Skip to content

Full CLI autonomy: membership + Apple ID is the whole requirement (v1.64.4.0)#33

Merged
time-attack merged 3 commits into
mainfrom
time-attack/appleship-full-autonomy
Jul 24, 2026
Merged

Full CLI autonomy: membership + Apple ID is the whole requirement (v1.64.4.0)#33
time-attack merged 3 commits into
mainfrom
time-attack/appleship-full-autonomy

Conversation

@time-attack

@time-attack time-attack commented Jul 24, 2026

Copy link
Copy Markdown
Owner

Follow-up to #32, closing the last false gate. The adapter previously treated a missing .p8 API key as web residue. It isn't: Apple ID session auth uploads and submits without one — machine-level fastlane deliver/pilot with FASTLANE_SESSION (minted once by fastlane spaceauth) and FASTLANE_APPLE_APPLICATION_SPECIFIC_PASSWORD, both env credentials that never touch argv or logs. fastlane remains a consent-gated machine tool, never a project dependency.

New autonomy contract in APPLE-RELEASE.md: an active paid membership plus Apple ID credentials runs the ENTIRE release from the CLI — asc web first (app record, bundle IDs), fastlane as the completeness fallback for any step asc web lacks. Never declare a manual gate that a web-session tool covers. Web-only residue: the membership purchase itself (a precondition, not a release step) and, for paid apps only, the one-time banking/tax agreement. A free app ships with zero browser steps.

Test evidence: test:gstack2 gate green (parity 4,359), release-hardening 11/11.

🤖 Generated with Claude Code


Summary by cubic

Make Apple releases fully CLI-driven: an active membership plus Apple ID credentials is enough to ship, even without a .p8 API key. The adapter prefers asc web for app record and bundle IDs, and falls back to session-authenticated fastlane (deliver/pilot) for upload, TestFlight, and submit.

  • Refactors
    • Enforce autonomy contract: missing .p8 no longer blocks; use FASTLANE_SESSION and FASTLANE_APPLE_APPLICATION_SPECIFIC_PASSWORD (env-only).
    • Update skills/ship/references/APPLE-RELEASE.md and generator to state: browser is only for membership purchase and paid-app banking/tax; free apps have zero browser steps.
    • Version bump to 1.64.4.0 and CHANGELOG update.

Written for commit 5446e3c. Summary will update on new commits.

Review in cubic

Sinabina and others added 3 commits July 23, 2026 17:18
Session-authenticated fastlane deliver/pilot (machine tool, env
credentials only) uploads and submits without an API key. Autonomy
contract: membership + Apple ID creds run the whole release from CLI;
web residue is membership purchase and paid-app banking/tax only.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@cursor

cursor Bot commented Jul 24, 2026

Copy link
Copy Markdown

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

@time-attack
time-attack merged commit efa24a1 into main Jul 24, 2026
0 of 2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant