Appstore
DevOps & SecurityappstoreAppstore is an Agent Skill for devops & security published in the tw93/MiaoYan repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.
Prepare and validate a MiaoYan Mac App Store build. Not for GitHub Releases.
QUICK START
How to use this skill
Bring this guide into your coding agent with a prompt tailored to the tool you use.
- Open your project in Codex.
- Copy and paste the prompt below.
- Review files and risks before approving any action.
Prompt to paste
Inspect the Agent Skill at https://github.com/tw93/MiaoYan/blob/HEAD/.agents/skills/appstore/SKILL.md and all supporting files. Report provenance, permissions, scripts, dependencies, and security risks. Propose an exact installation into .agents/skills/appstore, but wait for my approval before writing files or running scripts.
Copying this prompt does not install or run the skill. Review third-party files before use.
MiaoYan App Store Workflow
Use this skill only when the maintainer explicitly asks for App Store build or submission work.
App Store vs GitHub Release
| Area | App Store | GitHub Release |
|---|---|---|
| Build intent | App Store distribution | Direct download and update feed |
| Entitlements | App Store entitlements | Developer ID entitlements |
| Sparkle | Not included | Included |
| Credentials | App Store Connect credentials | Developer ID and notarization credentials |
Build And Validate
bash scripts/build-appstore.sh
xcrun altool --validate-app -f build/AppStore/Export/MiaoYan.app -t macos --apiKey <KEY_ID> --apiIssuer <ISSUER_ID>
Use Xcode Organizer for upload when that is safer than CLI upload.
Pre-Submission Checklist
MARKETING_VERSIONmatches the intended release version.CURRENT_PROJECT_VERSIONis incremented when required.- App Store entitlements are used.
- The App Store configuration builds cleanly.
- Screenshots and metadata are ready in App Store Connect when needed.
Safety Rules
- Never upload to App Store Connect without explicit maintainer confirmation.
- Never commit App Store Connect API keys, certificates, passwords, or local credential paths.
- Validate before upload.