shotops-mcp 0.6.1 → 0.7.0

package/dist/local.js

@@ -68,9 +68,9 @@ function readBundle(name) {
 function widgetHtml(bundle) {
   return `<div id="shotops-root"></div><script type="module">${bundle}</script>`;
 }
-function registerWidgets(server2) {
+function registerWidgets(server) {
   const origin = supabaseOrigin();
-  registerWidget(server2, {
+  registerWidget(server, {
     bundleFile: "panels.js",
     canonicalUri: PANELS_WIDGET_URI,
     uris: PANELS_WIDGET_URIS,
@@ -79,7 +79,7 @@ function registerWidgets(server2) {
     description: "Shows the rendered App Store panels in a swipeable ShotOps gallery with per-panel download actions and render details.",
     origin
   });
-  registerWidget(server2, {
+  registerWidget(server, {
     bundleFile: "bundle.js",
     canonicalUri: BUNDLE_WIDGET_URI,
     uris: BUNDLE_WIDGET_URIS,
@@ -89,11 +89,11 @@ function registerWidgets(server2) {
     origin
   });
 }
-function registerWidget(server2, spec) {
+function registerWidget(server, spec) {
   const bundle = readBundle(spec.bundleFile);
   if (!bundle) return;
   for (const uri of spec.uris) {
-    server2.registerResource(
+    server.registerResource(
       uri === spec.canonicalUri ? spec.slug : `${spec.slug}-${uri.split("/").at(-1)}`,
       uri,
       {
@@ -143,8 +143,8 @@ var PROJECT_SCHEMA_VERSION = 2;
 var IPHONE_MODEL_ID = "iphone-17-pro";
 var PIXEL_MODEL_ID = "pixel-10-pro";
 var DEVICES = [
-  { id: "iphone-6-9", label: "iPhone 6.9\u2033", panelPresetId: "r69", ascDeviceSet: "APP_IPHONE_67", modelId: IPHONE_MODEL_ID, screenFamily: "iphone" },
-  { id: "iphone-6-5", label: "iPhone 6.5\u2033", panelPresetId: "r65", ascDeviceSet: "APP_IPHONE_65", modelId: IPHONE_MODEL_ID, screenFamily: "iphone" },
+  { id: "iphone-6-9", label: "iPhone 17 Pro", panelPresetId: "r69", ascDeviceSet: "APP_IPHONE_67", modelId: IPHONE_MODEL_ID, screenFamily: "iphone" },
+  { id: "iphone-6-5", label: "iPhone 17", panelPresetId: "r65", ascDeviceSet: "APP_IPHONE_65", modelId: IPHONE_MODEL_ID, screenFamily: "iphone" },
   { id: "pixel-10-pro", label: "Pixel 10 Pro", panelPresetId: "pixel69", ascDeviceSet: "ANDROID_PHONE", modelId: PIXEL_MODEL_ID, screenFamily: "android" },
   { id: "ipad-13", label: "iPad 13\u2033", panelPresetId: "ipad13", ascDeviceSet: "APP_IPAD_PRO_129", modelId: "ipad-pro", screenFamily: "ipad", comingSoon: true },
   { id: "ipad-12-9", label: "iPad 12.9\u2033", panelPresetId: "ipad129", ascDeviceSet: "APP_IPAD_PRO_3GEN_129", modelId: "ipad-pro", screenFamily: "ipad", comingSoon: true }
@@ -868,8 +868,10 @@ var SERVER_INSTRUCTIONS = [
   "  position, glare, reflections, lighting, flatScreen. Those three PLACEMENT fields are the ones",
   "  style.layout sets for you \u2014 prefer it and use these to adjust the result. Every numeric field",
   "  here is RANGE-CHECKED: out of range is rejected with the range and the fix, not clamped.",
-  "- style.background (the strip): mode gradient|perPanel; gradientFrom/gradientTo (hex),",
-  "  gradientDir vertical|horizontal, shadow, floorReflection; or panelColors[] (one hex per slot) for perPanel.",
+  "- style.background (the strip): mode gradient|perPanel; stops [{color,at}] (hex colour + 0\u20131",
+  "  position along the gradient line \u2014 one stop is a solid, two is a classic top/bottom gradient,",
+  '  more is a multi-colour sweep) and angle (degrees clockwise from "to top", CSS convention:',
+  "  90 = right, 180 = down); shadow, floorReflection; or panelColors[] (one hex per slot) for perPanel.",
   "- style.captions[] (ONE entry per panel, in slot order; null = no caption). An entry is EITHER a",
   "  single caption object OR an array of layers stacked on that panel: [{text,\u2026},{text,\u2026}]. Fields:",
   "  text (this layer\u2019s words), subtitle (single-caption shape only \u2014 in the array shape add another",
@@ -1036,6 +1038,20 @@ var SERVER_INSTRUCTIONS = [
   "reproduces the human-tuned design with zero manual step. Zero-custody: source screenshots are",
   "ephemeral (one render, then discarded); only the styling look is persisted, never the pixels."
 ].join("\n");
+var ANONYMOUS_TOOLS = /* @__PURE__ */ new Set(["import_screenshot", "render_strip"]);
+var ANONYMOUS_MODE_INSTRUCTIONS = [
+  "",
+  "## This connection is NOT signed in",
+  "The user has not connected a ShotOps account yet, so this connection can do exactly one thing,",
+  "and it is worth doing: import their screenshots (import_screenshot) and render ONE preview strip",
+  "of up to 5 panels (render_strip with `preview: true`). Do that first \u2014 showing them their own",
+  "app as a store strip is the point. Pick their best 5 screens if they give you more.",
+  "Every other tool \u2014 save_project, render_project, emit_bundle, the look tools, upload slots,",
+  "delete_assets \u2014 needs them to connect ShotOps, and answers saying so. Do not pretend otherwise,",
+  "and do not ask them to sign in BEFORE the free preview: render it, show it, and then offer the",
+  "account for the things it unlocks (keeping the project, full-resolution panels, the fastlane",
+  "bundle, more renders)."
+].join("\n");
 
 // src/pngOptimizer.ts
 import sharp from "sharp";
@@ -1069,8 +1085,15 @@ async function optimizeScreenshotPng(bytes, what = "Screenshot") {
 
 // src/uploads.ts
 var DOWNLOAD_URL_TTL_SECONDS = 60 * 60;
-function uploadDirFor(userId) {
-  return `uploads/${userId}/${randomBytes(12).toString("base64url")}`;
+var ANONYMOUS_USER_PREFIX = "anon-";
+var ANONYMOUS_ASSET_TTL_MS = 60 * 60 * 1e3;
+var ANONYMOUS_DIR_EXPIRY_RE = /^t(\d{13,})-/;
+function uploadDirFor(userId, now = Date.now()) {
+  const random = randomBytes(12).toString("base64url");
+  if (userId.startsWith(ANONYMOUS_USER_PREFIX)) {
+    return `uploads/${userId}/t${now + ANONYMOUS_ASSET_TTL_MS}-${random}`;
+  }
+  return `uploads/${userId}/${random}`;
 }
 var NAME_SEGMENT_RE = /^\d+__([A-Za-z0-9_-]+)\.png$/;
 function decodeNameFromRef(ref) {
@@ -1083,8 +1106,13 @@ function decodeNameFromRef(ref) {
     return null;
   }
 }
-function refBelongsToUser(ref, userId) {
-  return ref.startsWith(`uploads/${userId}/`) && !ref.includes("..");
+function refBelongsToUser(ref, userId, now = Date.now()) {
+  const prefix = `uploads/${userId}/`;
+  if (!ref.startsWith(prefix) || ref.includes("..")) return false;
+  if (!userId.startsWith(ANONYMOUS_USER_PREFIX)) return true;
+  const dir = ref.slice(prefix.length).split("/")[0];
+  const expiry = ANONYMOUS_DIR_EXPIRY_RE.exec(dir);
+  return expiry ? Number(expiry[1]) > now : false;
 }
 async function fetchUploadedRef(ref, userId) {
   if (!refBelongsToUser(ref, userId)) {
@@ -1432,8 +1460,8 @@ import { z as z4 } from "zod";
 var RENDERABLE_PANEL_PRESET_IDS = ["r69", "r65", "r55"];
 var OUTPUT_DEVICE_IDS = ["iphone-6-9", "iphone-6-5"];
 var OUTPUT_DEVICES = [
-  { id: "iphone-6-9", label: "iPhone 6.9\u2033", panelPresetId: "r69", ascDeviceSet: "APP_IPHONE_67" },
-  { id: "iphone-6-5", label: "iPhone 6.5\u2033", panelPresetId: "r65", ascDeviceSet: "APP_IPHONE_65" }
+  { id: "iphone-6-9", label: "iPhone 17 Pro", panelPresetId: "r69", ascDeviceSet: "APP_IPHONE_67" },
+  { id: "iphone-6-5", label: "iPhone 17", panelPresetId: "r65", ascDeviceSet: "APP_IPHONE_65" }
 ];
 function outputDeviceFor(id) {
   return OUTPUT_DEVICES.find((device) => device.id === id);
@@ -1551,6 +1579,58 @@ var SHOT_LOOK_RANGES = {
   clearcoat: { min: 0, max: 1 }
 };
 
+// ../mockup-engine/gradient.ts
+var HORIZONTAL_ANGLE = 90;
+var VERTICAL_ANGLE = 180;
+function angleFromDirection(dir) {
+  return dir === "horizontal" ? HORIZONTAL_ANGLE : VERTICAL_ANGLE;
+}
+function directionFromAngle(angle) {
+  const t = (angle % 180 + 180) % 180;
+  return t >= 45 && t < 135 ? "horizontal" : "vertical";
+}
+function gradientFromLegacy(from, to, dir) {
+  return {
+    stops: [
+      { color: from, at: 0 },
+      { color: to, at: 1 }
+    ],
+    angle: angleFromDirection(dir)
+  };
+}
+function mirrorsOf(gradient) {
+  const first = gradient.stops[0];
+  const last = gradient.stops[gradient.stops.length - 1];
+  return {
+    gradientFrom: first?.color ?? "#000000",
+    gradientTo: last?.color ?? first?.color ?? "#000000",
+    gradientDir: directionFromAngle(gradient.angle)
+  };
+}
+function normalizeGradient(rawStops, rawAngle) {
+  if (!Array.isArray(rawStops) || rawStops.length === 0) return null;
+  const stops = [];
+  for (const entry of rawStops) {
+    if (!entry || typeof entry !== "object") return null;
+    const e = entry;
+    if (typeof e.color !== "string" || typeof e.at !== "number" || !Number.isFinite(e.at)) return null;
+    stops.push({ color: e.color, at: Math.min(1, Math.max(0, e.at)) });
+  }
+  const angle = typeof rawAngle === "number" && Number.isFinite(rawAngle) ? normalizeAngle(rawAngle) : VERTICAL_ANGLE;
+  return { stops, angle };
+}
+function stripGradientOf(fields) {
+  return normalizeGradient(fields.gradientStops, fields.gradientAngle) ?? gradientFromLegacy(fields.gradientFrom, fields.gradientTo, fields.gradientDir);
+}
+function normalizeAngle(angle) {
+  return (angle % 360 + 360) % 360;
+}
+function gradientsMatch(a, b) {
+  if (normalizeAngle(a.angle) !== normalizeAngle(b.angle)) return false;
+  if (a.stops.length !== b.stops.length) return false;
+  return a.stops.every((s, i) => s.color === b.stops[i].color && s.at === b.stops[i].at);
+}
+
 // ../mockup-engine/appstore/designPresets.ts
 var DESIGN_PRESETS = [
   {
@@ -1604,7 +1684,16 @@ var DESIGN_PRESET_IDS = DESIGN_PRESETS.map((p) => p.id);
 function designPresetToStyle(preset, captionCount = 0) {
   return {
     shotLook: { ...preset.shotLook },
-    background: { mode: "gradient", ...preset.background },
+    background: {
+      mode: "gradient",
+      stops: [
+        { color: preset.background.gradientFrom, at: 0 },
+        { color: preset.background.gradientTo, at: 1 }
+      ],
+      angle: angleFromDirection(preset.background.gradientDir),
+      shadow: preset.background.shadow,
+      floorReflection: preset.background.floorReflection
+    },
     ...captionCount > 0 ? { captions: Array.from({ length: captionCount }, () => ({ ...preset.caption })) } : {}
   };
 }
@@ -1772,9 +1861,20 @@ var DESCRIBE_LOOK_CATALOG = {
     },
     background: {
       description: "The strip background.",
-      defaults: { mode: "gradient", gradientFrom: "#1b1b2e", gradientTo: "#0a0a14", gradientDir: "vertical", shadow: true, floorReflection: false },
+      defaults: {
+        mode: "gradient",
+        stops: [
+          { color: "#1b1b2e", at: 0 },
+          { color: "#0a0a14", at: 1 }
+        ],
+        angle: 180,
+        shadow: true,
+        floorReflection: false
+      },
       fields: {
         mode: "gradient | perPanel",
+        stops: "gradient colour stops, in order along the line \u2014 { color (hex), at (0\u20131 position) }. Two stops is the classic top/bottom gradient, more make a multi-colour sweep, one stop is a solid fill.",
+        angle: 'gradient angle in degrees, clockwise from "to top" (CSS linear-gradient convention): 90 = to right, 180 = to bottom (default), 270 = to left. Any value folds into 0\u2013360.',
         panelColors: 'per-panel hex colours (mode "perPanel"), one entry per slot in order',
         floorReflection: "boolean \u2014 a flipped, faded floor reflection under each phone"
       }
@@ -1801,9 +1901,11 @@ var DESCRIBE_LOOK_CATALOG = {
       shots: "The devices: one { panelId, look } per SCREENSHOT, flattened in panel order. Each `look` takes the SAME fields as style.shotLook. Repeat a panelId when several screenshots share one panel; each entry still has independent colour/material/angle.",
       panelPresetId: "canvas size preset id (see panelPresets); the top-level panelPresetId param overrides it",
       bgMode: "gradient | perPanel",
-      gradientFrom: "gradient start (hex). Default #1b1b2e",
-      gradientTo: "gradient end (hex). Default #0a0a14",
-      gradientDir: "vertical | horizontal. Default vertical",
+      gradientStops: "canonical gradient stops \u2014 [{ color (hex), at (0\u20131 position) }, \u2026] \u2014 wins over gradientFrom/gradientTo/gradientDir when present. This is where a Studio-authored multi-stop backdrop comes back; the trio below is only ever a two-stop summary of it.",
+      gradientAngle: 'canonical gradient angle in degrees, clockwise from "to top" (CSS convention: 90 = right, 180 = down, the gradientDir:"vertical" equivalent). Paired with gradientStops.',
+      gradientFrom: "gradient start (hex) \u2014 a derived mirror of gradientStops[0]. Default #1b1b2e",
+      gradientTo: "gradient end (hex) \u2014 a derived mirror of the last gradientStops entry. Default #0a0a14",
+      gradientDir: "vertical | horizontal \u2014 a derived mirror of gradientAngle. Default vertical",
       panelColors: 'per-panel flat colours keyed by panel id (mode perPanel), e.g. { "panel-1": "#123456" }',
       shadow: "boolean \u2014 drop shadow under the phones. Default true",
       floorReflection: "boolean \u2014 flipped, faded floor reflection. Default false",
@@ -1902,11 +2004,19 @@ var makeShotLook = (num) => z2.object({
 }).strict();
 var shotLook = makeShotLook(boundedNumeric);
 var advertisedShotLook = makeShotLook(() => numeric);
+var gradientStop = z2.object({ color: z2.string(), at: z2.number().min(0).max(1) }).strict();
 var background = z2.object({
   mode: z2.enum(["gradient", "perPanel"]).optional().describe("One gradient across the strip, or a flat colour per panel."),
-  gradientFrom: z2.string().optional().describe("Gradient start (hex). Default #1b1b2e."),
-  gradientTo: z2.string().optional().describe("Gradient end (hex). Default #0a0a14."),
-  gradientDir: z2.enum(["vertical", "horizontal"]).optional().describe("Default vertical."),
+  // #463/#460 decision 7 — the render_strip INPUT drops the old two-stop `gradientFrom`/
+  // `gradientTo`/`gradientDir` shorthand entirely (removed, not deprecated): `stops` + `angle`
+  // are the only accepted form here. The persisted-look shape below (makeLookObject) is
+  // DIFFERENT — it keeps the trio as a derived mirror, per decision 6.
+  stops: z2.array(gradientStop).min(1).optional().describe(
+    'Gradient colour stops, in order along the gradient line \u2014 { color (hex), at (0\u20131 position; 0 = line start, 1 = line end) }. Two stops is the classic top/bottom gradient, more make a multi-colour sweep, one stop is a solid fill. Default a two-stop navy gradient: [{color:"#1b1b2e",at:0},{color:"#0a0a14",at:1}].'
+  ),
+  angle: z2.number().optional().describe(
+    'Gradient angle in degrees, clockwise from "to top" \u2014 CSS `linear-gradient()` convention: 90 = to right, 180 = to bottom (the old "vertical" default, and this field\u2019s own default), 270 = to left. Any value folds into 0\u2013360.'
+  ),
   panelColors: z2.array(z2.string().nullable()).max(10).optional().describe('Per-panel flat colours (mode "perPanel"), one entry per slot in order; null = default.'),
   shadow: z2.boolean().optional().describe("Drop shadow under the phones. Default true."),
   floorReflection: z2.boolean().optional().describe("Flipped, faded floor reflection under each phone. Default false.")
@@ -1995,9 +2105,21 @@ var makeLookObject = (lookShot) => z2.object({
   schema: z2.number().optional().describe("Look schema version. The server stamps it on every save (save_look); read_look returns it. Any input value is ignored \u2014 never set it yourself."),
   panelPresetId: z2.string().optional().describe("Canvas size preset, e.g. r69 = 1290\xD72796. Default r69."),
   bgMode: z2.enum(["gradient", "perPanel"]).optional().describe("One gradient across the strip, or a flat colour per panel. Default gradient."),
-  gradientFrom: z2.string().optional().describe("Gradient start (hex). Default #1b1b2e."),
-  gradientTo: z2.string().optional().describe("Gradient end (hex). Default #0a0a14."),
-  gradientDir: z2.enum(["horizontal", "vertical"]).optional().describe("Default vertical."),
+  // #460 decision 6 — UNLIKE render_strip's `style.background` above, the PERSISTED look keeps
+  // both forms: `gradientStops`/`gradientAngle` are canonical (win when present), and
+  // gradientFrom/gradientTo/gradientDir stay as a derived MIRROR the server writes alongside
+  // them, so a reader that predates multi-stop gradients still gets a plausible two-stop
+  // backdrop. This is why LOOK_SCHEMA_VERSION does not have to move — see docs/reference/
+  // studio-look-system.md on what bumping it would discard.
+  gradientStops: z2.array(gradientStop).min(1).optional().describe(
+    "Canonical gradient stops \u2014 { color (hex), at (0\u20131 position) } \u2014 wins over gradientFrom/gradientTo/gradientDir when present. Read this back for the full stop list a Studio-authored look may carry; the trio below is only ever a two-stop summary."
+  ),
+  gradientAngle: z2.number().optional().describe(
+    'Canonical gradient angle in degrees, clockwise from "to top" (CSS convention: 90 = right, 180 = down, the gradientDir:"vertical" equivalent). Paired with gradientStops.'
+  ),
+  gradientFrom: z2.string().optional().describe("Gradient start (hex) \u2014 a derived mirror of gradientStops[0]. Default #1b1b2e."),
+  gradientTo: z2.string().optional().describe("Gradient end (hex) \u2014 a derived mirror of the last gradientStops entry. Default #0a0a14."),
+  gradientDir: z2.enum(["horizontal", "vertical"]).optional().describe("A derived mirror of gradientAngle (nearest axis). Default vertical."),
   panelColors: z2.record(z2.string(), z2.string()).optional().describe("Per-panel flat colours (mode perPanel), keyed by panel id."),
   shadow: z2.boolean().optional().describe("Drop shadow under the phones. Default true."),
   floorReflection: z2.boolean().optional().describe("Flipped, faded floor reflection under each phone. Default false."),
@@ -2029,6 +2151,13 @@ var lookHistoryAccess = z3.object({
 var noteField = z3.string().optional().describe(
   "Free-text advisories about THIS call, joined into one string. Written when the server did something you did not literally ask for or could not have known: a look/version fallback, an output-mode downgrade, a device this server cannot render, a `style.shotLook` a `look` overrode, or placement set by hand where a `style.layout` template would have produced the same composition. Never an error \u2014 the call succeeded. Read it, and act on it next call."
 );
+var creditsField = z3.object({
+  debited: z3.number(),
+  remaining: z3.number(),
+  refillAt: z3.string().optional()
+}).passthrough().optional().describe(
+  "Credits this call spent from the account wallet, the balance left afterwards, and when that wallet is next topped up (ISO 8601; absent when no further refill is scheduled). Renders cost per panel; reads, saves, uploads and deletes are free, as is bundling panels that were already rendered."
+);
 var renderStripOutputSchema = z3.object({
   ok: z3.boolean(),
   count: z3.number(),
@@ -2049,6 +2178,7 @@ var renderStripOutputSchema = z3.object({
     tool: z3.literal("save_project"),
     reason: z3.string()
   }).optional(),
+  credits: creditsField,
   note: noteField,
   panels: z3.array(panelOutput)
 }).passthrough();
@@ -2058,6 +2188,7 @@ var emitBundleOutputSchema = z3.object({
   bundleId: z3.string(),
   panelCount: z3.number(),
   output: z3.enum(["inline", "urls"]),
+  credits: creditsField,
   note: noteField
 }).passthrough();
 var saveProjectOutputSchema = z3.object({
@@ -2290,7 +2421,7 @@ var clip = z4.enum(["strip", "panel"]).optional().describe(
   "How the strip handles a device that overflows its panel. 'strip' (default) = one continuous canvas \u2014 a phone can straddle the seam into the next panel (swipe-through scenes; also what hOffset \xB11 opts into). 'panel' = clip each phone to its OWN panel so it can't bleed a foreign edge into the neighbouring App Store screenshot (independent images). A render option, not part of the saved look."
 );
 var preview = z4.boolean().optional().describe(
-  "Render at ~25% resolution for a fast, cheap styling preview \u2014 small enough to always come back inline. Not for final delivery: re-render without `preview` (or use emit_bundle directly) once the look is right."
+  "Render at ~25% resolution for a fast styling preview at a quarter the render cost \u2014 small enough to always come back inline. Not for final delivery: re-render without `preview` (or use emit_bundle directly) once the look is right."
 );
 var panelPresetId = z4.enum(RENDERABLE_PANEL_PRESET_IDS).optional().describe("App Store screenshot size. Default r69 (6.9\u2033 iPhone, 1290\xD72796). iPhone sizes only \u2014 iPad is not rendered yet.");
 var useSavedLook = z4.boolean().optional().describe("If true, style the strip with the project's saved look (ignored when `look`/`style` is given).");
@@ -2987,6 +3118,9 @@ function buildMultiOutputFastlaneBundleZip(targets, opts) {
 }
 
