shotops-mcp 0.9.7 → 0.9.9

package/dist/local.js

@@ -24,7 +24,7 @@
   }
   await visit('')
   return hash.digest('hex')
-})(sourceDirectory) !== "1b56a11440edcc23083bfa4a283fe2d972acfb3a17820247bc951bcd5cc3810d") {
+})(sourceDirectory) !== "726565c5a58fb0cf9d366865195f22440699f6a55c8789edcd92577fc682ebbf") {
           console.error('shotops-mcp: dist/local.js is stale; run npm run build in shotops-mcp.');
         }
       } catch { /* An unreadable checkout must not break an otherwise working CLI. */ }
@@ -44,6 +44,27 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
+// ../mockup-engine/appstore/presets.ts
+function presetById(id) {
+  return PANEL_PRESETS.find((p) => p.id === id) ?? PANEL_PRESETS[0];
+}
+var PANEL_PRESETS;
+var init_presets = __esm({
+  "../mockup-engine/appstore/presets.ts"() {
+    "use strict";
+    PANEL_PRESETS = [
+      { id: "r69", label: "6.9\u2033 iPhone \xB7 1320\xD72868", width: 1320, height: 2868 },
+      { id: "r65", label: "6.5\u2033 iPhone \xB7 1242\xD72688", width: 1242, height: 2688 },
+      { id: "r55", label: "5.5\u2033 iPhone \xB7 1242\xD72208", width: 1242, height: 2208 },
+      // Pixel 10 Pro — a tall marketing canvas matching the 6.9″ iPhone's dimensions so
+      // the strip layout + caption scale are identical; only the 3D body differs.
+      { id: "pixel69", label: "Pixel 10 Pro \xB7 1320\xD72868", width: 1320, height: 2868 },
+      { id: "ipad13", label: "13\u2033 iPad \xB7 2064\xD72752", width: 2064, height: 2752 },
+      { id: "ipad129", label: "12.9\u2033 iPad \xB7 2048\xD72732", width: 2048, height: 2732 }
+    ];
+  }
+});
+
 // ../mockup-engine/appstore/devices.ts
 function deviceById(id) {
   return DEVICES.find((d) => d.id === id);
@@ -70,9 +91,23 @@ function deriveOutputs(explicit, panelPresetId2) {
   }
   return [DEFAULT_OUTPUT_DEVICE_ID];
 }
+function activeDeviceId(outputs, panelPresetId2) {
+  const match = outputs.find((id) => deviceById(id)?.panelPresetId === panelPresetId2);
+  return match ?? outputs[0];
+}
+function projectOutputAxis(projectFile) {
+  const file = projectFile ?? {};
+  const explicit = Array.isArray(file.outputs) ? file.outputs.filter((id) => typeof id === "string") : void 0;
+  const outputs = deriveOutputs(explicit, typeof file.panelPresetId === "string" ? file.panelPresetId : void 0);
+  const panelPresetId2 = presetById(typeof file.panelPresetId === "string" ? file.panelPresetId : "").id;
+  return { outputs, panelPresetId: panelPresetId2, activeDeviceId: activeDeviceId(outputs, panelPresetId2) };
+}
 function screenFamilyForDevice(deviceId) {
   return deviceById(deviceId)?.screenFamily ?? BASE_SCREEN_FAMILY;
 }
+function screenFamilyForPreset(panelPresetId2) {
+  return DEVICES.find((d) => d.panelPresetId === panelPresetId2)?.screenFamily ?? BASE_SCREEN_FAMILY;
+}
 function outputScreenFamilies(outputs) {
   const seen = /* @__PURE__ */ new Set();
   const out = [];
@@ -89,6 +124,7 @@ var IPHONE_MODEL_ID, PIXEL_MODEL_ID, DEVICES, DEFAULT_OUTPUT_DEVICE_ID, BASE_SCR
 var init_devices = __esm({
   "../mockup-engine/appstore/devices.ts"() {
     "use strict";
+    init_presets();
     IPHONE_MODEL_ID = "iphone-17-pro";
     PIXEL_MODEL_ID = "pixel-10-pro";
     DEVICES = [
@@ -104,10 +140,15 @@ var init_devices = __esm({
 });
 
 // ../mockup-engine/appstore/catalog/caption.ts
-var CAPTION_STYLE_BOUNDS;
+var CAPTION_STYLE_DEFAULTS, CAPTION_STYLE_BOUNDS;
 var init_caption = __esm({
   "../mockup-engine/appstore/catalog/caption.ts"() {
     "use strict";
+    CAPTION_STYLE_DEFAULTS = {
+      lineHeight: 1.2,
+      bandInset: 0.06,
+      bandCenter: 0.5
+    };
     CAPTION_STYLE_BOUNDS = {
       sizePt: { min: 20, max: 120 },
       maxWidth: { min: 0.1, max: 1 },
@@ -120,7 +161,10 @@ var init_caption = __esm({
 });
 
 // ../mockup-engine/appstore/catalog/defaults.ts
-var DEFAULT_LOOK, SHOT_LOOK_DOMAIN, SHOT_LOOK_RANGES, DEFAULT_CAPTION_ANCHOR, DEFAULT_CAPTION_STYLE;
+function deviceSizeFromLegacyPhoneHeight(phoneHeight) {
+  return Math.round(phoneHeight / DEVICE_SIZE_BASE_FRACTION * 100) / 100;
+}
+var DEFAULT_LOOK, SHOT_LOOK_DOMAIN, SHOT_LOOK_RANGES, DEVICE_SIZE_BASE_FRACTION, DEFAULT_CAPTION_ANCHOR, DEFAULT_CAPTION_STYLE;
 var init_defaults = __esm({
   "../mockup-engine/appstore/catalog/defaults.ts"() {
     "use strict";
@@ -138,19 +182,24 @@ var init_defaults = __esm({
       // pushPhonesBelowCaptionBands() solved per-render before e0f587c ("Stop captions moving
       // devices") deleted it: captions must never move a device, so the clearance has to be baked
       // into the default instead.
-      //   deviceTop(v) = (1 - phoneHeight)/2 + (v/100)/2        [layoutStrip, +y = down]
+      //   deviceTop(v) = (1 - deviceHeightFraction(deviceSize))/2 + (v/100)/2   [layoutStrip, +y = down]
       //   bandBottom(n) = CAPTION_BAND_TOP + n·LINE_HEIGHT·sizePt/PANEL_LOGICAL_HEIGHT_PT
-      // At 82% height and a 32pt caption, deviceTop = 18.0% and the device sits FLUSH to the bottom
+      // At deviceSize 100 (82% of panel height) and a 32pt caption, deviceTop = 18.0% and the device sits FLUSH to the bottom
       // edge (18.0 + 82 = 100.0). A full 2-line headline's ink ends at 13.6%, so the gap is 4.4%;
       // a 3-line headline still clears by 0.3%. Four lines overlap — that is what Bleed is for, and
       // it buys the room by running the device 10% off the bottom edge. Re-derive via
-      // catalog/layouts.ts if sizePt or phoneHeight changes; its tests are the guard.
-      phoneHeight: "82",
+      // catalog/layouts.ts if sizePt or deviceSize changes; its tests are the guard.
+      deviceSize: "100",
       hOffset: "0",
       vOffset: "18",
       material: "real",
-      colorway: "silver",
-      customColor: "F5F5F5",
+      // Deep Blue on the iPhone, Moonstone on the Pixel (which binds no `blue`, so it falls back to its
+      // first finish — deviceFinishes.ts). A product call, not a derived one: the blue body is the one
+      // that reads as a device against the widest range of strip backgrounds, where Silver disappeared
+      // into a light one. `customColor` starts at the same hex so opening the custom well doesn't jump
+      // the phone to a different colour before anyone has picked anything.
+      colorway: "blue",
+      customColor: "32374A",
       finish: "0",
       clearcoat: "0",
       clayTone: "grey",
@@ -164,7 +213,7 @@ var init_defaults = __esm({
       angle: { valueKind: "angle", required: true, defaultSource: "default-look", defaultValue: DEFAULT_LOOK.angle, persistence: "always" },
       cameraPos: { valueKind: "camera-position", required: true, defaultSource: "default-look", defaultValue: DEFAULT_LOOK.cameraPos, persistence: "always" },
       roll: { valueKind: "numeric-string", required: true, defaultSource: "default-look", defaultValue: DEFAULT_LOOK.roll, persistence: "always" },
-      phoneHeight: { valueKind: "numeric-string", required: true, defaultSource: "default-look", defaultValue: DEFAULT_LOOK.phoneHeight, persistence: "always" },
+      deviceSize: { valueKind: "numeric-string", required: true, defaultSource: "default-look", defaultValue: DEFAULT_LOOK.deviceSize, persistence: "always" },
       hOffset: { valueKind: "numeric-string", required: true, defaultSource: "default-look", defaultValue: DEFAULT_LOOK.hOffset, persistence: "always" },
       vOffset: { valueKind: "numeric-string", required: true, defaultSource: "default-look", defaultValue: DEFAULT_LOOK.vOffset, persistence: "always" },
       material: { valueKind: "material", required: true, defaultSource: "default-look", defaultValue: DEFAULT_LOOK.material, persistence: "always" },
@@ -176,21 +225,27 @@ var init_defaults = __esm({
       clayCustom: { valueKind: "string", required: true, defaultSource: "default-look", defaultValue: DEFAULT_LOOK.clayCustom, persistence: "always" },
       flatScreen: { valueKind: "boolean", required: true, defaultSource: "default-look", defaultValue: DEFAULT_LOOK.flatScreen, persistence: "always" },
       clipToFrame: { valueKind: "boolean", required: false, defaultSource: "explicit", defaultValue: false, persistence: "omit-default" },
+      deviceFrame: { valueKind: "boolean", required: false, defaultSource: "explicit", defaultValue: true, persistence: "omit-default" },
+      screenCornerRadius: { valueKind: "numeric-string", required: false, defaultSource: "explicit", defaultValue: "12", persistence: "omit-default" },
       glare: { valueKind: "boolean", required: true, defaultSource: "default-look", defaultValue: DEFAULT_LOOK.glare, persistence: "always" },
       lighting: { valueKind: "boolean", required: true, defaultSource: "default-look", defaultValue: DEFAULT_LOOK.lighting, persistence: "always" },
       reflections: { valueKind: "boolean", required: true, defaultSource: "default-look", defaultValue: DEFAULT_LOOK.reflections, persistence: "always" }
     };
     SHOT_LOOK_RANGES = {
       roll: { min: -45, max: 45 },
-      // 20–200, which is what the clamp and both sliders have always done. Over 100% is a legitimate,
-      // shipped composition — the device is TALLER than the panel and bleeds off an edge, which is
-      // exactly what the Bleed layout template trades headline room for.
-      phoneHeight: { min: 20, max: 200 },
+      // Percent of the default device size (see DEVICE_SIZE_BASE_FRACTION): 25–240 is 20–200% of the
+      // panel's height. Past ~122 the device is TALLER than the panel and bleeds off an edge — a
+      // legitimate, shipped composition, and exactly what the Bleed layout template trades headline
+      // room for.
+      deviceSize: { min: 25, max: 240 },
       hOffset: { min: -100, max: 100 },
       vOffset: { min: -200, max: 200 },
       finish: { min: 0, max: 1 },
-      clearcoat: { min: 0, max: 1 }
+      clearcoat: { min: 0, max: 1 },
+      // Percent of the flat card's WIDTH (#907); 50 turns the short edges into semicircles.
+      screenCornerRadius: { min: 0, max: 50 }
     };
+    DEVICE_SIZE_BASE_FRACTION = 0.82;
     DEFAULT_CAPTION_ANCHOR = { x: 0.5, y: 0.06 };
     DEFAULT_CAPTION_STYLE = {
       fontId: "inter",
@@ -362,6 +417,9 @@ function variantKey(variant) {
   if (variant.locale !== void 0) parts.push(`locale=${variant.locale}`);
   return parts.join("&");
 }
+function isBaseVariant(variant) {
+  return variantKey(variant) === "";
+}
 function variantAxes(variant) {
   const out = [];
   if (variant.family !== void 0) out.push("family");
@@ -540,9 +598,9 @@ function sha256Hex(text3) {
   const words = [h0, h1, h2, h3, h4, h5, h6, h7];
   let out = "";
   for (let i = 0; i < words.length; i += 1) {
-    let hex = (words[i] >>> 0).toString(16);
-    while (hex.length < 8) hex = `0${hex}`;
-    out += hex;
+    let hex2 = (words[i] >>> 0).toString(16);
+    while (hex2.length < 8) hex2 = `0${hex2}`;
+    out += hex2;
   }
   return out;
 }
@@ -1855,7 +1913,7 @@ var init_resultContract = __esm({
       { code: "render_failed", test: /^render failed|^renderer returned / },
       { code: "payload_too_large", test: /inline-response ceiling|is too large/ },
       { code: "storage_failed", test: /could not store the rendered panels|could not create share link/ },
-      { code: "asset_not_found", test: /failed to read panel|no preview image available|does not belong to this account/ },
+      { code: "asset_not_found", test: /failed to read panel|no preview image available|does not belong to this account|no screenshot was ever uploaded for ref/ },
       { code: "persistence_failed", test: /could not build the project record|no project record was produced/ },
       { code: "quota_exhausted", test: /not enough credits|credit balance|wallet is empty/ },
       // Input-shape complaints raised by a HANDLER rather than by the schema. Last, and each anchored
@@ -1945,7 +2003,7 @@ var init_refineIntent = __esm({
     init_defaults();
     init_fonts();
     MAX_REFINE_PROMPT_LENGTH = 1200;
-    AI_COLORWAY_IDS = ["orange", "blue", "silver", "green"];
+    AI_COLORWAY_IDS = ["orange", "blue", "ice", "silver", "red", "black", "green"];
     AI_CLAY_TONES = ["grey", "white", "charcoal"];
     AI_SHOT_RANGES = {
       orbit: { min: -180, max: 180 },
@@ -1982,7 +2040,7 @@ var init_shotLookProjection = __esm({
         valueKind: "camera-position",
         validation: { wireKind: "nullable-camera-position" },
         schemaDescription: "Manual camera position override; null/omit = use the angle preset.",
-        catalogDescription: "{ x, y, z } rotates the camera around the device to refine the angle beyond the presets, or null to use the preset. It does NOT zoom or resize \u2014 device SIZE is set ONLY by phoneHeight (the export alpha-crops the device tight, so camera distance is discarded)."
+        catalogDescription: "{ x, y, z } rotates the camera around the device to refine the angle beyond the presets, or null to use the preset. It does NOT zoom or resize \u2014 device SIZE is set ONLY by deviceSize (the export alpha-crops the device tight, so camera distance is discarded)."
       },
       roll: {
         exposure: "public",
@@ -1991,12 +2049,12 @@ var init_shotLookProjection = __esm({
         schemaDescription: `${rangeText("roll")}\xB0 clock-hand tilt. Default ${defaultValue("roll")}.`,
         catalogDescription: `${catalogRange("roll")} (degrees, clock-hand tilt; continuous, unlike angle)`
       },
-      phoneHeight: {
+      deviceSize: {
         exposure: "public",
         valueKind: "numeric-string",
         validation: { wireKind: "bounded-numeric" },
-        schemaDescription: `Phone height, ${rangeText("phoneHeight")} (% of panel height; over 100 bleeds off an edge). Default ${defaultValue("phoneHeight")} (the Standard layout template; prefer \`style.layout\` over setting this by hand).`,
-        catalogDescription: `${catalogRange("phoneHeight")} (% of panel height) \u2014 the ONLY device-size control. Over 100 the device is taller than the panel and bleeds off an edge. Default ${defaultValue("phoneHeight")} (the Standard layout template; prefer style.layout over setting this by hand).`
+        schemaDescription: `Device size, ${rangeText("deviceSize")} (percent of the default device size; about 122 fills the panel height and more bleeds off an edge). Default ${defaultValue("deviceSize")} (the Standard layout template; prefer \`style.layout\` over setting this by hand).`,
+        catalogDescription: `${catalogRange("deviceSize")} (percent of the default device size, which is 82% of the panel height) \u2014 the ONLY device-size control. Past about 122 the device is taller than the panel and bleeds off an edge. Default ${defaultValue("deviceSize")} (the Standard layout template; prefer style.layout over setting this by hand).`
       },
       hOffset: {
         exposure: "public",
@@ -2022,9 +2080,9 @@ var init_shotLookProjection = __esm({
       colorway: {
         exposure: "public",
         valueKind: "colorway",
-        validation: { wireKind: "enum", values: ["orange", "blue", "silver", "green", "custom"] },
-        schemaDescription: `Body colour (material "real"). Default ${defaultValue("colorway")}. These are finish SLOTS \u2014 each device binds its own real finish (silver = iPhone Silver / Pixel Moonstone). "green" is Pixel-only (Jade); other devices fall back to their first finish.`,
-        catalogDescription: "orange | blue | silver | green | custom (with customColor hex) \u2014 finish SLOTS, each device binds its own real finish (silver = iPhone Silver / Pixel Moonstone). green is Pixel-only (Jade); other devices fall back to their first finish."
+        validation: { wireKind: "enum", values: ["orange", "blue", "ice", "silver", "red", "black", "green", "custom"] },
+        schemaDescription: `Body colour (material "real"). Default ${defaultValue("colorway")}. These are finish SLOTS \u2014 each device binds its own real finish. On iPhone: blue = Deep Blue, silver = Silver, orange = Cosmic Orange, ice = Glacier, red = Burgundy, black = Black. A slot a device does not bind falls back to its first finish \u2014 "green" is Pixel-only (Jade).`,
+        catalogDescription: "orange | blue | ice | silver | red | black | green | custom (with customColor hex) \u2014 finish SLOTS, each device binds its own real finish. On iPhone: blue = Deep Blue, silver = Silver, orange = Cosmic Orange, ice = Glacier, red = Burgundy, black = Black. A slot a device does not bind falls back to its first finish; green is Pixel-only (Jade)."
       },
       customColor: {
         exposure: "public",
@@ -2095,6 +2153,20 @@ var init_shotLookProjection = __esm({
         validation: { wireKind: "boolean" },
         schemaDescription: `Clip this complete device composite to its owning frame. Default ${defaultValue("clipToFrame")} (overflow allowed).`,
         catalogDescription: "boolean \u2014 clip this device, its screen, shadow and reflection to its owning frame; default false"
+      },
+      deviceFrame: {
+        exposure: "public",
+        valueKind: "boolean",
+        validation: { wireKind: "boolean" },
+        schemaDescription: `Render the 3D device frame around the screen. Default ${defaultValue("deviceFrame")}. Set false for a flat rounded screenshot card with no device chrome \u2014 screenCornerRadius then sets its corner rounding, and roll still rotates the flat card exactly as it tilts a framed device.`,
+        catalogDescription: `boolean \u2014 false renders a flat rounded screenshot card instead of the 3D device; screenCornerRadius then sets its corner rounding, and roll still rotates the flat card. Default true.`
+      },
+      screenCornerRadius: {
+        exposure: "public",
+        valueKind: "numeric-string",
+        validation: { wireKind: "bounded-numeric" },
+        schemaDescription: `${rangeText("screenCornerRadius")} (percent of the flat card's width). Default ${defaultValue("screenCornerRadius")}. Applies only when deviceFrame is false \u2014 ignored on a framed device, whose corners come from the device model.`,
+        catalogDescription: `${catalogRange("screenCornerRadius")} (percent of the flat card's width) \u2014 applies only when deviceFrame is false; ignored on a framed device.`
       }
     };
     MCP_SHOT_LOOK_PUBLIC_ENTRIES = Object.entries(MCP_SHOT_LOOK_PROJECTION).filter((entry) => entry[1].exposure === "public");
@@ -2104,24 +2176,12 @@ var init_shotLookProjection = __esm({
   }
 });
 
-// ../mockup-engine/appstore/presets.ts
-function presetById(id) {
-  return PANEL_PRESETS.find((p) => p.id === id) ?? PANEL_PRESETS[0];
-}
-var PANEL_PRESETS;
-var init_presets = __esm({
-  "../mockup-engine/appstore/presets.ts"() {
+// ../mockup-engine/outputDeviceIds.ts
+var OUTPUT_DEVICE_IDS;
+var init_outputDeviceIds = __esm({
+  "../mockup-engine/outputDeviceIds.ts"() {
     "use strict";
-    PANEL_PRESETS = [
-      { id: "r69", label: "6.9\u2033 iPhone \xB7 1290\xD72796", width: 1290, height: 2796 },
-      { id: "r65", label: "6.5\u2033 iPhone \xB7 1242\xD72688", width: 1242, height: 2688 },
-      { id: "r55", label: "5.5\u2033 iPhone \xB7 1242\xD72208", width: 1242, height: 2208 },
-      // Pixel 10 Pro — a tall marketing canvas matching the 6.9″ iPhone's dimensions so
-      // the strip layout + caption scale are identical; only the 3D body differs.
-      { id: "pixel69", label: "Pixel 10 Pro \xB7 1290\xD72796", width: 1290, height: 2796 },
-      { id: "ipad13", label: "13\u2033 iPad \xB7 2064\xD72752", width: 2064, height: 2752 },
-      { id: "ipad129", label: "12.9\u2033 iPad \xB7 2048\xD72732", width: 2048, height: 2732 }
-    ];
+    OUTPUT_DEVICE_IDS = ["iphone-6-9", "iphone-6-5"];
   }
 });
 
@@ -2157,20 +2217,33 @@ function panelLabelFor(presetId, width, height) {
 function panelDimensionsFor(presetId) {
   return PANEL_DIMENSIONS[presetId] ?? PANEL_DIMENSIONS.r69;
 }
-var MCP_UNKNOWN_PANEL_PRESET_IDS, MCP_PANEL_PRESETS, PANEL_PRESET_IDS, RENDERABLE_PANEL_PRESET_IDS, OUTPUT_DEVICE_IDS, OUTPUT_DEVICES, NOT_COVERED_BY_THIS_CALL, SIZE_SUFFIX, PANEL_LABELS, PANEL_DIMENSIONS;
+var MCP_UNRENDERED_DEVICE_IDS, MCP_UNKNOWN_PANEL_PRESET_IDS, MCP_PANEL_PRESETS, PANEL_PRESET_IDS, RENDERABLE_PANEL_PRESET_IDS, OUTPUT_DEVICES, NOT_COVERED_BY_THIS_CALL, SIZE_SUFFIX, PANEL_LABELS, PANEL_DIMENSIONS;
 var init_panelCatalog = __esm({
   "src/render/panelCatalog.ts"() {
     "use strict";
     init_presets();
-    MCP_UNKNOWN_PANEL_PRESET_IDS = ["pixel69"];
+    init_devices();
+    init_outputDeviceIds();
+    init_outputDeviceIds();
+    MCP_UNRENDERED_DEVICE_IDS = ["pixel-10-pro"];
+    MCP_UNKNOWN_PANEL_PRESET_IDS = MCP_UNRENDERED_DEVICE_IDS.map(
+      (id) => deviceById(id)?.panelPresetId ?? id
+    );
     MCP_PANEL_PRESETS = PANEL_PRESETS.filter((preset) => !MCP_UNKNOWN_PANEL_PRESET_IDS.includes(preset.id));
     PANEL_PRESET_IDS = MCP_PANEL_PRESETS.map((preset) => preset.id);
     RENDERABLE_PANEL_PRESET_IDS = ["r69", "r65", "r55"];
-    OUTPUT_DEVICE_IDS = ["iphone-6-9", "iphone-6-5"];
-    OUTPUT_DEVICES = [
-      { id: "iphone-6-9", label: "iPhone 17 Pro", panelPresetId: "r69", ascDeviceSet: "APP_IPHONE_67" },
-      { id: "iphone-6-5", label: "iPhone 17", panelPresetId: "r65", ascDeviceSet: "APP_IPHONE_65" }
-    ];
+    OUTPUT_DEVICES = OUTPUT_DEVICE_IDS.map((id) => {
+      const device = deviceById(id);
+      if (!device || device.comingSoon) {
+        throw new Error(`output device "${id}" is not a selectable device in the engine catalog`);
+      }
+      return {
+        id,
+        label: device.label,
+        panelPresetId: device.panelPresetId,
+        ascDeviceSet: device.ascDeviceSet
+      };
+    });
     NOT_COVERED_BY_THIS_CALL = "not covered by this bundle";
     SIZE_SUFFIX = / · \d+×\d+$/;
     PANEL_LABELS = Object.fromEntries(
@@ -2219,7 +2292,7 @@ var init_layouts = __esm({
         blurb: "Headline on top, whole device below it, nothing cropped. The safe default.",
         character: "safe",
         bleedEdge: "none",
-        shotLook: { phoneHeight: "82", hOffset: "0", vOffset: "18", angle: "front", cameraPos: null, roll: "0" },
+        shotLook: { deviceSize: "100", hOffset: "0", vOffset: "18", angle: "front", cameraPos: null, roll: "0" },
         caption: { sizePt: 32, maxWidth: 0.86, reserveLines: 2, align: "center", bandCenter: 0.5 }
       },
       {
@@ -2228,7 +2301,7 @@ var init_layouts = __esm({
         blurb: "Room for a longer headline, device running off the bottom edge. What the market looks like.",
         character: "conventional",
         bleedEdge: "bottom",
-        shotLook: { phoneHeight: "82", hOffset: "0", vOffset: "38", angle: "front", cameraPos: null, roll: "0" },
+        shotLook: { deviceSize: "100", hOffset: "0", vOffset: "38", angle: "front", cameraPos: null, roll: "0" },
         caption: { sizePt: 32, maxWidth: 0.86, reserveLines: 4, align: "center", bandCenter: 0.5 }
       },
       {
@@ -2237,7 +2310,7 @@ var init_layouts = __esm({
         blurb: "Device running off the TOP edge, headline underneath it. Inverts the usual reading order.",
         character: "expressive",
         bleedEdge: "top",
-        shotLook: { phoneHeight: "82", hOffset: "0", vOffset: "-38", angle: "front", cameraPos: null, roll: "0" },
+        shotLook: { deviceSize: "100", hOffset: "0", vOffset: "-38", angle: "front", cameraPos: null, roll: "0" },
         // The only entry that moves the band. Its caption sits BELOW the device, which the engine
         // could not express at all until #218 gave placeCaptions a bottom-anchored band — before that
         // the only way down was pinning an anchor, which silently costs reflow, stacking and the
@@ -2256,7 +2329,7 @@ var init_layouts = __esm({
         blurb: "Device pushed off the RIGHT edge, headline in a column down the left. Reads as one continuous swipe.",
         character: "expressive",
         bleedEdge: "right",
-        shotLook: { phoneHeight: "82", hOffset: "46", vOffset: "18", angle: "front", cameraPos: null, roll: "0" },
+        shotLook: { deviceSize: "100", hOffset: "46", vOffset: "18", angle: "front", cameraPos: null, roll: "0" },
         caption: { sizePt: 32, maxWidth: 0.61, reserveLines: 2, align: "left", bandCenter: 0.375 }
       },
       {
@@ -2265,7 +2338,7 @@ var init_layouts = __esm({
         blurb: "Device pushed off the LEFT edge, headline in a column down the right. The mirror of Lean right.",
         character: "expressive",
         bleedEdge: "left",
-        shotLook: { phoneHeight: "82", hOffset: "-46", vOffset: "18", angle: "front", cameraPos: null, roll: "0" },
+        shotLook: { deviceSize: "100", hOffset: "-46", vOffset: "18", angle: "front", cameraPos: null, roll: "0" },
         caption: { sizePt: 32, maxWidth: 0.61, reserveLines: 2, align: "right", bandCenter: 0.625 }
       },
       {
@@ -2279,7 +2352,7 @@ var init_layouts = __esm({
         // too — which makes this template claim `bottom-right` and collide with Corner bleed, the only
         // other entry on that edge. The horizontal push is the whole idea here; the vertical stays out
         // of its way. Both halves are guarded (clearance, and the declared-edge check).
-        shotLook: { phoneHeight: "82", hOffset: "78", vOffset: "18", angle: "front", cameraPos: null, roll: "0" },
+        shotLook: { deviceSize: "100", hOffset: "78", vOffset: "18", angle: "front", cameraPos: null, roll: "0" },
         caption: { sizePt: 32, maxWidth: 0.86, reserveLines: 2, align: "center", bandCenter: 0.5 }
       },
       {
@@ -2288,7 +2361,7 @@ var init_layouts = __esm({
         blurb: "Off the bottom AND the right at once, headline in a column down the left. The most opinionated panel here.",
         character: "expressive",
         bleedEdge: "bottom-right",
-        shotLook: { phoneHeight: "82", hOffset: "46", vOffset: "38", angle: "front", cameraPos: null, roll: "0" },
+        shotLook: { deviceSize: "100", hOffset: "46", vOffset: "38", angle: "front", cameraPos: null, roll: "0" },
         caption: { sizePt: 32, maxWidth: 0.61, reserveLines: 4, align: "left", bandCenter: 0.375 }
       }
     ];
@@ -2302,7 +2375,7 @@ var init_layouts = __esm({
       align: "center",
       bandCenter: 0.5
     };
-    LAYOUT_POSE_FIELDS = ["phoneHeight", "hOffset", "vOffset"];
+    LAYOUT_POSE_FIELDS = ["deviceSize", "hOffset", "vOffset"];
     LAYOUT_CAMERA_FIELDS = ["angle", "cameraPos", "roll"];
     LAYOUT_CAPTION_FIELDS = Array.from(
       new Set(LAYOUT_TEMPLATE_CATALOG.flatMap((t) => Object.keys(t.caption)))
@@ -2314,7 +2387,8 @@ var init_layouts = __esm({
 function layoutTemplateAgentSummary(template) {
   const reserveLines = template.caption.reserveLines;
   const capacity = typeof reserveLines === "number" ? ` Reserves ${reserveLines} headline lines (~${Math.round(reserveLines * 18 * (template.caption.maxWidth ?? 0.86) / 0.86)} characters).` : "";
-  return `${template.blurb}${capacity} Character: [${template.character}]. Bleeds: [${template.bleedEdge}].`;
+  const headline = (template.caption.maxWidth ?? 0.86) < 0.86 || (template.caption.align ?? "center") !== "center" ? " Restyles the headline into a narrower column." : " Leaves the headline full-width and centred.";
+  return `${template.blurb}${capacity}${headline} Character: [${template.character}]. Bleeds: [${template.bleedEdge}].`;
 }
 function layoutTemplateById(id) {
   return LAYOUT_TEMPLATES.find((t) => t.id === id);
@@ -2406,12 +2480,20 @@ var init_layoutTemplates = __esm({
       'A request that names a composition outright ("device running off the bottom edge", "headline under the phone") beats the character.',
       "The EDGE beats the character too, and is checked first: a request that says which way the phone should go has already chosen, whatever quality words sit around it.",
       "When several templates share the right character AND the right edge, take the one whose reserved headline lines fit the LONGEST caption in the set. Under-reserving truncates; over-reserving leaves a visible empty band.",
-      "A side bleed is chosen for the WHOLE set or not at all. Every panel leaning the same way reads as one swipe; mirrored neighbours (lean-right beside lean-left) overlap and read as a mistake."
+      "A side bleed may be given to the whole set or to named frames, but never to a frame whose NEIGHBOUR leans the other way. Every panel leaning the same way reads as one swipe; mirrored neighbours (lean-right beside lean-left) overlap by most of a panel width and read as a mistake. Alternate a lean with `standard`, never with its mirror.",
+      "A template sets the HEADLINE as well as the phone, so choosing one restyles the captions on every frame it reaches. When the user asked for a composition and asked NOT to touch the captions, take the template on the right edge whose headline treatment already matches theirs, and say in the interpretation what it does to the headline."
     ];
     valuesEqual = (a, b) => JSON.stringify(a) === JSON.stringify(b);
   }
 });
 
