Take mobile apps and games from zero to Submit for review on Google Play and the App Store. Bun CLI, MCP server, Agent Skills. npm: storebound · MIT https://storebound.dev
Find a file
2026-10-24 19:53:10 +08:00
.claude-plugin storebound 0.8.48: version in package.json and every copy, CHANGELOG 0.8.48 section 2026-10-24 18:17:14 +07:00
.codex-plugin storebound 0.8.48: version in package.json and every copy, CHANGELOG 0.8.48 section 2026-10-24 18:17:14 +07:00
.cursor/rules Bypass mode (owner opt-in, default off): storebound settings bypass on|off|status and a one-time question in init; MCP owner_step (owner-only commands, dry run first), owner-only api operations with --yes --confirm, console plans may press buttons.final; every action logged to .storebound/owner-actions.log; docs/bypass.md, agent rules, tests 2026-10-22 02:27:34 +08:00
.forgejo desktop dev update channel: every push to main builds dev bundles (<next patch>-dev.<UTC>), the VDS signs and publishes dev/latest.json (newest 5); app channel setting stable|dev, background updater at start / 15 min / resume / channel switch, deferred while in use, no downgrade, autostart rewritten on every start, card shows version and channel 2026-10-23 23:14:08 +08:00
.github Bypass mode (owner opt-in, default off): storebound settings bypass on|off|status and a one-time question in init; MCP owner_step (owner-only commands, dry run first), owner-only api operations with --yes --confirm, console plans may press buttons.final; every action logged to .storebound/owner-actions.log; docs/bypass.md, agent rules, tests 2026-10-22 02:27:34 +08:00
apps/desktop desktop tray: card as tall as its content, card and menu open from the tray icon's edge (never over the taskbar); menu permission files 2026-10-24 19:53:10 +08:00
bin CLI runs on Node 20+: npx storebound (bunx keeps working) 2026-10-13 04:03:28 +08:00
brand New logo from one master: brand/, tools/brand-assets.py makes every app icon, favicon, header mark and og image; no hand-written SVG left 2026-10-11 10:13:13 +08:00
cli api tables: regenerate for the new Play listing calls 2026-10-24 19:49:26 +08:00
docs api tables: regenerate for the new Play listing calls 2026-10-24 19:49:26 +08:00
examples template compliance answers never reach a store: init writes unanswered (dataSafety, appPrivacy, reviewNotes, ageRating, accounts, reviewAccess), older configs are recognised by the template values; check / validate / scan block, play data-safety (also --dry), console plan / fill, apple review-details and appinfo refuse. onboard --declarations replaces them on a live app: name and copyright from the stores (a copyright with a private term is left out), the rows the code proves (scan proposal, sign-up methods from auth code and login SDKs), the rest as one owner question list. play data-safety --dry prints the answers that change (old -> new, account and deletion first) against the last uploaded CSV; pitfall 60; tests 2026-10-14 11:36:30 +08:00
media/teaser tray card: per-icon Phosphor imports; teaser pins the current app-privacy step 5 text 2026-10-23 14:07:44 +08:00
site site: first-party, cookieless visit stats (self-hosted Umami at storebound.dev/s/, Do Not Track respected) with events for copy buttons, desktop downloads per OS, the teaser (play, 50 %, complete) and outbound docs / git / npm links; a privacy note in the footer; docs/site-analytics.md and tools/vds/ configs to rebuild the server side; scrub allows a page's public stats website id 2026-10-14 11:11:24 +08:00
skills play: a new language is created with everything Play needs to commit it (icon, feature graphic, phone and tablet screenshots); play images creates a missing listing 2026-10-24 19:46:57 +08:00
specs storebound api: every App Store Connect and Google Play operation 2026-10-11 23:37:09 +08:00
templates iPhone Duo screenshots (render, check, upload skip with console link while the API has no display type) and the medium display class as the required iPhone set, labels as in the console 2026-10-18 13:07:15 +07:00