 // ../mockup-engine/appstore/panel.ts
+function panelGradientOf(bg) {
+  return normalizeGradient(bg.stops, bg.angle) ?? gradientFromLegacy(bg.from, bg.to, bg.dir);
+}
 function normalizePanelBackgrounds(raw) {
   if (!raw || typeof raw !== "object" || Array.isArray(raw)) return {};
   const out = {};
@@ -2996,7 +3130,8 @@ function normalizePanelBackgrounds(raw) {
     if (e.kind === "solid" && typeof e.color === "string") {
       out[panelId] = { kind: "solid", color: e.color };
     } else if (e.kind === "gradient" && typeof e.from === "string" && typeof e.to === "string" && (e.dir === "horizontal" || e.dir === "vertical")) {
-      out[panelId] = { kind: "gradient", from: e.from, to: e.to, dir: e.dir };
+      const canonical = normalizeGradient(e.stops, e.angle);
+      out[panelId] = canonical ? { kind: "gradient", stops: canonical.stops, angle: canonical.angle, from: e.from, to: e.to, dir: e.dir } : { kind: "gradient", from: e.from, to: e.to, dir: e.dir };
     }
   }
   return out;
@@ -3087,18 +3222,22 @@ function shotsInPanelOrder(shots, panels) {
 }
 
 // ../mockup-engine/appstore/serialize.ts
-function extractStripStyle(state, captionText) {
+function extractStripStyle(state, captionText, baseLocale = DEFAULT_LOCALE) {
+  const gradient = stripGradientOf(state);
   return {
     panelPresetId: state.panelPresetId,
     bgMode: state.bgMode,
-    gradientFrom: state.gradientFrom,
-    gradientTo: state.gradientTo,
-    gradientDir: state.gradientDir,
+    gradientStops: gradient.stops,
+    gradientAngle: gradient.angle,
+    ...mirrorsOf(gradient),
     panelColors: state.panelColors,
     shadow: state.shadow,
     floorReflection: state.floorReflection ?? false,
     panelBackgrounds: state.panelBackgrounds ?? {},
-    captionStyles: { ...normalizeCaptionLayerStyles(state.captionStyles), ...captionStylesFromLayers(captionText) }
+    captionStyles: {
+      ...normalizeCaptionLayerStyles(state.captionStyles),
+      ...captionStylesFromLayers(captionText, baseLocale)
+    }
   };
 }
 
@@ -3146,7 +3285,10 @@ function serializeProject(state) {
     // extractStripStyle (invariant 2/3). Normalized so a malformed/base-family key can't ride through.
     // {} drops to an empty object (a pre-#88 project stays effectively unchanged).
     outputCaptions: normalizeOutputCaptionText(state.outputCaptions),
-    ...extractStripStyle(state, captionText)
+    // #94 follow-through — thread the project's real base locale into the caption-style projection
+    // so `captionStylesFromLayers` picks THIS project's base first (deterministic), not en-US-first
+    // falling through to Object.keys() insertion order for any project not based on en-US.
+    ...extractStripStyle(state, captionText, baseLocale)
   };
 }
 
@@ -3184,15 +3326,21 @@ function panelColorsByOrdinal(look2) {
 function captionStylesByOrdinal(look2) {
   return byPanelOrdinal(look2, look2.captionStyles);
 }
+function comparablePanelBackground(bg) {
+  return bg.kind === "solid" ? bg : { kind: "gradient", gradient: panelGradientOf(bg) };
+}
 function panelBackgroundsByOrdinal(look2) {
-  return byPanelOrdinal(look2, look2.panelBackgrounds);
+  const byId = byPanelOrdinal(look2, look2.panelBackgrounds);
+  const out = {};
+  for (const [ordinal, bg] of Object.entries(byId)) {
+    out[Number(ordinal)] = comparablePanelBackground(bg);
+  }
+  return out;
 }
 function looksMatch(a, b) {
   if (a.bgMode !== b.bgMode) return false;
   if (a.panelPresetId !== b.panelPresetId) return false;
-  if (a.gradientFrom !== b.gradientFrom) return false;
-  if (a.gradientTo !== b.gradientTo) return false;
-  if (a.gradientDir !== b.gradientDir) return false;
+  if (!gradientsMatch(stripGradientOf(a), stripGradientOf(b))) return false;
   if (a.shadow !== b.shadow) return false;
   if (!!a.floorReflection !== !!b.floorReflection) return false;
   if (a.shots.length !== b.shots.length) return false;
@@ -3203,9 +3351,67 @@ function looksMatch(a, b) {
   return deepEqual(panelColorsByOrdinal(a), panelColorsByOrdinal(b));
 }
 
