@daemux/store-automator 0.7.1 → 0.9.0

package/.claude-plugin/marketplace.json

@@ -5,14 +5,14 @@
   },
   "metadata": {
     "description": "App Store & Google Play automation for Flutter apps",
-    "version": "0.7.1"
+    "version": "0.9.0"
   },
   "plugins": [
     {
       "name": "store-automator",
       "source": "./plugins/store-automator",
       "description": "3 agents for app store publishing: reviewer, meta-creator, media-designer",
-      "version": "0.7.1",
+      "version": "0.9.0",
       "keywords": ["flutter", "app-store", "google-play", "fastlane", "codemagic"]
     }
   ]

package/bin/cli.mjs

@@ -34,6 +34,8 @@ const valueFlags = {
   '--cloudflare-token=': 'cloudflareToken',
   '--cloudflare-account-id=': 'cloudflareAccountId',
   '--bundle-id=': 'bundleId',
+  '--match-deploy-key=': 'matchDeployKey',
+  '--match-git-url=': 'matchGitUrl',
 };
 
 for (const arg of args) {
@@ -42,15 +44,11 @@ for (const arg of args) {
   if ((v = flagValue(arg, '--branch=')) !== undefined) { cmBranch = v; continue; }
   if ((v = flagValue(arg, '--workflow=')) !== undefined) { cmWorkflowId = v; continue; }
 
-  let matched = false;
-  for (const [prefix, key] of Object.entries(valueFlags)) {
-    if ((v = flagValue(arg, prefix)) !== undefined) {
-      cliTokens[key] = v;
-      matched = true;
-      break;
-    }
+  const valueFlagEntry = Object.entries(valueFlags).find(([prefix]) => arg.startsWith(prefix));
+  if (valueFlagEntry) {
+    cliTokens[valueFlagEntry[1]] = arg.slice(valueFlagEntry[0].length);
+    continue;
   }
-  if (matched) continue;
 
   switch (arg) {
     case '-g':
@@ -70,6 +68,9 @@ for (const arg of args) {
     case '--github-setup':
       action = 'github-setup';
       break;
+    case '--github-actions':
+      cliTokens.githubActions = true;
+      break;
     case '--trigger':
       cmTrigger = true;
       break;
@@ -105,34 +106,57 @@ Codemagic:
   --trigger                      Trigger build after setup
   --wait                         Wait for build completion (implies --trigger)
 
+GitHub Actions CI mode:
+  --github-actions               Use GitHub Actions instead of Codemagic (skip MCP setup)
+  --match-deploy-key=PATH        Path to Match deploy key file (required with --github-actions)
+  --match-git-url=URL            Git URL for Match certificates repo (required with --github-actions)
+
 GitHub Actions (auto-configured during install if gh CLI available):
   --github-setup                 Set CM_API_TOKEN secret for GitHub Actions
   --token=TOKEN                  API token (or set CM_API_TOKEN env var)
 
 Examples:
-  npx @daemux/store-automator                          Install for project
+  npx @daemux/store-automator                          Install for project (Codemagic)
   npx @daemux/store-automator -g                       Install globally
   npx @daemux/store-automator -u                       Uninstall from project
   npx @daemux/store-automator -g -u                    Uninstall globally
   npx @daemux/store-automator --codemagic-setup        Register with Codemagic
   npx @daemux/store-automator --codemagic-setup --trigger --wait  Trigger and wait
-  npx @daemux/store-automator --github-setup           Configure GitHub Actions
+  npx @daemux/store-automator --github-setup           Configure GitHub Actions secret
+
+GitHub Actions install:
+  npx @daemux/store-automator --github-actions --bundle-id=ID --match-deploy-key=PATH --match-git-url=URL
 
