appfactory 0.1.0__tar.gz

appfactory-0.1.0/.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,21 @@
+name: Bug report
+description: Something does not work as documented
+labels: [bug]
+body:
+  - type: textarea
+    id: what
+    attributes:
+      label: What happened
+      description: What you did, what you expected, what you got. Do not paste secrets.
+    validations:
+      required: true
+  - type: input
+    id: agent
+    attributes:
+      label: Agent and version
+      placeholder: Claude Code / Codex CLI / Gemini CLI / Cursor
+  - type: textarea
+    id: doctor
+    attributes:
+      label: Output of `appfactory doctor`
+      render: text

appfactory-0.1.0/.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1 @@
+blank_issues_enabled: false

appfactory-0.1.0/.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,15 @@
+name: Feature request
+description: Suggest an improvement
+labels: [enhancement]
+body:
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem
+      description: What are you trying to do that is hard today?
+    validations:
+      required: true
+  - type: textarea
+    id: idea
+    attributes:
+      label: Proposed solution

appfactory-0.1.0/.github/workflows/ci.yml

@@ -0,0 +1,46 @@
+name: CI
+
+on:
+  push:
+    branches: [master, main]
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macos-latest]
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v5
+      - run: uv sync --locked
+      - run: uv run pytest -q
+
+  leak-scan:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: gitleaks/gitleaks-action@v2
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+  author-emails:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Commit author and committer emails must be @appfactory.local or noreply.github.com
+        run: |
+          bad=$(git log --format='%h %ae %ce' | awk '
+            { for (i = 2; i <= 3; i++) if ($i !~ /@appfactory\.local$/ && $i !~ /noreply\.github\.com$/) { print; break } }')
+          if [ -n "$bad" ]; then
+            echo "Commits with a non-allowed email:"; echo "$bad"; exit 1
+          fi

appfactory-0.1.0/.github/workflows/release.yml

@@ -0,0 +1,19 @@
+name: Release
+
+# Publishes to PyPI with trusted publishing (no API token) when a version tag is pushed.
+on:
+  push:
+    tags: ["v*"]
+
+jobs:
+  pypi:
+    runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
+      id-token: write
+      contents: read
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v6
+      - run: uv build
+      - uses: pypa/gh-action-pypi-publish@release/v1

appfactory-0.1.0/.gitignore

@@ -0,0 +1,33 @@
+# secrets — never commit
+.p8
+*.p8
+AuthKey_*.p8
+*.env
+.env
+/config.toml
+.appfactory/
+# python
+__pycache__/
+.venv/
+*.pyc
+# node
+node_modules/
+# xcode
+DerivedData/
+*.xcuserstate
+build/
+*.ipa
+
+# supabase CLI leftovers
+templates/swiftui-subscription/supabase/.temp/
+
+.DS_Store
+**/.DS_Store
+
+# scratch builds (sample apps, DerivedData)
+.scratch/
+
+# private / local
+docs/superpowers/
+dist/
+*.bak-*

appfactory-0.1.0/.gitleaks.toml

@@ -0,0 +1,6 @@
+[extend]
+useDefault = true
+
+[allowlist]
+description = "Scaffold snapshot stores file content hashes, not secrets"
+paths = ['''tests/fixtures/scaffold_golden\.json''']

appfactory-0.1.0/.mcp.json

@@ -0,0 +1,40 @@
+{
+  "mcpServers": {
+    "appfactory": {
+      "type": "stdio",
+      "command": "uv",
+      "args": [
+        "run",
+        "--directory",
+        ".",
+        "python",
+        "-m",
+        "appfactory.server"
+      ],
+      "env": {}
+    },
+    "lottiefiles-creator": {
+      "type": "stdio",
+      "command": "npx",
+      "args": [
+        "-y",
+        "@lottiefiles/creator-mcp@latest"
+      ],
+      "env": {}
+    },
+    "xcodebuild": {
+      "type": "stdio",
+      "command": "npx",
+      "args": [
+        "-y",
+        "xcodebuildmcp@latest",
+        "mcp"
+      ],
+      "env": {}
+    },
+    "revenuecat": {
+      "type": "http",
+      "url": "https://mcp.revenuecat.ai/mcp"
+    }
+  }
+}