+// src/renderCredits.ts
+import { randomUUID } from "node:crypto";
+function openChargeScope(deps) {
+  const charged = [];
+  let block;
+  let refunded = false;
+  return {
+    charge: async (plan) => {
+      if (deps.anonymous) {
+        if (plan.panels <= 0) return null;
+        return deps.anonymous.admit(plan);
+      }
+      if (!deps.chargeRender || plan.panels <= 0) return null;
+      const renderId = randomUUID();
+      const outcome = await deps.chargeRender(deps.userId, { renderId, ...plan });
+      if (!outcome.ok) return { error: outcome.message };
+      const { debited, remaining, refillAt } = outcome.receipt;
+      if (debited > 0) charged.push({ renderId, debited });
+      block = {
+        debited: (block?.debited ?? 0) + debited,
+        remaining,
+        ...refillAt !== null ? { refillAt: new Date(refillAt).toISOString() } : {}
+      };
+      return null;
+    },
+    credits: () => block,
+    refund: async (reason) => {
+      if (deps.anonymous) return;
+      if (refunded || !deps.refundRender) return;
+      refunded = true;
+      for (const entry of charged) {
+        await deps.refundRender(deps.userId, entry.renderId, entry.debited, reason).catch(() => {
+        });
+      }
+    }
+  };
+}
+async function runCharged(scope, run) {
+  let result;
+  try {
+    result = await run();
+  } catch (err) {
+    await scope.refund(`render failed: ${err instanceof Error ? err.message : String(err)}`);
+    throw err;
+  }
+  if (result.isError === true) await scope.refund(errorReason(result));
+  return result;
+}
+function errorReason(result) {
+  const first = result.content?.[0];
+  const text = first && first.type === "text" ? first.text : "";
+  return `render did not complete: ${(text || "unknown error").slice(0, 160)}`;
+}
+
 // src/toolsRender.ts
-async function handleRenderStrip(deps2, args) {
-  const { look: look2, style: style2, note: resolveNote } = await resolveLook(deps2, args);
+function handleRenderStrip(deps, args) {
+  const scope = openChargeScope(deps);
+  return runCharged(scope, () => renderStrip(deps, args, scope));
+}
+async function renderStrip(deps, args, scope) {
+  const { look: look2, style: style2, note: resolveNote } = await resolveLook(deps, args);
   const note = [resolveNote, composeConflictNote(look2, style2)].filter(Boolean).join(" ") || void 0;
   const locale2 = args.locale?.trim() || "en-US";
   const screenshotSlots = normalizeScreenshotSlots(args.screenshots);
@@ -3216,13 +3422,18 @@ async function handleRenderStrip(deps2, args) {
   } catch (err) {
     return errorResult(err.message);
   }
+  const refused = await scope.charge({
+    panels: entries.length,
+    resolution: args.preview ? "preview" : "full"
+  });
+  if (refused) return errorResult(refused.error);
   let screenshots2;
   try {
-    screenshots2 = await resolveScreenshots(entries, deps2.userId, deps2.allowLocalScreenshots ?? false);
+    screenshots2 = await resolveScreenshots(entries, deps.userId, deps.allowLocalScreenshots ?? false);
   } catch (err) {
     return errorResult(err.message);
   }
-  const result = await deps2.renderer.render({
+  const result = await deps.renderer.render({
     screenshots: screenshots2,
     panelPresetId: args.panelPresetId,
     look: look2,
@@ -3238,11 +3449,11 @@ async function handleRenderStrip(deps2, args) {
     return errorResult(`render failed: ${result.error ?? "unknown error"}`);
   }
   const totalBytes = result.panels.reduce((sum, p) => sum + estimateDecodedBytes(p), 0);
-  const { mode: outputMode, note: outputNote } = resolveOutputMode(args.output, totalBytes, deps2.forceOutput);
+  const { mode: outputMode, note: outputNote } = resolveOutputMode(args.output, totalBytes, deps.forceOutput);
   const noteWithOutput = [note, outputNote].filter(Boolean).join(" ") || void 0;
   let panels;
   try {
-    panels = outputMode === "urls" ? await uploadPanels(deps2.userId, result.panels) : result.panels;
+    panels = outputMode === "urls" ? await uploadPanels(deps.userId, result.panels) : result.panels;
   } catch (err) {
     return errorResult(panelUploadFailure(err, []));
   }
@@ -3258,6 +3469,9 @@ async function handleRenderStrip(deps2, args) {
     // Only when the payload actually carried per-locale entries — a legacy payload's
     // response stays byte-identical (D6).
     ...screenshotLocales.length > 0 ? { screenshotLocales } : {},
+    // #437 — what this render actually cost, what is left, and when the wallet refills. Absent on
+    // the local tier, which charges nothing.
+    ...scope.credits() ? { credits: scope.credits() } : {},
     ...noteWithOutput ? { note: noteWithOutput } : {},
     // #213 — tell the model, in the output, to turn this render into a real project. The prose
     // contract already requires it; this is the copy a client cannot drop (toolContract.ts).
@@ -3317,11 +3531,11 @@ function outputDevicesFromProjectFile(projectFile) {
   if (!Array.isArray(outputs)) return { devices: [], dropped: [] };
   return resolveOutputDevices(outputs.filter((id) => typeof id === "string"));
 }
-async function loadProjectRecord(deps2, projectId) {
-  const resolution = await deps2.resolveProject(deps2.userId, projectId);
+async function loadProjectRecord(deps, projectId) {
+  const resolution = await deps.resolveProject(deps.userId, projectId);
   const project2 = resolvedProject(resolution);
   if (!project2) return { error: describeMiss(resolution, projectId) };
-  const rec = await deps2.readProjectRecord(project2.id);
+  const rec = await deps.readProjectRecord(project2.id);
   if (!rec) {
     return {
       error: `Project "${project2.name}" has no saved record yet \u2014 open it in ShotOps and save a strip first.`
@@ -3342,12 +3556,12 @@ function projectRenderVariant(projectFile, locale2, panelPresetId2) {
   const baseLocale = projectBaseLocale(projectFile);
   return canonicalVariant({ family, locale: locale2?.trim() || baseLocale }, baseLocale);
 }
-async function resolveProjectScreens(deps2, loaded, supplied) {
+async function resolveProjectScreens(deps, loaded, supplied) {
   const baseLocale = projectBaseLocale(loaded.projectFile);
   const nested = supplied.map((e) => [e]);
   let resolvedBytes;
   try {
-    resolvedBytes = await resolveScreenshots(nested, deps2.userId, deps2.allowLocalScreenshots ?? false);
+    resolvedBytes = await resolveScreenshots(nested, deps.userId, deps.allowLocalScreenshots ?? false);
   } catch (err) {
     return { error: err.message };
   }
@@ -3377,11 +3591,11 @@ async function resolveProjectScreens(deps2, loaded, supplied) {
     baseLocale
   );
   const storedManifest = parsed ? allManifestEntries(parsed) : [];
-  let canReadStored = Boolean(deps2.fetchHandoffBytes || deps2.readProjectScreens);
+  let canReadStored = Boolean(deps.fetchHandoffBytes || deps.readProjectScreens);
   const storedSources = [];
-  if (deps2.readProjectScreens) {
+  if (deps.readProjectScreens) {
     try {
-      const listed = await deps2.readProjectScreens(loaded.project.id);
+      const listed = await deps.readProjectScreens(loaded.project.id);
       for (const screen of listed.screens) {
         const variant = canonicalVariant(screen.variant, baseLocale);
         let pending;
@@ -3396,9 +3610,9 @@ async function resolveProjectScreens(deps2, loaded, supplied) {
         });
       }
     } catch {
-      canReadStored = Boolean(deps2.fetchHandoffBytes);
+      canReadStored = Boolean(deps.fetchHandoffBytes);
     }
-  } else if (deps2.fetchHandoffBytes) {
+  } else if (deps.fetchHandoffBytes) {
     for (const entry of storedManifest) {
       let pending;
       storedSources.push({
@@ -3406,7 +3620,7 @@ async function resolveProjectScreens(deps2, loaded, supplied) {
         variant: entry.variant,
         source: "project",
         read: () => {
-          pending ??= deps2.fetchHandoffBytes(entry.ref).then((bytes) => Buffer.from(bytes).toString("base64"));
+          pending ??= deps.fetchHandoffBytes(entry.ref).then((bytes) => Buffer.from(bytes).toString("base64"));
           return pending;
         }
       });
@@ -3499,7 +3713,7 @@ function projectScreenUsageNote(shots) {
     projectScreenResolutionNote(shots)
   ].filter(Boolean).join(" ") || void 0;
 }
-async function renderProjectWithScreens(deps2, projectFile, screens, options = {}) {
+async function renderProjectWithScreens(deps, projectFile, screens, options = {}) {
   const variant = projectRenderVariant(projectFile, options.locale, options.panelPresetId);
   const resolved = await screens.resolve(variant);
   if (screens.expected.length > 0 && resolved.screenManifest.length === 0) {
@@ -3508,7 +3722,7 @@ async function renderProjectWithScreens(deps2, projectFile, screens, options = {
       error: noProjectScreensMessage(screens, options.suppliedCount ?? 0, options.toolName ?? "render_project")
     };
   }
-  return deps2.renderer.renderProject({
+  return deps.renderer.renderProject({
     projectFile,
     screenManifest: resolved.screenManifest,
     variant,
@@ -3517,12 +3731,16 @@ async function renderProjectWithScreens(deps2, projectFile, screens, options = {
     ...options.panelPresetId ? { panelPresetId: options.panelPresetId } : {}
   });
 }
-async function handleRenderProject(deps2, args) {
-  const loaded = await loadProjectRecord(deps2, args.project);
+function handleRenderProject(deps, args) {
+  const scope = openChargeScope(deps);
+  return runCharged(scope, () => renderProject(deps, args, scope));
+}
+async function renderProject(deps, args, scope) {
+  const loaded = await loadProjectRecord(deps, args.project);
   if ("error" in loaded) return errorResult(loaded.error);
   const { project: project2, projectFile } = loaded;
   const supplied = args.screenshots ?? [];
-  const screens = await resolveProjectScreens(deps2, loaded, supplied);
+  const screens = await resolveProjectScreens(deps, loaded, supplied);
   if ("error" in screens) return errorResult(screens.error);
   const { unnamed } = screens;
   const requested = resolveOutputDevices(args.outputs);
@@ -3535,7 +3753,7 @@ async function handleRenderProject(deps2, args) {
   const locale2 = args.locale?.trim() || void 0;
   const renderOne = async (device) => {
     const panelPresetId2 = device && mayOverridePreset ? device.panelPresetId : void 0;
-    return renderProjectWithScreens(deps2, projectFile, screens, {
+    return renderProjectWithScreens(deps, projectFile, screens, {
       locale: locale2,
       preview: args.preview,
       panelPresetId: panelPresetId2,
@@ -3543,6 +3761,11 @@ async function handleRenderProject(deps2, args) {
       toolName: "render_project"
     });
   };
+  const refused = await scope.charge({
+    panels: screens.expected.length * Math.max(1, ordered.length),
+    resolution: args.preview ? "preview" : "full"
+  });
+  if (refused) return errorResult(refused.error);
   const result = await renderOne(active);
   if (!result.ok || !result.panels) {
     return errorResult(`render failed: ${result.error ?? "unknown error"}`);
@@ -3572,12 +3795,12 @@ async function handleRenderProject(deps2, args) {
     new Set(allShots.filter((shot) => shot.matched && shot.source === "project").map((shot) => shot.frameName))
   );
   const totalBytes = [result.panels, ...extraResults.map((e) => e.panels)].flat().reduce((sum, p) => sum + estimateDecodedBytes(p), 0);
-  const { mode: outputMode, note: outputNote } = resolveOutputMode(args.output, totalBytes, deps2.forceOutput);
+  const { mode: outputMode, note: outputNote } = resolveOutputMode(args.output, totalBytes, deps.forceOutput);
   const multi = extraResults.length > 0;
   const storedPanelRefs = [];
   let panels;
   try {
-    panels = outputMode === "urls" ? await uploadPanels(deps2.userId, result.panels, multi && active ? `${active.id}-` : "") : result.panels;
+    panels = outputMode === "urls" ? await uploadPanels(deps.userId, result.panels, multi && active ? `${active.id}-` : "") : result.panels;
   } catch (err) {
     return errorResult(panelUploadFailure(err, storedPanelRefs));
   }
@@ -3598,7 +3821,7 @@ async function handleRenderProject(deps2, args) {
     for (const extra of extraResults) {
       let extraPanels;
       try {
-        extraPanels = outputMode === "urls" ? await uploadPanels(deps2.userId, extra.panels, `${extra.device.id}-`) : extra.panels;
+        extraPanels = outputMode === "urls" ? await uploadPanels(deps.userId, extra.panels, `${extra.device.id}-`) : extra.panels;
       } catch (err) {
         return errorResult(panelUploadFailure(err, storedPanelRefs));
       }
@@ -3642,7 +3865,7 @@ async function handleRenderProject(deps2, args) {
       `${unnamed} supplied screenshot(s) had no filename (name) and could not be matched \u2014 pass each screenshot's original filename via \`name\`.`
     );
   }
-  const openUrl = `${deps2.studioOrigin}/?project=${project2.id}`;
+  const openUrl = `${deps.studioOrigin}/?project=${project2.id}`;
   const deepLink = URL.canParse(openUrl) ? { openUrl } : {};
   return textResult({
     ok: true,
@@ -3657,6 +3880,8 @@ async function handleRenderProject(deps2, args) {
     ...deepLink,
     heldVersion: project2.heldVersion,
     // echoed for transparency; the render uses the record's saved look
+    // #437 — the exact debit for this render, the balance after it, and the next refill.
+    ...scope.credits() ? { credits: scope.credits() } : {},
     shots,
     // [{ frameName, matched }] — which of the project's shots got developer bytes
     ...handoffUsed.length > 0 ? { handoffUsed } : {},
@@ -3705,7 +3930,11 @@ function projectStylingIgnoredNote(args) {
   if (ignored.length === 0) return void 0;
   return `${ignored.join(" + ")} ${ignored.length > 1 ? "were" : "was"} ignored \u2014 this bundle rendered a saved PROJECT, which carries its own styling and caption words. To change how it looks, restyle it with save_project (or in ShotOps) and bundle again; to style a one-off strip instead, pass \`screenshots\` rather than relying on the project.`;
 }
-async function handleEmitBundle(deps2, args) {
+function handleEmitBundle(deps, args) {
+  const scope = openChargeScope(deps);
+  return runCharged(scope, () => emitBundle(deps, args, scope));
+}
+async function emitBundle(deps, args, scope) {
   if (!isValidBundleId(args.bundleId)) {
     return errorResult(`invalid bundleId "${args.bundleId}" \u2014 expected reverse-DNS, e.g. com.acme.app`);
   }
@@ -3717,7 +3946,7 @@ async function handleEmitBundle(deps2, args) {
   const requestedOutputs = resolveOutputDevices(args.outputs).devices;
   let loaded = null;
   if (args.project && !hasPanels) {
-    const found = await loadProjectRecord(deps2, args.project).catch((err) => ({
+    const found = await loadProjectRecord(deps, args.project).catch((err) => ({
       error: `could not read project "${args.project}": ${err.message}`
     }));
     if ("error" in found) {
@@ -3753,22 +3982,32 @@ async function handleEmitBundle(deps2, args) {
         );
       }
       if (args.createProject) return errorResult(PROJECT_SOURCE_CREATE_PROJECT_ERROR);
-      const screens = await resolveProjectScreens(deps2, loaded, []);
+      const screens = await resolveProjectScreens(deps, loaded, []);
       if ("error" in screens) return errorResult(screens.error);
       const projectFile = loaded.projectFile;
-      return emitMultiOutputBundle(deps2, args, outputDevices, locales, projectName2, {
+      const refused2 = await scope.charge({
+        panels: screens.expected.length * outputDevices.length * locales.length,
+        resolution: "full"
+      });
+      if (refused2) return errorResult(refused2.error);
+      return emitMultiOutputBundle(deps, args, outputDevices, locales, projectName2, scope, {
         // The handoff/missing report is the SAME one the single-output path gives (#40 F7) —
         // a shot with no screenshot is a shot with no screenshot at either device count.
         note: joinNotes(savedNote, projectStylingIgnoredNote(args)),
-        renderOne: async (device, locale3) => renderProjectWithScreens(deps2, projectFile, screens, {
+        renderOne: async (device, locale3) => renderProjectWithScreens(deps, projectFile, screens, {
           locale: locale3,
           panelPresetId: device.panelPresetId,
           toolName: "emit_bundle"
         })
       });
     }
-    const resolved = await resolveLook(deps2, args);
-    return emitMultiOutputBundle(deps2, args, outputDevices, locales, projectName2, {
+    const resolved = await resolveLook(deps, args);
+    const refused = await scope.charge({
+      panels: screenshotSlots.length * outputDevices.length * locales.length,
+      resolution: "full"
+    });
+    if (refused) return errorResult(refused.error);
+    return emitMultiOutputBundle(deps, args, outputDevices, locales, projectName2, scope, {
       // #224 — composeConflictNote had been on the single-output path only, so the SAME payload
       // (a look plus a redundant style.shotLook) was explained at one device count and silent at
       // two. It is the resolution that decides the conflict, not the device loop.
@@ -3782,11 +4021,11 @@ async function handleEmitBundle(deps2, args) {
         }
         let screenshots2;
         try {
-          screenshots2 = await resolveScreenshots(entries, deps2.userId, deps2.allowLocalScreenshots ?? false);
+          screenshots2 = await resolveScreenshots(entries, deps.userId, deps.allowLocalScreenshots ?? false);
         } catch (err) {
           return { ok: false, error: err.message };
         }
-        return deps2.renderer.render({
+        return deps.renderer.render({
           screenshots: screenshots2,
           panelPresetId: device.panelPresetId,
           look: resolved.look,
@@ -3801,7 +4040,7 @@ async function handleEmitBundle(deps2, args) {
       // buildRecord — the multi-device loop never builds a record per pass) carrying the full
       // device set. The `panels` and multi-LOCALE rejections stand: their reasons still hold.
       persist: args.createProject ? async () => {
-        const record = await deps2.renderer.buildRecord({
+        const record = await deps.renderer.buildRecord({
           slotSizes: screenshotSlots.map((slot2) => slot2.length),
           panelPresetId: outputDevices[0].panelPresetId,
           look: resolved.look,
@@ -3813,7 +4052,7 @@ async function handleEmitBundle(deps2, args) {
           outputs: outputDevices.map((d) => d.id)
         });
         if (record == null) return { error: "no project record was produced \u2014 not saved." };
-        return persistProject(deps2, args, record);
+        return persistProject(deps, args, record);
       } : void 0
     });
   }
@@ -3824,19 +4063,29 @@ async function handleEmitBundle(deps2, args) {
       );
     }
     if (loaded && !hasScreenshots && !hasPanels) {
-      const screens = await resolveProjectScreens(deps2, loaded, []);
+      const screens = await resolveProjectScreens(deps, loaded, []);
       if ("error" in screens) return errorResult(screens.error);
       const projectFile = loaded.projectFile;
-      return emitMultiLocaleBundle(deps2, args, requestedLocales, projectName2, {
+      const refused2 = await scope.charge({
+        panels: screens.expected.length * requestedLocales.length,
+        resolution: "full"
+      });
+      if (refused2) return errorResult(refused2.error);
+      return emitMultiLocaleBundle(deps, args, requestedLocales, projectName2, scope, {
         note: joinNotes(unexpandedSavedNote(projectSizeCovered), projectStylingIgnoredNote(args)),
-        renderOne: (locale3) => renderProjectWithScreens(deps2, projectFile, screens, {
+        renderOne: (locale3) => renderProjectWithScreens(deps, projectFile, screens, {
           locale: locale3,
           panelPresetId: args.panelPresetId,
           toolName: "emit_bundle"
         })
       });
     }
-    return emitMultiLocaleBundle(deps2, args, requestedLocales, projectName2, {
+    const refused = await scope.charge({
+      panels: hasPanels ? 0 : (screenshotSlots?.length ?? 0) * requestedLocales.length,
+      resolution: "full"
+    });
+    if (refused) return errorResult(refused.error);
+    return emitMultiLocaleBundle(deps, args, requestedLocales, projectName2, scope, {
       note: unexpandedSavedNote(NOT_COVERED_BY_THIS_CALL)
     });
   }
@@ -3861,7 +4110,7 @@ async function handleEmitBundle(deps2, args) {
     }
     let bytesList;
     try {
-      bytesList = await Promise.all(panelEntries.map((p) => resolvePanelBytes(p, deps2.userId, deps2.allowLocalScreenshots ?? false)));
+      bytesList = await Promise.all(panelEntries.map((p) => resolvePanelBytes(p, deps.userId, deps.allowLocalScreenshots ?? false)));
     } catch (err) {
       return errorResult(`failed to read panel: ${err.message}`);
     }
@@ -3869,9 +4118,11 @@ async function handleEmitBundle(deps2, args) {
     previewPng = bytesList[0] ? Buffer.from(bytesList[0]) : null;
   } else if (!hasScreenshots && loaded) {
     if (args.createProject) return errorResult(PROJECT_SOURCE_CREATE_PROJECT_ERROR);
-    const screens = await resolveProjectScreens(deps2, loaded, []);
+    const screens = await resolveProjectScreens(deps, loaded, []);
     if ("error" in screens) return errorResult(screens.error);
-    const result = await renderProjectWithScreens(deps2, loaded.projectFile, screens, {
+    const refused = await scope.charge({ panels: screens.expected.length, resolution: "full" });
+    if (refused) return errorResult(refused.error);
+    const result = await renderProjectWithScreens(deps, loaded.projectFile, screens, {
       locale: locale2,
       panelPresetId: args.panelPresetId,
       toolName: "emit_bundle"
@@ -3899,17 +4150,19 @@ async function handleEmitBundle(deps2, args) {
     }
     let screenshots2;
     try {
-      screenshots2 = await resolveScreenshots(entries, deps2.userId, deps2.allowLocalScreenshots ?? false);
+      screenshots2 = await resolveScreenshots(entries, deps.userId, deps.allowLocalScreenshots ?? false);
     } catch (err) {
       return errorResult(err.message);
     }
-    const resolved = await resolveLook(deps2, args);
+    const resolved = await resolveLook(deps, args);
     note = joinNotes(
       resolved.note,
       composeConflictNote(resolved.look, resolved.style),
       unexpandedSavedNote(NOT_COVERED_BY_THIS_CALL)
     );
-    const result = await deps2.renderer.render({
+    const refused = await scope.charge({ panels: screenshotSlots.length, resolution: "full" });
+    if (refused) return errorResult(refused.error);
+    const result = await deps.renderer.render({
       screenshots: screenshots2,
       panelPresetId: args.panelPresetId,
       look: resolved.look,
@@ -3934,8 +4187,8 @@ async function handleEmitBundle(deps2, args) {
   }
   const zip = buildFastlaneBundleZip(slots, { bundleId: args.bundleId, locale: locale2, panelLabel });
   const filename2 = bundleZipFilename(projectName2);
-  const { mode: outputMode, note: outputNote } = resolveOutputMode(args.output, zip.byteLength, deps2.forceOutput);
-  const zipOut = outputMode === "urls" ? await storeAsset(uploadDirFor(deps2.userId), filename2, zip, "application/zip").then((a) => ({
+  const { mode: outputMode, note: outputNote } = resolveOutputMode(args.output, zip.byteLength, deps.forceOutput);
+  const zipOut = outputMode === "urls" ? await storeAsset(uploadDirFor(deps.userId), filename2, zip, "application/zip").then((a) => ({
     zipUrl: a.url,
     zipRef: a.ref
   })) : { zipBase64: Buffer.from(zip).toString("base64") };
@@ -3943,15 +4196,15 @@ async function handleEmitBundle(deps2, args) {
   if (args.share) {
     if (!previewPng) return errorResult(shareFailure("no preview image available", zipOut));
     try {
-      shareLink = await deps2.createShareLink({
-        userId: deps2.userId,
+      shareLink = await deps.createShareLink({
+        userId: deps.userId,
         zip,
         previewPng,
         projectName: projectName2,
         panelCount: slots.length,
         bundleId: args.bundleId,
         locale: locale2,
-        origin: deps2.studioOrigin
+        origin: deps.studioOrigin
       });
     } catch (err) {
       return errorResult(shareFailure(err.message, zipOut));
@@ -3963,7 +4216,7 @@ async function handleEmitBundle(deps2, args) {
     if (projectRecord == null) {
       persistNote = "bundle succeeded but no project record was produced \u2014 not saved.";
     } else {
-      const p = await persistProject(deps2, args, projectRecord);
+      const p = await persistProject(deps, args, projectRecord);
       if ("error" in p) persistNote = `not saved: ${p.error}`;
       else persisted = p;
     }
@@ -3975,6 +4228,8 @@ async function handleEmitBundle(deps2, args) {
     locale: locale2,
     panelCount: slots.length,
     output: outputMode,
+    // #437 — absent on the compose path (nothing was rendered) and on the local tier.
+    ...scope.credits() ? { credits: scope.credits() } : {},
     ...joinNotes(note, outputNote) ? { note: joinNotes(note, outputNote) } : {},
     ...shareLink ? { shareLink } : {},
     ...persisted ? { projectId: persisted.projectId, openUrl: persisted.openUrl } : {},
@@ -3982,7 +4237,7 @@ async function handleEmitBundle(deps2, args) {
     ...zipOut
   });
 }
-async function emitMultiOutputBundle(deps2, args, outputs, locales, projectName2, plan) {
+async function emitMultiOutputBundle(deps, args, outputs, locales, projectName2, scope, plan) {
   const targets = [];
   let previewPng = null;
   const projectShots = [];
@@ -4015,8 +4270,8 @@ async function emitMultiOutputBundle(deps2, args, outputs, locales, projectName2
   const zip = buildMultiOutputFastlaneBundleZip(targets, { bundleId: args.bundleId });
   const filename2 = bundleZipFilename(projectName2);
   const panelCount = targets[0]?.localeSlots[0]?.slots.length ?? 0;
-  const { mode: outputMode, note: outputNote } = resolveOutputMode(args.output, zip.byteLength, deps2.forceOutput);
-  const zipOut = outputMode === "urls" ? await storeAsset(uploadDirFor(deps2.userId), filename2, zip, "application/zip").then((asset) => ({
+  const { mode: outputMode, note: outputNote } = resolveOutputMode(args.output, zip.byteLength, deps.forceOutput);
+  const zipOut = outputMode === "urls" ? await storeAsset(uploadDirFor(deps.userId), filename2, zip, "application/zip").then((asset) => ({
     zipUrl: asset.url,
     zipRef: asset.ref
   })) : { zipBase64: Buffer.from(zip).toString("base64") };
@@ -4024,8 +4279,8 @@ async function emitMultiOutputBundle(deps2, args, outputs, locales, projectName2
   if (args.share) {
     if (!previewPng) return errorResult(shareFailure("no preview image available", zipOut));
     try {
-      shareLink = await deps2.createShareLink({
-        userId: deps2.userId,
+      shareLink = await deps.createShareLink({
+        userId: deps.userId,
         zip,
         previewPng,
         projectName: projectName2,
@@ -4034,7 +4289,7 @@ async function emitMultiOutputBundle(deps2, args, outputs, locales, projectName2
         panelCount: panelCount * outputs.length * locales.length,
         bundleId: args.bundleId,
         locale: locales.join(", "),
-        origin: deps2.studioOrigin
+        origin: deps.studioOrigin
       });
     } catch (err) {
       return errorResult(shareFailure(err.message, zipOut));
@@ -4061,6 +4316,7 @@ async function emitMultiOutputBundle(deps2, args, outputs, locales, projectName2
     panelCount,
     totalPanelCount: panelCount * outputs.length * locales.length,
     output: outputMode,
+    ...scope.credits() ? { credits: scope.credits() } : {},
     ...note ? { note } : {},
     ...shareLink ? { shareLink } : {},
     ...persisted ? { projectId: persisted.projectId, openUrl: persisted.openUrl } : {},
@@ -4068,7 +4324,7 @@ async function emitMultiOutputBundle(deps2, args, outputs, locales, projectName2
     ...zipOut
   });
 }
-async function emitMultiLocaleBundle(deps2, args, locales, projectName2, plan = {}) {
+async function emitMultiLocaleBundle(deps, args, locales, projectName2, scope, plan = {}) {
   const screenshotSlots = args.screenshots ? normalizeScreenshotSlots(args.screenshots) : void 0;
   let localeSlots;
   let panelLabel;
@@ -4099,7 +4355,7 @@ async function emitMultiLocaleBundle(deps2, args, locales, projectName2, plan =
       const key = "path" in p ? `path:${p.path}` : `ref:${p.ref}`;
       let pending = bytesCache.get(key);
       if (!pending) {
-        pending = resolvePanelBytes(p, deps2.userId, deps2.allowLocalScreenshots ?? false);
+        pending = resolvePanelBytes(p, deps.userId, deps.allowLocalScreenshots ?? false);
         bytesCache.set(key, pending);
       }
       return pending;
@@ -4123,7 +4379,7 @@ async function emitMultiLocaleBundle(deps2, args, locales, projectName2, plan =
     if (!screenshotSlots || screenshotSlots.length === 0) {
       return errorResult("emit_bundle needs either `screenshots` or pre-rendered `panels` refs.");
     }
-    const resolved = await resolveLook(deps2, args);
+    const resolved = await resolveLook(deps, args);
     note = joinNotes(note, resolved.note, composeConflictNote(resolved.look, resolved.style));
     localeSlots = [];
     panelLabel = "";
@@ -4136,11 +4392,11 @@ async function emitMultiLocaleBundle(deps2, args, locales, projectName2, plan =
       }
       let screenshots2;
       try {
-        screenshots2 = await resolveScreenshots(entries, deps2.userId, deps2.allowLocalScreenshots ?? false);
+        screenshots2 = await resolveScreenshots(entries, deps.userId, deps.allowLocalScreenshots ?? false);
       } catch (err) {
         return errorResult(err.message);
       }
-      const result = await deps2.renderer.render({
+      const result = await deps.renderer.render({
         screenshots: screenshots2,
         panelPresetId: args.panelPresetId,
         look: resolved.look,
@@ -4162,8 +4418,8 @@ async function emitMultiLocaleBundle(deps2, args, locales, projectName2, plan =
   const zip = buildMultiLocaleFastlaneBundleZip(localeSlots, { bundleId: args.bundleId, panelLabel });
   note = joinNotes(note, projectScreenUsageNote(projectShots));
   const filename2 = bundleZipFilename(projectName2);
-  const { mode: outputMode, note: outputNote } = resolveOutputMode(args.output, zip.byteLength, deps2.forceOutput);
-  const zipOut = outputMode === "urls" ? await storeAsset(uploadDirFor(deps2.userId), filename2, zip, "application/zip").then((a) => ({
+  const { mode: outputMode, note: outputNote } = resolveOutputMode(args.output, zip.byteLength, deps.forceOutput);
+  const zipOut = outputMode === "urls" ? await storeAsset(uploadDirFor(deps.userId), filename2, zip, "application/zip").then((a) => ({
     zipUrl: a.url,
     zipRef: a.ref
   })) : { zipBase64: Buffer.from(zip).toString("base64") };
@@ -4171,8 +4427,8 @@ async function emitMultiLocaleBundle(deps2, args, locales, projectName2, plan =
   if (args.share) {
     if (!previewPng) return errorResult(shareFailure("no preview image available", zipOut));
     try {
-      shareLink = await deps2.createShareLink({
-        userId: deps2.userId,
+      shareLink = await deps.createShareLink({
+        userId: deps.userId,
         zip,
         previewPng,
         projectName: projectName2,
@@ -4180,7 +4436,7 @@ async function emitMultiLocaleBundle(deps2, args, locales, projectName2, plan =
         bundleId: args.bundleId,
         // The share row's locale is display metadata — name every locale in the bundle.
         locale: locales.join(", "),
-        origin: deps2.studioOrigin
+        origin: deps.studioOrigin
       });
     } catch (err) {
       return errorResult(shareFailure(err.message, zipOut));
@@ -4194,6 +4450,7 @@ async function emitMultiLocaleBundle(deps2, args, locales, projectName2, plan =
     panelCount: localeSlots[0]?.slots.length ?? 0,
     // per locale — total files = panelCount × locales.length
     output: outputMode,
+    ...scope.credits() ? { credits: scope.credits() } : {},
     ...joinNotes(note, outputNote) ? { note: joinNotes(note, outputNote) } : {},
     ...shareLink ? { shareLink } : {},
     ...zipOut
@@ -4249,10 +4506,10 @@ function logImportFailure(entry, reason) {
     fileName: "file" in entry && entry.file.file_name || entry.name || "(none)"
   });
 }
-async function importOne(deps2, entry) {
+async function importOne(deps, entry) {
   const source = sourceKind(entry);
   if ("path" in entry) {
-    if (!deps2.allowLocalScreenshots) return { ok: false, source, error: hostedPathRefusal(entry.path) };
+    if (!deps.allowLocalScreenshots) return { ok: false, source, error: hostedPathRefusal(entry.path) };
     try {
       const { bytes, name } = await readLocalScreenshotFile(entry.path);
       return { ok: true, source, path: entry.path, name: entry.name?.trim() || name, size: bytes.byteLength };
@@ -4260,12 +4517,12 @@ async function importOne(deps2, entry) {
       return { ok: false, source, error: err.message };
     }
   }
-  if (!deps2.importScreenshot) {
+  if (!deps.importScreenshot) {
     return { ok: false, source, error: localSourceRefusal("url" in entry ? "url" : "file") };
   }
   try {
-    const imported = await deps2.importScreenshot(
-      deps2.userId,
+    const imported = await deps.importScreenshot(
+      deps.userId,
       "file" in entry ? { file: entry.file } : { url: entry.url },
       entry.name
     );
@@ -4282,7 +4539,7 @@ function instructionsFor(results) {
   const handle = local ? `Pass each result's { "path": "\u2026" } as that screenshot's entry` : `Pass each result's { "ref": "\u2026" } as that screenshot's entry`;
   return `${handle} in render_strip or emit_bundle, in this same order. For render_project, also pass { "name": "THE_FILENAME" } so it matches the saved frame by filename.` + (failed > 0 ? ` ${failed} of ${results.length} entries did NOT import \u2014 read that entry's \`error\` and re-import only those; the successful refs above are already usable.` : "");
 }
-async function handleImportScreenshot(deps2, args) {
+async function handleImportScreenshot(deps, args) {
   const entries = [
     ...args.file ? [{ file: args.file, ...args.name ? { name: args.name } : {} }] : [],
     ...args.screenshots ?? []
@@ -4292,7 +4549,7 @@ async function handleImportScreenshot(deps2, args) {
       'import_screenshot needs something to import. Pass `screenshots`: an array whose entries each name EXACTLY ONE source \u2014 { "url": "https://\u2026" }, { "file": { "download_url": "\u2026", "file_id": "\u2026" } } (a ChatGPT attachment), or (local stdio only) { "path": "/abs/shot.png" }. In ChatGPT the attachment arrives as the top-level `file` parameter instead.'
     );
   }
-  const results = await Promise.all(entries.map((entry) => importOne(deps2, entry)));
+  const results = await Promise.all(entries.map((entry) => importOne(deps, entry)));
   const imported = results.filter((r) => r.ok);
   if (imported.length === 0) {
     return errorResult(results.map((r) => r.error).filter(Boolean).join("\n\n"));
@@ -4308,10 +4565,10 @@ async function handleImportScreenshot(deps2, args) {
 }
 
