID>.p8` (Apple lets you download this exactly once).
+- Xcode project builds locally on macOS 15 / Xcode 16.
+
+## Step 1 — Copy the workflow
+
+Copy `.github/workflows/deploy.yml` verbatim from this template. No edits required. It triggers on push to `main` and via `workflow_dispatch`.
+
+## Step 2 — Copy `ci.config.yaml`
+
+Copy `ios-native-ci.config.yaml.template` to your repo root as `ci.config.yaml`. Fill in:
+
+- `app.bundle_id` — REQUIRED (must match your App Store Connect app record).
+- `xcode.scheme` — REQUIRED (the shared scheme the CI should archive).
+
+Every other field has a sensible default. `xcode.project` auto-detects if there is exactly one `*.xcodeproj` at the repo root. `app.app_store_apple_id` is auto-discovered via the ASC API from the bundle id.
+
+## Step 3 — Drop in the ASC API key
+
+Rename the downloaded key to include both the key id and the issuer uuid, then put it under `creds/`:
+
+```
+creds/AuthKey_<KEY_ID>_Issuer_<ISSUER_UUID>.p8
+```
+
+Example: `creds/AuthKey_5NBDY6YXJ6_Issuer_69a6de77-xxxx-xxxx-xxxx-xxxxxxxxxxxx.p8`.
+
+The composite action parses the key id and issuer id from the filename — no GitHub secrets to configure.
+
+## Step 4 — Register the app in App Store Connect (one-time)
+
+App Store Connect requires a human-in-the-loop 2FA step the first time. Either:
+
+- Run `fastlane create_app_ios` locally with `APPLE_ID`, `BUNDLE_ID`, `APP_NAME` exported, or
+- Create the app manually in the App Store Connect web UI (My Apps → + → New App).
+
+Subsequent builds need neither — the ASC API key handles everything.
+
+## Step 5 — MARKETING_VERSION
+
+Leave your Xcode project's `MARKETING_VERSION` at `1.0` initially. CI auto-rolls the marketing version forward (patch bump) whenever the prior version hits `READY_FOR_SALE` in App Store Connect. Until then, the pipeline keeps bumping the build number against the current marketing version.
+
+## Step 6 — Push to `main`
+
+```bash
+git add .github/workflows/deploy.yml ci.config.yaml creds/AuthKey_*.p8
+git commit -m "ci: add iOS TestFlight pipeline"
+git push origin main
+```
+
+GitHub Actions triggers the workflow. On success, the build appears in TestFlight within 5–15 minutes (Apple processing delay).
+
+## Troubleshooting
+
+| Error | Likely Cause | Fix |
+|-------|--------------|-----|
+| `No ASC key found in creds/` | File missing or misnamed | Filename must match `AuthKey_<KEY_ID>_Issuer_<ISSUER_UUID>.p8` exactly |
+| `No ASC app found for bundle <id>` | App not yet registered in ASC | Run Step 4 (create the app record) |
+| `MARKETING_VERSION not set` | Missing in `.pbxproj` | Set `MARKETING_VERSION = 1.0;` in your target's build settings |
+| Apple refuses new version | Prior version not in `READY_FOR_SALE` | Let the existing version finish review, or manually bump `MARKETING_VERSION` in Xcode |
+| `Scheme not found` | Scheme not shared | In Xcode: Product → Scheme → Manage Schemes → tick "Shared", commit `*.xcscheme` |
+
+## Credential rotation
+
+ASC API keys can be revoked at any time. Rotate via:
+
+```bash
+rm creds/AuthKey_OLD*.p8
+cp ~/Downloads/AuthKey_NEW_*.p8 creds/AuthKey_NEW_Issuer_<ISSUER_UUID>.p8
+git add creds/
+git commit -m "ci: rotate ASC API key"
+git push
+```

