Harden agents-mobile store config: privacy manifest, permissions, splash, icons

Cover binary-readiness gaps for App Store / Play review:

- Declare iOS privacy manifest (ios.privacyManifests) for the
  required-reason APIs used by AsyncStorage and Sentry. Apple
  auto-rejects uploads (ITMS-91053) that call these without a
  declaration; statically-linked pods' own manifests aren't reliably
  read, so declare at app level. NSPrivacyTracking is false and
  crash/perf data is declared not-linked / not-tracking.
- Set expo-image-picker microphonePermission:false and block
  RECORD_AUDIO + legacy READ/WRITE_EXTERNAL_STORAGE on Android. The app
  uses the system photo picker (content URIs, no broad media access)
  and never records audio, so these only bloat the Play permission
  list / Data Safety form.
- Add expo-splash-screen + assets/splash-icon.png (dark #101217
  background). There was no splash, so cold start flashed blank white
  against the dark theme.
- Ship an opaque iOS icon (flatten the transparent corners onto
  #101217) since Apple rejects icons with alpha, and add a monochrome
  adaptive-icon layer for Android 13+ themed icons.
- Add expo-system-ui so userInterfaceStyle:automatic actually applies
  on Android (prebuild warned it was a no-op without it).
- Add an app description.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: msfstef

.changeset/mobile-store-readiness-polish.md

@@ -0,0 +1,5 @@
+---
+'@electric-ax/agents-mobile': patch
+---
+
+Polish the mobile app for App Store / Play review: declare the iOS privacy manifest for required-reason APIs (AsyncStorage + Sentry), drop the unused microphone permission and block legacy Android storage permissions, add a splash screen, ship an opaque iOS icon and a monochrome Android adaptive-icon layer, add `expo-system-ui` so `userInterfaceStyle` applies on Android, wrap the app in a recoverable error boundary, add a timeout escape hatch to the OAuth callback, and keep auth diagnostics out of production logs.