 // src/toolsUploads.ts
-async function handleRequestScreenshotUpload(deps2, args) {
+async function handleRequestScreenshotUpload(deps, args) {
   let slots;
   try {
-    slots = await deps2.requestScreenshotUpload(deps2.userId, args.count, args.names);
+    slots = await deps.requestScreenshotUpload(deps.userId, args.count, args.names);
   } catch (err) {
     return errorResult(err.message);
   }
@@ -4326,14 +4583,14 @@ async function handleRequestScreenshotUpload(deps2, args) {
     instructions: 'PUT each screenshot\'s raw PNG bytes to its uploadUrl, e.g.: curl -T screenshot.png "$UPLOAD_URL" \u2014 then pass { "ref": "THE_MATCHING_REF" } as that screenshot\'s entry in render_strip/emit_bundle\'s `screenshots` array. If you passed `names`, that ref already carries its filename \u2014 no need to also set `name` on the screenshot entry. Uploads are not auto-purged yet \u2014 treat refs as short-lived and single-use.' + (locale2 ? ` For render_strip/emit_bundle, place each ref under the matching per-locale key, e.g. { "locales": { "${locale2}": { "ref": "THE_REF" } } }.` : "") + (locale2 || family ? " For render_project, pass each slot's `variant` through with its ref so that exact device-family + locale cell overrides the project instead of its base screenshot." : "")
   });
 }
-async function handleDeleteAssets(deps2, args) {
-  if (!deps2.deleteAssets) {
+async function handleDeleteAssets(deps, args) {
+  if (!deps.deleteAssets) {
     return errorResult(
       "delete_assets is only available on the hosted ShotOps connection. Local mode does not upload or retain screenshot files."
     );
   }
   try {
-    const deletedRefs = await deps2.deleteAssets(deps2.userId, args.refs);
+    const deletedRefs = await deps.deleteAssets(deps.userId, args.refs);
     return textResult({
       ok: true,
       deletedCount: deletedRefs.length,
@@ -4466,8 +4723,8 @@ function deriveLayoutReport(source) {
 }
 
