lecodes-cli 2.0.13 → 2.1.1

package/dist/index.js

@@ -52,7 +52,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "lecodes-cli",
-    version: "2.0.13",
+    version: "2.1.1",
     dependencies: {
       "@letary/chisel": "^0.13.0",
       jimp: "^1.6.1",
@@ -76,7 +76,7 @@ var init_package = __esm(() => {
     },
     peerDependencies: {
       "lecodes-design": "^0.11.0",
-      "lecodes-headless": "^2.0.13",
+      "lecodes-headless": "^2.1.1",
       "lecodes-3d-editor": "^0.9.0",
       "lecodes-assets": "^0.2.1",
       "heic-decode": "^2.1.0",
@@ -146,7 +146,7 @@ var init_package = __esm(() => {
 });
 
 // ../../sdk/src/version.ts
-var SDK_VERSION = "2.0.13", sdkMajor = (version) => {
+var SDK_VERSION = "2.1.1", sdkMajor = (version) => {
   const m = version?.match(/^(\d+)\.\d+\.\d+/);
   return m ? Number(m[1]) : null;
 }, bundleSdkVersion = (head) => head.slice(0, 2000).match(/^\/\/ sdk: (\d+\.\d+\.\d+\S*)/m)?.[1] ?? null, bundleRunsOn = (bundleVersion, hostVersion) => sdkMajor(bundleVersion) !== null && sdkMajor(bundleVersion) === sdkMajor(hostVersion);
@@ -561,37 +561,6 @@ var init_manifest = __esm(() => {
   init_cli();
 });
 
-// src/platform/config.ts
-import { homedir } from "node:os";
-import { join as join2 } from "node:path";
-import { mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "node:fs";
-var DEFAULT_API = "https://le.codes", CONFIG_DIR, CONFIG_FILE, loadConfig = () => {
-  let stored = {};
-  try {
-    stored = JSON.parse(readFileSync2(CONFIG_FILE, "utf8"));
-  } catch {}
-  return {
-    apiUrl: process.env.LECODES_API ?? stored.apiUrl,
-    token: process.env.LECODES_TOKEN ?? stored.token
-  };
-}, saveConfig = (config) => {
-  mkdirSync2(CONFIG_DIR, { recursive: true });
-  writeFileSync2(CONFIG_FILE, JSON.stringify(config, null, 2));
-}, normalizeApiUrl = (url) => url.trim().replace(/\/+$/, ""), requireToken = (config) => {
-  if (!config.token)
-    throw new CliError("Not logged in. Run `lecodes login` first.");
-  return config.token;
-}, requireApiUrl = (config) => {
-  if (!config.apiUrl)
-    throw new CliError("No server URL configured. Run `lecodes login` first.");
-  return normalizeApiUrl(config.apiUrl);
-};
-var init_config = __esm(() => {
-  init_cli();
-  CONFIG_DIR = join2(homedir(), ".lecodes");
-  CONFIG_FILE = join2(CONFIG_DIR, "config.json");
-});
-
 // src/platform/api.ts
 var errorMessage = (body, status) => {
   if (typeof body === "string" && body)
@@ -700,8 +669,8 @@ var init_paths = __esm(() => {
 });
 
 // src/project/ignore.ts
-import { existsSync as existsSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "node:fs";
-import { join as join3 } from "node:path";
+import { existsSync as existsSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { join as join2 } from "node:path";
 var BUILTIN_PATTERNS, DEFAULT_IGNORE_FILE = `# Files matched here are NOT pushed to LeCodes.
 # Only untracked files are affected — assets already in the project stay tracked
 # even if they match a pattern. Built-in defaults (node_modules, _*, *.log, .artifacts)
@@ -782,18 +751,18 @@ design/comments/
   return (path) => match(path.startsWith("/") ? path : "/" + path, false);
 }, loadIgnore = (root) => {
   const lines = [...BUILTIN_PATTERNS];
-  const file = join3(root, ".lecodesignore");
+  const file = join2(root, ".lecodesignore");
   if (existsSync2(file)) {
     try {
-      lines.push(...readFileSync3(file, "utf8").split(/\r?\n/));
+      lines.push(...readFileSync2(file, "utf8").split(/\r?\n/));
     } catch {}
   }
   const rules = lines.map(compile).filter((r) => r !== null);
   return buildMatcher(rules);
 }, writeDefaultIgnore = (root) => {
-  const file = join3(root, ".lecodesignore");
+  const file = join2(root, ".lecodesignore");
   if (!existsSync2(file))
-    writeFileSync3(file, DEFAULT_IGNORE_FILE);
+    writeFileSync2(file, DEFAULT_IGNORE_FILE);
 }, DEFAULT_GITIGNORE = `# LeCodes per-checkout state: generated IDE types + this machine's sync cursor
 # (.lecodes/manifest.json). Regenerate with \`lecodes update\` / re-attach with \`lecodes link\`.
 .lecodes/
@@ -808,19 +777,19 @@ node_modules/
 
 dist/
 `, ensureGitignore = (root) => {
-  const file = join3(root, ".gitignore");
+  const file = join2(root, ".gitignore");
   if (!existsSync2(file)) {
-    writeFileSync3(file, DEFAULT_GITIGNORE);
+    writeFileSync2(file, DEFAULT_GITIGNORE);
     return "created";
   }
-  const text = readFileSync3(file, "utf8");
+  const text = readFileSync2(file, "utf8");
   const covered = text.split(/\r?\n/).some((l) => /^\/?\.lecodes\/?\s*$/.test(l.trim()));
   if (covered)
     return null;
   const sep = text.length === 0 || text.endsWith(`
 `) ? "" : `
 `;
-  writeFileSync3(file, `${text}${sep}
+  writeFileSync2(file, `${text}${sep}
 # LeCodes per-checkout state (generated types + sync cursor) — not source
 .lecodes/
 `);
@@ -831,8 +800,8 @@ var init_ignore = __esm(() => {
 });
 
 // src/project/localFiles.ts
-import { existsSync as existsSync3, readdirSync, readFileSync as readFileSync4 } from "node:fs";
-import { join as join4, relative } from "node:path";
+import { existsSync as existsSync3, readdirSync, readFileSync as readFileSync3 } from "node:fs";
+import { join as join3, relative } from "node:path";
 var SKIP_DIRS, SKIP_FILES, TEXT_EXTS, ext = (name) => {
   const i = name.lastIndexOf(".");
   return i < 0 ? "" : name.slice(i + 1).toLowerCase();
@@ -860,7 +829,7 @@ var SKIP_DIRS, SKIP_FILES, TEXT_EXTS, ext = (name) => {
   };
   const walk = (dir, parentIgnored) => {
     for (const entry of readdirSync(dir, { withFileTypes: true })) {
-      const abs = join4(dir, entry.name);
+      const abs = join3(dir, entry.name);
       const key = toKey(relative(root, abs));
       if (entry.isDirectory()) {
         if (SKIP_DIRS.has(entry.name))
@@ -880,14 +849,14 @@ var SKIP_DIRS, SKIP_FILES, TEXT_EXTS, ext = (name) => {
           ignored.push(key);
           continue;
         }
-        files.push({ path: key, absPath: abs, sha: sha256(readFileSync4(abs)) });
+        files.push({ path: key, absPath: abs, sha: sha256(readFileSync3(abs)) });
       }
     }
   };
   walk(root, false);
   return { files, dirs, ignored };
 }, resolveLocalPath = (root, key) => {
-  const direct = join4(root, key.slice(1));
+  const direct = join3(root, key.slice(1));
   if (existsSync3(direct))
     return direct;
   let dir = root;
@@ -896,7 +865,7 @@ var SKIP_DIRS, SKIP_FILES, TEXT_EXTS, ext = (name) => {
       const match = readdirSync(dir).find((entry) => entry === name || sanitizeAssetName(entry) === name);
       if (!match)
         return null;
-      dir = join4(dir, match);
+      dir = join3(dir, match);
     }
   } catch {
     return null;
@@ -956,32 +925,32 @@ var init_localFiles = __esm(() => {
 
 // src/hosts/distRoot.ts
 import { existsSync as existsSync4 } from "node:fs";
-import { dirname as dirname3, join as join6 } from "node:path";
+import { dirname as dirname3, join as join5 } from "node:path";
 import { fileURLToPath } from "node:url";
 var distRoot;
 var init_distRoot = __esm(() => {
   distRoot = (() => {
     const here = dirname3(fileURLToPath(import.meta.url));
     const candidates = [
-      join6(here, ".."),
-      join6(here, "..", ".."),
+      join5(here, ".."),
+      join5(here, "..", ".."),
       dirname3(process.execPath)
     ];
     for (const c2 of candidates)
-      if (existsSync4(join6(c2, "runtime")) || existsSync4(join6(c2, "package.json")))
+      if (existsSync4(join5(c2, "runtime")) || existsSync4(join5(c2, "package.json")))
         return c2;
     return candidates[0];
   })();
 });
 