packages/agents-mobile/app.config.ts

@@ -20,6 +20,7 @@ export default ({ config }: ConfigContext): ExpoConfig =>
       slug: `agents-mobile`,
       owner: `electric-ax`,
       scheme: `electric-agents`,
+      description: `Mobile client for Electric Agents — connect to your agents servers and chat with running agents.`,
       version: packageJson.version,
       runtimeVersion: packageJson.version,
       orientation: `portrait`,
@@ -29,6 +30,21 @@ export default ({ config }: ConfigContext): ExpoConfig =>
       plugins: [
         `expo-router`,
         `expo-web-browser`,
+        // Branded launch screen so cold start shows the logo on the
+        // app's dark background instead of a blank white flash.
+        [
+          `expo-splash-screen`,
+          {
+            backgroundColor: `#101217`,
+            image: `./assets/splash-icon.png`,
+            imageWidth: 200,
+            resizeMode: `contain`,
+            dark: {
+              backgroundColor: `#101217`,
+              image: `./assets/splash-icon.png`,
+            },
+          },
+        ],
         // The chat WebView (Expo DOM / streamdown) ships regex lookbehind,
         // which JavaScriptCore only parses on iOS 16.4+. Below that the whole
         // DOM bundle fails to parse and the chat renders blank.
@@ -45,8 +61,11 @@ export default ({ config }: ConfigContext): ExpoConfig =>
         [
           `expo-image-picker`,
           {
-            photosPermission: `Allow Electric Agents to attach photos to messages.`,
-            cameraPermission: `Allow Electric Agents to take a photo to attach to a message.`,
+            photosPermission: `Electric Agents accesses your photo library so you can attach an existing photo to a chat message.`,
+            cameraPermission: `Electric Agents uses your camera so you can take a photo to attach to a chat message.`,
+            // The app never records audio; `false` drops the RECORD_AUDIO
+            // (Android) + NSMicrophoneUsageDescription (iOS) the plugin adds.
+            microphonePermission: false,
           },
         ],
       ],
@@ -59,14 +78,70 @@ export default ({ config }: ConfigContext): ExpoConfig =>
           ITSAppUsesNonExemptEncryption: false,
         },
         supportsTablet: true,
+        // Apple rejects uploads (ITMS-91053) that call "required reason"
+        // APIs without declaring them, and doesn't reliably read
+        // statically-linked pods' own manifests — so declare app-level.
+        // UserDefaults + file timestamp come from AsyncStorage / RN core;
+        // system boot time + disk space from Sentry.
+        privacyManifests: {
+          NSPrivacyTracking: false,
+          NSPrivacyTrackingDomains: [],
+          NSPrivacyCollectedDataTypes: [
+            {
+              NSPrivacyCollectedDataType: `NSPrivacyCollectedDataTypeCrashData`,
+              NSPrivacyCollectedDataTypeLinked: false,
+              NSPrivacyCollectedDataTypeTracking: false,
+              NSPrivacyCollectedDataTypePurposes: [
+                `NSPrivacyCollectedDataTypePurposeAppFunctionality`,
+              ],
+            },
+            {
+              NSPrivacyCollectedDataType: `NSPrivacyCollectedDataTypePerformanceData`,
+              NSPrivacyCollectedDataTypeLinked: false,
+              NSPrivacyCollectedDataTypeTracking: false,
+              NSPrivacyCollectedDataTypePurposes: [
+                `NSPrivacyCollectedDataTypePurposeAppFunctionality`,
+              ],
+            },
+          ],
+          NSPrivacyAccessedAPITypes: [
+            {
+              NSPrivacyAccessedAPIType: `NSPrivacyAccessedAPICategoryUserDefaults`,
+              NSPrivacyAccessedAPITypeReasons: [`CA92.1`],
+            },
+            {
+              NSPrivacyAccessedAPIType: `NSPrivacyAccessedAPICategoryFileTimestamp`,
+              NSPrivacyAccessedAPITypeReasons: [`C617.1`],
+            },
+            {
+              NSPrivacyAccessedAPIType: `NSPrivacyAccessedAPICategorySystemBootTime`,
+              NSPrivacyAccessedAPITypeReasons: [`35F9.1`],
+            },
+            {
+              NSPrivacyAccessedAPIType: `NSPrivacyAccessedAPICategoryDiskSpace`,
+              NSPrivacyAccessedAPITypeReasons: [`E174.1`],
+            },
+          ],
+        },
       },
       android: {
         ...config.android,
         package: applicationId,
         versionCode,
         edgeToEdgeEnabled: true,
+        // expo-image-picker declares these, but the app uses the system
+        // photo picker (content URIs) and never records audio — block them
+        // so the AAB permission list / Play Data Safety form stays clean.
+        blockedPermissions: [
+          `android.permission.RECORD_AUDIO`,
+          `android.permission.READ_EXTERNAL_STORAGE`,
+          `android.permission.WRITE_EXTERNAL_STORAGE`,
+        ],
         adaptiveIcon: {
           foregroundImage: `./assets/adaptive-icon.png`,
+          // Android 13+ themed (monochrome) icons — white silhouette
+          // the launcher tints to match the user's wallpaper.
+          monochromeImage: `./assets/adaptive-icon-monochrome.png`,
           backgroundColor: `#101217`,
         },
       },

packages/agents-mobile/assets/adaptive-icon-monochrome.png

@@ -33,7 +33,9 @@
     "expo-image-picker": "~17.0.11",
     "expo-linking": "~8.0.12",
     "expo-router": "~6.0.24",
+    "expo-splash-screen": "~31.0.13",
     "expo-status-bar": "~3.0.9",
+    "expo-system-ui": "~6.0.9",
     "expo-web-browser": "~15.0.11",
     "react": "19.1.0",
     "react-dom": "19.1.0",