@mmerterden/dev-toolkit-mcp 2.24.1

package/tools/ios-app-store-audit/rules/sdk-floor.js

@@ -0,0 +1,104 @@
+/**
+ * sdk-floor - Validates that the archive was built against a new enough SDK.
+ *
+ * App Store Connect rejects uploads built with an SDK below the current floor
+ * (validation code ITMS-90725). The iOS 26 / Xcode 26 floor has been in force
+ * since 2026-04-28. The relevant build receipts live in the app's Info.plist:
+ *   DTSDKName        e.g. "iphoneos26.4"
+ *   DTPlatformVersion e.g. "26.4"
+ *   DTXcode          e.g. "2640"  (Xcode 26.4 -  four digits, MMmp)
+ *
+ * All three are written by Xcode at build time, so this is fully checkable from
+ * the archive without contacting Apple.
+ */
+
+import { Severity, makeViolation } from "../models.js";
+
+export const id = "sdk-floor";
+export const name = "SDK Floor";
+export const description =
+  "Checks the build SDK and Xcode version against the App Store minimum (ITMS-90725)";
+
+// Bump these two together when Apple raises the floor.
+const MIN_SDK_MAJOR = 26;
+const MIN_DTXCODE = 2600;
+const FLOOR_LABEL = "iOS 26 SDK / Xcode 26";
+const IN_FORCE_SINCE = "2026-04-28";
+
+function majorOf(version) {
+  if (typeof version !== "string") return null;
+  const m = version.match(/(\d+)/);
+  return m ? parseInt(m[1], 10) : null;
+}
+
+export function check(ctx) {
+  const violations = [];
+  const plist = ctx.infoPlist || {};
+
+  const sdkName = typeof plist.DTSDKName === "string" ? plist.DTSDKName : null;
+  const platformVersion =
+    typeof plist.DTPlatformVersion === "string" ? plist.DTPlatformVersion : null;
+  const rawXcode = plist.DTXcode;
+
+  // No build receipts at all: the archive did not come from a normal Xcode
+  // build, so report it rather than silently passing.
+  if (!sdkName && !platformVersion && rawXcode === undefined) {
+    violations.push(
+      makeViolation({
+        ruleID: id,
+        guidelineRef: "ITMS-90725",
+        severity: Severity.WARNING,
+        message:
+          "Info.plist carries no DTSDKName / DTPlatformVersion / DTXcode, so the build SDK cannot be verified",
+        file: `${ctx.appPath}/Info.plist`,
+        suggestion:
+          "Re-export the archive from Xcode. A missing build receipt usually means the bundle was assembled by hand or stripped.",
+      })
+    );
+    return violations;
+  }
+
+  const sdkMajor = majorOf(sdkName) ?? majorOf(platformVersion);
+  if (sdkMajor !== null && sdkMajor < MIN_SDK_MAJOR) {
+    violations.push(
+      makeViolation({
+        ruleID: id,
+        guidelineRef: "ITMS-90725",
+        severity: Severity.ERROR,
+        message: `Built against SDK ${sdkName || platformVersion} but the App Store requires ${FLOOR_LABEL} (in force since ${IN_FORCE_SINCE})`,
+        file: `${ctx.appPath}/Info.plist`,
+        suggestion: `Rebuild with Xcode ${MIN_SDK_MAJOR} or newer. App Store Connect rejects this upload with ITMS-90725.`,
+      })
+    );
+  }
+
+  const xcodeNum =
+    typeof rawXcode === "string" || typeof rawXcode === "number"
+      ? parseInt(String(rawXcode), 10)
+      : NaN;
+  if (Number.isFinite(xcodeNum) && xcodeNum < MIN_DTXCODE) {
+    violations.push(
+      makeViolation({
+        ruleID: id,
+        guidelineRef: "ITMS-90725",
+        severity: Severity.ERROR,
+        message: `DTXcode is ${rawXcode} (Xcode ${(xcodeNum / 100).toFixed(1)}), below the required Xcode ${MIN_SDK_MAJOR}`,
+        file: `${ctx.appPath}/Info.plist`,
+        suggestion: `Rebuild with Xcode ${MIN_SDK_MAJOR} or newer before uploading.`,
+      })
+    );
+  }
+
+  if (violations.length === 0) {
+    violations.push(
+      makeViolation({
+        ruleID: id,
+        severity: Severity.INFO,
+        message: `Build SDK ${sdkName || platformVersion || "unknown"}${Number.isFinite(xcodeNum) ? ` (DTXcode ${rawXcode})` : ""} satisfies the ${FLOOR_LABEL} floor`,
+        file: `${ctx.appPath}/Info.plist`,
+      })
+    );
+  }
+
+  return violations;
+}

