Play console steps without an API as agent plans: play-store-settings (App category; play listing cannot set it), play-app-content (every card in order, one owner batch) and its cards (privacy policy, ads, sign in details, advertising ID, government, financial, health), play-production-countries and play-production-release; IARC plan with the Terms of Use agreement, follow-ups (console.contentRating.details, products[].randomRewards, social) and the Summary's final Save; config play.category / countries / managedPublishing, console.appContent; check, validate, play status and play release reminders; inPageLoop helper and material checkbox clicks; App Privacy published signal; first IAPs via apple iap-submit --with-version. Pitfalls 27, 28

CHANGELOG.md

@@ -2,6 +2,31 @@
 
 ## Unreleased
 
+- Play console steps without an API, from a real first release (2026-10-12; pitfalls 27 and 28). New agent-only
+  `console plan` / `console verify` forms (also in the MCP `console_plan` / `console_verify` lists):
+  `play-store-settings` (the App category: `play listing` cannot set it, so a new app showed "Not selected"; the
+  first Edit > App or game > the Category `[role=option]` > Save), `play-app-content` (every card of
+  `/app-content/overview` in order with its page, its "Start <Name> declaration" button, its plan and one batch of
+  owner questions) and the cards `play-privacy-policy`, `play-ads`, `play-sign-in-details` (the demo account is
+  typed by the owner, never printed), `play-advertising-id`, `play-government-apps`, `play-financial-features`,
+  `play-health-apps`; `play-production-countries` (edits.countryAvailability is read-only) and
+  `play-production-release` (Edit release > Next > Save; the owner's "Send changes for review", a real click).
+  New config: `play.category` (checked against Play's game / app lists; default from an exact App Store category
+  match), `play.countries`, `play.managedPublishing`, `console.contentRating.details` (the IARC follow-ups each Yes
+  reveals), `console.appContent`, `social`, `products[].randomRewards` (loot boxes Yes / No from the catalog).
+  `check` warns without a Play category and counts the App content answers still owed; `validate` adds the category
+  reminder and "production has 0 countries"; `play status` shows the category as a console step; `play release`
+  warns that an approved production release goes live by itself while managed publishing is off.
+- IARC content rating plan: page 1's IARC Terms of Use box is an agreement (never pressed, never ticked: the click
+  gate now refuses "terms of use"); the questionnaire is one long page whose Yes answers reveal follow-ups; the
+  Summary's final button is "Save", not "Submit"; App content forms deep-link to their card pages.
+- Every console plan ships `inPageLoop`, a ready-made in-page helper (window.__sb.run, polled through window.__log):
+  one evaluate call times out at about 45 s on big Play pages. Play plans and `console fill` click the inner
+  `[role=checkbox]` of material checkboxes like the material radios.
+- App Store: appstore-first-release and store-iap-setup send first IAPs with `apple iap-submit --with-version`
+  (verified on a real first release), not the console; `console verify apple-app-privacy` reads "Published … ago
+  by …" as the published signal.
+
 - Fix (`play data-safety`): `PSL_SUPPORT_DATA_DELETION_BY_USER` is Play's general "Do you provide a way for users to
   request that their data is deleted?". storebound answered it from `partialDeletion` (data deletion without deleting
   the account), so an app with a delete-account page declared "no". Now `accounts.deletionUrl` answers yes, with