 // src/hosts/peers.ts
-import { existsSync as existsSync5, readFileSync as readFileSync7 } from "node:fs";
+import { existsSync as existsSync5, readFileSync as readFileSync6 } from "node:fs";
 import { createRequire as createRequire2 } from "node:module";
-import { homedir as homedir2 } from "node:os";
-import { dirname as dirname4, join as join7, resolve } from "node:path";
-var OPTIONAL_PEERS, peersDir = () => process.env.LECODES_PEERS_DIR ? resolve(process.env.LECODES_PEERS_DIR) : join7(homedir2(), ".lecodes", "peers"), peerDirInPrefix = (name) => join7(peersDir(), "node_modules", ...name.split("/")), readVersion = (dir) => {
+import { homedir } from "node:os";
+import { dirname as dirname4, join as join6, resolve } from "node:path";
+var OPTIONAL_PEERS, peersDir = () => process.env.LECODES_PEERS_DIR ? resolve(process.env.LECODES_PEERS_DIR) : join6(homedir(), ".lecodes", "peers"), peerDirInPrefix = (name) => join6(peersDir(), "node_modules", ...name.split("/")), readVersion = (dir) => {
   try {
-    return JSON.parse(readFileSync7(join7(dir, "package.json"), "utf8")).version ?? "unknown";
+    return JSON.parse(readFileSync6(join6(dir, "package.json"), "utf8")).version ?? "unknown";
   } catch {
     return null;
   }
@@ -990,9 +959,9 @@ var OPTIONAL_PEERS, peersDir = () => process.env.LECODES_PEERS_DIR ? resolve(pro
     const require2 = createRequire2(import.meta.url);
     let dir = dirname4(require2.resolve(probe));
     for (let depth = 0;depth < 16; depth++) {
-      const manifest = join7(dir, "package.json");
+      const manifest = join6(dir, "package.json");
       if (existsSync5(manifest)) {
-        const parsed = JSON.parse(readFileSync7(manifest, "utf8"));
+        const parsed = JSON.parse(readFileSync6(manifest, "utf8"));
         if (parsed.name === name)
           return parsed.version ?? "unknown";
       }
@@ -1067,8 +1036,8 @@ var init_archives = __esm(() => {
 
 // src/hosts/packageManager.ts
 import { spawnSync } from "node:child_process";
-import { homedir as homedir3 } from "node:os";
-import { join as join8, resolve as resolve2, sep } from "node:path";
+import { homedir as homedir2 } from "node:os";
+import { join as join7, resolve as resolve2, sep } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 var onPath = (cmd) => {
   try {
@@ -1076,7 +1045,7 @@ var onPath = (cmd) => {
   } catch {
     return false;
   }
-}, bunGlobalDir = () => join8(process.env.BUN_INSTALL ? resolve2(process.env.BUN_INSTALL) : join8(homedir3(), ".bun"), "install", "global"), ownManager = (file = fileURLToPath2(import.meta.url)) => {
+}, bunGlobalDir = () => join7(process.env.BUN_INSTALL ? resolve2(process.env.BUN_INSTALL) : join7(homedir2(), ".bun"), "install", "global"), ownManager = (file = fileURLToPath2(import.meta.url)) => {
   const norm = (p) => process.platform === "win32" ? p.toLowerCase() : p;
   return norm(resolve2(file)).startsWith(norm(bunGlobalDir()) + sep) ? "bun" : "npm";
 }, pickManager = () => {
@@ -1088,8 +1057,8 @@ var init_packageManager = () => {};
 
 // src/hosts/peerInstall.ts
 import { spawnSync as spawnSync2 } from "node:child_process";
-import { existsSync as existsSync6, mkdirSync as mkdirSync4, readFileSync as readFileSync8, writeFileSync as writeFileSync5 } from "node:fs";
-import { join as join9 } from "node:path";
+import { existsSync as existsSync6, mkdirSync as mkdirSync3, readFileSync as readFileSync7, writeFileSync as writeFileSync4 } from "node:fs";
+import { join as join8 } from "node:path";
 import { pathToFileURL } from "node:url";
 async function loadPeer(name, subpath, opts) {
   const spec = subpath ? `${name}/${subpath}` : name;
@@ -1100,7 +1069,7 @@ async function loadPeer(name, subpath, opts) {
       throw e;
   }
   const dir = peerDirInPrefix(name);
-  if (!existsSync6(join9(dir, "package.json"))) {
+  if (!existsSync6(join8(dir, "package.json"))) {
     if (opts.install === false)
       return null;
     if (peerVersionGlobal(name, spec) !== null)
@@ -1111,7 +1080,7 @@ async function loadPeer(name, subpath, opts) {
 }
 var CANVAS_RANGE_FALLBACK = "^0.1.65", readJson = (path) => {
   try {
-    return JSON.parse(readFileSync8(path, "utf8"));
+    return JSON.parse(readFileSync7(path, "utf8"));
   } catch {
     return null;
   }
@@ -1120,7 +1089,7 @@ var CANVAS_RANGE_FALLBACK = "^0.1.65", readJson = (path) => {
   if (archive)
     return archive;
   if (name === "@napi-rs/canvas") {
-    const renderer = readJson(join9(peerDirInPrefix("lecodes-headless"), "package.json"));
+    const renderer = readJson(join8(peerDirInPrefix("lecodes-headless"), "package.json"));
     const range2 = renderer?.peerDependencies?.["@napi-rs/canvas"] ?? renderer?.optionalDependencies?.["@napi-rs/canvas"] ?? CANVAS_RANGE_FALLBACK;
     return `@napi-rs/canvas@${range2}`;
   }
@@ -1128,10 +1097,10 @@ var CANVAS_RANGE_FALLBACK = "^0.1.65", readJson = (path) => {
   return range ? `${name}@${range}` : `${name}@latest`;
 }, companions = (name) => name === "lecodes-headless" ? ["lecodes-headless", "@napi-rs/canvas"] : name === "sharp" ? ["sharp", "heic-decode"] : [name], manualCommand = (dir, specs) => commandLine(ownManager(), installIntoArgv(ownManager(), dir, specs)), installPeers = async (names, why, opts = {}) => {
   const dir = peersDir();
-  mkdirSync4(dir, { recursive: true });
-  const manifest = join9(dir, "package.json");
+  mkdirSync3(dir, { recursive: true });
+  const manifest = join8(dir, "package.json");
   if (!existsSync6(manifest)) {
-    writeFileSync5(manifest, JSON.stringify({
+    writeFileSync4(manifest, JSON.stringify({
       name: "lecodes-peers",
       private: true,
       description: "Optional lecodes-cli peers, installed on first use. Safe to delete — the CLI re-installs what a command needs."
@@ -1164,11 +1133,11 @@ var CANVAS_RANGE_FALLBACK = "^0.1.65", readJson = (path) => {
       throw new CliError(`${tool} could not run: ${r.error.message}`);
     if (r.status !== 0)
       throw new CliError(`${tool} exited with ${r.status ?? "a signal"} while installing ${spec}. By hand:  ${manualCommand(dir, [spec])}`);
-    if (!existsSync6(join9(peerDirInPrefix(name), "package.json")))
+    if (!existsSync6(join8(peerDirInPrefix(name), "package.json")))
       throw new CliError(`${name} did not land in ${dir} — the installer finished but the package is missing`);
   }
 }, resolveEntry = (pkgDir, subpath) => {
-  const manifest = readJson(join9(pkgDir, "package.json"));
+  const manifest = readJson(join8(pkgDir, "package.json"));
   if (!manifest)
     throw new CliError(`${pkgDir} holds no package.json`);
   const key = subpath ? `./${subpath}` : ".";
@@ -1196,7 +1165,7 @@ var CANVAS_RANGE_FALLBACK = "^0.1.65", readJson = (path) => {
     rel = typeof manifest.main === "string" ? manifest.main : "index.js";
   if (!rel)
     throw new CliError(`${manifest.name} has no export "${key}"`);
-  return join9(pkgDir, rel);
+  return join8(pkgDir, rel);
 }, isNotFound = (e, spec) => {
   const code = e?.code;
   const msg = e instanceof Error ? e.message : String(e);
@@ -1789,17 +1758,17 @@ var init_chisel = __esm(() => {
 });
 
 // ../../sdk/src/compile/bundler.ts
-import { existsSync as existsSync7, readdirSync as readdirSync2, readFileSync as readFileSync9, statSync } from "node:fs";
+import { existsSync as existsSync7, readdirSync as readdirSync2, readFileSync as readFileSync8, statSync } from "node:fs";
 import { spawnSync as spawnSync3 } from "node:child_process";
 import { createRequire as createRequire3 } from "node:module";
-import { dirname as dirname5, join as join10, relative as relative2 } from "node:path";
+import { dirname as dirname5, join as join9, relative as relative2 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 var resolveInject = () => {
   const override = process.env.LECODES_SDK_INJECT;
   if (override && existsSync7(override))
     return override;
   const here = dirname5(fileURLToPath3(import.meta.url));
-  const src = join10(here, "..", "inject.ts");
+  const src = join9(here, "..", "inject.ts");
   if (existsSync7(src))
     return src;
   throw new Error("sdk: could not locate the inject source (LECODES_SDK_INJECT / src/inject.ts)");
@@ -1816,7 +1785,7 @@ var resolveInject = () => {
   return "/" + parts.join("/");
 }, CHISEL_DEFINE, CHISEL_KEEP, CLIENT_INJECT = "/__sdk/inject.ts", SERVER_INJECT = "/__sdk/server/inject.ts", EDITOR_INJECT = "/__sdk/inject.editor.ts", readInjectSources = () => {
   const client = resolveInject();
-  return { client: readFileSync9(client, "utf8"), server: readFileSync9(join10(dirname5(client), "server", "inject.ts"), "utf8") };
+  return { client: readFileSync8(client, "utf8"), server: readFileSync8(join9(dirname5(client), "server", "inject.ts"), "utf8") };
 }, resolveSdkSrc = () => {
   const inject = resolveInject();
   if (!inject.endsWith("inject.ts")) {
@@ -1830,11 +1799,11 @@ var resolveInject = () => {
   const out = {};
   const walk = (dir) => {
     for (const name of readdirSync2(dir)) {
-      const p = join10(dir, name);
+      const p = join9(dir, name);
       if (statSync(p).isDirectory())
         walk(p);
       else if (isSdkSource(p))
-        out["/__sdk/" + relative2(sdkSrc, p).split("\\").join("/")] = readFileSync9(p, "utf8");
+        out["/__sdk/" + relative2(sdkSrc, p).split("\\").join("/")] = readFileSync8(p, "utf8");
     }
   };
   walk(sdkSrc);
@@ -172261,12 +172230,12 @@ var init_compile = __esm(() => {
 // src/compile/projectCompile.ts
 import { existsSync as existsSync8 } from "node:fs";
 import { createRequire as createRequire4 } from "node:module";
-import { dirname as dirname6, join as join11 } from "node:path";
+import { dirname as dirname6, join as join10 } from "node:path";
 var resolveSdkInject = () => {
   try {
     return createRequire4(import.meta.url).resolve("lecodes-sdk/inject");
   } catch {}
-  const vendored = join11(distRoot, "runtime", "sdk", "inject.ts");
+  const vendored = join10(distRoot, "runtime", "sdk", "inject.ts");
   return existsSync8(vendored) ? vendored : null;
 }, sdkInject, resolveChiselBin2 = () => {
   if (process.env.LECODES_CHISEL_BIN)
@@ -172276,7 +172245,7 @@ var resolveSdkInject = () => {
     if (fromPkg)
       return fromPkg;
   } catch {}
-  const local = join11(dirname6(process.execPath), process.platform === "win32" ? "chisel.exe" : "chisel");
+  const local = join10(dirname6(process.execPath), process.platform === "win32" ? "chisel.exe" : "chisel");
   return existsSync8(local) ? local : null;
 }, chiselBin, ambiguousEntryWarning = (entries) => {
   const { entry, roots } = detectEntry(entries, scanModulesChisel);
@@ -172309,15 +172278,15 @@ var resolveSdkInject = () => {
   };
   const dir = peerDirInPrefix("typescript");
   const peer = () => {
-    if (!existsSync8(join11(dir, "package.json")))
+    if (!existsSync8(join10(dir, "package.json")))
       return null;
     try {
-      return api(createRequire4(import.meta.url)(join11(dir, "lib", "typescript.js")));
+      return api(createRequire4(import.meta.url)(join10(dir, "lib", "typescript.js")));
     } catch {
       return null;
     }
   };
-  const found = from(join11(root, "package.json")) ?? from(import.meta.url) ?? peer();
+  const found = from(join10(root, "package.json")) ?? from(import.meta.url) ?? peer();
   if (found)
     return found;
   await installPeers(["typescript"], "The project's server code (*.server.ts)");
@@ -172344,8 +172313,8 @@ var init_projectCompile = __esm(() => {
 
 // src/compile/fonts.ts
 import { createHash as createHash2 } from "node:crypto";
-import { existsSync as existsSync9, mkdirSync as mkdirSync5, readFileSync as readFileSync10, writeFileSync as writeFileSync6 } from "node:fs";
-import { dirname as dirname7, join as join12 } from "node:path";
+import { existsSync as existsSync9, mkdirSync as mkdirSync4, readFileSync as readFileSync9, writeFileSync as writeFileSync5 } from "node:fs";
+import { dirname as dirname7, join as join11 } from "node:path";
 var applyProjectFonts = async (entries, opts) => {
   const registry = (opts.registry ?? fontRegistryBase()).replace(/\/+$/, "");
   const byPath = () => new Map(entries.map((e) => [e.path.replace(/^\//, ""), e]));
@@ -172354,9 +172323,9 @@ var applyProjectFonts = async (entries, opts) => {
     registryBase: registry,
     readBytes: (entryPath) => {
       const entry = byPath().get(entryPath);
-      const abs = entry?.absPath ?? join12(opts.root, entryPath);
+      const abs = entry?.absPath ?? join11(opts.root, entryPath);
       try {
-        return new Uint8Array(readFileSync10(abs));
+        return new Uint8Array(readFileSync9(abs));
       } catch {
         return null;
       }
@@ -172364,7 +172333,7 @@ var applyProjectFonts = async (entries, opts) => {
     vendorFace: opts.mode === "vendor" ? async (face) => {
       const vendorDir = opts.vendorDir ?? opts.root;
       const rel = `assets/fonts/${face.fileName}`;
-      const abs = join12(vendorDir, rel);
+      const abs = join11(vendorDir, rel);
       const entryPath = `${opts.vendorPrefix ?? ""}/${rel}`;
       if (!existsSync9(abs))
         await downloadFace(registry, vendorDir, face, rel, abs);
@@ -172388,13 +172357,13 @@ var applyProjectFonts = async (entries, opts) => {
     return res.ok ? new Uint8Array(await res.arrayBuffer()) : null;
   }
   try {
-    return new Uint8Array(readFileSync10(join12(registry, rel)));
+    return new Uint8Array(readFileSync9(join11(registry, rel)));
   } catch {
     return null;
   }
 }, readLock = (path) => {
   try {
-    const lock = JSON.parse(readFileSync10(path, "utf8"));
+    const lock = JSON.parse(readFileSync9(path, "utf8"));
     if (lock && typeof lock === "object" && lock.faces && lock.families)
       return lock;
   } catch {}
@@ -172426,10 +172395,10 @@ var applyProjectFonts = async (entries, opts) => {
 `);
 }, writeIfChanged = (path, text) => {
   try {
-    if (readFileSync10(path, "utf8") === text)
+    if (readFileSync9(path, "utf8") === text)
       return;
   } catch {}
-  writeFileSync6(path, text);
+  writeFileSync5(path, text);
 }, downloadFace = async (registry, vendorDir, face, rel, abs) => {
   const licRaw = await readRegistry(registry, "licenses.json");
   if (!licRaw)
@@ -172441,15 +172410,15 @@ var applyProjectFonts = async (entries, opts) => {
   const bytes = await readRegistry(registry, `${face.id}/${face.fileName}`);
   if (!bytes)
     throw new Error(`font("${face.id}"): face "${face.fileName}" not found in the registry (${registryHome(registry)}).`);
-  mkdirSync5(dirname7(abs), { recursive: true });
-  writeFileSync6(abs, bytes);
-  const lockPath = join12(vendorDir, "fonts.lock.json");
+  mkdirSync4(dirname7(abs), { recursive: true });
+  writeFileSync5(abs, bytes);
+  const lockPath = join11(vendorDir, "fonts.lock.json");
   const lock = readLock(lockPath) ?? { registry, faces: {}, families: {} };
   lock.registry = registry;
   lock.faces[`${face.id}@${face.weight}${face.italic ? "i" : ""}`] = { id: face.id, family: face.family, weight: face.weight, italic: face.italic, hash: sha12(bytes), spdx: lic.spdx, path: rel };
   lock.families[face.id] = lic;
   writeIfChanged(lockPath, serializeLock(lock));
-  writeIfChanged(join12(vendorDir, "FONT-NOTICES.md"), renderNotices(lock));
+  writeIfChanged(join11(vendorDir, "FONT-NOTICES.md"), renderNotices(lock));
 };
 var init_fonts = __esm(() => {
   init_compile();
@@ -172457,9 +172426,9 @@ var init_fonts = __esm(() => {
 