-Non-interactive install (CI/CD):
-  npx @daemux/store-automator --bundle-id=com.company.app --codemagic-token=TOKEN --codemagic-team-id=ID --stitch-key=KEY
+Non-interactive install (Codemagic):
+  npx @daemux/store-automator --bundle-id=ID --codemagic-token=TOKEN --stitch-key=KEY
   npx @daemux/store-automator --cloudflare-token=TOKEN --cloudflare-account-id=ID`);
       process.exit(0);
-      break; // eslint: no-fallthrough
     case '-v':
     case '--version':
       console.log(pkg.version);
       process.exit(0);
-      break; // eslint: no-fallthrough
   }
 }
 
 if (cmWait) cmTrigger = true;
 
+if (cliTokens.githubActions) {
+  const missing = [];
+  if (!cliTokens.matchDeployKey) missing.push('--match-deploy-key');
+  if (!cliTokens.matchGitUrl) missing.push('--match-git-url');
+  if (!cliTokens.bundleId) missing.push('--bundle-id');
+  if (missing.length > 0) {
+    console.error(`Error: --github-actions requires: ${missing.join(', ')}`);
+    console.error('');
+    console.error('Example:');
+    console.error('  npx @daemux/store-automator --github-actions \\');
+    console.error('    --bundle-id=com.company.app \\');
+    console.error('    --match-deploy-key=creds/match_deploy_key \\');
+    console.error('    --match-git-url=git@github.com:org/certs.git');
+    process.exit(1);
+  }
+}
+
 notifier.notify();
 
 try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@daemux/store-automator",
-  "version": "0.7.1",
+  "version": "0.9.0",
   "description": "Full App Store & Google Play automation for Flutter apps with Claude Code agents",
   "type": "module",
   "bin": {

package/plugins/store-automator/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "store-automator",
-  "version": "0.7.1",
+  "version": "0.9.0",
   "description": "App Store & Google Play automation agents for Flutter app publishing",
   "author": {
     "name": "Daemux"

package/plugins/store-automator/agents/appstore-meta-creator.md

@@ -152,14 +152,19 @@ af, am, ar, hy-AM, az-AZ, eu-ES, be, bn-BD, bg, my-MM, ca, zh-HK, zh-CN, zh-TW,
 ## Translation Process
 
 1. Create complete English (en-US) metadata for both platforms first
-2. For EACH target language from ci.config.yaml metadata.languages, spawn a sub-agent (Task tool) with:
-   - The complete English source texts for all files
-   - Target locale code (Apple and Google variants)
-   - Platform (ios and android)
-   - Character limits per field (critical -- translations often expand 20-40%)
-   - Translation instructions (see below)
-3. Launch up to 10 sub-agents in parallel for speed
-4. Each sub-agent writes files directly to the correct locale directory
+2. Group target languages from ci.config.yaml metadata.languages by similarity:
+   - Romance: es-ES, es-MX, fr-FR, fr-CA, it, pt-BR, pt-PT, ro, ca, gl-ES
+   - Germanic: de-DE, nl-NL, sv, da, no, fi
+   - Slavic: ru, uk, pl, cs, sk, hr, bg, sr, sl, mk-MK, be
+   - CJK: ja, ko, zh-Hans, zh-Hant, zh-Hant-HK, zh-CN, zh-TW, zh-HK
+   - South/Southeast Asian: hi, th, vi, id, ms, bn-BD, ta-IN, te-IN, ml-IN, mr-IN, kn-IN, gu, my-MM, km-KH, lo-LA, si-LK
+   - Middle Eastern: ar, ar-SA, he, tr, fa, ur
+   - Other: hu, el, et, lv, lt, ka-GE, hy-AM, az-AZ, kk, ky-KG, mn-MN, ne-NP, af, am, sw, zu, fil, is-IS, eu-ES, rm, pa
+3. Create a translation team using TeamCreate with 2-5 teammates:
+   - Each teammate handles 2-5 language groups (based on total languages configured)
+   - Teammate prompt includes: English source texts, target locale codes (Apple + Google variants), character limits per field, translation instructions
+   - Each teammate writes files directly to the correct locale directories
+4. Wait for all teammates to complete, then verify all languages are covered
 
 ### Translation Instructions for Sub-Agents
 

package/plugins/store-automator/agents/architect.md

@@ -138,7 +138,48 @@ If a `.claude/.tasks/` file path is provided, read ONLY that file for requiremen
 Scan the codebase for already-implemented items. Pick 3-5 UNIMPLEMENTED
 related requirements. Design only those. Report: "Batch: N of ~M remaining."
 