appfactory-0.1.0/.python-version

@@ -0,0 +1 @@
+3.12

appfactory-0.1.0/AGENTS.md

@@ -0,0 +1,13 @@
+# AGENTS.md
+
+AppFactory is an MCP server that takes a SwiftUI iOS subscription app from idea to the App Store.
+
+## Running the factory
+0. Call `setup_status()` first; fix missing setup with `setup_services` / `setup_set` / `setup_credentials` (secrets are typed by the user in a local browser page, never in the chat).
+1. Load the playbook: tool `playbook()` (or prompt `appfactory_run` / resource `appfactory://playbook`) and follow it.
+2. Before any work, ask the user about every optional part (`run_options()`) and save the answers. Skip whatever they turn off.
+3. A stage is done only when `pipeline_mark` passes its gate. App Store submission always stays with the human.
+
+## Working on this repo
+- `appfactory doctor` (status), `appfactory setup` (optional terminal wizard); tests: `uv run pytest -q`.
+- English only. No secrets or personal data in commits.

appfactory-0.1.0/CONTRIBUTING.md

@@ -0,0 +1,34 @@
+# Contributing
+
+## Setup
+```bash
+uv sync
+uv run pytest -q
+uv run appfactory doctor
+```
+Python 3.12+. The app template lives in `templates/swiftui-subscription/` (XcodeGen project); it is shipped
+inside the wheel as `appfactory/templates`.
+
+## Rules
+- English only: code, comments, docs, commit messages.
+- No secrets or personal data in commits, tests or fixtures (CI runs gitleaks). Commit with a
+  `@appfactory.local` or GitHub `noreply` email; CI checks author emails.
+- Keep it simple: prefer the standard library and existing helpers to new code or dependencies.
+- Tests must pass on Linux and macOS. Do not call real services in tests.
+
+## Adding a tool
+1. Add a function to `src/appfactory/server.py` decorated with `@tool` and a docstring whose first paragraph
+   says what it does (it becomes the tool description).
+2. If it talks to an optional service, add it to `TOOL_SERVICES` in `server.py` (service names come from
+   `SERVICES` in `src/appfactory/config.py`). Tools not listed always run.
+3. If it is irreversible or writes to an external account, gate it with `_approval(...)` and default to dry run.
+   If its result carries third-party text, add it to `UNTRUSTED_TOOLS`.
+4. If it belongs to a pipeline stage, wire it into `pipeline.py` / `gates.py`.
+5. Add a test, then regenerate the reference: `python docs/gen_tools.py`.
+
+## Adding a service
+Add an entry to `SERVICES` in `config.py` (description, keys, binaries), map its tools in `TOOL_SERVICES`,
+and add a row to the README table.
+
+## Pull requests
+Small and focused, tests included, `uv run pytest -q` green.

appfactory-0.1.0/GEMINI.md

@@ -0,0 +1 @@
+@AGENTS.md

appfactory-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 AppFactory contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