+// ../mockup-engine/hexColor.ts
+var init_hexColor = __esm({
+  "../mockup-engine/hexColor.ts"() {
+    "use strict";
+  }
+});
+
 // ../mockup-engine/gradient.ts
 function angleFromDirection(dir) {
   return dir === "horizontal" ? HORIZONTAL_ANGLE : VERTICAL_ANGLE;
@@ -2470,6 +2552,7 @@ var HORIZONTAL_ANGLE, VERTICAL_ANGLE, FALLBACK_GRADIENT_FROM, FALLBACK_GRADIENT_
 var init_gradient = __esm({
   "../mockup-engine/gradient.ts"() {
     "use strict";
+    init_hexColor();
     HORIZONTAL_ANGLE = 90;
     VERTICAL_ANGLE = 180;
     FALLBACK_GRADIENT_FROM = "#1b1b2e";
@@ -2766,7 +2849,7 @@ var init_toolContract = __esm({
       "device, if the project targets several), so the Big-jobs timing warning applies unchanged.",
       "",
       "## Outputs \u2014 one project, several device SIZES",
-      "A project targets one or more DEVICES: iphone-6-9 (1290\xD72796) and/or iphone-6-5 (1242\xD72688).",
+      "A project targets one or more DEVICES: iphone-6-9 (1320\xD72868) and/or iphone-6-5 (1242\xD72688).",
       "You almost never need to name them. render_project renders EVERY device the project targets \u2014",
       "the top-level panels are the previewed device, and an `outputs` array carries each device's own",
       "panels when there is more than one. emit_bundle does the same for the zip: with a `project` and",
@@ -2815,7 +2898,7 @@ var init_toolContract = __esm({
       "COMPOSE \u2014 every real App Store strip needs BOTH varied devices AND headlines, and that is ONE",
       "call: pass `look` (devices + background) and `style` (style.captions gives the words) together.",
       "A style.shotLook/style.background alongside a look is redundant \u2014 the look wins, with a note.",
-      "panelPresetId picks the App Store size: r69 (6.9\u2033, default, 1290\xD72796) | r65 | r55 \u2014 iPhone only.",
+      "panelPresetId picks the App Store size: r69 (6.9\u2033, default, 1320\xD72868) | r65 | r55 \u2014 iPhone only.",
       "Match it to your source screenshots (1320\xD72868 or 1290\xD72796 \u2192 r69).",
       "Continuous scene: panels have no hard divider, so a phone pushed past its edge with a large",
       "hOffset overflows into the NEIGHBOURING panel and the strip reads as one swipe-through image.",
@@ -2901,6 +2984,21 @@ var init_toolContract = __esm({
       "Skip the names and the record falls back to positional filenames (screen-1.png, screen-2.png\u2026)",
       "the user's folder can't match \u2014 the single worst create-project failure mode. Pass the real filenames.",
       "",
+      "## Link the project to the real app (search_app_listing)",
+      "When the user says which app these screenshots are for, find it instead of typing its name:",
+      'search_app_listing({ term: "Duolingo" }) returns matching App Store apps with their exact name,',
+      "seller, icon, bundle ID and numeric app ID, plus the App Store Connect languages and iPhone",
+      "devices ShotOps would apply. Show the candidates and let the USER say which one is theirs \u2014 the",
+      "icon and the seller are what prove it \u2014 then pass that result's `appId` (or its `storeUrl`, which",
+      "also carries the storefront) as save_project({ appListing }). The created project then takes the",
+      "app's name, bundle ID, language list and device set; anything you state yourself \u2014 `projectName`,",
+      "`outputs`, `locale` \u2014 wins, and the app is still linked. Passing `appListing` with an existing",
+      "`project` re-links that project and rewrites nothing else. read_project reports the linked app as",
+      "`linkedApp`. Both are free reads over Apple's public listing data: no Apple or store credential is",
+      "involved, and a public listing proves nothing about who owns the app \u2014 the bundle ID stays",
+      "editable. Both need an account; an unsigned local server says so and the save still works without",
+      "the reference.",
+      "",
       '## "Any updates?" \u2014 read back what a designer changed (read_project)',
       "read_look returns only STYLING. To see what a designer edited in the web app \u2014 frame ORDER, the",
       "per-locale caption WORDS, the locale list, structural changes \u2014 call read_project. It returns the",
@@ -3027,7 +3125,7 @@ var init_designIntake = __esm({
             { id: "continuous", label: "One continuous scene across panels", blurb: "Large hOffset values let a phone straddle the seam so the strip reads as one swipe-through image. Preview it \u2014 placement is fiddly." },
             // #223 — the bound is read from the engine's range table, not re-typed: this blurb said
             // 20–100 while the render clamped to 200 and both sliders offered it.
-            { id: "bigger", label: "Make the phones larger or smaller", blurb: `phoneHeight, ${SHOT_LOOK_RANGES.phoneHeight.min}\u2013${SHOT_LOOK_RANGES.phoneHeight.max} (% of panel height; over 100 bleeds off an edge), default 82. It is the ONLY device-size control \u2014 cameraPos does not resize. Prefer style.layout over hand-setting it.` }
+            { id: "bigger", label: "Make the phones larger or smaller", blurb: `deviceSize, ${SHOT_LOOK_RANGES.deviceSize.min}\u2013${SHOT_LOOK_RANGES.deviceSize.max} (percent of the default device size; about 122 fills the panel height and more bleeds off an edge), default ${DEFAULT_LOOK.deviceSize}. It is the ONLY device-size control \u2014 cameraPos does not resize. Prefer style.layout over hand-setting it.` }
           ],
           apply: `The layout answer is one field: style.layout: ${LAYOUT_TEMPLATE_IDS.map((id) => `"${id}"`).join(" | ")} (see describe_look \`layouts\`). It expands FIRST into ` + LAYOUT_DEVICE_PATHS + " + " + LAYOUT_CAPTION_PATHS + ', and any of those fields you pass explicitly still overrides it \u2014 so "bleed, but a bit lower" is { layout: "bleed", shotLook: { vOffset: "45" } }. Nothing stores the template id. Anything past "uniform" on the device half means passing a `look` alongside `style`. They compose in one render_strip call: the look supplies per-device styling + background, style.captions the words.'
         }
@@ -3086,7 +3184,7 @@ function clampCaptionBounds(input) {
 }
 function captionClampNote(clamps) {
   if (clamps.length === 0) return void 0;
-  const said = clamps.map((clamp) => `${clamp.field} ${clamp.submitted} \u2192 ${clamp.stored}`).join("; ");
+  const said = clamps.map((clamp2) => `${clamp2.field} ${clamp2.submitted} \u2192 ${clamp2.stored}`).join("; ");
   return `Caption values outside the supported range were stored at the bound (${said}) \u2014 sizePt is ${captionBoundText("sizePt")} and maxWidth ${captionBoundText("maxWidth")}, the same range the ShotOps caption controls offer, so nothing here is unreachable in the app.`;
 }
 function rangeIssueMessage(field, raw) {
@@ -3137,11 +3235,12 @@ var init_lookSchemas = __esm({
     rangeText2 = (field) => `${SHOT_LOOK_RANGES[field].min}\u2013${SHOT_LOOK_RANGES[field].max}`;
     RANGE_UNITS = {
       roll: "degrees of clock-hand tilt",
-      phoneHeight: "percent of panel height",
+      deviceSize: "percent of the default device size, 100 = default",
       hOffset: "horizontal position, 0 = centre",
       vOffset: "vertical position, 0 = centre, positive = lower",
       finish: "0 = matte \u2026 1 = glossy",
-      clearcoat: "0 = none \u2026 1 = full clear-coat gloss"
+      clearcoat: "0 = none \u2026 1 = full clear-coat gloss",
+      screenCornerRadius: "percent of the flat card width"
     };
     PLACEMENT_FIELDS = LAYOUT_POSE_FIELDS;
     layoutAlternative = () => ` For a ready-made composition pass \`style.layout\`: ${LAYOUT_TEMPLATE_IDS.map((id) => `"${id}"`).join(" | ")} \u2014 it sets ${LAYOUT_POSE_FIELDS.join("/")} together, resets camera pose + roll, and sets the headline region they were solved against), and any field you also pass explicitly still wins over it.`;
@@ -3264,7 +3363,7 @@ var init_lookSchemas = __esm({
       // write door — saveLookForProject in api/_lib/projectLookStore.ts — so this field is purely
       // informational on the wire.
       schema: z3.number().optional().describe("Look schema version. The server stamps it on every save (save_look); read_look returns it. Any input value is ignored \u2014 never set it yourself."),
-      panelPresetId: z3.string().optional().describe("Canvas size preset, e.g. r69 = 1290\xD72796. Default r69."),
+      panelPresetId: z3.string().optional().describe("Canvas size preset, e.g. r69 = 1320\xD72868. Default r69."),
       bgMode: z3.enum(["gradient", "perPanel"]).optional().describe("One gradient across the strip, or a flat colour per panel. Default gradient."),
       // #460 decision 6 — UNLIKE render_strip's `style.background` above, the PERSISTED look keeps
       // both forms: `gradientStops`/`gradientAngle` are canonical (win when present), and
@@ -3543,8 +3642,8 @@ var init_describeLookCatalog = __esm({
           gradientFrom: "#3E3D42",
           gradientTo: "#1E1D22",
           shots: [
-            { panelId: "panel-1", look: { material: "real", colorway: "blue", angle: "left", roll: "-19", phoneHeight: "74" } },
-            { panelId: "panel-1", look: { material: "real", colorway: "orange", angle: "right", roll: "8", phoneHeight: "86" } }
+            { panelId: "panel-1", look: { material: "real", colorway: "blue", angle: "left", roll: "-19", deviceSize: "90" } },
+            { panelId: "panel-1", look: { material: "real", colorway: "orange", angle: "right", roll: "8", deviceSize: "105" } }
           ]
         }
       },
@@ -3570,7 +3669,7 @@ var init_describeLookCatalog = __esm({
         "style.layout PRECEDENCE: the template expands first, then any explicit shotLook composition field or caption layout field you also pass overrides it. Nothing stores the template id \u2014 save_project persists the expanded values and read_look returns them unchanged, so a layout is a starting point exactly as a preset is.",
         "style.shotLook is ONE shared style for every phone. To vary ANY devices \u2014 including two phones inside the SAME panel \u2014 pass a `look` instead. `look.shots[]` has one entry per screenshot/device in flattened panel order; repeat panelId for devices that share a panel. See the `look` example.",
         "COMPOSE (every real App Store strip): to style devices independently AND caption their panels, pass BOTH `look` (per-device styling via shots[] + background) and `style` (captions via style.captions) in ONE render_strip/emit_bundle call \u2014 they combine. The look supplies the styling; if you also pass style.shotLook/style.background alongside a look they are ignored (the look wins) and a note tells you.",
-        "Fidelity ceilings: `angle` is preset-only (front|left|right) and `roll` is continuous (\xB145\xB0), but there is NO free yaw \u2014 an arbitrary 3-axis source rotation can only be approximated. Device SIZE is set only by `phoneHeight` (there is no separate scale, and cameraPos does not resize). Fonts are the 5 in `style.captions.fonts` \u2014 pick the closest; an exact non-bundled typeface match is not possible.",
+        "Fidelity ceilings: `angle` is preset-only (front|left|right) and `roll` is continuous (\xB145\xB0), but there is NO free yaw \u2014 an arbitrary 3-axis source rotation can only be approximated. Device SIZE is set only by `deviceSize` (there is no separate scale, and cameraPos does not resize). Fonts are the 5 in `style.captions.fonts` \u2014 pick the closest; an exact non-bundled typeface match is not possible.",
         "save_look appends a look version; hold_look sets which saved version agents render by default (or Hold one in ShotOps\u2019s Version history), and render_strip `version` renders a specific one."
       ]
     };
@@ -3579,7 +3678,7 @@ var init_describeLookCatalog = __esm({
 
 // src/contracts/outputSchemas.ts
 import { z as z4 } from "zod";
-var projectSummary, storedAssetOutput, panelDeliveryOutput, panelOutput, lookHistoryAccess, noteField, creditsField, layoutFindingOutput, layoutAdvisoryOutput, contractField, disclosureField, operationStateOutputSchema, durableRenderFinalOutputSchema, durableBundleFinalOutputSchema, renderStripOutputSchema, optionalShape, operationStateShape, renderStripToolOutputSchema, emitBundleOutputSchema, emitBundleToolOutputSchema, saveProjectOutputSchema, layoutFieldDiff, layoutReportShape, layoutReportOutput, readLookOutputSchema, storedScreenshots, readProjectOutputSchema, agentOutcomeOutput, refineProjectOutputSchema, renderProjectOutputSchema, renderProjectToolOutputSchema, productionOperationOutputSchema, saveLookOutputSchema, holdLookOutputSchema, releaseLookOutputSchema, describeLookOutputSchema, accountCreditBalanceSchema, accountStatusOutputSchema, requestScreenshotUploadOutputSchema, importedScreenshotOutput, importScreenshotOutputSchema, deleteAssetsOutputSchema, advertisedWithFailure, refineProjectToolOutputSchema, saveProjectToolOutputSchema, readLookToolOutputSchema, readProjectToolOutputSchema, saveLookToolOutputSchema, holdLookToolOutputSchema, releaseLookToolOutputSchema, requestScreenshotUploadToolOutputSchema, importScreenshotToolOutputSchema, deleteAssetsToolOutputSchema;
+var projectSummary, storedAssetOutput, panelDeliveryOutput, panelOutput, lookHistoryAccess, noteField, creditsField, layoutFindingOutput, layoutAdvisoryOutput, contractField, disclosureField, operationStateOutputSchema, durableRenderFinalOutputSchema, durableBundleFinalOutputSchema, renderStripOutputSchema, optionalShape, operationStateShape, renderStripToolOutputSchema, emitBundleOutputSchema, emitBundleToolOutputSchema, appListingOutput, saveProjectOutputSchema, layoutFieldDiff, layoutReportShape, layoutReportOutput, readLookOutputSchema, storedScreenshots, searchAppListingOutputSchema, readProjectOutputSchema, agentOutcomeOutput, refineProjectOutputSchema, renderProjectOutputSchema, renderProjectToolOutputSchema, productionOperationOutputSchema, saveLookOutputSchema, holdLookOutputSchema, releaseLookOutputSchema, describeLookOutputSchema, accountCreditBalanceSchema, accountStatusOutputSchema, requestScreenshotUploadOutputSchema, importedScreenshotOutput, importScreenshotOutputSchema, deleteAssetsOutputSchema, advertisedWithFailure, refineProjectToolOutputSchema, saveProjectToolOutputSchema, readLookToolOutputSchema, readProjectToolOutputSchema, searchAppListingToolOutputSchema, saveLookToolOutputSchema, holdLookToolOutputSchema, releaseLookToolOutputSchema, requestScreenshotUploadToolOutputSchema, importScreenshotToolOutputSchema, deleteAssetsToolOutputSchema;
 var init_outputSchemas = __esm({
   "src/contracts/outputSchemas.ts"() {
     "use strict";
@@ -3758,6 +3857,20 @@ var init_outputSchemas = __esm({
       zipRef: z4.string().optional(),
       ok: z4.boolean()
     }).passthrough();
+    appListingOutput = z4.object({
+      appId: z4.string().describe("Apple\u2019s numeric app ID, as a string. Pass it as save_project\u2019s `appListing`."),
+      bundleId: z4.string(),
+      name: z4.string(),
+      seller: z4.string(),
+      storeUrl: z4.string().optional().describe("The listing\u2019s own App Store page. Carries the storefront, so it is the reference to reuse for a non-US app."),
+      iconUrl: z4.string().optional().describe("The app icon on Apple\u2019s CDN. Shown as project chrome; never downloaded and never rendered into a strip."),
+      locales: z4.array(z4.string()).describe("The App Store Connect locales this listing\u2019s languages map to, in catalog order."),
+      baseLocale: z4.string().describe("The caption base the other locales inherit from. Derived \u2014 Apple never says which language is primary."),
+      outputs: z4.array(z4.string()).describe("The ShotOps output devices this listing fills. iPhone only, and EMPTY for an iPad-only app."),
+      supportsIpad: z4.boolean().describe("The listing supports iPad. Recorded, and applied to no output until iPad panels ship."),
+      storefront: z4.string().describe("The two-letter storefront this was read from. It decides `baseLocale`."),
+      droppedLanguageCodes: z4.array(z4.string()).optional().describe("Apple language codes this build maps no App Store Connect locale for. Omitted when nothing was dropped.")
+    }).passthrough();
     saveProjectOutputSchema = z4.object({
       ok: z4.boolean(),
       // Direct authenticated saves return projectId. Unsigned local saves instead return an
@@ -3776,6 +3889,10 @@ var init_outputSchemas = __esm({
       // response stays byte-identical, and a declared-but-absent field never fails the SDK's
       // structuredContent validation (the #196 lesson — an output field is never made required).
       outputs: z4.array(z4.string()).optional(),
+      // #1004 — the App Store app this save linked the project to, echoed so the caller can see the
+      // identity it now carries without a second read. Emitted ONLY when the call passed an
+      // `appListing` reference; a save that did not link one answers exactly as it did before.
+      linkedApp: appListingOutput.optional(),
       // #224 — save_project used to DROP this entirely: it destructured `{ look, style }` out of
       // resolveLook and never forwarded the note, on the one tool where a wrong composition is
       // PERSISTED rather than merely rendered.
@@ -3835,13 +3952,21 @@ var init_outputSchemas = __esm({
         "One row per shot \xD7 target-family \xD7 locale. `resolvedAt` names the manifest cell used; `inherited` says which requested axes fell back. This is the authoritative coverage report."
       )
     }).passthrough().optional();
+    searchAppListingOutputSchema = z4.object({
+      ok: z4.boolean(),
+      results: z4.array(appListingOutput),
+      message: z4.string()
+    }).passthrough();
     readProjectOutputSchema = z4.object({
       saved: z4.boolean(),
       project: projectSummary.optional(),
       message: z4.string().optional(),
       layout: layoutReportOutput,
       screenshots: storedScreenshots,
-      history: lookHistoryAccess
+      history: lookHistoryAccess,
+      // #1004 — the App Store app this project is linked to. Omitted entirely for a project that
+      // carries none, which is every project created without one.
+      linkedApp: appListingOutput.optional()
     }).passthrough();
     agentOutcomeOutput = z4.object({
       status: z4.enum([
@@ -4063,6 +4188,7 @@ var init_outputSchemas = __esm({
     saveProjectToolOutputSchema = advertisedWithFailure(saveProjectOutputSchema);
     readLookToolOutputSchema = advertisedWithFailure(readLookOutputSchema);
     readProjectToolOutputSchema = advertisedWithFailure(readProjectOutputSchema);
+    searchAppListingToolOutputSchema = advertisedWithFailure(searchAppListingOutputSchema);
     saveLookToolOutputSchema = advertisedWithFailure(saveLookOutputSchema);
     holdLookToolOutputSchema = advertisedWithFailure(holdLookOutputSchema);
     releaseLookToolOutputSchema = advertisedWithFailure(releaseLookOutputSchema);
@@ -4074,7 +4200,7 @@ var init_outputSchemas = __esm({
 
 // src/contracts/schemas.ts
 import { z as z5 } from "zod";
-var nameField, inlineBase64Entry, refEntry, urlEntry, pathEntry, singleScreenshotEntry, localeScreenshotEntry, screenshotEntry, screenshotsDescription, slot, flatScreenshots, groupedScreenshots, screenshots, screenshotsForSaveDescription, screenshotsForSave, screenshotsOptionalDescription, screenshotsOptional, panelRef, pathPanel, panelEntry, localePanelRef, panelEntryUnion, panelsDescription, panelRefs, output, outputDeviceArray, outputDeviceList, outputsDescription, outputsField, projectOutputsDescription, projectOutputsField, clip, preview, idempotencyKey, panelPresetId, useSavedLook, locale, localesField, project, version, createProjectFlag, projectName, sourceDir, waiverShape, waiversField, renderStripShape, emitBundleShape, saveProjectShape, readLookShape, readProjectShape, refineProjectFocus, refineProjectShape, projectRefEntry, projectUrlEntry, projectPathEntry, projectScreenshotEntry, screenshotFileListDescription, screenshotFileList, renderProjectShape, productionOperationShape, SAVE_LOOK_LOOK_DESCRIPTION, saveLookShape, heldVersion, holdLookShape, releaseLookShape, describeLookShape, accountStatusShape, requestScreenshotUploadShape, deleteAssetsShape, FILE_URL_DESCRIPTION, FILE_ID_DESCRIPTION, FILE_MIME_DESCRIPTION, FILE_NAME_DESCRIPTION, FILE_DESCRIPTION, chatGptFile, importSourceName, importUrlSource, importFileSource, importPathSource, importSourceEntry, importScreenshotsDescription, importScreenshotShape, advertisedChatGptFile, advertisedOutputsField, advertisedProjectOutputsField, renderStripAdvertisedShape, emitBundleAdvertisedShape, saveProjectAdvertisedShape, saveLookAdvertisedShape, renderProjectAdvertisedShape, importScreenshotAdvertisedShape, screenshotSlotGuide, screenshotFileGuide, panelGuide, chatGptFileGuide, importSourceGuide, outputDevicesGuide, TOOL_INPUT_GUIDES;
+var nameField, inlineBase64Entry, refEntry, urlEntry, pathEntry, singleScreenshotEntry, localeScreenshotEntry, screenshotEntry, screenshotsDescription, slot, flatScreenshots, groupedScreenshots, screenshots, screenshotsForSaveDescription, screenshotsForSave, screenshotsOptionalDescription, screenshotsOptional, panelRef, pathPanel, panelEntry, localePanelRef, panelEntryUnion, panelsDescription, panelRefs, output, outputDeviceArray, outputDeviceList, outputsDescription, outputsField, projectOutputsDescription, projectOutputsField, clip, preview, idempotencyKey, panelPresetId, useSavedLook, locale, localesField, project, version, createProjectFlag, projectName, sourceDir, waiverShape, waiversField, renderStripShape, emitBundleShape, appListingReference, saveProjectShape, searchAppListingShape, readLookShape, readProjectShape, refineProjectFocus, refineProjectShape, projectRefEntry, projectUrlEntry, projectPathEntry, projectScreenshotEntry, screenshotFileListDescription, screenshotFileList, renderProjectShape, productionOperationShape, SAVE_LOOK_LOOK_DESCRIPTION, saveLookShape, heldVersion, holdLookShape, releaseLookShape, describeLookShape, accountStatusShape, requestScreenshotUploadShape, deleteAssetsShape, FILE_URL_DESCRIPTION, FILE_ID_DESCRIPTION, FILE_MIME_DESCRIPTION, FILE_NAME_DESCRIPTION, FILE_DESCRIPTION, chatGptFile, importSourceName, importUrlSource, importFileSource, importPathSource, importSourceEntry, importScreenshotsDescription, importScreenshotShape, advertisedChatGptFile, advertisedOutputsField, advertisedProjectOutputsField, renderStripAdvertisedShape, emitBundleAdvertisedShape, saveProjectAdvertisedShape, saveLookAdvertisedShape, renderProjectAdvertisedShape, importScreenshotAdvertisedShape, screenshotSlotGuide, screenshotFileGuide, panelGuide, chatGptFileGuide, importSourceGuide, outputDevicesGuide, TOOL_INPUT_GUIDES;
 var init_schemas = __esm({
   "src/contracts/schemas.ts"() {
     "use strict";
@@ -4108,7 +4234,7 @@ var init_schemas = __esm({
     flatScreenshots = z5.array(screenshotEntry).min(1).max(10).describe("Preferred: one screenshot entry per App Store panel, in display order.");
     groupedScreenshots = z5.array(slot).min(1).max(10).describe("Advanced: one nested slot per panel; put several screenshot entries in a slot for a multi-phone panel.");
     screenshots = z5.union([flatScreenshots, groupedScreenshots]).describe(screenshotsDescription);
-    screenshotsForSaveDescription = `${screenshotsDescription} NOTE: save_project does not render \u2014 it uses only each slot's SHAPE (phones per panel) and each entry's \`name\` (source filename, for re-load matching). The image bytes are never fetched or stored, so pass the same entries you rendered with (esp. their \`name\`s).`;
+    screenshotsForSaveDescription = `${screenshotsDescription} NOTE: save_project does not render and never fetches image bytes. It uses each slot's SHAPE (phones per panel), each entry's \`name\` (source filename, for re-load matching) and each { "ref" }, per-locale ones included, which it records on that entry's own frame so the project reopens with that screenshot. A ref that is not an upload under this account refuses the whole save, naming it, and nothing is written. Pass the same entries you rendered with (esp. their \`name\`s).`;
     screenshotsForSave = screenshots.describe(screenshotsForSaveDescription);
     screenshotsOptionalDescription = `${screenshotsDescription} Required unless \`panels\` (pre-rendered refs) is given instead.`;
     screenshotsOptional = screenshots.optional().describe(screenshotsOptionalDescription);
@@ -4140,9 +4266,9 @@ var init_schemas = __esm({
         seen.add(id);
       });
     });
-    outputsDescription = "Target device outputs to render into one screenshot bundle. Supported now: iphone-6-9 (1290\xD72796 / APP_IPHONE_67) and iphone-6-5 (1242\xD72688 / APP_IPHONE_65). Each is rendered from the same Look and inputs; omit this field to keep the legacy single panelPresetId form unchanged. With a `project` and no list, the project's OWN saved outputs are used. Not supported with pre-rendered `panels` refs.";
+    outputsDescription = "Target device outputs to render into one screenshot bundle. Supported now: iphone-6-9 (1320\xD72868 / APP_IPHONE_67) and iphone-6-5 (1242\xD72688 / APP_IPHONE_65). Each is rendered from the same Look and inputs; omit this field to keep the legacy single panelPresetId form unchanged. With a `project` and no list, the project's OWN saved outputs are used. Not supported with pre-rendered `panels` refs.";
     outputsField = outputDeviceList.optional().describe(outputsDescription);
-    projectOutputsDescription = "The target DEVICES this project is for \u2014 iphone-6-9 (1290\xD72796) and/or iphone-6-5 (1242\xD72688), in the order they should be offered. On save_project this is saved ON the project (the same Output list the web app shows) and the first entry becomes the previewed size unless `panelPresetId` says otherwise; on render_project it OVERRIDES the saved set for this call. Omit it and the project's saved outputs are used unchanged.";
+    projectOutputsDescription = "The target DEVICES this project is for \u2014 iphone-6-9 (1320\xD72868) and/or iphone-6-5 (1242\xD72688), in the order they should be offered. On save_project this is saved ON the project (the same Output list the web app shows) and the first entry becomes the previewed size unless `panelPresetId` says otherwise; on render_project it OVERRIDES the saved set for this call. Omit it and the project's saved outputs are used unchanged.";
     projectOutputsField = outputDeviceList.optional().describe(projectOutputsDescription);
     clip = z5.enum(["strip", "panel"]).optional().describe(MCP_TOP_LEVEL_CLIP_PRECEDENCE);
     preview = z5.boolean().optional().describe(
@@ -4151,7 +4277,7 @@ var init_schemas = __esm({
     idempotencyKey = z5.string().min(1).max(200).optional().describe(
       "Stable retry key for paid Hosted production. Reuse it only for the identical request; a new key deliberately requests a new render. Omit it for deterministic fingerprint retry safety."
     );
-    panelPresetId = z5.enum(RENDERABLE_PANEL_PRESET_IDS).optional().describe("App Store screenshot size. Default r69 (6.9\u2033 iPhone, 1290\xD72796). iPhone sizes only \u2014 iPad is not rendered yet.");
+    panelPresetId = z5.enum(RENDERABLE_PANEL_PRESET_IDS).optional().describe("App Store screenshot size. Default r69 (6.9\u2033 iPhone, 1320\xD72868). iPhone sizes only \u2014 iPad is not rendered yet.");
     useSavedLook = z5.boolean().optional().describe("If true, style the strip with the project's saved look (ignored when `look`/`style` is given).");
     locale = z5.string().optional().describe(
       'App Store locale, e.g. "de-DE" (default en-US). Labels the render, selects which { "locales": \u2026 } screenshot variants render, and, for emit_bundle, selects the fastlane screenshots folder. Does not select caption text \u2014 pass the copy for this locale yourself via `style.captions[].text` (see the README\'s `captions.<locale>.json` convention).'
@@ -4228,6 +4354,9 @@ var init_schemas = __esm({
       waivers: waiversField,
       idempotencyKey
     };
+    appListingReference = z5.string().trim().min(1).max(500).optional().describe(
+      'Link this project to its App Store listing: an App Store URL ("https://apps.apple.com/us/app/duolingo/id570060128"), a numeric app ID ("570060128"), or a bundle ID ("com.duolingo.DuolingoMobile"). The server looks the app up and the created project takes its name, bundle ID, languages and iPhone device set. Anything YOU state wins: an explicit `projectName`, `outputs` or `locale` is applied as given and the app is still linked. On an EXISTING `project` it re-links that project and rewrites nothing else \u2014 the language list, the frames and every caption stay exactly as the designer left them. Use the full store URL when the app is listed outside the US storefront; a bare ID is looked up in the US. Needs an account \u2014 an unsigned local server refuses it. Not the same field as `bundleId`, which only pre-fills a fastlane Deliverfile.'
+    );
     saveProjectShape = {
       screenshots: screenshotsForSave,
       panelPresetId,
@@ -4241,8 +4370,17 @@ var init_schemas = __esm({
       version,
       locale,
       projectName,
+      appListing: appListingReference,
       sourceDir
     };
+    searchAppListingShape = {
+      term: z5.string().trim().min(1).max(200).describe(
+        "What to search the App Store for \u2014 the app name as the user said it (\"Duolingo\"), or the developer's name. Each result carries the app ID to pass as save_project's `appListing`."
+      ),
+      country: z5.string().regex(/^[A-Za-z]{2}$/).optional().describe(
+        `The two-letter App Store storefront to search, e.g. "dk". Defaults to "us". An app released in one country only is invisible to a search of any other, so pass the user's own storefront when they say the app is not showing up.`
+      )
+    };
     readLookShape = { project };
     readProjectShape = { project };
     refineProjectFocus = z5.discriminatedUnion("kind", [
@@ -5195,6 +5333,7 @@ var init_toolRegistry = __esm({
       "save_project",
       "read_look",
       "read_project",
+      "search_app_listing",
       "render_project",
       "refine_project",
       "save_look",
@@ -5213,6 +5352,7 @@ var init_toolRegistry = __esm({
       save_project: "mutate",
       read_look: "read",
       read_project: "read",
+      search_app_listing: "read",
       render_project: "render",
       refine_project: "mutate",
       save_look: "mutate",
@@ -5330,11 +5470,11 @@ function previewUsage(deps, snapshot) {
     ...credits ? publicCreditBalance(credits) : {}
   };
 }
-function statusMessage(deps, snapshot, step) {
-  if (step === "none") {
+function statusMessage(deps, snapshot, step2) {
+  if (step2 === "none") {
     return "This connection can produce store-ready output: full-resolution render_strip and render_project, and every emit_bundle form." + (isLocal(deps) ? " Local rendering spends no cloud credits." : "");
   }
-  if (step === "sign_in" && !snapshot.authenticated && deps.anonymous) {
+  if (step2 === "sign_in" && !snapshot.authenticated && deps.anonymous) {
     return `This connection is not signed in. It can import screenshots and render up to ${ANONYMOUS.attempts} preview strips of up to ${ANONYMOUS.maxPanels} panels each per ${Math.round(ANONYMOUS.windowSeconds / 86400)} days. ` + productionDenialMessage(snapshot.productionExport, deps);
   }
   return productionDenialMessage(snapshot.productionExport, deps);
@@ -5471,6 +5611,11 @@ function operationSupported(deps, tool, account) {
       return deps.deleteAssets ? true : "hosted_connection";
     case "refine_project":
       return deps.refineProject ? true : "account";
+    // #1004 — Apple is reached through the control plane on both doors, and an unsigned caller has
+    // no door there. Derived from the bound dep AND the account, so an anonymous hosted connection
+    // is told 'account' rather than being promised a search its own security scheme refuses.
+    case "search_app_listing":
+      return deps.searchAppListing && account ? true : "account";
     case "save_project":
       return local || account ? true : "account";
     default:
@@ -5480,7 +5625,7 @@ function operationSupported(deps, tool, account) {
 async function handleAccountStatus(deps) {
   const snapshot = await readSnapshot(deps);
   const decision = snapshot.productionExport;
-  const step = accountNextStep(decision);
+  const step2 = accountNextStep(decision);
   return textResult({
     ok: true,
     connection: isLocal(deps) ? "local" : "hosted",
@@ -5506,8 +5651,8 @@ async function handleAccountStatus(deps) {
       ...decision.allowed ? {} : { reason: decision.reason },
       ...decision.allowed || !decision.requiredPlan ? {} : { requiredPlan: decision.requiredPlan }
     },
-    nextStep: step,
-    message: statusMessage(deps, snapshot, step),
+    nextStep: step2,
+    message: statusMessage(deps, snapshot, step2),
     // #662 — the capability half: accepted inputs, delivery modes, retention classes, operation
     // support, the cost model and the closed failure catalog. Additive; every field above is
     // exactly what it was.
@@ -5528,6 +5673,108 @@ var init_toolsAccount = __esm({
   }
 });
 