+## Team Composition Recommendation
+
+**MANDATORY section in your output.** The orchestrator uses this to create teams.
+
+After your architecture design, include this section:
+
+```
+### Team Recommendations for Orchestrator
+
+**Files touched:** {count}
+
+#### Developer Team (Flutter)
+- **Teammates:** {N} (based on file count: 3-4 files → 2, 5-7 → 3, 8+ → 4)
+- **Teammate 1 scope:** Screens and widgets — {list of files}
+- **Teammate 2 scope:** Providers and repositories — {list of files}
+- **Teammate 3 scope:** Firebase/backend services — {list of files} (if applicable)
+- **Rationale:** {why this split works}
+
+#### Reviewer Team
+- **Teammates:** 2-3
+- **Reviewer 1 focus:** Dart code quality, patterns, maintainability — files: {list}
+- **Reviewer 2 focus:** Security, Firebase rules, data validation — files: {list}
+- **Reviewer 3 focus:** Performance, store compliance — files: {list} (if 5+ files)
+
+#### Tester Team
+- **Teammates:** 2-4
+- **Tester 1 focus:** Flutter unit and widget tests — {scope}
+- **Tester 2 focus:** Mobile UI testing (iOS) — {scope}
+- **Tester 3 focus:** Mobile UI testing (Android) — {scope} (if applicable)
+
+#### App Designer Team (if design stage applies)
+- **Teammates:** 2-3
+- **Designer 1 scope:** App screen designs — {deliverables}
+- **Designer 2 scope:** Store screenshots — {deliverables}
+- **Designer 3 scope:** Web page design — {deliverables} (if applicable)
+
+**TEAM EXCEPTION:** If task touches <3 files, output: "Files touched: {N} — below team threshold, single agents recommended."
+```
+
+Include concrete file assignments. The orchestrator will use this to create `TeamCreate` with the exact scopes you specify.
+
 ## Output Footer
 ```
-NEXT: product-manager(PRE) to validate approach before implementation
+NEXT: product-manager(PRE) to validate approach and team composition before implementation
 ```

package/plugins/store-automator/agents/devops.md

@@ -4,16 +4,18 @@ description: "DevOps operations: Codemagic CI/CD builds, Firebase deployment, Cl
 model: opus
 hooks:
   PreToolUse:
-    - matcher: "Edit|Write"
-      hooks:
-        - type: command
-          command: "exit 0"
     - matcher: "Bash"
       hooks:
         - type: command
           command: "exit 0"
 ---
 
+**SCOPE RESTRICTION:**
+- You CANNOT edit or create ANY local project files (no Edit/Write tools)
+- This includes: source code, CI/CD configs, GitHub Actions workflows, scripts, codemagic.yaml, etc.
+- You CAN only: run deployments, check logs, monitor builds, manage infrastructure via Bash and MCP tools
+- If ANY local file changes are needed (code, configs, CI/CD, scripts), report what needs changing and ask the developer agent to make the edits
+
 # DevOps Agent
 
 Handles Codemagic CI/CD builds, Firebase deployment, Cloudflare Pages deployment, and Firestore management for Flutter mobile apps.
@@ -24,7 +26,7 @@ Handles Codemagic CI/CD builds, Firebase deployment, Cloudflare Pages deployment
 - `codemagic` - Build monitoring, deployment tracking, log analysis, build triggering
 - `firebase` - Deploy Cloud Functions, security rules, Firestore indexes
 - `cloudflare` - Deploy web pages via Cloudflare Pages
-- `database + migrate` - Firestore security rules updates, index management, data migration scripts
+- `database + deploy` - Deploy Firestore security rules, indexes, and run data migration scripts
 - `database + optimize` - Firestore query optimization, index analysis, security rules audit
 