 // src/compile/assetIcons.ts
 import { createHash as createHash5 } from "node:crypto";
-import { existsSync as existsSync13, mkdirSync as mkdirSync8, readFileSync as readFileSync13, writeFileSync as writeFileSync9 } from "node:fs";
-import { homedir as homedir5 } from "node:os";
-import { dirname as dirname8, join as join16 } from "node:path";
+import { existsSync as existsSync13, mkdirSync as mkdirSync7, readFileSync as readFileSync12, writeFileSync as writeFileSync8 } from "node:fs";
+import { homedir as homedir4 } from "node:os";
+import { dirname as dirname8, join as join15 } from "node:path";
 var DEFAULT_REGISTRY, isHttp2 = (s) => /^https?:/i.test(s), sha122 = (s) => createHash5("sha256").update(s).digest("hex").slice(0, 12), readText = async (registry, rel) => {
   if (isHttp2(registry)) {
     try {
@@ -172470,13 +172439,13 @@ var DEFAULT_REGISTRY, isHttp2 = (s) => /^https?:/i.test(s), sha122 = (s) => crea
     }
   }
   try {
-    return readFileSync13(join16(registry, rel), "utf8");
+    return readFileSync12(join15(registry, rel), "utf8");
   } catch {
     return null;
   }
 }, safeRead = (path) => {
   try {
-    return readFileSync13(path, "utf8");
+    return readFileSync12(path, "utf8");
   } catch {
     return null;
   }
@@ -172484,7 +172453,7 @@ var DEFAULT_REGISTRY, isHttp2 = (s) => /^https?:/i.test(s), sha122 = (s) => crea
   const current = existsSync13(path) ? safeRead(path) : null;
   if (current === text)
     return false;
-  writeFileSync9(path, text);
+  writeFileSync8(path, text);
   return true;
 }, fetchIcon = async (registry, pack, name) => {
   const svg = await readText(registry, `${pack}/${name}.svg`);
@@ -172498,7 +172467,7 @@ var DEFAULT_REGISTRY, isHttp2 = (s) => /^https?:/i.test(s), sha122 = (s) => crea
   return JSON.parse(raw);
 }, readLock2 = (path) => {
   try {
-    const lock = JSON.parse(readFileSync13(path, "utf8"));
+    const lock = JSON.parse(readFileSync12(path, "utf8"));
     if (lock && typeof lock === "object" && lock.icons && lock.packs)
       return lock;
   } catch {}
@@ -172533,13 +172502,13 @@ var DEFAULT_REGISTRY, isHttp2 = (s) => /^https?:/i.test(s), sha122 = (s) => crea
 `);
 }, vendorIcons = async (designDir, ids, opts = {}) => {
   const registry = (opts.registry ?? DEFAULT_REGISTRY).replace(/\/+$/, "");
-  const lockPath = join16(designDir, "icons.lock.json");
+  const lockPath = join15(designDir, "icons.lock.json");
   const lock = readLock2(lockPath) ?? { registry, icons: {}, packs: {} };
   const svgById = new Map;
   const missing = [];
   for (const id of ids) {
     const li = lock.icons[id];
-    const cached = li && safeRead(join16(designDir, li.path));
+    const cached = li && safeRead(join15(designDir, li.path));
     if (cached)
       svgById.set(id, cached);
     else
@@ -172555,9 +172524,9 @@ var DEFAULT_REGISTRY, isHttp2 = (s) => /^https?:/i.test(s), sha122 = (s) => crea
         throw new Error(`assetIcon: unknown icon pack "${pack}" (in "${id}"). Available packs: ${Object.keys(licenses).sort().join(", ")}.`);
       const svg = await fetchIcon(registry, pack, name);
       const rel = `assets/icons/${pack}/${name}.svg`;
-      const abs = join16(designDir, rel);
-      mkdirSync8(dirname8(abs), { recursive: true });
-      writeFileSync9(abs, svg);
+      const abs = join15(designDir, rel);
+      mkdirSync7(dirname8(abs), { recursive: true });
+      writeFileSync8(abs, svg);
       lock.icons[id] = { pack, name, hash: sha122(svg), spdx: lic.spdx, path: rel };
       lock.packs[pack] = { spdx: lic.spdx, title: lic.title, url: lic.url, attribution: lic.attribution, modifiedNotice: lic.modifiedNotice };
       svgById.set(id, svg);
@@ -172566,25 +172535,25 @@ var DEFAULT_REGISTRY, isHttp2 = (s) => /^https?:/i.test(s), sha122 = (s) => crea
     writeIfChanged2(lockPath, serializeLock2(lock));
   }
   if (Object.keys(lock.icons).length)
-    writeIfChanged2(join16(designDir, "ICON-NOTICES.md"), renderNotices2(lock));
+    writeIfChanged2(join15(designDir, "ICON-NOTICES.md"), renderNotices2(lock));
   return svgById;
 }, applyAssetIcons = async (entries, designDir, opts = {}) => {
   await applyAssetIconMacro(entries, (ids) => vendorIcons(designDir, ids, opts));
-}, defaultCacheDir = () => join16(homedir5(), ".lecodes", "cache", "icons"), cacheIcons = async (ids, opts = {}) => {
+}, defaultCacheDir = () => join15(homedir4(), ".lecodes", "cache", "icons"), cacheIcons = async (ids, opts = {}) => {
   const registry = (opts.registry ?? DEFAULT_REGISTRY).replace(/\/+$/, "");
   const cacheDir = opts.cacheDir ?? defaultCacheDir();
   const svgById = new Map;
   for (const id of ids) {
     const [, pack, name] = ICON_ID.exec(id);
-    const cachePath = join16(cacheDir, pack, `${name}.svg`);
+    const cachePath = join15(cacheDir, pack, `${name}.svg`);
     const cached = safeRead(cachePath);
     if (cached) {
       svgById.set(id, cached);
       continue;
     }
     const svg = await fetchIcon(registry, pack, name);
-    mkdirSync8(dirname8(cachePath), { recursive: true });
-    writeFileSync9(cachePath, svg);
+    mkdirSync7(dirname8(cachePath), { recursive: true });
+    writeFileSync8(cachePath, svg);
     svgById.set(id, svg);
   }
   return svgById;
@@ -172602,6 +172571,37 @@ var init_assetIcons = __esm(() => {
   DEFAULT_REGISTRY = process.env.LECODES_ICON_REGISTRY?.trim() || "https://icon-registry.jt3.ru/v1";
 });
 
+// src/platform/config.ts
+import { homedir as homedir5 } from "node:os";
+import { join as join16 } from "node:path";
+import { mkdirSync as mkdirSync8, readFileSync as readFileSync13, writeFileSync as writeFileSync9 } from "node:fs";
+var DEFAULT_API = "https://le.codes", CONFIG_DIR, CONFIG_FILE, loadConfig = () => {
+  let stored = {};
+  try {
+    stored = JSON.parse(readFileSync13(CONFIG_FILE, "utf8"));
+  } catch {}
+  return {
+    apiUrl: process.env.LECODES_API ?? stored.apiUrl,
+    token: process.env.LECODES_TOKEN ?? stored.token
+  };
+}, saveConfig = (config) => {
+  mkdirSync8(CONFIG_DIR, { recursive: true });
+  writeFileSync9(CONFIG_FILE, JSON.stringify(config, null, 2));
+}, normalizeApiUrl = (url) => url.trim().replace(/\/+$/, ""), requireToken = (config) => {
+  if (!config.token)
+    throw new CliError("Not logged in. Run `lecodes login` first.");
+  return config.token;
+}, requireApiUrl = (config) => {
+  if (!config.apiUrl)
+    throw new CliError("No server URL configured. Run `lecodes login` first.");
+  return normalizeApiUrl(config.apiUrl);
+};
+var init_config = __esm(() => {
+  init_cli();
+  CONFIG_DIR = join16(homedir5(), ".lecodes");
+  CONFIG_FILE = join16(CONFIG_DIR, "config.json");
+});
+
 // src/commands/shared.ts
 import { basename as basename4 } from "node:path";
 var bundleFlags, outFlag, bundleOptions = (flags) => ({
@@ -215995,8 +215995,10 @@ var describeField = (f5) => {
       const fields = Object.entries(m.fields).filter(([k]) => !shown[name] || shown[name].includes(k));
       const described = Object.fromEntries(fields.map(([k, f5]) => [k, describeField(f5)]));
       for (const f5 of files) {
-        if (f5.model === name)
-          described[f5.key] = { kind: "file", optional: false, unique: false, index: false, hasDefault: false, array: f5.array, isId: false };
+        if (f5.model !== name)
+          continue;
+        const declared = db.$given[name]?.fields?.[f5.key]?.def;
+        described[f5.key] = { kind: "file", optional: declared?.optional ?? false, unique: false, index: false, hasDefault: false, array: f5.array, isId: false, ...f5.image ? { image: f5.image } : {} };
       }
       models[name] = { fields: described, ...name === FILE_MODEL ? { files: true } : shown[name] ? { auth: true } : {} };
     }
@@ -217173,7 +217175,6 @@ import { delimiter as delimiter3, dirname as dirname28, join as join59 } from "n
 
 // src/commands/app/index.ts
 init_manifest();
-init_config();
 import { execFileSync as execFileSync6 } from "node:child_process";
 import { cpSync as cpSync4, existsSync as existsSync23, mkdirSync as mkdirSync15, readFileSync as readFileSync20, readdirSync as readdirSync9, rmSync as rmSync7, statSync as statSync9, writeFileSync as writeFileSync18 } from "node:fs";
 import { homedir as homedir10 } from "node:os";
@@ -217188,16 +217189,16 @@ import { basename as basename5, resolve as resolve5 } from "node:path";
 // src/compile/collect.ts
 init_localFiles();
 init_ignore();
-import { readFileSync as readFileSync5 } from "node:fs";
+import { readFileSync as readFileSync4 } from "node:fs";
 import { basename } from "node:path";
 