+// ../mockup-engine/appStoreLocales.ts
+function appStoreLocale(code) {
+  return BY_CODE[code];
+}
+var APP_STORE_LOCALE_CATALOG, APP_STORE_LOCALES, BY_CODE;
+var init_appStoreLocales = __esm({
+  "../mockup-engine/appStoreLocales.ts"() {
+    "use strict";
+    APP_STORE_LOCALE_CATALOG = [
+      { code: "ar-SA", name: "Arabic", script: "rtl", dir: "rtl" },
+      { code: "bn-BD", name: "Bengali", script: "indic", dir: "ltr" },
+      { code: "ca", name: "Catalan", script: "latin", dir: "ltr" },
+      { code: "cs", name: "Czech", script: "latin", dir: "ltr" },
+      { code: "da", name: "Danish", script: "latin", dir: "ltr" },
+      { code: "de-DE", name: "German", script: "latin", dir: "ltr" },
+      { code: "el", name: "Greek", script: "greek", dir: "ltr" },
+      { code: "en-AU", name: "English (Australia)", script: "latin", dir: "ltr" },
+      { code: "en-CA", name: "English (Canada)", script: "latin", dir: "ltr" },
+      { code: "en-GB", name: "English (U.K.)", script: "latin", dir: "ltr" },
+      { code: "en-US", name: "English (U.S.)", script: "latin", dir: "ltr" },
+      { code: "es-ES", name: "Spanish (Spain)", script: "latin", dir: "ltr" },
+      { code: "es-MX", name: "Spanish (Mexico)", script: "latin", dir: "ltr" },
+      { code: "fi", name: "Finnish", script: "latin", dir: "ltr" },
+      { code: "fr-CA", name: "French (Canada)", script: "latin", dir: "ltr" },
+      { code: "fr-FR", name: "French", script: "latin", dir: "ltr" },
+      { code: "gu-IN", name: "Gujarati", script: "indic", dir: "ltr" },
+      { code: "he", name: "Hebrew", script: "rtl", dir: "rtl" },
+      { code: "hi", name: "Hindi", script: "indic", dir: "ltr" },
+      { code: "hr", name: "Croatian", script: "latin", dir: "ltr" },
+      { code: "hu", name: "Hungarian", script: "latin", dir: "ltr" },
+      { code: "id", name: "Indonesian", script: "latin", dir: "ltr" },
+      { code: "it", name: "Italian", script: "latin", dir: "ltr" },
+      { code: "ja", name: "Japanese", script: "cjk", dir: "ltr" },
+      { code: "kn-IN", name: "Kannada", script: "indic", dir: "ltr" },
+      { code: "ko", name: "Korean", script: "cjk", dir: "ltr" },
+      { code: "ml-IN", name: "Malayalam", script: "indic", dir: "ltr" },
+      { code: "mr-IN", name: "Marathi", script: "indic", dir: "ltr" },
+      { code: "ms", name: "Malay", script: "latin", dir: "ltr" },
+      { code: "nl-NL", name: "Dutch", script: "latin", dir: "ltr" },
+      { code: "no", name: "Norwegian", script: "latin", dir: "ltr" },
+      { code: "or-IN", name: "Odia", script: "indic", dir: "ltr" },
+      { code: "pa-IN", name: "Punjabi", script: "indic", dir: "ltr" },
+      { code: "pl", name: "Polish", script: "latin", dir: "ltr" },
+      { code: "pt-BR", name: "Portuguese (Brazil)", script: "latin", dir: "ltr" },
+      { code: "pt-PT", name: "Portuguese (Portugal)", script: "latin", dir: "ltr" },
+      { code: "ro", name: "Romanian", script: "latin", dir: "ltr" },
+      { code: "ru", name: "Russian", script: "cyrillic", dir: "ltr" },
+      { code: "sk", name: "Slovak", script: "latin", dir: "ltr" },
+      { code: "sl-SI", name: "Slovenian", script: "latin", dir: "ltr" },
+      { code: "sv", name: "Swedish", script: "latin", dir: "ltr" },
+      { code: "ta-IN", name: "Tamil", script: "indic", dir: "ltr" },
+      { code: "te-IN", name: "Telugu", script: "indic", dir: "ltr" },
+      { code: "th", name: "Thai", script: "thai", dir: "ltr" },
+      { code: "tr", name: "Turkish", script: "latin", dir: "ltr" },
+      { code: "uk", name: "Ukrainian", script: "cyrillic", dir: "ltr" },
+      { code: "ur-PK", name: "Urdu", script: "rtl", dir: "rtl" },
+      { code: "vi", name: "Vietnamese", script: "latin", dir: "ltr" },
+      { code: "zh-Hans", name: "Chinese (Simplified)", script: "cjk", dir: "ltr" },
+      { code: "zh-Hant", name: "Chinese (Traditional)", script: "cjk", dir: "ltr" }
+    ];
+    APP_STORE_LOCALES = APP_STORE_LOCALE_CATALOG.map((l) => l.code);
+    BY_CODE = Object.fromEntries(
+      APP_STORE_LOCALE_CATALOG.map((l) => [l.code, l])
+    );
+  }
+});
+
+// ../mockup-engine/appstore/appListing.ts
+function readAppListing(envelope) {
+  if (envelope == null || typeof envelope !== "object" || Array.isArray(envelope)) return null;
+  const stored = envelope[APP_LISTING_ENVELOPE_KEY];
+  if (stored == null || typeof stored !== "object" || Array.isArray(stored)) return null;
+  const value = stored;
+  for (const key of ["trackId", "bundleId", "trackName", "sellerName", "storefront", "fetchedAt"]) {
+    if (typeof value[key] !== "string") return null;
+  }
+  if (!Array.isArray(value.languageCodesISO2A) || !Array.isArray(value.supportedDevices)) return null;
+  if (value.applied == null || typeof value.applied !== "object" || Array.isArray(value.applied)) return null;
+  const applied = value.applied;
+  if (typeof applied.projectName !== "string" || typeof applied.bundleId !== "string") return null;
+  if (typeof applied.baseLocale !== "string" || typeof applied.supportsIpad !== "boolean") return null;
+  for (const key of ["locales", "outputs", "droppedLanguageCodes"]) {
+    if (!Array.isArray(applied[key])) return null;
+  }
+  return stored;
+}
+function appListingRewrite(listing2) {
+  return { [APP_LISTING_ENVELOPE_KEY]: listing2 ?? void 0 };
+}
+var CATALOG_ORDER, APP_LISTING_ENVELOPE_KEY;
+var init_appListing = __esm({
+  "../mockup-engine/appstore/appListing.ts"() {
+    "use strict";
+    init_appStoreLocales();
+    init_devices();
+    CATALOG_ORDER = Object.fromEntries(
+      APP_STORE_LOCALE_CATALOG.map((locale2, index) => [locale2.code, index])
+    );
+    APP_LISTING_ENVELOPE_KEY = "appListing";
+  }
+});
+
 // ../mockup-engine/fastlaneBundle.ts
 import { strToU8, zipSync } from "fflate";
 function render(template, vars) {
@@ -5850,8 +6097,17 @@ function canonicalPersistence(look2) {
   }
   return canonical;
 }
+function upgradeLegacyShotLook(input) {
+  if (!input || typeof input !== "object" || Array.isArray(input) || !("phoneHeight" in input)) return input;
+  const { phoneHeight, ...rest } = input;
+  if (rest.deviceSize === void 0) {
+    const parsed = typeof phoneHeight === "number" ? phoneHeight : Number.parseFloat(String(phoneHeight ?? ""));
+    if (Number.isFinite(parsed)) rest.deviceSize = String(deviceSizeFromLegacyPhoneHeight(parsed));
+  }
+  return rest;
+}
 function normalizeShotLook(input) {
-  return canonicalPersistence({ ...DEFAULT_LOOK, ...input });
+  return canonicalPersistence({ ...DEFAULT_LOOK, ...upgradeLegacyShotLook(input) });
 }
 function serializeShotLook(input) {
   return canonicalPersistence(normalizeShotLook(input));
@@ -5862,7 +6118,7 @@ function comparableShotLook(input) {
 function shotLookNumber(field, raw) {
   const { min, max } = SHOT_LOOK_RANGES[field];
   const parsed = typeof raw === "number" ? raw : Number.parseFloat(raw ?? "");
-  const value = Number.isFinite(parsed) ? parsed : Number.parseFloat(DEFAULT_LOOK[field]);
+  const value = Number.isFinite(parsed) ? parsed : Number.parseFloat(String(SHOT_LOOK_DOMAIN[field].defaultValue));
   return Math.max(min, Math.min(max, value));
 }
 var init_shotLook = __esm({
@@ -5916,12 +6172,178 @@ var init_panel = __esm({
   }
 });
 
+// ../mockup-engine/storagePath.ts
+function isSafeStoragePath(path) {
+  if (path.length === 0 || path.startsWith("/") || UNSAFE_CHARACTER.test(path)) return false;
+  const body = path.endsWith("/") ? path.slice(0, -1) : path;
+  return body.split("/").every((segment) => segment.length > 0 && segment !== "." && segment !== "..");
+}
+var UNSAFE_CHARACTER;
+var init_storagePath = __esm({
+  "../mockup-engine/storagePath.ts"() {
+    "use strict";
+    UNSAFE_CHARACTER = /[%\\?#\u0000-\u001f\u007f]/;
+  }
+});
+
+// ../mockup-engine/appstore/fingerprint.ts
+function isScreenshotFingerprint(value) {
+  return typeof value === "string" && SCREENSHOT_FINGERPRINT.test(value);
+}
+async function screenshotFingerprint(bytes) {
+  const subtle = globalThis.crypto?.subtle;
+  if (subtle) return hex(new Uint8Array(await subtle.digest("SHA-256", bytes)));
+  return sha256(bytes);
+}
+function sha256(input) {
+  const length = input.length;
+  const padded = new Uint8Array(length + 72 >> 6 << 6);
+  padded.set(input);
+  padded[length] = 128;
+  const bits = length * 8;
+  const view = new DataView(padded.buffer);
+  view.setUint32(padded.length - 8, Math.floor(bits / 4294967296));
+  view.setUint32(padded.length - 4, bits >>> 0);
+  const h = new Uint32Array([
+    1779033703,
+    3144134277,
+    1013904242,
+    2773480762,
+    1359893119,
+    2600822924,
+    528734635,
+    1541459225
+  ]);
+  const w = new Uint32Array(64);
+  for (let block = 0; block < padded.length; block += 64) {
+    for (let i = 0; i < 16; i++) w[i] = view.getUint32(block + i * 4);
+    for (let i = 16; i < 64; i++) {
+      const a2 = w[i - 15];
+      const b2 = w[i - 2];
+      const s0 = rotr(a2, 7) ^ rotr(a2, 18) ^ a2 >>> 3;
+      const s1 = rotr(b2, 17) ^ rotr(b2, 19) ^ b2 >>> 10;
+      w[i] = w[i - 16] + s0 + w[i - 7] + s1 >>> 0;
+    }
+    let [a, b, c, d, e, f, g, hh] = [h[0], h[1], h[2], h[3], h[4], h[5], h[6], h[7]];
+    for (let i = 0; i < 64; i++) {
+      const s1 = rotr(e, 6) ^ rotr(e, 11) ^ rotr(e, 25);
+      const choose = e & f ^ ~e & g;
+      const t1 = hh + s1 + choose + K[i] + w[i] >>> 0;
+      const s0 = rotr(a, 2) ^ rotr(a, 13) ^ rotr(a, 22);
+      const majority = a & b ^ a & c ^ b & c;
+      const t2 = s0 + majority >>> 0;
+      hh = g;
+      g = f;
+      f = e;
+      e = d + t1 >>> 0;
+      d = c;
+      c = b;
+      b = a;
+      a = t1 + t2 >>> 0;
+    }
+    h[0] = h[0] + a >>> 0;
+    h[1] = h[1] + b >>> 0;
+    h[2] = h[2] + c >>> 0;
+    h[3] = h[3] + d >>> 0;
+    h[4] = h[4] + e >>> 0;
+    h[5] = h[5] + f >>> 0;
+    h[6] = h[6] + g >>> 0;
+    h[7] = h[7] + hh >>> 0;
+  }
+  return hex(bigEndian(h));
+}
+function bigEndian(words) {
+  const out = new Uint8Array(words.length * 4);
+  const view = new DataView(out.buffer);
+  for (let i = 0; i < words.length; i++) view.setUint32(i * 4, words[i]);
+  return out;
+}
+var SCREENSHOT_FINGERPRINT, hex, K, rotr;
+var init_fingerprint = __esm({
+  "../mockup-engine/appstore/fingerprint.ts"() {
+    "use strict";
+    SCREENSHOT_FINGERPRINT = /^[a-f0-9]{64}$/;
+    hex = (bytes) => {
+      let out = "";
+      for (let i = 0; i < bytes.length; i++) out += bytes[i].toString(16).padStart(2, "0");
+      return out;
+    };
+    K = new Uint32Array([
+      1116352408,
+      1899447441,
+      3049323471,
+      3921009573,
+      961987163,
+      1508970993,
+      2453635748,
+      2870763221,
+      3624381080,
+      310598401,
+      607225278,
+      1426881987,
+      1925078388,
+      2162078206,
+      2614888103,
+      3248222580,
+      3835390401,
+      4022224774,
+      264347078,
+      604807628,
+      770255983,
+      1249150122,
+      1555081692,
+      1996064986,
+      2554220882,
+      2821834349,
+      2952996808,
+      3210313671,
+      3336571891,
+      3584528711,
+      113926993,
+      338241895,
+      666307205,
+      773529912,
+      1294757372,
+      1396182291,
+      1695183700,
+      1986661051,
+      2177026350,
+      2456956037,
+      2730485921,
+      2820302411,
+      3259730800,
+      3345764771,
+      3516065817,
+      3600352804,
+      4094571909,
+      275423344,
+      430227734,
+      506948616,
+      659060556,
+      883997877,
+      958139571,
+      1322822218,
+      1537002063,
+      1747873779,
+      1955562222,
+      2024104815,
+      2227730452,
+      2361852424,
+      2428436474,
+      2756734187,
+      3204031479,
+      3329325298
+    ]);
+    rotr = (value, by) => value >>> by | value << 32 - by;
+  }
+});
+
 // ../mockup-engine/appstore/screenManifest.ts
 function isShotManifestEntry(entry) {
   return typeof entry.shotId === "string";
 }
 function manifestRefUploader(ref) {
-  if (ref.includes("..")) return null;
+  if (!isSafeStoragePath(ref)) return null;
   const match = UPLOAD_REF_RE.exec(ref);
   if (!match || !UUID_RE.test(match[1])) return null;
   return match[1];
@@ -6019,7 +6441,7 @@ function parseList(raw, mode, baseLocale) {
     const shotId = e.shotId === void 0 || e.shotId === null ? void 0 : e.shotId;
     const slot2 = e.slot === void 0 || e.slot === null ? void 0 : e.slot;
     const identified = typeof shotId === "string" && shotId.length > 0 && slot2 === void 0 || typeof slot2 === "string" && slot2.length > 0 && shotId === void 0;
-    if (!identified || typeof e.ref !== "string" || e.ref.length === 0 || variant === null || hash !== void 0 && (typeof hash !== "string" || hash.length === 0)) {
+    if (!identified || typeof e.ref !== "string" || e.ref.length === 0 || variant === null || hash !== void 0 && !isScreenshotFingerprint(hash)) {
       if (mode === "strict") return null;
       continue;
     }
@@ -6167,25 +6589,13 @@ function rebindManifestToShots(cells, shots) {
   }
   return { manifest, findings };
 }
-function manifestFromNamedRefs(refs, shots) {
-  const idsByFrameName = shotIdsByFrameName(shots);
-  const out = [];
-  for (const [name, ref] of Object.entries(refs)) {
-    const canonical = canonicalizeManifestRef(ref);
-    const ids = idsByFrameName[name];
-    if (ids === void 0) out.push({ slot: name, variant: {}, ref: canonical });
-    else for (const id of ids) out.push({ shotId: id, variant: {}, ref: canonical });
-  }
-  return out;
-}
-function nonBaseCellEntries(manifest) {
-  return manifest.filter((e) => variantKey(e.variant) !== "");
-}
 var UPLOAD_REF_RE, UUID_RE, TRUNCATED_NAMED_UPLOAD_REF, EMPTY;
 var init_screenManifest = __esm({
   "../mockup-engine/appstore/screenManifest.ts"() {
     "use strict";
+    init_storagePath();
     init_variant();
+    init_fingerprint();
     UPLOAD_REF_RE = /^uploads\/([^/]+)\/([^/]+(?:\/[^/]+)*)$/;
     UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
     TRUNCATED_NAMED_UPLOAD_REF = /^uploads\/[^/]+\/[^/]+\/\d+__[A-Za-z0-9_-]+$/;
@@ -6193,6 +6603,23 @@ var init_screenManifest = __esm({
   }
 });
 
+// ../mockup-engine/appstore/screenUploadPlan.ts
+function planScreenUploads(current, manifest, shots) {
+  const byCell = resolveScreenManifest(manifest, shots).byShotCell;
+  const toUpload = [];
+  for (const c of current) {
+    const stored = byCell[manifestShotCellKey(c.shotId, c.variant)];
+    if (stored === void 0 || stored.hash !== c.hash) toUpload.push(c);
+  }
+  return { toUpload, kept: manifest };
+}
+var init_screenUploadPlan = __esm({
+  "../mockup-engine/appstore/screenUploadPlan.ts"() {
+    "use strict";
+    init_screenManifest();
+  }
+});
+
 // ../mockup-engine/appstore/localeAxis.ts
 function deriveLocales(captionText, explicit, baseLocale = DEFAULT_LOCALE) {
   const dedupe2 = (list) => {
@@ -6252,9 +6679,20 @@ function normalizeLegacyLocales(captionText, locales) {
   }
   return { captionText: nextCaption, locales: locales?.map((c) => LEGACY_LOCALE_ALIASES[c] ?? c) };
 }
-var LEGACY_LOCALE_ALIASES;
-var init_localeAxis = __esm({
-  "../mockup-engine/appstore/localeAxis.ts"() {
+function projectLocaleAxis(projectFile) {
+  const file = projectFile ?? {};
+  const baseLocaleRaw = normalizeBaseLocale(file.baseLocale);
+  const explicit = Array.isArray(file.locales) ? file.locales.filter((locale2) => typeof locale2 === "string" && locale2.length > 0) : void 0;
+  const { captionText, locales } = normalizeLegacyLocales(
+    normalizeCaptionText(file.captionText, file.captionStyles, baseLocaleRaw),
+    explicit
+  );
+  const baseLocale = normalizeLegacyLocales({ [baseLocaleRaw]: {} }, [baseLocaleRaw]).locales?.[0] ?? baseLocaleRaw;
+  return { captionText, locales: deriveLocales(captionText, locales, baseLocale), baseLocale };
+}
+var LEGACY_LOCALE_ALIASES;
+var init_localeAxis = __esm({
+  "../mockup-engine/appstore/localeAxis.ts"() {
     "use strict";
     init_captionModel();
     LEGACY_LOCALE_ALIASES = {
@@ -6552,6 +6990,16 @@ var init_layout = __esm({
   }
 });
 
+// ../mockup-engine/appstore/framelessCard.ts
+var FRAMELESS_BLANK_ASPECT;
+var init_framelessCard = __esm({
+  "../mockup-engine/appstore/framelessCard.ts"() {
+    "use strict";
+    init_shotLook();
+    FRAMELESS_BLANK_ASPECT = 9 / 19.5;
+  }
+});
+
 // ../mockup-engine/appstore/serialize.ts
 function extractStripStyle(state, captionText, baseLocale = DEFAULT_LOCALE) {
   const gradient = stripGradientOf(state);
@@ -6821,20 +7269,15 @@ function restoreProject(json) {
   const panels = file.panels.map((p) => ({ id: p.id }));
   reseedIdCounters(shots.map((s) => s.id), panels.map((p) => p.id));
   const selectedShotId = file.selectedShotId && shots.some((s) => s.id === file.selectedShotId) ? file.selectedShotId : shots[0]?.id ?? null;
-  const baseLocaleRaw = normalizeBaseLocale(file.baseLocale);
-  const { captionText, locales: normalizedLocales } = normalizeLegacyLocales(
-    normalizeCaptionText(file.captionText, file.captionStyles, baseLocaleRaw),
-    file.locales
-  );
-  const baseLocale = normalizeLegacyLocales({ [baseLocaleRaw]: {} }, [baseLocaleRaw]).locales?.[0] ?? baseLocaleRaw;
-  const locales = deriveLocales(captionText, normalizedLocales, baseLocale);
+  const { captionText, locales, baseLocale } = projectLocaleAxis(file);
+  const output2 = projectOutputAxis(file);
   const captionSlotIds2 = normalizeCaptionSlotIds(file.captionSlotIds, captionText, panels.map((panel) => panel.id));
   const canonicalGradient = normalizeGradient(file.gradientStops, file.gradientAngle);
   return {
     shots: shotsInPanelOrder(shots, panels),
     panels,
     selectedShotId,
-    panelPresetId: presetById(file.panelPresetId).id,
+    panelPresetId: output2.panelPresetId,
     bgMode: file.bgMode === "perPanel" ? "perPanel" : "gradient",
     // Canonical first, and spread so an old record carries neither key rather than two undefineds.
     // #556 — when it IS there, the mirror is DERIVED from it rather than copied off the record: a
@@ -6868,7 +7311,7 @@ function restoreProject(json) {
     ),
     // Stored device list trusted verbatim (unknown/comingSoon ids dropped); an old record with no
     // `outputs` migrates from its panelPresetId (deriveOutputs) so it loads with a coherent device.
-    outputs: deriveOutputs(file.outputs, file.panelPresetId),
+    outputs: output2.outputs,
     // The record carries no per-locale bytes (rule 1) — the studio re-joins them from the byte-cache
     // by frameName after restore (Phase 3). {} = the pre-join shape.
     localeScreens: {},
@@ -6940,7 +7383,6 @@ function serializeProject(state) {
 var init_project = __esm({
   "../mockup-engine/appstore/project.ts"() {
     "use strict";
-    init_presets();
     init_devices();
     init_shotLook();
     init_panel();
@@ -7818,9 +8260,19 @@ function applicationOutcome(facts) {
 }
 function headlineForChanges(changed) {
   const first = changed[0] ?? "Updated this project.";
+  const whole = changed.join(" \xB7 ");
+  if (changed.length <= 1 || whole.length <= AGENT_OUTCOME_BOUNDS.headline) {
+    return boundOutcomeText(changed.length > 0 ? whole : first, AGENT_OUTCOME_BOUNDS.headline);
+  }
+  let kept = changed.length - 1;
+  while (kept > 1) {
+    const rest2 = changed.length - kept;
+    const candidate = `${changed.slice(0, kept).join(" \xB7 ")} (+${rest2} more change${rest2 === 1 ? "" : "s"})`;
+    if (candidate.length <= AGENT_OUTCOME_BOUNDS.headline) return candidate;
+    kept -= 1;
+  }
   const rest = changed.length - 1;
-  const headline = rest > 0 ? `${first} (+${rest} more change${rest === 1 ? "" : "s"})` : first;
-  return boundOutcomeText(headline, AGENT_OUTCOME_BOUNDS.headline);
+  return boundOutcomeText(`${first} (+${rest} more change${rest === 1 ? "" : "s"})`, AGENT_OUTCOME_BOUNDS.headline);
 }
 function failureOutcome(reason, headline) {
   return {
@@ -7970,7 +8422,7 @@ function lookFromAiShotPatch(current, patch, allowHOffset) {
   }
   if (patch.orbit !== void 0) next.cameraPos = posFromAzimuthDeg(normalizedAzimuth(patch.orbit));
   if (patch.roll !== void 0) next.roll = String(shotLookNumber("roll", patch.roll));
-  if (patch.phoneHeight !== void 0) next.phoneHeight = String(shotLookNumber("phoneHeight", patch.phoneHeight));
+  if (patch.deviceSize !== void 0) next.deviceSize = String(shotLookNumber("deviceSize", patch.deviceSize));
   if (patch.hOffset !== void 0 && allowHOffset) next.hOffset = String(shotLookNumber("hOffset", patch.hOffset));
   if (patch.vOffset !== void 0) next.vOffset = String(shotLookNumber("vOffset", patch.vOffset));
   if (patch.material !== void 0) next.material = patch.material;
@@ -7992,6 +8444,13 @@ function lookFromAiShotPatch(current, patch, allowHOffset) {
   if (patch.reflections !== void 0) next.reflections = patch.reflections;
   if (patch.clipToFrame === true) next.clipToFrame = true;
   else if (patch.clipToFrame === false) delete next.clipToFrame;
+  if (patch.deviceFrame === false) next.deviceFrame = false;
+  else if (patch.deviceFrame === true) delete next.deviceFrame;
+  if (patch.screenCornerRadius !== void 0) {
+    const radius = String(shotLookNumber("screenCornerRadius", patch.screenCornerRadius));
+    if (radius === SHOT_LOOK_DOMAIN.screenCornerRadius.defaultValue) delete next.screenCornerRadius;
+    else next.screenCornerRadius = radius;
+  }
   return JSON.stringify(next) === JSON.stringify(current) ? current : next;
 }
 function resolveCaptionNumber(input, current, range) {
@@ -8041,6 +8500,7 @@ var init_refinementValues = __esm({
     init_gradient();
     init_panel();
     init_refineIntent();
+    init_defaults();
     init_shotLook();
     AI_SHOT_LOOK_PROJECTION = {
       angle: {
@@ -8060,10 +8520,10 @@ var init_refinementValues = __esm({
         reason: "numeric-string",
         project: (look2) => ({ roll: shotLookNumber("roll", look2.roll) })
       },
-      phoneHeight: {
+      deviceSize: {
         disposition: "transformed",
         reason: "numeric-string",
-        project: (look2) => ({ phoneHeight: shotLookNumber("phoneHeight", look2.phoneHeight) })
+        project: (look2) => ({ deviceSize: shotLookNumber("deviceSize", look2.deviceSize) })
       },
       hOffset: {
         disposition: "transformed",
@@ -8120,6 +8580,16 @@ var init_refinementValues = __esm({
         reason: "false-is-absence",
         project: (look2) => ({ clipToFrame: look2.clipToFrame === true })
       },
+      deviceFrame: {
+        disposition: "transformed",
+        reason: "true-is-default",
+        project: (look2) => ({ deviceFrame: look2.deviceFrame !== false })
+      },
+      screenCornerRadius: {
+        disposition: "transformed",
+        reason: "numeric-string",
+        project: (look2) => ({ screenCornerRadius: shotLookNumber("screenCornerRadius", look2.screenCornerRadius) })
+      },
       glare: {
         disposition: "direct",
         reason: "same-value",
@@ -8841,7 +9311,7 @@ var TEMPLATE_OWNED_SHOT_FIELDS;
 var init_templatePoseGuard = __esm({
   "../mockup-engine/appstore/templatePoseGuard.ts"() {
     "use strict";
-    TEMPLATE_OWNED_SHOT_FIELDS = ["orbit", "roll", "angle", "phoneHeight", "hOffset", "vOffset"];
+    TEMPLATE_OWNED_SHOT_FIELDS = ["orbit", "roll", "angle", "deviceSize", "hOffset", "vOffset"];
   }
 });
 
@@ -9117,6 +9587,33 @@ function applyProjectRefinementWithAssets(state, patch, panelIds, assets = []) {
       ).patch;
     }
   }
+  const layoutFrames = patch.frames?.length === positionalCount ? patch.frames : void 0;
+  if (layoutFrames?.some((frame) => frame?.layout)) {
+    const panelsByTemplate = {};
+    const order = [];
+    requestedPanelIds.forEach((panelId, index) => {
+      const id = layoutFrames[index]?.layout;
+      if (!id || !surviving.has(panelId)) return;
+      if (!panelsByTemplate[id]) {
+        panelsByTemplate[id] = [];
+        order.push(id);
+      }
+      panelsByTemplate[id].push(panelId);
+    });
+    for (const id of order) {
+      const panelIds2 = panelsByTemplate[id];
+      next = applyLayout(next, id, panelIds2);
+      if (layoutTemplateById(id)) {
+        const shots = next.shots;
+        patch = dropTemplatePoses(
+          patch,
+          new Set(panelIds2),
+          requestedPanelIds,
+          (deviceId) => shots.find((shot) => shot.id === deviceId)?.panelId
+        ).patch;
+      }
+    }
+  }
   if (patch.shots?.length === positionalCount) {
     const entries = new Map(requestedPanelIds.map((panelId, index) => [panelId, patch.shots[index]]));
     const shared = new Set(
@@ -9178,11 +9675,16 @@ function applyProjectRefinementWithAssets(state, patch, panelIds, assets = []) {
       ...stripBackground.floorReflection !== void 0 ? { floorReflection: stripBackground.floorReflection } : {}
     };
   }
-  if (frameEntries?.some((frame) => frame.background && Object.keys(frame.background).length > 0)) {
+  if (frameEntries?.some((frame) => frame.clearBackground || frame.background && Object.keys(frame.background).length > 0)) {
     const inherited = panelBackgroundFromGradientPatch(stripGradientOf(next));
     const panelBackgrounds = { ...next.panelBackgrounds };
     let changed = false;
     requestedPanelIds.forEach((panelId, index) => {
+      if (frameEntries[index]?.clearBackground && surviving.has(panelId)) {
+        delete panelBackgrounds[panelId];
+        changed = true;
+        return;
+      }
       const entry = frameEntries[index]?.background;
       if (!entry || Object.keys(entry).length === 0 || !surviving.has(panelId)) return;
       const gradient = gradientFromAiBackground(backgroundGradient(panelBackgrounds[panelId] ?? inherited), entry);
@@ -9193,7 +9695,11 @@ function applyProjectRefinementWithAssets(state, patch, panelIds, assets = []) {
     if (changed) next = { ...next, panelBackgrounds };
   }
   if (patch.outputs) {
-    const wanted = patch.outputs;
+    const valid = patch.outputs.filter((id, index, all) => {
+      const device = deviceById(id);
+      return device && !device.comingSoon && all.indexOf(id) === index;
+    });
+    const wanted = valid.length > 0 ? valid : next.outputs;
     const outputCaptions = pruneOutputFamilies(next.outputCaptions, wanted);
     const outputScreens = next.outputScreens === void 0 ? void 0 : pruneOutputFamilies(next.outputScreens, wanted);
     const previewPresetId = next.previewPresetId === void 0 ? void 0 : wanted.some((id) => deviceById(id)?.panelPresetId === next.previewPresetId) ? next.previewPresetId : deviceById(wanted[0])?.panelPresetId ?? next.previewPresetId;
@@ -9259,73 +9765,6 @@ var init_refinement = __esm({
   }
 });
 
-// ../mockup-engine/appStoreLocales.ts
-function appStoreLocale(code) {
-  return BY_CODE[code];
-}
-var APP_STORE_LOCALE_CATALOG, APP_STORE_LOCALES, BY_CODE;
-var init_appStoreLocales = __esm({
-  "../mockup-engine/appStoreLocales.ts"() {
-    "use strict";
-    APP_STORE_LOCALE_CATALOG = [
-      { code: "ar-SA", name: "Arabic", script: "rtl", dir: "rtl" },
-      { code: "bn-BD", name: "Bengali", script: "indic", dir: "ltr" },
-      { code: "ca", name: "Catalan", script: "latin", dir: "ltr" },
-      { code: "cs", name: "Czech", script: "latin", dir: "ltr" },
-      { code: "da", name: "Danish", script: "latin", dir: "ltr" },
-      { code: "de-DE", name: "German", script: "latin", dir: "ltr" },
-      { code: "el", name: "Greek", script: "greek", dir: "ltr" },
-      { code: "en-AU", name: "English (Australia)", script: "latin", dir: "ltr" },
-      { code: "en-CA", name: "English (Canada)", script: "latin", dir: "ltr" },
-      { code: "en-GB", name: "English (U.K.)", script: "latin", dir: "ltr" },
-      { code: "en-US", name: "English (U.S.)", script: "latin", dir: "ltr" },
-      { code: "es-ES", name: "Spanish (Spain)", script: "latin", dir: "ltr" },
-      { code: "es-MX", name: "Spanish (Mexico)", script: "latin", dir: "ltr" },
-      { code: "fi", name: "Finnish", script: "latin", dir: "ltr" },
-      { code: "fr-CA", name: "French (Canada)", script: "latin", dir: "ltr" },
-      { code: "fr-FR", name: "French", script: "latin", dir: "ltr" },
-      { code: "gu-IN", name: "Gujarati", script: "indic", dir: "ltr" },
-      { code: "he", name: "Hebrew", script: "rtl", dir: "rtl" },
-      { code: "hi", name: "Hindi", script: "indic", dir: "ltr" },
-      { code: "hr", name: "Croatian", script: "latin", dir: "ltr" },
-      { code: "hu", name: "Hungarian", script: "latin", dir: "ltr" },
-      { code: "id", name: "Indonesian", script: "latin", dir: "ltr" },
-      { code: "it", name: "Italian", script: "latin", dir: "ltr" },
-      { code: "ja", name: "Japanese", script: "cjk", dir: "ltr" },
-      { code: "kn-IN", name: "Kannada", script: "indic", dir: "ltr" },
-      { code: "ko", name: "Korean", script: "cjk", dir: "ltr" },
-      { code: "ml-IN", name: "Malayalam", script: "indic", dir: "ltr" },
-      { code: "mr-IN", name: "Marathi", script: "indic", dir: "ltr" },
-      { code: "ms", name: "Malay", script: "latin", dir: "ltr" },
-      { code: "nl-NL", name: "Dutch", script: "latin", dir: "ltr" },
-      { code: "no", name: "Norwegian", script: "latin", dir: "ltr" },
-      { code: "or-IN", name: "Odia", script: "indic", dir: "ltr" },
-      { code: "pa-IN", name: "Punjabi", script: "indic", dir: "ltr" },
-      { code: "pl", name: "Polish", script: "latin", dir: "ltr" },
-      { code: "pt-BR", name: "Portuguese (Brazil)", script: "latin", dir: "ltr" },
-      { code: "pt-PT", name: "Portuguese (Portugal)", script: "latin", dir: "ltr" },
-      { code: "ro", name: "Romanian", script: "latin", dir: "ltr" },
-      { code: "ru", name: "Russian", script: "cyrillic", dir: "ltr" },
-      { code: "sk", name: "Slovak", script: "latin", dir: "ltr" },
-      { code: "sl-SI", name: "Slovenian", script: "latin", dir: "ltr" },
-      { code: "sv", name: "Swedish", script: "latin", dir: "ltr" },
-      { code: "ta-IN", name: "Tamil", script: "indic", dir: "ltr" },
-      { code: "te-IN", name: "Telugu", script: "indic", dir: "ltr" },
-      { code: "th", name: "Thai", script: "thai", dir: "ltr" },
-      { code: "tr", name: "Turkish", script: "latin", dir: "ltr" },
-      { code: "uk", name: "Ukrainian", script: "cyrillic", dir: "ltr" },
-      { code: "ur-PK", name: "Urdu", script: "rtl", dir: "rtl" },
-      { code: "vi", name: "Vietnamese", script: "latin", dir: "ltr" },
-      { code: "zh-Hans", name: "Chinese (Simplified)", script: "cjk", dir: "ltr" },
-      { code: "zh-Hant", name: "Chinese (Traditional)", script: "cjk", dir: "ltr" }
-    ];
-    APP_STORE_LOCALES = APP_STORE_LOCALE_CATALOG.map((l) => l.code);
-    BY_CODE = Object.fromEntries(
-      APP_STORE_LOCALE_CATALOG.map((l) => [l.code, l])
-    );
-  }
-});
-
 // ../mockup-engine/appstore/agentTurnRepetition.ts
 function appliedOperationOf(operation) {
   if (!NON_REPEATABLE_OPS.has(operation.op)) return null;
@@ -9400,7 +9839,360 @@ var init_agentTurnRepetition = __esm({
   }
 });
 