 // src/toolsProject.ts
-async function handleSaveProject(deps2, args) {
-  const { look: look2, style: style2, note: resolveNote } = await resolveLook(deps2, args);
+async function handleSaveProject(deps, args) {
+  const { look: look2, style: style2, note: resolveNote } = await resolveLook(deps, args);
   const note = [resolveNote, composeConflictNote(look2, style2)].filter(Boolean).join(" ") || void 0;
   const locale2 = args.locale?.trim() || "en-US";
   if (!Array.isArray(args.screenshots) || args.screenshots.length === 0) {
@@ -4497,7 +4754,7 @@ async function handleSaveProject(deps2, args) {
   }
   let record;
   try {
-    record = await deps2.renderer.buildRecord({
+    record = await deps.renderer.buildRecord({
       slotSizes,
       panelPresetId: panelPresetId2,
       look: look2,
@@ -4514,7 +4771,7 @@ async function handleSaveProject(deps2, args) {
   if (record == null) {
     return errorResult("no project record was produced \u2014 not saved.");
   }
-  const p = await persistProject(deps2, args, record, "unsigned-new");
+  const p = await persistProject(deps, args, record, "unsigned-new");
   if ("error" in p) return errorResult(p.error);
   if ("status" in p) {
     return textResult({
@@ -4549,7 +4806,7 @@ function reachFromRecord(record) {
   const reach = record?.reach;
   return typeof reach === "string" && reach.length > 0 ? reach : null;
 }
-function storedScreenshotReport(deps2, record, projectFile) {
+function storedScreenshotReport(deps, record, projectFile) {
   const frames = frameNamesFromProjectFile(projectFile);
   const file = projectFile;
   const baseLocale = typeof file.baseLocale === "string" && file.baseLocale ? file.baseLocale : Array.isArray(file.locales) && typeof file.locales[0] === "string" ? file.locales[0] : "en-US";
@@ -4591,7 +4848,7 @@ function storedScreenshotReport(deps2, record, projectFile) {
   }
   const names = frames.filter((name) => cells.some((cell) => cell.name === name && cell.available));
   return {
-    available: cells.some((cell) => cell.available) && Boolean(deps2.fetchHandoffBytes || deps2.readProjectScreens),
+    available: cells.some((cell) => cell.available) && Boolean(deps.fetchHandoffBytes || deps.readProjectScreens),
     count: cells.filter((cell) => cell.available).length,
     total: cells.length,
     names,
@@ -4613,8 +4870,8 @@ function storedScreenshotSentence(report, projectId) {
   }
   return `This project holds no screenshots of its own, so render_project needs them. ${BROWSER_FIRST_ROUTE}`;
 }
-async function handleReadProject(deps2, args) {
-  const resolution = await deps2.resolveProject(deps2.userId, args.project);
+async function handleReadProject(deps, args) {
+  const resolution = await deps.resolveProject(deps.userId, args.project);
   const project2 = resolvedProject(resolution);
   if (!project2) {
     const miss = projectMiss(resolution);
@@ -4624,7 +4881,7 @@ async function handleReadProject(deps2, args) {
       message: describeMiss(resolution, args.project)
     });
   }
-  const rec = await deps2.readProjectRecord(project2.id);
+  const rec = await deps.readProjectRecord(project2.id);
   if (!rec) {
     return textResult({
       saved: false,
@@ -4634,9 +4891,9 @@ async function handleReadProject(deps2, args) {
   }
   const projectFile = projectFileFromRecord(rec.record);
   const layout = deriveLayoutReport(projectFile);
-  const screenshots2 = storedScreenshotReport(deps2, rec.record, projectFile);
-  const historyDecision = await deps2.authorizeCapability({
-    subject: { kind: "account", userId: deps2.userId, mode: "api_token" },
+  const screenshots2 = storedScreenshotReport(deps, rec.record, projectFile);
+  const historyDecision = await deps.authorizeCapability({
+    subject: { kind: "account", userId: deps.userId, mode: "api_token" },
     capability: CAPABILITIES.LOOK_HISTORY_READ,
     resource: { kind: "project", id: project2.id }
   });
@@ -4644,7 +4901,7 @@ async function handleReadProject(deps2, args) {
   let versions = [];
   if (!historyDenial) {
     try {
-      versions = await deps2.listVersions(project2.id);
+      versions = await deps.listVersions(project2.id);
     } catch (error) {
       historyDenial = capabilityDenialFromError(error);
       if (!historyDenial) throw error;
@@ -4664,13 +4921,13 @@ async function handleReadProject(deps2, args) {
 }
 
