One tool, one question: fastlane-only Apple release (v1.64.7.0)

[time-attack]

Live nimbus test round 2. The adapter still sent the user to a separate Terminal window and narrated a five-step plan. Product owner's three assumptions, now baked in as the contract:

1. The user has never heard of a .p8. Credential vocabulary (API keys, .p8, sessions) is banned from everything user-facing. They paid $99; they want to ship.
2. One tool. fastlane runs the entire release — produce, cert, sigh, gym, pilot, deliver, frameit. No asc, no CLI zoo, no auth branches. Installed with a one-line announcement, never a question.
3. One question, ever: "authorize this release" — membership confirmation + ! fastlane spaceauth in-session (password + one 2FA code straight to Apple; printed token kept out of the transcript, the ~/.fastlane/spaceship/ cookie is the real credential; separate terminal demoted to hosts without an interactive path). Everything after — installs, asset generation (simulator capture + frameit + SnapAI icon, autonomous), upload, storefront, Submit — is covered by that single authorization.

Test evidence: test:gstack2 gate green (parity 4,359), release-hardening 11/11.

🤖 Generated with Claude Code

---

Summary by cubic

Rewrote the Apple release flow to run end-to-end with fastlane and ask only one question: authorize the release. This removes multi-CLI paths, handles sign-in in-session, and automates missing store assets.

• New Features

  • Fastlane-only pipeline: produce, cert, sigh, gym, pilot, deliver, frameit. Auto-install with a one-line announcement.
  • One authorization moment: membership confirmation + in-session fastlane spaceauth. No .p8 or credential terms shown. Session cookie used; no further prompts.
  • Autonomous assets: simulator capture + frameit + SnapAI icon. User files preferred; richer generators are opt-in.
  • Storefront completion: deliver manages listing, screenshots, attach build, and submit. TestFlight via pilot. Upload/submit run as external effects with durable keys.

• Refactors

  • Updated Apple adapter contract in scripts/gstack2/generate-skill-tree.ts and skills/ship/references/APPLE-RELEASE.md to reflect the fastlane-only flow.
  • Version bump to 1.64.7.0 with CHANGELOG entry.

^{Written for commit 477e54c. Summary will update on new commits.}

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.