App Store Release Director
Broad release orchestration. For focused asc work, delegate to appstore-connect-cli, appstore-id-resolver, appstore-archive-uploader, appstore-release-planner, appstore-review-readiness, appstore-metadata-sync, appstore-metadata-localizer, appstore-screenshot-pipeline, and appstore-signing-setup.
Workflow
- Discover release truth:
- git root, workspace/project, scheme, bundle ID, version/build, deployment target, entitlements, generator ownership;
- existing handoff/docs:
apple-publishing-handoff.md, manifest JSON, release, appstore, testflight, fastlane, ExportOptions.plist.
- Verify Apple account/signing:
- team, Team ID, API key, identities, Bundle ID resource/capabilities, distribution cert, provisioning profile;
- keep
.p8, .p12, profiles, passwords, and decoded plists out of git; prefer .codex-private/apple/ or a secret store.
- Prepare App Store Connect:
- app record, platform, bundle, app info, categories, pricing/availability, age rating, privacy/support URLs, screenshots, App Privacy, review details, release option;
- for subscriptions, verify products and Terms/EULA link. Standard EULA:
https://www.apple.com/legal/internet-services/itunes/dev/stdeula/.
- Compliance preflight:
- production runtime config, legal URLs return 2xx/3xx, encryption/export compliance, privacy/tracking claims match code/SDKs.
- Build/test/archive/export/upload:
- choose unique build number from live ASC state;
- run required tests/smoke checks;
- archive for
generic/platform=iOS, export App Store IPA, validate, upload, wait for processing.
- Link build and submit/readiness:
- attach processed build, resolve metadata-only issues before new binaries, cancel/complete old submissions if blocking.
- Finish evidence:
- handoff/manifest: version/build, archive/IPA paths, SHA-256, delivery UUID, ASC build state, review submission ID, legal URLs, screenshots, remaining risks.
References
Load only the current stage:
references/end-to-end-workflow.mdreferences/signing-and-provisioning.mdreferences/app-store-connect-api.mdreferences/metadata-compliance.mdreferences/build-upload-submit.mdreferences/troubleshooting.md
Helpers:
scripts/make_export_options.pyscripts/appstore_preflight.py
Run helper scripts with python3 and inspect --help.
Rules
- Operate from live repo/ASC/App Review state, not memory.
- Never commit Apple secrets/profiles unless explicitly requested and the repo is intended for them.
- Do not overwrite user changes or release docs without reading them.
- Apple requirements change; verify current screenshots, privacy, subscriptions, and review behavior.
- For legal text, draft only practical copy and state which business/legal facts need owner confirmation.
- If blocked by Apple web-only UI, permissions, legal answers, or 2FA, stop with evidence and the smallest required user action.
Final Report
Report build/version, validation/upload status and delivery UUID, ASC build/review status, legal/privacy/screenshot/subscription/encryption state, files/artifacts changed, tests run, and anything not verified.
1---2name: appstore-release-director3description: iOS App Store release orchestration from a local repo through signing, metadata, privacy, screenshots, upload, TestFlight, review submission/resubmission, blocker triage, and release evidence.4---56# App Store Release Director78Broad release orchestration. For focused `asc` work, delegate to `appstore-connect-cli`, `appstore-id-resolver`, `appstore-archive-uploader`, `appstore-release-planner`, `appstore-review-readiness`, `appstore-metadata-sync`, `appstore-metadata-localizer`, `appstore-screenshot-pipeline`, and `appstore-signing-setup`.910## Workflow11121. Discover release truth:13 - git root, workspace/project, scheme, bundle ID, version/build, deployment target, entitlements, generator ownership;14 - existing handoff/docs: `apple-publishing-handoff.md`, manifest JSON, `release`, `appstore`, `testflight`, `fastlane`, `ExportOptions.plist`.152. Verify Apple account/signing:16 - team, Team ID, API key, identities, Bundle ID resource/capabilities, distribution cert, provisioning profile;17 - keep `.p8`, `.p12`, profiles, passwords, and decoded plists out of git; prefer `.codex-private/apple/` or a secret store.183. Prepare App Store Connect:19 - app record, platform, bundle, app info, categories, pricing/availability, age rating, privacy/support URLs, screenshots, App Privacy, review details, release option;20 - for subscriptions, verify products and Terms/EULA link. Standard EULA: `https://www.apple.com/legal/internet-services/itunes/dev/stdeula/`.214. Compliance preflight:22 - production runtime config, legal URLs return 2xx/3xx, encryption/export compliance, privacy/tracking claims match code/SDKs.235. Build/test/archive/export/upload:24 - choose unique build number from live ASC state;25 - run required tests/smoke checks;26 - archive for `generic/platform=iOS`, export App Store IPA, validate, upload, wait for processing.276. Link build and submit/readiness:28 - attach processed build, resolve metadata-only issues before new binaries, cancel/complete old submissions if blocking.297. Finish evidence:30 - handoff/manifest: version/build, archive/IPA paths, SHA-256, delivery UUID, ASC build state, review submission ID, legal URLs, screenshots, remaining risks.3132## References3334Load only the current stage:3536- `references/end-to-end-workflow.md`37- `references/signing-and-provisioning.md`38- `references/app-store-connect-api.md`39- `references/metadata-compliance.md`40- `references/build-upload-submit.md`41- `references/troubleshooting.md`4243Helpers:4445- `scripts/make_export_options.py`46- `scripts/appstore_preflight.py`4748Run helper scripts with `python3` and inspect `--help`.4950## Rules5152- Operate from live repo/ASC/App Review state, not memory.53- Never commit Apple secrets/profiles unless explicitly requested and the repo is intended for them.54- Do not overwrite user changes or release docs without reading them.55- Apple requirements change; verify current screenshots, privacy, subscriptions, and review behavior.56- For legal text, draft only practical copy and state which business/legal facts need owner confirmation.57- If blocked by Apple web-only UI, permissions, legal answers, or 2FA, stop with evidence and the smallest required user action.5859## Final Report6061Report build/version, validation/upload status and delivery UUID, ASC build/review status, legal/privacy/screenshot/subscription/encryption state, files/artifacts changed, tests run, and anything not verified.
Xopoko