+// ../mockup-engine/appstore/agentTurnAdjustments.ts
+function step(field, from, to) {
+  if (field !== "orbit") return to - from;
+  return ((to - from) % 360 + 540) % 360 - 180;
+}
+function pushesFurther(field, start, now, proposed) {
+  if (typeof start !== "number" || typeof now !== "number" || typeof proposed !== "number") return false;
+  const moved = step(field, start, now);
+  const next = step(field, now, proposed);
+  return moved !== 0 && next !== 0 && Math.sign(moved) === Math.sign(next);
+}
+function deviceLooks(state) {
+  const looks = {};
+  for (const shot of state.shots) looks[shot.id] = aiShotPatchFromLook(shot.look);
+  return looks;
+}
+function deviceRepeats(entry, deviceId, start, now) {
+  const from = start[deviceId];
+  const at = now[deviceId];
+  if (!from || !at) return [];
+  return ADJUSTABLE_DEVICE_FIELDS.filter((field) => pushesFurther(field, from[field], at[field], entry[field]));
+}
+function withoutFields(entry, fields2) {
+  const kept = { ...entry };
+  for (const field of fields2) delete kept[field];
+  return kept;
+}
+function baseLayers(state, panelId) {
+  return state.captionText[state.baseLocale]?.[panelId];
+}
+function effectiveCaptionValue(layer, field) {
+  const value = layer[field];
+  if (typeof value === "number") return value;
+  switch (field) {
+    case "lineHeight":
+    case "bandInset":
+    case "bandCenter":
+      return CAPTION_STYLE_DEFAULTS[field];
+    case "reserveLines":
+      return layer.text.split("\n").length;
+    default:
+      return void 0;
+  }
+}
+function captionRepeats(style2, start, now) {
+  if (!start || !now || start.length !== now.length || now.length === 0) return [];
+  return ADJUSTABLE_CAPTION_FIELDS.filter((field) => style2[field] !== void 0 && now.some((layer, index) => {
+    const applied = captionLayerFromAiPatch(layer, { [field]: style2[field] });
+    if (applied === layer) return false;
+    return pushesFurther(
+      field,
+      effectiveCaptionValue(start[index], field),
+      effectiveCaptionValue(layer, field),
+      effectiveCaptionValue(applied, field)
+    );
+  }));
+}
+function dropRepeatedAdjustments(patch, context) {
+  const dropped = [];
+  const start = deviceLooks(context.start);
+  const now = deviceLooks(context.now);
+  const repairing = (panelId) => panelId !== void 0 && (context.repairing?.has(panelId) ?? false);
+  const panelOfDevice = (deviceId) => context.now.shots.find((shot) => shot.id === deviceId)?.panelId;
+  let next = patch;
+  if (patch.devices) {
+    const devices = [];
+    let changed = false;
+    for (const entry of patch.devices) {
+      const repeats = repairing(panelOfDevice(entry.deviceId)) ? [] : deviceRepeats(entry.patch, entry.deviceId, start, now);
+      if (repeats.length === 0) {
+        devices.push(entry);
+        continue;
+      }
+      changed = true;
+      for (const field of repeats) dropped.push({ target: entry.deviceId, field });
+      const kept = withoutFields(entry.patch, repeats);
+      if (Object.keys(kept).length > 0) devices.push({ ...entry, patch: kept });
+    }
+    if (changed) {
+      const { devices: _replaced, ...rest } = next;
+      void _replaced;
+      next = devices.length > 0 ? { ...rest, devices } : rest;
+    }
+  }
+  if (patch.shots && patch.shots.length === context.panelIds.length) {
+    let changed = false;
+    const shots = patch.shots.map((entry, index) => {
+      const panelId = context.panelIds[index];
+      if (repairing(panelId)) return entry;
+      const repeats = [];
+      for (const shot of context.now.shots) {
+        if (shot.panelId !== panelId) continue;
+        for (const field of deviceRepeats(entry, shot.id, start, now)) {
+          if (repeats.indexOf(field) < 0) repeats.push(field);
+        }
+      }
+      if (repeats.length === 0) return entry;
+      changed = true;
+      for (const field of repeats) dropped.push({ target: `${panelId}#devices`, field });
+      return withoutFields(entry, repeats);
+    });
+    if (changed) next = { ...next, shots };
+  }
+  const frames = patch.frames && patch.frames.length === context.panelIds.length ? patch.frames : void 0;
+  if (frames) {
+    let changed = false;
+    const kept = frames.map((entry, index) => {
+      const style2 = entry.captionStyle;
+      const panelId = context.panelIds[index];
+      if (!style2 || repairing(panelId)) return entry;
+      const repeats = captionRepeats(style2, baseLayers(context.start, panelId), baseLayers(context.now, panelId));
+      if (repeats.length === 0) return entry;
+      changed = true;
+      for (const field of repeats) dropped.push({ target: `${panelId}#captions`, field });
+      const captionStyle = withoutFields(style2, repeats);
+      const { captionStyle: _replaced, ...rest } = entry;
+      void _replaced;
+      return Object.keys(captionStyle).length > 0 ? { ...rest, captionStyle } : rest;
+    });
+    if (changed) next = { ...next, frames: kept };
+  }
+  if (patch.captionStyle && !context.panelIds.some(repairing)) {
+    const stripWide = patch.captionStyle;
+    const repeats = [];
+    context.panelIds.forEach((panelId, index) => {
+      const own = frames?.[index]?.captionStyle ?? {};
+      const reaching = withoutFields(stripWide, Object.keys(own));
+      const found = captionRepeats(reaching, baseLayers(context.start, panelId), baseLayers(context.now, panelId));
+      for (const field of found) {
+        if (repeats.indexOf(field) < 0) repeats.push(field);
+      }
+    });
+    if (repeats.length > 0) {
+      for (const field of repeats) dropped.push({ target: "strip#captions", field });
+      const captionStyle = withoutFields(stripWide, repeats);
+      const { captionStyle: _replaced, ...rest } = next;
+      void _replaced;
+      next = Object.keys(captionStyle).length > 0 ? { ...rest, captionStyle } : rest;
+    }
+  }
+  return { patch: dropped.length > 0 ? next : patch, dropped };
+}
+function carriesSomething(value) {
+  if (value === void 0 || value === null) return false;
+  if (Array.isArray(value)) return value.some(carriesSomething);
+  if (typeof value === "object") return Object.keys(value).some((key) => carriesSomething(value[key]));
+  return true;
+}
+function patchChangesSomething(patch) {
+  return Object.keys(patch).some((key) => key !== "summary" && carriesSomething(patch[key]));
+}
+var ADJUSTABLE_DEVICE_FIELDS, ADJUSTABLE_CAPTION_FIELDS;
+var init_agentTurnAdjustments = __esm({
+  "../mockup-engine/appstore/agentTurnAdjustments.ts"() {
+    "use strict";
+    init_refinementValues();
+    init_caption();
+    ADJUSTABLE_DEVICE_FIELDS = [
+      "orbit",
+      "roll",
+      "deviceSize",
+      "hOffset",
+      "vOffset",
+      "finish",
+      "clearcoat",
+      "screenCornerRadius"
+    ];
+    ADJUSTABLE_CAPTION_FIELDS = ["sizePt", "maxWidth", "lineHeight", "bandInset", "bandCenter", "reserveLines"];
+  }
+});
+
+// ../mockup-engine/appstore/agentTurnLanded.ts
+function sameDeviceValue(field, proposed, applied) {
+  if (field !== "orbit") return near(proposed, applied);
+  const wrapped = ((proposed + 180) % 360 + 360) % 360 - 180;
+  return near(wrapped, applied, 0.5) || near(Math.abs(wrapped), 180, 0.5) && near(Math.abs(applied), 180, 0.5);
+}
+function deviceDifference(field, proposed, applied, sharedOffset) {
+  if (sameDeviceValue(field, proposed, applied)) return null;
+  if (field === "hOffset" && sharedOffset) return "shared_offset";
+  const range = field === "orbit" ? void 0 : SHOT_LOOK_RANGES[field];
+  if (range && (proposed < range.min || proposed > range.max) && near(clamp(proposed, range), applied)) return "held_at_limit";
+  return "set_differently";
+}
+function deviceDifferences(entry, applied, sharedOffset, out) {
+  for (const field of DEVICE_NUMBERS) {
+    const proposed = entry[field];
+    const landed = applied[field];
+    if (typeof proposed !== "number" || typeof landed !== "number") continue;
+    const difference = deviceDifference(field, proposed, landed, sharedOffset);
+    if (difference) out.add(difference);
+  }
+}
+function expectedCaptionValue(field, proposed, current) {
+  const raw = typeof proposed === "number" ? proposed : current === void 0 ? void 0 : current * clamp(proposed.scale, AI_SCALE_RANGE);
+  return raw !== void 0 && field === "reserveLines" ? Math.round(raw) : raw;
+}
+function captionDifferences(style2, before, after, alignedByPosition, out) {
+  const stated = CAPTION_NUMBERS.filter((field) => style2[field] !== void 0);
+  if (stated.length === 0) return;
+  if (!after || after.length === 0) {
+    out.add("set_differently");
+    return;
+  }
+  for (const field of stated) {
+    const proposed = style2[field];
+    if (typeof proposed !== "number" && !alignedByPosition) continue;
+    after.forEach((layer, index) => {
+      const expected = expectedCaptionValue(field, proposed, typeof proposed === "number" ? void 0 : before?.[index]?.[field]);
+      const landed = layer[field];
+      if (expected === void 0) {
+        out.add("set_differently");
+        return;
+      }
+      if (typeof landed === "number" && near(landed, expected)) return;
+      const range = CAPTION_STYLE_BOUNDS[field];
+      const limited = field === "reserveLines" ? Math.round(clamp(expected, range)) : clamp(expected, range);
+      out.add(typeof landed === "number" && !near(limited, expected) && near(landed, limited) ? "held_at_limit" : "set_differently");
+    });
+  }
+}
+function landedDifferences(before, after, patch, panelIds) {
+  const out = /* @__PURE__ */ new Set();
+  const lookOf = (shotId) => {
+    const shot = after.shots.find((candidate) => candidate.id === shotId);
+    return shot ? aiShotPatchFromLook(shot.look) : null;
+  };
+  for (const entry of patch.devices ?? []) {
+    const applied = lookOf(entry.deviceId);
+    if (applied) deviceDifferences(entry.patch, applied, false, out);
+  }
+  if (patch.shots && patch.shots.length === panelIds.length) {
+    patch.shots.forEach((entry, index) => {
+      const shots = after.shots.filter((shot) => shot.panelId === panelIds[index]);
+      for (const shot of shots) deviceDifferences(entry, aiShotPatchFromLook(shot.look), shots.length > 1, out);
+    });
+  }
+  const frames = patch.frames && patch.frames.length === panelIds.length ? patch.frames : void 0;
+  if (patch.captionStyle || frames) {
+    const beforeSlots = normalizeCaptionSlotIds(before.captionSlotIds, before.captionText, before.panels.map((panel) => panel.id));
+    const afterSlots = normalizeCaptionSlotIds(after.captionSlotIds, after.captionText, after.panels.map((panel) => panel.id));
+    panelIds.forEach((panelId, index) => {
+      const style2 = { ...patch.captionStyle, ...frames?.[index]?.captionStyle };
+      const aligned = (beforeSlots[panelId] ?? []).join("\0") === (afterSlots[panelId] ?? []).join("\0");
+      captionDifferences(
+        style2,
+        before.captionText[before.baseLocale]?.[panelId],
+        after.captionText[after.baseLocale]?.[panelId],
+        aligned,
+        out
+      );
+    });
+  }
+  return out;
+}
+var DEVICE_NUMBERS, CAPTION_NUMBERS, clamp, near;
+var init_agentTurnLanded = __esm({
+  "../mockup-engine/appstore/agentTurnLanded.ts"() {
+    "use strict";
+    init_caption();
+    init_defaults();
+    init_frameTemplates();
+    init_refineIntent();
+    init_refinementValues();
+    DEVICE_NUMBERS = ["orbit", "roll", "deviceSize", "hOffset", "vOffset", "finish", "clearcoat", "screenCornerRadius"];
+    CAPTION_NUMBERS = ["sizePt", "maxWidth", "lineHeight", "bandInset", "bandCenter", "reserveLines"];
+    clamp = (value, range) => Math.min(Math.max(value, range.min), range.max);
+    near = (a, b, tolerance = 1e-9) => Math.abs(a - b) <= tolerance;
+  }
+});
+
 // ../mockup-engine/appstore/agentTurnCoordinator.ts
+function passEffect(working, application, patch, panelIds, notApplied, focus) {
+  const landed = landedDifferences(working, application.state, patch, panelIds);
+  if (notApplied.size === 0 && landed.size === 0) return null;
+  const applied = [...describeRefinementEffect(working, application.state), ...describeAssetBindings(application.assetBindings)];
+  const lines = [applied.length > 0 ? `${applied.join(" \xB7 ")}.` : "Nothing changed in this pass."];
+  if (notApplied.size > 0) lines.push(`Not applied: ${Array.from(notApplied).map((reason) => NOT_APPLIED[reason]).join("; ")}.`);
+  if (landed.size > 0) lines.push(`Not applied as proposed: ${Array.from(landed).map((reason) => LANDED_DIFFERENTLY[reason]).join("; ")}.`);
+  return {
+    summary: lines.join(" "),
+    reachesOutsideFocus: changedOutsideFocus(working, application.state, focus)
+  };
+}
+function emptiedPassEffect(notApplied) {
+  return {
+    summary: `Nothing changed in this pass. Not applied: ${Array.from(notApplied).map((reason) => NOT_APPLIED[reason]).join("; ")}.`,
+    reachesOutsideFocus: false
+  };
+}
+function changedOutsideFocus(before, after, focus) {
+  if (focus.kind === "project") return false;
+  const frameId = focus.frameId;
+  const ownsFrame = focus.kind === "frame";
+  const slotsOf = (state) => normalizeCaptionSlotIds(state.captionSlotIds, state.captionText, state.panels.map((panel) => panel.id));
+  const beforeSlots = slotsOf(before);
+  const focusedSlot = focus.kind === "caption" ? beforeSlots[frameId]?.[focus.captionIndex] : void 0;
+  const shotsOutside = (state) => state.shots.filter((shot) => !(ownsFrame && shot.panelId === frameId)).map((shot) => focus.kind === "device" && shot.id === focus.deviceId ? { id: shot.id, panelId: shot.panelId } : { id: shot.id, panelId: shot.panelId, frameName: shot.frameName, frameNodeId: shot.frameNodeId, look: shot.look });
+  const bytesOutside = (state) => state.shots.filter((shot) => !(ownsFrame && shot.panelId === frameId) && !(focus.kind === "device" && shot.id === focus.deviceId)).map((shot) => shot.bytes);
+  const perFrame = (map) => {
+    if (!map || !ownsFrame) return map;
+    const { [frameId]: _owned, ...rest } = map;
+    void _owned;
+    return rest;
+  };
+  const outside = (state) => {
+    const {
+      selection: _selection,
+      activeLocale: _activeLocale,
+      previewPresetId: _preview,
+      outputScreens: _outputScreens,
+      localeScreens: _localeScreens,
+      selectedShotId: _selectedShotId,
+      shots: _shots,
+      captionSlotIds: _rawSlots,
+      captionText,
+      outputCaptions,
+      panelColors,
+      panelBackgrounds,
+      staleCaptionTranslations,
+      frameTemplates,
+      ...rest
+    } = state;
+    void [_selection, _activeLocale, _preview, _outputScreens, _localeScreens, _selectedShotId, _shots, _rawSlots];
+    const slots = slotsOf(state);
+    const slotAt = (panelId, index) => slots[panelId]?.[index] ?? `${panelId}#${index}`;
+    const owned = (panelId, index) => ownsFrame ? panelId === frameId : focusedSlot !== void 0 && slotAt(panelId, index) === focusedSlot;
+    const keyed = (panelId, layers) => layers.flatMap((layer, index) => owned(panelId, index) ? [] : [[slotAt(panelId, index), layer]]);
+    const byFrame = (frames) => frames && Object.keys(frames).map((panelId) => [panelId, keyed(panelId, frames[panelId])]).filter(([, entries]) => entries.length > 0);
+    const byLocale = (locales) => locales && Object.keys(locales).map((locale2) => [locale2, byFrame(locales[locale2])]);
+    return JSON.stringify({
+      rest,
+      shots: shotsOutside(state),
+      captionText: byLocale(captionText),
+      outputCaptions: outputCaptions && Object.keys(outputCaptions).map((family) => [family, byLocale(outputCaptions[family])]),
+      captionSlots: Object.keys(slots).map((panelId) => [panelId, slots[panelId].filter((_, index) => !owned(panelId, index))]).filter(([, ids]) => ids.length > 0),
+      staleCaptionTranslations: staleCaptionTranslations && Object.keys(staleCaptionTranslations).map((locale2) => [
+        locale2,
+        staleCaptionTranslations[locale2].flatMap((key) => {
+          const cut = key.lastIndexOf(":");
+          const panelId = key.slice(0, cut);
+          const index = Number(key.slice(cut + 1));
+          return owned(panelId, index) ? [] : [`${panelId}:${slotAt(panelId, index)}`];
+        }).sort()
+      ]),
+      panelColors: perFrame(panelColors),
+      panelBackgrounds: perFrame(panelBackgrounds),
+      frameTemplates: perFrame(frameTemplates)
+    });
+  };
+  const beforeBytes = bytesOutside(before);
+  const afterBytes = bytesOutside(after);
+  return outside(before) !== outside(after) || beforeBytes.length !== afterBytes.length || beforeBytes.some((bytes, index) => bytes !== afterBytes[index]);
+}
 function phaseFor(cycle) {
   return cycle === 1 ? "applying" : cycle === 2 ? "inspecting" : "adjusting";
 }
@@ -9469,6 +10261,7 @@ async function runAgentTurn(input, ports) {
   const appliedOperations = [];
   const touchedCapabilities = /* @__PURE__ */ new Set();
   const templatedPanels = /* @__PURE__ */ new Set();
+  let instructionSatisfied = false;
   let terminalOutcome = null;
   let invalid2 = false;
   let cancelled = false;
@@ -9521,10 +10314,55 @@ async function runAgentTurn(input, ports) {
     }
     interpretation ||= authorization.interpretation?.trim() || instruction;
     inspection = authorization.inspection?.trim() || "Inspected the current composed result.";
+    const notApplied = /* @__PURE__ */ new Set();
+    if (!authorization.failed && !authorization.terminalOutcome) {
+      if (authorization.patch && cycle > 1) {
+        const guarded = dropRepeatedOperations(authorization.patch, appliedOperations);
+        if (guarded.dropped.length > 0) {
+          authorization = { ...authorization, patch: guarded.patch };
+          notApplied.add("repeated_step");
+        }
+      }
+      if (authorization.patch && instructionSatisfied) {
+        const context = { start: before, now: working, panelIds: authorization.panelIds };
+        let guarded = dropRepeatedAdjustments(authorization.patch, context);
+        if (guarded.dropped.length > 0 && layoutRepairable && renderedState) {
+          const repairing = /* @__PURE__ */ new Set();
+          for (const index of ports.layoutCollisionFrames?.(rendered) ?? []) {
+            const panelId = renderedState.panels[index]?.id;
+            if (panelId) repairing.add(panelId);
+          }
+          if (repairing.size > 0) guarded = dropRepeatedAdjustments(authorization.patch, { ...context, repairing });
+        }
+        if (guarded.dropped.length > 0) {
+          authorization = {
+            ...authorization,
+            patch: patchChangesSomething(guarded.patch) ? guarded.patch : void 0
+          };
+          notApplied.add("repeated_adjustment");
+        }
+      }
+      if (authorization.patch && templatedPanels.size > 0) {
+        const shots = working.shots;
+        const guarded = dropTemplatePoses(
+          authorization.patch,
+          templatedPanels,
+          authorization.panelIds,
+          (deviceId) => shots.find((shot) => shot.id === deviceId)?.panelId
+        );
+        if (guarded.dropped) {
+          authorization = { ...authorization, patch: guarded.patch };
+          notApplied.add("template_pose");
+        }
+      }
+    }
+    const planned = !authorization.failed && !authorization.terminalOutcome;
+    const application = planned && authorization.patch ? applyProjectRefinementWithAssets(working, authorization.patch, authorization.panelIds, input.assets ?? []) : null;
+    const effect = !planned ? null : application && authorization.patch ? passEffect(working, application, authorization.patch, authorization.panelIds, notApplied, input.focus) : notApplied.size > 0 && !authorization.patch ? emptiedPassEffect(notApplied) : null;
     const pass = {
       phase,
       generationId: authorization.generationId,
-      summary: authorization.failed ? FAILED_PASS_SUMMARY[phase] : inspection,
+      summary: authorization.failed ? FAILED_PASS_SUMMARY[phase] : effect?.summary ?? inspection,
       usage: authorization.usage,
       createdAt: now()
     };
@@ -9545,29 +10383,11 @@ async function runAgentTurn(input, ports) {
       break;
     }
     remainingMismatch = authorization.remainingMismatch?.trim() || authorization.followUp?.trim() || null;
-    for (const change of authorization.broaderChanges ?? []) broaderChanges.add(change);
-    if (authorization.patch && cycle > 1) {
-      const guarded = dropRepeatedOperations(authorization.patch, appliedOperations);
-      if (guarded.dropped.length > 0) authorization = { ...authorization, patch: guarded.patch };
-    }
-    if (authorization.patch && templatedPanels.size > 0) {
-      const shots = working.shots;
-      const guarded = dropTemplatePoses(
-        authorization.patch,
-        templatedPanels,
-        authorization.panelIds,
-        (deviceId) => shots.find((shot) => shot.id === deviceId)?.panelId
-      );
-      if (guarded.dropped) authorization = { ...authorization, patch: guarded.patch };
+    if (authorization.patch && (!effect || effect.reachesOutsideFocus)) {
+      for (const change of authorization.broaderChanges ?? []) broaderChanges.add(change);
     }
     if (authorization.patch) {
       for (const id of capabilitiesForPatch(authorization.patch)) touchedCapabilities.add(id);
-      const application = applyProjectRefinementWithAssets(
-        working,
-        authorization.patch,
-        authorization.panelIds,
-        input.assets ?? []
-      );
       if (!application) {
         invalid2 = true;
         break;
@@ -9593,6 +10413,7 @@ async function runAgentTurn(input, ports) {
         assetBindings: workingAssetBindings
       };
       selected = checkpoint;
+      if (authorization.complete === true) instructionSatisfied = true;
       if (checkpoint.changed.length > 0 && (!best || checkpoint.quality >= best.quality)) best = checkpoint;
       await emit({
         type: "draft_applied",
@@ -9719,7 +10540,7 @@ async function runAgentTurn(input, ports) {
   void input.requestedCycle;
   return result;
 }
-var AGENT_TURN_PASS_CAP, AgentTurnAuthorizationError, EMPTY_USAGE, NO_CHANGE_SUMMARY, NEEDS_INPUT_SUMMARY, FAILED_PASS_SUMMARY;
+var AGENT_TURN_PASS_CAP, AgentTurnAuthorizationError, EMPTY_USAGE, NO_CHANGE_SUMMARY, NEEDS_INPUT_SUMMARY, FAILED_PASS_SUMMARY, NOT_APPLIED, LANDED_DIFFERENTLY;
 var init_agentTurnCoordinator = __esm({
   "../mockup-engine/appstore/agentTurnCoordinator.ts"() {
     "use strict";
@@ -9731,8 +10552,11 @@ var init_agentTurnCoordinator = __esm({
     init_appStoreLocales();
     init_agentAssetCustody();
     init_agentTurnRepetition();
+    init_agentTurnAdjustments();
     init_templatePoseGuard();
     init_layoutTemplates();
+    init_frameTemplates();
+    init_agentTurnLanded();
     AGENT_TURN_PASS_CAP = 3;
     AgentTurnAuthorizationError = class extends Error {
       constructor(outcome) {
@@ -9756,6 +10580,16 @@ var init_agentTurnCoordinator = __esm({
       inspecting: "The inspection pass did not complete.",
       adjusting: "The correction pass did not complete."
     };
+    NOT_APPLIED = {
+      repeated_step: "a step this turn had already taken",
+      repeated_adjustment: "a further change to what this turn had already adjusted",
+      template_pose: "a new pose for a device its layout template had placed"
+    };
+    LANDED_DIFFERENTLY = {
+      held_at_limit: "a value past its limit, which was held at the limit",
+      shared_offset: "a sideways offset for each phone of a frame that holds several, which stays shared",
+      set_differently: "a value the project took differently"
+    };
   }
 });
 
@@ -9866,6 +10700,13 @@ var init_agentTurnConformance = __esm({
           summary: "Restyled 1 device",
           broaderChanges: [],
           remainingMismatch: null
+        },
+        receipt: {
+          committed: true,
+          status: "applied",
+          generationIds: ["generation-1", "generation-2"],
+          recordVersion: 8,
+          usage: { inputTokens: 20, cacheReadTokens: 4, imageTokens: null, outputTokens: 10, totalTokens: 30 }
         }
       }
     };
@@ -9968,6 +10809,8 @@ var init_appstore = __esm({
     init_captionModel();
     init_variant();
     init_screenManifest();
+    init_fingerprint();
+    init_screenUploadPlan();
     init_productionInput();
     init_productionReadiness();
     init_localeAxis();
@@ -9977,6 +10820,7 @@ var init_appstore = __esm({
     init_localeVariants();
     init_shot();
     init_layout();
+    init_framelessCard();
     init_serialize();
     init_project();
     init_look();
@@ -10283,6 +11127,70 @@ var init_lookResolution = __esm({
   }
 });
 
+// ../mockup-engine/appstore/recordEnvelope.ts
+function isEnvelope(value) {
+  return value != null && typeof value === "object" && !Array.isArray(value);
+}
+function isBlankRecord(value) {
+  return isEnvelope(value) && value.record === 0 && value.project === void 0;
+}
+function rebuildEnvelope(stored, next) {
+  const out = isEnvelope(stored) ? { ...stored } : {};
+  const { project: project2, manifest, ...explicit } = next;
+  out.record = SAVED_RECORD_VERSION;
+  out.project = project2;
+  if ("manifest" in next) {
+    const folded = manifest ? mergeManifest([], manifest) : [];
+    if (folded.length > 0) out.handoffRefs = folded;
+    else delete out.handoffRefs;
+  }
+  for (const [key, value] of Object.entries(explicit)) {
+    if (value === void 0) delete out[key];
+    else out[key] = value;
+  }
+  return out;
+}
+function custodyUnion(...manifests) {
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const manifest of manifests) {
+    for (const entry of manifest) {
+      if (seen.has(entry.ref)) continue;
+      seen.add(entry.ref);
+      out.push(entry);
+    }
+  }
+  return out;
+}
+var SAVED_RECORD_VERSION, ENVELOPE_KEYS_A_SAVE_OWNS;
+var init_recordEnvelope = __esm({
+  "../mockup-engine/appstore/recordEnvelope.ts"() {
+    "use strict";
+    init_screenManifest();
+    SAVED_RECORD_VERSION = 2;
+    ENVELOPE_KEYS_A_SAVE_OWNS = [
+      "record",
+      "project",
+      "fastlaneBundleId",
+      "fastlaneLocale",
+      "lastBundleExportAt",
+      "lastShareAt",
+      "latestVersion",
+      "heldVersion",
+      "source",
+      "baseline",
+      "reach",
+      "handoffRefs",
+      // The App Store listing a project is linked to (#1001). OWNED, because owned is the only kind a
+      // DETACH can delete — an unowned key could never be removed. That does not oblige a save to carry
+      // it: the rule above already says an unnamed key survives. Naming it is the hazard here, so no
+      // ordinary save path may mention `appListing` — only a deliberate attach (a value) or detach
+      // (`undefined` through rebuildEnvelope, `null` through patchRecord).
+      "appListing"
+    ];
+  }
+});
+
 // ../api/_lib/projectRecord.ts
 function parseScreenPurgeRefs(value) {
   if (!Array.isArray(value)) {
@@ -10299,13 +11207,15 @@ function parseScreenPurgeRefs(value) {
   }
   return entries;
 }
-var PROJECT_RECORD_MAX_BYTES;
+var PROJECT_RECORD_MAX_BYTES, WRITABLE_ENVELOPE_KEYS;
 var init_projectRecord = __esm({
   "../api/_lib/projectRecord.ts"() {
     "use strict";
     init_projectFileGuard();
+    init_recordEnvelope();
     init_screenManifest();
     PROJECT_RECORD_MAX_BYTES = 2 * 1024 * 1024;
+    WRITABLE_ENVELOPE_KEYS = new Set(ENVELOPE_KEYS_A_SAVE_OWNS);
   }
 });
 
@@ -10447,10 +11357,14 @@ var init_supabaseRest = __esm({
 });
 
