appship-cli 0.1.3 → 0.1.4

package/README.md

@@ -51,7 +51,7 @@ appship rules update         # fetch the latest policy rules & SDK signatures
 
 Store policies change between releases, so the doctor rules and SDK signature database are plain data files that can be refreshed without a new CLI version: `appship rules update` downloads them from this repository into `~/.appship/data-cache` (schema-validated before anything is written; nothing partial is ever observable), `rules status` shows what is in use, and `rules reset` returns to the bundled files. If a cached file ever stops parsing (e.g. you run a much newer rule format with an old CLI), appship silently falls back to its bundled data.
 
-`generate`, `localize`, and `review analyze` call an AI provider — Anthropic by default (`ANTHROPIC_API_KEY` or `ant auth login`), and any OpenAI-compatible endpoint via `ai.provider` in appship.yml: `gemini` (free keys at [aistudio.google.com](https://aistudio.google.com/apikey), `GEMINI_API_KEY`, default model `gemini-2.5-flash`), `openai` (`OPENAI_API_KEY`), `ollama` (local, set `ai.model`), or `openai-compatible` (set `ai.base_url` + `ai.model` — works with OpenRouter, Groq, and self-hosted servers). Store character limits are validated with retry regardless of provider. `init` and `doctor` run fully offline. Translations go through the same validation as generation; App Review notes are copied, not translated.
+`generate`, `localize`, and `review analyze` call an AI provider — Anthropic by default (`ANTHROPIC_API_KEY` or `ant auth login`), and any OpenAI-compatible endpoint via `ai.provider` in appship.yml: `gemini` (free keys at [aistudio.google.com](https://aistudio.google.com/apikey), `GEMINI_API_KEY`, default model `gemini-3.6-flash`), `openai` (`OPENAI_API_KEY`), `ollama` (local, set `ai.model`), or `openai-compatible` (set `ai.base_url` + `ai.model` — works with OpenRouter, Groq, and self-hosted servers). Store character limits are validated with retry regardless of provider. `init` and `doctor` run fully offline. Translations go through the same validation as generation; App Review notes are copied, not translated.
 
 Supported projects: React Native CLI, Expo (managed), Flutter, native iOS (`.xcodeproj` at the root), and native Android (`settings.gradle` + `app/` module) — identity and permissions are read from native files (`Info.plist`, `AndroidManifest.xml`, `project.pbxproj`, `build.gradle`), from the Expo config (`app.json` or a dynamic `app.config.ts`/`.js`/`.cjs`/`.mjs`, evaluated by the project's Expo config loader), or from `pubspec.yaml`. SDK detection matches npm packages, Dart/Flutter packages, CocoaPods, and Gradle Maven coordinates, plus source patterns in JS/TS, Dart, Swift, Kotlin, and Java.
 

package/data/rules/google-play.yml

@@ -37,7 +37,7 @@
   category: consistency
   severity: error
   target: google-play/data-safety.yml
-  check: { type: not_contains, value: "confirm_before_submitting" }
+  check: { type: yaml_no_confirm_markers }
   message: "data-safety.yml still contains confirm_before_submitting markers — resolve them before filling the Play Console form"
   pass_message: "Data Safety confirm markers resolved"
 

package/dist/{chunk-3AIOX537.js → chunk-EKW5Y74B.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   APPSHIP_VERSION
-} from "./chunk-RKHEDQIO.js";
+} from "./chunk-MABS4QNP.js";
 
 // src/core/project/native.ts
 import { readFile } from "fs/promises";

package/dist/{chunk-RKHEDQIO.js → chunk-MABS4QNP.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/version.ts
-var APPSHIP_VERSION = "0.1.3";
+var APPSHIP_VERSION = "0.1.4";
 
 export {
   APPSHIP_VERSION

package/dist/{chunk-5TUBDRZQ.js → chunk-ZHZ3ML4B.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   APPSHIP_VERSION
-} from "./chunk-RKHEDQIO.js";
+} from "./chunk-MABS4QNP.js";
 
