mobile-app-developer
End-to-end playbook for shipping an Expo / React Native app — from scaffolding to TestFlight / Play Store — fully automated from a Linux sandbox.
When to Trigger
Trigger this skill when the user wants to:
- Scaffold or modify a React Native / Expo project
- Run / test / debug the app locally (Expo Go, dev client, simulator)
- Generate a web preview page with phone frame + Expo Go QR code
- Configure EAS Build (cloud build) for iOS or Android
- Publish to TestFlight (iOS internal testing) or Google Play Internal Testing
- Submit to App Store / Play Store public release
- Set up ASC API Key auth (bypass Apple 2FA)
- Replace icons / splash screens for store compliance
- Diagnose EAS build failures (peer deps, lock files, credentials, fingerprint, etc.)
Do NOT trigger for: pure native iOS/Android (no Expo), Flutter, Cordova/Capacitor, KMP/Compose Multiplatform.
Skill Layout
This skill is split into focused documents. Read the relevant one(s) on demand — do NOT preload all.
| File |
Read when… |
development.md |
Setting up project, installing deps, configuring app.json, preparing icons/splash, running on simulator/device, fixing peer-dep / lock-file errors, managing env vars / secrets |
publishing.md |
Configuring eas.json submit profile, ASC API Key / Play Service Account, running build + submit, diagnosing submit failures, App Store / Play Store metadata checklists |
preview.md |
Generating a web preview page with phone frame + Expo Go QR code. Uses Expo Web (react-native-web) static export for browser preview and Expo dev server for real-device QR scanning |
If the user's task spans multiple (e.g. "build a new Expo app and ship it to TestFlight"), read development.md first, then publishing.md.
Default Tech Stack
| Layer |
Choice |
| Framework |
Expo (latest stable — check https://docs.expo.dev/versions/latest/ before scaffolding) |
| Build / Distribution |
EAS Build + EAS Submit (Expo cloud) |
| Auth (Apple) |
App Store Connect API Key (.p8) — bypasses 2FA |
| Auth (Google) |
Play Console Service Account JSON |
| Auth (Expo) |
Personal Access Token via EXPO_TOKEN |
Hard Preconditions
Before starting any build or publish work, confirm with the user:
- Expo account +
EXPO_TOKEN (https://expo.dev/accounts//settings/access-tokens)
- For iOS:
- Apple Developer account (paid, $99/year)
- ASC API Key:
.p8 file + Issuer ID + Key ID (role ≥ App Manager; ≥ Admin to create certs)
- Apple Team ID + ASC App ID + Bundle Identifier
- For Android:
- Google Play Console account ($25 one-time)
- Service Account JSON key (created in Play Console → API access)
- Package name + Play Console app already created
- First AAB must be uploaded manually to Play Console before automation works
If anything is missing, ask the user before proceeding. Do not guess.
Sandbox Requirements
The sandbox/CI must have:
node --version # >= 18
npm --version # >= 9
convert -version # ImageMagick — for icon/splash conversion
expect -v # for first-time non-interactive credential setup
curl --version # for fetching build logs
Quick check:
for cmd in node npm convert expect curl; do
command -v $cmd >/dev/null 2>&1 && echo "[OK] $cmd" || echo "[MISSING] $cmd"
done
If anything is missing, install before continuing (apt-get install imagemagick expect).
Architecture Recommendation
| Phase |
AI/API key location |
Why |
| Internal testing (TestFlight / Play Internal) |
OK to call AI Gateway directly from client |
Speed of iteration; risk is bounded by closed tester pool |
| Public release |
MUST proxy through your own backend |
Embedded keys can be extracted from any IPA/AAB |
Useful URLs
Notes
- All commands tested on Linux. macOS users get extra options (local Xcode, simctl) which this skill avoids for portability.
- Treat
.p8 files and Service Account JSONs like passwords. Always gitignore (*.p8, *-service-account.json).
- This skill assumes EAS cloud build. Local builds (
expo prebuild + native toolchain) are out of scope.