 Additional parameters vary by mode (see each section).
@@ -283,38 +285,35 @@ RECOMMENDATION: [action if needed]
 
 ---
 
-## Mode: database + migrate
+## Mode: database + deploy
 
-Manage Firestore security rules, indexes, and data migration scripts. Firestore is NoSQL -- there are no SQL migrations.
+Deploy Firestore security rules, indexes, and run data migration scripts. Firestore is NoSQL -- there are no SQL migrations.
 
-### Security Rules Updates
+### Security Rules Deployment
 
-1. Read current rules in `firestore.rules`
-2. Read task file for new access requirements
-3. Update rules with proper authenticated read/write and per-document ownership checks
-4. Test rules locally: `firebase emulators:start --only firestore`
-5. Deploy: `firebase deploy --only firestore:rules`
+1. Deploy rules: `firebase deploy --only firestore:rules`
+2. Verify deployment succeeded in Firebase Console or CLI output
+3. Test rules against expected access patterns
 
-### Index Management
+### Index Deployment
 
-1. Review `firestore.indexes.json` for existing composite indexes
-2. Add new indexes for query patterns that require them
-3. Deploy: `firebase deploy --only firestore:indexes`
-4. Monitor index build status (can take minutes for large collections)
+1. Deploy indexes: `firebase deploy --only firestore:indexes`
+2. Monitor index build status (can take minutes for large collections)
+3. Verify all indexes reach READY state
 
-### Data Migration Scripts
+### Data Migration Execution
 
-For schema-like changes in Firestore documents:
-1. Write a migration script (Node.js) that reads and updates documents
-2. Run against local emulator first for testing
-3. Run against production with batched writes (max 500 per batch)
-4. Log progress and handle partial failures gracefully
+For running migration scripts (created by the developer agent):
+1. Run migration script against local emulator first: `firebase emulators:start --only firestore`
+2. Run against production with monitoring
+3. Verify data integrity after migration completes
+4. Log progress and report any failures
 
 ### Output
 
 ```
-OPERATION: Firestore Migration
-CHANGES: [list of rule/index/data changes]
+OPERATION: Firestore Deploy
+CHANGES: [list of deployed rules/indexes/migrations]
 EMULATOR TEST: Passed | Failed
 DEPLOYED: [rules | indexes | data migration]
 RESULT: Success | Failed
@@ -390,5 +389,5 @@ After editing `ci.config.yaml`, regenerate the Codemagic config:
 ## Output Footer
 