 // ../api/_lib/shareStorage.ts
+function safePath(path) {
+  if (!isSafeStoragePath(path)) throw new Error(`storage: refusing unsafe object path ${JSON.stringify(path)}`);
+  return path;
+}
 async function createSignedUploadUrl(path, options = {}) {
   const headers = serviceHeaders({ "Content-Type": "application/json" });
   if (options.upsert) headers["x-upsert"] = "true";
-  const res = await fetch(`${storageBase()}/object/upload/sign/${BUCKET}/${path}`, {
+  const res = await fetch(`${storageBase()}/object/upload/sign/${BUCKET}/${safePath(path)}`, {
     method: "POST",
     headers,
     body: JSON.stringify({})
@@ -10463,7 +11377,7 @@ async function createSignedUploadUrl(path, options = {}) {
   return { uploadUrl: `${storageBase()}${data.url}` };
 }
 async function createSignedDownloadUrl(path, expiresInSeconds, downloadFilename) {
-  const res = await fetch(`${storageBase()}/object/sign/${BUCKET}/${path}`, {
+  const res = await fetch(`${storageBase()}/object/sign/${BUCKET}/${safePath(path)}`, {
     method: "POST",
     headers: serviceHeaders({ "Content-Type": "application/json" }),
     body: JSON.stringify({ expiresIn: expiresInSeconds })
@@ -10488,7 +11402,7 @@ async function putBytes(uploadUrl, bytes, contentType) {
   }
 }
 async function downloadObject(path) {
-  const res = await fetch(`${storageBase()}/object/${BUCKET}/${path}`, { headers: serviceHeaders() });
+  const res = await fetch(`${storageBase()}/object/${BUCKET}/${safePath(path)}`, { headers: serviceHeaders() });
   if (!res.ok) {
     const body = (await res.text().catch(() => "")).slice(0, 200);
     if (res.status === 404 || /"statusCode"\s*:\s*"?404"?/.test(body) || /not_found/.test(body)) {
@@ -10499,7 +11413,7 @@ async function downloadObject(path) {
   return new Uint8Array(await res.arrayBuffer());
 }
 async function getObjectInfo(path) {
-  const res = await fetch(`${storageBase()}/object/info/${BUCKET}/${path}`, { headers: serviceHeaders() });
+  const res = await fetch(`${storageBase()}/object/info/${BUCKET}/${safePath(path)}`, { headers: serviceHeaders() });
   if (!res.ok) {
     const body = (await res.text().catch(() => "")).slice(0, 200);
     if (res.status === 404 || /"statusCode"\s*:\s*"?404"?/.test(body) || /not_found/.test(body)) {
@@ -10518,6 +11432,7 @@ var BUCKET, StorageObjectNotFoundError;
 var init_shareStorage = __esm({
   "../api/_lib/shareStorage.ts"() {
     "use strict";
+    init_storagePath();
     init_supabaseRest();
     BUCKET = "share-bundles";
     StorageObjectNotFoundError = class extends Error {
@@ -10872,7 +11787,7 @@ function uploadCustody(userId) {
 }
 function refBelongsToUser(ref, userId, now = Date.now()) {
   const prefix = `uploads/${userId}/`;
-  if (!ref.startsWith(prefix) || ref.includes("..")) return false;
+  if (!ref.startsWith(prefix) || !isSafeStoragePath(ref)) return false;
   if (!userId.startsWith(ANONYMOUS_USER_PREFIX)) return true;
   const dir = ref.slice(prefix.length).split("/")[0];
   const expiry = ANONYMOUS_DIR_EXPIRY_RE.exec(dir);
@@ -10886,17 +11801,16 @@ async function fetchUploadedRef(ref, userId) {
     await adoptLegacyAssetOnAuthorizedRead(ref, userId).catch(() => void 0);
     return await downloadObject(ref);
   } catch (err) {
-    if (err instanceof StorageObjectNotFoundError) {
-      throw new Error(
-        `no screenshot was ever uploaded for ref "${ref}". request_screenshot_upload only MINTS an upload slot \u2014 the raw PNG bytes must still be PUT to its uploadUrl before rendering (curl -T screenshot.png "$UPLOAD_URL"). If that PUT failed or was skipped, mint a fresh slot and retry it; slots are single-use and short-lived. Alternatively pass the screenshot as { "url": "https://\u2026" } and this server will fetch it for you. ` + // #180: on ChatGPT mobile the PUT can NEVER succeed (the sandbox cannot resolve the
-        // storage host), so "retry it" is not always advice an agent can take. Name the door
-        // that has no upload step at all.
-        BROWSER_FIRST_ROUTE
-      );
-    }
+    if (err instanceof StorageObjectNotFoundError) throw new Error(missingUploadMessage(ref));
     throw err;
   }
 }
+function missingUploadMessage(ref) {
+  return `no screenshot was ever uploaded for ref "${ref}". request_screenshot_upload only MINTS an upload slot \u2014 the raw PNG bytes must still be PUT to its uploadUrl before rendering (curl -T screenshot.png "$UPLOAD_URL"). If that PUT failed or was skipped, mint a fresh slot and retry it; slots are single-use and short-lived. Alternatively pass the screenshot as { "url": "https://\u2026" } and this server will fetch it for you. ` + // #180: on ChatGPT mobile the PUT can NEVER succeed (the sandbox cannot resolve the
+  // storage host), so "retry it" is not always advice an agent can take. Name the door
+  // that has no upload step at all.
+  BROWSER_FIRST_ROUTE;
+}
 async function fetchPanelRef(ref, userId) {
   if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(ref)) {
     return fetchUploadedRef(ref, userId);
@@ -11070,6 +11984,7 @@ var init_uploads = __esm({
     init_shareStorage();
     init_assetRegistry();
     init_supabaseRest();
+    init_storagePath();
     init_retentionPolicy();
     init_toolContract();
     init_pngOptimizer();
@@ -11152,7 +12067,12 @@ async function readLocalPathAsBase64(path) {
   const { bytes } = await readLocalScreenshotFile(path);
   return (await optimizeScreenshotPng(bytes, `The file at "${path}"`)).toString("base64");
 }
-async function resolvePanelBytes(entry, userId, allowLocalPath) {
+async function readOneUpload(readUploads, ref) {
+  const bytes = (await readUploads([ref])).get(ref);
+  if (!bytes) throw new Error(`the screenshot for ref "${ref}" could not be read.`);
+  return bytes;
+}
+async function resolvePanelBytes(entry, userId, allowLocalPath, readUploads) {
   if ("path" in entry) {
     if (!allowLocalPath) {
       throw new Error(
@@ -11165,14 +12085,20 @@ async function resolvePanelBytes(entry, userId, allowLocalPath) {
       throw new Error(`could not read local panel at "${entry.path}": ${err.message}`);
     }
   }
+  if (readUploads) {
+    if (PANEL_ID_RE.test(entry.ref)) throw new HostedOnlyPanelError(entry.ref);
+    return readOneUpload(readUploads, entry.ref);
+  }
   return entry.ref.includes("/") ? fetchUploadedRef(entry.ref, userId) : fetchPanelRef(entry.ref, userId);
 }
-async function resolveEntry(entry, userId, allowLocalPath) {
+async function resolveEntry(entry, userId, allowLocalPath, uploaded) {
   if (typeof entry === "string") {
     return (await optimizeScreenshotPng(Buffer.from(entry, "base64"), "Inline screenshot")).toString("base64");
   }
   if ("ref" in entry) {
-    const bytes = await fetchUploadedRef(entry.ref, userId);
+    const read = uploaded?.get(entry.ref);
+    if (uploaded && !read) throw new Error(`the screenshot for ref "${entry.ref}" could not be read.`);
+    const bytes = read ?? await fetchUploadedRef(entry.ref, userId);
     return (await optimizeScreenshotPng(bytes, `Screenshot ref "${entry.ref}"`)).toString("base64");
   }
   if ("path" in entry) {
@@ -11188,10 +12114,13 @@ async function resolveEntry(entry, userId, allowLocalPath) {
   }
   return fetchUrlAsBase64(entry.url);
 }
-async function resolveScreenshots(slots, userId, allowLocalPath = false) {
+async function resolveScreenshots(slots, userId, allowLocalPath = false, readUploads) {
   assertInlinePayloadSizeNested(slots);
-  return Promise.all(slots.map((slot2) => Promise.all(slot2.map((entry) => resolveEntry(entry, userId, allowLocalPath)))));
+  const refs = Array.from(new Set(slots.flat().flatMap((entry) => entry && typeof entry === "object" && "ref" in entry && typeof entry.ref === "string" ? [entry.ref] : [])));
+  const uploaded = readUploads && refs.length > 0 ? await readUploads(refs) : null;
+  return Promise.all(slots.map((slot2) => Promise.all(slot2.map((entry) => resolveEntry(entry, userId, allowLocalPath, uploaded)))));
 }
+var PANEL_ID_RE, HostedOnlyPanelError;
 var init_screenshotInput = __esm({
   "src/render/screenshotInput.ts"() {
     "use strict";
@@ -11199,6 +12128,15 @@ var init_screenshotInput = __esm({
     init_uploads();
     init_pngOptimizer();
     init_toolContract();
+    PANEL_ID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+    HostedOnlyPanelError = class extends Error {
+      constructor(ref) {
+        super(
+          `Rendered panel ids are hosted-only \u2014 this local server cannot read panel "${ref}". Pass the rendered PNG as { "path": "\u2026" } instead.`
+        );
+        this.name = "HostedOnlyPanelError";
+      }
+    };
   }
 });
 
@@ -11208,22 +12146,96 @@ function screenNamesFromRecord(record8) {
   if (!Array.isArray(shots)) return [];
   return shots.map((s) => s?.frameName).filter((n) => typeof n === "string" && n.length > 0);
 }
-function handoffRefsFromScreenshots(screenshots2, frameNames, userId) {
-  if (!Array.isArray(screenshots2) || screenshots2.length === 0) return {};
-  const wanted = new Set(frameNames);
-  const out = {};
-  for (const slot2 of normalizeScreenshotSlots(screenshots2)) {
-    for (const entry of slot2) {
-      if (!entry || typeof entry !== "object" || !("ref" in entry) || typeof entry.ref !== "string") continue;
-      const ref = canonicalizeUploadRef(entry.ref);
-      if (!refBelongsToUser(ref, userId)) continue;
-      const name = entryName(entry);
-      if (!name || !wanted.has(name)) continue;
-      out[name] = ref;
+function refOf(entry) {
+  if (!entry || typeof entry !== "object" || Array.isArray(entry)) return null;
+  const ref = entry.ref;
+  return typeof ref === "string" && ref.length > 0 ? canonicalizeUploadRef(ref) : null;
+}
+function introducedScreenCells(screenshots2, projectFile) {
+  const out = { manifest: [], refs: [], unaddressed: [] };
+  if (!Array.isArray(screenshots2) || screenshots2.length === 0) return out;
+  const entries = normalizeScreenshotSlots(screenshots2).flat();
+  const shots = shotRefsFromProjectFile(projectFile);
+  const { baseLocale } = projectLocaleAxis(projectFile);
+  entries.forEach((entry, i) => {
+    const shot = entries.length === shots.length ? shots[i] : void 0;
+    const cells = [];
+    if (isLocaleVariants(entry)) {
+      const base = refOf(resolveLocaleVariant(entry, baseLocale, baseLocale));
+      if (base) cells.push({ ref: base, variant: {} });
+      for (const [locale2, variant] of Object.entries(entry.locales)) {
+        const ref = locale2 === baseLocale ? null : refOf(variant);
+        if (ref) cells.push({ ref, variant: canonicalVariant({ locale: locale2 }, baseLocale), locale: locale2 });
+      }
+    } else {
+      const ref = refOf(entry);
+      if (ref) cells.push({ ref, variant: {} });
     }
-  }
+    for (const cell of cells) {
+      const named = {
+        ref: cell.ref,
+        frame: i + 1,
+        frameName: shot?.frameName ?? null,
+        ...cell.locale ? { locale: cell.locale } : {}
+      };
+      out.refs.push(named);
+      if (!shot) out.unaddressed.push(named);
+      else out.manifest.push({ shotId: shot.id, variant: cell.variant, ref: cell.ref });
+    }
+  });
   return out;
 }
+function describeUnsavedRefs(refs) {
+  return refs.map((entry) => {
+    const where = [
+      `frame ${entry.frame}`,
+      entry.frameName ? `"${entry.frameName}"` : null,
+      entry.locale ? `locale ${entry.locale}` : null
+    ].filter(Boolean).join(", ");
+    return `${entry.ref} (${where})`;
+  }).join("; ");
+}
+function refusedRefs(kind, refs) {
+  const list = describeUnsavedRefs(refs);
+  const details = { frames: refs.map(({ ref: _ref, ...where }) => where) };
+  switch (kind) {
+    case "no_account":
+      return {
+        code: "authentication_required",
+        details,
+        error: `This local server has no ShotOps account, so it cannot save { "ref" } screenshots \u2014 a ref points at an upload inside an account: ${list}. Pass each screenshot as a local { "path": "\u2026" } PNG, or sign in (npx shotops-mcp login) and save again. Nothing was saved.`
+      };
+    case "account_unknown":
+      return {
+        code: "upstream_unavailable",
+        details,
+        error: `Could not confirm which ShotOps account this server\u2019s token signs in as, so these { "ref" } screenshots could not be checked: ${list}. Nothing was saved \u2014 try again in a moment.`
+      };
+    case "foreign":
+      return {
+        code: "asset_not_found",
+        details,
+        error: `These { "ref" } screenshots do not belong to this account: ${list}. A ref has to be an upload under the account this save writes to. Pass those screenshots again from a source this account owns \u2014 a ref from import_screenshot or request_screenshot_upload, or a local { "path": "\u2026" } on the local server. Nothing was saved.`
+      };
+    case "unaddressed":
+      return {
+        code: "internal_error",
+        details,
+        error: `These { "ref" } screenshots could not be matched to a frame of the project being saved: ${list}. Nothing was saved.`
+      };
+  }
+}
+async function unsavableRefRefusal(deps, introduced) {
+  if (introduced.refs.length === 0) return null;
+  if (introduced.unaddressed.length > 0) return refusedRefs("unaddressed", introduced.unaddressed);
+  if (deps.createPendingProjectClaim) return refusedRefs("no_account", introduced.refs);
+  let owner = deps.userId;
+  if (deps.accountUserId) owner = await deps.accountUserId().catch(() => null);
+  if (!owner) return refusedRefs("account_unknown", introduced.refs);
+  const account = owner;
+  const foreign = introduced.refs.filter((entry) => !refBelongsToUser(entry.ref, account));
+  return foreign.length > 0 ? refusedRefs("foreign", foreign) : null;
+}
 function projectShotRefsFromRecord(record8) {
   return shotRefsFromProjectFile(record8?.project);
 }
@@ -11241,14 +12253,6 @@ function preservedCells(record8, nextProjectFile) {
   }
   return { manifest: rebound.manifest, findings };
 }
-function screenCustodyUnion(...manifests) {
-  const seen = /* @__PURE__ */ new Set();
-  return manifests.flatMap((manifest) => manifest.filter((entry) => {
-    if (seen.has(entry.ref)) return false;
-    seen.add(entry.ref);
-    return true;
-  }));
-}
 function screenCustodyFromRecord(record8) {
   return parseScreenPurgeRefs(record8?.screenPurgeRefs) ?? [];
 }
@@ -11256,44 +12260,40 @@ function allLiveScreenRefs(record8) {
   const parsed = parseScreenManifest(record8?.handoffRefs);
   return parsed ? allManifestEntries(parsed) : [];
 }
-async function persistProject(deps, args, record8, claimPolicy = "none") {
+function projectSaveEnvelope(stored, projectFile, manifest, source, listing2) {
+  const custody = custodyUnion(screenCustodyFromRecord(stored), allLiveScreenRefs(stored), manifest);
+  const storedSource = stored != null && typeof stored === "object" && !Array.isArray(stored) ? stored.source : void 0;
+  const storedKind = storedSource != null && typeof storedSource === "object" ? storedSource.kind : void 0;
+  const mcpOrigin = storedKind === "agent" || storedKind === "local-path";
+  const sourceForEnvelope = storedSource != null && !mcpOrigin ? storedSource : source ?? storedSource;
+  return rebuildEnvelope(stored, {
+    project: projectFile,
+    manifest,
+    source: sourceForEnvelope ?? void 0,
+    reach: manifest.length > 0 ? "account" : void 0,
+    screenPurgeRefs: custody.length > 0 ? custody : void 0,
+    // #1004 — the App Store listing, and the ONE shape in which this door may name that key.
+    // SPREAD, never a ternary yielding `undefined`: `rebuildEnvelope` deletes on `undefined`, so
+    // `appListing: listing ?? undefined` would wipe a stored association on every ordinary save —
+    // which is exactly the hazard `recordEnvelope.ts` warns about. A save with no reference names
+    // no key at all, and the stored snapshot survives because nothing touched it.
+    ...listing2 ? { ...appListingRewrite(listing2), fastlaneBundleId: listing2.applied.bundleId } : {}
+  });
+}
+async function persistProject(deps, args, record8, claimPolicy = "none", listing2) {
   const names = screenNamesFromRecord(record8);
   const source = names.length === 0 ? void 0 : args.sourceDir ? { kind: "local-path", ref: { dir: args.sourceDir, names } } : { kind: "agent", ref: { names } };
-  const introducedRefs = handoffRefsFromScreenshots(args.screenshots, names, deps.userId);
+  const introduced = introducedScreenCells(args.screenshots, record8);
+  const refusal = await unsavableRefRefusal(deps, introduced);
+  if (refusal) return refusal;
   let screenNote;
-  const wrapWith = (handoffRefs, existingRecord) => {
+  const wrapWith = (existingRecord) => {
     const preserved = preservedCells(existingRecord, record8);
     if (preserved.findings.length > 0) {
       screenNote = preserved.findings.map((finding) => `The stored screenshot filed under "${finding.frameName}" was not carried over: that filename names ${finding.shotIds.length} devices (${finding.shotIds.join(", ")}), so no single device owns it. Its object is retained; give those devices distinct filenames, or pass their screenshots explicitly.`).join(" ");
     }
-    const manifest = mergeManifest(
-      preserved.manifest,
-      manifestFromNamedRefs(handoffRefs, shotRefsFromProjectFile(record8))
-    );
-    const custody = screenCustodyUnion(
-      screenCustodyFromRecord(existingRecord),
-      allLiveScreenRefs(existingRecord),
-      manifest
-    );
-    const stored = existingRecord != null && typeof existingRecord === "object" && !Array.isArray(existingRecord) ? { ...existingRecord } : {};
-    delete stored.record;
-    delete stored.project;
-    delete stored.handoffRefs;
-    delete stored.reach;
-    delete stored.screenPurgeRefs;
-    const storedSource = stored.source;
-    delete stored.source;
-    const storedKind = storedSource != null && typeof storedSource === "object" ? storedSource.kind : void 0;
-    const mcpOrigin = storedKind === "agent" || storedKind === "local-path";
-    const sourceForEnvelope = storedSource != null && !mcpOrigin ? storedSource : source ?? storedSource;
-    return {
-      ...stored,
-      record: SAVED_RECORD_VERSION,
-      project: record8,
-      ...sourceForEnvelope != null ? { source: sourceForEnvelope } : {},
-      ...manifest.length > 0 ? { handoffRefs: manifest, reach: "account" } : {},
-      ...custody.length > 0 ? { screenPurgeRefs: custody } : {}
-    };
+    const manifest = mergeManifest(preserved.manifest, introduced.manifest);
+    return projectSaveEnvelope(existingRecord, record8, manifest, source, listing2);
   };
   const ctx = {
     actorUserId: deps.userId,
@@ -11318,7 +12318,7 @@ async function persistProject(deps, args, record8, claimPolicy = "none") {
         };
       }
       const name = args.projectName?.trim() || "ShotOps render";
-      return await deps.createPendingProjectClaim(name, wrapWith(introducedRefs), ctx);
+      return await deps.createPendingProjectClaim(name, wrapWith(), ctx);
     }
     let projectId;
     if (args.project) {
@@ -11334,7 +12334,7 @@ async function persistProject(deps, args, record8, claimPolicy = "none") {
       if (denial) return { error: denial };
       const existing = await deps.readProjectRecord(project2.id);
       if (!existing) return { error: `Project "${project2.name}" has no readable saved record.` };
-      await deps.updateProjectRecord(project2.id, wrapWith(introducedRefs, existing.record), existing.recordVersion ?? 1, ctx);
+      await deps.updateProjectRecord(project2.id, wrapWith(existing.record), existing.recordVersion ?? 1, ctx);
       projectId = project2.id;
     } else {
       const name = args.projectName?.trim() || "ShotOps render";
@@ -11347,7 +12347,7 @@ async function persistProject(deps, args, record8, claimPolicy = "none") {
         const denial = authorizationMessage(decision);
         if (denial) return { error: denial };
       }
-      const created = await deps.createProject(deps.userId, name, wrapWith(introducedRefs), ctx);
+      const created = await deps.createProject(deps.userId, name, wrapWith(), ctx);
       projectId = created.id;
     }
     return { projectId, openUrl: `${deps.studioOrigin}/?project=${projectId}`, ...screenNote ? { screenNote } : {} };
@@ -11359,7 +12359,6 @@ function projectFileFromRecord(record8) {
   const inner = record8?.project;
   return inner != null && typeof inner === "object" ? inner : record8;
 }
-var SAVED_RECORD_VERSION;
 var init_projectPersistence = __esm({
   "src/project/projectPersistence.ts"() {
     "use strict";
@@ -11367,12 +12366,16 @@ var init_projectPersistence = __esm({
     init_projectRecord();
     init_uploadRef();
     init_screenManifest();
+    init_recordEnvelope();
+    init_appListing();
+    init_localeAxis();
+    init_localeVariants();
+    init_variant();
     init_authorization();
     init_projectResolution();
     init_schemas();
     init_screenshotInput();
     init_uploads();
-    SAVED_RECORD_VERSION = 2;
   }
 });
 
@@ -11658,7 +12661,6 @@ var init_projectAccessStore = __esm({
 });
 
 // ../api/_lib/projectLookStore.ts
-var FREE_EDITABLE_PROJECT_LIMIT;
 var init_projectLookStore = __esm({
   "../api/_lib/projectLookStore.ts"() {
     "use strict";
@@ -11666,11 +12668,17 @@ var init_projectLookStore = __esm({
     init_look();
     init_lookDivergence();
     init_projectFileGuard();
+    init_shotLook();
     init_supabaseRest();
     init_capabilities();
-    init_monetizationPolicy();
     init_projectAccessStore();
-    FREE_EDITABLE_PROJECT_LIMIT = MONETIZATION_POLICY.plans.free.ownedProjects;
+  }
+});
+
+// ../mockup-engine/access/projectActions.ts
+var init_projectActions = __esm({
+  "../mockup-engine/access/projectActions.ts"() {
+    "use strict";
   }
 });
 
@@ -11678,6 +12686,8 @@ var init_projectLookStore = __esm({
 var init_policy = __esm({
   "../api/_lib/authorization/policy.ts"() {
     "use strict";
+    init_projectActions();
+    init_monetizationPolicy();
   }
 });
 
@@ -11697,6 +12707,7 @@ var init_production = __esm({
     init_entitlement();
     init_monetizationPolicy();
     init_projectLookStore();
+    init_projectActions();
     init_authorizeCapability();
     init_capabilities();
     init_policy();
@@ -12407,7 +13418,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "shotops-mcp",
-      version: "0.9.7",
+      version: "0.9.9",
       private: false,
       type: "module",
       description: "The bundle-emitting MCP server over the @engine/@sync spine. Exposes ShotOps tools to ChatGPT, Claude Code, Cursor, and CI over Streamable HTTP with OAuth or personal API tokens. Hosted and MCP tool paths never accept, store, or forward a store-signing credential; the explicit local release CLI validates the user's existing key directly with Apple and records only its path. Renders via headless Playwright Chromium, the engine's native non-browser habitat (same path as mockup-mcp). Also ships as a free LOCAL stdio server (`npx shotops-mcp`) \u2014 same render, on your own machine, no account needed.",
@@ -12595,8 +13606,7 @@ function projectStructure(projectFile) {
 }
 function projectCopyLocales(projectFile, locales, family = BASE_SCREEN_FAMILY) {
   const file = projectFile;
-  const baseLocale = typeof file?.baseLocale === "string" && file.baseLocale ? file.baseLocale : "en-US";
-  const captionText = normalizeCaptionText(file?.captionText, file?.captionStyles, baseLocale);
+  const { captionText, baseLocale } = projectLocaleAxis(projectFile);
   const outputCaptions = normalizeOutputCaptionText(file?.outputCaptions);
   const { panelIds } = projectStructure(projectFile);
   const out = [];
@@ -12613,8 +13623,7 @@ function projectCopyLocales(projectFile, locales, family = BASE_SCREEN_FAMILY) {
 }
 function projectCopyGaps(projectFile, locales, family = BASE_SCREEN_FAMILY) {
   const file = projectFile;
-  const baseLocale = typeof file?.baseLocale === "string" && file.baseLocale ? file.baseLocale : "en-US";
-  const captionText = normalizeCaptionText(file?.captionText, file?.captionStyles, baseLocale);
+  const { captionText, baseLocale } = projectLocaleAxis(projectFile);
   const outputCaptions = normalizeOutputCaptionText(file?.outputCaptions);
   const base = resolveOutputCaptionText(captionText, outputCaptions, family, baseLocale, baseLocale);
   if (!Object.values(base).some((layers) => layers.some((layer) => layer.text.trim().length > 0))) return [];
@@ -12879,7 +13888,7 @@ async function renderStrip(deps, args, scope, signal) {
   if (durableHostedProductionAvailable(deps) && args.preview !== true) {
     let durableScreenshots;
     try {
-      durableScreenshots = await resolveScreenshots(entries, deps.userId, false);
+      durableScreenshots = await resolveScreenshots(entries, deps.userId, false, deps.readUploadedRefs);
     } catch (err) {
       return errorResult(err.message);
     }
@@ -12932,7 +13941,7 @@ async function renderStrip(deps, args, scope, signal) {
   if (refused) return errorResult(refused.error);
   let screenshots2;
   try {
-    screenshots2 = await resolveScreenshots(entries, deps.userId, deps.allowLocalScreenshots ?? false);
+    screenshots2 = await resolveScreenshots(entries, deps.userId, deps.allowLocalScreenshots ?? false, deps.readUploadedRefs);
   } catch (err) {
     return errorResult(err.message);
   }
@@ -13072,8 +14081,7 @@ function onePanelStyle(value, panelIndex2) {
 }
 function projectPanelCaptionLayers(projectFile, panelId, variant) {
   const file = record3(projectFile);
-  const baseLocale = projectBaseLocale(projectFile);
-  const captionText = normalizeCaptionText(file?.captionText, file?.captionStyles, baseLocale);
+  const { captionText, baseLocale } = projectLocaleAxis(projectFile);
   const outputCaptions = normalizeOutputCaptionText(file?.outputCaptions);
   const resolved = resolveOutputCaptionText(
     captionText,
@@ -13087,6 +14095,7 @@ function projectPanelCaptionLayers(projectFile, panelId, variant) {
 function projectPanelRecipes(projectFile, screens, targets) {
   const structure = projectStructure(projectFile);
   const file = record3(projectFile);
+  const recordPreset = projectOutputAxis(projectFile).panelPresetId;
   const shots = Array.isArray(file?.shots) ? file.shots : [];
   const slotSizes = structure.panelIds.map(
     (panelId) => shots.filter((shot) => record3(shot)?.panelId === panelId).length
@@ -13095,14 +14104,14 @@ function projectPanelRecipes(projectFile, screens, targets) {
     const variant = projectRenderVariant(projectFile, target.locale, target.panelPresetId);
     return [screens.resolve(variant).then((resolved) => {
       const byShot = new Map(resolved.screenManifest.map((entry) => [entry.shotId, entry.bytes]));
-      const dimensions = panelDimensionsFor(target.panelPresetId ?? panelPresetFromProjectFile(projectFile) ?? "r69");
+      const dimensions = panelDimensionsFor(target.panelPresetId ?? recordPreset);
       return structure.panelIds.flatMap((panelId, panelIndex2) => {
         const screenshots2 = shots.filter((shot) => record3(shot)?.panelId === panelId).map((shot) => byShot.get(String(record3(shot)?.id))).filter((bytes) => typeof bytes === "string");
         return [{
           key: [target.output, target.locale, `panel-${String(panelIndex2 + 1).padStart(4, "0")}`].filter(Boolean).join("-"),
           panelIndex: panelIndex2,
           screenshots: screenshots2,
-          panelPresetId: target.panelPresetId ?? panelPresetFromProjectFile(projectFile),
+          panelPresetId: target.panelPresetId ?? recordPreset,
           look: onePanelLook(projectFile, panelIndex2, slotSizes, panelId),
           captionLayers: projectPanelCaptionLayers(projectFile, panelId, variant),
           backgroundViewport: { panelIndex: panelIndex2, panelCount: structure.panelIds.length },
@@ -13166,10 +14175,6 @@ function frameNamesFromProjectFile(projectFile) {
   if (!Array.isArray(shots)) return [];
   return shots.map((s) => s?.frameName).filter((n) => typeof n === "string" && n.length > 0);
 }
-function panelPresetFromProjectFile(projectFile) {
-  const preset = projectFile?.panelPresetId;
-  return typeof preset === "string" && preset.length > 0 ? preset : void 0;
-}
 function outputDevicesFromProjectFile(projectFile) {
   const outputs = projectFile?.outputs;
   if (!Array.isArray(outputs)) return { devices: [], dropped: [] };
@@ -13180,7 +14185,7 @@ async function loadProjectRecord(deps, projectId) {
   const project2 = resolvedProject(resolution);
   if (!project2) return { error: describeMiss(resolution, projectId) };
   const rec = await deps.readProjectRecord(project2.id);
-  if (!rec) {
+  if (!rec || isBlankRecord(rec.record)) {
     return {
       error: `Project "${project2.name}" has no saved record yet \u2014 open it in ShotOps and save a strip first.`
     };
@@ -13193,34 +14198,29 @@ async function loadProjectRecord(deps, projectId) {
   };
 }
 function projectBaseLocale(projectFile) {
-  const file = projectFile;
-  if (typeof file?.baseLocale === "string" && file.baseLocale) return file.baseLocale;
-  const first = Array.isArray(file?.locales) ? file.locales[0] : void 0;
-  return typeof first === "string" && first ? first : "en-US";
-}
-function projectLocales(projectFile) {
-  const file = projectFile;
-  const authored = Array.isArray(file?.locales) ? file.locales.filter((locale2) => typeof locale2 === "string" && locale2.length > 0) : [];
-  const captionLocales = file?.captionText && typeof file.captionText === "object" ? Object.keys(file.captionText) : [];
-  return Array.from(/* @__PURE__ */ new Set([projectBaseLocale(projectFile), ...authored, ...captionLocales]));
+  return projectLocaleAxis(projectFile).baseLocale;
 }
 function projectRenderLocale(projectFile, requested) {
+  const { locales, baseLocale } = projectLocaleAxis(projectFile);
   const candidate = requested?.trim();
-  return matchAuthoredLocale(projectLocales(projectFile), candidate) ?? candidate ?? projectBaseLocale(projectFile);
+  return matchAuthoredLocale(locales, candidate) ?? candidate ?? baseLocale;
+}
+function activeRenderDevice(projectFile, renderable) {
+  const active = projectOutputAxis(projectFile).activeDeviceId;
+  return renderable.find((device) => device.id === active) ?? renderable[0];
 }
 function projectRenderVariant(projectFile, locale2, panelPresetId2) {
-  const file = projectFile;
-  const preset = panelPresetId2 ?? (typeof file?.panelPresetId === "string" ? file.panelPresetId : void 0);
-  const family = DEVICES.find((device) => device.panelPresetId === preset)?.screenFamily ?? BASE_SCREEN_FAMILY;
+  const preset = panelPresetId2 ?? projectOutputAxis(projectFile).panelPresetId;
   const baseLocale = projectBaseLocale(projectFile);
-  return canonicalVariant({ family, locale: projectRenderLocale(projectFile, locale2) }, baseLocale);
+  const resolved = projectRenderLocale(projectFile, locale2);
+  return canonicalVariant({ family: screenFamilyForPreset(preset), locale: resolved }, baseLocale);
 }
 async function resolveProjectScreens(deps, loaded, supplied) {
   const baseLocale = projectBaseLocale(loaded.projectFile);
   const nested = supplied.map((e) => [e]);
   let resolvedBytes;
   try {
-    resolvedBytes = await resolveScreenshots(nested, deps.userId, deps.allowLocalScreenshots ?? false);
+    resolvedBytes = await resolveScreenshots(nested, deps.userId, deps.allowLocalScreenshots ?? false, deps.readUploadedRefs);
   } catch (err) {
     return { error: err.message };
   }
@@ -13262,7 +14262,7 @@ async function resolveProjectScreens(deps, loaded, supplied) {
     "lenient",
     baseLocale
   );
-  const storedManifest = parsed ? allManifestEntries(parsed) : [];
+  const storedManifest2 = parsed ? allManifestEntries(parsed) : [];
   const repairFindings = [];
   let canReadStored = Boolean(deps.fetchHandoffBytes || deps.readProjectScreens);
   const storedSources = [];
@@ -13292,7 +14292,7 @@ async function resolveProjectScreens(deps, loaded, supplied) {
       canReadStored = Boolean(deps.fetchHandoffBytes);
     }
   } else if (deps.fetchHandoffBytes) {
-    const resolvedManifest = resolveScreenManifest(storedManifest, shots);
+    const resolvedManifest = resolveScreenManifest(storedManifest2, shots);
     repairFindings.push(...resolvedManifest.findings);
     for (const cell of resolvedManifest.cells) {
       let pending;
@@ -13375,7 +14375,7 @@ async function resolveProjectScreens(deps, loaded, supplied) {
     }
     return { screenManifest, missing };
   };
-  return { expected, unnamed, storedCount: storedManifest.length, canReadStored, resolve: resolve14, plan, repairFindings };
+  return { expected, unnamed, storedCount: storedManifest2.length, canReadStored, resolve: resolve14, plan, repairFindings };
 }
 function noProjectScreensMessage(screens, suppliedCount, toolName) {
   let lead;
@@ -13393,7 +14393,7 @@ function noProjectScreensMessage(screens, suppliedCount, toolName) {
   return `${lead} This project expects: ${screens.expected.join(", ")}. Pass each raw screenshot with its original \`name\` and optional \`variant\`, in any order \u2014 ${toolName} matches by name + coordinate.` + route;
 }
 function coordinateLabel(variant) {
-  return !variant || variantKey(variant) === "" ? "base" : variantKey(variant);
+  return !variant || isBaseVariant(variant) ? "base" : variantKey(variant);
 }
 function projectScreenResolutionNote(shots) {
   const groups = /* @__PURE__ */ new Map();
@@ -13473,8 +14473,8 @@ async function renderProject(deps, args, scope, attempt, signal) {
   const requested = resolveOutputDevices(args.outputs);
   const chosen = requested.devices.length > 0 ? requested : outputDevicesFromProjectFile(projectFile);
   const droppedNote = droppedOutputsNote(chosen.dropped, renderedSavedSet(chosen.devices));
-  const recordPreset = panelPresetFromProjectFile(projectFile);
-  const active = chosen.devices.find((d) => d.panelPresetId === recordPreset) ?? chosen.devices[0];
+  const recordPreset = projectOutputAxis(projectFile).panelPresetId;
+  const active = activeRenderDevice(projectFile, chosen.devices);
   const ordered = active ? [active, ...chosen.devices.filter((d) => d.id !== active.id)] : [];
   const mayOverridePreset = requested.devices.length > 0 || chosen.devices.length > 1;
   const requestedLocale = args.locale?.trim() || void 0;
@@ -13498,7 +14498,7 @@ async function renderProject(deps, args, scope, attempt, signal) {
       locales: [snapshotLocale],
       outputs: ordered.map((device) => device.id),
       unsupportedOutputs: chosen.dropped,
-      panelPresetId: active?.panelPresetId ?? recordPreset ?? null
+      panelPresetId: active?.panelPresetId ?? recordPreset
     },
     baseLocale: projectBaseLocale(projectFile),
     gaps: repairGaps(screens.repairFindings)
@@ -13519,9 +14519,9 @@ async function renderProject(deps, args, scope, attempt, signal) {
     });
   };
   if (durableHostedProductionAvailable(deps) && args.preview !== true) {
-    const activePreset = active && mayOverridePreset ? active.panelPresetId : recordPreset ?? "r69";
+    const activePreset = active && mayOverridePreset ? active.panelPresetId : recordPreset;
     const dimensions = panelDimensionsFor(activePreset);
-    const targets = ordered.length > 0 ? ordered.map((device) => ({ locale: snapshotLocale, panelPresetId: device.panelPresetId, output: device.id })) : [{ locale: snapshotLocale, ...recordPreset ? { panelPresetId: recordPreset } : {} }];
+    const targets = ordered.length > 0 ? ordered.map((device) => ({ locale: snapshotLocale, panelPresetId: device.panelPresetId, output: device.id })) : [{ locale: snapshotLocale, panelPresetId: recordPreset }];
     const recipes = await projectPanelRecipes(projectFile, screens, targets);
     const panelCount = projectStructure(projectFile).panelIds.length || recipes.length;
     const durableResolved = await screens.resolve(activeVariant);
@@ -13768,6 +14768,7 @@ var init_toolsRender = __esm({
     init_productionRenderAccess();
     init_outputMode();
     init_appstore();
+    init_recordEnvelope();
     init_screenshotInput();
     init_uploads();
     init_resultContract();
@@ -13847,6 +14848,83 @@ var init_refineProjectReceipt = __esm({
   }
 });
 