package/tools/ios-app-store-audit/rules/swift-abi.js

@@ -0,0 +1,64 @@
+/**
+ * swift-abi - Validates Swift runtime compatibility for the deployment target.
+ * Direct port of SwiftABIRule.swift.
+ *
+ * Apps targeting iOS ≥12.2 don't need to embed `libswift*.dylib` (Swift is
+ * ABI-stable since iOS 12.2 - runtime ships with the OS). Embedding them
+ * still works but inflates the bundle and may produce ITMS-90426 warnings.
+ */
+
+import { existsSync, readdirSync } from "fs";
+import { join } from "path";
+import { Severity, makeViolation } from "../models.js";
+
+export const id = "swift-abi";
+export const name = "Swift ABI Compatibility";
+export const description = "Checks for Swift runtime libraries and ABI stability issues";
+
+export function check(ctx) {
+  const violations = [];
+
+  const swiftSupportPath = join(ctx.archivePath, "SwiftSupport");
+  const hasSwiftSupport = existsSync(swiftSupportPath);
+
+  const frameworksPath = join(ctx.appPath, "Frameworks");
+  let embeddedSwiftLibs = [];
+  if (existsSync(frameworksPath)) {
+    try {
+      embeddedSwiftLibs = readdirSync(frameworksPath).filter(
+        (n) => n.startsWith("libswift") && n.endsWith(".dylib")
+      );
+    } catch {
+      embeddedSwiftLibs = [];
+    }
+  }
+
+  const minOS = typeof ctx.infoPlist?.MinimumOSVersion === "string" ? ctx.infoPlist.MinimumOSVersion : null;
+  if (!minOS) return violations;
+  const parts = minOS.split(".").map((p) => parseInt(p, 10));
+  const major = Number.isFinite(parts[0]) ? parts[0] : 0;
+  const minor = Number.isFinite(parts[1]) ? parts[1] : 0;
+
+  const isAbiStable = major > 12 || (major === 12 && minor >= 2);
+
+  if (isAbiStable) {
+    if (embeddedSwiftLibs.length > 0) {
+      violations.push(makeViolation({
+        ruleID: id, guidelineRef: "ITMS-90426", severity: Severity.WARNING,
+        message: `App embeds ${embeddedSwiftLibs.length} Swift runtime libraries but targets iOS ${minOS} (ABI stable)`,
+        file: frameworksPath,
+        suggestion: "Remove embedded Swift libraries - they're included in the OS since iOS 12.2",
+      }));
+    }
+  } else {
+    if (!hasSwiftSupport && embeddedSwiftLibs.length > 0) {
+      violations.push(makeViolation({
+        ruleID: id, guidelineRef: "ITMS-90426", severity: Severity.ERROR,
+        message: `Archive missing SwiftSupport directory for pre-ABI-stability target (iOS ${minOS})`,
+        suggestion: "Archive must include SwiftSupport when targeting iOS < 12.2",
+      }));
+    }
+  }
+
+  return violations;
+}

package/tools/ios-app-store-audit/rules/team-id.js

@@ -0,0 +1,62 @@
+/**
+ * team-id - Validates all targets (main app + embedded extensions) share
+ * the same Team ID. ITMS-90046 reject if mismatched.
+ * Direct port of TeamIDConsistencyRule.swift.
+ */
+
+import { join } from "path";
+import { Severity, makeViolation } from "../models.js";
+import { parsePlist, extractEntitlements } from "../context.js";
+
+export const id = "team-id-consistency";
+export const name = "Team ID Consistency";
+export const description = "Checks all targets use the same development team identifier";
+
+function extractTeamID(applicationIdentifier) {
+  if (typeof applicationIdentifier !== "string") return null;
+  const first = applicationIdentifier.split(".")[0];
+  return first && first.length >= 8 ? first : null;
+}
+
+export function check(ctx) {
+  const violations = [];
+  const teamIDs = [];
+
+  // Main app
+  const ent = ctx.entitlements;
+  if (ent) {
+    const appID = ent["application-identifier"] ?? ent["com.apple.application-identifier"];
+    const teamID = extractTeamID(appID);
+    if (teamID) teamIDs.push({ target: "Main App", teamID });
+  }
+
+  // Embedded extensions (.appex bundles)
+  for (const pluginPath of ctx.embeddedPlugins ?? []) {
+    const plugInfo = parsePlist(join(pluginPath, "Info.plist"));
+    if (!plugInfo) continue;
+    const execName = plugInfo.CFBundleExecutable;
+    if (typeof execName !== "string") continue;
+    const execPath = join(pluginPath, execName);
+    const plugEnt = extractEntitlements(execPath);
+    if (!plugEnt) continue;
+    const appID = plugEnt["application-identifier"] ?? plugEnt["com.apple.application-identifier"];
+    const teamID = extractTeamID(appID);
+    if (teamID) {
+      const name = pluginPath.split("/").pop();
+      teamIDs.push({ target: name, teamID });
+    }
+  }
+
+  // Consistency check
+  const uniq = new Set(teamIDs.map((t) => t.teamID));
+  if (uniq.size > 1) {
+    const details = teamIDs.map((t) => `${t.target}: ${t.teamID}`).join(", ");
+    violations.push(makeViolation({
+      ruleID: id, guidelineRef: "ITMS-90046", severity: Severity.ERROR,
+      message: `Multiple Team IDs detected across targets: ${details}`,
+      suggestion: "All targets must use the same development team. Check signing settings in Xcode",
+    }));
+  }
+
+  return violations;
+}