 ```
-NEXT: [context-dependent - for migrations: simplifier -> reviewer -> product-manager(POST)]
+NEXT: [context-dependent - for database deploy: verify deployment succeeded]
 ```

package/scripts/check_google_play.py

@@ -25,7 +25,7 @@ except ImportError:
     print("Installing dependencies...", file=sys.stderr)
     import subprocess
     subprocess.check_call(
-        [sys.executable, "-m", "pip", "install", "PyJWT", "cryptography", "requests"],
+        [sys.executable, "-m", "pip", "install", "--break-system-packages", "PyJWT", "cryptography", "requests"],
         stdout=subprocess.DEVNULL,
     )
     import jwt

package/scripts/manage_version_ios.py

@@ -32,7 +32,7 @@ except ImportError:
     print("Installing dependencies...", file=sys.stderr)
     import subprocess
     subprocess.check_call([
-        sys.executable, "-m", "pip", "install",
+        sys.executable, "-m", "pip", "install", "--break-system-packages",
         "PyJWT", "cryptography", "requests"
     ], stdout=subprocess.DEVNULL)
     import jwt

package/src/ci-config.mjs

@@ -7,6 +7,8 @@ const FIELD_PATTERNS = {
   team_id: /^(\s*team_id:\s*)"[^"]*"/m,
   bundle_id: /^(\s*bundle_id:\s*)"[^"]*"/m,
   package_name: /^(\s*package_name:\s*)"[^"]*"/m,
+  deploy_key_path: /^(\s*deploy_key_path:\s*)"[^"]*"/m,
+  git_url: /^(\s*git_url:\s*)"[^"]*"/m,
 };
 
 function writeCiField(projectDir, field, value) {
@@ -44,3 +46,22 @@ export function writeCiBundleId(projectDir, bundleId) {
 export function writeCiPackageName(projectDir, packageName) {
   return writeCiField(projectDir, 'package_name', packageName);
 }
+
+export function writeMatchConfig(projectDir, { deployKeyPath, gitUrl }) {
+  const wrote1 = writeCiField(projectDir, 'deploy_key_path', deployKeyPath);
+  const wrote2 = writeCiField(projectDir, 'git_url', gitUrl);
+  return wrote1 || wrote2;
+}
+
+export function readFlutterRoot(projectDir) {
+  const configPath = join(projectDir, CI_CONFIG_FILE);
+  if (!existsSync(configPath)) return '.';
+
+  try {
+    const content = readFileSync(configPath, 'utf8');
+    const match = content.match(/^flutter_root:\s*"([^"]*)"/m);
+    return match ? match[1] : '.';
+  } catch {
+    return '.';
+  }
+}

package/src/install-paths.mjs

@@ -0,0 +1,92 @@
+import { execSync, execFileSync } from 'node:child_process';
+import { installGitHubActionsTemplates, installMatchfile } from './templates.mjs';
+import { findAppByRepo, addApp, normalizeRepoUrl } from './codemagic-api.mjs';
+import {
+  writeCiAppId, writeCiTeamId, writeMatchConfig,
+} from './ci-config.mjs';
+import { updateMcpAppId, updateMcpTeamId } from './mcp-setup.mjs';
+
+function setupGitHubActionsSecret(codemagicToken) {
+  if (!codemagicToken) return false;
+
+  try {
+    execFileSync('which', ['gh'], { encoding: 'utf8', stdio: 'pipe' });
+    const authStatus = execFileSync('gh', ['auth', 'status'], { encoding: 'utf8', stdio: 'pipe' });
+    if (authStatus.includes('not logged')) return false;
+
+    execFileSync('gh', ['secret', 'set', 'CM_API_TOKEN', '--body', codemagicToken], {
+      encoding: 'utf8',
+      stdio: 'pipe',
+    });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+async function setupCodemagicApp(projectDir, codemagicToken, codemagicTeamId) {
+  if (!codemagicToken) return;
+
+  let repoUrl;
+  try {
+    const raw = execSync('git remote get-url origin', {
+      encoding: 'utf8',
+      stdio: ['pipe', 'pipe', 'pipe'],
+    }).trim();
+    if (!raw) return;
+    repoUrl = normalizeRepoUrl(raw);
+  } catch {
+    return;
+  }
+
+  try {
+    let app = await findAppByRepo(codemagicToken, repoUrl);
+    if (!app) {
+      app = await addApp(codemagicToken, repoUrl, codemagicTeamId);
+      console.log(`Codemagic app created: ${app.appName || app._id}`);