appfactory-0.1.0/PKG-INFO

@@ -0,0 +1,121 @@
+Metadata-Version: 2.5
+Name: appfactory
+Version: 0.1.0
+Summary: Open-source MCP server that takes an iOS subscription app from idea to the App Store
+Project-URL: Homepage, https://github.com/gbatistuta0/appfactory
+Project-URL: Repository, https://github.com/gbatistuta0/appfactory
+Project-URL: Issues, https://github.com/gbatistuta0/appfactory/issues
+Author: AppFactory contributors
+License-Expression: MIT
+License-File: LICENSE
+Keywords: app-store,claude-code,codex,gemini,ios,mcp,swiftui
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: Operating System :: MacOS
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Software Development :: Build Tools
+Requires-Python: >=3.12
+Requires-Dist: fastmcp>=2.3.0
+Requires-Dist: httpx>=0.27
+Provides-Extra: mascot
+Requires-Dist: numpy>=1.26; extra == 'mascot'
+Requires-Dist: opencv-python-headless>=4.9; extra == 'mascot'
+Requires-Dist: pillow>=10.0; extra == 'mascot'
+Description-Content-Type: text/markdown
+
+# AppFactory
+
+[![CI](https://github.com/gbatistuta0/appfactory/actions/workflows/ci.yml/badge.svg)](https://github.com/gbatistuta0/appfactory/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
+![Python 3.12+](https://img.shields.io/badge/python-3.12%2B-blue.svg)
+![MCP](https://img.shields.io/badge/MCP-server-8A2BE2.svg)
+
+An MCP server that lets your coding agent take a SwiftUI iOS subscription app from idea to the App Store.
+
+**What it does:** idea harvesting and validation, design, SwiftUI code from a template, Supabase backend,
+App Store Connect + RevenueCat setup, localization, analytics, ASO, screenshots and TestFlight. Every stage
+has a gate the agent must pass. You do the final App Store submission.
+
+## Quickstart
+
+Requires a Mac, Python 3.12+ and [uv](https://docs.astral.sh/uv/).
+
+### 1. Add the MCP to your agent
+
+One line, no installer. The server command is `uvx --from git+https://github.com/gbatistuta0/appfactory appfactory-mcp`.
+
+| Agent | How |
+|---|---|
+| Claude Code | `claude mcp add --scope user appfactory -- uvx --from git+https://github.com/gbatistuta0/appfactory appfactory-mcp` |
+| Codex CLI | `~/.codex/config.toml`: `[mcp_servers.appfactory]` with `command = "uvx"`, `args = ["--from", "git+https://github.com/gbatistuta0/appfactory", "appfactory-mcp"]` |
+| Gemini CLI | `~/.gemini/settings.json`: `"mcpServers": {"appfactory": {"command": "uvx", "args": ["--from", "git+https://github.com/gbatistuta0/appfactory", "appfactory-mcp"]}}` |
+| Cursor | `~/.cursor/mcp.json`: same shape as Gemini |
+
+### 2. Ask your agent: "Set up AppFactory"
+
+The agent calls `setup_status`, asks which services you want, and turns them on. Keys never go through the chat:
+for secrets it opens a local page in your browser (127.0.0.1 only, one-time token) where you type them; they are
+stored in `~/.appfactory/config.toml` (mode 0600). `appfactory doctor` shows what is configured.
+
+Then try this first prompt. It needs no accounts:
+
+> Find 3 underserved iOS app niches in Health & Fitness and validate the best one
+
+## Works with
+
+Claude Code, Codex CLI, Gemini CLI and Cursor. The run playbook is served by the MCP server itself (tool
+`playbook()`, prompt `appfactory_run`, resource `appfactory://playbook`), so any MCP-capable agent can follow it.
+
+## Choose what you use
+
+Every service is optional. Tools for a disabled service do nothing and the pipeline skips those stages
+(`appfactory services enable|disable NAME`).
+
+| Service | What it enables | Needs |
+|---|---|---|
+| research | Idea harvesting, ASO research (always on) | nothing |
+| apple | App Store Connect: apps, in-app purchases, metadata, TestFlight | ASC API key, `asc` CLI |
+| xcode | Local builds, simulator, archives | Xcode, `xcodegen` |
+| supabase | Backend: database, edge functions, credits | access token, `supabase`, `deno` |
+| revenuecat | Subscriptions and entitlements | RevenueCat secret key |
+| ai | AI features through a server-side proxy | optional provider keys |
+| firebase | Firebase Analytics setup | `firebase` CLI |
+| github | A repo and issues per app | `gh` |
+| design | Screen design through the claude-design MCP | claude-design MCP |
+| maestro | End-to-end UI tests on the simulator | Maestro, Java 17+ |
+| lottie | Lottie animations | `node` |
+
+Details and credential steps: [docs/SETUP.md](docs/SETUP.md).
+
+## Safety
+
+- **Approvals.** Irreversible or outward actions (submission, store/backend/RevenueCat writes, GitHub pushes,
+  uploads) do not run when an agent calls them. They wait for `appfactory approve <id>` in your terminal.
+- **Dry run by default** for deploys, repo creation, uploads and issue writes.
+- **Secrets stay local** and are scrubbed from every tool result.
+- **Untrusted content** (App Store listings, reviews) is labelled as data, not instructions.
+
+Full threat model and limits: [SECURITY.md](SECURITY.md).
+
+## How a run works
+
+1. **Interview.** Before any work the agent calls `run_options()`, asks you about every optional part, and saves
+   your answers. Anything you turn off is skipped.
+2. **Pipeline with gates.** `scaffold, design, features, backend, store setup, localize, analytics, ASO,
+   metadata, screenshots, TestFlight`. A stage is done only when `pipeline_mark` passes its gate; blockers stop
+   the run with a `NEEDS_HUMAN.md`.
+3. **You submit.** App Store submission is always human, in the App Store Connect web UI.
+
+## Docs
+
+- [docs/SETUP.md](docs/SETUP.md): credentials and per-app choices
+- [docs/PIPELINE_PLAYBOOK.md](docs/PIPELINE_PLAYBOOK.md): the why, order and gotchas of every stage
+- [docs/TOOLS.md](docs/TOOLS.md): every tool (generated)
+- [CONTRIBUTING.md](CONTRIBUTING.md), [SECURITY.md](SECURITY.md), [AGENTS.md](AGENTS.md)
+
+## License
+
+[MIT](LICENSE)
+
+<!-- mcp-name: io.github.gbatistuta0/appfactory -->