+// ../mockup-engine/recordFromStrip.ts
+function normalizeSourceName(raw) {
+  const name = raw?.trim();
+  if (!name) return null;
+  return /\.(png|jpe?g|webp)$/i.test(name) ? name : `${name}.png`;
+}
+function frameNamesFor(shots, shotNames) {
+  const seen = /* @__PURE__ */ new Map();
+  return shots.map((_, i) => {
+    const real = normalizeSourceName(shotNames?.[i]);
+    if (!real) return `screen-${i + 1}.png`;
+    const count = seen.get(real) ?? 0;
+    seen.set(real, count + 1);
+    if (count === 0) return real;
+    const dot = real.lastIndexOf(".");
+    return `${real.slice(0, dot)}-${count + 1}${real.slice(dot)}`;
+  });
+}
+function recordFromStrip(input) {
+  const { look: look2, panelIds, captionText, locale: locale2, shotNames, outputs, locales, baseLocale } = input;
+  const panels = panelIds.map((id) => ({ id }));
+  const frameNames = frameNamesFor(look2.shots, shotNames);
+  const shots = look2.shots.map((s, i) => ({
+    id: `shot-${i + 1}`,
+    panelId: s.panelId,
+    frameNodeId: frameNames[i],
+    frameName: frameNames[i],
+    bytes: null,
+    look: s.look,
+    thumb: null,
+    thumbStale: true
+  }));
+  return serializeProject({
+    shots,
+    panels,
+    selectedShotId: shots[0]?.id ?? null,
+    panelPresetId: look2.panelPresetId,
+    bgMode: look2.bgMode,
+    // #556 — the CANONICAL gradient, forwarded alongside the mirror. `stripFromSlots` genuinely
+    // resolves stops+angle (it runs every styling source through `stripGradientOf`), so omitting
+    // them here was live data loss: a three-stop backdrop at 37° was persisted as its two-stop
+    // mirror on the nearest axis, and the middle stops were gone from the record for good. The
+    // sibling render path (`buildStrip.ts`, #463) always got this right.
+    gradientStops: look2.gradientStops,
+    gradientAngle: look2.gradientAngle,
+    gradientFrom: look2.gradientFrom,
+    gradientTo: look2.gradientTo,
+    gradientDir: look2.gradientDir,
+    panelColors: look2.panelColors,
+    shadow: look2.shadow,
+    // #564 — the same drop, one field away and not a mirror bug at all: `serialize.ts` turns an
+    // absent `floorReflection` into `false`, so a render that showed a floor reflection saved a
+    // project that did not have one (the `studio` design preset is one of the two that turn it on).
+    floorReflection: look2.floorReflection,
+    panelBackgrounds: look2.panelBackgrounds,
+    captionStyles: look2.captionStyles,
+    // #40 — the selected target devices. Passed straight to serializeProject, which runs it
+    // through deriveOutputs: an undefined list migrates to the single device matching
+    // `panelPresetId` (the pre-#40 record, unchanged), a supplied one is trusted verbatim minus
+    // unknown/coming-soon ids.
+    outputs,
+    // #1001 — the selected languages, when the caller knows them. Omitted by every render path, and
+    // `serializeProject` then derives the list exactly as it always has (caption keys ∪ the base).
+    ...locales ? { locales } : {},
+    ...baseLocale ? { baseLocale } : {},
+    // Nest this render's flat caption text under its locale (default en-US) so the stored blob
+    // is locale-correct; serializeProject's normalizeCaptionText passes a nested map through.
+    captionText: captionText && Object.keys(captionText).length > 0 ? { [locale2 || DEFAULT_LOCALE]: captionText } : {}
+  });
+}
+var init_recordFromStrip = __esm({
+  "../mockup-engine/recordFromStrip.ts"() {
+    "use strict";
+    init_appstore();
+  }
+});
+
 // ../mockup-engine/stripFromSlots.ts
 function staggeredHOffset(k) {
   return String(Math.max(-100, Math.min(100, k * 35)));
@@ -13982,111 +15060,282 @@ function stripFromSlots(input) {
         }
       }
     });
-    const localeLayers = normalizeCaptionText({ [DEFAULT_LOCALE]: inner }, normalizeCaptionStyles(rawStyles));
-    captionStyles = captionStylesFromLayers(localeLayers);
-    captionLayers = resolveCaptionText(localeLayers);
+    const localeLayers = normalizeCaptionText({ [DEFAULT_LOCALE]: inner }, normalizeCaptionStyles(rawStyles));
+    captionStyles = captionStylesFromLayers(localeLayers);
+    captionLayers = resolveCaptionText(localeLayers);
+  }
+  const panelPresetId2 = input.panelPresetId ?? (typeof opaque?.panelPresetId === "string" ? opaque.panelPresetId : void 0) ?? "r69";
+  return {
+    look: {
+      panelPresetId: panelPresetId2,
+      bgMode,
+      gradientStops,
+      gradientAngle,
+      gradientFrom,
+      gradientTo,
+      gradientDir,
+      panelColors,
+      shadow,
+      floorReflection,
+      panelBackgrounds,
+      captionStyles,
+      shots
+    },
+    panelIds,
+    captionText: captionLayers
+  };
+}
+var NUMERIC_STRING_FIELDS;
+var init_stripFromSlots = __esm({
+  "../mockup-engine/stripFromSlots.ts"() {
+    "use strict";
+    init_appstore();
+    init_gradient();
+    NUMERIC_STRING_FIELDS = ["roll", "deviceSize", "hOffset", "vOffset", "finish", "clearcoat"];
+  }
+});
+
+// ../mockup-engine/appstore/importScreens.ts
+var init_importScreens = __esm({
+  "../mockup-engine/appstore/importScreens.ts"() {
+    "use strict";
+    init_defaults();
+    init_recordFromStrip();
+    init_stripFromSlots();
+    init_projectFileGuard();
+    init_recordEnvelope();
+    init_screenManifest();
+  }
+});
+
+// ../mockup-engine/appstore/reach.ts
+function reachUploadsScreens(reach) {
+  return reach === "account";
+}
+function readReach(value) {
+  if (value === "device" || value === "account") return value;
+  if (value === "shared") return "account";
+  return null;
+}
+var init_reach = __esm({
+  "../mockup-engine/appstore/reach.ts"() {
+    "use strict";
+  }
+});
+
+// ../mockup-engine/ops/persistenceOps.ts
+function envelopeOf(record8) {
+  return record8 != null && typeof record8 === "object" && !Array.isArray(record8) ? record8 : {};
+}
+function storedManifest(record8) {
+  const parsed = parseScreenManifest(envelopeOf(record8).handoffRefs);
+  return parsed ? allManifestEntries(parsed) : [];
+}
+function storedCustody(record8) {
+  const parsed = parseScreenManifest(envelopeOf(record8).screenPurgeRefs);
+  return parsed ? allManifestEntries(parsed) : [];
+}
+function writeReach(record8, override) {
+  if (override) return override;
+  return readReach(envelopeOf(record8).reach) ?? "account";
+}
+function planScreenSave(args) {
+  const kept = storedManifest(args.record);
+  const reach = writeReach(args.record, args.reach);
+  if (!reachUploadsScreens(reach)) {
+    return { toUpload: [], kept, alreadyDurable: [], nothingToUpload: true };
+  }
+  const { toUpload } = planScreenUploads(args.cells, kept, args.shots);
+  const going = new Set(toUpload.map((cell) => manifestShotCellKey(cell.shotId, cell.variant)));
+  const alreadyDurable = args.cells.filter(
+    (cell) => !going.has(manifestShotCellKey(cell.shotId, cell.variant))
+  );
+  return {
+    toUpload: toUpload.map(({ shotId, variant, hash }) => ({ shotId, variant, hash })),
+    kept,
+    alreadyDurable: alreadyDurable.map(({ shotId, variant, hash }) => ({ shotId, variant, hash })),
+    nothingToUpload: toUpload.length === 0
+  };
+}
+function reserveUploads(cells, slots) {
+  const byCell = new Map(cells.map((cell) => [manifestShotCellKey(cell.shotId, cell.variant), cell]));
+  const reserved = [];
+  for (const slot2 of slots) {
+    const cell = byCell.get(manifestShotCellKey(slot2.shotId, slot2.variant));
+    if (!cell) continue;
+    reserved.push({
+      cell,
+      slot: slot2,
+      entry: { shotId: slot2.shotId, variant: slot2.variant, hash: cell.hash, ref: slot2.ref }
+    });
   }
-  const panelPresetId2 = input.panelPresetId ?? (typeof opaque?.panelPresetId === "string" ? opaque.panelPresetId : void 0) ?? "r69";
+  return reserved;
+}
+function recordScreenSave(args) {
+  const reach = writeReach(args.record, args.reach);
+  const manifest = reachUploadsScreens(reach) ? mergeManifest(args.kept, args.uploaded) : [];
+  const custody = custodyUnion(storedCustody(args.record), args.heldCustody ?? [], args.kept, args.uploaded);
+  const envelope = envelopeOf(args.record);
   return {
-    look: {
-      panelPresetId: panelPresetId2,
-      bgMode,
-      gradientStops,
-      gradientAngle,
-      gradientFrom,
-      gradientTo,
-      gradientDir,
-      panelColors,
-      shadow,
-      floorReflection,
-      panelBackgrounds,
-      captionStyles,
-      shots
-    },
-    panelIds,
-    captionText: captionLayers
+    record: rebuildEnvelope(args.record, {
+      project: envelope.project,
+      manifest,
+      reach,
+      ...custody.length > 0 ? { screenPurgeRefs: custody } : {}
+    }),
+    manifest,
+    custody,
+    reach
   };
 }
-var NUMERIC_STRING_FIELDS;
-var init_stripFromSlots = __esm({
-  "../mockup-engine/stripFromSlots.ts"() {
+async function saveProjectScreens(request, transport) {
+  const reach = writeReach(request.record, request.reach);
+  const plan = planScreenSave({
+    record: request.record,
+    shots: request.shots,
+    cells: request.cells,
+    reach
+  });
+  const build = request.rebuild ?? ((rewrite) => recordScreenSave({
+    record: request.record,
+    kept: rewrite.manifest,
+    uploaded: [],
+    heldCustody: rewrite.custody,
+    reach: rewrite.reach
+  }).record);
+  const overtaken = () => transport.overtaken?.() === true;
+  const held = custodyUnion(storedCustody(request.record), request.heldCustody ?? []);
+  const settled = (uploaded2, custody2, projectId2, stopped) => {
+    const manifest = reachUploadsScreens(reach) ? mergeManifest(plan.kept, uploaded2) : [];
+    return {
+      projectId: projectId2,
+      record: build({ manifest, custody: custody2, reach }),
+      manifest,
+      custody: custody2,
+      uploaded: uploaded2,
+      stopped
+    };
+  };
+  let projectId = request.projectId;
+  if (projectId === null) {
+    if (!transport.insertRow) throw new Error("This project has no row yet and the transport cannot insert one");
+    const custody2 = custodyUnion(held, plan.kept);
+    const created = await transport.insertRow({ record: build({ manifest: plan.kept, custody: custody2, reach }) });
+    projectId = created.projectId;
+    if (overtaken()) return settled([], custody2, projectId, true);
+  }
+  if (plan.nothingToUpload) {
+    return settled([], custodyUnion(held, plan.kept), projectId, false);
+  }
+  const slots = await transport.mintUploadSlots({ projectId, cells: plan.toUpload });
+  if (overtaken()) return settled([], custodyUnion(held, plan.kept), projectId, true);
+  const reserved = reserveUploads(request.cells, slots);
+  const custody = custodyUnion(held, plan.kept, reserved.map(({ entry }) => entry));
+  if (reserved.length === 0) return settled([], custody, projectId, false);
+  await transport.saveRecord({ projectId, record: build({ manifest: plan.kept, custody, reach }) });
+  if (overtaken()) return settled([], custody, projectId, true);
+  const uploaded = [];
+  for (const { entry, slot: slot2, cell } of reserved) {
+    await transport.putBytes({ slot: slot2, bytes: cell.bytes });
+    if (overtaken()) return settled([], custody, projectId, true);
+    uploaded.push(entry);
+  }
+  const done = settled(uploaded, custody, projectId, false);
+  await transport.saveRecord({ projectId, record: done.record });
+  return done;
+}
+var init_persistenceOps = __esm({
+  "../mockup-engine/ops/persistenceOps.ts"() {
     "use strict";
-    init_appstore();
-    init_gradient();
-    NUMERIC_STRING_FIELDS = ["roll", "phoneHeight", "hOffset", "vOffset", "finish", "clearcoat"];
+    init_recordEnvelope();
+    init_importScreens();
+    init_screenManifest();
+    init_screenUploadPlan();
+    init_variant();
+    init_reach();
+    init_reach();
   }
 });
 
-// ../mockup-engine/recordFromStrip.ts
-function normalizeSourceName(raw) {
-  const name = raw?.trim();
-  if (!name) return null;
-  return /\.(png|jpe?g|webp)$/i.test(name) ? name : `${name}.png`;
-}
-function frameNamesFor(shots, shotNames) {
-  const seen = /* @__PURE__ */ new Map();
-  return shots.map((_, i) => {
-    const real = normalizeSourceName(shotNames?.[i]);
-    if (!real) return `screen-${i + 1}.png`;
-    const count = seen.get(real) ?? 0;
-    seen.set(real, count + 1);
-    if (count === 0) return real;
-    const dot = real.lastIndexOf(".");
-    return `${real.slice(0, dot)}-${count + 1}${real.slice(dot)}`;
+// ../mockup-engine/appstore/blankProject.ts
+var init_blankProject = __esm({
+  "../mockup-engine/appstore/blankProject.ts"() {
+    "use strict";
+    init_recordFromStrip();
+    init_stripFromSlots();
+    init_recordEnvelope();
+  }
+});
+
+// ../mockup-engine/appstore/captionEdit.ts
+var init_captionEdit = __esm({
+  "../mockup-engine/appstore/captionEdit.ts"() {
+    "use strict";
+    init_defaults();
+    init_captionModel();
+    init_recordTransforms();
+  }
+});
+
+// ../mockup-engine/captionTranslationPlan.ts
+var init_captionTranslationPlan = __esm({
+  "../mockup-engine/captionTranslationPlan.ts"() {
+    "use strict";
+  }
+});
+
+// ../mockup-engine/appstore/translationTable.ts
+var init_translationTable = __esm({
+  "../mockup-engine/appstore/translationTable.ts"() {
+    "use strict";
+    init_appStoreLocales();
+    init_captionEdit();
+    init_captionModel();
+    init_localeAxis();
+    init_captionTranslationPlan();
+  }
+});
+
+// ../mockup-engine/ops/editOps.ts
+function buildRecord(input) {
+  const { look: look2, panelIds, captionText } = stripFromSlots({
+    slotSizes: input.slotSizes,
+    panelPresetId: input.panelPresetId,
+    look: input.look ?? void 0,
+    style: input.style ?? void 0
   });
-}
-function recordFromStrip(input) {
-  const { look: look2, panelIds, captionText, locale: locale2, shotNames, outputs } = input;
-  const panels = panelIds.map((id) => ({ id }));
-  const frameNames = frameNamesFor(look2.shots, shotNames);
-  const shots = look2.shots.map((s, i) => ({
-    id: `shot-${i + 1}`,
-    panelId: s.panelId,
-    frameNodeId: frameNames[i],
-    frameName: frameNames[i],
-    bytes: null,
-    look: s.look,
-    thumb: null,
-    thumbStale: true
-  }));
-  return serializeProject({
-    shots,
-    panels,
-    selectedShotId: shots[0]?.id ?? null,
-    panelPresetId: look2.panelPresetId,
-    bgMode: look2.bgMode,
-    // #556 — the CANONICAL gradient, forwarded alongside the mirror. `stripFromSlots` genuinely
-    // resolves stops+angle (it runs every styling source through `stripGradientOf`), so omitting
-    // them here was live data loss: a three-stop backdrop at 37° was persisted as its two-stop
-    // mirror on the nearest axis, and the middle stops were gone from the record for good. The
-    // sibling render path (`buildStrip.ts`, #463) always got this right.
-    gradientStops: look2.gradientStops,
-    gradientAngle: look2.gradientAngle,
-    gradientFrom: look2.gradientFrom,
-    gradientTo: look2.gradientTo,
-    gradientDir: look2.gradientDir,
-    panelColors: look2.panelColors,
-    shadow: look2.shadow,
-    // #564 — the same drop, one field away and not a mirror bug at all: `serialize.ts` turns an
-    // absent `floorReflection` into `false`, so a render that showed a floor reflection saved a
-    // project that did not have one (the `studio` design preset is one of the two that turn it on).
-    floorReflection: look2.floorReflection,
-    panelBackgrounds: look2.panelBackgrounds,
-    captionStyles: look2.captionStyles,
-    // #40 — the selected target devices. Passed straight to serializeProject, which runs it
-    // through deriveOutputs: an undefined list migrates to the single device matching
-    // `panelPresetId` (the pre-#40 record, unchanged), a supplied one is trusted verbatim minus
-    // unknown/coming-soon ids.
-    outputs,
-    // Nest this render's flat caption text under its locale (default en-US) so the stored blob
-    // is locale-correct; serializeProject's normalizeCaptionText passes a nested map through.
-    captionText: captionText && Object.keys(captionText).length > 0 ? { [locale2 || DEFAULT_LOCALE]: captionText } : {}
+  return recordFromStrip({
+    look: look2,
+    panelIds,
+    captionText,
+    locale: input.locale,
+    shotNames: input.screenshotNames,
+    outputs: input.outputs,
+    ...input.locales ? { locales: input.locales } : {},
+    ...input.baseLocale ? { baseLocale: input.baseLocale } : {}
   });
 }
-var init_recordFromStrip = __esm({
-  "../mockup-engine/recordFromStrip.ts"() {
+var STRIP_PREVIEW;
+var init_editOps = __esm({
+  "../mockup-engine/ops/editOps.ts"() {
     "use strict";
+    init_gradient();
+    init_variant();
+    init_persistenceOps();
     init_appstore();
+    init_appListing();
+    init_blankProject();
+    init_captionEdit();
+    init_recordEnvelope();
+    init_translationTable();
+    init_recordFromStrip();
+    init_stripFromSlots();
+    STRIP_PREVIEW = {
+      /** The band's aspect, width ÷ height. */
+      bandRatio: 25 / 11,
+      /** How many frames fill the band before it starts scrolling. */
+      framesAcross: 5
+    };
   }
 });
 
@@ -14158,8 +15407,7 @@ var init_renderer = __esm({
   "src/render/renderer.ts"() {
     "use strict";
     init_packagePaths();
-    init_stripFromSlots();
-    init_recordFromStrip();
+    init_editOps();
     init_log();
     init_staticServer();
     init_browserInstall();
@@ -14245,23 +15493,20 @@ var init_renderer = __esm({
       // buildRecord: the SAME styling seam the render uses (stripFromSlots → recordFromStrip), run
       // in Node with NO browser. Both are pure, browser-free @engine functions and a record carries
       // no bytes, so save_project persists an editable project without a multi-second Chromium render
-      // — the fix for the Fly proxy timeout on that path. Kept byte-for-byte aligned with the
-      // harness's buildRecord branch (render.js): same stripFromSlots call, same recordFromStrip
-      // args — so a save_project record matches a render({buildRecord:true}) record exactly.
+      // — the fix for the Fly proxy timeout on that path. It is the engine's `buildRecord` op, the one
+      // the phone's bridge calls too, so a save_project record, a render({buildRecord:true}) record and
+      // a record built on the phone are the same record rather than three copies kept aligned by hand.
       async buildRecord(input) {
-        const { look: look2, panelIds, captionText } = stripFromSlots({
+        return buildRecord({
           slotSizes: input.slotSizes,
           panelPresetId: input.panelPresetId,
           look: input.look ?? void 0,
-          style: input.style ?? void 0
-        });
-        return recordFromStrip({
-          look: look2,
-          panelIds,
-          captionText,
+          style: input.style ?? void 0,
           locale: input.locale,
-          shotNames: input.screenshotNames,
-          outputs: input.outputs
+          screenshotNames: input.screenshotNames,
+          outputs: input.outputs,
+          locales: input.locales,
+          baseLocale: input.baseLocale
         });
       }
       async render(input) {
@@ -14398,6 +15643,9 @@ function parseControlPlaneResponse(op, value) {
     case "list_projects":
       if (!Array.isArray(body.projects)) throw new Error("control plane response is missing projects");
       if (!object(body.ownedProjects)) throw new Error("control plane response is missing ownedProjects");
+      for (const row2 of body.projects) {
+        if (!object(object(row2)?.actions)) throw new Error("control plane response project row is missing actions");
+      }
       break;
     case "read_look":
       if (!Object.prototype.hasOwnProperty.call(body, "look")) throw new Error("control plane response is missing look");
@@ -14422,6 +15670,10 @@ function parseControlPlaneResponse(op, value) {
     case "read_attachment_screens":
       if (!Array.isArray(body.screens)) throw new Error("control plane response is missing screens");
       break;
+    case "read_upload_screens":
+      if (!Array.isArray(body.screens)) throw new Error("control plane response is missing screens");
+      if (body.missing !== void 0 && !Array.isArray(body.missing)) throw new Error("control plane response has malformed missing");
+      break;
     case "refine_project":
       if (typeof body.ok !== "boolean") throw new Error("control plane response is missing refine_project result");
       if (body.ok) {
@@ -14462,6 +15714,16 @@ function parseControlPlaneResponse(op, value) {
         throw new Error("control plane response is missing clear_look result");
       }
       break;
+    case "search_app_listing":
+      if (typeof body.error !== "string" && !Array.isArray(body.results)) {
+        throw new Error("control plane response is missing results");
+      }
+      break;
+    case "resolve_app_listing":
+      if (typeof body.error !== "string" && !Object.prototype.hasOwnProperty.call(body, "listing")) {
+        throw new Error("control plane response is missing listing");
+      }
+      break;
     case "create_project":
     case "duplicate_project":
       requiredString(body.id, "id");
@@ -14618,8 +15880,25 @@ async function readAccountSnapshot(token2) {
   if (!body) return unavailable2("billing_unavailable");
   return snapshotFromEntitlementBody(body);
 }
+async function readAccountUserId(token2) {
+  try {
+    const res = await fetch(`${studioOrigin()}/api/billing-entitlement`, {
+      headers: { Authorization: `Bearer ${token2}`, [SHOTOPS_CLIENT_HEADER]: `shotops-mcp/${VERSION}` }
+    });
+    if (!res.ok) return null;
+    const body = await res.json().catch(() => null);
+    return typeof body?.userId === "string" && body.userId.length > 0 ? body.userId : null;
+  } catch {
+    return null;
+  }
+}
 function connectHostedBridge(token2) {
+  let accountId = null;
   return {
+    async accountUserId() {
+      accountId ??= await readAccountUserId(token2);
+      return accountId;
+    },
     async productionOperation(action, operationId) {
       const response = await callOp(token2, "production_operation", { action, operationId });
       return response.operation;
@@ -14663,6 +15942,18 @@ function connectHostedBridge(token2) {
       const res = await callOp(token2, "read_attachment_screens", { project: projectId, refs: [...refs] });
       return res.screens;
     },
+    async readUploadScreens(refs) {
+      try {
+        const res = await callOp(token2, "read_upload_screens", { refs: [...refs] });
+        return { screens: res.screens, missing: res.missing ?? [] };
+      } catch (err) {
+        if (err instanceof ControlPlaneOperationError && err.code === "foreign_refs") {
+          const named = err.refs.length > 0 ? err.refs : [...refs];
+          throw new Error(`ref does not belong to this account: ${named.join(", ")}`);
+        }
+        throw err;
+      }
+    },
     async refineProject(input) {
       return callOp(token2, "refine_project", input);
     },
@@ -14698,6 +15989,8 @@ function connectHostedBridge(token2) {
       const res = await callOp(token2, "save_look", { project: projectId, look: look2, ...sourceName ? { sourceName } : {} });
       return { version: res.version };
     },
+    searchAppListing: (term, country) => callOp(token2, "search_app_listing", { term, ...country ? { country } : {} }),
+    resolveAppListing: (reference, country) => callOp(token2, "resolve_app_listing", { reference, ...country ? { country } : {} }),
     async createProject(_userId, name, record8) {
       const res = await callOp(token2, "create_project", { name, record: record8 });
       return { id: res.id, recordVersion: res.recordVersion };
@@ -14736,6 +16029,8 @@ var init_hostedBridge = __esm({
       code;
       capability;
       requiredPlan;
+      /** The refs a `read_upload_screens` refusal named (#1014); empty on every other refusal. */
+      refs;
       constructor(op, status, body) {
         const code = typeof body?.error === "string" ? body.error : null;
         super(`${op} failed (${status}${code ? ` ${code}` : ""})`);
@@ -14744,6 +16039,7 @@ var init_hostedBridge = __esm({
         this.code = code;
         this.capability = typeof body?.capability === "string" ? body.capability : null;
         this.requiredPlan = typeof body?.requiredPlan === "string" ? body.requiredPlan : null;
+        this.refs = Array.isArray(body?.refs) ? body.refs.filter((ref) => typeof ref === "string") : [];
       }
     };
     RATE_LIMIT_RETRIES = 3;
@@ -14751,7 +16047,7 @@ var init_hostedBridge = __esm({
   }
 });
 
-// ../mockup-engine/layoutFindings.ts
+// ../mockup-engine/layoutFindingSentence.ts
 function describeUnresolvedLayout(findings) {
   if (!findings || findings.length === 0) return null;
   const frames = Array.from(new Set(findings.flatMap((finding) => finding.frames))).sort((left, right) => left - right).map((index) => `Frame ${index + 1}`);
@@ -14762,9 +16058,50 @@ function describeUnresolvedLayout(findings) {
   }
   return `${findings.length} layout overlaps still remain${where}.`;
 }
-var init_layoutFindings = __esm({
-  "../mockup-engine/layoutFindings.ts"() {
+var init_layoutFindingSentence = __esm({
+  "../mockup-engine/layoutFindingSentence.ts"() {
+    "use strict";
+  }
+});
+
+// ../mockup-engine/ops/agentTurnOps.ts
+function createAgentTurnOp(sources) {
+  const assetTable = mintAgentAssets(sources);
+  return {
+    assetTable,
+    run: (input, ports) => runAgentTurn({ ...input, assets: assetTable.descriptors }, {
+      loadProject: ports.loadProject,
+      renderComposed: ports.renderComposed,
+      authorize: ports.authorize,
+      emit: ports.emit,
+      unresolvedLayout: (rendered) => describeUnresolvedLayout(ports.layoutFindings(rendered)),
+      layoutCollisionFrames: (rendered) => ports.layoutFindings(rendered)?.flatMap((finding) => finding.frames) ?? null,
+      commit: async ({ after, assetBindings, expectedVersion }) => {
+        const current = ports.readCustody();
+        const custody = assetBindings.length > 0 ? bindAgentAssets(
+          assetTable,
+          assetBindings,
+          current.handoffRefs,
+          after.shots.map((shot) => ({ id: shot.id, frameName: shot.frameName }))
+        ) : null;
+        return ports.commitProject({
+          after,
+          expectedVersion,
+          custody: custody && {
+            handoffRefs: custody.handoffRefs,
+            screenPurgeRefs: foldDisplacedRefs(current.screenPurgeRefs, custody.displaced)
+          }
+        });
+      }
+    })
+  };
+}
+var init_agentTurnOps = __esm({
+  "../mockup-engine/ops/agentTurnOps.ts"() {
     "use strict";
+    init_layoutFindingSentence();
+    init_agentAssetCustody();
+    init_agentTurnCoordinator();
   }
 });
 
@@ -14825,10 +16162,10 @@ var init_aiShotProjection = __esm({
         schema: z9.enum(["front", "left", "right"]).optional(),
         prompt: "angle: front | left | right \u2014 a camera PRESET. Setting it discards any orbit value on that frame, so send orbit OR angle, never both."
       },
-      phoneHeight: {
+      deviceSize: {
         exposure: "included",
-        schema: z9.number().min(AI_SHOT_RANGES.phoneHeight.min).max(AI_SHOT_RANGES.phoneHeight.max).optional(),
-        prompt: `phoneHeight: ${AI_SHOT_RANGES.phoneHeight.min}\u2013${AI_SHOT_RANGES.phoneHeight.max} (% of panel height; over 100 bleeds off an edge)`
+        schema: z9.number().min(AI_SHOT_RANGES.deviceSize.min).max(AI_SHOT_RANGES.deviceSize.max).optional(),
+        prompt: `deviceSize: ${AI_SHOT_RANGES.deviceSize.min}\u2013${AI_SHOT_RANGES.deviceSize.max} (percent of the default device size: 100 is the default, about 122 fills the panel height, more bleeds off an edge)`
       },
       hOffset: {
         exposure: "included",
@@ -14899,6 +16236,16 @@ var init_aiShotProjection = __esm({
         exposure: "included",
         schema: z9.boolean().optional(),
         prompt: "flatScreen, glare, lighting, reflections, clipToFrame: true | false."
+      },
+      deviceFrame: {
+        exposure: "included",
+        schema: z9.boolean().optional(),
+        prompt: 'deviceFrame: true | false, default true. False renders a flat rounded screenshot card instead of the 3D device \u2014 no device chrome. "remove the phone frame"/"make it borderless" means deviceFrame: false. roll still rotates the flat card the same way it tilts a framed device.'
+      },
+      screenCornerRadius: {
+        exposure: "included",
+        schema: z9.number().min(AI_SHOT_RANGES.screenCornerRadius.min).max(AI_SHOT_RANGES.screenCornerRadius.max).optional(),
+        prompt: `screenCornerRadius: ${AI_SHOT_RANGES.screenCornerRadius.min}\u2013${AI_SHOT_RANGES.screenCornerRadius.max} (percent of the flat card's width). Applies only when deviceFrame is false.`
       }
     };
     API_AI_SHOT_INCLUDED_ENTRIES = Object.entries(API_AI_SHOT_PROJECTION).filter((entry) => entry[1].exposure === "included");
@@ -14979,7 +16326,11 @@ var init_refineProjectContracts = __esm({
     });
     framePatchSchema = z10.object({
       captionStyle: captionStylePatchSchema.optional(),
-      background: backgroundPatchSchema.optional()
+      background: backgroundPatchSchema.optional(),
+      // The per-frame half of the strip-wide `layout`, on the same two-scope footing as `captionStyle`
+      // and `background` above (#266). Without it a composition asked for on SOME frames had to be
+      // spent on ALL of them.
+      layout: z10.enum(START_LAYOUT_IDS).optional()
     });
     currentCaptionStyleSchema = captionStylePatchSchema.extend({
       color: currentColorSchema.optional()
@@ -15418,15 +16769,13 @@ function recordCustody(existing) {
   };
 }
 function recordEnvelope(existing, state, custody) {
-  const stored = existing != null && typeof existing === "object" && !Array.isArray(existing) ? { ...existing } : { record: 2 };
-  return {
-    ...stored,
+  return rebuildEnvelope(existing, {
     project: serializeProject(state),
     ...custody ? {
-      handoffRefs: custody.handoffRefs,
+      manifest: custody.handoffRefs,
       ...custody.screenPurgeRefs.length > 0 ? { screenPurgeRefs: custody.screenPurgeRefs } : {}
     } : {}
-  };
+  });
 }
 function aiCaptionStyleFromLayer(layer) {
   if (!layer) return {};
@@ -15748,13 +17097,14 @@ async function runMcpProjectAgentTurn(deps, input, runtime) {
       return { ...INVALID_ATTACHMENT };
     }
   }
-  const assetTable = mintAgentAssets(attachments.map((attachment) => ({
+  const turnOp = createAgentTurnOp(attachments.map((attachment) => ({
     ref: attachment.ref,
     label: attachment.label,
     ...attachment.width !== void 0 ? { width: attachment.width } : {},
     ...attachment.height !== void 0 ? { height: attachment.height } : {},
     singleUse: false
   })));
+  const assetTable = turnOp.assetTable;
   const turnId = randomUUID3();
   const turnKey = `turn_${turnId}`;
   const startedAt = input.startedAt ?? (/* @__PURE__ */ new Date()).toISOString();
@@ -15783,11 +17133,10 @@ async function runMcpProjectAgentTurn(deps, input, runtime) {
     assets: assetTable.descriptors,
     assetTable
   };
-  const result = await runAgentTurn({
+  const result = await turnOp.run({
     turnId,
     instruction: input.instruction,
     focus: input.focus,
-    assets: assetTable.descriptors,
     requestedCycle: input.requestedCycle,
     startedAt,
     cancelled: input.cancelled
@@ -15819,7 +17168,7 @@ async function runMcpProjectAgentTurn(deps, input, runtime) {
       const resolved = await withBoundAttachments(stored, state, variant, boundAssets, assetTable, readAttachmentBytes);
       return renderedTurn(deps, state, resolved);
     },
-    unresolvedLayout: (rendered) => describeUnresolvedLayout(rendered.layoutFindings),
+    layoutFindings: (rendered) => rendered.layoutFindings,
     authorize: async ({ cycle, state, rendered, previous }) => {
       const request = requestForPass(context, { cycle, state, rendered, previous });
       const authorization = await authorizePass(
@@ -15834,21 +17183,12 @@ async function runMcpProjectAgentTurn(deps, input, runtime) {
       const { patch: _refused, ...rest } = authorization;
       return { ...rest, terminalOutcome: failureOutcome("invalid_plan", handles.failure.message) };
     },
-    commit: async ({ after, assetBindings, expectedVersion }) => {
-      const custody = recordCustody(storedRecord);
-      const bound = assetBindings.length > 0 ? bindAgentAssets(
-        assetTable,
-        assetBindings,
-        custody.handoffRefs,
-        after.shots.map((shot) => ({ id: shot.id, frameName: shot.frameName }))
-      ) : null;
+    readCustody: () => recordCustody(storedRecord),
+    commitProject: async ({ after, expectedVersion, custody }) => {
       const write = await runtime.writeProjectRecord(
         project2.id,
         expectedVersion,
-        recordEnvelope(storedRecord, after, bound ? {
-          handoffRefs: bound.handoffRefs,
-          screenPurgeRefs: foldDisplacedRefs(custody.screenPurgeRefs, bound.displaced)
-        } : void 0),
+        recordEnvelope(storedRecord, after, custody ?? void 0),
         { actorUserId: deps.userId }
       );
       if (write.ok) return { ok: true, data: { projectId: project2.id, recordVersion: write.recordVersion } };
@@ -15921,10 +17261,11 @@ var init_agentTurnAdapter = __esm({
   "src/project/agentTurnAdapter.ts"() {
     "use strict";
     init_appstore();
+    init_agentTurnOps();
+    init_recordEnvelope();
     init_agentOutcome();
     init_projectRecord();
     init_gradient();
-    init_layoutFindings();
     init_capabilities();
     init_invalidRequest();
     init_refineProjectContracts();
@@ -16084,8 +17425,8 @@ async function postClaim(body) {
   const parsed = await res.json().catch(() => null);
   return { status: res.status, body: parsed ?? {} };
 }
-function claimFailure(step, status, code) {
-  const detail = status == null ? step : `${step} (${status}${typeof code === "string" && code ? ` ${code}` : ""})`;
+function claimFailure(step2, status, code) {
+  const detail = status == null ? step2 : `${step2} (${status}${typeof code === "string" && code ? ` ${code}` : ""})`;
   return new Error(
     `Images delivered, but the editable project was not created: pending-claim ${detail}. The local render/export is still usable; retry save_project to create a fresh private claim link.`
   );
@@ -16180,6 +17521,16 @@ var init_projectClaimClient = __esm({
 