 // src/toolsLook.ts
-async function handleReadLook(deps2, args) {
-  const resolution = await deps2.resolveProject(deps2.userId, args.project);
+async function handleReadLook(deps, args) {
+  const resolution = await deps.resolveProject(deps.userId, args.project);
   const project2 = resolvedProject(resolution);
   if (!project2) {
     return textResult({ saved: false, message: describeMiss(resolution, args.project) });
   }
-  const saved = await deps2.readLook(project2.id);
+  const saved = await deps.readLook(project2.id);
   if (!saved) {
     return textResult({
       saved: false,
@@ -4679,8 +4936,8 @@ async function handleReadLook(deps2, args) {
     });
   }
   const layout = deriveLayoutReport(saved.look);
-  const historyDecision = await deps2.authorizeCapability({
-    subject: { kind: "account", userId: deps2.userId, mode: "api_token" },
+  const historyDecision = await deps.authorizeCapability({
+    subject: { kind: "account", userId: deps.userId, mode: "api_token" },
     capability: CAPABILITIES.LOOK_HISTORY_READ,
     resource: { kind: "project", id: project2.id }
   });
@@ -4688,7 +4945,7 @@ async function handleReadLook(deps2, args) {
   let versions = [];
   if (!historyDenial) {
     try {
-      versions = await deps2.listVersions(project2.id);
+      versions = await deps.listVersions(project2.id);
     } catch (error) {
       historyDenial = capabilityDenialFromError(error);
       if (!historyDenial) throw error;
@@ -4717,19 +4974,19 @@ async function handleReadLook(deps2, args) {
     ...layout ? { layout } : {}
   });
 }
-async function handleSaveLook(deps2, args) {
-  const resolution = await deps2.resolveProject(deps2.userId, args.project);
+async function handleSaveLook(deps, args) {
+  const resolution = await deps.resolveProject(deps.userId, args.project);
   const project2 = resolvedProject(resolution);
   if (!project2) return errorResult(describeMiss(resolution, args.project));
-  const edit = await deps2.authorizeCapability({
-    subject: { kind: "account", userId: deps2.userId, mode: "api_token" },
+  const edit = await deps.authorizeCapability({
+    subject: { kind: "account", userId: deps.userId, mode: "api_token" },
     capability: CAPABILITIES.PROJECT_EDIT_SYNCED,
     resource: { kind: "project", id: project2.id }
   });
   const editDenial = authorizationMessage(edit);
   if (editDenial) return errorResult(editDenial);
-  const hold = await deps2.authorizeCapability({
-    subject: { kind: "account", userId: deps2.userId, mode: "api_token" },
+  const hold = await deps.authorizeCapability({
+    subject: { kind: "account", userId: deps.userId, mode: "api_token" },
     capability: CAPABILITIES.LOOK_VERSION_HOLD,
     resource: { kind: "project", id: project2.id }
   });
@@ -4740,7 +4997,7 @@ async function handleSaveLook(deps2, args) {
   if (JSON.stringify(args.look).length > 256 * 1024) {
     return errorResult("`look` is too large \u2014 a look is styling only (no screenshots, no image bytes).");
   }
-  const latest = await deps2.readLook(project2.id);
+  const latest = await deps.readLook(project2.id);
   if (latest && looksMatch(args.look, latest.look)) {
     return textResult({
       ok: true,
@@ -4751,7 +5008,7 @@ async function handleSaveLook(deps2, args) {
   }
   let version2;
   try {
-    const saved = await deps2.saveLook(
+    const saved = await deps.saveLook(
       project2.id,
       args.look,
       args.sourceName?.trim() || void 0,
@@ -4769,12 +5026,12 @@ async function handleSaveLook(deps2, args) {
     message: hold.allowed ? `Saved as version ${version2} on "${project2.name}" and advanced Hold to it for default renders.` : `Saved as version ${version2} on "${project2.name}" \u2014 render it with useSavedLook.`
   });
 }
-async function handleHoldLook(deps2, args) {
-  const resolution = await deps2.resolveProject(deps2.userId, args.project);
+async function handleHoldLook(deps, args) {
+  const resolution = await deps.resolveProject(deps.userId, args.project);
   const project2 = resolvedProject(resolution);
   if (!project2) return errorResult(describeMiss(resolution, args.project));
-  const decision = await deps2.authorizeCapability({
-    subject: { kind: "account", userId: deps2.userId, mode: "api_token" },
+  const decision = await deps.authorizeCapability({
+    subject: { kind: "account", userId: deps.userId, mode: "api_token" },
     capability: CAPABILITIES.LOOK_VERSION_HOLD,
     resource: { kind: "project", id: project2.id }
   });
@@ -4782,7 +5039,7 @@ async function handleHoldLook(deps2, args) {
   if (denial) return errorResult(denial);
   let versions;
   try {
-    versions = await deps2.listVersions(project2.id);
+    versions = await deps.listVersions(project2.id);
   } catch (error) {
     const structured = capabilityDenialFromError(error);
     return errorResult(structured ? capabilityDenialMessage(structured) : error.message);
@@ -4792,7 +5049,7 @@ async function handleHoldLook(deps2, args) {
     return errorResult(`Version ${args.version} not found on project "${project2.name}" (saved: ${available}).`);
   }
   try {
-    await deps2.setHeldVersion(project2.id, args.version);
+    await deps.setHeldVersion(project2.id, args.version);
   } catch (err) {
     const structured = capabilityDenialFromError(err);
     return errorResult(structured ? capabilityDenialMessage(structured) : err.message);
@@ -4804,19 +5061,19 @@ async function handleHoldLook(deps2, args) {
     message: `Holding v${args.version} on "${project2.name}" \u2014 agents render it by default until release_look (Follow latest).`
   });
 }
-async function handleReleaseLook(deps2, args) {
-  const resolution = await deps2.resolveProject(deps2.userId, args.project);
+async function handleReleaseLook(deps, args) {
+  const resolution = await deps.resolveProject(deps.userId, args.project);
   const project2 = resolvedProject(resolution);
   if (!project2) return errorResult(describeMiss(resolution, args.project));
-  const decision = await deps2.authorizeCapability({
-    subject: { kind: "account", userId: deps2.userId, mode: "api_token" },
+  const decision = await deps.authorizeCapability({
+    subject: { kind: "account", userId: deps.userId, mode: "api_token" },
     capability: CAPABILITIES.LOOK_VERSION_HOLD,
     resource: { kind: "project", id: project2.id }
   });
   const denial = authorizationMessage(decision);
   if (denial) return errorResult(denial);
   try {
-    await deps2.setHeldVersion(project2.id, null);
+    await deps.setHeldVersion(project2.id, null);
   } catch (err) {
     const structured = capabilityDenialFromError(err);
     return errorResult(structured ? capabilityDenialMessage(structured) : err.message);
@@ -4884,24 +5141,24 @@ function resolveOutputMode(requested, totalBytes, forced) {
   }
   return { mode: totalBytes > AUTO_INLINE_THRESHOLD_BYTES ? "urls" : "inline" };
 }
-async function resolveLook(deps2, args) {
-  const resolved = await resolveLookInner(deps2, args);
+async function resolveLook(deps, args) {
+  const resolved = await resolveLookInner(deps, args);
   const nudge = layoutNudgeNote(args.style, args.look, resolved.look);
   if (!nudge) return resolved;
   return { ...resolved, note: [resolved.note, nudge].filter(Boolean).join(" ") };
 }
-async function resolveLookInner(deps2, args) {
+async function resolveLookInner(deps, args) {
   const style2 = expandStyleLayout(args.style) ?? null;
   if (args.look != null) return { look: args.look, style: style2 };
   if (args.useSavedLook || args.version != null) {
-    const project2 = resolvedProject(await deps2.resolveProject(deps2.userId, args.project));
+    const project2 = resolvedProject(await deps.resolveProject(deps.userId, args.project));
     if (!project2) {
       return { look: null, style: style2, note: "no matching ShotOps project found for this account \u2014 used default styling." };
     }
-    const saved = await deps2.readLook(project2.id);
+    const saved = await deps.readLook(project2.id);
     if (args.version != null) {
-      const decision = await deps2.authorizeCapability({
-        subject: { kind: "account", userId: deps2.userId, mode: "api_token" },
+      const decision = await deps.authorizeCapability({
+        subject: { kind: "account", userId: deps.userId, mode: "api_token" },
         capability: CAPABILITIES.LOOK_HISTORY_READ,
         resource: { kind: "project", id: project2.id }
       });
@@ -4912,7 +5169,7 @@ async function resolveLookInner(deps2, args) {
       if (saved && args.version === saved.version) return { look: saved.look, style: style2 };
       let v;
       try {
-        v = await deps2.readVersion(project2.id, args.version);
+        v = await deps.readVersion(project2.id, args.version);
       } catch (error) {
         const structured = capabilityDenialFromError(error);
         if (!structured) throw error;
@@ -4938,8 +5195,8 @@ async function resolveLookInner(deps2, args) {
       };
     }
     if (project2.heldVersion != null && project2.heldVersion !== saved?.version) {
-      const decision = await deps2.authorizeCapability({
-        subject: { kind: "account", userId: deps2.userId, mode: "api_token" },
+      const decision = await deps.authorizeCapability({
+        subject: { kind: "account", userId: deps.userId, mode: "api_token" },
         capability: CAPABILITIES.LOOK_VERSION_HOLD,
         resource: { kind: "project", id: project2.id }
       });
@@ -4957,7 +5214,7 @@ async function resolveLookInner(deps2, args) {
       }
       let held;
       try {
-        held = await deps2.readVersion(project2.id, project2.heldVersion);
+        held = await deps.readVersion(project2.id, project2.heldVersion);
       } catch (error) {
         const structured = capabilityDenialFromError(error);
         if (!structured) throw error;
@@ -5093,10 +5350,10 @@ function allLiveScreenRefs(record) {
   const parsed = parseScreenManifest(record?.handoffRefs);
   return parsed ? allManifestEntries(parsed) : [];
 }
-async function persistProject(deps2, args, record, claimPolicy = "none") {
+async function persistProject(deps, args, record, claimPolicy = "none") {
   const names = screenNamesFromRecord(record);
   const source = names.length === 0 ? void 0 : args.sourceDir ? { kind: "local-path", ref: { dir: args.sourceDir, names } } : { kind: "agent", ref: { names } };
-  const introducedRefs = handoffRefsFromScreenshots(args.screenshots, names, deps2.userId);
+  const introducedRefs = handoffRefsFromScreenshots(args.screenshots, names, deps.userId);
   const wrapWith = (handoffRefs, existingRecord) => {
     const manifest = mergeManifest(
       preservedNonBaseCells(existingRecord, names),
@@ -5128,6 +5385,7 @@ async function persistProject(deps2, args, record, claimPolicy = "none") {
     };
   };
   const ctx = {
+    actorUserId: deps.userId,
     screenshots: args.screenshots,
     look: args.look,
     // #217 — expanded here too, not just in resolveLook. Nothing reads ctx.style TODAY (the
@@ -5142,47 +5400,47 @@ async function persistProject(deps2, args, record, claimPolicy = "none") {
     sourceDir: args.sourceDir
   };
   try {
-    if (claimPolicy === "unsigned-new" && deps2.createPendingProjectClaim) {
+    if (claimPolicy === "unsigned-new" && deps.createPendingProjectClaim) {
       if (args.project) {
         return {
           error: "Updating an existing ShotOps project requires the account token that owns or can access it. Remove `project` to create a new pending claim, or configure SHOTOPS_TOKEN to update this project."
         };
       }
       const name = args.projectName?.trim() || "ShotOps render";
-      return await deps2.createPendingProjectClaim(name, wrapWith(introducedRefs), ctx);
+      return await deps.createPendingProjectClaim(name, wrapWith(introducedRefs), ctx);
     }
     let projectId;
     if (args.project) {
-      const resolution = await deps2.resolveProject(deps2.userId, args.project);
+      const resolution = await deps.resolveProject(deps.userId, args.project);
       const project2 = resolvedProject(resolution);
       if (!project2) return { error: describeMiss(resolution, args.project) };
-      const decision = await deps2.authorizeCapability({
-        subject: { kind: "account", userId: deps2.userId, mode: "api_token" },
+      const decision = await deps.authorizeCapability({
+        subject: { kind: "account", userId: deps.userId, mode: "api_token" },
         capability: CAPABILITIES.PROJECT_EDIT_SYNCED,
         resource: { kind: "project", id: project2.id }
       });
       const denial = authorizationMessage(decision);
       if (denial) return { error: denial };
-      const existing = await deps2.readProjectRecord(project2.id);
+      const existing = await deps.readProjectRecord(project2.id);
       const merged = mergeHandoffRefs(handoffRefsFromRecord(existing?.record), introducedRefs, names);
       if (!existing) return { error: `Project "${project2.name}" has no readable saved record.` };
-      await deps2.updateProjectRecord(project2.id, wrapWith(merged, existing.record), existing.recordVersion ?? 1, ctx);
+      await deps.updateProjectRecord(project2.id, wrapWith(merged, existing.record), existing.recordVersion ?? 1, ctx);
       projectId = project2.id;
     } else {
       const name = args.projectName?.trim() || "ShotOps render";
-      if (deps2.authorizeAccountCapability) {
-        const decision = await deps2.authorizeAccountCapability({
-          subject: { kind: "account", userId: deps2.userId, mode: "api_token" },
+      if (deps.authorizeAccountCapability) {
+        const decision = await deps.authorizeAccountCapability({
+          subject: { kind: "account", userId: deps.userId, mode: "api_token" },
           capability: CAPABILITIES.PROJECT_CREATE_SYNCED,
-          resource: { kind: "account", id: deps2.userId }
+          resource: { kind: "account", id: deps.userId }
         });
         const denial = authorizationMessage(decision);
         if (denial) return { error: denial };
       }
-      const created = await deps2.createProject(deps2.userId, name, wrapWith(introducedRefs), ctx);
+      const created = await deps.createProject(deps.userId, name, wrapWith(introducedRefs), ctx);
       projectId = created.id;
     }
-    return { projectId, openUrl: `${deps2.studioOrigin}/?project=${projectId}` };
+    return { projectId, openUrl: `${deps.studioOrigin}/?project=${projectId}` };
   } catch (err) {
     return { error: err.message };
   }
@@ -5227,23 +5485,28 @@ var IDEMPOTENT_DESTRUCTIVE_WRITE = {
   idempotentHint: true,
   openWorldHint: false
 };
-function toolMeta(deps2, invoking, invoked, extra = {}) {
+function securitySchemesFor(deps, toolName) {
+  if (deps.allowLocalScreenshots) return [{ type: "noauth" }];
+  if (deps.anonymous && ANONYMOUS_TOOLS.has(toolName)) {
+    return [{ type: "noauth" }, { type: "oauth2", scopes: [] }];
+  }
+  return [{ type: "oauth2", scopes: [] }];
+}
+function toolMeta(deps, toolName, invoking, invoked, extra = {}) {
   return {
-    // Current MCP SDK exposes Apps authentication policy through `_meta`; `noauth` keeps the
-    // same registrar accurate for the local stdio server.
-    securitySchemes: deps2.allowLocalScreenshots ? [{ type: "noauth" }] : [{ type: "oauth2", scopes: [] }],
+    securitySchemes: securitySchemesFor(deps, toolName),
     "openai/toolInvocation/invoking": invoking,
     "openai/toolInvocation/invoked": invoked,
     ...extra
   };
 }
-function registerTools(server2, deps2) {
-  registerWidgets(server2);
-  server2.registerTool(
+function registerTools(server, deps) {
+  registerWidgets(server);
+  server.registerTool(
     "render_strip",
     {
       title: "Render App Store screenshots",
-      description: 'Make the store screenshots: raw app screen captures in, finished marketing panels out. Each screenshot is composited into a styled 3D device mockup, laid out as an App Store screenshot strip with the headlines you pass, and returned as per-panel PNGs at the App Store panel size `panelPresetId` names. This is the tool for a strip built from screenshots you have in hand; to reproduce one a designer already saved, use render_project. In ChatGPT, call import_screenshot first and pass the returned refs in the preferred flat form: { "screenshots": [{ "ref": "\u2026" }] } \u2014 each flat entry is one panel, and nested slots only when ONE panel should hold several phones. Art-direct it with `style`/`look` or a project\'s saved look, iterate with a cheap low-res `preview`, and take results `inline` or as `urls` for large payloads. Screenshots can vary per store locale via { "locales": \u2026 } entries \u2014 `locale` picks which variant renders (missing variants fall back to en-US). For real, full-resolution screenshots call request_screenshot_upload first \u2014 inline base64 is for small payloads only. This tool ONLY renders images: it never creates or updates a project (use save_project for that) and no store credential is involved.',
+      description: 'Make the store screenshots: raw app screen captures in, finished marketing panels out. Each screenshot is composited into a styled 3D device mockup, laid out as an App Store screenshot strip with the headlines you pass, and returned as per-panel PNGs at the App Store panel size `panelPresetId` names. This is the tool for a strip built from screenshots you have in hand; to reproduce one a designer already saved, use render_project. In ChatGPT, call import_screenshot first and pass the returned refs in the preferred flat form: { "screenshots": [{ "ref": "\u2026" }] } \u2014 each flat entry is one panel, and nested slots only when ONE panel should hold several phones. Art-direct it with `style`/`look` or a project\'s saved look, iterate with a low-res `preview` at a quarter the render cost, and take results `inline` or as `urls` for large payloads. Screenshots can vary per store locale via { "locales": \u2026 } entries \u2014 `locale` picks which variant renders (missing variants fall back to en-US). For real, full-resolution screenshots call request_screenshot_upload first \u2014 inline base64 is for small payloads only. This tool ONLY renders images: it never creates or updates a project (use save_project for that) and no store credential is involved.',
       inputSchema: renderStripAdvertisedShape,
       outputSchema: renderStripOutputSchema,
       // ADDITIVE, not destructive: this can mint private generated assets but cannot change a
@@ -5251,15 +5514,16 @@ function registerTools(server2, deps2) {
       // `createProject` flag, which made ChatGPT prompt for permission just to LOOK at a render.
       annotations: ADDITIVE_WRITE,
       _meta: toolMeta(
-        deps2,
+        deps,
+        "render_strip",
         "Rendering ShotOps strip\u2026",
         "ShotOps strip rendered",
         widgetBinding(PANELS_WIDGET_URI)
       )
     },
-    shapedInput("render_strip", renderStripShape, (args) => handleRenderStrip(deps2, args))
+    shapedInput("render_strip", renderStripShape, (args) => handleRenderStrip(deps, args))
   );
-  server2.registerTool(
+  server.registerTool(
     "emit_bundle",
     {
       title: "Export fastlane bundle",
@@ -5271,15 +5535,16 @@ function registerTools(server2, deps2) {
       // than the gallery's — a zip download, what is inside it, the share link's expiry, and the
       // zero-custody line stated where someone might otherwise assume we submit for them.
       _meta: toolMeta(
-        deps2,
+        deps,
+        "emit_bundle",
         "Building fastlane bundle\u2026",
         "Fastlane bundle built",
         widgetBinding(BUNDLE_WIDGET_URI)
       )
     },
-    shapedInput("emit_bundle", emitBundleShape, (args) => handleEmitBundle(deps2, args))
+    shapedInput("emit_bundle", emitBundleShape, (args) => handleEmitBundle(deps, args))
   );
-  server2.registerTool(
+  server.registerTool(
     "save_project",
     {
       title: "Save as editable project",
@@ -5287,11 +5552,11 @@ function registerTools(server2, deps2) {
       inputSchema: saveProjectAdvertisedShape,
       outputSchema: saveProjectOutputSchema,
       annotations: DESTRUCTIVE_WRITE,
-      _meta: toolMeta(deps2, "Saving ShotOps project\u2026", "ShotOps project saved")
+      _meta: toolMeta(deps, "save_project", "Saving ShotOps project\u2026", "ShotOps project saved")
     },
-    shapedInput("save_project", saveProjectShape, (args) => handleSaveProject(deps2, args))
+    shapedInput("save_project", saveProjectShape, (args) => handleSaveProject(deps, args))
   );
-  server2.registerTool(
+  server.registerTool(
     "read_look",
     {
       title: "Read saved look",
@@ -5299,11 +5564,11 @@ function registerTools(server2, deps2) {
       inputSchema: readLookShape,
       outputSchema: readLookOutputSchema,
       annotations: READ_ONLY,
-      _meta: toolMeta(deps2, "Reading saved look\u2026", "Saved look read")
+      _meta: toolMeta(deps, "read_look", "Reading saved look\u2026", "Saved look read")
     },
-    shapedInput("read_look", readLookShape, (args) => handleReadLook(deps2, args))
+    shapedInput("read_look", readLookShape, (args) => handleReadLook(deps, args))
   );
-  server2.registerTool(
+  server.registerTool(
     "read_project",
     {
       title: "Read full project",
@@ -5311,11 +5576,11 @@ function registerTools(server2, deps2) {
       inputSchema: readProjectShape,
       outputSchema: readProjectOutputSchema,
       annotations: READ_ONLY,
-      _meta: toolMeta(deps2, "Reading ShotOps project\u2026", "ShotOps project read")
+      _meta: toolMeta(deps, "read_project", "Reading ShotOps project\u2026", "ShotOps project read")
     },
-    shapedInput("read_project", readProjectShape, (args) => handleReadProject(deps2, args))
+    shapedInput("read_project", readProjectShape, (args) => handleReadProject(deps, args))
   );
-  server2.registerTool(
+  server.registerTool(
     "render_project",
     {
       title: "Render a saved project",
@@ -5329,15 +5594,16 @@ function registerTools(server2, deps2) {
       // agent on ChatGPT mobile actually calls, so leaving it unbound was leaving raw JSON in
       // front of the users most likely to see it.
       _meta: toolMeta(
-        deps2,
+        deps,
+        "render_project",
         "Rendering saved project\u2026",
         "Saved project rendered",
         widgetBinding(PANELS_WIDGET_URI)
       )
     },
-    shapedInput("render_project", renderProjectShape, (args) => handleRenderProject(deps2, args))
+    shapedInput("render_project", renderProjectShape, (args) => handleRenderProject(deps, args))
   );
-  server2.registerTool(
+  server.registerTool(
     "save_look",
     {
       title: "Save look",
@@ -5345,11 +5611,11 @@ function registerTools(server2, deps2) {
       inputSchema: saveLookAdvertisedShape,
       outputSchema: saveLookOutputSchema,
       annotations: ADDITIVE_WRITE,
-      _meta: toolMeta(deps2, "Saving ShotOps look\u2026", "ShotOps look saved")
+      _meta: toolMeta(deps, "save_look", "Saving ShotOps look\u2026", "ShotOps look saved")
     },
-    shapedInput("save_look", saveLookShape, (args) => handleSaveLook(deps2, args))
+    shapedInput("save_look", saveLookShape, (args) => handleSaveLook(deps, args))
   );
-  server2.registerTool(
+  server.registerTool(
     "hold_look",
     {
       title: "Hold a look version",
@@ -5357,11 +5623,11 @@ function registerTools(server2, deps2) {
       inputSchema: holdLookShape,
       outputSchema: holdLookOutputSchema,
       annotations: IDEMPOTENT_WRITE,
-      _meta: toolMeta(deps2, "Holding look version\u2026", "Look version held")
+      _meta: toolMeta(deps, "hold_look", "Holding look version\u2026", "Look version held")
     },
-    shapedInput("hold_look", holdLookShape, (args) => handleHoldLook(deps2, args))
+    shapedInput("hold_look", holdLookShape, (args) => handleHoldLook(deps, args))
   );
-  server2.registerTool(
+  server.registerTool(
     "release_look",
     {
       title: "Release the held look",
@@ -5369,11 +5635,11 @@ function registerTools(server2, deps2) {
       inputSchema: releaseLookShape,
       outputSchema: releaseLookOutputSchema,
       annotations: IDEMPOTENT_WRITE,
-      _meta: toolMeta(deps2, "Releasing look version\u2026", "Look version released")
+      _meta: toolMeta(deps, "release_look", "Releasing look version\u2026", "Look version released")
     },
-    shapedInput("release_look", releaseLookShape, (args) => handleReleaseLook(deps2, args))
+    shapedInput("release_look", releaseLookShape, (args) => handleReleaseLook(deps, args))
   );
-  server2.registerTool(
+  server.registerTool(
     "describe_look",
     {
       title: "Design presets & style catalog",
@@ -5381,11 +5647,11 @@ function registerTools(server2, deps2) {
       inputSchema: describeLookShape,
       outputSchema: describeLookOutputSchema,
       annotations: READ_ONLY,
-      _meta: toolMeta(deps2, "Reading look field catalog\u2026", "Look field catalog read")
+      _meta: toolMeta(deps, "describe_look", "Reading look field catalog\u2026", "Look field catalog read")
     },
     shapedInput("describe_look", describeLookShape, () => handleDescribeLook())
   );
-  server2.registerTool(
+  server.registerTool(
     "request_screenshot_upload",
     {
       title: "Upload full-size screenshots",
@@ -5393,15 +5659,15 @@ function registerTools(server2, deps2) {
       inputSchema: requestScreenshotUploadShape,
       outputSchema: requestScreenshotUploadOutputSchema,
       annotations: ADDITIVE_WRITE,
-      _meta: toolMeta(deps2, "Preparing screenshot uploads\u2026", "Screenshot uploads ready")
+      _meta: toolMeta(deps, "request_screenshot_upload", "Preparing screenshot uploads\u2026", "Screenshot uploads ready")
     },
     shapedInput(
       "request_screenshot_upload",
       requestScreenshotUploadShape,
-      (args) => handleRequestScreenshotUpload(deps2, args)
+      (args) => handleRequestScreenshotUpload(deps, args)
     )
   );
-  server2.registerTool(
+  server.registerTool(
     "import_screenshot",
     {
       title: "Import screenshots",
@@ -5409,13 +5675,13 @@ function registerTools(server2, deps2) {
       inputSchema: importScreenshotAdvertisedShape,
       outputSchema: importScreenshotOutputSchema,
       annotations: ADDITIVE_WRITE,
-      _meta: toolMeta(deps2, "Importing attached screenshot\u2026", "Attached screenshot imported", {
+      _meta: toolMeta(deps, "import_screenshot", "Importing attached screenshot\u2026", "Attached screenshot imported", {
         "openai/fileParams": ["file"]
       })
     },
-    shapedInput("import_screenshot", importScreenshotShape, (args) => handleImportScreenshot(deps2, args))
+    shapedInput("import_screenshot", importScreenshotShape, (args) => handleImportScreenshot(deps, args))
   );
-  server2.registerTool(
+  server.registerTool(
     "delete_assets",
     {
       title: "Delete uploaded assets",
@@ -5423,9 +5689,9 @@ function registerTools(server2, deps2) {
       inputSchema: deleteAssetsShape,
       outputSchema: deleteAssetsOutputSchema,
       annotations: IDEMPOTENT_DESTRUCTIVE_WRITE,
-      _meta: toolMeta(deps2, "Deleting ShotOps assets\u2026", "ShotOps assets deleted")
+      _meta: toolMeta(deps, "delete_assets", "Deleting ShotOps assets\u2026", "ShotOps assets deleted")
     },
-    shapedInput("delete_assets", deleteAssetsShape, (args) => handleDeleteAssets(deps2, args))
+    shapedInput("delete_assets", deleteAssetsShape, (args) => handleDeleteAssets(deps, args))
   );
 }
 