 // src/core/project/flutter.ts
 import { readFile as readFile4 } from "fs/promises";
@@ -32,11 +32,11 @@ async function detectProjectType(projectRoot) {
   if (pkg && "react-native" in deps) {
     return "react-native";
   }
-  const { readPubspec: readPubspec2, isFlutterPubspec: isFlutterPubspec2 } = await import("./flutter-Q36WBCAC.js");
+  const { readPubspec: readPubspec2, isFlutterPubspec: isFlutterPubspec2 } = await import("./flutter-C75PQYKY.js");
   if (isFlutterPubspec2(await readPubspec2(projectRoot))) {
     return "flutter";
   }
-  const { findRootPbxproj, hasNativeAndroidLayout } = await import("./native-AVSHQSRP.js");
+  const { findRootPbxproj, hasNativeAndroidLayout } = await import("./native-WVYZZZLW.js");
   const { existsSync: existsSync2 } = await import("fs");
   if (hasNativeAndroidLayout(projectRoot, existsSync2)) {
     return "native-android";

package/dist/{flutter-Q36WBCAC.js → flutter-C75PQYKY.js}

@@ -3,8 +3,8 @@ import {
   analyzeFlutterProject,
   isFlutterPubspec,
   readPubspec
-} from "./chunk-5TUBDRZQ.js";
-import "./chunk-RKHEDQIO.js";
+} from "./chunk-ZHZ3ML4B.js";
+import "./chunk-MABS4QNP.js";
 export {
   analyzeFlutterProject,
   isFlutterPubspec,

