storebound

Author	SHA1	Message	Date
CRT	b5b8f2da9d	play data-safety: PSL_SUPPORT_DATA_DELETION_BY_USER as Play's single choice (partialDeletion true \| false \| 'auto90'), drop the removed PSL_DATA_COLLECTION_USER_REQUEST_DELETE (deletionRequest deprecated, check notes it); ship Google's empty form (cli/data/play-data-safety-form.csv, exported 2026-10-12), take every Answer requirement from it and report pairs not in it (formPairIssues) in check, declarations and play data-safety. Pitfall 21	2026-10-12 09:34:12 +08:00
CRT	97ab76e9c8	play data-safety: write the conditional required rows (PSL_ACCOUNT_DELETION_URL from accounts.deletionUrl, PSL_SUPPORT_DATA_DELETION_BY_USER from dataSafety.partialDeletion, PSL_DATA_DELETION_URL); a rule table checks every conditional row in check, declarations and --dry before Play answers 400	2026-10-12 08:40:36 +08:00
CRT	4533e3e1c4	app privacy: one Apple purpose per Play purpose (advertising is Third-Party Advertising only; Developer's Advertising only from the owner), appPrivacy.types (owner answers per Apple type id: certain in console fill, proposed by scan without linked / tracking, compared by check with Info.plist and PrivacyInfo.xcprivacy)	2026-10-12 04:07:15 +08:00
CRT	582ea909ca	scan: accounts mean User ID, never email without evidence; accounts.signUp (username -> PSL_ACM_USER_ID_OTHER_AUTH); built bundles are low-trust evidence; privacy-manifest and scan find plugins in monorepo node_modules, workspaces and local SwiftPM packages	2026-10-12 02:03:07 +08:00
CRT	513c33330d	serve: every CLI area for the desktop app (prices.current, project.declarations / listing_text / renders / render, import.fastlane for a new folder; owner.prices_import, owner.ppo_start / stop) prices export --json reads the current prices without writing; inspect --declarations gives Data safety, the App Privacy answers it suggests, app info, export compliance and App Review details with every question only the owner can answer; play data-safety keeps the uploaded CSV in .storebound/ so changes since the upload show (Play cannot read the form back); shots gallery --json carries the renders folder; inspect --render returns one render as a data: URL from inside the renders folder only.	2026-10-11 07:40:59 +08:00

5 commits