 // src/project/materialize.ts
 init_api();
 init_paths();
-import { dirname as dirname2, join as join5 } from "node:path";
-import { mkdirSync as mkdirSync3, writeFileSync as writeFileSync4 } from "node:fs";
+import { dirname as dirname2, join as join4 } from "node:path";
+import { mkdirSync as mkdirSync2, writeFileSync as writeFileSync3 } from "node:fs";
 var kindOf = (type) => type === "file" ? "resource" : type;
-var absOf = (root, key) => join5(root, ...key.replace(/^\//, "").split("/"));
+var absOf = (root, key) => join4(root, ...key.replace(/^\//, "").split("/"));
 var buildPaths = (assets) => {
   const pathById = new Map;
   for (const asset of assets) {
@@ -217215,20 +217216,20 @@ var materializeAssets = async (root, project, apiUrl, token, onProgress) => {
     const key = pathById.get(asset.id);
     const abs = absOf(root, key);
     if (asset.type === "folder") {
-      mkdirSync3(abs, { recursive: true });
+      mkdirSync2(abs, { recursive: true });
       continue;
     }
-    mkdirSync3(dirname2(abs), { recursive: true });
+    mkdirSync2(dirname2(abs), { recursive: true });
     let sha;
     if (asset.type === "file") {
       if (!asset.file?.src)
         continue;
       const bytes = await downloadBlob(apiUrl, asset.file.src);
-      writeFileSync4(abs, bytes);
+      writeFileSync3(abs, bytes);
       sha = sha256(bytes);
     } else {
       const text = asset.text ?? "";
-      writeFileSync4(abs, text);
+      writeFileSync3(abs, text);
       sha = sha256(text);
     }
     files[key] = { id: asset.id, type: kindOf(asset.type), sha };
@@ -217262,7 +217263,7 @@ var collectEntries = (root, manifest, project, opts = {}) => {
         warnings.push(`No compiled shader for ${file.path} — push it to compile the shader.`);
       entries.push({ path: file.path, type, shaders, absPath: file.absPath });
     } else {
-      entries.push({ path: file.path, type, text: readFileSync5(file.absPath, "utf8") });
+      entries.push({ path: file.path, type, text: readFileSync4(file.absPath, "utf8") });
     }
   }
   return { entries, warnings };
@@ -217271,7 +217272,7 @@ var collectEntries = (root, manifest, project, opts = {}) => {
 // src/compile/collectLocal.ts
 init_localFiles();
 init_ignore();
-import { readFileSync as readFileSync6 } from "node:fs";
+import { readFileSync as readFileSync5 } from "node:fs";
 import { basename as basename2 } from "node:path";
 var collectLocalEntries = (root, manifest, assetBase, opts = {}) => {
   const entries = [];
@@ -217287,7 +217288,7 @@ var collectLocalEntries = (root, manifest, assetBase, opts = {}) => {
       }
       entries.push({ path: file.path, type, shaders: [], absPath: file.absPath });
     } else {
-      entries.push({ path: file.path, type, text: readFileSync6(file.absPath, "utf8") });
+      entries.push({ path: file.path, type, text: readFileSync5(file.absPath, "utf8") });
     }
   }
   return { entries, warnings };
@@ -217301,26 +217302,26 @@ init_fonts();
 init_compile();
 import { execFile } from "node:child_process";
 import { createHash as createHash4, randomBytes } from "node:crypto";
-import { existsSync as existsSync12, mkdirSync as mkdirSync7, readFileSync as readFileSync12, rmSync as rmSync2, statSync as statSync2, writeFileSync as writeFileSync8 } from "node:fs";
+import { existsSync as existsSync12, mkdirSync as mkdirSync6, readFileSync as readFileSync11, rmSync as rmSync2, statSync as statSync2, writeFileSync as writeFileSync7 } from "node:fs";
 import { tmpdir } from "node:os";
-import { basename as basename3, join as join15 } from "node:path";
+import { basename as basename3, join as join14 } from "node:path";
 
 // src/hosts/matcTool.ts
 import { existsSync as existsSync11, readdirSync as readdirSync3 } from "node:fs";
-import { homedir as homedir4 } from "node:os";
-import { join as join14, resolve as resolve3 } from "node:path";
+import { homedir as homedir3 } from "node:os";
+import { join as join13, resolve as resolve3 } from "node:path";
 
 // src/hosts/releases.ts
 init_cli();
 import { createHash as createHash3 } from "node:crypto";
-import { existsSync as existsSync10, mkdirSync as mkdirSync6, mkdtempSync, readFileSync as readFileSync11, renameSync, rmSync, writeFileSync as writeFileSync7 } from "node:fs";
-import { join as join13 } from "node:path";
+import { existsSync as existsSync10, mkdirSync as mkdirSync5, mkdtempSync, readFileSync as readFileSync10, renameSync, rmSync, writeFileSync as writeFileSync6 } from "node:fs";
+import { join as join12 } from "node:path";
 import { spawnSync as spawnSync4 } from "node:child_process";
 var MANIFEST_URL = "https://storage.yandexcloud.net/le-codes/releases/versions.json";
 var ARTIFACT_STAMP = ".lecodes-artifact.json";
 var cachedArtifactSha = (dir) => {
   try {
-    return JSON.parse(readFileSync11(join13(dir, ARTIFACT_STAMP), "utf8")).sha256 ?? null;
+    return JSON.parse(readFileSync10(join12(dir, ARTIFACT_STAMP), "utf8")).sha256 ?? null;
   } catch {
     return null;
   }
@@ -217366,16 +217367,16 @@ var downloadReleaseArchive = async (file, opts) => {
   const sha = createHash3("sha256").update(bytes).digest("hex");
   if (sha !== file.sha256)
     throw new CliError(`Downloaded archive is corrupt (sha256 mismatch) — try again.`);
-  mkdirSync6(opts.cacheRoot, { recursive: true });
-  const stage = mkdtempSync(join13(opts.cacheRoot, "dl-"));
+  mkdirSync5(opts.cacheRoot, { recursive: true });
+  const stage = mkdtempSync(join12(opts.cacheRoot, "dl-"));
   try {
     const archiveName = file.url.split("/").pop() ?? "archive";
-    const archive = join13(stage, archiveName);
-    writeFileSync7(archive, bytes);
+    const archive = join12(stage, archiveName);
+    writeFileSync6(archive, bytes);
     if (opts.extract) {
       opts.extract(archive, stage);
     } else {
-      const winTar = join13(process.env.SystemRoot ?? "C:\\Windows", "System32", "tar.exe");
+      const winTar = join12(process.env.SystemRoot ?? "C:\\Windows", "System32", "tar.exe");
       const tarExe = process.platform === "win32" && existsSync10(winTar) ? winTar : "tar";
       const tar = spawnSync4(tarExe, ["-xf", archiveName], { cwd: stage, stdio: ["ignore", "ignore", "pipe"] });
       if (tar.status !== 0)
@@ -217385,7 +217386,7 @@ var downloadReleaseArchive = async (file, opts) => {
     const bad = opts.validate(stage);
     if (bad)
       throw new CliError(bad);
-    writeFileSync7(join13(stage, ARTIFACT_STAMP), JSON.stringify({ sha256: file.sha256, url: file.url }, null, 2));
+    writeFileSync6(join12(stage, ARTIFACT_STAMP), JSON.stringify({ sha256: file.sha256, url: file.url }, null, 2));
     try {
       renameSync(stage, opts.dest);
     } catch {
@@ -217415,11 +217416,11 @@ var platformKey = () => {
     return macPlatformKey();
   throw new CliError(`matc isn't published for ${process.platform}.`);
 };
-var cacheRoot = () => join14(homedir4(), ".lecodes", "matc");
+var cacheRoot = () => join13(homedir3(), ".lecodes", "matc");
 var findMatc = (dir) => {
   const name = matcName();
   for (const entry of readdirSync3(dir, { withFileTypes: true })) {
-    const p = join14(dir, entry.name);
+    const p = join13(dir, entry.name);
     if (entry.isFile() && entry.name === name)
       return p;
     if (entry.isDirectory()) {
@@ -217432,7 +217433,7 @@ var findMatc = (dir) => {
 };
 var installedMatcVersions = () => {
   try {
-    return readdirSync3(cacheRoot(), { withFileTypes: true }).filter((e) => e.isDirectory() && e.name.startsWith("matc-")).map((e) => e.name.slice("matc-".length)).filter((v) => findMatc(join14(cacheRoot(), `matc-${v}`)) !== null).sort(semverNewer);
+    return readdirSync3(cacheRoot(), { withFileTypes: true }).filter((e) => e.isDirectory() && e.name.startsWith("matc-")).map((e) => e.name.slice("matc-".length)).filter((v) => findMatc(join13(cacheRoot(), `matc-${v}`)) !== null).sort(semverNewer);
   } catch {
     return [];
   }
@@ -217462,7 +217463,7 @@ var resolveMatcExeCached = () => {
     return resolve3(override);
   }
   const cached = installedMatcVersions()[0];
-  return cached ? findMatc(join14(cacheRoot(), `matc-${cached}`)) : null;
+  return cached ? findMatc(join13(cacheRoot(), `matc-${cached}`)) : null;
 };
 var resolveMatcExe = async () => {
   const cached = resolveMatcExeCached();
@@ -217470,7 +217471,7 @@ var resolveMatcExe = async () => {
     return cached;
   const { versions } = await fetchMatcManifest();
   const { version, file } = pickMatc(versions);
-  const dir = join14(cacheRoot(), `matc-${version}`);
+  const dir = join13(cacheRoot(), `matc-${version}`);
   await downloadMatc(version, file, dir);
   const exe = findMatc(dir);
   if (!exe)
@@ -217481,7 +217482,7 @@ var updateMatc = async () => {
   const { versions } = await fetchMatcManifest();
   const { version, file } = pickMatc(versions);
   const before = installedMatcVersions()[0];
-  const dir = join14(cacheRoot(), `matc-${version}`);
+  const dir = join13(cacheRoot(), `matc-${version}`);
   if (existsSync11(dir) && findMatc(dir) !== null) {
     note(`Already up to date: matc ${version}.`);
     return;
@@ -217494,7 +217495,7 @@ var updateMatc = async () => {
 init_manifest();
 init_cli();
 var SHADERS_DIR = "shaders";
-var shadersCacheDir = (root) => join15(root, LECODES_DIR, SHADERS_DIR);
+var shadersCacheDir = (root) => join14(root, LECODES_DIR, SHADERS_DIR);
 var isShaderArtifactName = (name) => /^[0-9a-f]{16}_[a-z-]+\.filamat$/.test(name);
 var matcIdentity = (exe) => {
   const stat = statSync2(exe);
@@ -217504,17 +217505,17 @@ var shaderHash = (text, matcId) => createHash4("sha256").update(`${TARGET_MATRIX
 var artifactFamily = () => [...MATC_PLATFORMS, ...LOCAL_ONLY_PLATFORMS, "webgl-lite"];
 var shaderIsCompiled = (root, text, matcId) => {
   const hash = shaderHash(text, matcId);
-  return artifactFamily().every((p) => existsSync12(join15(shadersCacheDir(root), `${hash}_${p}.filamat`)));
+  return artifactFamily().every((p) => existsSync12(join14(shadersCacheDir(root), `${hash}_${p}.filamat`)));
 };
 var shaderCompiledPlatforms = (root, text, matcId) => {
   const hash = shaderHash(text, matcId);
-  return artifactFamily().filter((p) => existsSync12(join15(shadersCacheDir(root), `${hash}_${p}.filamat`)));
+  return artifactFamily().filter((p) => existsSync12(join14(shadersCacheDir(root), `${hash}_${p}.filamat`)));
 };
 var localShaderArtifact = (root, text, platform) => {
   const matcExe = resolveMatcExeCached();
   if (!matcExe)
     return null;
-  const file = join15(shadersCacheDir(root), `${shaderHash(text, matcIdentity(matcExe))}_${platform}.filamat`);
+  const file = join14(shadersCacheDir(root), `${shaderHash(text, matcIdentity(matcExe))}_${platform}.filamat`);
   return existsSync12(file) ? file : null;
 };
 var allShaderPlatforms = () => [...Object.keys(ALL_PLATFORM_BUILD), "webgl-lite"];
@@ -217548,25 +217549,25 @@ var applyLocalShaders = async (entries, opts) => {
   }
   const matcId = matcIdentity(matcExe);
   const cacheDir = shadersCacheDir(opts.root);
-  mkdirSync7(cacheDir, { recursive: true });
+  mkdirSync6(cacheDir, { recursive: true });
   const artifacts = [];
   for (const entry of shaderEntries) {
-    const text = readFileSync12(entry.absPath, "utf8");
+    const text = readFileSync11(entry.absPath, "utf8");
     const hash = shaderHash(text, matcId);
     const family = artifactFamily();
     const artifact = (platform) => `${hash}_${platform}.filamat`;
-    const has = (platform) => existsSync12(join15(cacheDir, artifact(platform)));
+    const has = (platform) => existsSync12(join14(cacheDir, artifact(platform)));
     const wanted = opts.platforms ? family.filter((p) => opts.platforms.includes(p)) : family;
     const missing = wanted.filter((p) => !has(p));
     const matcMissing = missing.filter((p) => p !== "webgl-lite");
     if (matcMissing.length > 0) {
       const tempName = `lecodes-matc-${randomBytes(6).toString("hex")}.mat`;
-      const tempFile = join15(tmpdir(), tempName);
+      const tempFile = join14(tmpdir(), tempName);
       try {
         for (const platform of matcMissing) {
           const build = ALL_PLATFORM_BUILD[platform];
-          writeFileSync8(tempFile, build.replaceExternal ? text.replace(externalSamplerReg, "type:sampler2d") : text);
-          const out = join15(cacheDir, artifact(platform));
+          writeFileSync7(tempFile, build.replaceExternal ? text.replace(externalSamplerReg, "type:sampler2d") : text);
+          const out = join14(cacheDir, artifact(platform));
           const { ok, stderr } = await runMatc(matcExe, matcArgs(platform, out, tempFile));
           if (!ok) {
             rmSync2(out, { force: true });
@@ -217579,7 +217580,7 @@ ${cleanMatcOutput(stderr, tempName, basename3(entry.path))}`);
       }
     }
     if (missing.includes("webgl-lite")) {
-      writeFileSync8(join15(cacheDir, artifact("webgl-lite")), JSON.stringify(buildLiteMaterialArtifact(text)));
+      writeFileSync7(join14(cacheDir, artifact("webgl-lite")), JSON.stringify(buildLiteMaterialArtifact(text)));
     }
     if (opts.local) {
       const staged = opts.platforms ? ALL_NATIVE_PLATFORMS.filter((p) => opts.platforms.includes(p)) : NATIVE_PLATFORMS;
@@ -217589,7 +217590,7 @@ ${cleanMatcOutput(stderr, tempName, basename3(entry.path))}`);
       ];
       entry.shadersLocal = true;
       for (const platform of staged) {
-        artifacts.push({ name: artifact(platform), absPath: join15(cacheDir, artifact(platform)) });
+        artifacts.push({ name: artifact(platform), absPath: join14(cacheDir, artifact(platform)) });
       }
     } else {
       const order = ["opengl", "metal", "desktop", "webgl-lite"];
@@ -217605,6 +217606,7 @@ init_ignore();
 