appfactory-0.1.0/README.md

@@ -0,0 +1,95 @@
+# AppFactory
+
+[![CI](https://github.com/gbatistuta0/appfactory/actions/workflows/ci.yml/badge.svg)](https://github.com/gbatistuta0/appfactory/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
+![Python 3.12+](https://img.shields.io/badge/python-3.12%2B-blue.svg)
+![MCP](https://img.shields.io/badge/MCP-server-8A2BE2.svg)
+
+An MCP server that lets your coding agent take a SwiftUI iOS subscription app from idea to the App Store.
+
+**What it does:** idea harvesting and validation, design, SwiftUI code from a template, Supabase backend,
+App Store Connect + RevenueCat setup, localization, analytics, ASO, screenshots and TestFlight. Every stage
+has a gate the agent must pass. You do the final App Store submission.
+
+## Quickstart
+
+Requires a Mac, Python 3.12+ and [uv](https://docs.astral.sh/uv/).
+
+### 1. Add the MCP to your agent
+
+One line, no installer. The server command is `uvx --from git+https://github.com/gbatistuta0/appfactory appfactory-mcp`.
+
+| Agent | How |
+|---|---|
+| Claude Code | `claude mcp add --scope user appfactory -- uvx --from git+https://github.com/gbatistuta0/appfactory appfactory-mcp` |
+| Codex CLI | `~/.codex/config.toml`: `[mcp_servers.appfactory]` with `command = "uvx"`, `args = ["--from", "git+https://github.com/gbatistuta0/appfactory", "appfactory-mcp"]` |
+| Gemini CLI | `~/.gemini/settings.json`: `"mcpServers": {"appfactory": {"command": "uvx", "args": ["--from", "git+https://github.com/gbatistuta0/appfactory", "appfactory-mcp"]}}` |
+| Cursor | `~/.cursor/mcp.json`: same shape as Gemini |
+
+### 2. Ask your agent: "Set up AppFactory"
+
+The agent calls `setup_status`, asks which services you want, and turns them on. Keys never go through the chat:
+for secrets it opens a local page in your browser (127.0.0.1 only, one-time token) where you type them; they are
+stored in `~/.appfactory/config.toml` (mode 0600). `appfactory doctor` shows what is configured.
+
+Then try this first prompt. It needs no accounts:
+
+> Find 3 underserved iOS app niches in Health & Fitness and validate the best one
+
+## Works with
+
+Claude Code, Codex CLI, Gemini CLI and Cursor. The run playbook is served by the MCP server itself (tool
+`playbook()`, prompt `appfactory_run`, resource `appfactory://playbook`), so any MCP-capable agent can follow it.
+
+## Choose what you use
+
+Every service is optional. Tools for a disabled service do nothing and the pipeline skips those stages
+(`appfactory services enable|disable NAME`).
+
+| Service | What it enables | Needs |
+|---|---|---|
+| research | Idea harvesting, ASO research (always on) | nothing |
+| apple | App Store Connect: apps, in-app purchases, metadata, TestFlight | ASC API key, `asc` CLI |
+| xcode | Local builds, simulator, archives | Xcode, `xcodegen` |
+| supabase | Backend: database, edge functions, credits | access token, `supabase`, `deno` |
+| revenuecat | Subscriptions and entitlements | RevenueCat secret key |
+| ai | AI features through a server-side proxy | optional provider keys |
+| firebase | Firebase Analytics setup | `firebase` CLI |
+| github | A repo and issues per app | `gh` |
+| design | Screen design through the claude-design MCP | claude-design MCP |
+| maestro | End-to-end UI tests on the simulator | Maestro, Java 17+ |
+| lottie | Lottie animations | `node` |
+
+Details and credential steps: [docs/SETUP.md](docs/SETUP.md).
+
+## Safety
+
+- **Approvals.** Irreversible or outward actions (submission, store/backend/RevenueCat writes, GitHub pushes,
+  uploads) do not run when an agent calls them. They wait for `appfactory approve <id>` in your terminal.
+- **Dry run by default** for deploys, repo creation, uploads and issue writes.
+- **Secrets stay local** and are scrubbed from every tool result.
+- **Untrusted content** (App Store listings, reviews) is labelled as data, not instructions.
+
+Full threat model and limits: [SECURITY.md](SECURITY.md).
+
+## How a run works
+
+1. **Interview.** Before any work the agent calls `run_options()`, asks you about every optional part, and saves
+   your answers. Anything you turn off is skipped.
+2. **Pipeline with gates.** `scaffold, design, features, backend, store setup, localize, analytics, ASO,
+   metadata, screenshots, TestFlight`. A stage is done only when `pipeline_mark` passes its gate; blockers stop
+   the run with a `NEEDS_HUMAN.md`.
+3. **You submit.** App Store submission is always human, in the App Store Connect web UI.
+
+## Docs
+
+- [docs/SETUP.md](docs/SETUP.md): credentials and per-app choices
+- [docs/PIPELINE_PLAYBOOK.md](docs/PIPELINE_PLAYBOOK.md): the why, order and gotchas of every stage
+- [docs/TOOLS.md](docs/TOOLS.md): every tool (generated)
+- [CONTRIBUTING.md](CONTRIBUTING.md), [SECURITY.md](SECURITY.md), [AGENTS.md](AGENTS.md)
+
+## License
+
+[MIT](LICENSE)
+
+<!-- mcp-name: io.github.gbatistuta0/appfactory -->