+    } else {
+      console.log(`Codemagic app found: ${app.appName || app._id}`);
+    }
+
+    const written = writeCiAppId(projectDir, app._id);
+    if (written) {
+      console.log(`Codemagic app_id written to ci.config.yaml`);
+    }
+
+    updateMcpAppId(projectDir, app._id);
+
+    if (codemagicTeamId) {
+      writeCiTeamId(projectDir, codemagicTeamId);
+      updateMcpTeamId(projectDir, codemagicTeamId);
+    }
+  } catch (err) {
+    console.log(`Codemagic auto-setup skipped: ${err.message || err}`);
+  }
+}
+
+export function installGitHubActionsPath(projectDir, packageDir, cliTokens) {
+  console.log('Configuring GitHub Actions mode...');
+  installGitHubActionsTemplates(projectDir, packageDir);
+
+  installMatchfile(projectDir, packageDir, {
+    matchGitUrl: cliTokens.matchGitUrl,
+    bundleId: cliTokens.bundleId,
+  });
+
+  const wrote = writeMatchConfig(projectDir, {
+    deployKeyPath: cliTokens.matchDeployKey,
+    gitUrl: cliTokens.matchGitUrl,
+  });
+  if (wrote) console.log('Match credentials written to ci.config.yaml');
+}
+
+export async function installCodemagicPath(projectDir, tokens) {
+  await setupCodemagicApp(projectDir, tokens.codemagicToken, tokens.codemagicTeamId);
+
+  const ghConfigured = setupGitHubActionsSecret(tokens.codemagicToken);
+  if (ghConfigured) {
+    console.log('GitHub Actions: CM_API_TOKEN secret configured.');
+  } else if (tokens.codemagicToken) {
+    console.log('GitHub Actions: secret not set (gh CLI unavailable or not authenticated).');
+  }
+}

package/src/install.mjs

@@ -1,7 +1,7 @@
 import { existsSync, rmSync, cpSync } from 'node:fs';
 import { join } from 'node:path';
 import { homedir } from 'node:os';
-import { execSync, execFileSync } from 'node:child_process';
+import { execSync } from 'node:child_process';
 import {
   MARKETPLACE_DIR, KNOWN_MP_PATH, CACHE_DIR,
   MARKETPLACE_NAME, PLUGIN_REF,
@@ -9,10 +9,10 @@ import {
 } from './utils.mjs';
 import { injectEnvVars, injectStatusLine } from './settings.mjs';
 import { promptForTokens } from './prompt.mjs';
-import { getMcpServers, writeMcpJson, updateMcpAppId, updateMcpTeamId } from './mcp-setup.mjs';
+import { getMcpServers, writeMcpJson } from './mcp-setup.mjs';
 import { installClaudeMd, installCiTemplates, installFirebaseTemplates } from './templates.mjs';
-import { findAppByRepo, addApp, normalizeRepoUrl } from './codemagic-api.mjs';
-import { writeCiAppId, writeCiTeamId, writeCiBundleId, writeCiPackageName } from './ci-config.mjs';
+import { writeCiBundleId, writeCiPackageName } from './ci-config.mjs';
+import { installGitHubActionsPath, installCodemagicPath } from './install-paths.mjs';
 
 function checkClaudeCli() {
   const result = exec('command -v claude') || exec('which claude');
@@ -94,61 +94,19 @@ function printSummary(scope, oldVersion, newVersion) {
   }
 }
 
-function setupGitHubActions(codemagicToken) {
-  if (!codemagicToken) return false;
-
-  try {
-    execFileSync('which', ['gh'], { encoding: 'utf8', stdio: 'pipe' });
-    const authStatus = execFileSync('gh', ['auth', 'status'], { encoding: 'utf8', stdio: 'pipe' });
-    if (authStatus.includes('not logged')) return false;
-
-    execFileSync('gh', ['secret', 'set', 'CM_API_TOKEN', '--body', codemagicToken], {
-      encoding: 'utf8',
-      stdio: 'pipe',
-    });
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-async function setupCodemagicApp(projectDir, codemagicToken, codemagicTeamId) {
-  if (!codemagicToken) return;
-
-  let repoUrl;
-  try {
-    const raw = execSync('git remote get-url origin', {
-      encoding: 'utf8',
-      stdio: ['pipe', 'pipe', 'pipe'],
-    }).trim();
-    if (!raw) return;
-    repoUrl = normalizeRepoUrl(raw);