 // src/commands/app/shared.ts
 init_manifest();
+init_config();
 init_ignore();
 init_cli();
 import { execFileSync } from "node:child_process";
@@ -217812,6 +217814,26 @@ var desktopDefaultViewport = (root) => {
 };
 var swiftPackageName = (url) => (url.replace(/\/+$/, "").split("/").pop() ?? url).replace(/\.git$/, "");
 var isLocalPluginSpec = (spec) => spec.startsWith("./") || spec.startsWith("../") || spec.startsWith("/") || spec.startsWith("file:");
+var resolveUpdateUrl = (update, root, sdkVersion) => {
+  if (update === false)
+    return;
+  let url = typeof update === "string" ? update : typeof update === "object" ? update.url : undefined;
+  if (!url) {
+    let manifest = null;
+    try {
+      manifest = readManifest(root);
+    } catch {}
+    if (!manifest) {
+      if (update)
+        warn(`app.json "update": true needs a server-backed project — use "update": {"url": "https://…/app.js"} for custom hosting. OTA left unconfigured.`);
+      return;
+    }
+    url = `${requireApiUrl(loadConfig())}/code/${manifest.uuid}.js?sdk=${sdkVersion}`;
+  }
+  if (!url.startsWith("https://"))
+    warn(`update URL is not https — the phones block it on device (ATS / cleartext policy): ${url}`);
+  return url;
+};
 var sdkSatisfies = (version, range) => {
   const op = range.startsWith("^") ? "^" : range.startsWith("~") ? "~" : "";
   const want = range.slice(op.length);
@@ -217901,6 +217923,15 @@ var resolveVariant = (requested, bundleJs, configKey = "ios.variant") => {
   }
   return { variant, detected };
 };
+var ANDROID_SDK_VARIANTS = [...SDK_VARIANTS, "vulkan"];
+var ANDROID_SDK_VULKAN_MIN = "2.1.0";
+var androidSdkArtifact = (variant, sdkVersion) => {
+  if (variant === "vulkan" && sdkVersion && cmpVersion(sdkVersion, ANDROID_SDK_VULKAN_MIN) < 0) {
+    throw new CliError(`android.variant "vulkan" needs lecodes-android-sdk >= ${ANDROID_SDK_VULKAN_MIN} (pinned: ${sdkVersion}) — run \`lecodes app update\` or set android.sdk.`);
+  }
+  return variant === "full" ? "lecodes-sdk" : `lecodes-sdk-${variant}`;
+};
+var androidVariantEngines = (variant) => variant === "vulkan" ? "full" : variant;
 var VERSION_RE = /^\d+\.\d+\.\d+$/;
 var cmpVersion = (a, b) => {
   const pa = a.split(".").map(Number);
@@ -219833,14 +219864,14 @@ android {
         minSdk = ${MIN_SDK}
     }
     compileOptions {
-        sourceCompatibility = JavaVersion.VERSION_11
-        targetCompatibility = JavaVersion.VERSION_11
+        sourceCompatibility = JavaVersion.VERSION_17
+        targetCompatibility = JavaVersion.VERSION_17
     }
 }
 
 kotlin {
     compilerOptions {
-        jvmTarget.set(org.jetbrains.kotlin.gradle.dsl.JvmTarget.JVM_11)
+        jvmTarget.set(org.jetbrains.kotlin.gradle.dsl.JvmTarget.JVM_17)
     }
 }
 
@@ -219853,6 +219884,15 @@ dependencies {
 }
 `;
 };
+var runtimeManifestTemplate = (updateUrl) => `<?xml version="1.0" encoding="utf-8"?>
+<!-- Generated by \`lecodes app sync\` — regenerated on every sync, do not edit. -->
+<manifest xmlns:android="http://schemas.android.com/apk/res/android">
+    <application>${updateUrl ? `
+        <!-- lecodes:update — native OTA source (app.json "update"); LeCodesShell.boot checks it at launch -->
+        <meta-data android:name="io.letary.lecodes.UPDATE_URL" android:value="${updateUrl.replace(/&/g, "&amp;")}" />` : ""}
+    </application>
+</manifest>
+`;
 var runtimeKotlinTemplate = (plugins, projectUuid) => {
   const identity = projectUuid ? `        engine.bootProjectUuid = "${projectUuid}"
 ` : "";
@@ -219915,14 +219955,14 @@ android {
         minSdk = ${MIN_SDK}${consumer}
     }
     compileOptions {
-        sourceCompatibility = JavaVersion.VERSION_11
-        targetCompatibility = JavaVersion.VERSION_11
+        sourceCompatibility = JavaVersion.VERSION_17
+        targetCompatibility = JavaVersion.VERSION_17
     }
 }
 
 kotlin {
     compilerOptions {
-        jvmTarget.set(org.jetbrains.kotlin.gradle.dsl.JvmTarget.JVM_11)
+        jvmTarget.set(org.jetbrains.kotlin.gradle.dsl.JvmTarget.JVM_17)
     }
 }
 
@@ -219976,6 +220016,10 @@ engines the bundle uses and cannot see those, so a project using \`Physics\`,
 \`CharacterController\`, \`NavMesh\` or networking must set \`android.variant: "full"\` in
 \`../app.json\` — otherwise those aspects silently do nothing on device.
 