appfactory-0.1.0/SECURITY.md

@@ -0,0 +1,36 @@
+# Security
+
+## Threat model
+
+AppFactory tools are driven by coding agents, often unattended, that read untrusted web data (App Store
+listings, competitor pages, reviews). A prompt injection in that data could try to make the agent spend money,
+leak secrets or make irreversible changes to your App Store, Supabase, RevenueCat or GitHub accounts.
+
+Defenses in the server:
+
+- **Out-of-band approvals.** Irreversible or outward actions (App Store submission, `store_setup` apply, app
+  creation, live backend deploys, Supabase SQL/secrets/projects, RevenueCat writes, GitHub repos/pushes/issues,
+  App Store uploads, TestFlight, Custom Product Pages) do not run when an agent calls them. They create a pending
+  record in `~/.appfactory/approvals/` and the human approves it with `appfactory approve <id>` in a terminal
+  (interactive y/N). An approval is single use, bound to the exact arguments and expires after 30 minutes.
+  Config `approvals = "off"` disables this, except for App Store submission and destructive SQL (DROP,
+  TRUNCATE, ALTER … DROP, GRANT/REVOKE on auth, DELETE/UPDATE without WHERE), which always ask.
+- **Dry run by default** for deploys, repo creation, preview uploads and GitHub issue writes.
+- **Secrets never in tool results.** Known secret values are replaced with `***` in every tool result and in
+  subprocess output. Secrets cannot be set through a tool; enter them with `appfactory setup`.
+- **Untrusted content is labelled.** Results carrying third-party text include an `untrusted_content` note and
+  the playbook tells agents to treat it as data, never as instructions.
+
+Limits: approvals protect the MCP channel. An agent that can run arbitrary shell commands as your user can read
+`~/.appfactory` and could bypass them; restrict shell access (allowlists, sandboxing) for unattended runs.
+
+## Where secrets live
+
+`~/.appfactory/config.toml` (mode 0600), plus Supabase service-role keys in `~/.appfactory/supabase/<ref>.json`
+(0600) and your `.p8` key files. Nothing secret is written to app repos, and AI keys go only to server-side
+Supabase secrets, never into the app binary.
+
+## Reporting a vulnerability
+
+Please use GitHub's private vulnerability reporting on this repository (Security tab → "Report a
+vulnerability"). Do not open a public issue for security problems.