-  } catch {
-    return;
-  }
-
-  try {
-    let app = await findAppByRepo(codemagicToken, repoUrl);
-    if (!app) {
-      app = await addApp(codemagicToken, repoUrl, codemagicTeamId);
-      console.log(`Codemagic app created: ${app.appName || app._id}`);
-    } else {
-      console.log(`Codemagic app found: ${app.appName || app._id}`);
-    }
-
-    const written = writeCiAppId(projectDir, app._id);
-    if (written) {
-      console.log(`Codemagic app_id written to ci.config.yaml`);
-    }
-
-    updateMcpAppId(projectDir, app._id);
-
-    if (codemagicTeamId) {
-      writeCiTeamId(projectDir, codemagicTeamId);
-      updateMcpTeamId(projectDir, codemagicTeamId);
-    }
-  } catch (err) {
-    console.log(`Codemagic auto-setup skipped: ${err.message || err}`);
+function printNextSteps(isGitHubActions) {
+  console.log('');
+  console.log('Next steps:');
+  if (isGitHubActions) {
+    console.log('  1. Fill ci.config.yaml with credentials');
+    console.log('  2. Add creds/AuthKey.p8 and creds/play-service-account.json');
+    console.log('  3. Set MATCH_PASSWORD secret in GitHub repository settings');
+    console.log('  4. Start Claude Code');
+  } else {
+    console.log('  1. Fill ci.config.yaml (codemagic.app_id is auto-configured if token was provided)');
+    console.log('  2. Add creds/AuthKey.p8 and creds/play-service-account.json');
+    console.log('  3. Start Claude Code');
+    console.log('  Note: For auto-trigger, install gh CLI and run "gh auth login"');
   }
 }
 
@@ -157,11 +115,18 @@ export async function runInstall(scope, isPostinstall = false, cliTokens = {}) {
 
   console.log('Installing/updating Daemux Store Automator...');
 
-  const tokens = await promptForTokens(cliTokens);
+  const isGitHubActions = Boolean(cliTokens.githubActions);
+
+  const tokens = isGitHubActions
+    ? { bundleId: cliTokens.bundleId ?? '' }
+    : await promptForTokens(cliTokens);
 
   const projectDir = process.cwd();
-  const servers = getMcpServers(tokens);
-  writeMcpJson(projectDir, servers);
+
+  if (!isGitHubActions) {
+    const servers = getMcpServers(tokens);
+    writeMcpJson(projectDir, servers);
+  }
 
   const oldVersion = readMarketplaceVersion();
   const packageDir = getPackageDir();
@@ -189,7 +154,11 @@ export async function runInstall(scope, isPostinstall = false, cliTokens = {}) {
     writeCiPackageName(projectDir, tokens.bundleId);
   }
 
-  await setupCodemagicApp(projectDir, tokens.codemagicToken, tokens.codemagicTeamId);
+  if (isGitHubActions) {
+    installGitHubActionsPath(projectDir, packageDir, cliTokens);
+  } else {
+    await installCodemagicPath(projectDir, tokens);
+  }
 
   const scopeLabel = scope === 'user' ? 'global' : 'project';
   console.log(`Configuring ${scopeLabel} settings...`);
@@ -197,20 +166,6 @@ export async function runInstall(scope, isPostinstall = false, cliTokens = {}) {
   injectEnvVars(settingsPath);
   injectStatusLine(settingsPath);
 
-  const ghConfigured = setupGitHubActions(tokens.codemagicToken);
-  if (ghConfigured) {
-    console.log('GitHub Actions: CM_API_TOKEN secret configured.');
-  } else if (tokens.codemagicToken) {
-    console.log('GitHub Actions: secret not set (gh CLI unavailable or not authenticated).');
-  }
-
   printSummary(scope, oldVersion, newVersion);
-  console.log('');
-  console.log('Next steps:');
-  console.log('  1. Fill ci.config.yaml (codemagic.app_id is auto-configured if token was provided)');
-  console.log('  2. Add creds/AuthKey.p8 and creds/play-service-account.json');
-  console.log('  3. Start Claude Code');
-  if (!ghConfigured) {
-    console.log('  Note: For auto-trigger, install gh CLI and run "gh auth login"');
-  }
+  printNextSteps(isGitHubActions);
 }