+\`android.variant: "vulkan"\` links \`lecodes-sdk-vulkan\`: the full engine set with Filament on
+Vulkan (OpenGL ES where the device has no Vulkan 1.1), \`arm64-v8a\` only — for 3D games. Never
+auto-selected; needs lecodes-android-sdk >= 2.1.0.
+
 ## App-local native code
 
 Drop Kotlin files into \`app/src/main/java/\` and register them in \`MainActivity\` after the
@@ -220036,7 +220080,22 @@ the init-time placeholder.
 
 ## Notes
 
-- No native OTA on Android yet — app.json \`"update"\` is ignored for this shell (iOS-only).
+
+## Over-the-air updates
+
+Native, before the JS engine: \`LeCodesShell.boot(engine, context)\` in \`AppViewModel\` asks the
+source for newer code (a conditional GET; offline is a no-op), stores it and runs it on the NEXT
+launch — the current launch runs the newest LOCAL bundle. Configured in \`../app.json\`:
+\`"update": true\` = the project's live bundle on the platform (a pushed project), \`"update":
+{ "url": "https://…/app.js" }\` = your own hosting, \`false\` = off. Sync writes the URL into
+\`lecodes-runtime/src/main/AndroidManifest.xml\` (meta-data \`io.letary.lecodes.UPDATE_URL\`). A
+download runs only when it is of this shell's SDK major and not older than the bundle running; a
+store update always wins over a downloaded bundle. A shell generated before OTA existed reads
+\`assets/app.js\` itself — replace that with:
+
+\`\`\`kotlin
+if (!LeCodesShell.boot(engine, getApplication<Application>())) Log.e("LeCodes", "bundled app.js is missing — run \`lecodes app sync\`")
+\`\`\`
 - Push: the notification service needs \`app/google-services.json\` from the le.codes Firebase
   project; \`lecodes app sync\` applies the google-services Gradle plugin only when that file
   exists (and warns otherwise).
@@ -220096,14 +220155,14 @@ android {
         }
     }
     compileOptions {
-        sourceCompatibility = JavaVersion.VERSION_11
-        targetCompatibility = JavaVersion.VERSION_11
+        sourceCompatibility = JavaVersion.VERSION_17
+        targetCompatibility = JavaVersion.VERSION_17
     }
 }
 
 kotlin {
     compilerOptions {
-        jvmTarget.set(org.jetbrains.kotlin.gradle.dsl.JvmTarget.JVM_11)
+        jvmTarget.set(org.jetbrains.kotlin.gradle.dsl.JvmTarget.JVM_17)
     }
 }
 
@@ -220243,6 +220302,7 @@ package ${pkg}
 import android.app.Activity
 import android.app.Application
 import androidx.lifecycle.AndroidViewModel
+import io.letary.lecodes.LeCodesShell
 import io.letary.lecodes.LecodesEngine
 
 class AppViewModel(application: Application) : AndroidViewModel(application) {
@@ -220266,8 +220326,14 @@ class AppViewModel(application: Application) : AndroidViewModel(application) {
     fun onActivityCreate(activity: Activity) {
         engine.attach(activity)
         if (!isCreated) {
-            val code = getApplication<Application>().assets.open("app.js").bufferedReader().use { it.readText() }
-            engine.run(code)
+            // OTA (native, no JS involved): LeCodesShell.boot starts the check FIRST — even a bundle
+            // that crashes on boot can never block its own fix — then runs the newest local bundle
+            // (a downloaded update, or the embedded assets/app.js). New code applies on the next
+            // launch. Configured via app.json "update" (→ the runtime module's manifest meta-data);
+            // offline: no-op.
+            if (!LeCodesShell.boot(engine, getApplication<Application>())) {
+                android.util.Log.e("LeCodes", "bundled app.js is missing — run \`lecodes app sync\`")
+            }
             isCreated = true
         }
     }
@@ -220667,9 +220733,8 @@ if "%OS%"=="Windows_NT" endlocal
 
