Store Submit

Store submission over the Unzoo browser

Google Play and Microsoft Partner Center are the two channels with no usable API for this account, so releasing to them means driving a real browser. This skill is the accumulated way to do that without losing an afternoon.

Apple does not belong here. iOS and macOS submit over the App Store Connect API with no browser at all:

./scripts/submit-for-review.sh --platform ios   --version X.Y.Z \
    --notes-dir app-store/release-notes/X.Y.Z --dry-run

Reach for the browser on Apple only if that script has failed for a reason you have actually diagnosed.

Preflight

S=.claude/skills/store-submit
$S/unzoo.sh status          # {"browser_connected":true,...}
$S/unzoo.sh up              # starts the browser if it is down
$S/unzoo.sh tabs            # find the console tab that is already signed in

If the daemon is down, start it from a Bash call with run_in_background: true — nohup … & is not enough, it dies with the tool's shell:

"/Applications/Unzoo Browser.app/Contents/MacOS/unzoo-service" --daemon

browser_connected: false while the daemon is up means every navigate and evaluate will return HTTP 500; unzoo.sh up opens the browser and waits.

The six rules

These are not style preferences. Each one has already cost a session.

1. Pin the tab. Always. Without tab_id the API acts on whatever tab the user is looking at — their mail, their bank. Resolve one and export it:

export UNZOO_TAB=$($S/unzoo.sh find-tab play.google.com/console)

If a read comes back nonsensical, check unzoo.sh url before you debug the page. It has been the user's Cloudflare dashboard.

2. A coordinate click goes to the ACTIVE tab, not to tab_id. The endpoint accepts the id and ignores it. Clicking a background tab produces no click event, no error, and a page that looks like it ignored you. unzoo.sh click and click-el activate first for this reason — if you call /api/v1/click directly, activate yourself.

3. Read pages with text, never with screenshots. A screenshot does not follow scroll, so full_page silently omits exactly the banner you are looking for. Use a screenshot only to locate something you must click by coordinate.

4. Use the console's own session, in the user's own profile. The signed-in Google and Microsoft sessions live in the default profile. Prefer find-tab over new. Do not touch cookies: setting one without SameSite=None has signed the main profile out.

5. Never claim a submission you have not read back. Both consoles render optimistically and will lie in both directions. Partner Center showed "Update in certification" seconds after the click, then "Update in draft" in a screenshot taken moments later, with a session-expired dialog in the DOM throughout — and the submission had in fact gone through. Navigate away and back before reading a status, and look for a structural change (the Submit button gone, a Cancel button appeared), not just a word.

6. A file input that reads back empty was probably filled. Angular and React uploaders take the FileList and clear the input in the same tick, so a successful set_input_files leaves files.length === 0. Confirm on the page. Retrying on the count uploads twice.

Which store

• Google Play → play.md. AAB upload, release notes, countries, review.
• Microsoft Store → msstore.md. MSIX packaging, Partner Center, certification.

unzoo.sh

status | up | tabs | find-tab <url-substring> | new <url> | activate
nav <url> | url | wait-load | wait-for <sel> [s] | exists <sel>
text | html | eval <js> | box <sel> | click <x> <y> | click-el <sel>
upload <input-sel> <file> | shot [path]

-t <id> overrides UNZOO_TAB for one call. Full API surface, if you need something not wrapped here:

curl -s --noproxy '*' http://127.0.0.1:9399/api/v1/openapi.json

Note the --noproxy '*': the local proxy mangles loopback calls, and it is also why store uploads through the browser stall — see reference_release_upload_watchdog in memory.