package/dist/index.js

@@ -9,14 +9,14 @@ import {
   readExpoConfig,
   readPackageJson,
   readPubspec
-} from "./chunk-5TUBDRZQ.js";
+} from "./chunk-ZHZ3ML4B.js";
 import {
   analyzeNativeAndroidProject,
   analyzeNativeIosProject
-} from "./chunk-3AIOX537.js";
+} from "./chunk-EKW5Y74B.js";
 import {
   APPSHIP_VERSION
-} from "./chunk-RKHEDQIO.js";
+} from "./chunk-MABS4QNP.js";
 import {
   UploadError,
   assertUploadLane,
@@ -95,7 +95,7 @@ import { parse as parse2 } from "yaml";
 import { z as z2 } from "zod";
 var storeSchema = z2.enum(["app-store", "google-play"]);
 var checkSchema = z2.object({
-  type: z2.enum(["max_length", "file_exists", "not_contains", "no_emoji"]),
+  type: z2.enum(["max_length", "file_exists", "not_contains", "no_emoji", "yaml_no_confirm_markers"]),
   value: z2.union([z2.string(), z2.number()]).optional()
 });
 var ruleSchema = z2.object({
@@ -636,12 +636,12 @@ function defaultAnswers(scan) {
   };
 }
 function buildConfig(scan, answers, existing) {
-  const bundleId = scan.project.ios?.bundleId ?? null;
-  const packageName = scan.project.android?.packageName ?? null;
+  const bundleId = scan.project.ios?.bundleId ?? existing?.platforms.ios?.bundle_id ?? null;
+  const packageName = scan.project.android?.packageName ?? existing?.platforms.android?.package_name ?? null;
   const locales = answers.locales.length > 0 ? answers.locales : ["en-US"];
   return appshipConfigSchema.parse({
     project: {
-      name: scan.project.appName ?? "My App",
+      name: scan.project.appName ?? existing?.project.name ?? "My App",
       description: answers.description || DESCRIPTION_PLACEHOLDER,
       audience: answers.audience,
       ...answers.requiresLogin === null ? {} : { requires_login: answers.requiresLogin },
@@ -798,7 +798,7 @@ function answersFromExisting(scan, existing) {
     locales: existing.stores.locales
   };
 }
-var initCommand = new Command("init").description("Analyze the project and create appship.yml and the .appship/ folder").option("--force", "ignore existing appship.yml and re-initialize from scratch").option("--non-interactive", "skip interactive questions (unconfirmed findings are left for doctor)").action(async (options) => {
+var initCommand = new Command("init").description("Analyze the project and create appship.yml and the .appship/ folder").option("--force", "rewrite generated analysis and refresh detected project fields, preserving user settings").option("--reset-config", "discard existing appship.yml values and initialize configuration defaults").option("--non-interactive", "skip interactive questions (unconfirmed findings are left for doctor)").action(async (options) => {
   const projectRoot = process.cwd();
   let scan;
   try {
@@ -814,7 +814,7 @@ var initCommand = new Command("init").description("Analyze the project and creat
   printDetectionSummary(scan);
   console.log();
   let existing = null;
-  if (!options.force) {
+  if (!options.resetConfig) {
     try {
       existing = await loadConfig(projectRoot);
       console.log(pc.dim(`Existing ${CONFIG_FILENAME} found \u2014 using it as defaults.`));
@@ -1055,7 +1055,7 @@ function createOpenAICompatibleProvider(config) {
       return new OpenAICompatibleProvider({
         name: "gemini",
         baseUrl: "https://generativelanguage.googleapis.com/v1beta/openai",
-        model: config.model ?? "gemini-2.5-flash",
+        model: config.model ?? "gemini-3.6-flash",
         apiKeyEnv: ["GEMINI_API_KEY", "GOOGLE_API_KEY"],
         keyHint: "Set GEMINI_API_KEY \u2014 free keys are available at https://aistudio.google.com/apikey."
       });
@@ -1285,13 +1285,13 @@ function buildPrompt(payload, locale, store) {
 Project summary (the only source of truth about the app):
 ` + JSON.stringify(payload, null, 2);
 }
-async function generateWithRetry(provider, basePrompt, jsonSchema, parse7, validate, system = SYSTEM_PROMPT) {
+async function generateWithRetry(provider, basePrompt, jsonSchema, parse8, validate, system = SYSTEM_PROMPT) {
   let prompt = basePrompt;
-  let listing = parse7(await provider.generateObject({ system, prompt, jsonSchema }));
+  let listing = parse8(await provider.generateObject({ system, prompt, jsonSchema }));
   let violations = validate(listing);
   for (let attempt = 0; violations.length > 0 && attempt < MAX_RETRIES; attempt++) {
     prompt = basePrompt + "\n\nYour previous attempt violated these constraints \u2014 fix them and regenerate:\n" + violations.map((v) => `- ${v.message}`).join("\n") + "\n\nFor character-limit violations: character limits are hard store rules, not suggestions. Count the characters of your replacement before answering and make it comfortably shorter than the limit (aim for ~10% under) \u2014 cutting words is better than exceeding the limit.";
-    listing = parse7(await provider.generateObject({ system, prompt, jsonSchema }));