package/templates/github/workflows/deploy.yml

@@ -0,0 +1,18 @@
+name: iOS Deploy
+on:
+  push:
+    branches: [main]
+    paths-ignore: ['**/*.md', '.gitignore']
+  workflow_dispatch:
+
+concurrency:
+  group: ios-deploy-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  deploy:
+    runs-on: macos-15
+    timeout-minutes: 60
+    steps:
+      - uses: actions/checkout@v4
+      - uses: daemux/daemux-plugins/.github/actions/ios-native-testflight@main

package/templates/ios-native-ci.config.yaml.template

@@ -0,0 +1,30 @@
+# iOS TestFlight CI configuration — read by daemux/daemux-plugins/.github/actions/ios-native-testflight
+# Place this at the repo root as ci.config.yaml.
+# Also place your ASC API key at creds/AuthKey_<KEY_ID>_Issuer_<ISSUER_UUID>.p8
+
+app:
+  bundle_id: "com.example.myapp"         # REQUIRED
+  team_id: "ABCDE12345"                  # optional (used for manual signing)
+  app_store_apple_id: ""                 # optional — auto-discovered via ASC API by bundle_id
+
+xcode:
+  project: ""                            # auto-detected if exactly one *.xcodeproj at root
+  workspace: ""                          # wins over project when set
+  scheme: "MyApp"                        # REQUIRED — no safe auto-detect
+  configuration: "Release"               # default: Release
+  profile_name: ""                       # default: "<scheme> CI"
+
+ios:
+  uses_non_exempt_encryption: false      # false | true | "" to skip write
+
+testflight:
+  whats_new: |
+    - Improved performance
+    - Bug fixes
+    - Enhanced security
+  locale: "en-US"
+
+ci:
+  run_tests: false
+  test_command: ""                       # optional
+  test_destination: "platform=iOS Simulator,name=iPhone 15"