 // src/commands/app/android.ts
 var ANDROID_SDK_REPO = "letary/lecodes-android-sdk";
-var ANDROID_SDK_MIN_VERSION = "1.2.0";
+var ANDROID_SDK_MIN_VERSION = "2.0.13";
 var ANDROID_SDK_VARIANTS_MIN = "1.3.0";
-var variantArtifact = (variant) => variant === "full" ? "lecodes-sdk" : `lecodes-sdk-${variant}`;
 var ANDROID_SDK_URL_DEFAULT = `https://github.com/${ANDROID_SDK_REPO}/releases/download`;
 var sdkRepoUrl = () => process.env.LECODES_ANDROID_SDK_URL ?? ANDROID_SDK_URL_DEFAULT;
 var ANDROID_SDK_OPTS = { repo: ANDROID_SDK_REPO, minVersion: ANDROID_SDK_MIN_VERSION, configKey: "android.sdk" };
@@ -220711,8 +220776,8 @@ var initAndroid = async (opts) => {
   }
   const existing = readJson2(join21(root, "app.json")) ?? {};
   const variant = opts.variant ?? existing.android?.variant ?? "auto";
-  if (variant !== "auto" && !SDK_VARIANTS.includes(variant)) {
-    throw new CliError(`--variant must be auto, ${SDK_VARIANTS.join(", ")} (got "${variant}")`);
+  if (variant !== "auto" && !ANDROID_SDK_VARIANTS.includes(variant)) {
+    throw new CliError(`--variant must be auto, ${ANDROID_SDK_VARIANTS.join(", ")} (got "${variant}")`);
   }
   const sdkFlag = opts.sdk ?? existing.android?.sdk;
   const sdkVersion = await resolveSdkVersion(process.env.LECODES_ANDROID_SDK ?? sdkFlag ?? "latest", null, ANDROID_SDK_OPTS);
@@ -220773,7 +220838,7 @@ var initAndroid = async (opts) => {
   write("app/src/main/res/values/strings.xml", stringsXmlTemplate(name));
   write("app/src/main/res/drawable/ic_launcher.xml", IC_LAUNCHER_XML);
   const initVariant = variant === "auto" ? "core" : variant;
-  const initArtifact = cmpVersion(sdkVersion, ANDROID_SDK_VARIANTS_MIN) >= 0 ? variantArtifact(initVariant) : "lecodes-sdk";
+  const initArtifact = cmpVersion(sdkVersion, ANDROID_SDK_VARIANTS_MIN) >= 0 ? androidSdkArtifact(initVariant, sdkVersion) : "lecodes-sdk";
   write("lecodes-runtime/build.gradle.kts", runtimeBuildGradleTemplate(sdkVersion, [], initArtifact));
   write("lecodes-runtime/src/main/kotlin/io/letary/lecodes/runtime/LeCodesRuntime.kt", runtimeKotlinTemplate([]));
   log("");
@@ -220817,11 +220882,12 @@ var syncAndroid = async (root, config, prior) => {
     bundleJs = readFileSync18(join21(assetsDir, "app.js"), "utf8");
   }
   const requestedVariant = config.android?.variant ?? "auto";
-  if (requestedVariant !== "auto" && !SDK_VARIANTS.includes(requestedVariant)) {
-    throw new CliError(`app.json android.variant must be "auto" or one of ${SDK_VARIANTS.join(", ")} (got "${requestedVariant}").`);
+  if (requestedVariant !== "auto" && !ANDROID_SDK_VARIANTS.includes(requestedVariant)) {
+    throw new CliError(`app.json android.variant must be "auto" or one of ${ANDROID_SDK_VARIANTS.join(", ")} (got "${requestedVariant}").`);
   }
-  const { variant, detected } = resolveVariant(requestedVariant, bundleJs, "android.variant");
-  let sdkArtifact = variantArtifact(variant);
+  const { variant: covered, detected } = resolveVariant(requestedVariant === "auto" ? "auto" : androidVariantEngines(requestedVariant), bundleJs, "android.variant");
+  const variant = requestedVariant === "vulkan" ? "vulkan" : covered;
+  let sdkArtifact = androidSdkArtifact(variant, sdkVersion);
   if (sdkArtifact !== "lecodes-sdk" && cmpVersion(sdkVersion, ANDROID_SDK_VARIANTS_MIN) < 0) {
     warn(`lecodes-android-sdk ${sdkVersion} predates the variant matrix (${ANDROID_SDK_VARIANTS_MIN}) — linking the full lecodes-sdk AAR; run \`lecodes app update\` to pick up variant builds.`);
     sdkArtifact = "lecodes-sdk";
@@ -220931,6 +220997,10 @@ var syncAndroid = async (root, config, prior) => {
   const runtimeKt = join21(androidDir, "lecodes-runtime", "src", "main", "kotlin", "io", "letary", "lecodes", "runtime", "LeCodesRuntime.kt");
   mkdirSync11(dirname12(runtimeKt), { recursive: true });
   writeFileSync14(runtimeKt, runtimeKotlinTemplate(runtimePlugins, shellUuid));
+  const updateUrl = resolveUpdateUrl(config.update, root, sdkVersion);
+  writeFileSync14(join21(androidDir, "lecodes-runtime", "src", "main", "AndroidManifest.xml"), runtimeManifestTemplate(updateUrl));
+  if (updateUrl)
+    log(`${c.green("update")}    OTA source ${updateUrl} — checked natively at launch (LeCodesShell.boot), new code applies next launch`);
   if (pluginSpecs.length > 0 || existsSync19(lockPath))
     writeJson(lockPath, { plugins: newLock });
   restampAppBuildGradle(androidDir, config, gradlePlugins);
@@ -220938,9 +221008,6 @@ var syncAndroid = async (root, config, prior) => {
     await writeAndroidIcons(androidDir, await loadIconMaster(root, config));
     restampManifestIcon(androidDir);
   }
-  if (config.update) {
-    note(`app.json "update" is iOS-only for now — the Android runtime has no native updater, so it's ignored for this shell.`);
-  }
   log("");
   success(`Android shell synced: app.js + ${runtimePlugins.length} plugin(s), SDK ${sdkVersion}, v${config.version ?? "1.0.0"} (${config.android?.versionCode ?? 1}).`);
   note("Build & run from Android Studio (`lecodes app open android`) — user files in android/app/ were not touched.");
@@ -221450,8 +221517,8 @@ var doctorAndroidChecks = async (root, config, check) => {
   const hasSdkHome = !!(process.env.ANDROID_HOME ?? process.env.ANDROID_SDK_ROOT) || existsSync19(join21(androidDir, "local.properties"));
   check(hasSdkHome, "Android SDK location", "set ANDROID_HOME or create android/local.properties");
   const requestedVariant = config.android?.variant ?? "auto";
-  const validVariant = requestedVariant === "auto" || SDK_VARIANTS.includes(requestedVariant);
-  check(validVariant, `android.variant "${requestedVariant}"`, `use "auto" or one of ${SDK_VARIANTS.join(", ")}`);
+  const validVariant = requestedVariant === "auto" || ANDROID_SDK_VARIANTS.includes(requestedVariant);
+  check(validVariant, `android.variant "${requestedVariant}"`, `use "auto" or one of ${ANDROID_SDK_VARIANTS.join(", ")}`);
   const wrapperJar = join21(androidDir, "gradle", "wrapper", "gradle-wrapper.jar");
   check(existsSync19(wrapperJar) && statSync5(wrapperJar).size > 0, "Gradle wrapper jar", `run \`gradle wrapper --gradle-version ${GRADLE_VERSION}\` in android/ (or let Android Studio repair it)`);
   check(existsSync19(join21(androidDir, "app", "src", "main", "assets", "app.js")), "Bundled app.js", "run `lecodes app sync`");
@@ -221467,6 +221534,14 @@ var doctorAndroidChecks = async (root, config, check) => {
       check(cmpVersion(linked, latest) >= 0, `SDK is the latest release (${latest})`, "run `lecodes app update`", false);
     } catch {}
   }
+  if (config.update) {
+    const manifest = join21(androidDir, "lecodes-runtime", "src", "main", "AndroidManifest.xml");
+    check(existsSync19(manifest) && readFileSync18(manifest, "utf8").includes("io.letary.lecodes.UPDATE_URL"), "OTA update URL in the runtime manifest", "run `lecodes app sync`", false);
+    const appSrc = join21(androidDir, "app", "src", "main", "java");
+    const kt = existsSync19(appSrc) ? readdirSync5(appSrc, { recursive: true }).map(String).filter((f5) => f5.endsWith(".kt")) : [];
+    const boots = kt.some((f5) => readFileSync18(join21(appSrc, f5), "utf8").includes("LeCodesShell.boot"));
+    check(boots, "App code launches via the updater (LeCodesShell.boot)", 'no app/src/main/java/**/*.kt calls LeCodesShell.boot(engine, context) — downloaded updates would never run; see "Over-the-air updates" in android/README.md for the AppViewModel snippet', false);
+  }
   const signing = resolveAndroidSigning(androidDir);
   check(!!signing, "Release signing key", "`lecodes app keystore create` or `keystore use <file>` (release builds are refused without one)", false);
   if (signing) {
@@ -222761,7 +222836,7 @@ var init = defineCommand({
     "bundle-id": str("iOS bundle identifier (default com.example.<slug>)", { value: "<id>" }),
     "app-id": str("Android applicationId (default com.example.<slug>)", { value: "<id>" }),
     team: str("Apple development team id", { value: "<id>" }),
-    variant: str("SDK variant: auto (default — sync picks the smallest of core/2d/3d/full covering what the bundle uses), or one of those to pin", { value: "<v>" }),
+    variant: str("SDK variant: auto (default — sync picks the smallest of core/2d/3d/full covering what the bundle uses), or one of those to pin; Android also vulkan (full on Vulkan, arm64 only)", { value: "<v>" }),
     sdk: str("native SDK release (default: the newest one, pinned in app.json); 'latest' floats it — every sync re-resolves", { value: "<v|latest>" }),
     fullscreen: bool("(desktop) borderless fullscreen on the primary monitor — kiosks")
   },
@@ -222779,26 +222854,6 @@ var init = defineCommand({
     throw new UsageError("Which platform? `lecodes app init <ios|android|desktop>`");
   }
 });
-var resolveUpdateUrl = (update, root, sdkVersion) => {
-  if (update === false)
-    return;
-  let url = typeof update === "string" ? update : typeof update === "object" ? update.url : undefined;
-  if (!url) {
-    let manifest = null;
-    try {
-      manifest = readManifest(root);
-    } catch {}
-    if (!manifest) {
-      if (update)
-        warn(`app.json "update": true needs a server-backed project — use "update": {"url": "https://…/app.js"} for custom hosting. OTA left unconfigured.`);
-      return;
-    }
-    url = `${requireApiUrl(loadConfig())}/code/${manifest.uuid}.js?sdk=${sdkVersion}`;
-  }
-  if (!url.startsWith("https://"))
-    warn(`update URL is not https — iOS blocks it on device (ATS): ${url}`);
-  return url;
-};
 var runSync = async (platformArg) => {
   const root = projectRoot();
   const config = readJson2(join25(root, "app.json"));
@@ -223005,7 +223060,7 @@ var sync2 = defineCommand({
   usage: "[ios|android]",
   description: `Compiles the bundle and embeds the assets it references (ios/App/Resources/ resp. the android assets/; offline by default, also for server projects — app.json "resources": {"remote": [globs]} keeps heavy assets streaming), picks the SDK variant from the bundle's engine use, vendors the app.json plugins (pinned in plugins.lock.json) and regenerates the CLI-owned shell files. User files (ios/App/*.swift, android/app/) are never touched.
 
-Native OTA JS updates at launch (iOS): on by default for a pushed project (its bundle on the platform, the launcher's own URL), app.json "update": {"url": …} for custom hosting, "update": false turns it off. app.json "icon" (a square ≥1024px image) renders the app icons every sync ("iconBackground": the adaptive / flatten backdrop). No platform = every shell that exists; a dual-shell project compiles once.`,
+Native OTA JS updates at launch (both shells; the current launch runs the newest LOCAL bundle, a download applies on the next): on by default for a pushed project (its bundle on the platform, the launcher's own URL), app.json "update": {"url": …} for custom hosting, "update": false turns it off. A download runs only when it is of the shell's SDK major and not older than the bundle running. app.json "icon" (a square ≥1024px image) renders the app icons every sync ("iconBackground": the adaptive / flatten backdrop). No platform = every shell that exists; a dual-shell project compiles once.`,
   examples: ["lecodes app sync", "lecodes app sync android"],
   run: ({ args }) => runSync(args[0])
 });
@@ -223256,8 +223311,14 @@ var doctorIosChecks = async (root, config, check) => {
     const plist = readFileSync20(join25(root, "ios", "App", "Info.plist"), "utf8");
     check(plist.includes("<key>LeCodesUpdateURL</key>"), "OTA update URL in Info.plist", "run `lecodes app sync`", false);
     const appDir = join25(root, "ios", "App");
-    const callsUpdater = readdirSync9(appDir).some((f5) => f5.endsWith(".swift") && readFileSync20(join25(appDir, f5), "utf8").includes("LeCodesUpdater.activeBundle"));
-    check(callsUpdater, "App code launches via LeCodesUpdater", `no App/*.swift calls LeCodesUpdater.activeBundle() — downloaded updates would never run; see "Over-the-air updates" in ios/README.md for the ViewController snippet`, false);
+    const swift = readdirSync9(appDir).filter((f5) => f5.endsWith(".swift")).map((f5) => readFileSync20(join25(appDir, f5), "utf8"));
+    const launchesViaUpdater = swift.some((t2) => t2.includes("LeCodesAppViewController") || t2.includes("LeCodesUpdater.activeBundle"));
+    check(launchesViaUpdater, "App code launches via the updater", `no App/*.swift subclasses LeCodesAppViewController or calls LeCodesUpdater.activeBundle() — downloaded updates would never run; see "Over-the-air updates" in ios/README.md`, false);
+  }
+  {
+    const vc = join25(root, "ios", "App", "ViewController.swift");
+    const is2x = !existsSync23(vc) || readFileSync20(vc, "utf8").includes("LeCodesAppViewController");
+    check(is2x, "App/ViewController.swift is the 2.x shell (LeCodesAppViewController)", "a 1.x shell's App/*.swift: replace AppDelegate.swift, SceneDelegate.swift and ViewController.swift with the ones `lecodes app init ios` writes today (your own code goes into ViewController.configure(_:))", false);
   }
   const asc = readJson2(join25(homedir10(), ".lecodes", "asc.json"));
   check(!!asc?.keyPath, "App Store Connect API key configured", "pass --key-path/--key-id/--issuer-id to `lecodes app upload` once to store it", false);