@@ -5490,13 +5756,22 @@ function stripFromSlots(input) {
   let gradientFrom = FALLBACK_GRADIENT_FROM;
   let gradientTo = FALLBACK_GRADIENT_TO;
   let gradientDir = "vertical";
+  let gradientStops;
+  let gradientAngle;
   let shadow = true;
   let floorReflection = false;
   if (opaque) {
     bgMode = opaque.bgMode === "perPanel" ? "perPanel" : "gradient";
-    if (typeof opaque.gradientFrom === "string") gradientFrom = opaque.gradientFrom;
-    if (typeof opaque.gradientTo === "string") gradientTo = opaque.gradientTo;
-    if (opaque.gradientDir === "horizontal") gradientDir = "horizontal";
+    const gradient = stripGradientOf({
+      gradientStops: Array.isArray(opaque.gradientStops) ? opaque.gradientStops : void 0,
+      gradientAngle: typeof opaque.gradientAngle === "number" ? opaque.gradientAngle : void 0,
+      gradientFrom: typeof opaque.gradientFrom === "string" ? opaque.gradientFrom : gradientFrom,
+      gradientTo: typeof opaque.gradientTo === "string" ? opaque.gradientTo : gradientTo,
+      gradientDir: opaque.gradientDir === "horizontal" ? "horizontal" : gradientDir
+    });
+    gradientStops = gradient.stops;
+    gradientAngle = gradient.angle;
+    ({ gradientFrom, gradientTo, gradientDir } = mirrorsOf(gradient));
     if (opaque.shadow === false) shadow = false;
     if (opaque.floorReflection === true) floorReflection = true;
     const sourceOrder = [];
@@ -5510,9 +5785,16 @@ function stripFromSlots(input) {
   } else if (style2) {
     const bg = style2.background ?? {};
     bgMode = bg.mode === "perPanel" ? "perPanel" : "gradient";
-    if (typeof bg.gradientFrom === "string") gradientFrom = bg.gradientFrom;
-    if (typeof bg.gradientTo === "string") gradientTo = bg.gradientTo;
-    if (bg.gradientDir === "horizontal") gradientDir = "horizontal";
+    const gradient = stripGradientOf({
+      gradientStops: bg.stops,
+      gradientAngle: bg.angle,
+      gradientFrom,
+      gradientTo,
+      gradientDir
+    });
+    gradientStops = gradient.stops;
+    gradientAngle = gradient.angle;
+    ({ gradientFrom, gradientTo, gradientDir } = mirrorsOf(gradient));
     if (bg.shadow === false) shadow = false;
     if (bg.floorReflection === true) floorReflection = true;
     if (Array.isArray(bg.panelColors)) {
@@ -5551,6 +5833,8 @@ function stripFromSlots(input) {
     look: {
       panelPresetId: panelPresetId2,
       bgMode,
+      gradientStops,
+      gradientAngle,
       gradientFrom,
       gradientTo,
       gradientDir,
@@ -5640,7 +5924,7 @@ var MIME = {
   ".wasm": "application/wasm"
 };
 async function startStaticServer(rootDir) {
-  const server2 = createServer((req, res) => {
+  const server = createServer((req, res) => {
     const reqPath = decodeURIComponent((req.url ?? "/").split("?")[0]);
     const rel = reqPath === "/" ? "index.html" : reqPath.replace(/^\/+/, "");
     const filePath = join2(rootDir, rel);
@@ -5663,14 +5947,14 @@ async function startStaticServer(rootDir) {
     );
   });
   await new Promise((resolve, reject) => {
-    server2.once("error", reject);
-    server2.listen(0, "127.0.0.1", resolve);
+    server.once("error", reject);
+    server.listen(0, "127.0.0.1", resolve);
   });
-  const addr = server2.address();
+  const addr = server.address();
   return {
     url: `http://127.0.0.1:${addr.port}/`,
     close: () => new Promise((resolve) => {
-      server2.close(() => resolve());
+      server.close(() => resolve());
     })
   };
 }
@@ -5711,13 +5995,13 @@ var StripRenderer = class {
     if (!this.harnessUrl) this.harnessUrl = await this.startHarnessServer();
     const { chromium } = await import("playwright");
     this.browser = await chromium.launch({ headless: true });
-    const page = await this.browser.newPage();
-    page.on("console", (m) => {
+    const page2 = await this.browser.newPage();
+    page2.on("console", (m) => {
       if (/CONTEXT_LOST|Context Lost/i.test(m.text())) this.sawContextLost = true;
     });
-    await page.goto(this.harnessUrl, { waitUntil: "load" });
-    await page.waitForFunction(() => window.__RENDER_READY === true, { timeout: 9e4 });
-    this.page = page;
+    await page2.goto(this.harnessUrl, { waitUntil: "load" });
+    await page2.waitForFunction(() => window.__RENDER_READY === true, { timeout: 9e4 });
+    this.page = page2;
   }
   // The one line that forks between hosted and local. Everything downstream (browser launch,
   // the __RENDER_READY handshake, window.renderStrip, boot-retry, CONTEXT_LOST) is identical
@@ -5729,8 +6013,8 @@ var StripRenderer = class {
       return this.staticServer.url;
     }
     const configFile = fileURLToPath3(new URL("../vite.config.mjs", import.meta.url));
-    const { createServer: createServer2 } = await import("vite");
-    this.vite = await createServer2({ configFile });
+    const { createServer: createServer3 } = await import("vite");
+    this.vite = await createServer3({ configFile });
     await this.vite.listen();
     const addr = this.vite.httpServer?.address();
     const port = this.vite.config.server.port || (addr && typeof addr === "object" ? addr.port : 0);
@@ -5948,11 +6232,11 @@ function parseControlPlaneResponse(op, value) {
 // package.json
 var package_default = {
   name: "shotops-mcp",
-  version: "0.6.1",
+  version: "0.7.0",
   private: false,
   type: "module",
   description: "The bundle-emitting MCP server over the @engine/@sync spine. Exposes ShotOps tools to ChatGPT, Claude Code, Cursor, and CI over Streamable HTTP with OAuth or personal API tokens. Zero-custody: no code path accepts, stores, or forwards a store-signing credential \u2014 upload stays the user's own fastlane. Renders via headless Playwright Chromium, the engine's native non-browser habitat (same path as mockup-mcp). Also ships as a free LOCAL stdio server (`npx shotops-mcp`) \u2014 same render, on your own machine, no account needed.",
-  license: "UNLICENSED",
+  license: "SEE LICENSE IN LICENSE",
   homepage: "https://shotops.dev",
   repository: {
     type: "git",
@@ -5969,7 +6253,8 @@ var package_default = {
     "dist",
     "harness-dist",
     "widget-dist",
-    "README.md"
+    "README.md",
+    "THIRD_PARTY_NOTICES"
   ],
   engines: {
     node: ">=20.12"
@@ -6027,12 +6312,12 @@ var ControlPlaneOperationError = class extends Error {
     this.requiredPlan = typeof body?.requiredPlan === "string" ? body.requiredPlan : null;
   }
 };
-async function callOp(token2, op, args = {}) {
+async function callOp(token, op, args = {}) {
   const res = await fetch(controlPlaneUrl(), {
     method: "POST",
     headers: {
       "content-type": "application/json",
-      Authorization: `Bearer ${token2}`,
+      Authorization: `Bearer ${token}`,
       [SHOTOPS_CLIENT_HEADER]: `shotops-mcp/${VERSION}`
     },
     body: JSON.stringify({ op, ...args })
@@ -6066,58 +6351,58 @@ function localScreenPaths(screenshots2) {
   }
   return out;
 }
-function connectHostedBridge(token2) {
+function connectHostedBridge(token) {
   return {
     async resolveProject(_userId, projectId) {
-      const res = await callOp(token2, "resolve_project", projectId ? { project: projectId } : {});
+      const res = await callOp(token, "resolve_project", projectId ? { project: projectId } : {});
       if (res.project) return res.project;
       return typeof res.reason === "string" ? res : null;
     },
     async readLook(projectId) {
-      const res = await callOp(token2, "read_look", { project: projectId });
+      const res = await callOp(token, "read_look", { project: projectId });
       return res.look;
     },
     async readVersion(projectId, version2) {
-      const res = await callOp(token2, "read_version", { project: projectId, version: version2 });
+      const res = await callOp(token, "read_version", { project: projectId, version: version2 });
       return res.version;
     },
     async listVersions(projectId) {
-      const res = await callOp(token2, "list_versions", { project: projectId });
+      const res = await callOp(token, "list_versions", { project: projectId });
       return res.versions;
     },
     async setHeldVersion(projectId, version2) {
-      await callOp(token2, "set_held_version", { project: projectId, version: version2 });
+      await callOp(token, "set_held_version", { project: projectId, version: version2 });
     },
     async readProjectRecord(projectId) {
-      const res = await callOp(token2, "read_project_record", { project: projectId });
+      const res = await callOp(token, "read_project_record", { project: projectId });
       return res.record;
     },
     async readProjectScreens(projectId) {
-      const res = await callOp(token2, "read_project_screens", { project: projectId });
+      const res = await callOp(token, "read_project_screens", { project: projectId });
       const screens = res.screens;
       const untrusted = res.untrusted;
       return { screens, ...untrusted && untrusted.length > 0 ? { untrusted } : {} };
     },
     async saveLook(projectId, look2, sourceName) {
-      const res = await callOp(token2, "save_look", { project: projectId, look: look2, ...sourceName ? { sourceName } : {} });
+      const res = await callOp(token, "save_look", { project: projectId, look: look2, ...sourceName ? { sourceName } : {} });
       return { version: res.version };
     },
     async createProject(_userId, name, record) {
-      const res = await callOp(token2, "create_project", { name, record });
+      const res = await callOp(token, "create_project", { name, record });
       return { id: res.id, recordVersion: res.recordVersion };
     },
     async updateProjectRecord(projectId, record, expectedVersion) {
       let version2 = expectedVersion;
       if (version2 === void 0) {
-        const current = await callOp(token2, "read_project_record", { project: projectId });
+        const current = await callOp(token, "read_project_record", { project: projectId });
         version2 = current.record?.recordVersion;
       }
       if (version2 === void 0) throw new Error("project record version is unavailable");
-      const res = await callOp(token2, "update_project_record", { project: projectId, record, expectedVersion: version2 });
+      const res = await callOp(token, "update_project_record", { project: projectId, record, expectedVersion: version2 });
       return { recordVersion: res.recordVersion };
     },
     async mintScreenUploads(projectId, names) {
-      const res = await callOp(token2, "mint_screen_uploads", { project: projectId, names });
+      const res = await callOp(token, "mint_screen_uploads", { project: projectId, names });
       return res.slots;
     },
     async close() {
@@ -6263,7 +6548,7 @@ async function createAnonymousProjectClaim(projectName2, record, screenshots2) {
 import { readFile as readFile4 } from "node:fs/promises";
 var SIGN_IN = "not available in local (free) mode \u2014 connect the hosted ShotOps MCP and sign in for saved looks, editable projects, and share links.";
 var SHARE_LINK_NOT_BRIDGED = `Creating a share link is ${SIGN_IN} (bridging this needs a hosted rendering step, which local mode deliberately avoids \u2014 connect directly to the hosted MCP for share links.)`;
-function localToolDeps(token2) {
+function localToolDeps(token) {
   const base = {
     renderer: new StripRenderer({ serve: "static" }),
     // Token-backed cloud writes cross the same authority in the control plane. This local handler
@@ -6286,7 +6571,7 @@ function localToolDeps(token2) {
     // no Supabase storage locally to upload an `output: "urls"` result to
     studioOrigin: studioOrigin()
   };
-  if (!token2) {
+  if (!token) {
     return {
       ...base,
       resolveProject: async () => null,
@@ -6312,7 +6597,7 @@ function localToolDeps(token2) {
       }
     };
   }
-  const bridge = connectHostedBridge(token2);
+  const bridge = connectHostedBridge(token);
   return {
     ...base,
     resolveProject: (userId, projectId) => bridge.resolveProject(userId, projectId),
@@ -6417,39 +6702,421 @@ function custodyUnion(...manifests) {
   }));
 }
 