 // src/runtime/localDeps.ts
 import { readFile as readFile4 } from "node:fs/promises";
+function refsNeedAccount(refs) {
+  throw new Error(
+    `A { "ref" } screenshot needs a signed-in ShotOps account, and this local server has none (${refs.join(", ")}). Pass each screenshot as a local { "path": "\u2026" } PNG, or sign in (npx shotops-mcp login) and try again.`
+  );
+}
+async function readUploadsThroughBridge(bridge, refs) {
+  const { screens, missing } = await bridge.readUploadScreens(refs);
+  if (missing.length > 0) throw new Error(missingUploadMessage(missing[0]));
+  return new Map(await Promise.all(screens.map(async ({ ref, url }) => [ref, new Uint8Array(await downloadPng(url, `Screenshot ref "${ref}"`))])));
+}
 function localToolDeps(token2, options = {}) {
   const base = {
     // #889 — the first render on a machine with no Playwright Chromium downloads it once, here only.
@@ -16238,6 +17589,7 @@ function localToolDeps(token2, options = {}) {
         throw new Error(`Saving an editable project is ${SIGN_IN}`);
       },
       createPendingProjectClaim: (name, record8, ctx) => createAnonymousProjectClaim(name, record8, ctx?.screenshots),
+      readUploadedRefs: async (refs) => refsNeedAccount(refs),
       updateProjectRecord: async () => {
         throw new Error(`Updating a saved project is ${SIGN_IN}`);
       },
@@ -16259,10 +17611,22 @@ function localToolDeps(token2, options = {}) {
     // Read FRESH on every production request and never cached: that is what makes a revoked,
     // expired or downgraded token take effect on the next call rather than at the next restart.
     readAccountSnapshot: () => bridge.readAccountSnapshot(),
+    // #1014 — `userId` is 'local' on this tier, so the account a `{ ref }` must belong to comes
+    // from the token. Without this every ref a save was handed failed the ownership test and was
+    // dropped from the project it reported saving.
+    accountUserId: () => bridge.accountUserId(),
+    // #1014 — the same placeholder `userId` made every render path refuse the caller's own refs as
+    // "not this account's". The control plane checks them against the token's account instead.
+    readUploadedRefs: (refs) => readUploadsThroughBridge(bridge, refs),
     productionOperation: {
       execute: (_userId, action, operationId) => bridge.productionOperation(action, operationId)
     },
     saveLook: (projectId, look2, sourceName) => bridge.saveLook(projectId, look2, sourceName),
+    // #1004 — the App Store listing doors, through the bridge and nowhere else. This tier runs in
+    // the USER's own process, so a direct Apple client here would be a second copy of the locale
+    // and device tables on their machine; the control plane keeps exactly one.
+    searchAppListing: (_userId, term, country) => bridgedListingCall(() => bridge.searchAppListing(term, country)),
+    resolveAppListing: (_userId, reference, country) => bridgedListingCall(() => bridge.resolveAppListing(reference, country)),
     // `ctx` is NOT forwarded as tool args — it existed so the REMOTE save_project tool could
     // rebuild the record, and the control plane is a dumb writer, so the record built HERE is the
     // one that gets stored. It is still READ, for one thing only: the local file paths whose
@@ -16290,83 +17654,84 @@ function localToolDeps(token2, options = {}) {
   bridged.refineProject = (userId, input) => runLocalRefineTurn({ ...bridged, userId }, bridge, input, options.emit ? { emit: options.emit } : void 0);
   return bridged;
 }
+async function bridgedListingCall(call) {
+  try {
+    return await call();
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    const throttled = err instanceof ControlPlaneOperationError && err.status === 429 || /refusing new requests/i.test(message);
+    return { error: throttled ? "throttled" : "unavailable", message };
+  }
+}
 async function pushScreens(bridge, projectId, record8, recordVersion, screenshots2) {
   const local = localScreenPaths(screenshots2);
   if (local.length === 0) return;
   try {
-    const slots = await bridge.mintScreenUploads(
-      projectId,
-      local.map((s) => s.name)
-    );
-    const uploadable = await Promise.all(slots.map(async (slot2) => {
-      const source = local.find((s) => s.name === slot2.name);
-      if (!source) return null;
-      return { slot: slot2, bytes: await readFile4(source.path) };
-    }));
-    const prepared = uploadable.filter((item) => item !== null);
-    if (prepared.length === 0) return;
     const envelope = record8 && typeof record8 === "object" ? record8 : {};
-    const parsedLive = parseScreenManifest(envelope.handoffRefs);
-    const existingLive = parsedLive ? allManifestEntries(parsedLive) : [];
-    const existingCustody = parseScreenPurgeRefs(envelope.screenPurgeRefs) ?? [];
     const cloudShots = shotRefsFromProjectFile(envelope.project);
-    const mintedRefs = {};
-    for (const { slot: slot2 } of prepared) {
-      if (slot2.name) mintedRefs[slot2.name] = slot2.ref;
-    }
-    const minted = manifestFromNamedRefs(mintedRefs, cloudShots);
-    const custody = custodyUnion(existingCustody, existingLive, minted);
-    const registered = await bridge.updateProjectRecord(projectId, {
-      ...envelope,
-      screenPurgeRefs: custody
-    }, recordVersion);
-    const registeredVersion = registered?.recordVersion ?? recordVersion + 1;
-    const outcomes = await Promise.allSettled(
-      prepared.map(async ({ slot: slot2, bytes }) => {
-        const res = await fetch(slot2.uploadUrl, {
-          method: "PUT",
-          headers: { "content-type": "image/png" },
-          body: new Uint8Array(bytes)
-        });
-        if (!res.ok) throw new Error(`upload ${slot2.name} -> ${res.status}`);
-        return slot2;
-      })
-    );
-    const successfulRefs = {};
-    for (const outcome of outcomes) {
-      if (outcome.status === "fulfilled" && outcome.value.name) {
-        successfulRefs[outcome.value.name] = outcome.value.ref;
+    const idsByFrameName = shotIdsByFrameName(cloudShots);
+    const cells = [];
+    const unaddressed = [];
+    for (const source of local) {
+      const ids = idsByFrameName[source.name];
+      if (ids === void 0) {
+        unaddressed.push(source.name);
+        continue;
       }
+      const bytes = await readFile4(source.path);
+      const hash = await screenshotFingerprint(bytes);
+      for (const id of ids) cells.push({ shotId: id, variant: {}, hash, bytes: new Uint8Array(bytes) });
     }
-    if (Object.keys(successfulRefs).length === 0) {
-      const failed2 = outcomes.find((outcome) => outcome.status === "rejected");
-      throw failed2?.reason ?? new Error("no screenshot upload completed");
+    if (unaddressed.length > 0) {
+      logEvent("warn", "screen_upload_unaddressed", { names: unaddressed.join(", ") });
     }
-    const preservedEntries = nonBaseCellEntries(existingLive);
-    const preservedKeep = new Set(
-      resolveScreenManifest(preservedEntries, cloudShots).cells.map((cell) => cell.entry)
+    if (cells.length === 0) return;
+    let version2 = recordVersion;
+    await saveProjectScreens(
+      {
+        projectId,
+        record: envelope,
+        shots: cloudShots,
+        cells,
+        // #178: refs and `reach` travel together. Studio only fetches bytes from refs when the
+        // record says the screens reach the account, so writing refs without it leaves the screens
+        // unreachable and the "Screens missing" banner firing anyway.
+        reach: "account",
+        rebuild: ({ manifest, custody }) => ({
+          ...envelope,
+          ...manifest.length > 0 ? { handoffRefs: manifest, reach: "account" } : {},
+          screenPurgeRefs: custody
+        })
+      },
+      {
+        async saveRecord({ record: next }) {
+          const written = await bridge.updateProjectRecord(projectId, next, version2);
+          version2 = written?.recordVersion ?? version2 + 1;
+        },
+        async mintUploadSlots({ cells: wanted }) {
+          const nameById = {};
+          for (const shot of cloudShots) nameById[shot.id] = shot.frameName;
+          const names = wanted.map((cell) => nameById[cell.shotId]).filter((name) => !!name);
+          const slots = await bridge.mintScreenUploads(projectId, names);
+          return wanted.flatMap((cell) => {
+            const slot2 = slots.find((minted) => minted.name === nameById[cell.shotId]);
+            return slot2 ? [{ shotId: cell.shotId, variant: cell.variant, ref: slot2.ref, uploadUrl: slot2.uploadUrl }] : [];
+          });
+        },
+        async putBytes({ slot: slot2, bytes }) {
+          const res = await fetch(slot2.uploadUrl, {
+            method: "PUT",
+            headers: { "content-type": "image/png" },
+            body: new Uint8Array(bytes)
+          });
+          if (!res.ok) throw new Error(`upload ${slot2.ref} -> ${res.status}`);
+        }
+      }
     );
-    const preserved = preservedEntries.filter((entry) => preservedKeep.has(entry));
-    await bridge.updateProjectRecord(projectId, {
-      ...envelope,
-      handoffRefs: mergeManifest(preserved, manifestFromNamedRefs(successfulRefs, cloudShots)),
-      screenPurgeRefs: custody,
-      reach: "account"
-    }, registeredVersion);
-    const failed = outcomes.find((outcome) => outcome.status === "rejected");
-    if (failed) throw failed.reason;
   } catch (err) {
     logEvent("error", "screen_upload_failed", { message: err.message });
   }
 }
-function custodyUnion(...manifests) {
-  const seen = /* @__PURE__ */ new Set();
-  return manifests.flatMap((manifest) => manifest.filter((entry) => {
-    if (seen.has(entry.ref)) return false;
-    seen.add(entry.ref);
-    return true;
-  }));
-}
 var SIGN_IN, SHARE_LINK_NOT_BRIDGED;
 var init_localDeps = __esm({
   "src/runtime/localDeps.ts"() {
@@ -16379,8 +17744,10 @@ var init_localDeps = __esm({
     init_projectClaimClient();
     init_log();
     init_capabilities();
-    init_projectRecord();
     init_screenManifest();
+    init_fingerprint();
+    init_persistenceOps();
+    init_uploads();
     SIGN_IN = "not available in local (free) mode \u2014 connect the hosted ShotOps MCP and sign in for saved looks, editable projects, and share links.";
     SHARE_LINK_NOT_BRIDGED = `Creating a share link is ${SIGN_IN} (bridging this needs a hosted rendering step, which local mode deliberately avoids \u2014 connect directly to the hosted MCP for share links.)`;
   }
@@ -16496,7 +17863,7 @@ function canonicalJson(value) {
   return `${JSON.stringify(stableValue(value), null, 2)}
 `;
 }
-function sha256(value) {
+function sha2562(value) {
   return createHash5("sha256").update(value).digest("hex");
 }
 async function sha256File(path) {
@@ -17238,7 +18605,7 @@ function desiredReleasePayload(manifest) {
   return payload;
 }
 function computeDesiredId(payload) {
-  return sha256(canonicalJson(payload));
+  return sha2562(canonicalJson(payload));
 }
 function parseTextValue(value, label) {
   const item = record4(value, label);
@@ -18519,8 +19886,8 @@ async function assembleDesiredRelease(input) {
   };
   const recordBytes = Buffer.from(canonicalString(project2.record), "utf8");
   const projectBlob = {
-    path: seal(sha256(recordBytes), { bytes: recordBytes }),
-    sha256: sha256(recordBytes),
+    path: seal(sha2562(recordBytes), { bytes: recordBytes }),
+    sha256: sha2562(recordBytes),
     bytes: recordBytes.byteLength,
     mediaType: "application/json"
   };
@@ -18567,7 +19934,7 @@ async function assembleDesiredRelease(input) {
           throw new Error(`renderer returned a non-PNG panel for ${output2.id}/${locale2} at position ${index + 1}`);
         }
         const position = index + 1;
-        const digest4 = sha256(bytes);
+        const digest4 = sha2562(bytes);
         artifacts.push({
           role: "rendered_screenshot",
           custody: "sealed",
@@ -18780,7 +20147,7 @@ function screenshotSetProjection(set) {
   return set ? { id: set.id, deviceSet: set.deviceSet, items: mediaProjection(set.items) } : null;
 }
 function screenshotSetToken(set) {
-  return sha256(canonicalJson(screenshotSetProjection(set)));
+  return sha2562(canonicalJson(screenshotSetProjection(set)));
 }
 function previewTypeFor(deviceSet) {
   return deviceSet.replace(/^APP_/, "");
@@ -18836,7 +20203,7 @@ function projectRemoteResource(remote, scope) {
   }
 }
 function resourceToken(remote, scope) {
-  return sha256(canonicalJson(projectRemoteResource(remote, scope)));
+  return sha2562(canonicalJson(projectRemoteResource(remote, scope)));
 }
 function scopeKey(scope) {
   return scope.key === null ? scope.resource : `${scope.resource}:${scope.key}`;
@@ -18919,10 +20286,10 @@ var init_releaseDrift = __esm({
 
 // src/release/releaseOperations.ts
 function operationValueHash(value) {
-  return sha256(canonicalJson(value));
+  return sha2562(canonicalJson(value));
 }
 function computeOperationId(input) {
-  return sha256(canonicalJson({
+  return sha2562(canonicalJson({
     kind: input.kind,
     target: input.target,
     precondition: input.precondition,
@@ -19537,7 +20904,7 @@ function assertSha(value, label) {
   if (typeof value !== "string" || !SHA2562.test(value)) throw new Error(`${label} is not a SHA-256 digest`);
 }
 function valueHash(value) {
-  return sha256(canonicalJson(value));
+  return sha2562(canonicalJson(value));
 }
 function assertExactReleasePlan(value) {
   if (!isRecord5(value) || value.kind !== "shotops.release-plan") {
@@ -19636,7 +21003,7 @@ async function readScreenshot(root, reference) {
   if (!bytes.subarray(0, PNG_SIGNATURE3.length).equals(PNG_SIGNATURE3)) {
     throw new Error(`release screenshot is not a PNG: ${reference.source}`);
   }
-  if (sha256(bytes) !== reference.sha256) throw new Error(`release screenshot content changed: ${reference.source}`);
+  if (sha2562(bytes) !== reference.sha256) throw new Error(`release screenshot content changed: ${reference.source}`);
   return bytes;
 }
 async function atomicPrivateWrite(path, bytes) {
@@ -19748,7 +21115,7 @@ async function loadArtifact(path, now) {
       throw new Error("release review artifact screenshot manifest does not match the plan");
     }
     const bytes = entries[raw.path];
-    if (!bytes || bytes.byteLength !== raw.bytes || bytes.byteLength !== expected.get(raw.sha256).bytes || !Buffer.from(bytes.subarray(0, PNG_SIGNATURE3.length)).equals(PNG_SIGNATURE3) || sha256(bytes) !== raw.sha256) {
+    if (!bytes || bytes.byteLength !== raw.bytes || bytes.byteLength !== expected.get(raw.sha256).bytes || !Buffer.from(bytes.subarray(0, PNG_SIGNATURE3.length)).equals(PNG_SIGNATURE3) || sha2562(bytes) !== raw.sha256) {
       throw new Error("release review artifact screenshot content does not match the plan");
     }
     screenshots2.set(raw.sha256, bytes);
@@ -19854,7 +21221,7 @@ function assertRecord(record8) {
   assertDetail(record8.detail);
 }
 function chain(previous, payload) {
-  return sha256(`${previous}\0${canonicalJson(payload)}`);
+  return sha2562(`${previous}\0${canonicalJson(payload)}`);
 }
 function journalFileName(attemptId) {
   return `attempt-${attemptId}.ndjson`;
@@ -20129,7 +21496,7 @@ async function writePartialReceipt(path, receipt) {
   await rename4(temporary, path);
 }
 function receiptDigest(payload) {
-  return sha256(canonicalJson(payload));
+  return sha2562(canonicalJson(payload));
 }
 var RELEASE_JOURNAL_SCHEMA, RELEASE_JOURNAL_KIND, MAX_DETAIL_TEXT, SHA2563, RELEASE_JOURNAL_STAGES, RELEASE_JOURNAL_PHASES, RELEASE_JOURNAL_STATUSES, ReleaseJournalError, SAFE_ID, JOURNAL_FILE, ATTEMPT_DIRECTORY_NAME;
 var init_releaseJournal = __esm({
@@ -20983,7 +22350,7 @@ async function inspectLocalEvidence(input) {
   let workspace = null;
   try {
     workspace = await verifyReleaseWorkspace(workspacePath);
-    if (workspace.manifest.desiredId !== plan.desired.desiredId || sha256(workspace.text) !== plan.desired.manifestSha256) {
+    if (workspace.manifest.desiredId !== plan.desired.desiredId || sha2562(workspace.text) !== plan.desired.manifestSha256) {
       diagnostics.push("unsupported_evidence");
     }
   } catch {
@@ -21283,7 +22650,7 @@ async function inspectApple(evidence, deps, diagnostics) {
     diagnostics.push("credentials_missing");
     return { editable: false, url: null, context: null };
   }
-  if (sha256(setup.issuerId) !== evidence.plan.owner.issuerIdSha256 || sha256(setup.keyId) !== evidence.plan.owner.keyIdSha256) {
+  if (sha2562(setup.issuerId) !== evidence.plan.owner.issuerIdSha256 || sha2562(setup.keyId) !== evidence.plan.owner.keyIdSha256) {
     diagnostics.push("credentials_missing");
     return { editable: false, url: null, context: null };
   }
@@ -22198,7 +23565,7 @@ async function runUpload(request, client, deps, ids, record8) {
   } catch {
     return { state: "not-applied", reason: "validation_failed" };
   }
-  if (bytes.byteLength !== request.payload.bytes || sha256(bytes) !== request.payload.sha256) {
+  if (bytes.byteLength !== request.payload.bytes || sha2562(bytes) !== request.payload.sha256) {
     return { state: "not-applied", reason: "validation_failed" };
   }
   let relationshipId;
@@ -23087,7 +24454,7 @@ async function sealBackup(destination, manifest, blobs) {
       await writeFile6(file, bytes, { mode: 384 });
       const written = await stat5(file);
       if (written.size !== bytes.byteLength) fail4("a recovery backup image changed size while it was being written");
-      if (await sha256File(file) !== sha256(bytes)) fail4("a recovery backup image changed content while it was being written");
+      if (await sha256File(file) !== sha2562(bytes)) fail4("a recovery backup image changed content while it was being written");
       await fsyncPath2(file, false);
     }
     const manifestPath = join15(temporary, BACKUP_FILENAME);
@@ -23227,7 +24594,7 @@ async function readSealedImages(workspace, manifest, selected) {
       if (!info?.isFile() || info.isSymbolicLink()) fail4(`the sealed image for ${set.key} is missing or unsafe`);
       if (info.size !== payload.bytes) fail4(`the sealed image for ${set.key} changed size since the plan was approved`);
       const bytes = await readFile12(file);
-      if (sha256(bytes) !== payload.sha256) fail4(`the sealed image for ${set.key} changed since the plan was approved`);
+      if (sha2562(bytes) !== payload.sha256) fail4(`the sealed image for ${set.key} changed since the plan was approved`);
       const md5 = md5Hex(bytes);
       if (md5 !== payload.md5) fail4(`the sealed image for ${set.key} does not match the checksum the plan approved`);
       sealed.set(payload.sha256, { bytes, md5 });
@@ -23307,7 +24674,7 @@ async function captureBackup(client, plan, manifest, bound, destination, capture
         fail4(`App Store Connect will not release the bytes of ${image.fileName} in ${item.selected.target.locale}/${item.selected.target.deviceSet}; nothing was deleted`);
       }
       const bytes = await client.download(image.asset);
-      const digest4 = sha256(bytes);
+      const digest4 = sha2562(bytes);
       const md5 = md5Hex(bytes);
       if (image.sourceFileChecksum && image.sourceFileChecksum !== md5) {
         fail4(`the bytes App Store Connect returned for ${image.fileName} do not match its own checksum; nothing was deleted`);
@@ -23704,7 +25071,7 @@ function assetsFingerprint(assets) {
   });
 }
 function valueHash2(value) {
-  return sha256(canonicalJson(value));
+  return sha2562(canonicalJson(value));
 }
 function payloadOf(asset, role) {
   return { role, source: asset.source, sha256: asset.sha256, md5: asset.md5, bytes: asset.bytes };
@@ -24317,7 +25684,7 @@ async function createReleasePlan(input, deps = {}) {
   const approvalExpiresAt = new Date(now.getTime() + APPROVAL_TTL_MS).toISOString();
   const policySha256 = valueHash2(RELEASE_POLICY);
   const remoteSnapshotSha256 = valueHash2(remote);
-  const manifestSha256 = sha256(loaded.text);
+  const manifestSha256 = sha2562(loaded.text);
   const commitment = mintCommitmentKey(deps.randomSource);
   const payload = {
     schema: PLAN_SCHEMA2,
@@ -24339,7 +25706,7 @@ async function createReleasePlan(input, deps = {}) {
       buildSha256: loaded.manifest.build?.sha256 ?? null,
       scope: loaded.manifest.scope
     },
-    owner: { issuerIdSha256: sha256(setup.issuerId), keyIdSha256: sha256(setup.keyId) },
+    owner: { issuerIdSha256: sha2562(setup.issuerId), keyIdSha256: sha2562(setup.keyId) },
     target: {
       appId: remote.app.id,
       appInfoId: remote.appInfo.id,
@@ -25036,7 +26403,7 @@ async function runPreflight(input, deps, recovery) {
   if (plan.desired.desiredId !== workspace.manifest.desiredId) {
     refuse2("plan_mismatch", "this plan was built from a different desired release than the workspace holds");
   }
-  if (plan.desired.manifestSha256 !== sha256(workspace.text)) {
+  if (plan.desired.manifestSha256 !== sha2562(workspace.text)) {
     refuse2("plan_mismatch", "the sealed desired release changed after this plan was built; re-plan before committing");
   }
   if (!EDITABLE_VERSION_STATES.has(plan.target.appStoreState)) {
@@ -25052,7 +26419,7 @@ async function runPreflight(input, deps, recovery) {
   } catch (error) {
     refuse2("setup_unavailable", error.message);
   }
-  if (sha256(setup.issuerId) !== plan.owner.issuerIdSha256 || sha256(setup.keyId) !== plan.owner.keyIdSha256) {
+  if (sha2562(setup.issuerId) !== plan.owner.issuerIdSha256 || sha2562(setup.keyId) !== plan.owner.keyIdSha256) {
     refuse2("owner_mismatch", "this machine's App Store Connect setup is not the one this plan was built with");
   }
   let appleToken;
@@ -25255,7 +26622,7 @@ async function runStages(preflight, attemptId, journal, signal, deps, now) {
 function readSealedPayload(workspacePath) {
   return async (reference) => {
     const bytes = await readFile13(join17(workspacePath, ...reference.source.split("/")));
-    if (bytes.byteLength !== reference.bytes || sha256(bytes) !== reference.sha256) {
+    if (bytes.byteLength !== reference.bytes || sha2562(bytes) !== reference.sha256) {
       throw new Error("a sealed payload changed since this plan was approved");
     }
     return bytes;
@@ -25861,23 +27228,20 @@ function parsePrepareArgs(argv2) {
   };
 }
 function authoredLocales(projectFile) {
-  const file = projectFile;
-  const locales = Array.isArray(file.locales) ? file.locales.filter((locale2) => typeof locale2 === "string" && locale2.trim().length > 0) : [];
-  const fallback = typeof file.baseLocale === "string" && file.baseLocale.trim() ? file.baseLocale.trim() : "en-US";
-  const result = Array.from(new Set((locales.length ? locales : [fallback]).map((locale2) => locale2.trim())));
-  for (const locale2 of result) {
+  const locales = projectLocaleAxis(projectFile).locales;
+  for (const locale2 of locales) {
     if (!/^[A-Za-z0-9]+(?:-[A-Za-z0-9]+)*$/.test(locale2)) throw new Error(`project contains an unsafe locale identifier: ${locale2}`);
   }
-  return result;
+  return locales;
 }
 function selectedOutputs(projectFile) {
   const resolved = outputDevicesFromProjectFile(projectFile);
   const file = projectFile;
   const declared = Array.isArray(file.outputs) ? file.outputs.filter((id) => typeof id === "string" && id.length > 0) : [];
   if (declared.length > 0) return { outputs: [...resolved.devices], unsupported: resolved.dropped };
-  const preset = typeof file.panelPresetId === "string" ? file.panelPresetId : void 0;
+  const preset = projectOutputAxis(projectFile).panelPresetId;
   const fallback = OUTPUT_DEVICES.find((output2) => output2.panelPresetId === preset);
-  if (!fallback) throw new Error(`project output is unavailable or unsupported (panel preset ${preset ?? "missing"})`);
+  if (!fallback) throw new Error(`project output is unavailable or unsupported (panel preset ${preset})`);
   return { outputs: [fallback], unsupported: [] };
 }
 function localReleaseDoor(token2) {
@@ -26028,6 +27392,7 @@ var RELEASE_PREPARE_USAGE, RELEASE_GC_USAGE, LOCAL_ACTOR;
 var init_releasePrepare = __esm({
   "src/release/releasePrepare.ts"() {
     "use strict";
+    init_appstore();
     init_env();
     init_productionRenderAccess();
     init_projectResolution();
@@ -26278,7 +27643,7 @@ function pageCss() {
     *{box-sizing:border-box}html{background:var(--paper);color:var(--ink);font-family:ui-sans-serif,-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif;font-size:16px;line-height:1.5}body{margin:0}main{max-width:1240px;margin:0 auto;padding:44px 32px 96px}
     .eyebrow,.section-heading>p,.integrity-lead>p{margin:0 0 8px;text-transform:uppercase;letter-spacing:.14em;font-size:.72rem;font-weight:750;color:var(--green)}h1,h2{font-family:Georgia,"Times New Roman",serif;font-weight:500;letter-spacing:-.025em}h1{font-size:clamp(2.7rem,7vw,6.4rem);line-height:.9;margin:20px 0 24px;max-width:900px}h2{font-size:2rem;line-height:1.05;margin:0}h3{font-size:1rem;margin:0}.masthead{display:grid;grid-template-columns:minmax(0,1.6fr) minmax(260px,.55fr);gap:56px;padding:10px 0 42px;border-bottom:1px solid var(--ink)}.masthead-copy>p:last-child{max-width:700px;color:var(--muted);font-size:1.08rem}.identity{align-self:end;border-left:4px solid var(--green);padding:4px 0 4px 20px}.identity dl{margin:0}.identity div{padding:8px 0;border-bottom:1px solid var(--line)}dt{text-transform:uppercase;letter-spacing:.08em;font-size:.67rem;font-weight:750;color:var(--muted)}dd{margin:2px 0 0;font-weight:650;overflow-wrap:anywhere}.warnings{position:sticky;top:0;z-index:5;display:grid;gap:1px;margin:0;background:var(--ink);box-shadow:0 6px 18px #161b1d22}.warning{display:flex;gap:20px;align-items:baseline;padding:14px 32px;color:white}.warning strong{min-width:150px;text-transform:uppercase;letter-spacing:.1em;font-size:.7rem}.warning--partial{background:var(--red)}.warning--build{background:var(--amber)}.warning--expired{background:var(--ink)}
     .integrity{display:grid;grid-template-columns:minmax(240px,.55fr) 1.45fr;margin:48px 0;background:var(--ink);color:var(--paper);border-radius:2px;overflow:hidden}.integrity-lead{padding:32px;border-right:1px solid #ffffff2a}.integrity-lead p{color:#9dd0b5}.integrity-lead span{display:block;color:#c9c4ba;margin-top:16px}.integrity dl{display:grid;grid-template-columns:1fr 1fr;margin:0}.integrity dl div{min-width:0;padding:18px 22px;border-right:1px solid #ffffff1c;border-bottom:1px solid #ffffff1c}.integrity dt{color:#aaa59c}.integrity code{font-size:.73rem;color:#fff;overflow-wrap:anywhere}.scope-card{display:grid;grid-template-columns:1.1fr 1fr 1fr 1fr;border:1px solid var(--line);background:var(--white);margin-bottom:64px}.scope-card>div{padding:24px;border-right:1px solid var(--line)}.scope-card>div:last-child{border:0}.scope-status span{display:inline-block;padding:4px 8px;background:var(--green);color:white;text-transform:uppercase;letter-spacing:.08em;font-size:.66rem;font-weight:750}.scope-card[data-scope="partial"] .scope-status span{background:var(--red)}.scope-status strong{display:block;margin-top:18px;font-family:Georgia,"Times New Roman",serif;font-size:1.5rem;line-height:1.1}.scope-card h3{text-transform:uppercase;letter-spacing:.08em;font-size:.7rem}.scope-card ul{list-style:none;margin:12px 0 0;padding:0}.scope-card li{padding:3px 0}.muted{color:var(--muted)}
-    .operation-section,.forbidden{display:grid;grid-template-columns:230px 1fr;gap:34px;margin:64px 0}.section-heading{position:sticky;top:82px;align-self:start}.section-heading>span{display:block;margin-top:12px;color:var(--muted);font-size:.85rem}.operation-list{display:grid;gap:14px}.operation{background:var(--white);border:1px solid var(--line)}.operation>header{display:grid;grid-template-columns:42px 1fr auto;gap:14px;padding:18px 20px;border-bottom:1px solid var(--line);align-items:start}.sequence{font-family:Georgia,"Times New Roman",serif;font-size:1.3rem;color:var(--muted)}.action{padding:4px 8px;border:1px solid currentColor;text-transform:uppercase;letter-spacing:.08em;font-size:.65rem;font-weight:800;color:var(--green)}.action--clear,.action--replace{color:var(--red)}.action--noop{color:var(--muted)}.action--attach,.action--upload{color:var(--amber)}.target{display:flex;flex-wrap:wrap;gap:6px 16px;margin:7px 0 0}.target div{display:flex;gap:5px}.target dt{font-size:.6rem}.target dd{font-size:.72rem;margin:0;font-weight:600}.diff{display:grid;grid-template-columns:1fr 1fr}.value{min-width:0;padding:18px 20px}.value:first-child{border-right:1px solid var(--line)}.value>span{display:block;text-transform:uppercase;letter-spacing:.09em;font-size:.62rem;font-weight:750;color:var(--muted);margin-bottom:7px}.value pre{margin:0;white-space:pre-wrap;overflow-wrap:anywhere;font:500 .82rem/1.5 ui-monospace,SFMono-Regular,Menlo,monospace}.value--after{background:#f8f5ef}.value--empty pre{color:var(--red);font-style:italic}.verdict{font-size:1.5rem}.gallery-groups{display:grid;gap:24px}.gallery .shot-grid{grid-template-columns:repeat(auto-fill,minmax(150px,190px));gap:12px;background:none}.gallery .shot-grid figure{border:1px solid var(--line)}.gallery-group h3{text-transform:uppercase;letter-spacing:.08em;font-size:.7rem;color:var(--muted);margin:0 0 10px}.fold{border:1px solid var(--line);background:var(--white)}.fold summary{cursor:pointer;padding:16px 20px;font-weight:650;list-style:none}.fold summary::-webkit-details-marker{display:none}.fold summary::before{content:'\u25B8 ';color:var(--muted)}.fold[open] summary::before{content:'\u25BE '}.fold-list{list-style:none;margin:0;padding:0 20px 14px;display:grid;gap:6px}.operation--folded{display:flex;gap:12px;border:0;background:none;font-size:.9rem}.operation--folded .sequence{font-size:.9rem}.operation>footer{display:flex;justify-content:space-between;gap:20px;padding:10px 20px;border-top:1px solid var(--line);color:var(--muted);font-size:.68rem}.operation>footer code{overflow:hidden;text-overflow:ellipsis}.reason{font-weight:700;color:var(--amber);white-space:nowrap}.shot-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(150px,1fr));gap:1px;background:var(--line)}.shot-grid figure{margin:0;background:var(--white);padding:14px}.shot-frame{aspect-ratio:1290/2796;background:var(--wash);display:flex;align-items:center;justify-content:center;overflow:hidden}.shot-frame img{display:block;width:100%;height:100%;object-fit:contain}.shot-grid figcaption{display:grid;gap:2px;margin-top:10px}.shot-grid figcaption span,.shot-grid figcaption small{font-size:.68rem;overflow-wrap:anywhere;color:var(--muted)}.empty-section>p{margin:0;padding:28px;background:var(--wash);color:var(--muted)}
+    .operation-section,.forbidden{display:grid;grid-template-columns:230px 1fr;gap:34px;margin:64px 0}.section-heading{position:sticky;top:82px;align-self:start}.section-heading>span{display:block;margin-top:12px;color:var(--muted);font-size:.85rem}.operation-list{display:grid;gap:14px}.operation{background:var(--white);border:1px solid var(--line)}.operation>header{display:grid;grid-template-columns:42px 1fr auto;gap:14px;padding:18px 20px;border-bottom:1px solid var(--line);align-items:start}.sequence{font-family:Georgia,"Times New Roman",serif;font-size:1.3rem;color:var(--muted)}.action{padding:4px 8px;border:1px solid currentColor;text-transform:uppercase;letter-spacing:.08em;font-size:.65rem;font-weight:800;color:var(--green)}.action--clear,.action--replace{color:var(--red)}.action--noop{color:var(--muted)}.action--attach,.action--upload{color:var(--amber)}.target{display:flex;flex-wrap:wrap;gap:6px 16px;margin:7px 0 0}.target div{display:flex;gap:5px}.target dt{font-size:.6rem}.target dd{font-size:.72rem;margin:0;font-weight:600}.diff{display:grid;grid-template-columns:1fr 1fr}.value{min-width:0;padding:18px 20px}.value:first-child{border-right:1px solid var(--line)}.value>span{display:block;text-transform:uppercase;letter-spacing:.09em;font-size:.62rem;font-weight:750;color:var(--muted);margin-bottom:7px}.value pre{margin:0;white-space:pre-wrap;overflow-wrap:anywhere;font:500 .82rem/1.5 ui-monospace,SFMono-Regular,Menlo,monospace}.value--after{background:#f8f5ef}.value--empty pre{color:var(--red);font-style:italic}.verdict{font-size:1.5rem}.gallery-groups{display:grid;gap:24px}.gallery .shot-grid{grid-template-columns:repeat(auto-fill,minmax(150px,190px));gap:12px;background:none}.gallery .shot-grid figure{border:1px solid var(--line)}.gallery-group h3{text-transform:uppercase;letter-spacing:.08em;font-size:.7rem;color:var(--muted);margin:0 0 10px}.fold{border:1px solid var(--line);background:var(--white)}.fold summary{cursor:pointer;padding:16px 20px;font-weight:650;list-style:none}.fold summary::-webkit-details-marker{display:none}.fold summary::before{content:'\u25B8 ';color:var(--muted)}.fold[open] summary::before{content:'\u25BE '}.fold-list{list-style:none;margin:0;padding:0 20px 14px;display:grid;gap:6px}.operation--folded{display:flex;gap:12px;border:0;background:none;font-size:.9rem}.operation--folded .sequence{font-size:.9rem}.operation>footer{display:flex;justify-content:space-between;gap:20px;padding:10px 20px;border-top:1px solid var(--line);color:var(--muted);font-size:.68rem}.operation>footer code{overflow:hidden;text-overflow:ellipsis}.reason{font-weight:700;color:var(--amber);white-space:nowrap}.shot-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(150px,1fr));gap:1px;background:var(--line)}.shot-grid figure{margin:0;background:var(--white);padding:14px}.shot-frame{aspect-ratio:1320/2868;background:var(--wash);display:flex;align-items:center;justify-content:center;overflow:hidden}.shot-frame img{display:block;width:100%;height:100%;object-fit:contain}.shot-grid figcaption{display:grid;gap:2px;margin-top:10px}.shot-grid figcaption span,.shot-grid figcaption small{font-size:.68rem;overflow-wrap:anywhere;color:var(--muted)}.empty-section>p{margin:0;padding:28px;background:var(--wash);color:var(--muted)}
     .approval .approve-body{border:1px solid var(--line);background:var(--white);padding:26px}.approval[data-approval-state="approved"] .approve-body{border-left:4px solid var(--green)}.approval[data-approval-state="expired"] .approve-body{border-left:4px solid var(--red)}.approve-body>p{margin:0 0 16px}.approve-code{display:flex;flex-wrap:wrap;align-items:baseline;gap:12px;margin:0 0 18px;padding:14px 18px;background:var(--ink);color:var(--paper)}.approve-code span{text-transform:uppercase;letter-spacing:.1em;font-size:.66rem;font-weight:750;color:#9dd0b5}.approve-code code{font:700 1.25rem/1 ui-monospace,SFMono-Regular,Menlo,monospace;letter-spacing:.08em}.approve-facts{display:grid;grid-template-columns:1fr 1fr;gap:12px 24px;margin:22px 0 0}.approve-facts code{font-size:.73rem;overflow-wrap:anywhere}.approve-note{margin:20px 0 0;color:var(--muted);font-size:.82rem}
     .forbidden{padding-top:54px;border-top:1px solid var(--ink)}.forbidden ul{list-style:none;margin:0;padding:0;display:grid;grid-template-columns:1fr 1fr;gap:1px;background:var(--line)}.forbidden li{display:flex;gap:14px;padding:22px;background:var(--white)}.forbidden li>span{color:var(--red);font-size:1.4rem;line-height:1}.forbidden p{margin:5px 0 0;color:var(--muted);font-size:.82rem}.page-footer{display:flex;justify-content:space-between;gap:30px;margin-top:72px;padding-top:20px;border-top:1px solid var(--ink);color:var(--muted);font-size:.76rem}.page-footer code{overflow-wrap:anywhere}
     @media(max-width:900px){main{padding:28px 20px 70px}.masthead{grid-template-columns:1fr;gap:24px}.identity{align-self:auto}.warning{padding-inline:20px}.integrity{grid-template-columns:1fr}.integrity-lead{border-right:0;border-bottom:1px solid #ffffff2a}.scope-card{grid-template-columns:1fr 1fr}.scope-card>div:nth-child(2){border-right:0}.scope-card>div:nth-child(-n+2){border-bottom:1px solid var(--line)}.operation-section,.forbidden{grid-template-columns:1fr;gap:20px}.section-heading{position:static}.forbidden ul{grid-template-columns:1fr}}
@@ -26455,7 +27820,7 @@ function serializeReleaseReviewPayload(payload) {
   if (json.length > RELEASE_REVIEW_PAYLOAD_LIMITS.maxPayloadBytes) {
     throw new Error("this plan\u2019s review content is too large to upload for remote review");
   }
-  return { bytes: new TextEncoder().encode(json), sha256: sha256(json) };
+  return { bytes: new TextEncoder().encode(json), sha256: sha2562(json) };
 }
 var init_releaseReviewPayload2 = __esm({
   "src/release/releaseReviewPayload.ts"() {
@@ -27423,6 +28788,66 @@ init_toolContract();
 init_toolResults();
 init_toolsAccount();
 
