SmoothSubmit v0.1.0-alpha.2

Validation-driven improvements to SmoothSubmit's initial OSS alpha.

What was actually verified

• Audits completed on pinned public text snapshots of IceCubesApp, KeePassium and NetNewsWire.
• Nine injected setting defects (minimum OS, Manifest types and reason codes) were detected, produced focused fix prompts and became RESOLVED after repair on the same target. Original source/configuration hashes remained unchanged.
• Four limited real-code controls: ambient playback, ordinary links and model timestamps were not promoted to inappropriate risk candidates; existing SDK restoration was detected without claiming runtime success.
• 57 automated regression tests passed locally and in GitHub CI on macOS 14 with Node.js 22.18 and 24. Clean-package installation and offline audit/fix smoke checks also passed.

See the validation report and its pinned inputs, execution record, reproduction commands and limitations. These are controlled setting experiments, not measured rejection-rate or developer-time improvements. Upstream apps are not certified compliant or declared defective.

Changes

• Resolve newer Xcode xcconfig anchors and explain target selection.
• Expose local Swift package coverage gaps and preprocessed Info.plist values without executing project scripts.
• Narrow payment, microphone and file-timestamp candidates; recognize existing SDK restore flows.
• Detect invalid reason declarations even when another declaration is valid.
• Give concrete setting/flow guidance and prioritize actionable report rows.
• Allow individually rechecked structural settings to resolve despite unrelated input limitations while keeping global partial coverage and runtime Unknowns visible.
• Accept --root as an alias for --path.

Install

Extract the entire Skill folder into your agent's project Skill directory, or install the downloaded CLI archive with npm install --global ./smoothsubmit-cli-0.1.0-alpha.2.tgz. CLI requires macOS 14+ and Node.js 22.18+. The npm registry package remains unpublished.

This release has a new rulepack version. Preserve old audits and create a fresh baseline; comparisons across different rulepacks remain NOT_COMPARABLE.

Live cross-host discovery, device/backend execution, final submitted archives, App Store Connect and user outcome measurement remain unverified. See release status.

SmoothSubmit v0.1.0-alpha.1

SmoothSubmit helps coding agents audit, fix and verify iOS App Store submission risks before submission.

This is the first usable OSS alpha. The specification and design describe the target MVP; see release status for implemented scope and verification limits.

Included

• Standalone Skill for CLI-free basic audits in Claude Code, Codex and Cursor.
• Optional macOS CLI with 19 rule families, evidence-backed reports, fix prompts and before/after verification.
• Audit first, then ask only consequential unknowns. Normal audits do not modify source/configuration, write App Store Connect data or submit apps.
• Official Apple source records, local rule data, specifications, design, synthetic examples and Apache-2.0 license.

Downloads

• smoothsubmit-skill-0.1.0-alpha.1.tar.gz: extract the entire smoothsubmit folder into your project's .agents/skills/ (Codex), .claude/skills/ (Claude Code) or .cursor/skills/ (Cursor).
• smoothsubmit-cli-0.1.0-alpha.1.tgz: requires macOS 14+ and Node.js 22.18+. Install the downloaded archive with npm install --global ./smoothsubmit-cli-0.1.0-alpha.1.tgz, then run smoothsubmit audit --root /path/to/app.
• SHA256SUMS: SHA-256 checksums for both archives.

The npm registry package is not published. The CLI archive is distributed through this GitHub Release; npm downloads its runtime dependencies during installation.

Validation and limits

46 automated tests passed locally and in GitHub CI on macOS 14 with Node.js 22.18 and 24. Clean-package installation, offline audit and read-only fix-prompt generation passed. Skill frontmatter and resources passed structural validation. A 1,000-file / approximately 20MB Swift fixture took 3.4 seconds and 145MiB maximum process RSS on the release machine.

Live end-to-end behavior in all three agent hosts, Xcode builds, device runs and actual App Store submission remain unverified. Swift analysis is lexical, SDK inventory does not prove archive manifest/signature compliance, and runtime/context-dependent conditions remain Unknown or Needs Review. This release does not guarantee approval.