tests play: a new language is created with everything Play needs to commit it (icon, feature graphic, phone and tablet screenshots); play images creates a missing listing 2026-10-24 19:46:57 +08:00
tools desktop: boot check finds unsaved marks on the sub views; neutral next-step lines before a read 2026-10-24 13:06:42 +08:00
.gitattributes Windows checkouts: .gitattributes keeps text files LF (CRLF skills broke gen-adapters); findInstalled builds macOS/Linux paths with posix join; CONTRIBUTING Windows setup and desktop build 2026-10-21 22:26:30 +08:00
.gitignore CLI runs on Node 20+: npx storebound (bunx keeps working) 2026-10-13 04:03:28 +08:00
.mcp.json apps folders add adds the folder (template note, refusals with reasons); MCP: .mcp.json never spawns a missing plugin path (sh fallback to PATH, npx), mcp/serve skip the self-update, spawned handshake test; store build minimums in one dated table: Play target API 36 and App Store Xcode 26 / SDK 26 blocked in scan, validate, play upload/release, apple upload; pitfalls 81-83 2026-10-20 12:15:00 +07:00
AGENTS.md Bypass mode (owner opt-in, default off): storebound settings bypass on|off|status and a one-time question in init; MCP owner_step (owner-only commands, dry run first), owner-only api operations with --yes --confirm, console plans may press buttons.final; every action logged to .storebound/owner-actions.log; docs/bypass.md, agent rules, tests 2026-10-22 02:27:34 +08:00
bunfig.toml idempotency: WIP 2026-10-12 04:00:58 +08:00
CHANGELOG.md play: a new language is created with everything Play needs to commit it (icon, feature graphic, phone and tablet screenshots); play images creates a missing listing 2026-10-24 19:46:57 +08:00
CONTRIBUTING.md Windows checkouts: .gitattributes keeps text files LF (CRLF skills broke gen-adapters); findInstalled builds macOS/Linux paths with posix join; CONTRIBUTING Windows setup and desktop build 2026-10-21 22:26:30 +08:00
gemini-extension.json storebound 0.8.48: version in package.json and every copy, CHANGELOG 0.8.48 section 2026-10-24 18:17:14 +07:00
GEMINI.md Bypass mode (owner opt-in, default off): storebound settings bypass on|off|status and a one-time question in init; MCP owner_step (owner-only commands, dry run first), owner-only api operations with --yes --confirm, console plans may press buttons.final; every action logged to .storebound/owner-actions.log; docs/bypass.md, agent rules, tests 2026-10-22 02:27:34 +08:00
LICENSE crt-ship 0.1.0: CLI, Claude Code skills and templates for shipping mobile games to Google Play and the App Store 2026-10-10 20:29:20 +08:00
package.json storebound 0.8.48: version in package.json and every copy, CHANGELOG 0.8.48 section 2026-10-24 18:17:14 +07:00
README.md README: drop the stale static version badge (npm badge is live), Agent Skills badge 39 with a test that keeps it in step; CHANGELOG Unreleased for the Windows fixes 2026-10-21 22:37:51 +08:00
SECURITY.md 0.4.0: changelog, version, README (journey, commands, skills, MCP, safety, FAQ, roadmap), agent rules, adapters 2026-10-10 23:30:48 +08:00
tsconfig.json package: ship declarations (dist/types, the "types" condition) and a Node JS entry for 'storebound'; Bun keeps the .ts source. 0.8.5 exported only cli/lib/config.ts, so tsc (next build, vue-tsc, tsc --noEmit) failed on a scaffolded storebound.config.ts and broke a Next app's build; a test type-checks the template against the packed entry under bundler / node16 / nodenext without @types/node. check fails on the template's own placeholders (Example Studio, bare example.com URLs and addresses) 2026-10-15 05:49:05 +08:00
tsconfig.types.json package: ship declarations (dist/types, the "types" condition) and a Node JS entry for 'storebound'; Bun keeps the .ts source. 0.8.5 exported only cli/lib/config.ts, so tsc (next build, vue-tsc, tsc --noEmit) failed on a scaffolded storebound.config.ts and broke a Next app's build; a test type-checks the template against the packed entry under bundler / node16 / nodenext without @types/node. check fails on the template's own placeholders (Example Studio, bare example.com URLs and addresses) 2026-10-15 05:49:05 +08:00