package/templates/scripts/ci/ios-native/set_app_store_whats_new.py

@@ -0,0 +1,167 @@
+#!/usr/bin/env python3
+"""
+Set the App Store "What's New" text (appStoreVersionLocalizations.whatsNew) for
+the draft App Store version slot prepared by manage_marketing_version.py.
+
+Mirrors gowalk-step's `fastlane run set_changelog` behavior against the ASC
+REST API (no fastlane dependency here):
+
+  * Uses the pre-resolved APP_STORE_VERSION_ID env var from the
+    "Resolve App Store version slot" step -- no polling, no lookup by version.
+  * Skips the first release (1.0 / 1.0.0 / 0.0 / 0.0.0) -- there are no prior
+    release notes to announce.
+  * Skips when the slot is not in a state that permits editing whatsNew.
+  * Either PATCHes the existing localization for the requested locale or POSTs
+    a new one pointing at the appStoreVersion.
+
+Non-fatal by design: any failure is reported as a ::warning:: and the action
+continues. The TestFlight upload itself has already succeeded by this point.
+
+Environment:
+  ASC_KEY_ID, ASC_ISSUER_ID, ASC_KEY_PATH  -- App Store Connect API credentials
+  MARKETING_VERSION                        -- e.g. "1.2.3"
+  APP_STORE_VERSION_ID                     -- appStoreVersion id (REUSE or CREATE)
+  APP_STORE_WHATS_NEW                      -- release notes text (empty = skip)
+  APP_STORE_LOCALE                         -- locale code, default "en-US"
+"""
+
+from __future__ import annotations
+
+import os
+import sys
+
+from asc_common import get_json, make_jwt, request
+
+
+# gowalk-step parity: skip whatsNew for the initial release.
+SKIP_VERSIONS = {"1.0", "1.0.0", "0.0", "0.0.0"}
+
+# Apple permits editing appStoreVersionLocalizations.whatsNew only while the
+# version is in an editable state. WAITING_FOR_REVIEW / IN_REVIEW /
+# READY_FOR_SALE etc. are not editable -- skip non-fatally.
+WHATSNEW_EDITABLE_STATES = {
+    "PREPARE_FOR_SUBMISSION",
+    "REJECTED",
+    "METADATA_REJECTED",
+    "DEVELOPER_REJECTED",
+    "INVALID_BINARY",
+}
+
+
+def _require_env(name: str) -> str:
+    value = os.environ.get(name, "").strip()
+    if not value:
+        print(f"::error::{name} env var is required", file=sys.stderr)
+        raise SystemExit(1)
+    return value
+
+
+def _warn(msg: str) -> None:
+    print(f"::warning::{msg}", file=sys.stderr)
+
+
+def _log(msg: str) -> None:
+    print(msg, file=sys.stderr)
+
+
+def _patch_localization(token: str, localization_id: str, whats_new: str) -> None:
+    request(
+        "PATCH",
+        f"/appStoreVersionLocalizations/{localization_id}",
+        token,
+        json_body={
+            "data": {
+                "type": "appStoreVersionLocalizations",
+                "id": localization_id,
+                "attributes": {"whatsNew": whats_new},
+            }
+        },
+    )
+
+
+def _create_localization(
+    token: str, version_id: str, locale: str, whats_new: str
+) -> str:
+    resp = request(
+        "POST",
+        "/appStoreVersionLocalizations",
+        token,
+        json_body={
+            "data": {
+                "type": "appStoreVersionLocalizations",
+                "attributes": {"locale": locale, "whatsNew": whats_new},
+                "relationships": {
+                    "appStoreVersion": {
+                        "data": {"type": "appStoreVersions", "id": version_id}
+                    }
+                },
+            }
+        },
+    )
+    return resp.json()["data"]["id"]
+
+
+def main() -> int:
+    whats_new = os.environ.get("APP_STORE_WHATS_NEW", "")
+    if not whats_new.strip():
+        _log("APP_STORE_WHATS_NEW empty; skipping.")
+        return 0
+
+    version = _require_env("MARKETING_VERSION")
+    version_id = _require_env("APP_STORE_VERSION_ID")
+    locale = os.environ.get("APP_STORE_LOCALE", "").strip() or "en-US"
+
+    if version in SKIP_VERSIONS:
+        _log(f"Skipping whatsNew for first release {version}.")
+        return 0
+
+    token = make_jwt(
+        _require_env("ASC_KEY_ID"),
+        _require_env("ASC_ISSUER_ID"),
+        _require_env("ASC_KEY_PATH"),
+    )
+
+    ver = get_json(f"/appStoreVersions/{version_id}", token)
+    state = (ver.get("data") or {}).get("attributes", {}).get("appStoreState", "")
+    if state not in WHATSNEW_EDITABLE_STATES:
+        _warn(
+            f"appStoreVersion {version} is {state}; whatsNew not editable in "
+            f"this state, skipping."
+        )
+        return 0
+
+    locs = get_json(
+        f"/appStoreVersions/{version_id}/appStoreVersionLocalizations", token
+    )
+    existing = next(
+        (
+            item
+            for item in (locs.get("data") or [])
+            if (item.get("attributes") or {}).get("locale") == locale
+        ),
+        None,
+    )
+
+    if existing:
+        _patch_localization(token, existing["id"], whats_new)
+        _log(
+            f"PATCHed appStoreVersionLocalization {existing['id']} whatsNew "
+            f"for {version} ({locale})"
+        )
+    else:
+        new_id = _create_localization(token, version_id, locale, whats_new)
+        _log(
+            f"CREATEd appStoreVersionLocalization {new_id} whatsNew for "
+            f"{version} ({locale})"
+        )
+    return 0
+
+
+if __name__ == "__main__":
+    try:
+        sys.exit(main())
+    except SystemExit:
+        raise
+    except Exception as exc:  # non-fatal per gowalk-step's set_changelog parity
+        _warn(f"whatsNew setter failed (non-fatal): {exc!r}")
+        sys.exit(0)