+// src/localAuth.ts
+import { createHash, randomBytes as randomBytes2, timingSafeEqual } from "node:crypto";
+import { spawn } from "node:child_process";
+import { createServer as createServer2 } from "node:http";
+
+// src/localCredentials.ts
+import { chmod, mkdir, readFile as readFile5, rename, unlink, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { dirname as dirname2, join as join3 } from "node:path";
+var EMPTY2 = { version: 1, origins: {} };
+function credentialsPath() {
+  const dir = process.env.SHOTOPS_CONFIG_DIR || join3(homedir(), ".shotops");
+  return join3(dir, "credentials.json");
+}
+async function readFileJson() {
+  let raw;
+  try {
+    raw = await readFile5(credentialsPath(), "utf8");
+  } catch {
+    return { version: 1, origins: {} };
+  }
+  try {
+    const parsed = JSON.parse(raw);
+    if (!parsed || typeof parsed !== "object" || !parsed.origins) return { ...EMPTY2 };
+    return { version: 1, origins: parsed.origins };
+  } catch {
+    return { ...EMPTY2 };
+  }
+}
+async function writeFileJson(next) {
+  const target = credentialsPath();
+  await mkdir(dirname2(target), { recursive: true, mode: 448 });
+  const tmp = `${target}.${process.pid}.tmp`;
+  await writeFile(tmp, `${JSON.stringify(next, null, 2)}
+`, { mode: 384 });
+  await chmod(tmp, 384);
+  await rename(tmp, target);
+}
+async function readCredentials(origin) {
+  const file = await readFileJson();
+  return file.origins[origin] ?? {};
+}
+async function saveClient(origin, client) {
+  const file = await readFileJson();
+  file.origins[origin] = { ...file.origins[origin], client };
+  await writeFileJson(file);
+}
+async function saveLogin(origin, login) {
+  const file = await readFileJson();
+  file.origins[origin] = { ...file.origins[origin], login };
+  await writeFileJson(file);
+}
+async function clearLogin(origin) {
+  const file = await readFileJson();
+  const existing = file.origins[origin]?.login;
+  if (!existing) return void 0;
+  file.origins[origin] = { ...file.origins[origin], login: void 0 };
+  await writeFileJson(file);
+  return existing;
+}
+async function resolveToken(origin, explicit) {
+  if (explicit) return explicit;
+  if (process.env.SHOTOPS_TOKEN) return process.env.SHOTOPS_TOKEN;
+  const { login } = await readCredentials(origin);
+  return login?.token;
+}
+
+// src/localAuth.ts
+var LOOPBACK_HOST = "127.0.0.1";
+var CALLBACK_PATH = "/shotops/callback";
+var PLACEHOLDER_PORT = 8765;
+var CLIENT_NAME = "ShotOps CLI";
+var LOGIN_TIMEOUT_MS = 5 * 60 * 1e3;
+function authOrigin() {
+  return studioOrigin();
+}
+function base64url(buf) {
+  return buf.toString("base64url");
+}
+async function discoverEndpoints(origin) {
+  const url = `${origin}/.well-known/oauth-authorization-server`;
+  let res;
+  try {
+    res = await fetch(url);
+  } catch (err) {
+    throw new Error(`could not reach ${origin} (${err.message})`);
+  }
+  if (!res.ok) throw new Error(`${url} answered HTTP ${res.status} \u2014 is ${origin} a ShotOps server?`);
+  const doc = await res.json().catch(() => null);
+  const authorization = typeof doc?.authorization_endpoint === "string" ? doc.authorization_endpoint : void 0;
+  const token = typeof doc?.token_endpoint === "string" ? doc.token_endpoint : void 0;
+  const registration = typeof doc?.registration_endpoint === "string" ? doc.registration_endpoint : void 0;
+  const revocation = typeof doc?.revocation_endpoint === "string" ? doc.revocation_endpoint : void 0;
+  if (!authorization || !token || !registration) {
+    throw new Error(`${url} is missing an authorization, token or registration endpoint`);
+  }
+  const methods = doc?.code_challenge_methods_supported;
+  if (Array.isArray(methods) && !methods.includes("S256")) {
+    throw new Error(`${origin} does not support PKCE S256, which this client requires`);
+  }
+  return { authorization, token, registration, revocation };
+}
+async function ensureClient(origin, endpoints) {
+  const existing = (await readCredentials(origin)).client;
+  if (existing && existing.redirectHost === LOOPBACK_HOST && existing.redirectPath === CALLBACK_PATH) {
+    return existing;
+  }
+  const res = await fetch(endpoints.registration, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify({
+      client_name: CLIENT_NAME,
+      redirect_uris: [`http://${LOOPBACK_HOST}:${PLACEHOLDER_PORT}${CALLBACK_PATH}`],
+      grant_types: ["authorization_code"],
+      response_types: ["code"],
+      token_endpoint_auth_method: "none"
+    })
+  });
+  const body = await res.json().catch(() => null);
+  if (!res.ok || typeof body?.client_id !== "string") {
+    throw new Error(`registration failed (HTTP ${res.status}${describeOAuthError(body)})`);
+  }
+  const client = {
+    clientId: body.client_id,
+    clientSecret: typeof body.client_secret === "string" ? body.client_secret : void 0,
+    redirectHost: LOOPBACK_HOST,
+    redirectPath: CALLBACK_PATH,
+    registeredAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+  await saveClient(origin, client);
+  return client;
+}
+function describeOAuthError(body) {
+  const code = typeof body?.error === "string" ? body.error : void 0;
+  const detail = typeof body?.error_description === "string" ? body.error_description : void 0;
+  if (!code && !detail) return "";
+  return ` \u2014 ${[code, detail].filter(Boolean).join(": ")}`;
+}
+function awaitCallback(expectedState) {
+  return new Promise((resolveServer, rejectServer) => {
+    let settled = false;
+    let resolveResult;
+    let rejectResult;
+    const result = new Promise((res, rej) => {
+      resolveResult = res;
+      rejectResult = rej;
+    });
+    const server = createServer2((req, res) => {
+      const url = new URL(req.url ?? "/", `http://${LOOPBACK_HOST}`);
+      if (url.pathname !== CALLBACK_PATH || settled) {
+        res.writeHead(404, { "content-type": "text/plain" });
+        res.end("not found\n");
+        return;
+      }
+      settled = true;
+      const state = url.searchParams.get("state") ?? "";
+      const code = url.searchParams.get("code");
+      const error = url.searchParams.get("error");
+      const finish = (status, heading, detail) => {
+        res.writeHead(status, { "content-type": "text/html; charset=utf-8" });
+        res.end(page(heading, detail));
+        server.close();
+      };
+      if (!statesMatch(state, expectedState)) {
+        finish(400, "Sign-in rejected", "This response does not belong to the sign-in you started.");
+        rejectResult(new Error("the authorization response did not match this sign-in (state mismatch)"));
+        return;
+      }
+      if (error || !code) {
+        finish(400, "Sign-in failed", error === "access_denied" ? "Access was denied." : "No authorization code came back.");
+        rejectResult(new Error(error ? `authorization failed: ${error}` : "no authorization code was returned"));
+        return;
+      }
+      finish(200, "Signed in to ShotOps", "You can close this tab and go back to your terminal.");
+      resolveResult({ code });
+    });
+    const timer = setTimeout(() => {
+      if (settled) return;
+      settled = true;
+      server.close();
+      rejectResult(new Error(`timed out after ${LOGIN_TIMEOUT_MS / 6e4} minutes waiting for the browser`));
+    }, LOGIN_TIMEOUT_MS);
+    timer.unref?.();
+    void result.catch(() => {
+    }).finally(() => clearTimeout(timer));
+    server.on("error", (err) => rejectServer(err));
+    server.listen(0, LOOPBACK_HOST, () => {
+      const address = server.address();
+      resolveServer({ port: address.port, result });
+    });
+  });
+}
+function statesMatch(a, b) {
+  const left = Buffer.from(a);
+  const right = Buffer.from(b);
+  if (left.length !== right.length) return false;
+  return timingSafeEqual(left, right);
+}
+function page(heading, detail) {
+  return `<!doctype html><meta charset="utf-8"><title>${heading}</title>
+<body style="font:16px/1.5 system-ui,sans-serif;margin:0;display:grid;place-items:center;height:100vh">
+<main style="max-width:28rem;padding:2rem;text-align:center">
+<h1 style="font-size:1.25rem;margin:0 0 .5rem">${heading}</h1><p style="margin:0;opacity:.7">${detail}</p>
+</main></body>`;
+}
+function openBrowser(url) {
+  const [command, args] = process.platform === "darwin" ? ["open", [url]] : process.platform === "win32" ? ["cmd", ["/c", "start", "", url]] : ["xdg-open", [url]];
+  try {
+    const child = spawn(command, args, { stdio: "ignore", detached: true });
+    child.on("error", () => {
+    });
+    child.unref();
+  } catch {
+  }
+}
+async function runLogin(origin = authOrigin(), open = openBrowser) {
+  const endpoints = await discoverEndpoints(origin);
+  const client = await ensureClient(origin, endpoints);
+  const verifier = base64url(randomBytes2(32));
+  const challenge = base64url(createHash("sha256").update(verifier).digest());
+  const state = base64url(randomBytes2(32));
+  const { port, result } = await awaitCallback(state);
+  const redirectUri = `http://${LOOPBACK_HOST}:${port}${CALLBACK_PATH}`;
+  const authorizeUrl = new URL(endpoints.authorization);
+  authorizeUrl.searchParams.set("response_type", "code");
+  authorizeUrl.searchParams.set("client_id", client.clientId);
+  authorizeUrl.searchParams.set("redirect_uri", redirectUri);
+  authorizeUrl.searchParams.set("code_challenge", challenge);
+  authorizeUrl.searchParams.set("code_challenge_method", "S256");
+  authorizeUrl.searchParams.set("state", state);
+  console.log(`Opening your browser to sign in to ShotOps (${origin}).`);
+  console.log(`If nothing opens, paste this into a browser on this machine:
+
+  ${authorizeUrl}
+`);
+  open(authorizeUrl.href);
+  const { code } = await result;
+  const res = await fetch(endpoints.token, {
+    method: "POST",
+    headers: { "content-type": "application/x-www-form-urlencoded" },
+    body: new URLSearchParams({
+      grant_type: "authorization_code",
+      code,
+      code_verifier: verifier,
+      client_id: client.clientId,
+      redirect_uri: redirectUri
+    })
+  });
+  const body = await res.json().catch(() => null);
+  if (!res.ok || typeof body?.access_token !== "string") {
+    throw new Error(`token exchange failed (HTTP ${res.status}${describeOAuthError(body)})`);
+  }
+  const token = body.access_token;
+  await saveLogin(origin, {
+    token,
+    tokenPrefix: token.slice(0, 16),
+    signedInAt: (/* @__PURE__ */ new Date()).toISOString()
+  });
+  console.log(`Signed in. Token ${token.slice(0, 16)}\u2026 saved for ${origin}.`);
+  console.log("Run `npx shotops-mcp whoami` to see your plan, or start the MCP server as usual.");
+  return 0;
+}
+async function runLogout(origin = authOrigin()) {
+  const { client, login } = await readCredentials(origin);
+  if (!login) {
+    console.log(`Not signed in to ${origin}. Nothing to do.`);
+    return 0;
+  }
+  let revoked = false;
+  let revokeDetail = "";
+  try {
+    const endpoints = await discoverEndpoints(origin);
+    if (!endpoints.revocation) throw new Error("this server publishes no revocation endpoint");
+    if (!client) throw new Error("the registration that minted this token is no longer on disk");
+    const params = new URLSearchParams({ token: login.token, client_id: client.clientId });
+    if (client.clientSecret) params.set("client_secret", client.clientSecret);
+    const res = await fetch(endpoints.revocation, {
+      method: "POST",
+      headers: { "content-type": "application/x-www-form-urlencoded" },
+      body: params
+    });
+    if (!res.ok) throw new Error(`HTTP ${res.status}`);
+    revoked = true;
+  } catch (err) {
+    revokeDetail = err.message;
+  }
+  await clearLogin(origin);
+  if (revoked) {
+    console.log(`Signed out of ${origin}. The token is revoked server-side and removed from this machine.`);
+    return 0;
+  }
+  console.log(`Removed the saved sign-in for ${origin}, but could NOT revoke it server-side (${revokeDetail}).`);
+  console.log(`That token ${login.tokenPrefix}\u2026 may still work. Revoke it in ShotOps \u2192 Settings \u2192 API tokens.`);
+  return 0;
+}
+async function runWhoami(origin = authOrigin(), explicitToken2) {
+  const token = await resolveToken(origin, explicitToken2);
+  const source = explicitToken2 ? "--token argument" : process.env.SHOTOPS_TOKEN ? "SHOTOPS_TOKEN" : "saved browser login";
+  if (!token) {
+    console.log(`Not signed in to ${origin}.`);
+    console.log("Run `npx shotops-mcp login`, or set SHOTOPS_TOKEN for CI.");
+    return 1;
+  }
+  let res;
+  try {
+    res = await fetch(`${origin}/api/billing-entitlement`, {
+      headers: { authorization: `Bearer ${token}` }
+    });
+  } catch (err) {
+    console.error(`Could not reach ${origin} (${err.message}). Your plan is unknown, not Free.`);
+    return 1;
+  }
+  if (res.status === 401) {
+    console.log(`Token ${token.slice(0, 16)}\u2026 (${source}) is not valid \u2014 it was revoked, or it belongs to another server.`);
+    console.log("Run `npx shotops-mcp login` to sign in again.");
+    return 1;
+  }
+  if (!res.ok) {
+    console.error(`${origin} answered HTTP ${res.status}. Your plan is unknown, not Free.`);
+    return 1;
+  }
+  const body = await res.json().catch(() => null);
+  if (!body) {
+    console.error("The server returned an unexpected response. Your plan is unknown, not Free.");
+    return 1;
+  }
+  console.log(`Signed in to ${origin}`);
+  console.log(`  token    ${token.slice(0, 16)}\u2026 (${source})`);
+  if (typeof body.userId === "string") console.log(`  account  ${body.userId}`);
+  console.log(`  plan     ${String(body.plan ?? "unknown")}${body.status ? ` (${String(body.status)})` : ""}`);
+  if (body.reason) console.log(`  because  ${String(body.reason)}`);
+  if (body.trial?.state) {
+    const ends = typeof body.trial.endsAt === "number" ? ` until ${new Date(body.trial.endsAt).toISOString().slice(0, 10)}` : "";
+    console.log(`  trial    ${String(body.trial.state)}${ends}`);
+  }
+  if (body.credits && typeof body.credits === "object") {
+    console.log(`  credits  ${String(body.credits.remaining ?? "?")} of ${String(body.credits.cap ?? "?")}`);
+  } else {
+    console.log("  credits  unavailable");
+  }
+  return 0;
+}
+var USAGE = `shotops-mcp \u2014 App Store screenshot mockups, rendered on this machine.
+
+  npx shotops-mcp            start the MCP server over stdio (what an MCP client runs)
+  npx shotops-mcp login      sign in through the browser and save the token
+  npx shotops-mcp logout     revoke that token and remove it from this machine
+  npx shotops-mcp whoami     show which account is signed in and its plan
+
+  --token <t>                use this token instead of a saved login (also SHOTOPS_TOKEN)
+`;
+async function dispatchLocalCommand(argv2, explicitToken2) {
+  const [command] = argv2;
+  switch (command) {
+    case "login":
+      return await runLogin();
+    case "logout":
+      return await runLogout();
+    case "whoami":
+      return await runWhoami(authOrigin(), explicitToken2);
+    case "help":
+    case "--help":
+    case "-h":
+      console.log(USAGE);
+      return 0;
+    default:
+      return null;
+  }
+}
+
 // src/local.ts
-function tokenFromArgv(argv) {
-  const eq = argv.find((a) => a.startsWith("--token="));
+function tokenFromArgv(argv2) {
+  const eq = argv2.find((a) => a.startsWith("--token="));
   if (eq) return eq.slice("--token=".length);
-  const idx = argv.indexOf("--token");
-  return idx !== -1 ? argv[idx + 1] : void 0;
+  const idx = argv2.indexOf("--token");
+  return idx !== -1 ? argv2[idx + 1] : void 0;
 }
-var token = tokenFromArgv(process.argv.slice(2)) || process.env.SHOTOPS_TOKEN || void 0;
-var deps = localToolDeps(token);
 var LOCAL_INTAKE = 'request_screenshot_upload is hosted-only; import_screenshot accepts { "path": "/abs/shot.png" } entries here (its { "url" } / { "file" } sources need a hosted account). Either way you can pass local files straight to render_strip / emit_bundle as { "path": "..." } screenshot entries.';
-var localInstructions = token ? `${SERVER_INSTRUCTIONS}
+async function startStdioServer(token) {
+  const deps = localToolDeps(token);
+  const localInstructions = token ? `${SERVER_INSTRUCTIONS}
 
 ## Local mode (this connection)
 Rendering runs on THIS machine \u2014 free, no timeout ceiling. A hosted token is configured, so save_project / read_look / save_look also work (they read/write your hosted ShotOps account); ${LOCAL_INTAKE}` : `${SERVER_INSTRUCTIONS}
 
 ## Local mode (this connection)
 Rendering runs on THIS machine \u2014 free, no timeout ceiling. No hosted token is configured. A NEW save_project with local { "path": "..." } PNGs deliberately uploads one temporary private handoff and returns status:"pending_claim" + an openUrl: ALWAYS give that URL to the user. The user owns the project only after opening it and signing in within 7 days; no projectId exists before then. Passing an existing project requires SHOTOPS_TOKEN and is refused here. Ordinary render_strip / emit_bundle calls upload NOTHING, and an explicit request not to save means do not call save_project. read_look / save_look / read_project / render_project / share links still require an account connection. ${LOCAL_INTAKE}`;
-var server = new McpServer(
-  // #335 — the PACKAGE version, deliberately, not app.ts's deployed-build identity: this tier IS
-  // the npm package a user installed with `npx shotops-mcp`, and it has no deploy. Its contract
-  // moves only when the version they installed moves, so VERSION is already the honest answer.
-  { name: "shotops-mcp-local", version: VERSION },
-  { instructions: localInstructions }
-);
-registerTools(server, { userId: "local", ...deps });
-async function shutdown() {
-  await deps.renderer.close();
-  await deps.closeBridge?.();
-  process.exit(0);
-}
-process.on("SIGINT", () => void shutdown());
-process.on("SIGTERM", () => void shutdown());
-await server.connect(new StdioServerTransport());
-console.error(
-  `[shotops-mcp-local] connected over stdio \u2014 renders run on this machine.${token ? " (hosted bridge configured)" : ""}`
-);
+  const server = new McpServer(
+    // #335 — the PACKAGE version, deliberately, not app.ts's deployed-build identity: this tier IS
+    // the npm package a user installed with `npx shotops-mcp`, and it has no deploy. Its contract
+    // moves only when the version they installed moves, so VERSION is already the honest answer.
+    { name: "shotops-mcp-local", version: VERSION },
+    { instructions: localInstructions }
+  );
+  registerTools(server, { userId: "local", ...deps });
+  async function shutdown() {
+    await deps.renderer.close();
+    await deps.closeBridge?.();
+    process.exit(0);
+  }
+  process.on("SIGINT", () => void shutdown());
+  process.on("SIGTERM", () => void shutdown());
+  await server.connect(new StdioServerTransport());
+  console.error(
+    `[shotops-mcp-local] connected over stdio \u2014 renders run on this machine.${token ? " (hosted bridge configured)" : ""}`
+  );
+}
+var argv = process.argv.slice(2);
+var explicitToken = tokenFromArgv(argv);
+var commandExit = await dispatchLocalCommand(argv, explicitToken).catch((err) => {
+  console.error(`shotops-mcp: ${err.message}`);
+  return 1;
+});
+if (commandExit !== null) {
+  process.exitCode = commandExit;
+} else {
+  await startStdioServer(await resolveToken(authOrigin(), explicitToken));
+}