storebound logo

storebound

From an empty folder to "Submit for review" on Google Play and the App Store.

Your AI agent does all of it with storebound: builds, uploads, store text, screenshots in every language and size, in-app products and prices, the compliance forms, even the consoles that have no API. You only press Submit.

npm license: MIT runtime: Node 20+ or Bun 1.1+ runtime dependencies: 0 Agent Skills: 39 MCP: 2026-07-28

Website: storebound.dev · Docs: docs/ · npx storebound init

The storebound teaser: from an empty folder to Submit for review in under a minute (opens the video on storebound.dev)

Watch the teaser on storebound.dev: the demo game from an empty folder to both stores, then the desktop app.

Your agent does the whole job

Do it, don't ask. You ask once ("get my app ready for both stores"); your agent and storebound do the work: the app records, builds and uploads, listings in every language, screenshots and previews in every store size, icons, in-app products and subscriptions priced in 175 countries, Data safety, App Privacy, age rating and every other form, and the console pages that have no API (the agent drives them from a console plan). Each step is planned first:

storebound release plan 1.0.0: every step left on both stores for a brand-new app, in fix order, with the owner's next step named

You press only the final public or irreversible buttons (Submit for review, releasing, App Privacy Publish, legal agreements) and answer, once and in one batch, the facts no file can prove. The full rules: AGENTS.md; the whole journey step by step: docs/journey.md.

You won't get rejected for the avoidable things

storebound scan reads your project (Xcode and Gradle files, manifests, lockfiles, SDKs, your listings) and the store state, and names every App Review or Play policy problem it can prove before the stores do: the guideline, the evidence as file:line, and the fix.

storebound scan on a sign-in app: blockers for Guideline 2.1(a) (no demo account) and 5.1.1(v) (no account deletion), each with its evidence and fix

Every rule, what it proves and what only a reviewer can see: docs/rejections.md.

The desktop app: every app, both stores, one window

Every app and game you ship on Google Play and the App Store side by side: releases, charts, catalog and prices, crash health, reviews, TestFlight and the rejection checks. Send for review from there too: a dry run first, then a confirm, then your click. Same storebound underneath, same version number as the CLI, and the same store accounts and app folders as your terminal (~/.storebound).

storebound desktop, Releases › Send for review: the dry run of the submission with the build picked by number and the confirm step

More screens: portfolio, growth charts, prices, checks, TestFlight, console plan

Portfolio: every app of every studio with its state on both stores Growth: store analytics chart with the day under the pointer Prices: products by key territory, both stores' prices per country, gaps marked Checks: rejection risks with evidence and the fix TestFlight: groups, testers and builds Console plan: the steps, answer sheet and never-press list for a console form without an API

npx storebound desktop installs it for you (macOS, Windows, Linux; signature checked, no admin rights) and opens it on the current app folder. Manual downloads: storebound.dev/#download. Internals: docs/desktop.md.

Works with your AI, safe by design

Skills, an MCP server and the CLI for Claude Code, Codex, Cursor, Gemini CLI, Copilot, Windsurf, OpenCode or anything that reads AGENTS.md. Every write shows a dry run first; submit, release and delete are not MCP tools; keys stay in env vars or the gitignored .storebound/.

storebound play products --dry: two in-app products planned with regional prices in 174 Google Play regions, nothing written

Per-tool setup: docs/getting-started.md · MCP tools: docs/mcp.md · Safety model: docs/safety.md.

Install and start

You need Node 20+ or Bun 1.1+ (and ffmpeg for icons, screenshots and video).

cd my-app
npx storebound init                     # storebound.config.ts + .storebound/ in this project (--profile app | subscription-app | game)
npx storebound desktop                  # installs the desktop app once (asks first) and opens it on this folder

One product, installed once per machine: the CLI (npx / bunx) and the desktop app have the same version, the same store accounts (~/.storebound/credentials, npx storebound accounts) and the same list of app folders. Each project has its storebound.config.ts and a gitignored .storebound/ (upload keystore, review contact). Then npx storebound install --agent claude (or codex, cursor, gemini, copilot, windsurf, opencode) and npx storebound check. Every npx storebound ... works as bunx storebound ... too.

Then ask your agent: "take my app to Google Play and the App Store". Claude Code plugin, credentials, coming from fastlane: docs/getting-started.md.

What it covers

Store screenshots of the demo game, rendered by storebound in every size and language:

Store screenshots rendered by storebound: four scenes in English plus the hero scene in Turkish, Japanese and Arabic

Contributing and license

Issues and pull requests are welcome; see CONTRIBUTING.md (bun run ci must be green). MIT, see LICENSE. Copyright (c) 2026 CRTkafa. Not affiliated with Google or Apple.