package/templates/github/workflows/ios-native-release.yml

@@ -1,66 +0,0 @@
-name: iOS Deploy
-
-# Native-Swift iOS release pipeline. On PRs and non-main branches, runs the
-# simulator test suite (build-only, no signing). On push to main, runs tests,
-# archives the app, and uploads to TestFlight via the App Store Connect API.
-#
-# Required repository secrets (for upload, main branch only):
-#   ASC_KEY_ID      App Store Connect API key id (e.g. "5NBDY6YXJ6")
-#   ASC_ISSUER_ID   App Store Connect API issuer id (uuid)
-#   ASC_KEY_P8      Full contents of the AuthKey_*.p8 file
-#
-# Edit the `with:` blocks below to match your project.
-
-on:
-  push:
-    branches: [main]
-  pull_request:
-    branches: [main]
-  workflow_dispatch:
-
-concurrency:
-  group: ios-${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: false
-
-jobs:
-  # PRs and non-main pushes: build + test only, no signing or upload.
-  build-and-test:
-    if: ${{ github.event_name == 'pull_request' || (github.event_name == 'push' && github.ref != 'refs/heads/main') }}
-    runs-on: macos-latest
-    timeout-minutes: 45
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: daemux/daemux-plugins/.github/actions/ios-native-testflight@main
-        with:
-          project: MyApp.xcodeproj
-          scheme: MyApp
-          bundle-id: com.example.myapp
-          team-id: ABCDE12345
-          app-store-apple-id: "1234567890"
-          run-tests: "true"
-          archive: "false"
-          upload: "false"
-
-  # Main branch: test + archive + upload to TestFlight.
-  deploy:
-    if: ${{ github.event_name == 'workflow_dispatch' || (github.event_name == 'push' && github.ref == 'refs/heads/main') }}
-    runs-on: macos-latest
-    timeout-minutes: 60
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: daemux/daemux-plugins/.github/actions/ios-native-testflight@main
-        with:
-          project: MyApp.xcodeproj
-          scheme: MyApp
-          bundle-id: com.example.myapp
-          team-id: ABCDE12345
-          app-store-apple-id: "1234567890"
-          run-tests: "true"
-          archive: "true"
-          upload: "true"
-        env:
-          ASC_KEY_ID: ${{ secrets.ASC_KEY_ID }}
-          ASC_ISSUER_ID: ${{ secrets.ASC_ISSUER_ID }}
-          ASC_KEY_P8: ${{ secrets.ASC_KEY_P8 }}