1---2name: mobile-app-developer3description: End-to-end mobile app development and publishing using Expo + EAS. Covers project scaffolding, asset preparation, peer-dep / lock-file troubleshooting (development.md), web preview with phone frame and Expo Go QR code (preview.md), AND automated build + submit to TestFlight / App Store (publishing.md), with full automation via Apple ASC API Key (no Mac, no Xcode, no 2FA required). Use when the user wants to build, test, preview, publish, or automate the release pipeline of a React Native / Expo iOS or Android app.4---56# mobile-app-developer78End-to-end playbook for shipping an Expo / React Native app — from scaffolding to TestFlight / Play Store — fully automated from a Linux sandbox.910## When to Trigger1112Trigger this skill when the user wants to:1314- Scaffold or modify a React Native / Expo project15- Run / test / debug the app locally (Expo Go, dev client, simulator)16- **Generate a web preview page** with phone frame + Expo Go QR code17- Configure EAS Build (cloud build) for iOS or Android18- Publish to **TestFlight** (iOS internal testing) or **Google Play Internal Testing**19- Submit to App Store / Play Store public release20- Set up ASC API Key auth (bypass Apple 2FA)21- Replace icons / splash screens for store compliance22- Diagnose EAS build failures (peer deps, lock files, credentials, fingerprint, etc.)2324Do NOT trigger for: pure native iOS/Android (no Expo), Flutter, Cordova/Capacitor, KMP/Compose Multiplatform.2526## Skill Layout2728This skill is split into focused documents. Read the relevant one(s) on demand — do NOT preload all.2930| File | Read when… |31|---|---|32| **`development.md`** | Setting up project, installing deps, configuring `app.json`, preparing icons/splash, running on simulator/device, fixing peer-dep / lock-file errors, managing env vars / secrets |33| **`publishing.md`** | Configuring `eas.json` submit profile, ASC API Key / Play Service Account, running build + submit, diagnosing submit failures, App Store / Play Store metadata checklists |34| **`preview.md`** | Generating a web preview page with phone frame + Expo Go QR code. Uses Expo Web (react-native-web) static export for browser preview and Expo dev server for real-device QR scanning |3536If the user's task spans multiple (e.g. "build a new Expo app and ship it to TestFlight"), read `development.md` first, then `publishing.md`.3738## Default Tech Stack3940| Layer | Choice |41|---|---|42| Framework | Expo (latest stable — check `https://docs.expo.dev/versions/latest/` before scaffolding) |43| Build / Distribution | EAS Build + EAS Submit (Expo cloud) |44| Auth (Apple) | App Store Connect API Key (`.p8`) — bypasses 2FA |45| Auth (Google) | Play Console Service Account JSON |46| Auth (Expo) | Personal Access Token via `EXPO_TOKEN` |4748## Hard Preconditions4950Before starting **any** build or publish work, confirm with the user:5152- Expo account + `EXPO_TOKEN` (https://expo.dev/accounts/<user>/settings/access-tokens)53- For iOS:54 - Apple Developer account (paid, $99/year)55 - ASC API Key: `.p8` file + Issuer ID + Key ID (role ≥ App Manager; ≥ Admin to create certs)56 - Apple Team ID + ASC App ID + Bundle Identifier57- For Android:58 - Google Play Console account ($25 one-time)59 - Service Account JSON key (created in Play Console → API access)60 - Package name + Play Console app already created61 - **First AAB must be uploaded manually to Play Console** before automation works6263If anything is missing, **ask the user** before proceeding. Do not guess.6465## Sandbox Requirements6667The sandbox/CI must have:6869```bash70node --version # >= 1871npm --version # >= 972convert -version # ImageMagick — for icon/splash conversion73expect -v # for first-time non-interactive credential setup74curl --version # for fetching build logs75```7677Quick check:78```bash79for cmd in node npm convert expect curl; do80 command -v $cmd >/dev/null 2>&1 && echo "[OK] $cmd" || echo "[MISSING] $cmd"81done82```8384If anything is missing, install before continuing (`apt-get install imagemagick expect`).8586## Architecture Recommendation8788| Phase | AI/API key location | Why |89|---|---|---|90| Internal testing (TestFlight / Play Internal) | OK to call AI Gateway directly from client | Speed of iteration; risk is bounded by closed tester pool |91| Public release | **MUST** proxy through your own backend | Embedded keys can be extracted from any IPA/AAB |9293## Useful URLs9495- Expo SDK matrix: https://docs.expo.dev/versions/latest/96- EAS dashboard: `https://expo.dev/accounts/<owner>/projects/<slug>/builds`97- ASC API Keys: https://appstoreconnect.apple.com/access/integrations/api98- Play Console API access: https://play.google.com/console → Setup → API access99- Expo PAT: https://expo.dev/accounts/<user>/settings/access-tokens100101## Notes102103- All commands tested on Linux. macOS users get extra options (local Xcode, simctl) which this skill avoids for portability.104- Treat `.p8` files and Service Account JSONs like passwords. Always gitignore (`*.p8`, `*-service-account.json`).105- This skill assumes EAS cloud build. Local builds (`expo prebuild` + native toolchain) are out of scope.
happycapy-ai