+    listing = parse8(await provider.generateObject({ system, prompt, jsonSchema }));
     violations = validate(listing);
   }
   return { listing, violations };
@@ -1496,6 +1496,9 @@ var SCREENSHOT_JSON_SCHEMA = {
     }
   }
 };
+function legalDocsFor(config) {
+  return config.project.requires_login === false ? LEGAL_DOCS.filter((spec) => spec.filename !== "account-deletion.md") : LEGAL_DOCS;
+}
 async function detectScreens(projectRoot) {
   const files = await glob3(["src/screens/*.{tsx,jsx,ts,js}", "app/screens/*.{tsx,jsx,ts,js}"], {
     cwd: projectRoot,
@@ -1575,7 +1578,7 @@ async function runGenerate(projectRoot, config, scan, provider, options = {}) {
     add("google-play/data-safety.yml", renderDataSafetyYaml(scan.privacyReport));
     add("google-play/content-rating.yml", renderContentRatingYaml(config));
   }
-  for (const spec of LEGAL_DOCS) {
+  for (const spec of legalDocsFor(config)) {
     const doc = await generateLegalDoc(provider, spec, payload, scan.privacyReport);
     add(`legal/${spec.filename}`, doc.endsWith("\n") ? doc : doc + "\n");
   }
@@ -1615,7 +1618,7 @@ function planArtifacts(config, options = {}) {
   if (wantAndroid) {
     paths.push(".appship/google-play/data-safety.yml", ".appship/google-play/content-rating.yml");
   }
-  paths.push(...LEGAL_DOCS.map((d) => `.appship/legal/${d.filename}`));
+  paths.push(...legalDocsFor(config).map((d) => `.appship/legal/${d.filename}`));
   if (wantIos) paths.push(".appship/app-store/screenshots/screenshot-plan.yml");
   if (wantAndroid) paths.push(".appship/google-play/screenshots/screenshot-plan.yml");
   if (wantIos) paths.push(".appship/checklist/app-store.md");
@@ -1779,7 +1782,14 @@ import { existsSync as existsSync4 } from "fs";
 import { readFile as readFile8 } from "fs/promises";
 import { join as join11 } from "path";
 import glob4 from "fast-glob";
+import { parse as parse6 } from "yaml";
 var EMOJI_PATTERN2 = new RegExp("\\p{Extended_Pictographic}", "u");
+function hasConfirmMarker(value) {
+  if (Array.isArray(value)) return value.some(hasConfirmMarker);
+  if (!value || typeof value !== "object") return false;
+  const record = value;
+  return Object.hasOwn(record, "confirm_before_submitting") || Object.values(record).some(hasConfirmMarker);
+}
 function humanize(id) {
   return id.replace(/-/g, " ").replace(/^./, (c) => c.toUpperCase());
 }
@@ -1825,7 +1835,9 @@ async function evaluateRule(rule, ctx, findings) {
     const target = join11(appshipDir, String(rule.check.value));
     return existsSync4(target) ? pass() : fail();
   }
-  const targets = rule.target ? await glob4(rule.target, { cwd: appshipDir }) : [];
+  const targets = (rule.target ? await glob4(rule.target, { cwd: appshipDir }) : []).filter(
+    (file) => !(file === "legal/account-deletion.md" && !ctx.config.project.requires_login && !findings.has("login_detected"))
+  );
   if (targets.length === 0) {
     return skip("no generated files to check (run appship generate)");
   }
@@ -1850,6 +1862,14 @@ async function evaluateRule(rule, ctx, findings) {
           return fail(file);
         }
         break;
+      case "yaml_no_confirm_markers": {
+        try {
+          if (hasConfirmMarker(parse6(content))) return fail(file);
+        } catch {
+          return fail(`${file}: invalid YAML`);
+        }
+        break;
+      }
     }
   }
   return pass();
@@ -2925,7 +2945,7 @@ import pc7 from "picocolors";
 import { mkdir as mkdir8, readdir as readdir3, readFile as readFile11, writeFile as writeFile9 } from "fs/promises";
 import { existsSync as existsSync10 } from "fs";
 import { join as join18 } from "path";
-import { parse as parse6 } from "yaml";
+import { parse as parse7 } from "yaml";
 import { z as z8 } from "zod";
 var ScreenshotsError = class extends Error {
 };
@@ -2950,7 +2970,7 @@ async function loadScreenshotPlan(projectRoot) {
   for (const location of PLAN_LOCATIONS) {
     const path = join18(projectRoot, location);
     if (!existsSync10(path)) continue;
-    const parsed = planSchema.safeParse(parse6(await readFile11(path, "utf8")));
+    const parsed = planSchema.safeParse(parse7(await readFile11(path, "utf8")));
     if (!parsed.success) {
       throw new ScreenshotsError(`Invalid screenshot plan (${location}): ${parsed.error.message}`);
     }

package/dist/{native-AVSHQSRP.js → native-WVYZZZLW.js}

@@ -4,8 +4,8 @@ import {
   analyzeNativeIosProject,
   findRootPbxproj,
   hasNativeAndroidLayout
-} from "./chunk-3AIOX537.js";
-import "./chunk-RKHEDQIO.js";
+} from "./chunk-EKW5Y74B.js";
+import "./chunk-MABS4QNP.js";
 export {
   analyzeNativeAndroidProject,
   analyzeNativeIosProject,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "appship-cli",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "Open-source AI release assistant that analyzes your mobile app and prepares everything required for App Store and Google Play submission",
   "repository": {
     "type": "git",