package/templates/scripts/ci/ios-native/set_testflight_whats_new.py

@@ -1,146 +0,0 @@
-#!/usr/bin/env python3
-"""
-Set TestFlight "What to Test" (betaBuildLocalization.whatsNew) for the build
-just uploaded by this workflow.
-
-Runs after the altool upload step. Polls ASC until the build record appears
-(altool upload returns before Apple has fully ingested the build), then either
-PATCHes an existing betaBuildLocalization for the requested locale or POSTs a
-new one.
-
-Environment:
-  ASC_KEY_ID, ASC_ISSUER_ID, ASC_KEY_PATH  -- App Store Connect API credentials
-  APP_STORE_APPLE_ID                       -- numeric ASC app id
-  MARKETING_VERSION                        -- e.g. "1.2.3"
-  BUILD_NUMBER                             -- e.g. "42"
-  TESTFLIGHT_WHATS_NEW                     -- release notes text (empty = skip)
-  TESTFLIGHT_LOCALE                        -- locale code, default "en-US"
-
-Non-fatal by design: if the build can't be found within the polling window we
-emit a ::warning:: and exit 0, since the TestFlight upload itself may still
-have succeeded.
-"""
-
-from __future__ import annotations
-
-import os
-import sys
-import time
-
-from asc_common import get_json, make_jwt, request
-
-
-POLL_ATTEMPTS = 20
-POLL_FIRST_DELAY = 10
-POLL_DELAY = 30
-
-
-def _require_env(name: str) -> str:
-    value = os.environ.get(name, "").strip()
-    if not value:
-        print(f"::error::{name} env var is required", file=sys.stderr)
-        raise SystemExit(1)
-    return value
-
-
-def _find_build(token: str, app_id: str, marketing_version: str, build_number: str) -> str | None:
-    """Return the build id matching (marketing_version, build_number), or None."""
-    params = {
-        "filter[app]": app_id,
-        "filter[preReleaseVersion.version]": marketing_version,
-        "filter[version]": build_number,
-        "limit": "5",
-    }
-    data = get_json("/builds", token, params=params)
-    items = data.get("data") or []
-    return items[0].get("id") if items else None
-
-
-def _poll_for_build(token: str, app_id: str, marketing_version: str, build_number: str) -> str | None:
-    """Poll ASC for the uploaded build. Returns build id or None on timeout."""
-    for attempt in range(POLL_ATTEMPTS):
-        delay = POLL_FIRST_DELAY if attempt == 0 else POLL_DELAY
-        print(
-            f"Waiting {delay}s for build {marketing_version} ({build_number}) to appear "
-            f"(attempt {attempt + 1}/{POLL_ATTEMPTS})",
-            file=sys.stderr,
-        )
-        time.sleep(delay)
-        build_id = _find_build(token, app_id, marketing_version, build_number)
-        if build_id:
-            print(f"Found build id {build_id}", file=sys.stderr)
-            return build_id
-    return None
-
-
-def _existing_localization(token: str, build_id: str, locale: str) -> str | None:
-    """Return the betaBuildLocalization id for `locale` on this build, or None."""
-    data = get_json(f"/builds/{build_id}/betaBuildLocalizations", token)
-    for item in data.get("data") or []:
-        if (item.get("attributes") or {}).get("locale") == locale:
-            return item.get("id")
-    return None
-
-
-def _patch_localization(token: str, localization_id: str, whats_new: str) -> None:
-    body = {
-        "data": {
-            "type": "betaBuildLocalizations",
-            "id": localization_id,
-            "attributes": {"whatsNew": whats_new},
-        }
-    }
-    request("PATCH", f"/betaBuildLocalizations/{localization_id}", token, json_body=body)
-
-
-def _create_localization(token: str, build_id: str, locale: str, whats_new: str) -> None:
-    body = {
-        "data": {
-            "type": "betaBuildLocalizations",
-            "attributes": {"locale": locale, "whatsNew": whats_new},
-            "relationships": {
-                "build": {"data": {"type": "builds", "id": build_id}},
-            },
-        }
-    }
-    request("POST", "/betaBuildLocalizations", token, json_body=body)
-
-
-def main() -> int:
-    whats_new = os.environ.get("TESTFLIGHT_WHATS_NEW", "")
-    if not whats_new.strip():
-        print("empty whatsNew; skipping", file=sys.stderr)
-        return 0
-
-    key_id = _require_env("ASC_KEY_ID")
-    issuer_id = _require_env("ASC_ISSUER_ID")
-    key_path = _require_env("ASC_KEY_PATH")
-    app_id = _require_env("APP_STORE_APPLE_ID")
-    marketing_version = _require_env("MARKETING_VERSION")
-    build_number = _require_env("BUILD_NUMBER")
-    locale = os.environ.get("TESTFLIGHT_LOCALE", "").strip() or "en-US"
-
-    token = make_jwt(key_id, issuer_id, key_path)
-
-    build_id = _poll_for_build(token, app_id, marketing_version, build_number)
-    if not build_id:
-        print(
-            f"::warning::build {marketing_version} ({build_number}) not found in ASC "
-            f"after {POLL_ATTEMPTS} polls; skipping whatsNew update",
-            file=sys.stderr,
-        )
-        return 0
-
-    existing = _existing_localization(token, build_id, locale)
-    if existing:
-        _patch_localization(token, existing, whats_new)
-        action = "updated"
-    else:
-        _create_localization(token, build_id, locale, whats_new)
-        action = "created"
-    print(f"Set betaBuildLocalization whatsNew for build {build_id} locale {locale} ({action})")
-    return 0
-
-
-if __name__ == "__main__":
-    sys.exit(main())