+// src/tools/toolsAppListing.ts
+init_toolResults();
+
+// src/project/appListingLink.ts
+init_appListing();
+function appListingView(listing2) {
+  const { applied } = listing2;
+  return {
+    appId: listing2.trackId,
+    bundleId: listing2.bundleId,
+    name: listing2.trackName,
+    seller: listing2.sellerName,
+    ...listing2.trackViewUrl ? { storeUrl: listing2.trackViewUrl } : {},
+    ...applied.iconUrl ? { iconUrl: applied.iconUrl } : {},
+    locales: applied.locales,
+    baseLocale: applied.baseLocale,
+    outputs: applied.outputs,
+    supportsIpad: applied.supportsIpad,
+    storefront: listing2.storefront,
+    ...applied.droppedLanguageCodes.length > 0 ? { droppedLanguageCodes: applied.droppedLanguageCodes } : {}
+  };
+}
+function linkedAppFromRecord(record8) {
+  const listing2 = readAppListing(record8);
+  return listing2 ? appListingView(listing2) : null;
+}
+function appListingFailureCode(kind) {
+  const codes = {
+    // Both are the caller's to fix with a different reference: one could not be parsed, the other
+    // named no app. Neither is a ShotOps asset, so `asset_not_found` would point at the wrong door.
+    invalid_reference: "invalid_input",
+    not_found: "invalid_input",
+    throttled: "rate_limited",
+    unavailable: "upstream_unavailable"
+  };
+  return codes[kind];
+}
+
+// src/tools/toolsAppListing.ts
+var APP_LISTING_SIGN_IN = "Searching the App Store needs a ShotOps account. Sign in at https://shotops.dev, or configure SHOTOPS_TOKEN on this server, and try again. You can still name the app yourself \u2014 pass `projectName` on save_project.";
+function failureKind(answer) {
+  const error = answer?.error;
+  return typeof error === "string" ? error : null;
+}
+async function handleSearchAppListing(deps, args) {
+  if (!deps.searchAppListing) return errorResult(APP_LISTING_SIGN_IN, "authentication_required");
+  const answer = await deps.searchAppListing(deps.userId, args.term, args.country);
+  const kind = failureKind(answer);
+  if (kind) {
+    return errorResult(answer.message, appListingFailureCode(kind));
+  }
+  const results = answer.results.map(appListingView);
+  const storefront = args.country?.toLowerCase() ?? "us";
+  return textResult({
+    ok: true,
+    results,
+    message: results.length === 0 ? `No App Store app matched "${args.term}" in the ${storefront} storefront. Try the exact name as it appears on the App Store, or another storefront with \`country\` \u2014 an app released in one country is invisible to a search of any other.` : `${results.length} App Store ${results.length === 1 ? "app" : "apps"} matched "${args.term}" in the ${storefront} storefront. Confirm with the user WHICH app is theirs \u2014 the icon and seller are what prove it \u2014 then pass that result\u2019s \`appId\` (or \`storeUrl\`) as \`appListing\` on save_project, and the project it creates takes the app\u2019s name, bundle ID, languages and iPhone devices. \`locales\` and \`outputs\` on each result are what the listing would apply; \`outputs\` is empty for an iPad-only app, because ShotOps renders iPhone panels only. This says nothing about who owns the app.`
+  });
+}
+
 // src/tools/toolsBundle.ts
 init_fastlaneBundle();
 init_appstore();
@@ -27442,6 +28867,10 @@ init_renderCredits();
 init_browserInstall();
 init_appstore();
 init_productionOperationStart();
+function panelReadFailure(err) {
+  if (err instanceof HostedOnlyPanelError) return errorResult(`failed to read panel: ${err.message}`, "unsupported_input");
+  return errorResult(`failed to read panel: ${err.message}`);
+}
 function dedupeLocales(list) {
   if (!Array.isArray(list)) return [];
   const seen = /* @__PURE__ */ new Set();
@@ -27456,10 +28885,7 @@ function dedupeLocales(list) {
   return out;
 }
 function projectBaseLocale2(projectFile) {
-  const file = projectFile;
-  if (typeof file?.baseLocale === "string" && file.baseLocale) return file.baseLocale;
-  const first = Array.isArray(file?.locales) ? file.locales[0] : void 0;
-  return typeof first === "string" && first ? first : void 0;
+  return projectLocaleAxis(projectFile).baseLocale;
 }
 var PROJECT_SOURCE_CREATE_PROJECT_ERROR = "createProject is not supported when the screenshots come from a saved `project` \u2014 that project already exists. Drop createProject to bundle it, or pass `screenshots` to render (and save) a new one.";
 function joinNotes(...parts) {
@@ -27485,7 +28911,7 @@ async function directDurableBundlePanels(input) {
       input.slots,
       locale2
     );
-    const screenshots2 = await resolveScreenshots(entries, input.deps.userId, false);
+    const screenshots2 = await resolveScreenshots(entries, input.deps.userId, false, input.deps.readUploadedRefs);
     const preset = output2?.panelPresetId ?? input.panelPresetId ?? "r69";
     const dimensions = panelDimensionsFor(preset);
     const slotSizes = screenshots2.map((slot2) => slot2.length);
@@ -27824,7 +29250,7 @@ async function emitBundle(deps, args, scope, attempt, signal) {
         }
         let screenshots2;
         try {
-          screenshots2 = await resolveScreenshots(entries, deps.userId, deps.allowLocalScreenshots ?? false);
+          screenshots2 = await resolveScreenshots(entries, deps.userId, deps.allowLocalScreenshots ?? false, deps.readUploadedRefs);
         } catch (err) {
           return { ok: false, error: err.message };
         }
@@ -28039,9 +29465,9 @@ async function emitBundle(deps, args, scope, attempt, signal) {
     readinessReport = resolvedInput.report;
     let bytesList;
     try {
-      bytesList = await Promise.all(panelEntries.map((p) => resolvePanelBytes(p, deps.userId, deps.allowLocalScreenshots ?? false)));
+      bytesList = await Promise.all(panelEntries.map((p) => resolvePanelBytes(p, deps.userId, deps.allowLocalScreenshots ?? false, deps.readUploadedRefs)));
     } catch (err) {
-      return errorResult(`failed to read panel: ${err.message}`);
+      return panelReadFailure(err);
     }
     slots = bytesList.map((bytes, i) => ({ displayPosition: i + 1, bytes: Buffer.from(bytes) }));
     previewPng = bytesList[0] ? Buffer.from(bytesList[0]) : null;
@@ -28181,7 +29607,7 @@ async function emitBundle(deps, args, scope, attempt, signal) {
     if (refused) return errorResult(refused.error);
     let screenshots2;
     try {
-      screenshots2 = await resolveScreenshots(entries, deps.userId, deps.allowLocalScreenshots ?? false);
+      screenshots2 = await resolveScreenshots(entries, deps.userId, deps.allowLocalScreenshots ?? false, deps.readUploadedRefs);
     } catch (err) {
       return errorResult(err.message);
     }
@@ -28521,7 +29947,7 @@ async function emitMultiLocaleBundle(deps, args, locales, projectName2, scope, p
       const key = "path" in p ? `path:${p.path}` : `ref:${p.ref}`;
       let pending = bytesCache.get(key);
       if (!pending) {
-        pending = resolvePanelBytes(p, deps.userId, deps.allowLocalScreenshots ?? false);
+        pending = resolvePanelBytes(p, deps.userId, deps.allowLocalScreenshots ?? false, deps.readUploadedRefs);
         bytesCache.set(key, pending);
       }
       return pending;
@@ -28537,7 +29963,7 @@ async function emitMultiLocaleBundle(deps, args, locales, projectName2, scope, p
         });
       }
     } catch (err) {
-      return errorResult(`failed to read panel: ${err.message}`);
+      return panelReadFailure(err);
     }
     const firstPanel = localeSlots[0]?.slots[0];
     previewPng = firstPanel ? Buffer.from(firstPanel.bytes) : null;
@@ -28559,7 +29985,7 @@ async function emitMultiLocaleBundle(deps, args, locales, projectName2, scope, p
       }
       let screenshots2;
       try {
-        screenshots2 = await resolveScreenshots(entries, deps.userId, deps.allowLocalScreenshots ?? false);
+        screenshots2 = await resolveScreenshots(entries, deps.userId, deps.allowLocalScreenshots ?? false, deps.readUploadedRefs);
       } catch (err) {
         return errorResult(err.message);
       }
@@ -28807,7 +30233,7 @@ function readPose(look2) {
   const angle = look2.angle === "left" || look2.angle === "right" || look2.angle === "front" ? look2.angle : DEFAULT_LOOK.angle;
   const cameraPos = isRecord2(look2.cameraPos) && typeof look2.cameraPos.x === "number" && Number.isFinite(look2.cameraPos.x) && typeof look2.cameraPos.y === "number" && Number.isFinite(look2.cameraPos.y) && typeof look2.cameraPos.z === "number" && Number.isFinite(look2.cameraPos.z) ? { x: look2.cameraPos.x, y: look2.cameraPos.y, z: look2.cameraPos.z } : null;
   return {
-    phoneHeight: normalizePose(look2.phoneHeight, "phoneHeight"),
+    deviceSize: normalizePose(look2.deviceSize, "deviceSize"),
     hOffset: normalizePose(look2.hOffset, "hOffset"),
     vOffset: normalizePose(look2.vOffset, "vOffset"),
     angle,
@@ -29118,12 +30544,28 @@ init_toolContract();
 init_capabilities();
 init_authorization();
 init_productionInput2();
+var SAVE_APP_LISTING_SIGN_IN = "Linking a project to its App Store listing needs a ShotOps account. Sign in at https://shotops.dev, or configure SHOTOPS_TOKEN on this server, and try again \u2014 or drop `appListing` and pass `projectName` to name the project yourself. Nothing was saved.";
 async function handleSaveProject(deps, args) {
   const looked = await resolveLook(deps, args);
   if (isLookFailure(looked)) return productionInputErrorResult(looked.failure);
   const { look: look2, style: style2, note: resolveNote } = looked;
   const baseNote = [resolveNote, composeConflictNote(look2, style2)].filter(Boolean).join(" ") || void 0;
-  const locale2 = args.locale?.trim() || "en-US";
+  const creating = !args.project;
+  let listing2 = null;
+  if (args.appListing) {
+    if (!deps.resolveAppListing) return errorResult(SAVE_APP_LISTING_SIGN_IN, "authentication_required");
+    const answer = await deps.resolveAppListing(deps.userId, args.appListing);
+    const kind = typeof answer.error === "string" ? answer.error : null;
+    if (kind) return errorResult(answer.message, appListingFailureCode(kind));
+    listing2 = answer.listing;
+    if (!listing2) {
+      return errorResult(
+        `No App Store app matches "${args.appListing}". Search for it with search_app_listing and pass a result\u2019s \`appId\`, or drop \`appListing\` and name the project yourself. Nothing was saved.`,
+        "invalid_input"
+      );
+    }
+  }
+  const locale2 = args.locale?.trim() || (creating && listing2 ? listing2.applied.baseLocale : "en-US");
   if (!Array.isArray(args.screenshots) || args.screenshots.length === 0) {
     return errorResult(
       "save_project needs a non-empty `screenshots` array (its slot shape + names define the project structure).",
@@ -29142,7 +30584,8 @@ async function handleSaveProject(deps, args) {
     return errorResult(err.message);
   }
   const screenshotNames = resolveScreenshotNames(entries).flat();
-  const { devices: outputDevices } = resolveOutputDevices(args.outputs);
+  const listedOutputs = creating && listing2 && !args.panelPresetId && listing2.applied.outputs.length > 0 ? listing2.applied.outputs : void 0;
+  const { devices: outputDevices } = resolveOutputDevices(args.outputs ?? listedOutputs);
   let panelPresetId2 = args.panelPresetId;
   if (outputDevices.length > 0) {
     if (panelPresetId2 && !outputDevices.some((d) => d.panelPresetId === panelPresetId2)) {
@@ -29164,7 +30607,11 @@ async function handleSaveProject(deps, args) {
       screenshotNames,
       // Undefined when the caller passed no `outputs` — the record then migrates its single
       // output from panelPresetId exactly as it did before this field existed.
-      outputs: outputDevices.length > 0 ? outputDevices.map((d) => d.id) : void 0
+      outputs: outputDevices.length > 0 ? outputDevices.map((d) => d.id) : void 0,
+      // #1004 — the listing's language set, on a CREATE only. On an update these stay undefined and
+      // `serializeProject` derives the list exactly as it always has, so re-linking an app leaves
+      // `locales`, `baseLocale` and every per-locale caption on the record untouched.
+      ...creating && listing2 ? { locales: listing2.applied.locales, baseLocale: locale2 } : {}
     });
   } catch (err) {
     return errorResult(`could not build the project record: ${err.message}`, "persistence_failed");
@@ -29172,8 +30619,14 @@ async function handleSaveProject(deps, args) {
   if (record8 == null) {
     return errorResult("no project record was produced \u2014 not saved.", "persistence_failed");
   }
-  const p = await persistProject(deps, args, record8, "unsigned-new");
-  if ("error" in p) return errorResult(p.error);
+  const p = await persistProject(
+    deps,
+    { ...args, projectName: args.projectName?.trim() || listing2?.applied.projectName },
+    record8,
+    "unsigned-new",
+    listing2
+  );
+  if ("error" in p) return errorResult(p.error, p.code, p.details);
   const note = ["screenNote" in p && p.screenNote ? p.screenNote : void 0, baseNote].filter(Boolean).join(" ") || void 0;
   if ("status" in p) {
     return textResult({
@@ -29186,6 +30639,7 @@ async function handleSaveProject(deps, args) {
       panelPresetId: panelPresetId2 ?? "r69",
       locale: locale2,
       ...outputDevices.length > 0 ? { outputs: outputDevices.map((d) => d.id) } : {},
+      ...listing2 ? { linkedApp: appListingView(listing2) } : {},
       ...note ? { note } : {},
       // The one local path that moves bytes off this machine. Stated with the result, from the
       // retention policy's own number, rather than left for the user to discover when the claim
@@ -29209,6 +30663,9 @@ async function handleSaveProject(deps, args) {
     // #40: echoed ONLY when the caller asked for a device set — a legacy save's response body is
     // byte-identical to before.
     ...outputDevices.length > 0 ? { outputs: outputDevices.map((d) => d.id) } : {},
+    // #1004 — the app this save linked, echoed so the caller sees the identity the project now
+    // carries. Absent on every save that named no `appListing`.
+    ...listing2 ? { linkedApp: appListingView(listing2) } : {},
     ...note ? { note } : {},
     // #662 — this is the ONE tool in the contract whose job is a project write, and the envelope
     // says so: `projectMutation: true` here, false on every render. That pair is what makes
@@ -29230,17 +30687,12 @@ function reachFromRecord(record8) {
 function storedScreenshotReport(deps, record8, projectFile) {
   const frames = frameNamesFromProjectFile(projectFile);
   const file = projectFile;
-  const baseLocale = typeof file.baseLocale === "string" && file.baseLocale ? file.baseLocale : Array.isArray(file.locales) && typeof file.locales[0] === "string" ? file.locales[0] : "en-US";
-  const locales = Array.from(
-    /* @__PURE__ */ new Set([
-      baseLocale,
-      ...Array.isArray(file.locales) ? file.locales.filter((locale2) => typeof locale2 === "string") : []
-    ])
-  );
+  const { locales, baseLocale } = projectLocaleAxis(projectFile);
   const outputIds = Array.isArray(file.outputs) ? file.outputs.filter((id) => typeof id === "string") : [];
-  const presetFamily = typeof file.panelPresetId === "string" ? DEVICES.find((device) => device.panelPresetId === file.panelPresetId)?.screenFamily : void 0;
   const families = Array.from(
-    new Set(outputIds.length > 0 ? outputIds.map(screenFamilyForDevice) : [presetFamily ?? BASE_SCREEN_FAMILY])
+    new Set(
+      outputIds.length > 0 ? outputIds.map(screenFamilyForDevice) : [screenFamilyForPreset(projectOutputAxis(projectFile).panelPresetId)]
+    )
   );
   const parsed = parseScreenManifest(record8?.handoffRefs, "lenient", baseLocale);
   const manifest = parsed ? allManifestEntries(parsed) : [];
@@ -29316,6 +30768,7 @@ async function handleReadProject(deps, args) {
   const projectFile = projectFileFromRecord(rec.record);
   const layout = deriveLayoutReport(projectFile);
   const screenshots2 = storedScreenshotReport(deps, rec.record, projectFile);
+  const linkedApp = linkedAppFromRecord(rec.record);
   const historyDecision = await deps.authorizeCapability({
     subject: { kind: "account", userId: deps.userId, mode: "api_token" },
     capability: CAPABILITIES.LOOK_HISTORY_READ,
@@ -29338,9 +30791,13 @@ async function handleReadProject(deps, args) {
     ...historyDenial ? {} : { heldVersion: project2.heldVersion, versions },
     history: historyDenial ?? { available: true, capability: CAPABILITIES.LOOK_HISTORY_READ },
     screenshots: screenshots2,
+    // #1004 — the App Store app this project is linked to, read off the stored envelope. Omitted
+    // entirely for a project that carries none, so a project created without one reads exactly as
+    // it did before.
+    ...linkedApp ? { linkedApp } : {},
     project_file: projectFile,
     ...layout ? { layout } : {},
-    message: `Full project for "${project2.name}". project_file is the designer's current strip (frame order in \`panels\`, per-locale words in \`captionText\`, the language list in \`locales\`, the caption base the untranslated locales inherit in \`baseLocale\`, styling). To detect changes, remember updatedAt and compare on your next read_project \u2014 a newer value means the designer edited it. \`layout\` names the composition template the strip is on, derived from its values \u2014 nothing stores it, so it is never stale. ${storedScreenshotSentence(screenshots2, project2.id)}`
+    message: `Full project for "${project2.name}". project_file is the designer's current strip (frame order in \`panels\`, per-locale words in \`captionText\`, the language list in \`locales\`, the caption base the untranslated locales inherit in \`baseLocale\`, styling). To detect changes, remember updatedAt and compare on your next read_project \u2014 a newer value means the designer edited it. \`layout\` names the composition template the strip is on, derived from its values \u2014 nothing stores it, so it is never stale. ` + (linkedApp ? `This project is linked to the App Store app "${linkedApp.name}" by ${linkedApp.seller} (${linkedApp.bundleId}) \u2014 \`linkedApp\` carries its identity, artwork and the languages and devices the listing mapped. Advisory: it says nothing about who owns the app. ` : "") + storedScreenshotSentence(screenshots2, project2.id)
   });
 }
 
@@ -29573,6 +31030,12 @@ var DESTRUCTIVE_WRITE = {
   idempotentHint: false,
   openWorldHint: false
 };
+var OPEN_WORLD_READ = {
+  readOnlyHint: true,
+  destructiveHint: false,
+  idempotentHint: true,
+  openWorldHint: true
+};
 var OPEN_WORLD_DESTRUCTIVE_WRITE = {
   readOnlyHint: false,
   destructiveHint: true,
@@ -29607,7 +31070,7 @@ function registerTools(server, deps) {
     "render_strip",
     {
       title: "Render App Store screenshots",
-      description: 'Make the store screenshots: raw app screen captures in, finished marketing panels out. Each screenshot is composited into a styled 3D device mockup, laid out as an App Store screenshot strip with the headlines you pass, and returned as per-panel PNGs at the App Store panel size `panelPresetId` names. This is the tool for a strip built from screenshots you have in hand; to reproduce one a designer already saved, use render_project. In ChatGPT, call import_screenshot first and pass the returned refs in the preferred flat form: { "screenshots": [{ "ref": "\u2026" }] } \u2014 each flat entry is one panel, and nested slots only when ONE panel should hold several phones. Art-direct it with `style`/`look` or a project\'s saved look, iterate with a low-res `preview` at a quarter the render cost, and take results `inline` or as `urls` for large payloads. Screenshots can vary per store locale via { "locales": \u2026 } entries \u2014 `locale` picks which variant renders (missing variants fall back to en-US). For real, full-resolution screenshots call request_screenshot_upload first \u2014 inline base64 is for small payloads only. CALL describe_look FIRST when nobody has said how the strip should look \u2014 it returns the five palette presets, the seven layout templates and every styling field with its default, and guessing a colour scheme out of 30 raw fields is how strips end up looking improvised. PICK `style.layout` ONCE, BEFORE ANYTHING ELSE \u2014 off the EDGE the user asked for if they named one, otherwise off the LONGEST HEADLINE in the set: "standard" reserves 2 lines (~36 characters) with the whole device under them, "bleed" reserves 4 (~72) with the device running off the bottom edge, "top-bleed" inverts that. The side bleeds carry the device into the NEIGHBOURING screenshot so the set reads as one swipe \u2014 "lean-right" / "lean-left" put the headline in a narrow column beside it (~26 characters), "swipe" pushes a third of the device across and keeps the full-width headline, "corner-bleed" goes off the bottom and the right at once. A side bleed is for the WHOLE set: apply one to every panel or none, and never mirror it on neighbouring panels \u2014 two devices leaning toward each other overlap. The text region is RESERVED, NOT FITTED \u2014 held at full size whether or not the headline fills it, because a fixed reservation is the only thing that makes every device in a swiped SET land on the same line. Do not close a gap by shrinking vOffset on the short panels, and never assemble a composition out of raw phoneHeight/vOffset numbers: pick a layout, then override one field if you must (the template expands first, your field wins). Past the reservation the caption band grows down INTO the phone \u2014 the failure to avoid. THE RESPONSE ANSWERS BACK: an optional `layout` block names every caption sitting on a device, every caption collision and every device pair overlapping without reading as composed, by frame number and depth. When the repair is deterministic it also carries `layout.correctedLook` \u2014 pass that straight back as `look` to re-render clean. No `layout` key means the composition measured clean. Read it before you show the panels. This tool ONLY renders images: it never creates or updates a project, and the result says so \u2014 `contract.effects.projectMutation` is false on every render. A render with no `project` also carries a `nextStep` with action `offer_save_project`, which states that no project exists and names save_project as the door. That is an OFFER to put to the user, never consent already given: save only after they show they want this work preserved, shared, reused or kept editable, and if you cannot ask them, return the panels with the offer standing. No store credential is involved.',
+      description: 'Make the store screenshots: raw app screen captures in, finished marketing panels out. Each screenshot is composited into a styled 3D device mockup, laid out as an App Store screenshot strip with the headlines you pass, and returned as per-panel PNGs at the App Store panel size `panelPresetId` names. This is the tool for a strip built from screenshots you have in hand; to reproduce one a designer already saved, use render_project. In ChatGPT, call import_screenshot first and pass the returned refs in the preferred flat form: { "screenshots": [{ "ref": "\u2026" }] } \u2014 each flat entry is one panel, and nested slots only when ONE panel should hold several phones. Art-direct it with `style`/`look` or a project\'s saved look, iterate with a low-res `preview` at a quarter the render cost, and take results `inline` or as `urls` for large payloads. Screenshots can vary per store locale via { "locales": \u2026 } entries \u2014 `locale` picks which variant renders (missing variants fall back to en-US). For real, full-resolution screenshots call request_screenshot_upload first \u2014 inline base64 is for small payloads only. CALL describe_look FIRST when nobody has said how the strip should look \u2014 it returns the five palette presets, the seven layout templates and every styling field with its default, and guessing a colour scheme out of 30 raw fields is how strips end up looking improvised. PICK `style.layout` ONCE, BEFORE ANYTHING ELSE \u2014 off the EDGE the user asked for if they named one, otherwise off the LONGEST HEADLINE in the set: "standard" reserves 2 lines (~36 characters) with the whole device under them, "bleed" reserves 4 (~72) with the device running off the bottom edge, "top-bleed" inverts that. The side bleeds carry the device into the NEIGHBOURING screenshot so the set reads as one swipe \u2014 "lean-right" / "lean-left" put the headline in a narrow column beside it (~26 characters), "swipe" pushes a third of the device across and keeps the full-width headline, "corner-bleed" goes off the bottom and the right at once. A side bleed is for the WHOLE set: apply one to every panel or none, and never mirror it on neighbouring panels \u2014 two devices leaning toward each other overlap. The text region is RESERVED, NOT FITTED \u2014 held at full size whether or not the headline fills it, because a fixed reservation is the only thing that makes every device in a swiped SET land on the same line. Do not close a gap by shrinking vOffset on the short panels, and never assemble a composition out of raw deviceSize/vOffset numbers: pick a layout, then override one field if you must (the template expands first, your field wins). Past the reservation the caption band grows down INTO the phone \u2014 the failure to avoid. THE RESPONSE ANSWERS BACK: an optional `layout` block names every caption sitting on a device, every caption collision and every device pair overlapping without reading as composed, by frame number and depth. When the repair is deterministic it also carries `layout.correctedLook` \u2014 pass that straight back as `look` to re-render clean. No `layout` key means the composition measured clean. Read it before you show the panels. This tool ONLY renders images: it never creates or updates a project, and the result says so \u2014 `contract.effects.projectMutation` is false on every render. A render with no `project` also carries a `nextStep` with action `offer_save_project`, which states that no project exists and names save_project as the door. That is an OFFER to put to the user, never consent already given: save only after they show they want this work preserved, shared, reused or kept editable, and if you cannot ask them, return the panels with the offer standing. No store credential is involved.',
       inputSchema: renderStripAdvertisedShape,
       outputSchema: renderStripToolOutputSchema,
       // ADDITIVE, not destructive: this can mint private generated assets but cannot change a
@@ -29681,6 +31144,18 @@ function registerTools(server, deps) {
     },
     seam("read_project", readProjectShape, (args) => handleReadProject(deps, args))
   );
+  server.registerTool(
+    "search_app_listing",
+    {
+      title: "Find an app on the App Store",
+      description: "Find the user\u2019s app on the App Store so the project you save carries its real identity instead of a name you typed: search by app or developer name and every result comes back with the app\u2019s exact name, its seller, its icon, its bundle ID and its numeric app ID, plus the App Store Connect languages and the iPhone device set ShotOps would apply. Let the USER confirm which one is theirs \u2014 the icon and the seller name are what prove it \u2014 then pass that result\u2019s `appId` (or `storeUrl`) as `appListing` on save_project. Pass `country` to search another storefront; an app released in one country is invisible to a search of any other. Free and unmetered: it renders nothing, saves nothing and changes no project. Finding a public listing proves nothing about who owns the app, and no Apple or store credential is involved. Needs an account.",
+      inputSchema: searchAppListingShape,
+      outputSchema: searchAppListingToolOutputSchema,
+      annotations: OPEN_WORLD_READ,
+      _meta: toolMeta(deps, "search_app_listing", "Searching the App Store\u2026", "App Store searched")
+    },
+    seam("search_app_listing", searchAppListingShape, (args) => handleSearchAppListing(deps, args))
+  );
   server.registerTool(
     "render_project",
     {